![]() |
|
Plagegeister aller Art und deren Bekämpfung: Optimizer Pro :-(Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
![]() | #1 |
| ![]() Optimizer Pro :-( Halo, habe mir heute bei dem Download eines anderen Programmes des Optimizer Pro geholt. Ich habe diese Farbar Recovery runtergalden und gescannt. Nun weiss ich nicht weiter und bin echt ein Laie:-( Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 12-03-2014 Ran by Thomas (administrator) on BÄR on 12-03-2014 20:34:47 Running from C:\Users\Thomas\Downloads Windows 8.1 (X64) OS Language: German Standard Internet Explorer Version 11 Boot Mode: Normal The only official download link for FRST: Download link for 32-Bit version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ Download link for 64-Bit Version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ Download link from any site other than Bleeping Computer is unpermitted or outdated. See tutorial for FRST: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (Qualcomm Atheros Commnucations) C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\adminservice.exe (Acer Incorporated) C:\Program Files (x86)\Acer\Acer Cloud\CCDMonitorService.exe (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe (Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe (Symantec Corporation) C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe (Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Nero AG) c:\Program Files (x86)\Nero\Update\NASvc.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe (Microsoft Corporation) C:\Windows\System32\skydrive.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMEvent.exe (Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMTray.exe (Atheros Communications) C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe () C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\ActivateDesktop.exe (ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe (ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDTouch.exe (ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe (Intel Corporation) C:\Windows\System32\igfxtray.exe (Intel Corporation) C:\WINDOWS\system32\igfxsrvc.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe () C:\Users\Thomas\AppData\Local\Amazon Cloud Player\Amazon Music Helper.exe (Hewlett-Packard Co.) C:\Program Files\HP\HP Deskjet 3520 series\Bin\ScanToPCActivationApp.exe (Dolby Laboratories Inc.) C:\Dolby PCEE4\pcee4.exe (McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.8.141\SSScheduler.exe (Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe (Hewlett-Packard Co.) C:\Program Files\HP\HP Deskjet 3520 series\Bin\HPNetworkCommunicatorCom.exe (Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerTray.exe (Intel Corporation) C:\WINDOWS\system32\igfxext.exe (Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerEvent.exe (Microsoft Corporation) C:\WINDOWS\system32\dashost.exe (CyberLink) C:\Program Files (x86)\CyberLink\MediaEspresso\DeviceDetector\DeviceDetector.exe (Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe (Microsoft Corporation.) C:\Program Files (x86)\Microsoft\BingBar\7.3.124.0\SeaPort.exe (Amazon) C:\Users\Thomas\AppData\Local\Amazon Cloud Player\Amazon Cloud Player.exe (Amazon) C:\Users\Thomas\AppData\Local\Amazon Cloud Player\Amazon Cloud Player.exe (Microsoft Corporation) C:\Windows\SysWOW64\cmd.exe (Microsoft Corporation) C:\WINDOWS\SysWOW64\PING.EXE () C:\Users\Thomas\AppData\Local\Temp\~nsu.tmp\Au_.exe (Microsoft Corporation) C:\WINDOWS\SysWOW64\DllHost.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Adobe Systems, Inc.) C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_77.exe (Adobe Systems, Inc.) C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_77.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [ETDCtrl] - C:\Program Files\Elantech\ETDCtrl.exe [2890640 2013-04-10] (ELAN Microelectronics Corp.) HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13449288 2013-03-26] (Realtek Semiconductor) HKLM\...\Run: [RtHDVBg_Dolby] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1278024 2013-03-08] (Realtek Semiconductor) HKLM\...\Run: [NvBackend] - C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2234144 2014-02-05] (NVIDIA Corporation) HKLM\...\Run: [ShadowPlay] - C:\WINDOWS\system32\nvspcap64.dll [1179576 2014-02-05] (NVIDIA Corporation) HKLM-x32\...\Run: [Norton Online Backup] - C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe [2994880 2012-08-15] (Symantec Corporation) HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-12-21] (Adobe Systems Incorporated) HKLM-x32\...\Run: [HP Software Update] - C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [49208 2011-10-28] (Hewlett-Packard) HKLM-x32\...\Run: [] - [X] Winlogon\Notify\igfxcui: C:\WINDOWS\system32\igfxdev.dll (Intel Corporation) HKLM\...\Policies\Explorer\Run: [BtvStack] - C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe [132224 2013-02-28] ( (Atheros Communications)) HKU\S-1-5-21-1042288249-1955762201-2030029956-1002\...\Run: [Amazon Cloud Player] - C:\Users\Thomas\AppData\Local\Amazon Cloud Player\Amazon Music Helper.exe [3140608 2014-01-14] () HKU\S-1-5-21-1042288249-1955762201-2030029956-1002\...\Run: [HP Deskjet 3520 series (NET)] - C:\Program Files\HP\HP Deskjet 3520 series\Bin\ScanToPCActivationApp.exe [2573416 2012-10-17] (Hewlett-Packard Co.) HKU\S-1-5-21-1042288249-1955762201-2030029956-1002\...\Run: [Optimizer Pro] - C:\Program Files (x86)\Optimizer Pro\OptProLauncher.exe [135160 2014-01-28] (PC Utilities Software Limited) HKU\S-1-5-21-1042288249-1955762201-2030029956-1002\...\MountPoints2: {90c5031e-9681-11e3-824f-0c84dc2e5f4a} - "D:\MatheTiger.EXE" AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [174296 2014-03-04] (NVIDIA Corporation) AppInit_DLLs: ,C:\WINDOWS\system32\nvinitx.dll => C:\WINDOWS\system32\nvinitx.dll [174296 2014-03-04] (NVIDIA Corporation) AppInit_DLLs: C:\PROGRA~2\OPTIMI~1\OPTPRO~2.DLL => C:\Program Files (x86)\Optimizer Pro\OptProCrash_x64.dll [2681648 2014-03-12] () AppInit_DLLs-x32: c:\windows\syswow64\nvinit.dll => c:\windows\syswow64\nvinit.dll [148016 2014-03-04] (NVIDIA Corporation) AppInit_DLLs-x32: c:\progra~2\optimi~1\optpro~1.dll => C:\Program Files (x86)\Optimizer Pro\OptProCrash.dll [2961368 2014-03-12] () Startup: C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Tintenwarnungen überwachen - HP Deskjet 3520 series (Netzwerk).lnk ShortcutTarget: Tintenwarnungen überwachen - HP Deskjet 3520 series (Netzwerk).lnk -> C:\Program Files\HP\HP Deskjet 3520 series\Bin\HPStatusBL.dll (Hewlett-Packard Co.) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=MSE1 HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.awesomehp.com/?type=hp&ts=1394651384&from=adks&uid=ST500LT012-9WS142_W0VB181XXXXXW0VB181X HKCU\Software\Microsoft\Internet Explorer\Main,First Home Page = hxxp://go.microsoft.com/fwlink/?LinkID=226786&Mkt=de-DE&Src=WD8&Tid=00031628&OHP=http%3A%2F%2Fwww.awesomehp.com%2F%3Ftype%3Dhp%26ts%3D1394651384%26from%3Dadks%26uid%3DST500LT012%2D9WS142%5FW0VB181XXXXXW0 VB181X&OSP=http%3A%2F%2Fwww.awesomehp.com%2Fweb%2F%3Ftype%3Dds%26ts%3D1394651384%26from%3Dadks%26uid%3DST500LT012%2D9WS142%5FW0VB181XXXXXW0VB181X%26q% 3D%7BsearchTerms%7D HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.awesomehp.com/web/?type=ds&ts=1394651384&from=adks&uid=ST500LT012-9WS142_W0VB181XXXXXW0VB181X&q={searchTerms} HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.awesomehp.com/?type=hp&ts=1394651384&from=adks&uid=ST500LT012-9WS142_W0VB181XXXXXW0VB181X HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=MSE1 HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.awesomehp.com/web/?type=ds&ts=1394651384&from=adks&uid=ST500LT012-9WS142_W0VB181XXXXXW0VB181X&q={searchTerms} HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.awesomehp.com/web/?type=ds&ts=1394651384&from=adks&uid=ST500LT012-9WS142_W0VB181XXXXXW0VB181X&q={searchTerms} HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.awesomehp.com/?type=hp&ts=1394651384&from=adks&uid=ST500LT012-9WS142_W0VB181XXXXXW0VB181X HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=MSE1 HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.awesomehp.com/web/?type=ds&ts=1394651384&from=adks&uid=ST500LT012-9WS142_W0VB181XXXXXW0VB181X&q={searchTerms} StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe hxxp://www.awesomehp.com/?type=sc&ts=1394651384&from=adks&uid=ST500LT012-9WS142_W0VB181XXXXXW0VB181X SearchScopes: HKLM - DefaultScope {80c554b9-c7f8-4a21-9471-06d606da78a2} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1 SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.awesomehp.com/web/?type=ds&ts=1394651384&from=adks&uid=ST500LT012-9WS142_W0VB181XXXXXW0VB181X&q={searchTerms} SearchScopes: HKLM - {80c554b9-c7f8-4a21-9471-06d606da78a2} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1 SearchScopes: HKLM - {AA9A4890-4262-4441-8977-E2FFCBFB706C} URL = hxxp://de.yhs4.search.yahoo.com/yhs/search?hspart=acer&hsimp=yhs-acer_001&p={searchTerms} SearchScopes: HKLM - {CA940C80-7890-43CE-8948-9AC8F7571D50} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MAARJS SearchScopes: HKLM-x32 - DefaultScope {80c554b9-c7f8-4a21-9471-06d606da78a2} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1 SearchScopes: HKLM-x32 - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.awesomehp.com/web/?type=ds&ts=1394651384&from=adks&uid=ST500LT012-9WS142_W0VB181XXXXXW0VB181X&q={searchTerms} SearchScopes: HKLM-x32 - {80c554b9-c7f8-4a21-9471-06d606da78a2} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1 SearchScopes: HKLM-x32 - {AA9A4890-4262-4441-8977-E2FFCBFB706C} URL = hxxp://de.yhs4.search.yahoo.com/yhs/search?hspart=acer&hsimp=yhs-acer_001&p={searchTerms} SearchScopes: HKLM-x32 - {CA940C80-7890-43CE-8948-9AC8F7571D50} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MAARJS SearchScopes: HKCU - DefaultScope {80c554b9-c7f8-4a21-9471-06d606da78a2} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1 SearchScopes: HKCU - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.awesomehp.com/web/?type=ds&ts=1394651384&from=adks&uid=ST500LT012-9WS142_W0VB181XXXXXW0VB181X&q={searchTerms} SearchScopes: HKCU - {80c554b9-c7f8-4a21-9471-06d606da78a2} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1 SearchScopes: HKCU - {AA9A4890-4262-4441-8977-E2FFCBFB706C} URL = hxxp://de.yhs4.search.yahoo.com/yhs/search?hspart=acer&hsimp=yhs-acer_001&p={searchTerms} SearchScopes: HKCU - {CA940C80-7890-43CE-8948-9AC8F7571D50} URL = BHO: Bing Bar Helper - {1dad3af3-ef2f-4f64-ac4b-11789189fcb6} - C:\Program Files (x86)\Microsoft\BingBar\7.3.124.0\amd64\BingExt.dll (Microsoft Corporation.) BHO: CIESpeechBHO Class - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\IEPlugIn.dll (Qualcomm Atheros Commnucations) BHO-x32: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.8.141\McAfeeMSS_IE.dll (McAfee, Inc.) BHO-x32: Bing Bar Helper - {1dad3af3-ef2f-4f64-ac4b-11789189fcb6} - C:\Program Files (x86)\Microsoft\BingBar\7.3.124.0\BingExt.dll (Microsoft Corporation.) Toolbar: HKLM - Bing Bar - {eec0f710-38b5-4aba-99bf-ec87564a4e13} - C:\Program Files (x86)\Microsoft\BingBar\7.3.124.0\amd64\BingExt.dll (Microsoft Corporation.) Toolbar: HKLM-x32 - Bing Bar - {eec0f710-38b5-4aba-99bf-ec87564a4e13} - C:\Program Files (x86)\Microsoft\BingBar\7.3.124.0\BingExt.dll (Microsoft Corporation.) Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 FireFox: ======== FF ProfilePath: C:\Users\Thomas\AppData\Roaming\Mozilla\Firefox\Profiles\cy3ez6pm.default FF user.js: detected! => C:\Users\Thomas\AppData\Roaming\Mozilla\Firefox\Profiles\cy3ez6pm.default\user.js FF NewTab: chrome://quick_start/content/index.html FF DefaultSearchEngine: awesomehp FF Plugin: @adobe.com/FlashPlayer - C:\WINDOWS\system32\Macromed\Flash\NPSWF64_12_0_0_77.dll () FF Plugin: @mcafee.com/MSC,version=10 - C:\Program Files\mcafee\msc\npMcSnFFPl64.dll No File FF Plugin-x32: @adobe.com/FlashPlayer - C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_77.dll () FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf - C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation) FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf - C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation) FF Plugin-x32: @mcafee.com/McAfeeMssPlugin - C:\Program Files\McAfee Security Scan\3.8.141\npMcAfeeMss.dll (McAfee, Inc.) FF Plugin-x32: @mcafee.com/MSC,version=10 - C:\Program Files (x86)\McAfee\msc\npMcSnFFPl.dll No File FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 - C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll () FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\awesomehp.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: Quick Start - C:\Users\Thomas\AppData\Roaming\Mozilla\Firefox\Profiles\cy3ez6pm.default\Extensions\quick_start@gmail.com [2014-03-12] FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor FF HKLM-x32\...\Firefox\Extensions: [quick_start@gmail.com] - C:\Users\Thomas\AppData\Roaming\Mozilla\Firefox\Profiles\cy3ez6pm.default\extensions\quick_start@gmail.com FF Extension: Quick Start - C:\Users\Thomas\AppData\Roaming\Mozilla\Firefox\Profiles\cy3ez6pm.default\extensions\quick_start@gmail.com [2014-03-12] FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK ==================== Services (Whitelisted) ================= R2 70e6ca8c; C:\Program Files (x86)\Optimizer Pro\OptProCrashSvc.dll [186496 2014-03-12] () R2 AtherosSvc; C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\adminservice.exe [227968 2013-02-28] (Qualcomm Atheros Commnucations) R2 CCDMonitorService; C:\Program Files (x86)\Acer\Acer Cloud\CCDMonitorService.exe [2615368 2013-02-27] (Acer Incorporated) R3 ePowerSvc; C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe [660040 2013-01-18] (Acer Incorporated) R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [128896 2013-02-18] (Intel Corporation) R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [165760 2013-02-18] (Intel Corporation) R2 LMSvc; C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe [431656 2013-03-15] (Acer Incorporate) S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.141\McCHSvc.exe [289256 2014-01-16] (McAfee, Inc.) R2 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [3943104 2012-08-15] (Symantec Corporation) R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1593632 2014-02-05] (NVIDIA Corporation) R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [16941856 2014-02-05] (NVIDIA Corporation) R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [348392 2013-10-31] (Microsoft Corporation) R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2013-10-31] (Microsoft Corporation) ==================== Drivers (Whitelisted) ==================== S0 ADP80XX; C:\Windows\System32\drivers\ADP80XX.SYS [782176 2013-08-22] (PMC-Sierra) S3 bcmfn2; C:\Windows\System32\drivers\bcmfn2.sys [17624 2013-08-13] (Windows (R) Win 7 DDK provider) S3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2013-02-28] (Qualcomm Atheros) R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [224768 2013-08-22] (Microsoft Corporation) R1 ccSet_NARA; C:\Windows\system32\drivers\NARAx64\0401000.00E\ccSetx64.sys [168608 2012-05-26] (Symantec Corporation) S3 HipShieldK; C:\Windows\System32\drivers\HipShieldK.sys [197264 2012-05-28] (McAfee, Inc.) S3 iaLPSSi_GPIO; C:\Windows\System32\drivers\iaLPSSi_GPIO.sys [24568 2013-07-30] (Intel Corporation) S3 iaLPSSi_I2C; C:\Windows\System32\drivers\iaLPSSi_I2C.sys [99320 2013-07-25] (Intel Corporation) S0 iaStorAV; C:\Windows\System32\drivers\iaStorAV.sys [651248 2013-08-10] (Intel Corporation) R0 intelpep; C:\Windows\System32\drivers\intelpep.sys [39768 2014-02-15] (Microsoft Corporation) R3 LMDriver; C:\Windows\System32\drivers\LMDriver.sys [21360 2013-01-10] (Acer Incorporated) S0 LSI_SAS3; C:\Windows\System32\drivers\lsi_sas3.sys [81760 2013-08-22] (LSI Corporation) S3 mfencbdc; C:\Windows\system32\DRIVERS\mfencbdc.sys [328976 2012-11-02] (McAfee, Inc.) S3 mfencrk; C:\Windows\system32\DRIVERS\mfencrk.sys [97208 2012-11-02] (McAfee, Inc.) R3 NdisVirtualBus; C:\Windows\System32\drivers\NdisVirtualBus.sys [16384 2013-08-22] (Microsoft Corporation) S3 netvsc; C:\Windows\system32\DRIVERS\netvsc63.sys [87040 2013-08-22] (Microsoft Corporation) R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [39200 2013-12-27] (NVIDIA Corporation) S3 QRDCIO; C:\Windows\System32\drivers\QRDCIO.sys [9728 2009-10-20] (QUANTA) R3 RadioShim; C:\Windows\System32\drivers\RadioShim.sys [15704 2013-01-10] (Acer Incorporated) S3 ReFS; C:\Windows\System32\Drivers\ReFS.sys [924512 2013-08-22] (Microsoft Corporation) R3 RTSPER; C:\Windows\system32\DRIVERS\RtsPer.sys [455240 2013-03-05] (RTS Corporation) S3 SerCx2; C:\Windows\System32\drivers\SerCx2.sys [146776 2014-02-15] (Microsoft Corporation) S0 stornvme; C:\Windows\System32\drivers\stornvme.sys [57176 2013-11-14] (Microsoft Corporation) S3 UEFI; C:\Windows\System32\drivers\UEFI.sys [26976 2013-08-22] (Microsoft Corporation) R3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [124760 2013-10-31] (Microsoft Corporation) ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-03-12 20:34 - 2014-03-12 20:35 - 00020790 _____ () C:\Users\Thomas\Downloads\FRST.txt 2014-03-12 20:34 - 2014-03-12 20:34 - 02157056 _____ (Farbar) C:\Users\Thomas\Downloads\FRST64.exe 2014-03-12 20:34 - 2014-03-12 20:34 - 00000000 ____D () C:\FRST 2014-03-12 20:25 - 2014-03-12 20:25 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\Thomas\Downloads\SpyHunter-Installer.exe 2014-03-12 20:16 - 2014-03-12 20:16 - 00000000 ____D () C:\Users\Thomas\Documents\Optimizer Pro 2014-03-12 20:16 - 2014-03-12 20:16 - 00000000 ____D () C:\Users\Thomas\AppData\Roaming\Optimizer Pro 2014-03-12 20:12 - 2014-03-12 20:12 - 00004380 _____ () C:\WINDOWS\System32\Tasks\BrowserSafeguard Update Task 2014-03-12 20:12 - 2014-03-12 20:12 - 00003914 _____ () C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{55E675FA-B8CE-41E2-BEC0-DCE18DD74943} 2014-03-12 20:12 - 2014-03-12 20:12 - 00000000 ____D () C:\Program Files (x86)\Browsersafeguard 2014-03-12 20:11 - 2014-03-12 20:11 - 00001087 _____ () C:\Users\Thomas\Desktop\Optimizer Pro.lnk 2014-03-12 20:11 - 2014-03-12 20:11 - 00000000 ____D () C:\Program Files (x86)\Optimizer Pro 2014-03-12 20:10 - 2014-03-12 20:17 - 00000000 ____D () C:\ProgramData\WPM 2014-03-12 20:10 - 2014-03-12 20:17 - 00000000 ____D () C:\Program Files (x86)\SupTab 2014-03-12 20:10 - 2014-03-12 20:16 - 00000000 ____D () C:\ProgramData\IePluginService 2014-03-12 20:10 - 2014-03-12 20:10 - 00000000 ____D () C:\Users\Thomas\AppData\Roaming\SupTab 2014-03-12 20:09 - 2014-03-12 20:14 - 00000000 ____D () C:\Users\Thomas\AppData\Roaming\awesomehp 2014-03-12 20:08 - 2014-03-12 20:08 - 00220448 _____ (Fusion Install ) C:\Users\Thomas\Downloads\Setup.exe 2014-03-12 18:44 - 2014-03-12 18:44 - 00001376 _____ () C:\Users\Public\Desktop\GeForce Experience.lnk 2014-03-12 18:44 - 2014-03-12 18:44 - 00000000 ____D () C:\Users\Thomas\AppData\Local\NVIDIA Corporation 2014-03-12 18:43 - 2014-03-12 18:43 - 00000000 ____D () C:\Users\Thomas\AppData\Local\NVIDIA 2014-03-12 18:43 - 2014-02-05 10:31 - 01048152 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvspcap.dll 2014-03-12 18:43 - 2014-02-05 10:30 - 01179576 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvspcap64.dll 2014-03-12 18:43 - 2010-05-26 11:41 - 02401112 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_43.dll 2014-03-12 18:43 - 2010-05-26 11:41 - 00511328 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_43.dll 2014-03-12 18:43 - 2010-05-26 11:41 - 00276832 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx11_43.dll 2014-03-12 18:42 - 2014-03-12 18:44 - 00000000 ____D () C:\WINDOWS\SysWOW64\NV 2014-03-12 18:42 - 2014-03-12 18:44 - 00000000 ____D () C:\WINDOWS\system32\NV 2014-03-12 18:42 - 2014-03-12 18:42 - 00000000 ____D () C:\Program Files (x86)\AGEIA Technologies 2014-03-12 18:41 - 2014-03-12 18:44 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation 2014-03-12 18:41 - 2014-03-04 14:06 - 06714312 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll 2014-03-12 18:41 - 2014-03-04 14:06 - 03497816 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc64.dll 2014-03-12 18:41 - 2014-03-04 14:05 - 03649185 _____ () C:\WINDOWS\system32\nvcoproc.bin 2014-03-12 18:41 - 2014-03-04 14:05 - 02558808 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvcr.dll 2014-03-12 18:41 - 2014-03-04 14:05 - 01075032 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshext.dll 2014-03-12 18:41 - 2014-03-04 14:05 - 00922968 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe 2014-03-12 18:41 - 2014-03-04 14:05 - 00386336 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmctray.dll 2014-03-12 18:41 - 2014-03-04 14:05 - 00067072 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshextr.dll 2014-03-12 18:41 - 2014-03-04 14:05 - 00064968 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvshext.dll 2014-03-12 18:38 - 2014-03-04 15:35 - 31474976 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglv64.dll 2014-03-12 18:38 - 2014-03-04 15:35 - 25255256 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcompiler.dll 2014-03-12 18:38 - 2014-03-04 15:35 - 23716640 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglv32.dll 2014-03-12 18:38 - 2014-03-04 15:35 - 18302384 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvwgf2umx.dll 2014-03-12 18:38 - 2014-03-04 15:35 - 17755424 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvd3dumx.dll 2014-03-12 18:38 - 2014-03-04 15:35 - 17561544 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcompiler.dll 2014-03-12 18:38 - 2014-03-04 15:35 - 15783992 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvwgf2um.dll 2014-03-12 18:38 - 2014-03-04 15:35 - 14709720 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvd3dum.dll 2014-03-12 18:38 - 2014-03-04 15:35 - 12708128 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvlddmkm.sys 2014-03-12 18:38 - 2014-03-04 15:35 - 11636176 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll 2014-03-12 18:38 - 2014-03-04 15:35 - 11589272 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvopencl.dll 2014-03-12 18:38 - 2014-03-04 15:35 - 09728064 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll 2014-03-12 18:38 - 2014-03-04 15:35 - 09690424 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvopencl.dll 2014-03-12 18:38 - 2014-03-04 15:35 - 03143456 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll 2014-03-12 18:38 - 2014-03-04 15:35 - 03093280 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll 2014-03-12 18:38 - 2014-03-04 15:35 - 02958792 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll 2014-03-12 18:38 - 2014-03-04 15:35 - 02783008 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvenc.dll 2014-03-12 18:38 - 2014-03-04 15:35 - 02715264 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll 2014-03-12 18:38 - 2014-03-04 15:35 - 02411976 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvenc.dll 2014-03-12 18:38 - 2014-03-04 15:35 - 01885472 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6433523.dll 2014-03-12 18:38 - 2014-03-04 15:35 - 01516488 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6433523.dll 2014-03-12 18:38 - 2014-03-04 15:35 - 00947808 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvumdshimx.dll 2014-03-12 18:38 - 2014-03-04 15:35 - 00892704 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll 2014-03-12 18:38 - 2014-03-04 15:35 - 00877856 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll 2014-03-12 18:38 - 2014-03-04 15:35 - 00863064 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll 2014-03-12 18:38 - 2014-03-04 15:35 - 00846168 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll 2014-03-12 18:38 - 2014-03-04 15:35 - 00832936 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvumdshim.dll 2014-03-12 18:38 - 2014-03-04 15:35 - 00484296 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll 2014-03-12 18:38 - 2014-03-04 15:35 - 00409544 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll 2014-03-12 18:38 - 2014-03-04 15:35 - 00377688 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFROpenGL.dll 2014-03-12 18:38 - 2014-03-04 15:35 - 00353504 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglshim64.dll 2014-03-12 18:38 - 2014-03-04 15:35 - 00333600 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFROpenGL.dll 2014-03-12 18:38 - 2014-03-04 15:35 - 00305600 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglshim32.dll 2014-03-12 18:38 - 2014-03-04 15:35 - 00174296 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvinitx.dll 2014-03-12 18:38 - 2014-03-04 15:35 - 00148016 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvinit.dll 2014-03-12 18:38 - 2014-03-04 15:35 - 00033736 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvpciflt.sys 2014-03-12 18:38 - 2014-03-04 15:35 - 00024544 _____ () C:\WINDOWS\system32\nvinfo.pb 2014-03-12 18:38 - 2013-12-27 19:42 - 00039200 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvvad64v.sys 2014-03-12 18:38 - 2013-12-27 19:42 - 00035104 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvaudcap64v.dll 2014-03-12 18:38 - 2013-12-27 19:42 - 00033056 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvaudcap32v.dll 2014-03-12 18:36 - 2014-03-12 18:36 - 00000000 ____D () C:\NVIDIA 2014-03-12 18:23 - 2014-03-12 18:26 - 276758080 _____ (NVIDIA Corporation) C:\Users\Thomas\Downloads\335.23-notebook-win8-win7-64bit-international-whql.exe 2014-03-12 13:31 - 2014-03-01 07:05 - 23133696 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll 2014-03-12 13:31 - 2014-03-01 05:58 - 02765824 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll 2014-03-12 13:31 - 2014-03-01 05:30 - 17074688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll 2014-03-12 13:31 - 2014-03-01 05:17 - 00218624 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe 2014-03-12 13:31 - 2014-03-01 04:54 - 05768704 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll 2014-03-12 13:31 - 2014-03-01 04:47 - 02168320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll 2014-03-12 13:31 - 2014-03-01 04:42 - 00627200 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll 2014-03-12 13:31 - 2014-03-01 04:18 - 13051904 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll 2014-03-12 13:31 - 2014-03-01 04:14 - 04244480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll 2014-03-12 13:31 - 2014-03-01 04:10 - 02334208 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll 2014-03-12 13:31 - 2014-03-01 04:03 - 00524288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll 2014-03-12 13:31 - 2014-03-01 03:57 - 11266048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll 2014-03-12 13:31 - 2014-03-01 03:38 - 01393664 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll 2014-03-12 13:31 - 2014-03-01 03:32 - 01820160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll 2014-03-12 13:31 - 2014-03-01 03:27 - 01156096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll 2014-03-12 13:31 - 2014-03-01 03:25 - 00817664 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll 2014-03-12 13:31 - 2014-03-01 03:25 - 00703488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll 2014-03-12 13:31 - 2014-01-31 17:15 - 00311640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\volsnap.sys 2014-03-12 13:31 - 2014-01-31 17:07 - 00233920 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll 2014-03-12 13:31 - 2014-01-31 17:06 - 02133208 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll 2014-03-12 13:31 - 2014-01-31 14:47 - 02143960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll 2014-03-12 13:31 - 2014-01-31 10:06 - 00716288 _____ (Microsoft Corporation) C:\WINDOWS\system32\swprv.dll 2014-03-12 13:31 - 2014-01-29 10:55 - 01287064 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel32.dll 2014-03-12 13:31 - 2014-01-29 09:53 - 00458616 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFault.exe 2014-03-12 13:31 - 2014-01-29 09:53 - 00407024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Faultrep.dll 2014-03-12 13:31 - 2014-01-29 09:49 - 01928144 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll 2014-03-12 13:31 - 2014-01-29 09:47 - 02543960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys 2014-03-12 13:31 - 2014-01-29 08:44 - 01371824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll 2014-03-12 13:31 - 2014-01-29 08:44 - 00408480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFault.exe 2014-03-12 13:31 - 2014-01-29 08:44 - 00369280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Faultrep.dll 2014-03-12 13:31 - 2014-01-29 07:41 - 00208896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpencom.dll 2014-03-12 13:31 - 2014-01-29 01:36 - 00249856 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpencom.dll 2014-03-12 13:31 - 2014-01-27 20:07 - 04175360 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbgeng.dll 2014-03-12 13:31 - 2014-01-27 20:06 - 00064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsgqec.dll 2014-03-12 13:31 - 2014-01-27 20:04 - 00160256 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWWIN.EXE 2014-03-12 13:31 - 2014-01-27 19:52 - 01036288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kernel32.dll 2014-03-12 13:31 - 2014-01-27 19:23 - 02873344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbgeng.dll 2014-03-12 13:31 - 2014-01-27 19:21 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tsgqec.dll 2014-03-12 13:31 - 2014-01-27 19:20 - 00138752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWWIN.EXE 2014-03-12 13:31 - 2014-01-27 19:15 - 01057280 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdvidcrl.dll 2014-03-12 13:31 - 2014-01-27 18:43 - 00855552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdvidcrl.dll 2014-03-12 13:31 - 2014-01-27 18:18 - 01486848 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbghelp.dll 2014-03-12 13:31 - 2014-01-27 18:00 - 01238016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbghelp.dll 2014-03-12 13:31 - 2014-01-27 16:58 - 05770752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll 2014-03-12 13:31 - 2014-01-27 16:50 - 06640640 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll 2014-03-12 13:31 - 2014-01-27 12:45 - 00386722 _____ () C:\WINDOWS\system32\ApnDatabase.xml 2014-03-12 13:31 - 2014-01-18 00:04 - 00764864 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll 2014-03-12 13:31 - 2014-01-17 22:54 - 00669352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll 2014-03-12 13:31 - 2013-12-21 15:51 - 06353960 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppsvc.exe 2014-03-12 13:31 - 2013-12-21 09:54 - 00447488 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppcomapi.dll 2014-03-12 13:31 - 2013-12-20 11:18 - 01643584 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi 2014-03-12 13:31 - 2013-12-20 11:18 - 01507704 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe 2014-03-12 13:31 - 2013-10-31 01:29 - 00236888 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdFilter.sys 2014-03-12 13:31 - 2013-10-31 01:29 - 00124760 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdNisDrv.sys 2014-03-12 13:31 - 2013-10-31 01:28 - 00035856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdBoot.sys 2014-03-12 13:30 - 2014-02-11 04:04 - 04189184 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys 2014-03-12 13:30 - 2014-02-11 03:43 - 00488448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qedit.dll 2014-03-12 13:30 - 2014-02-11 03:04 - 00586240 _____ (Microsoft Corporation) C:\WINDOWS\system32\qedit.dll 2014-03-11 07:43 - 2014-03-11 07:43 - 00002079 _____ () C:\Users\Public\Desktop\Foxit Reader.lnk 2014-03-11 07:42 - 2014-03-11 07:43 - 00000000 ____D () C:\Users\Thomas\AppData\Roaming\Foxit Software 2014-03-11 07:42 - 2014-03-11 07:42 - 00000000 ____D () C:\Program Files (x86)\Foxit Software 2014-03-11 07:41 - 2014-03-11 07:41 - 39477656 _____ (Foxit Corporation ) C:\Users\Thomas\Downloads\foxitreader6010.1213_l10n_setup.exe 2014-03-06 12:23 - 2014-03-06 12:23 - 00003608 _____ () C:\WINDOWS\System32\Tasks\HPCustParticipation HP Deskjet 3520 series 2014-03-06 12:23 - 2014-03-06 12:23 - 00002241 _____ () C:\Users\Public\Desktop\HP Deskjet 3520 series.lnk 2014-03-06 12:23 - 2014-03-06 12:23 - 00002016 _____ () C:\Users\Public\Desktop\HP Photo Creations.lnk 2014-03-06 12:23 - 2014-03-06 12:23 - 00001188 _____ () C:\Users\Public\Desktop\Shop für Zubehör - HP Deskjet 3520 series.lnk 2014-03-06 12:23 - 2014-03-06 12:23 - 00000000 ____D () C:\Users\Thomas\AppData\Roaming\HpUpdate 2014-03-06 12:23 - 2014-03-06 12:23 - 00000000 ____D () C:\ProgramData\Visan 2014-03-06 12:23 - 2014-03-06 12:23 - 00000000 ____D () C:\ProgramData\HP Photo Creations 2014-03-06 12:23 - 2014-03-06 12:23 - 00000000 ____D () C:\Program Files\HP 2014-03-06 12:23 - 2014-03-06 12:23 - 00000000 ____D () C:\Program Files (x86)\HP Photo Creations 2014-03-06 12:23 - 2014-03-06 12:23 - 00000000 ____D () C:\Program Files (x86)\HP 2014-03-06 12:23 - 2012-10-17 04:31 - 00741480 ____N (Hewlett-Packard Co.) C:\WINDOWS\system32\HPDiscoPMB011.dll 2014-03-06 12:22 - 2014-03-06 12:22 - 00000057 _____ () C:\ProgramData\Ament.ini 2014-03-06 12:22 - 2014-03-06 12:22 - 00000000 ____D () C:\Users\Thomas\AppData\Local\HP 2014-03-06 11:33 - 2014-03-06 12:23 - 00000000 ____D () C:\ProgramData\HP 2014-02-28 15:11 - 2014-03-12 19:53 - 00000000 ____D () C:\Users\Thomas\AppData\Local\Amazon Cloud Player 2014-02-28 15:11 - 2014-02-28 15:11 - 00001266 _____ () C:\Users\Thomas\Desktop\Amazon Cloud Player.lnk 2014-02-28 15:11 - 2014-02-28 15:11 - 00000000 ____D () C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Amazon Cloud Player 2014-02-28 15:10 - 2014-02-28 15:10 - 36160080 _____ (Amazon) C:\Users\Thomas\Downloads\AmazonCloudPlayerInstaller_422.exe 2014-02-27 16:03 - 2014-02-27 16:30 - 00000000 ____D () C:\Users\Thomas\AppData\Local\clear.fi 2014-02-27 16:03 - 2014-02-27 16:03 - 00000000 ____D () C:\Users\Thomas\Documents\clear.fi 2014-02-27 16:03 - 2014-02-27 16:03 - 00000000 ____D () C:\Users\Public\OEM 2014-02-24 17:24 - 2014-02-24 17:24 - 00002048 _____ () C:\Users\Public\Desktop\Adobe Reader XI.lnk 2014-02-24 17:23 - 2014-02-24 17:25 - 00000000 ____D () C:\ProgramData\Adobe 2014-02-24 17:23 - 2014-02-24 17:23 - 00000000 ____D () C:\Program Files (x86)\Adobe 2014-02-19 19:44 - 2014-02-19 19:44 - 00000000 ____D () C:\Program Files\McAfee Security Scan 2014-02-19 06:28 - 2014-02-19 06:28 - 00000000 ___RD () C:\WINDOWS\BrowserChoice 2014-02-18 10:02 - 2014-01-19 08:38 - 00270496 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe 2014-02-16 21:08 - 2014-02-16 21:08 - 00000425 _____ () C:\WINDOWS\BRWMARK.INI 2014-02-16 21:08 - 2014-02-16 21:08 - 00000027 _____ () C:\WINDOWS\BRPP2KA.INI 2014-02-16 17:31 - 2014-02-16 17:31 - 00000892 _____ () C:\Users\Thomas\Desktop\MatheTiger 1 & 2 Demoversion.lnk 2014-02-16 17:31 - 2014-02-16 17:31 - 00000000 ____D () C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MatheTiger 1 & 2 Demoversion 2014-02-16 17:29 - 2014-02-16 17:30 - 00000000 ____D () C:\Mildenberger 2014-02-16 13:35 - 2014-03-12 19:50 - 00158720 ___SH () C:\Users\Thomas\Downloads\Thumbs.db 2014-02-15 21:52 - 2014-02-15 21:52 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_User_LocationProvider_01_11_00.Wdf 2014-02-15 21:51 - 2014-03-12 19:45 - 00000000 __RDO () C:\Users\Thomas\SkyDrive 2014-02-15 21:51 - 2014-02-15 21:51 - 00000000 ____D () C:\Users\Thomas\AppData\Local\BMExplorer 2014-02-15 21:50 - 2014-02-15 21:50 - 00000000 ____D () C:\Users\Thomas\Documents\Bluetooth Folder 2014-02-15 21:49 - 2014-03-12 20:14 - 00001463 _____ () C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2014-02-15 21:49 - 2014-02-15 21:49 - 00000020 ___SH () C:\Users\Thomas\ntuser.ini 2014-02-15 21:47 - 2014-02-15 21:47 - 00000000 _SHDL () C:\Users\Default\Vorlagen 2014-02-15 21:47 - 2014-02-15 21:47 - 00000000 _SHDL () C:\Users\Default\Startmenü 2014-02-15 21:47 - 2014-02-15 21:47 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung 2014-02-15 21:47 - 2014-02-15 21:47 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen 2014-02-15 21:47 - 2014-02-15 21:47 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien 2014-02-15 21:47 - 2014-02-15 21:47 - 00000000 _SHDL () C:\Users\Default\Druckumgebung 2014-02-15 21:47 - 2014-02-15 21:47 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik 2014-02-15 21:47 - 2014-02-15 21:47 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder 2014-02-15 21:47 - 2014-02-15 21:47 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-02-15 21:47 - 2014-02-15 21:47 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf 2014-02-15 21:47 - 2014-02-15 21:47 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten 2014-02-15 21:47 - 2014-02-15 21:47 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten 2014-02-15 21:47 - 2014-02-15 21:47 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik 2014-02-15 21:47 - 2014-02-15 21:47 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder 2014-02-15 21:47 - 2014-02-15 21:47 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-02-15 21:47 - 2014-02-15 21:47 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf 2014-02-15 21:47 - 2014-02-15 21:47 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten 2014-02-15 21:46 - 2014-02-15 21:46 - 00022960 _____ () C:\WINDOWS\system32\emptyregdb.dat 2014-02-15 21:38 - 2014-02-15 21:38 - 00000000 ____D () C:\WINDOWS\system32\config\bbimigrate 2014-02-15 21:37 - 2014-02-15 21:51 - 00000000 ____D () C:\Users\Thomas 2014-02-15 21:37 - 2014-02-15 21:46 - 00028578 _____ () C:\WINDOWS\diagwrn.xml 2014-02-15 21:37 - 2014-02-15 21:46 - 00028578 _____ () C:\WINDOWS\diagerr.xml 2014-02-15 21:37 - 2014-02-15 21:38 - 00000000 ___RD () C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2014-02-15 21:37 - 2014-02-15 21:37 - 00000000 _SHDL () C:\Users\Thomas\Vorlagen 2014-02-15 21:37 - 2014-02-15 21:37 - 00000000 _SHDL () C:\Users\Thomas\Startmenü 2014-02-15 21:37 - 2014-02-15 21:37 - 00000000 _SHDL () C:\Users\Thomas\Netzwerkumgebung 2014-02-15 21:37 - 2014-02-15 21:37 - 00000000 _SHDL () C:\Users\Thomas\Lokale Einstellungen 2014-02-15 21:37 - 2014-02-15 21:37 - 00000000 _SHDL () C:\Users\Thomas\Eigene Dateien 2014-02-15 21:37 - 2014-02-15 21:37 - 00000000 _SHDL () C:\Users\Thomas\Druckumgebung 2014-02-15 21:37 - 2014-02-15 21:37 - 00000000 _SHDL () C:\Users\Thomas\Documents\Eigene Musik 2014-02-15 21:37 - 2014-02-15 21:37 - 00000000 _SHDL () C:\Users\Thomas\Documents\Eigene Bilder 2014-02-15 21:37 - 2014-02-15 21:37 - 00000000 _SHDL () C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-02-15 21:37 - 2014-02-15 21:37 - 00000000 _SHDL () C:\Users\Thomas\AppData\Local\Verlauf 2014-02-15 21:37 - 2014-02-15 21:37 - 00000000 _SHDL () C:\Users\Thomas\AppData\Local\Anwendungsdaten 2014-02-15 21:37 - 2014-02-15 21:37 - 00000000 _SHDL () C:\Users\Thomas\Anwendungsdaten 2014-02-15 21:37 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2014-02-15 21:37 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility 2014-02-15 21:37 - 2013-08-22 16:36 - 00000000 ____D () C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance 2014-02-15 21:33 - 2014-03-12 20:05 - 01811622 _____ () C:\WINDOWS\WindowsUpdate.log 2014-02-15 21:33 - 2014-03-12 18:42 - 00000000 ____D () C:\ProgramData\NVIDIA 2014-02-15 21:33 - 2014-02-15 21:33 - 00000000 ____D () C:\WINDOWS\SysWOW64\RTCOM 2014-02-15 21:33 - 2014-02-15 21:33 - 00000000 ____D () C:\Program Files\Realtek 2014-02-15 21:32 - 2014-03-12 18:43 - 00000000 ____D () C:\Program Files\NVIDIA Corporation 2014-02-15 21:32 - 2014-03-12 18:43 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation 2014-02-15 21:32 - 2014-02-15 21:39 - 00000000 ____D () C:\Program Files (x86)\Intel 2014-02-15 21:32 - 2014-02-15 21:32 - 00000000 ____D () C:\Program Files\Elantech 2014-02-15 21:32 - 2013-12-21 00:02 - 00064000 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.DLL 2014-02-15 21:32 - 2013-12-21 00:02 - 00060416 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.DLL 2014-02-15 21:30 - 2014-02-17 17:53 - 00000000 ___DC () C:\WINDOWS\Panther 2014-02-15 21:29 - 2014-02-15 21:29 - 03395920 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSService.dll 2014-02-15 21:29 - 2014-02-15 21:29 - 01113040 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll 2014-02-15 21:29 - 2014-02-15 21:29 - 00848384 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll 2014-02-15 21:29 - 2014-02-15 21:29 - 00835584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll 2014-02-15 21:29 - 2014-02-15 21:29 - 00787968 _____ (Microsoft Corporation) C:\WINDOWS\system32\uDWM.dll 2014-02-15 21:29 - 2014-02-15 21:29 - 00695808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll 2014-02-15 21:29 - 2014-02-15 21:29 - 00570880 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdrm.dll 2014-02-15 21:29 - 2014-02-15 21:29 - 00548864 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll 2014-02-15 21:29 - 2014-02-15 21:29 - 00454656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll 2014-02-15 21:29 - 2014-02-15 21:29 - 00444928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdrm.dll 2014-02-15 21:29 - 2014-02-15 21:29 - 00393216 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMPhoto.dll 2014-02-15 21:29 - 2014-02-15 21:29 - 00348160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMPhoto.dll 2014-02-15 21:29 - 2014-02-15 21:29 - 00249856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll 2014-02-15 21:29 - 2014-02-15 21:29 - 00206336 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSClient.dll 2014-02-15 21:29 - 2014-02-15 21:29 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll 2014-02-15 21:29 - 2014-02-15 21:29 - 00174592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSClient.dll 2014-02-15 21:29 - 2014-02-15 21:29 - 00138240 _____ () C:\WINDOWS\system32\OEMLicense.dll 2014-02-15 21:29 - 2014-02-15 21:29 - 00103936 _____ () C:\WINDOWS\SysWOW64\OEMLicense.dll 2014-02-15 21:29 - 2014-02-15 21:29 - 00084480 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSCollect.exe 2014-02-15 21:29 - 2014-02-15 21:29 - 00075360 _____ (Microsoft Corporation) C:\WINDOWS\system32\imagehlp.dll 2014-02-15 21:29 - 2014-02-15 21:29 - 00070680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\imagehlp.dll 2014-02-15 21:29 - 2014-02-15 21:29 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcaui.exe 2014-02-15 21:29 - 2014-02-15 21:29 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pcaui.exe 2014-02-15 21:28 - 2014-02-15 21:28 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb 2014-02-15 21:28 - 2014-02-15 21:28 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb 2014-02-15 21:28 - 2014-02-15 21:28 - 02041856 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl 2014-02-15 21:28 - 2014-02-15 21:28 - 01964032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl 2014-02-15 21:28 - 2014-02-15 21:28 - 00708608 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll 2014-02-15 21:28 - 2014-02-15 21:28 - 00615936 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAgent.exe 2014-02-15 21:28 - 2014-02-15 21:28 - 00553472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll 2014-02-15 21:28 - 2014-02-15 21:28 - 00287744 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmregistration.dll 2014-02-15 21:28 - 2014-02-15 21:28 - 00240128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mdmregistration.dll 2014-02-15 21:28 - 2014-02-15 21:28 - 00197120 _____ (Microsoft Corporation) C:\WINDOWS\system32\scrrun.dll 2014-02-15 21:28 - 2014-02-15 21:28 - 00195584 _____ (Microsoft Corporation) C:\WINDOWS\system32\msrating.dll 2014-02-15 21:28 - 2014-02-15 21:28 - 00164864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrating.dll 2014-02-15 21:28 - 2014-02-15 21:28 - 00156672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scrrun.dll 2014-02-15 21:28 - 2014-02-15 21:28 - 00139264 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieUnatt.exe 2014-02-15 21:28 - 2014-02-15 21:28 - 00112128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieUnatt.exe 2014-02-15 21:28 - 2014-02-15 21:28 - 00111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollector.exe 2014-02-15 21:28 - 2014-02-15 21:28 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll 2014-02-15 21:28 - 2014-02-15 21:28 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesetup.dll 2014-02-15 21:28 - 2014-02-15 21:28 - 00053760 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll 2014-02-15 21:28 - 2014-02-15 21:28 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieetwproxystub.dll 2014-02-15 21:28 - 2014-02-15 21:28 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwproxystub.dll 2014-02-15 21:28 - 2014-02-15 21:28 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll 2014-02-15 21:28 - 2014-02-15 21:28 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll 2014-02-15 21:28 - 2014-02-15 21:28 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iernonce.dll 2014-02-15 21:28 - 2014-02-15 21:28 - 00004096 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollectorres.dll 2014-02-15 21:27 - 2014-02-15 21:27 - 13209088 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll 2014-02-15 21:27 - 2014-02-15 21:27 - 11702272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll 2014-02-15 21:27 - 2014-02-15 21:27 - 07416832 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll 2014-02-15 21:27 - 2014-02-15 21:27 - 04961792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Search.dll 2014-02-15 21:27 - 2014-02-15 21:27 - 01462216 _____ (Microsoft Corporation) C:\WINDOWS\system32\propsys.dll 2014-02-15 21:27 - 2014-02-15 21:27 - 01202888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\propsys.dll 2014-02-15 21:27 - 2014-02-15 21:27 - 01105408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFolder.dll 2014-02-15 21:27 - 2014-02-15 21:27 - 00830976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchFolder.dll 2014-02-15 21:27 - 2014-02-15 21:27 - 00009701 _____ () C:\WINDOWS\SysWOW64\connectedsearch-results.searchconnector-ms 2014-02-15 21:27 - 2014-02-15 21:27 - 00009701 _____ () C:\WINDOWS\system32\connectedsearch-results.searchconnector-ms 2014-02-15 21:26 - 2014-02-15 21:26 - 21196664 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 18642504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 18577920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 13925888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 04604416 _____ (Microsoft Corporation) C:\WINDOWS\system32\d2d1.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 04217344 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncEngine.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 03936256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 03210528 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 02804528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2vdec.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 02804224 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 02617344 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 02397184 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10warp.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 02295808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 02071552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10warp.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 01503232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 01415680 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 01399176 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 01374384 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpmde.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 01227264 _____ (Microsoft Corporation) C:\WINDOWS\system32\mispace.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 01204968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmde.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 01119064 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys 2014-02-15 21:26 - 2014-02-15 21:26 - 01020928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 00980480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mispace.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 00919040 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 00870912 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDrive.exe 2014-02-15 21:26 - 2014-02-15 21:26 - 00834048 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 00809872 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 00745336 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 00744448 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 00720384 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveTelemetry.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 00663680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 00637952 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe 2014-02-15 21:26 - 2014-02-15 21:26 - 00628736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmCoreR.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 00589824 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastls.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 00584192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 00552624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 00513536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastls.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 00479744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe 2014-02-15 21:26 - 2014-02-15 21:26 - 00470016 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfds.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 00461824 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsGdiConverter.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 00433664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfds.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 00403456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys 2014-02-15 21:26 - 2014-02-15 21:26 - 00336384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsGdiConverter.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 00306688 _____ (Microsoft Corporation) C:\WINDOWS\system32\msieftp.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 00282112 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemEventsBrokerServer.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 00273920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msieftp.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 00273408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 00263168 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 00218112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Graphics.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 00207872 _____ (Microsoft Corporation) C:\WINDOWS\system32\deviceregistration.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 00202240 _____ (Microsoft Corporation) C:\WINDOWS\system32\ubpm.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 00142848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ipnat.sys 2014-02-15 21:26 - 2014-02-15 21:26 - 00142680 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBSTOR.SYS 2014-02-15 21:26 - 2014-02-15 21:26 - 00136704 _____ (Microsoft Corporation) C:\WINDOWS\system32\psmsrv.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 00121344 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveShell.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 00115712 _____ (Microsoft Corporation) C:\WINDOWS\system32\winbici.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 00105984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SkyDriveShell.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 00032088 _____ (Microsoft Corporation) C:\WINDOWS\system32\ploptin.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 00024064 _____ (Microsoft Corporation) C:\WINDOWS\system32\bi.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 00019456 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BtaMPM.sys 2014-02-15 21:24 - 2014-02-15 21:24 - 07399256 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe 2014-02-15 21:24 - 2014-02-15 21:24 - 02896896 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll 2014-02-15 21:24 - 2014-02-15 21:24 - 02570240 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers.dll 2014-02-15 21:24 - 2014-02-15 21:24 - 02266624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll 2014-02-15 21:24 - 2014-02-15 21:24 - 02152448 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3.dll 2014-02-15 21:24 - 2014-02-15 21:24 - 02143744 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll 2014-02-15 21:24 - 2014-02-15 21:24 - 02140888 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll 2014-02-15 21:24 - 2014-02-15 21:24 - 01843712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Display.dll 2014-02-15 21:24 - 2014-02-15 21:24 - 01816576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Display.dll 2014-02-15 21:24 - 2014-02-15 21:24 - 01765384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll 2014-02-15 21:24 - 2014-02-15 21:24 - 01765376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll 2014-02-15 21:24 - 2014-02-15 21:24 - 01756160 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMPDMC.exe 2014-02-15 21:24 - 2014-02-15 21:24 - 01530200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys 2014-02-15 21:24 - 2014-02-15 21:24 - 01476184 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi 2014-02-15 21:24 - 2014-02-15 21:24 - 01391104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMPDMC.exe 2014-02-15 21:24 - 2014-02-15 21:24 - 01345536 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe 2014-02-15 21:24 - 2014-02-15 21:24 - 01317376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3.dll 2014-02-15 21:24 - 2014-02-15 21:24 - 01302528 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll 2014-02-15 21:24 - 2014-02-15 21:24 - 00922624 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll 2014-02-15 21:24 - 2014-02-15 21:24 - 00747008 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidcli.dll 2014-02-15 21:24 - 2014-02-15 21:24 - 00566784 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpncore.dll 2014-02-15 21:24 - 2014-02-15 21:24 - 00544768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlidcli.dll 2014-02-15 21:24 - 2014-02-15 21:24 - 00516496 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll 2014-02-15 21:24 - 2014-02-15 21:24 - 00406400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll 2014-02-15 21:24 - 2014-02-15 21:24 - 00382808 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys 2014-02-15 21:24 - 2014-02-15 21:24 - 00372568 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spaceport.sys 2014-02-15 21:24 - 2014-02-15 21:24 - 00358896 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcomp.dll 2014-02-15 21:24 - 2014-02-15 21:24 - 00325464 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBXHCI.SYS 2014-02-15 21:24 - 2014-02-15 21:24 - 00254464 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll 2014-02-15 21:24 - 2014-02-15 21:24 - 00225792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dcomp.dll 2014-02-15 21:24 - 2014-02-15 21:24 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll 2014-02-15 21:24 - 2014-02-15 21:24 - 00146776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\SerCx2.sys 2014-02-15 21:24 - 2014-02-15 21:24 - 00086872 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pdc.sys 2014-02-15 21:24 - 2014-02-15 21:24 - 00039768 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\intelpep.sys 2014-02-15 21:24 - 2014-02-15 21:24 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredentialMigrationHandler.dll 2014-02-15 21:24 - 2014-02-15 21:24 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredentialMigrationHandler.dll 2014-02-15 21:23 - 2014-02-15 21:23 - 00262144 _____ () C:\WINDOWS\system32\config\userdiff 2014-02-15 21:21 - 2014-02-15 21:21 - 00000000 ____D () C:\WINDOWS\SysWOW64\XPSViewer 2014-02-15 21:21 - 2014-02-15 21:21 - 00000000 ____D () C:\Program Files\Reference Assemblies 2014-02-15 21:21 - 2014-02-15 21:21 - 00000000 ____D () C:\Program Files\MSBuild 2014-02-15 21:21 - 2014-02-15 21:21 - 00000000 ____D () C:\Program Files (x86)\Reference Assemblies 2014-02-15 21:21 - 2014-02-15 21:21 - 00000000 ____D () C:\Program Files (x86)\MSBuild 2014-02-15 21:20 - 2013-08-03 05:48 - 01166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll 2014-02-15 21:20 - 2013-08-03 05:48 - 00124112 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll 2014-02-15 21:20 - 2013-08-03 05:48 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe 2014-02-15 21:20 - 2013-08-03 05:41 - 00778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll 2014-02-15 21:20 - 2013-08-03 05:41 - 00102608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll 2014-02-15 21:20 - 2013-08-03 05:41 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe 2014-02-15 20:51 - 2014-02-15 21:46 - 00006602 _____ () C:\WINDOWS\comsetup.log 2014-02-15 18:44 - 2014-02-15 18:45 - 00000000 ____D () C:\WINDOWS\system32\MRT 2014-02-15 18:44 - 2014-02-04 19:09 - 88567024 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe 2014-02-15 18:37 - 2014-02-16 16:41 - 00000000 ____D () C:\Users\Thomas\Documents\Windows 8_1-Upgrade-Assistent-Dateien 2014-02-15 18:37 - 2014-02-15 18:37 - 00025722 _____ () C:\Users\Thomas\Documents\Windows 8_1-Upgrade-Assistent.html 2014-02-15 18:37 - 2013-05-04 05:51 - 00014848 ____N (Microsoft) C:\WINDOWS\system32\rars.rs 2014-02-15 18:37 - 2013-05-04 05:10 - 00014848 ____N (Microsoft) C:\WINDOWS\SysWOW64\rars.rs 2014-02-15 18:32 - 2014-02-15 18:32 - 04954736 _____ (Microsoft Corporation) C:\Users\Thomas\Downloads\WindowsUpgradeAssistant.exe 2014-02-15 18:22 - 2014-02-15 18:22 - 00000000 ____D () C:\Users\Thomas\AppData\Local\Macromedia 2014-02-15 18:20 - 2014-03-12 20:09 - 00000884 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job 2014-02-15 18:20 - 2014-03-12 14:09 - 00003772 _____ () C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater 2014-02-15 18:20 - 2014-02-19 19:44 - 00001956 _____ () C:\Users\Public\Desktop\McAfee Security Scan Plus.lnk 2014-02-15 18:20 - 2014-02-15 18:20 - 00000000 ____D () C:\ProgramData\McAfee Security Scan 2014-02-15 18:19 - 2014-03-11 07:38 - 00000000 ____D () C:\Users\Thomas\AppData\Local\Adobe 2014-02-15 18:16 - 2014-02-15 18:16 - 00000000 ____D () C:\Users\Thomas\AppData\Roaming\Mozilla 2014-02-15 18:16 - 2014-02-15 18:16 - 00000000 ____D () C:\Users\Thomas\AppData\Local\Mozilla 2014-02-15 18:15 - 2014-03-12 20:14 - 00001160 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk 2014-02-15 18:15 - 2014-02-15 18:15 - 24490112 _____ (Mozilla) C:\Users\Thomas\Downloads\Firefox_Setup_27.0.1.exe 2014-02-15 18:15 - 2014-02-15 18:15 - 00000000 ____D () C:\ProgramData\Mozilla 2014-02-15 18:15 - 2014-02-15 18:15 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service 2014-02-15 18:15 - 2014-02-15 18:15 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2014-02-15 18:03 - 2014-03-12 20:29 - 00003598 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1042288249-1955762201-2030029956-1002 2014-02-15 17:59 - 2014-02-15 17:59 - 00000000 ____D () C:\Users\Thomas\AppData\Roaming\Macromedia 2014-02-15 17:58 - 2014-02-15 17:58 - 00000000 ____D () C:\Users\Thomas\AppData\Roaming\Atheros 2014-02-15 17:57 - 2014-03-12 20:17 - 00000000 ___RD () C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2014-02-15 17:57 - 2014-02-24 17:24 - 00000000 ____D () C:\Users\Thomas\AppData\Roaming\Adobe 2014-02-15 17:57 - 2014-02-15 21:49 - 00000000 ___RD () C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools 2014-02-15 17:57 - 2014-02-15 17:57 - 00000000 ____D () C:\WINDOWS\System32\Tasks\WPD 2014-02-15 17:57 - 2014-02-15 17:57 - 00000000 ____D () C:\Users\Thomas\AppData\Local\VirtualStore 2014-02-15 17:57 - 2014-02-15 17:57 - 00000000 ____D () C:\ProgramData\OEM_YAHOO 2014-02-15 17:56 - 2014-03-06 11:34 - 00000000 ____D () C:\Users\Thomas\AppData\Local\Packages 2014-02-15 17:40 - 2014-02-15 21:30 - 00000000 __SHD () C:\Recovery 2014-02-15 17:40 - 2014-02-15 17:41 - 00000000 _____ () C:\Recovery.txt 2014-02-15 16:53 - 2014-02-15 16:53 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf 2014-02-15 16:41 - 2014-02-15 16:41 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Musik 2014-02-15 16:41 - 2014-02-15 16:41 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Bilder 2014-02-15 16:41 - 2014-02-15 16:41 - 00000000 _SHDL () C:\Users\Default.migrated\Vorlagen 2014-02-15 16:41 - 2014-02-15 16:41 - 00000000 _SHDL () C:\Users\Default.migrated\Startmenü 2014-02-15 16:41 - 2014-02-15 16:41 - 00000000 _SHDL () C:\Users\Default.migrated\Netzwerkumgebung 2014-02-15 16:41 - 2014-02-15 16:41 - 00000000 _SHDL () C:\Users\Default.migrated\Lokale Einstellungen 2014-02-15 16:41 - 2014-02-15 16:41 - 00000000 _SHDL () C:\Users\Default.migrated\Eigene Dateien 2014-02-15 16:41 - 2014-02-15 16:41 - 00000000 _SHDL () C:\Users\Default.migrated\Druckumgebung 2014-02-15 16:41 - 2014-02-15 16:41 - 00000000 _SHDL () C:\Users\Default.migrated\Documents\Eigene Musik 2014-02-15 16:41 - 2014-02-15 16:41 - 00000000 _SHDL () C:\Users\Default.migrated\Documents\Eigene Bilder 2014-02-15 16:41 - 2014-02-15 16:41 - 00000000 _SHDL () C:\Users\Default.migrated\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-02-15 16:41 - 2014-02-15 16:41 - 00000000 _SHDL () C:\Users\Default.migrated\AppData\Local\Verlauf 2014-02-15 16:41 - 2014-02-15 16:41 - 00000000 _SHDL () C:\Users\Default.migrated\AppData\Local\Anwendungsdaten 2014-02-15 16:41 - 2014-02-15 16:41 - 00000000 _SHDL () C:\Users\Default.migrated\Anwendungsdaten 2014-02-15 16:41 - 2014-02-15 16:41 - 00000000 _SHDL () C:\Programme 2014-02-15 16:41 - 2014-02-15 16:41 - 00000000 _SHDL () C:\ProgramData\Vorlagen 2014-02-15 16:41 - 2014-02-15 16:41 - 00000000 _SHDL () C:\ProgramData\Startmenü 2014-02-15 16:41 - 2014-02-15 16:41 - 00000000 _SHDL () C:\ProgramData\Dokumente 2014-02-15 16:41 - 2014-02-15 16:41 - 00000000 _SHDL () C:\ProgramData\Anwendungsdaten 2014-02-15 16:41 - 2014-02-15 16:41 - 00000000 _SHDL () C:\Program Files\Gemeinsame Dateien 2014-02-15 16:41 - 2014-02-15 16:41 - 00000000 _SHDL () C:\Dokumente und Einstellungen ==================== One Month Modified Files and Folders ======= 2014-03-12 20:35 - 2014-03-12 20:34 - 00020790 _____ () C:\Users\Thomas\Downloads\FRST.txt 2014-03-12 20:34 - 2014-03-12 20:34 - 02157056 _____ (Farbar) C:\Users\Thomas\Downloads\FRST64.exe 2014-03-12 20:34 - 2014-03-12 20:34 - 00000000 ____D () C:\FRST 2014-03-12 20:29 - 2014-02-15 18:03 - 00003598 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1042288249-1955762201-2030029956-1002 2014-03-12 20:25 - 2014-03-12 20:25 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\Thomas\Downloads\SpyHunter-Installer.exe 2014-03-12 20:17 - 2014-03-12 20:10 - 00000000 ____D () C:\ProgramData\WPM 2014-03-12 20:17 - 2014-03-12 20:10 - 00000000 ____D () C:\Program Files (x86)\SupTab 2014-03-12 20:17 - 2014-02-15 17:57 - 00000000 ___RD () C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2014-03-12 20:16 - 2014-03-12 20:16 - 00000000 ____D () C:\Users\Thomas\Documents\Optimizer Pro 2014-03-12 20:16 - 2014-03-12 20:16 - 00000000 ____D () C:\Users\Thomas\AppData\Roaming\Optimizer Pro 2014-03-12 20:16 - 2014-03-12 20:10 - 00000000 ____D () C:\ProgramData\IePluginService 2014-03-12 20:14 - 2014-03-12 20:09 - 00000000 ____D () C:\Users\Thomas\AppData\Roaming\awesomehp 2014-03-12 20:14 - 2014-02-15 21:49 - 00001463 _____ () C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2014-03-12 20:14 - 2014-02-15 18:15 - 00001160 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk 2014-03-12 20:12 - 2014-03-12 20:12 - 00004380 _____ () C:\WINDOWS\System32\Tasks\BrowserSafeguard Update Task 2014-03-12 20:12 - 2014-03-12 20:12 - 00003914 _____ () C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{55E675FA-B8CE-41E2-BEC0-DCE18DD74943} 2014-03-12 20:12 - 2014-03-12 20:12 - 00000000 ____D () C:\Program Files (x86)\Browsersafeguard 2014-03-12 20:11 - 2014-03-12 20:11 - 00001087 _____ () C:\Users\Thomas\Desktop\Optimizer Pro.lnk 2014-03-12 20:11 - 2014-03-12 20:11 - 00000000 ____D () C:\Program Files (x86)\Optimizer Pro 2014-03-12 20:10 - 2014-03-12 20:10 - 00000000 ____D () C:\Users\Thomas\AppData\Roaming\SupTab 2014-03-12 20:09 - 2014-02-15 18:20 - 00000884 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job 2014-03-12 20:08 - 2014-03-12 20:08 - 00220448 _____ (Fusion Install ) C:\Users\Thomas\Downloads\Setup.exe 2014-03-12 20:05 - 2014-02-15 21:33 - 01811622 _____ () C:\WINDOWS\WindowsUpdate.log 2014-03-12 20:00 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\sru 2014-03-12 19:55 - 2013-11-14 08:27 - 01776918 _____ () C:\WINDOWS\system32\PerfStringBackup.INI 2014-03-12 19:55 - 2013-11-14 08:11 - 00765582 _____ () C:\WINDOWS\system32\perfh007.dat 2014-03-12 19:55 - 2013-11-14 08:11 - 00159366 _____ () C:\WINDOWS\system32\perfc007.dat 2014-03-12 19:54 - 2013-08-22 15:46 - 00330726 _____ () C:\WINDOWS\setupact.log 2014-03-12 19:53 - 2014-02-28 15:11 - 00000000 ____D () C:\Users\Thomas\AppData\Local\Amazon Cloud Player 2014-03-12 19:50 - 2014-02-16 13:35 - 00158720 ___SH () C:\Users\Thomas\Downloads\Thumbs.db 2014-03-12 19:45 - 2014-02-15 21:51 - 00000000 __RDO () C:\Users\Thomas\SkyDrive 2014-03-12 18:44 - 2014-03-12 18:44 - 00001376 _____ () C:\Users\Public\Desktop\GeForce Experience.lnk 2014-03-12 18:44 - 2014-03-12 18:44 - 00000000 ____D () C:\Users\Thomas\AppData\Local\NVIDIA Corporation 2014-03-12 18:44 - 2014-03-12 18:42 - 00000000 ____D () C:\WINDOWS\SysWOW64\NV 2014-03-12 18:44 - 2014-03-12 18:42 - 00000000 ____D () C:\WINDOWS\system32\NV 2014-03-12 18:44 - 2014-03-12 18:41 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation 2014-03-12 18:43 - 2014-03-12 18:43 - 00000000 ____D () C:\Users\Thomas\AppData\Local\NVIDIA 2014-03-12 18:43 - 2014-02-15 21:32 - 00000000 ____D () C:\Program Files\NVIDIA Corporation 2014-03-12 18:43 - 2014-02-15 21:32 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation 2014-03-12 18:42 - 2014-03-12 18:42 - 00000000 ____D () C:\Program Files (x86)\AGEIA Technologies 2014-03-12 18:42 - 2014-02-15 21:33 - 00000000 ____D () C:\ProgramData\NVIDIA 2014-03-12 18:41 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\Help 2014-03-12 18:39 - 2013-08-22 15:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT 2014-03-12 18:38 - 2013-08-22 14:25 - 00262144 ___SH () C:\WINDOWS\system32\config\BBI 2014-03-12 18:36 - 2014-03-12 18:36 - 00000000 ____D () C:\NVIDIA 2014-03-12 18:26 - 2014-03-12 18:23 - 276758080 _____ (NVIDIA Corporation) C:\Users\Thomas\Downloads\335.23-notebook-win8-win7-64bit-international-whql.exe 2014-03-12 18:13 - 2013-08-22 15:44 - 00335992 _____ () C:\WINDOWS\system32\FNTCACHE.DAT 2014-03-12 14:24 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2014-03-12 14:24 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2014-03-12 14:24 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Windows Defender 2014-03-12 14:24 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files (x86)\Windows Defender 2014-03-12 14:09 - 2014-02-15 18:20 - 00003772 _____ () C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater 2014-03-12 13:37 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\AppReadiness 2014-03-11 07:43 - 2014-03-11 07:43 - 00002079 _____ () C:\Users\Public\Desktop\Foxit Reader.lnk 2014-03-11 07:43 - 2014-03-11 07:42 - 00000000 ____D () C:\Users\Thomas\AppData\Roaming\Foxit Software 2014-03-11 07:42 - 2014-03-11 07:42 - 00000000 ____D () C:\Program Files (x86)\Foxit Software 2014-03-11 07:41 - 2014-03-11 07:41 - 39477656 _____ (Foxit Corporation ) C:\Users\Thomas\Downloads\foxitreader6010.1213_l10n_setup.exe 2014-03-11 07:38 - 2014-02-15 18:19 - 00000000 ____D () C:\Users\Thomas\AppData\Local\Adobe 2014-03-09 10:59 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\NDF 2014-03-06 12:29 - 2013-11-13 23:18 - 00004506 _____ () C:\WINDOWS\PFRO.log 2014-03-06 12:23 - 2014-03-06 12:23 - 00003608 _____ () C:\WINDOWS\System32\Tasks\HPCustParticipation HP Deskjet 3520 series 2014-03-06 12:23 - 2014-03-06 12:23 - 00002241 _____ () C:\Users\Public\Desktop\HP Deskjet 3520 series.lnk 2014-03-06 12:23 - 2014-03-06 12:23 - 00002016 _____ () C:\Users\Public\Desktop\HP Photo Creations.lnk 2014-03-06 12:23 - 2014-03-06 12:23 - 00001188 _____ () C:\Users\Public\Desktop\Shop für Zubehör - HP Deskjet 3520 series.lnk 2014-03-06 12:23 - 2014-03-06 12:23 - 00000000 ____D () C:\Users\Thomas\AppData\Roaming\HpUpdate 2014-03-06 12:23 - 2014-03-06 12:23 - 00000000 ____D () C:\ProgramData\Visan 2014-03-06 12:23 - 2014-03-06 12:23 - 00000000 ____D () C:\ProgramData\HP Photo Creations 2014-03-06 12:23 - 2014-03-06 12:23 - 00000000 ____D () C:\Program Files\HP 2014-03-06 12:23 - 2014-03-06 12:23 - 00000000 ____D () C:\Program Files (x86)\HP Photo Creations 2014-03-06 12:23 - 2014-03-06 12:23 - 00000000 ____D () C:\Program Files (x86)\HP 2014-03-06 12:23 - 2014-03-06 11:33 - 00000000 ____D () C:\ProgramData\HP 2014-03-06 12:22 - 2014-03-06 12:22 - 00000057 _____ () C:\ProgramData\Ament.ini 2014-03-06 12:22 - 2014-03-06 12:22 - 00000000 ____D () C:\Users\Thomas\AppData\Local\HP 2014-03-06 11:34 - 2014-02-15 17:56 - 00000000 ____D () C:\Users\Thomas\AppData\Local\Packages 2014-03-04 23:53 - 2013-08-22 16:38 - 00693240 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe 2014-03-04 23:53 - 2013-08-22 16:38 - 00105464 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl 2014-03-04 15:35 - 2014-03-12 18:38 - 31474976 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglv64.dll 2014-03-04 15:35 - 2014-03-12 18:38 - 25255256 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcompiler.dll 2014-03-04 15:35 - 2014-03-12 18:38 - 23716640 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglv32.dll 2014-03-04 15:35 - 2014-03-12 18:38 - 18302384 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvwgf2umx.dll 2014-03-04 15:35 - 2014-03-12 18:38 - 17755424 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvd3dumx.dll 2014-03-04 15:35 - 2014-03-12 18:38 - 17561544 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcompiler.dll 2014-03-04 15:35 - 2014-03-12 18:38 - 15783992 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvwgf2um.dll 2014-03-04 15:35 - 2014-03-12 18:38 - 14709720 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvd3dum.dll 2014-03-04 15:35 - 2014-03-12 18:38 - 12708128 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvlddmkm.sys 2014-03-04 15:35 - 2014-03-12 18:38 - 11636176 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll 2014-03-04 15:35 - 2014-03-12 18:38 - 11589272 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvopencl.dll 2014-03-04 15:35 - 2014-03-12 18:38 - 09728064 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll 2014-03-04 15:35 - 2014-03-12 18:38 - 09690424 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvopencl.dll 2014-03-04 15:35 - 2014-03-12 18:38 - 03143456 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll 2014-03-04 15:35 - 2014-03-12 18:38 - 03093280 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll 2014-03-04 15:35 - 2014-03-12 18:38 - 02958792 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll 2014-03-04 15:35 - 2014-03-12 18:38 - 02783008 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvenc.dll 2014-03-04 15:35 - 2014-03-12 18:38 - 02715264 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll 2014-03-04 15:35 - 2014-03-12 18:38 - 02411976 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvenc.dll 2014-03-04 15:35 - 2014-03-12 18:38 - 01885472 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6433523.dll 2014-03-04 15:35 - 2014-03-12 18:38 - 01516488 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6433523.dll 2014-03-04 15:35 - 2014-03-12 18:38 - 00947808 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvumdshimx.dll 2014-03-04 15:35 - 2014-03-12 18:38 - 00892704 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll 2014-03-04 15:35 - 2014-03-12 18:38 - 00877856 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll 2014-03-04 15:35 - 2014-03-12 18:38 - 00863064 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll 2014-03-04 15:35 - 2014-03-12 18:38 - 00846168 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll 2014-03-04 15:35 - 2014-03-12 18:38 - 00832936 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvumdshim.dll 2014-03-04 15:35 - 2014-03-12 18:38 - 00484296 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll 2014-03-04 15:35 - 2014-03-12 18:38 - 00409544 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll 2014-03-04 15:35 - 2014-03-12 18:38 - 00377688 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFROpenGL.dll 2014-03-04 15:35 - 2014-03-12 18:38 - 00353504 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglshim64.dll 2014-03-04 15:35 - 2014-03-12 18:38 - 00333600 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFROpenGL.dll 2014-03-04 15:35 - 2014-03-12 18:38 - 00305600 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglshim32.dll 2014-03-04 15:35 - 2014-03-12 18:38 - 00174296 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvinitx.dll 2014-03-04 15:35 - 2014-03-12 18:38 - 00148016 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvinit.dll 2014-03-04 15:35 - 2014-03-12 18:38 - 00033736 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvpciflt.sys 2014-03-04 15:35 - 2014-03-12 18:38 - 00024544 _____ () C:\WINDOWS\system32\nvinfo.pb 2014-03-04 14:06 - 2014-03-12 18:41 - 06714312 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll 2014-03-04 14:06 - 2014-03-12 18:41 - 03497816 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc64.dll 2014-03-04 14:05 - 2014-03-12 18:41 - 03649185 _____ () C:\WINDOWS\system32\nvcoproc.bin 2014-03-04 14:05 - 2014-03-12 18:41 - 02558808 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvcr.dll 2014-03-04 14:05 - 2014-03-12 18:41 - 01075032 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshext.dll 2014-03-04 14:05 - 2014-03-12 18:41 - 00922968 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe 2014-03-04 14:05 - 2014-03-12 18:41 - 00386336 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmctray.dll 2014-03-04 14:05 - 2014-03-12 18:41 - 00067072 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshextr.dll 2014-03-04 14:05 - 2014-03-12 18:41 - 00064968 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvshext.dll 2014-03-01 07:05 - 2014-03-12 13:31 - 23133696 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll 2014-03-01 05:58 - 2014-03-12 13:31 - 02765824 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll 2014-03-01 05:30 - 2014-03-12 13:31 - 17074688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll 2014-03-01 05:17 - 2014-03-12 13:31 - 00218624 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe 2014-03-01 04:54 - 2014-03-12 13:31 - 05768704 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll 2014-03-01 04:47 - 2014-03-12 13:31 - 02168320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll 2014-03-01 04:42 - 2014-03-12 13:31 - 00627200 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll 2014-03-01 04:18 - 2014-03-12 13:31 - 13051904 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll 2014-03-01 04:14 - 2014-03-12 13:31 - 04244480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll 2014-03-01 04:10 - 2014-03-12 13:31 - 02334208 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll 2014-03-01 04:03 - 2014-03-12 13:31 - 00524288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll 2014-03-01 03:57 - 2014-03-12 13:31 - 11266048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll 2014-03-01 03:38 - 2014-03-12 13:31 - 01393664 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll 2014-03-01 03:32 - 2014-03-12 13:31 - 01820160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll 2014-03-01 03:27 - 2014-03-12 13:31 - 01156096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll 2014-03-01 03:25 - 2014-03-12 13:31 - 00817664 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll 2014-03-01 03:25 - 2014-03-12 13:31 - 00703488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll 2014-02-28 15:11 - 2014-02-28 15:11 - 00001266 _____ () C:\Users\Thomas\Desktop\Amazon Cloud Player.lnk 2014-02-28 15:11 - 2014-02-28 15:11 - 00000000 ____D () C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Amazon Cloud Player 2014-02-28 15:10 - 2014-02-28 15:10 - 36160080 _____ (Amazon) C:\Users\Thomas\Downloads\AmazonCloudPlayerInstaller_422.exe 2014-02-27 16:30 - 2014-02-27 16:03 - 00000000 ____D () C:\Users\Thomas\AppData\Local\clear.fi 2014-02-27 16:03 - 2014-02-27 16:03 - 00000000 ____D () C:\Users\Thomas\Documents\clear.fi 2014-02-27 16:03 - 2014-02-27 16:03 - 00000000 ____D () C:\Users\Public\OEM 2014-02-25 17:57 - 2013-06-27 20:29 - 00000000 ____D () C:\ProgramData\Norton 2014-02-24 17:25 - 2014-02-24 17:23 - 00000000 ____D () C:\ProgramData\Adobe 2014-02-24 17:24 - 2014-02-24 17:24 - 00002048 _____ () C:\Users\Public\Desktop\Adobe Reader XI.lnk 2014-02-24 17:24 - 2014-02-15 17:57 - 00000000 ____D () C:\Users\Thomas\AppData\Roaming\Adobe 2014-02-24 17:23 - 2014-02-24 17:23 - 00000000 ____D () C:\Program Files (x86)\Adobe 2014-02-20 08:08 - 2013-08-22 14:25 - 00262144 ___SH () C:\WINDOWS\system32\config\ELAM 2014-02-19 19:44 - 2014-02-19 19:44 - 00000000 ____D () C:\Program Files\McAfee Security Scan 2014-02-19 19:44 - 2014-02-15 18:20 - 00001956 _____ () C:\Users\Public\Desktop\McAfee Security Scan Plus.lnk 2014-02-19 19:44 - 2013-05-13 03:35 - 00000000 ____D () C:\ProgramData\McAfee 2014-02-19 16:14 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\rescache 2014-02-19 06:28 - 2014-02-19 06:28 - 00000000 ___RD () C:\WINDOWS\BrowserChoice 2014-02-19 06:26 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\restore 2014-02-17 17:53 - 2014-02-15 21:30 - 00000000 ___DC () C:\WINDOWS\Panther 2014-02-16 21:08 - 2014-02-16 21:08 - 00000425 _____ () C:\WINDOWS\BRWMARK.INI 2014-02-16 21:08 - 2014-02-16 21:08 - 00000027 _____ () C:\WINDOWS\BRPP2KA.INI 2014-02-16 17:31 - 2014-02-16 17:31 - 00000892 _____ () C:\Users\Thomas\Desktop\MatheTiger 1 & 2 Demoversion.lnk 2014-02-16 17:31 - 2014-02-16 17:31 - 00000000 ____D () C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MatheTiger 1 & 2 Demoversion 2014-02-16 17:30 - 2014-02-16 17:29 - 00000000 ____D () C:\Mildenberger 2014-02-16 16:41 - 2014-02-15 18:37 - 00000000 ____D () C:\Users\Thomas\Documents\Windows 8_1-Upgrade-Assistent-Dateien 2014-02-15 21:52 - 2014-02-15 21:52 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_User_LocationProvider_01_11_00.Wdf 2014-02-15 21:51 - 2014-02-15 21:51 - 00000000 ____D () C:\Users\Thomas\AppData\Local\BMExplorer 2014-02-15 21:51 - 2014-02-15 21:37 - 00000000 ____D () C:\Users\Thomas 2014-02-15 21:50 - 2014-02-15 21:50 - 00000000 ____D () C:\Users\Thomas\Documents\Bluetooth Folder 2014-02-15 21:50 - 2013-06-27 20:19 - 00000000 ____D () C:\ProgramData\Atheros 2014-02-15 21:49 - 2014-02-15 21:49 - 00000020 ___SH () C:\Users\Thomas\ntuser.ini 2014-02-15 21:49 - 2014-02-15 17:57 - 00000000 ___RD () C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools 2014-02-15 21:47 - 2014-02-15 21:47 - 00000000 _SHDL () C:\Users\Default\Vorlagen 2014-02-15 21:47 - 2014-02-15 21:47 - 00000000 _SHDL () C:\Users\Default\Startmenü 2014-02-15 21:47 - 2014-02-15 21:47 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung 2014-02-15 21:47 - 2014-02-15 21:47 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen 2014-02-15 21:47 - 2014-02-15 21:47 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien 2014-02-15 21:47 - 2014-02-15 21:47 - 00000000 _SHDL () C:\Users\Default\Druckumgebung 2014-02-15 21:47 - 2014-02-15 21:47 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik 2014-02-15 21:47 - 2014-02-15 21:47 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder 2014-02-15 21:47 - 2014-02-15 21:47 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-02-15 21:47 - 2014-02-15 21:47 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf 2014-02-15 21:47 - 2014-02-15 21:47 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten 2014-02-15 21:47 - 2014-02-15 21:47 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten 2014-02-15 21:47 - 2014-02-15 21:47 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik 2014-02-15 21:47 - 2014-02-15 21:47 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder 2014-02-15 21:47 - 2014-02-15 21:47 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-02-15 21:47 - 2014-02-15 21:47 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf 2014-02-15 21:47 - 2014-02-15 21:47 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten 2014-02-15 21:47 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\Registration 2014-02-15 21:47 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Windows NT 2014-02-15 21:47 - 2013-08-22 14:36 - 00000000 __RHD () C:\Users\Default 2014-02-15 21:46 - 2014-02-15 21:46 - 00022960 _____ () C:\WINDOWS\system32\emptyregdb.dat 2014-02-15 21:46 - 2014-02-15 21:37 - 00028578 _____ () C:\WINDOWS\diagwrn.xml 2014-02-15 21:46 - 2014-02-15 21:37 - 00028578 _____ () C:\WINDOWS\diagerr.xml 2014-02-15 21:46 - 2014-02-15 20:51 - 00006602 _____ () C:\WINDOWS\comsetup.log 2014-02-15 21:44 - 2013-08-22 16:36 - 00000000 __RSD () C:\WINDOWS\Media 2014-02-15 21:44 - 2013-08-22 16:36 - 00000000 __RHD () C:\Users\Public\Libraries 2014-02-15 21:41 - 2013-08-22 14:36 - 00000000 ____D () C:\WINDOWS\system32\Sysprep 2014-02-15 21:40 - 2013-08-22 16:37 - 00004893 _____ () C:\WINDOWS\DtcInstall.log 2014-02-15 21:40 - 2012-07-26 06:37 - 00000000 ____D () C:\Users\Default.migrated 2014-02-15 21:39 - 2014-02-15 21:32 - 00000000 ____D () C:\Program Files (x86)\Intel 2014-02-15 21:39 - 2013-11-14 08:11 - 00000000 ____D () C:\WINDOWS\SysWOW64\WCN 2014-02-15 21:39 - 2013-11-14 08:11 - 00000000 ____D () C:\WINDOWS\SysWOW64\sysprep 2014-02-15 21:39 - 2013-11-14 08:11 - 00000000 ____D () C:\WINDOWS\system32\WCN 2014-02-15 21:39 - 2013-08-22 16:43 - 00000000 ____D () C:\WINDOWS\DigitalLocker 2014-02-15 21:39 - 2013-08-22 16:36 - 00000000 __SHD () C:\Program Files\Windows Sidebar 2014-02-15 21:39 - 2013-08-22 16:36 - 00000000 __SHD () C:\Program Files (x86)\Windows Sidebar 2014-02-15 21:39 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\migwiz 2014-02-15 21:39 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\IME 2014-02-15 21:39 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\WinBioPlugIns 2014-02-15 21:39 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\spool 2014-02-15 21:39 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\IME 2014-02-15 21:39 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\IME 2014-02-15 21:39 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared 2014-02-15 21:39 - 2013-08-22 14:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\SMI 2014-02-15 21:39 - 2013-08-22 14:36 - 00000000 ____D () C:\WINDOWS\system32\oobe 2014-02-15 21:39 - 2013-06-27 20:05 - 00000000 ____D () C:\WINDOWS\SysWOW64\sda 2014-02-15 21:39 - 2013-05-13 03:23 - 00000000 ____D () C:\ProgramData\PRICache 2014-02-15 21:38 - 2014-02-15 21:38 - 00000000 ____D () C:\WINDOWS\system32\config\bbimigrate 2014-02-15 21:38 - 2014-02-15 21:37 - 00000000 ___RD () C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2014-02-15 21:38 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\Recovery 2014-02-15 21:37 - 2014-02-15 21:37 - 00000000 _SHDL () C:\Users\Thomas\Vorlagen 2014-02-15 21:37 - 2014-02-15 21:37 - 00000000 _SHDL () C:\Users\Thomas\Startmenü 2014-02-15 21:37 - 2014-02-15 21:37 - 00000000 _SHDL () C:\Users\Thomas\Netzwerkumgebung 2014-02-15 21:37 - 2014-02-15 21:37 - 00000000 _SHDL () C:\Users\Thomas\Lokale Einstellungen 2014-02-15 21:37 - 2014-02-15 21:37 - 00000000 _SHDL () C:\Users\Thomas\Eigene Dateien 2014-02-15 21:37 - 2014-02-15 21:37 - 00000000 _SHDL () C:\Users\Thomas\Druckumgebung 2014-02-15 21:37 - 2014-02-15 21:37 - 00000000 _SHDL () C:\Users\Thomas\Documents\Eigene Musik 2014-02-15 21:37 - 2014-02-15 21:37 - 00000000 _SHDL () C:\Users\Thomas\Documents\Eigene Bilder 2014-02-15 21:37 - 2014-02-15 21:37 - 00000000 _SHDL () C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-02-15 21:37 - 2014-02-15 21:37 - 00000000 _SHDL () C:\Users\Thomas\AppData\Local\Verlauf 2014-02-15 21:37 - 2014-02-15 21:37 - 00000000 _SHDL () C:\Users\Thomas\AppData\Local\Anwendungsdaten 2014-02-15 21:37 - 2014-02-15 21:37 - 00000000 _SHDL () C:\Users\Thomas\Anwendungsdaten 2014-02-15 21:33 - 2014-02-15 21:33 - 00000000 ____D () C:\WINDOWS\SysWOW64\RTCOM 2014-02-15 21:33 - 2014-02-15 21:33 - 00000000 ____D () C:\Program Files\Realtek 2014-02-15 21:33 - 2013-08-22 15:46 - 00000084 _____ () C:\WINDOWS\setuperr.log 2014-02-15 21:32 - 2014-02-15 21:32 - 00000000 ____D () C:\Program Files\Elantech 2014-02-15 21:30 - 2014-02-15 17:40 - 00000000 __SHD () C:\Recovery 2014-02-15 21:30 - 2013-08-22 16:36 - 00262144 _____ () C:\WINDOWS\system32\config\BCD-Template 2014-02-15 21:29 - 2014-02-15 21:29 - 03395920 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSService.dll 2014-02-15 21:29 - 2014-02-15 21:29 - 01113040 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll 2014-02-15 21:29 - 2014-02-15 21:29 - 00848384 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll 2014-02-15 21:29 - 2014-02-15 21:29 - 00835584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll 2014-02-15 21:29 - 2014-02-15 21:29 - 00787968 _____ (Microsoft Corporation) C:\WINDOWS\system32\uDWM.dll 2014-02-15 21:29 - 2014-02-15 21:29 - 00695808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll 2014-02-15 21:29 - 2014-02-15 21:29 - 00570880 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdrm.dll 2014-02-15 21:29 - 2014-02-15 21:29 - 00548864 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll 2014-02-15 21:29 - 2014-02-15 21:29 - 00454656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll 2014-02-15 21:29 - 2014-02-15 21:29 - 00444928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdrm.dll 2014-02-15 21:29 - 2014-02-15 21:29 - 00393216 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMPhoto.dll 2014-02-15 21:29 - 2014-02-15 21:29 - 00348160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMPhoto.dll 2014-02-15 21:29 - 2014-02-15 21:29 - 00249856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll 2014-02-15 21:29 - 2014-02-15 21:29 - 00206336 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSClient.dll 2014-02-15 21:29 - 2014-02-15 21:29 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll 2014-02-15 21:29 - 2014-02-15 21:29 - 00174592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSClient.dll 2014-02-15 21:29 - 2014-02-15 21:29 - 00138240 _____ () C:\WINDOWS\system32\OEMLicense.dll 2014-02-15 21:29 - 2014-02-15 21:29 - 00103936 _____ () C:\WINDOWS\SysWOW64\OEMLicense.dll 2014-02-15 21:29 - 2014-02-15 21:29 - 00084480 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSCollect.exe 2014-02-15 21:29 - 2014-02-15 21:29 - 00075360 _____ (Microsoft Corporation) C:\WINDOWS\system32\imagehlp.dll 2014-02-15 21:29 - 2014-02-15 21:29 - 00070680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\imagehlp.dll 2014-02-15 21:29 - 2014-02-15 21:29 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcaui.exe 2014-02-15 21:29 - 2014-02-15 21:29 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pcaui.exe 2014-02-15 21:29 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\WinStore 2014-02-15 21:28 - 2014-02-15 21:28 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb 2014-02-15 21:28 - 2014-02-15 21:28 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb 2014-02-15 21:28 - 2014-02-15 21:28 - 02041856 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl 2014-02-15 21:28 - 2014-02-15 21:28 - 01964032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl 2014-02-15 21:28 - 2014-02-15 21:28 - 00708608 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll 2014-02-15 21:28 - 2014-02-15 21:28 - 00615936 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAgent.exe 2014-02-15 21:28 - 2014-02-15 21:28 - 00553472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll 2014-02-15 21:28 - 2014-02-15 21:28 - 00287744 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmregistration.dll 2014-02-15 21:28 - 2014-02-15 21:28 - 00240128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mdmregistration.dll 2014-02-15 21:28 - 2014-02-15 21:28 - 00197120 _____ (Microsoft Corporation) C:\WINDOWS\system32\scrrun.dll 2014-02-15 21:28 - 2014-02-15 21:28 - 00195584 _____ (Microsoft Corporation) C:\WINDOWS\system32\msrating.dll 2014-02-15 21:28 - 2014-02-15 21:28 - 00164864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrating.dll 2014-02-15 21:28 - 2014-02-15 21:28 - 00156672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scrrun.dll 2014-02-15 21:28 - 2014-02-15 21:28 - 00139264 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieUnatt.exe 2014-02-15 21:28 - 2014-02-15 21:28 - 00112128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieUnatt.exe 2014-02-15 21:28 - 2014-02-15 21:28 - 00111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollector.exe 2014-02-15 21:28 - 2014-02-15 21:28 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll 2014-02-15 21:28 - 2014-02-15 21:28 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesetup.dll 2014-02-15 21:28 - 2014-02-15 21:28 - 00053760 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll 2014-02-15 21:28 - 2014-02-15 21:28 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieetwproxystub.dll 2014-02-15 21:28 - 2014-02-15 21:28 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwproxystub.dll 2014-02-15 21:28 - 2014-02-15 21:28 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll 2014-02-15 21:28 - 2014-02-15 21:28 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll 2014-02-15 21:28 - 2014-02-15 21:28 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iernonce.dll 2014-02-15 21:28 - 2014-02-15 21:28 - 00004096 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollectorres.dll 2014-02-15 21:27 - 2014-02-15 21:27 - 13209088 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll 2014-02-15 21:27 - 2014-02-15 21:27 - 11702272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll 2014-02-15 21:27 - 2014-02-15 21:27 - 07416832 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll 2014-02-15 21:27 - 2014-02-15 21:27 - 04961792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Search.dll 2014-02-15 21:27 - 2014-02-15 21:27 - 01462216 _____ (Microsoft Corporation) C:\WINDOWS\system32\propsys.dll 2014-02-15 21:27 - 2014-02-15 21:27 - 01202888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\propsys.dll 2014-02-15 21:27 - 2014-02-15 21:27 - 01105408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFolder.dll 2014-02-15 21:27 - 2014-02-15 21:27 - 00830976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchFolder.dll 2014-02-15 21:27 - 2014-02-15 21:27 - 00009701 _____ () C:\WINDOWS\SysWOW64\connectedsearch-results.searchconnector-ms 2014-02-15 21:27 - 2014-02-15 21:27 - 00009701 _____ () C:\WINDOWS\system32\connectedsearch-results.searchconnector-ms 2014-02-15 21:27 - 2013-08-22 16:36 - 00000000 ___RD () C:\WINDOWS\ToastData 2014-02-15 21:27 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\MediaViewer 2014-02-15 21:27 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\FileManager 2014-02-15 21:27 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\Camera 2014-02-15 21:26 - 2014-02-15 21:26 - 21196664 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 18642504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 18577920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 13925888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 04604416 _____ (Microsoft Corporation) C:\WINDOWS\system32\d2d1.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 04217344 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncEngine.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 03936256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 03210528 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 02804528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2vdec.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 02804224 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 02617344 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 02397184 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10warp.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 02295808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 02071552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10warp.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 01503232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 01415680 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 01399176 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 01374384 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpmde.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 01227264 _____ (Microsoft Corporation) C:\WINDOWS\system32\mispace.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 01204968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmde.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 01119064 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys 2014-02-15 21:26 - 2014-02-15 21:26 - 01020928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 00980480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mispace.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 00919040 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 00870912 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDrive.exe 2014-02-15 21:26 - 2014-02-15 21:26 - 00834048 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 00809872 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 00745336 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 00744448 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 00720384 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveTelemetry.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 00663680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 00637952 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe 2014-02-15 21:26 - 2014-02-15 21:26 - 00628736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmCoreR.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 00589824 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastls.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 00584192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 00552624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 00513536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastls.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 00479744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe 2014-02-15 21:26 - 2014-02-15 21:26 - 00470016 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfds.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 00461824 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsGdiConverter.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 00433664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfds.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 00403456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys 2014-02-15 21:26 - 2014-02-15 21:26 - 00336384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsGdiConverter.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 00306688 _____ (Microsoft Corporation) C:\WINDOWS\system32\msieftp.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 00282112 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemEventsBrokerServer.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 00273920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msieftp.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 00273408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 00263168 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 00218112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Graphics.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 00207872 _____ (Microsoft Corporation) C:\WINDOWS\system32\deviceregistration.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 00202240 _____ (Microsoft Corporation) C:\WINDOWS\system32\ubpm.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 00142848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ipnat.sys 2014-02-15 21:26 - 2014-02-15 21:26 - 00142680 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBSTOR.SYS 2014-02-15 21:26 - 2014-02-15 21:26 - 00136704 _____ (Microsoft Corporation) C:\WINDOWS\system32\psmsrv.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 00121344 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveShell.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 00115712 _____ (Microsoft Corporation) C:\WINDOWS\system32\winbici.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 00105984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SkyDriveShell.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 00032088 _____ (Microsoft Corporation) C:\WINDOWS\system32\ploptin.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 00024064 _____ (Microsoft Corporation) C:\WINDOWS\system32\bi.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 00019456 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BtaMPM.sys 2014-02-15 21:26 - 2013-08-22 14:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\Dism 2014-02-15 21:26 - 2013-08-22 14:36 - 00000000 ____D () C:\WINDOWS\system32\Dism 2014-02-15 21:24 - 2014-02-15 21:24 - 07399256 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe 2014-02-15 21:24 - 2014-02-15 21:24 - 02896896 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll 2014-02-15 21:24 - 2014-02-15 21:24 - 02570240 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers.dll 2014-02-15 21:24 - 2014-02-15 21:24 - 02266624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll 2014-02-15 21:24 - 2014-02-15 21:24 - 02152448 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3.dll 2014-02-15 21:24 - 2014-02-15 21:24 - 02143744 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll 2014-02-15 21:24 - 2014-02-15 21:24 - 02140888 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll 2014-02-15 21:24 - 2014-02-15 21:24 - 01843712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Display.dll 2014-02-15 21:24 - 2014-02-15 21:24 - 01816576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Display.dll 2014-02-15 21:24 - 2014-02-15 21:24 - 01765384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll 2014-02-15 21:24 - 2014-02-15 21:24 - 01765376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll 2014-02-15 21:24 - 2014-02-15 21:24 - 01756160 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMPDMC.exe 2014-02-15 21:24 - 2014-02-15 21:24 - 01530200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys 2014-02-15 21:24 - 2014-02-15 21:24 - 01476184 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi 2014-02-15 21:24 - 2014-02-15 21:24 - 01391104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMPDMC.exe 2014-02-15 21:24 - 2014-02-15 21:24 - 01345536 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe 2014-02-15 21:24 - 2014-02-15 21:24 - 01317376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3.dll 2014-02-15 21:24 - 2014-02-15 21:24 - 01302528 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll 2014-02-15 21:24 - 2014-02-15 21:24 - 00922624 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll 2014-02-15 21:24 - 2014-02-15 21:24 - 00747008 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidcli.dll 2014-02-15 21:24 - 2014-02-15 21:24 - 00566784 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpncore.dll 2014-02-15 21:24 - 2014-02-15 21:24 - 00544768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlidcli.dll 2014-02-15 21:24 - 2014-02-15 21:24 - 00516496 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll 2014-02-15 21:24 - 2014-02-15 21:24 - 00406400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll 2014-02-15 21:24 - 2014-02-15 21:24 - 00382808 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys 2014-02-15 21:24 - 2014-02-15 21:24 - 00372568 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spaceport.sys 2014-02-15 21:24 - 2014-02-15 21:24 - 00358896 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcomp.dll 2014-02-15 21:24 - 2014-02-15 21:24 - 00325464 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBXHCI.SYS 2014-02-15 21:24 - 2014-02-15 21:24 - 00254464 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll 2014-02-15 21:24 - 2014-02-15 21:24 - 00225792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dcomp.dll 2014-02-15 21:24 - 2014-02-15 21:24 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll 2014-02-15 21:24 - 2014-02-15 21:24 - 00146776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\SerCx2.sys 2014-02-15 21:24 - 2014-02-15 21:24 - 00086872 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pdc.sys 2014-02-15 21:24 - 2014-02-15 21:24 - 00039768 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\intelpep.sys 2014-02-15 21:24 - 2014-02-15 21:24 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredentialMigrationHandler.dll 2014-02-15 21:24 - 2014-02-15 21:24 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredentialMigrationHandler.dll 2014-02-15 21:23 - 2014-02-15 21:23 - 00262144 _____ () C:\WINDOWS\system32\config\userdiff 2014-02-15 21:21 - 2014-02-15 21:21 - 00000000 ____D () C:\WINDOWS\SysWOW64\XPSViewer 2014-02-15 21:21 - 2014-02-15 21:21 - 00000000 ____D () C:\Program Files\Reference Assemblies 2014-02-15 21:21 - 2014-02-15 21:21 - 00000000 ____D () C:\Program Files\MSBuild 2014-02-15 21:21 - 2014-02-15 21:21 - 00000000 ____D () C:\Program Files (x86)\Reference Assemblies 2014-02-15 21:21 - 2014-02-15 21:21 - 00000000 ____D () C:\Program Files (x86)\MSBuild 2014-02-15 21:21 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\MUI 2014-02-15 21:21 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\MUI 2014-02-15 21:15 - 2013-06-27 19:48 - 01285343 _____ () C:\WINDOWS\WindowsUpdate (1).log 2014-02-15 18:45 - 2014-02-15 18:44 - 00000000 ____D () C:\WINDOWS\system32\MRT 2014-02-15 18:37 - 2014-02-15 18:37 - 00025722 _____ () C:\Users\Thomas\Documents\Windows 8_1-Upgrade-Assistent.html 2014-02-15 18:32 - 2014-02-15 18:32 - 04954736 _____ (Microsoft Corporation) C:\Users\Thomas\Downloads\WindowsUpgradeAssistant.exe 2014-02-15 18:22 - 2014-02-15 18:22 - 00000000 ____D () C:\Users\Thomas\AppData\Local\Macromedia 2014-02-15 18:20 - 2014-02-15 18:20 - 00000000 ____D () C:\ProgramData\McAfee Security Scan 2014-02-15 18:16 - 2014-02-15 18:16 - 00000000 ____D () C:\Users\Thomas\AppData\Roaming\Mozilla 2014-02-15 18:16 - 2014-02-15 18:16 - 00000000 ____D () C:\Users\Thomas\AppData\Local\Mozilla 2014-02-15 18:15 - 2014-02-15 18:15 - 24490112 _____ (Mozilla) C:\Users\Thomas\Downloads\Firefox_Setup_27.0.1.exe 2014-02-15 18:15 - 2014-02-15 18:15 - 00000000 ____D () C:\ProgramData\Mozilla 2014-02-15 18:15 - 2014-02-15 18:15 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service 2014-02-15 18:15 - 2014-02-15 18:15 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2014-02-15 17:59 - 2014-02-15 17:59 - 00000000 ____D () C:\Users\Thomas\AppData\Roaming\Macromedia 2014-02-15 17:58 - 2014-02-15 17:58 - 00000000 ____D () C:\Users\Thomas\AppData\Roaming\Atheros 2014-02-15 17:58 - 2013-05-13 04:16 - 00000000 ___HD () C:\OEM 2014-02-15 17:57 - 2014-02-15 17:57 - 00000000 ____D () C:\WINDOWS\System32\Tasks\WPD 2014-02-15 17:57 - 2014-02-15 17:57 - 00000000 ____D () C:\Users\Thomas\AppData\Local\VirtualStore 2014-02-15 17:57 - 2014-02-15 17:57 - 00000000 ____D () C:\ProgramData\OEM_YAHOO 2014-02-15 17:41 - 2014-02-15 17:40 - 00000000 _____ () C:\Recovery.txt 2014-02-15 16:53 - 2014-02-15 16:53 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf 2014-02-15 16:41 - 2014-02-15 16:41 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Musik 2014-02-15 16:41 - 2014-02-15 16:41 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Bilder 2014-02-15 16:41 - 2014-02-15 16:41 - 00000000 _SHDL () C:\Users\Default.migrated\Vorlagen 2014-02-15 16:41 - 2014-02-15 16:41 - 00000000 _SHDL () C:\Users\Default.migrated\Startmenü 2014-02-15 16:41 - 2014-02-15 16:41 - 00000000 _SHDL () C:\Users\Default.migrated\Netzwerkumgebung 2014-02-15 16:41 - 2014-02-15 16:41 - 00000000 _SHDL () C:\Users\Default.migrated\Lokale Einstellungen 2014-02-15 16:41 - 2014-02-15 16:41 - 00000000 _SHDL () C:\Users\Default.migrated\Eigene Dateien 2014-02-15 16:41 - 2014-02-15 16:41 - 00000000 _SHDL () C:\Users\Default.migrated\Druckumgebung 2014-02-15 16:41 - 2014-02-15 16:41 - 00000000 _SHDL () C:\Users\Default.migrated\Documents\Eigene Musik 2014-02-15 16:41 - 2014-02-15 16:41 - 00000000 _SHDL () C:\Users\Default.migrated\Documents\Eigene Bilder 2014-02-15 16:41 - 2014-02-15 16:41 - 00000000 _SHDL () C:\Users\Default.migrated\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-02-15 16:41 - 2014-02-15 16:41 - 00000000 _SHDL () C:\Users\Default.migrated\AppData\Local\Verlauf 2014-02-15 16:41 - 2014-02-15 16:41 - 00000000 _SHDL () C:\Users\Default.migrated\AppData\Local\Anwendungsdaten 2014-02-15 16:41 - 2014-02-15 16:41 - 00000000 _SHDL () C:\Users\Default.migrated\Anwendungsdaten 2014-02-15 16:41 - 2014-02-15 16:41 - 00000000 _SHDL () C:\Programme 2014-02-15 16:41 - 2014-02-15 16:41 - 00000000 _SHDL () C:\ProgramData\Vorlagen 2014-02-15 16:41 - 2014-02-15 16:41 - 00000000 _SHDL () C:\ProgramData\Startmenü 2014-02-15 16:41 - 2014-02-15 16:41 - 00000000 _SHDL () C:\ProgramData\Dokumente 2014-02-15 16:41 - 2014-02-15 16:41 - 00000000 _SHDL () C:\ProgramData\Anwendungsdaten 2014-02-15 16:41 - 2014-02-15 16:41 - 00000000 _SHDL () C:\Program Files\Gemeinsame Dateien 2014-02-15 16:41 - 2014-02-15 16:41 - 00000000 _SHDL () C:\Dokumente und Einstellungen 2014-02-11 04:04 - 2014-03-12 13:30 - 04189184 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys 2014-02-11 03:43 - 2014-03-12 13:30 - 00488448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qedit.dll 2014-02-11 03:04 - 2014-03-12 13:30 - 00586240 _____ (Microsoft Corporation) C:\WINDOWS\system32\qedit.dll Some content of TEMP: ==================== C:\Users\Thomas\AppData\Local\Temp\BackupSetup.exe C:\Users\Thomas\AppData\Local\Temp\SHSetup.exe C:\Users\Thomas\AppData\Local\Temp\System.Data.SQLite.dll C:\Users\Thomas\AppData\Local\Temp\System.Data.SQLite41120.dll ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\rpcss.dll => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys [2014-03-12 13:31] - [2014-01-31 17:15] - 0311640 ____A (Microsoft Corporation) C85C075DE5B6D0FE116043054DE8EE02 LastRegBack: 2014-03-10 09:22 ==================== End Of Log ============================ |