PU.Optional.Conduit... eingefangen

AnneSommer · 06.04.2014, 00:27

Hallo

Ich habe mir verschieden Pop.Optional.Conduit Version eingefangen. Hier ist der Malwarebyte
Report

Code:

ATTFilter

 Malwarebytes Anti-Malware 
www.malwarebytes.org

Suchlauf Datum: 06.04.2014
Suchlauf-Zeit: 01:23:01
Logdatei: Malwarebytes060414.txt
Administrator: Ja

Version: 2.00.1.1004
Malware Datenbank: v2014.04.05.05
Rootkit Datenbank: v2014.03.27.01
Lizenz: Kostenlos
Malware Schutz: Deaktiviert
Bösartiger Webseiten Schutz: Deaktiviert
Chameleon: Deaktiviert

Betriebssystem: Windows 8.1
CPU: x64
Dateisystem: NTFS
Benutzer: User

Suchlauf-Art: Benutzerdefinierter Suchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 406541
Verstrichene Zeit: 32 Min, 35 Sek

Speicher: Aktiviert
Autostart: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Shuriken: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

Prozesse: 0
(No malicious items detected)

Module: 0
(No malicious items detected)

Registrierungsschlüssel: 0
(No malicious items detected)

Registrierungswerte: 0
(No malicious items detected)

Registrierungsdaten: 0
(No malicious items detected)

Ordner: 0
(No malicious items detected)

Dateien: 21
PUP.Optional.Conduit.A, C:\AdwCleaner\Quarantine\C\Program Files (x86)\SearchProtect\Main\bin\CltMngSvc.exe.vir, , [dbdef82eec8f32045386ed295aa79f61], 
PUP.Optional.Conduit.A, C:\AdwCleaner\Quarantine\C\Program Files (x86)\SearchProtect\Main\bin\SPTool.dll.vir, , [576265c10b7000368455a27457aa41bf], 
PUP.Optional.Conduit.A, C:\AdwCleaner\Quarantine\C\Program Files (x86)\SearchProtect\Main\bin\uninstall.exe.vir, , [3a7f190d2e4d7cbaaf2a63b356ab36ca], 
PUP.Optional.Conduit.A, C:\AdwCleaner\Quarantine\C\Program Files (x86)\SearchProtect\SearchProtect\bin\cltmng.exe.vir, , [f2c78f97196257df97426bab32cffc04], 
PUP.Optional.Conduit.A, C:\AdwCleaner\Quarantine\C\Program Files (x86)\SearchProtect\SearchProtect\bin\SPTool64.exe.vir, , [2e8b50d61c5f59ddf0e9bb5b7c859769], 
PUP.Optional.Conduit.A, C:\AdwCleaner\Quarantine\C\Program Files (x86)\SearchProtect\SearchProtect\bin\SPVC32.dll.vir, , [1f9ac2642556c96d8b4e898d12efcd33], 
PUP.Optional.Conduit.A, C:\AdwCleaner\Quarantine\C\Program Files (x86)\SearchProtect\SearchProtect\bin\SPVC32Loader.dll.vir, , [ebce1e0823582115924727ef768b35cb], 
PUP.Optional.Conduit.A, C:\AdwCleaner\Quarantine\C\Program Files (x86)\SearchProtect\SearchProtect\bin\SPVC64.dll.vir, , [c3f661c5de9dbb7b766340d6c33e6898], 
PUP.Optional.Conduit.A, C:\AdwCleaner\Quarantine\C\Program Files (x86)\SearchProtect\SearchProtect\bin\SPVC64Loader.dll.vir, , [c9f0fe289ae1d85ee3f6ab6bcf320df3], 
PUP.Optional.Conduit.A, C:\AdwCleaner\Quarantine\C\Program Files (x86)\SearchProtect\UI\bin\cltmngui.exe.vir, , [b4052ef8bdbe37ffb524b165758cb64a], 
PUP.Optional.Conduit.A, C:\Users\User\AppData\Local\Microsoft\Windows\INetCache\IE\Q833UFYX\spstub[1].exe, , [f5c40125ff7c8fa7db3a50c502ffa858], 
PUP.Optional.Conduit.A, C:\Users\User\AppData\Local\Microsoft\Windows\INetCache\IE\R4E2HLS4\SPSetup[1].exe, , [bcfd0b1bf388fb3b4b8ece48bb46d030], 
PUP.Optional.SearchProtect.A, C:\Users\User\AppData\Local\Temp\nsiA57C.exe, , [cdec95919cdf41f55495ed3419e8bb45], 
PUP.Optional.SearchProtect.A, C:\Users\User\AppData\Local\Temp\nsnBF52.exe, , [d4e562c4c4b7ac8a9a4fc75a6d949e62], 
PUP.Optional.SearchProtect.A, C:\Users\User\AppData\Local\Temp\nsxBDBB.exe, , [07b2cc5aa1dafd399f4a5cc52dd47e82], 
PUP.Optional.SearchProtect.A, C:\Users\User\AppData\Local\Temp\nsyA713.exe, , [9f1a969093e853e37d6cb66bfd04dd23], 
PUP.Optional.Conduit.A, C:\Users\User\AppData\Local\Temp\utt8CB3.tmp.exe, , [4277b670c9b2989e789db46142bf7a86], 
PUP.Optional.Conduit.A, C:\Users\User\AppData\Local\Temp\nsl936A\SpSetup.exe, , [526759cdc6b581b55a7f779f28d9c53b], 
PUP.Optional.Conduit.A, D:\Datensicherung\Laufwerk(C)\Dokumente und Einstellungen\Sommer\Eigene Dateien\Downloads\HSS-2.23-install-anchorfree-247-conduit3.exe, , [15a47fa73a412412ba8cb08f0100c13f], 
PUP.Optional.Conduit.A, D:\Datensicherung\Laufwerk(C)\Dokumente und Einstellungen\Sommer\Lokale Einstellungen\Temporary Internet Files\Content.IE5\QG6Z6DUF\mism[1].exe, , [9b1ed4522853ef47f839b56a02fe669a], 
PUP.Optional.Conduit.A, D:\Datensicherung\Laufwerk(C)\Dokumente und Einstellungen\Sommer\Lokale Einstellungen\Temporary Internet Files\Content.IE5\YXFIZOMJ\checktbexist[1].exe, , [ab0ea2841b6095a11878d24ce51b9f61], 

Physische Sektoren: 0
(No malicious items detected)


(end)

Löschen oder in die Quarantäne?

Bei meinen Eltern habe Ich verschieden Plagegeister durch die Installation eines Programme seingefangen. Dazu mache Ich aber wohl einen seperaten Thread auf. Denn dort kann das Antivirenprogramm nicht mehr aktviert werden.

Anne

schrauber · 06.04.2014, 07:36

hi,

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:

FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

Starte jetzt FRST.
Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

AnneSommer · 06.04.2014, 10:58

Hallo

Hier kommt erstmal die FRST Datei Teil 1

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-03-2014
Ran by User (administrator) on ARBEIT_PC on 06-04-2014 11:52:43
Running from C:\Users\User\Downloads
Windows 8.1 Pro (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgrsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgcsrva.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgnsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgemca.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\WINDOWS\system32\igfxsrvc.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgui.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PrivacyIconClient.exe
(Microsoft Corporation) C:\WINDOWS\ImmersiveControlPanel\SystemSettings.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13423688 2013-02-26] (Realtek Semiconductor)
HKLM\...\Run: [IAStorIcon] - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [286704 2013-04-30] (Intel Corporation)
HKLM-x32\...\Run: [IMSS] - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe [134616 2013-04-11] (Intel Corporation)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-12-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AVG_UI] - C:\Program Files (x86)\AVG\AVG2014\avgui.exe [4971024 2014-03-19] (AVG Technologies CZ, s.r.o.)
Winlogon\Notify\igfxcui: C:\WINDOWS\system32\igfxdev.dll (Intel Corporation)
AppInit_DLLs: C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC64Loader.dll => C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC64Loader.dll File Not Found
AppInit_DLLs-x32: C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC32Loader.dll => "C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC32Loader.dll" File Not Found

==================== Internet (Whitelisted) ====================

BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\qj4nih19.default-1396727863678
FF Homepage: https://www.google.com/?gfe_rd=cr&ei=KIFAU9qgF8yK8QeLxIGgAw
FF NetworkProxy: "backup.ftp", "66.35.68.145"
FF NetworkProxy: "backup.ftp_port", 8089
FF NetworkProxy: "backup.gopher", "216.24.198.210"
FF NetworkProxy: "backup.gopher_port", 80
FF NetworkProxy: "backup.socks", "66.35.68.145"
FF NetworkProxy: "backup.socks_port", 8089
FF NetworkProxy: "backup.ssl", "66.35.68.145"
FF NetworkProxy: "backup.ssl_port", 8089
FF NetworkProxy: "ftp", "168.63.150.60"
FF NetworkProxy: "ftp_port", 3128
FF NetworkProxy: "gopher", "216.24.198.210"
FF NetworkProxy: "gopher_port", 80
FF NetworkProxy: "http", "168.63.150.60"
FF NetworkProxy: "http_port", 3128
FF NetworkProxy: "no_proxies_on", ""
FF NetworkProxy: "share_proxy_settings", true
FF NetworkProxy: "socks", "168.63.150.60"
FF NetworkProxy: "socks_port", 3128
FF NetworkProxy: "ssl", "168.63.150.60"
FF NetworkProxy: "ssl_port", 3128
FF NetworkProxy: "type", 4
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_77.dll ()
FF Plugin: @java.com/DTPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_77.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1210150.dll (Adobe Systems, Inc.)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=3.0.72 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @Nero.com/KM - C:\PROGRA~2\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL (Nero AG)
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\qj4nih19.default-1396727863678\searchplugins\searchplugins-backup
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Microsoft .NET Framework Assistant - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\qj4nih19.default-1396727863678\Extensions\{20a82645-c095-46ed-80e3-08825760534b} [2014-04-05]
FF Extension: ProxTube - Unblock YouTube - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\qj4nih19.default-1396727863678\Extensions\{2541D29A-DB9E-4c1e-949A-31EFB4AEF4E7} [2014-04-05]
FF Extension: Proxy-Listen.de - Proxyswitcher - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\qj4nih19.default-1396727863678\Extensions\admin@proxy-listen.de.xpi [2014-04-05]
FF Extension: anonymoX - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\qj4nih19.default-1396727863678\Extensions\client@anonymox.net.xpi [2014-04-05]
FF Extension: Adblock Plus - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\qj4nih19.default-1396727863678\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-04-05]
FF Extension: BetterPrivacy - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\qj4nih19.default-1396727863678\Extensions\{d40f5e7b-d2cf-4856-b441-cc613eeffbe3}.xpi [2014-04-05]

==================== Services (Whitelisted) =================

S3 AppleChargerSrv; C:\Windows\System32\AppleChargerSrv.exe [31272 2010-04-06] ()
R2 AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe [3782672 2014-02-23] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe [348008 2013-09-24] (AVG Technologies CZ, s.r.o.)
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15344 2013-04-30] (Intel Corporation)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [820184 2013-02-13] (Intel(R) Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-04-11] (Intel Corporation)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [348392 2014-03-20] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2014-03-20] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

S0 ADP80XX; C:\Windows\System32\drivers\ADP80XX.SYS [782176 2013-08-22] (PMC-Sierra)
R1 AppleCharger; C:\Windows\System32\DRIVERS\AppleCharger.sys [21584 2013-02-19] ()
S0 Avgboota; C:\Windows\System32\DRIVERS\avgboota.sys [20496 2013-09-04] (AVG Technologies CZ, s.r.o.)
R1 Avgdiska; C:\Windows\System32\DRIVERS\avgdiska.sys [150808 2013-11-25] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [243480 2013-11-25] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [196376 2013-11-25] (AVG Technologies CZ, s.r.o.)
R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [212280 2013-11-01] (AVG Technologies CZ, s.r.o.)
R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [294712 2013-10-31] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [123704 2013-10-01] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [31544 2013-09-10] (AVG Technologies CZ, s.r.o.)
R1 Avgwfpa; C:\Windows\system32\DRIVERS\avgwfpa.sys [252728 2013-10-21] (AVG Technologies CZ, s.r.o.)
S3 bcmfn2; C:\Windows\System32\drivers\bcmfn2.sys [17624 2013-08-13] (Windows (R) Win 7 DDK provider)
S3 iaLPSSi_GPIO; C:\Windows\System32\drivers\iaLPSSi_GPIO.sys [24568 2013-07-30] (Intel Corporation)
S3 iaLPSSi_I2C; C:\Windows\System32\drivers\iaLPSSi_I2C.sys [99320 2013-07-25] (Intel Corporation)
S0 iaStorAV; C:\Windows\System32\drivers\iaStorAV.sys [651248 2013-08-10] (Intel Corporation)
R0 intelpep; C:\Windows\System32\drivers\intelpep.sys [39768 2014-03-20] (Microsoft Corporation)
S3 kbldfltr; C:\Windows\System32\drivers\kbldfltr.sys [22272 2013-11-14] (Microsoft Corporation)
S0 LSI_SAS3; C:\Windows\System32\drivers\lsi_sas3.sys [81760 2013-08-22] (LSI Corporation)
R3 NdisVirtualBus; C:\Windows\System32\drivers\NdisVirtualBus.sys [16384 2013-08-22] (Microsoft Corporation)
S3 netvsc; C:\Windows\system32\DRIVERS\netvsc63.sys [87040 2013-08-22] (Microsoft Corporation)
S3 ReFS; C:\Windows\System32\Drivers\ReFS.sys [924512 2013-08-22] (Microsoft Corporation)
S3 SerCx2; C:\Windows\System32\drivers\SerCx2.sys [146776 2014-03-20] (Microsoft Corporation)
S0 stornvme; C:\Windows\System32\drivers\stornvme.sys [57176 2013-11-14] (Microsoft Corporation)
S3 UEFI; C:\Windows\System32\drivers\UEFI.sys [26976 2013-08-22] (Microsoft Corporation)
S1 UsbCharger; C:\Windows\System32\DRIVERS\UsbCharger.sys [21584 2013-05-06] ()
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [124760 2014-03-20] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-04-06 11:50 - 2014-04-06 11:50 - 00031515 _____ () C:\Users\User\Downloads\Shortcut.txt
2014-04-06 11:50 - 2014-04-06 11:50 - 00022301 _____ () C:\Users\User\Downloads\Addition.txt
2014-04-06 11:49 - 2014-04-06 11:52 - 00012843 _____ () C:\Users\User\Downloads\FRST.txt
2014-04-06 11:49 - 2014-04-06 11:52 - 00000000 ____D () C:\FRST
2014-04-06 11:46 - 2014-04-06 11:46 - 02157056 _____ (Farbar) C:\Users\User\Downloads\FRST64.exe
2014-04-06 11:45 - 2014-04-06 11:45 - 01145856 _____ (Farbar) C:\Users\User\Downloads\FRST.exe
2014-04-06 11:44 - 2014-04-06 11:44 - 00000000 ____D () C:\Users\User\AppData\Local\Intel_Corporation
2014-04-06 01:23 - 2014-04-06 01:23 - 00004321 _____ () C:\Users\User\Documents\Malwarebytes060414.txt
2014-04-06 01:15 - 2014-04-06 01:15 - 00084333 _____ () C:\Users\User\Documents\OLtPapa.odt
2014-04-06 00:48 - 2014-04-06 00:49 - 00119512 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2014-04-06 00:48 - 2014-04-06 00:49 - 00001129 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-04-06 00:48 - 2014-04-06 00:49 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-04-06 00:48 - 2014-04-06 00:48 - 17523384 _____ (Malwarebytes Corporation ) C:\Users\User\Downloads\mbam-setup-2.0.0.1000.exe
2014-04-06 00:48 - 2014-04-06 00:48 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-04-06 00:48 - 2014-04-03 09:51 - 00088280 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2014-04-06 00:48 - 2014-04-03 09:51 - 00063192 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys
2014-04-06 00:48 - 2014-04-03 09:50 - 00025816 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys
2014-04-06 00:14 - 2014-04-06 00:34 - 00000000 ____D () C:\AdwCleaner
2014-04-06 00:09 - 2014-04-06 00:09 - 01426178 _____ () C:\Users\User\Downloads\adwcleaner.exe
2014-04-05 23:55 - 2014-04-05 23:55 - 00000893 _____ () C:\Users\User\Desktop\BitTorrent.lnk
2014-04-05 23:55 - 2014-04-05 23:55 - 00000873 _____ () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\BitTorrent.lnk
2014-04-05 23:54 - 2014-04-05 23:54 - 01642072 _____ (BitTorrent Inc.) C:\Users\User\Downloads\BitTorrent_7.9.1.30769.exe
2014-04-05 23:54 - 2014-04-05 23:54 - 01642072 _____ (BitTorrent Inc.) C:\Users\User\Downloads\BitTorrent_7.9.1.30769(1).exe
2014-04-05 22:55 - 2014-03-26 00:30 - 00001001 _____ () C:\Users\User\Documents\indexfile.txt
2014-04-05 22:54 - 2014-04-05 22:54 - 01035926 _____ () C:\Users\User\Downloads\MozBackup-1.5.1-EN.exe
2014-04-05 22:54 - 2014-04-05 22:54 - 00001054 _____ () C:\Users\Public\Desktop\MozBackup.lnk
2014-04-05 22:54 - 2014-04-05 22:54 - 00000000 ____D () C:\Program Files (x86)\MozBackup
2014-04-05 22:48 - 2014-04-06 01:50 - 00000000 ____D () C:\Users\User\AppData\Roaming\BitTorrent
2014-04-05 21:57 - 2014-04-05 21:57 - 00000000 ____D () C:\Users\User\Desktop\Alte Firefox-Daten
2014-04-05 21:11 - 2014-04-05 21:11 - 00009443 _____ () C:\Users\User\Documents\teseskklappt.odt
2014-04-03 20:58 - 2014-03-27 13:58 - 652747882 _____ () C:\Users\User\Documents\Thunderbird 24.4.0 (de) - 2014-03-27.pcv
2014-04-03 20:58 - 2014-03-26 01:28 - 571328306 _____ () C:\Users\User\Documents\Thunderbird 24.4.0 (de) - 2014-03-26.pcv
2014-04-03 20:57 - 2014-03-26 01:31 - 26713231 _____ () C:\Users\User\Documents\Firefox 27.0.1 (de) - 2014-03-26.pcv
2014-04-03 20:57 - 2014-03-26 01:08 - 00418189 _____ () C:\Users\User\Documents\Firefoxbookmarks-2014-03-26
2014-04-03 20:10 - 2014-04-03 20:10 - 00000000 ____D () C:\Users\User\AppData\Roaming\LibreOffice
2014-04-03 19:58 - 2014-04-03 19:58 - 00000000 ____D () C:\Users\Default\AppData\Roaming\TuneUp Software
2014-04-03 19:58 - 2014-04-03 19:58 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\TuneUp Software
2014-04-03 19:55 - 2014-04-03 19:55 - 00002113 _____ () C:\Users\Public\Desktop\Mozilla Thunderbird.lnk
2014-04-03 19:55 - 2014-04-03 19:55 - 00000000 ____D () C:\Users\User\AppData\Roaming\Thunderbird
2014-04-03 19:55 - 2014-04-03 19:55 - 00000000 ____D () C:\Users\User\AppData\Local\Thunderbird
2014-04-03 19:54 - 2014-04-03 19:54 - 21987424 _____ (Mozilla) C:\Users\User\Downloads\Thunderbird_Setup_de24.4.0.exe
2014-04-03 19:54 - 2014-04-03 19:54 - 00000000 ____D () C:\Users\User\AppData\Roaming\Macromedia
2014-04-03 19:54 - 2014-04-03 19:54 - 00000000 ____D () C:\Users\User\AppData\Local\Macromedia
2014-04-03 19:54 - 2014-04-03 19:54 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird
2014-04-01 09:35 - 2014-04-01 09:35 - 00000000 ____D () C:\Users\User\AppData\Roaming\vlc
2014-04-01 09:16 - 2014-04-01 09:16 - 00000742 _____ () C:\Users\User\Desktop\Datensicherung - Verknüpfung.lnk
2014-03-25 00:19 - 2014-03-01 08:05 - 23133696 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2014-03-25 00:19 - 2014-03-01 06:58 - 02765824 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2014-03-25 00:19 - 2014-03-01 06:30 - 17074688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2014-03-25 00:19 - 2014-03-01 06:17 - 00218624 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2014-03-25 00:19 - 2014-03-01 05:54 - 05768704 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2014-03-25 00:19 - 2014-03-01 05:47 - 02168320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2014-03-25 00:19 - 2014-03-01 05:42 - 00627200 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2014-03-25 00:19 - 2014-03-01 05:18 - 13051904 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2014-03-25 00:19 - 2014-03-01 05:14 - 04244480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2014-03-25 00:19 - 2014-03-01 05:10 - 02334208 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2014-03-25 00:19 - 2014-03-01 05:03 - 00524288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2014-03-25 00:19 - 2014-03-01 04:57 - 11266048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2014-03-25 00:19 - 2014-03-01 04:38 - 01393664 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2014-03-25 00:19 - 2014-03-01 04:32 - 01820160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2014-03-25 00:19 - 2014-03-01 04:27 - 01156096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2014-03-25 00:19 - 2014-03-01 04:25 - 00817664 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2014-03-25 00:19 - 2014-03-01 04:25 - 00703488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2014-03-25 00:18 - 2014-03-25 00:20 - 00000000 ____D () C:\Program Files (x86)\Nero
2014-03-25 00:18 - 2014-03-25 00:19 - 00000000 ____D () C:\ProgramData\Nero
2014-03-25 00:14 - 2014-03-25 00:14 - 00001484 _____ () C:\Users\Public\Desktop\LibreOffice 4.2.lnk
2014-03-25 00:13 - 2014-03-25 00:14 - 00000000 ____D () C:\Program Files (x86)\LibreOffice 4
2014-03-24 17:55 - 2014-03-24 17:55 - 00000000 ____D () C:\Users\User\AppData\Roaming\TuneUp Software
2014-03-24 17:55 - 2014-03-24 17:55 - 00000000 ____D () C:\Users\User\AppData\Roaming\AVG2014
2014-03-24 17:54 - 2014-03-24 17:55 - 00000000 ____D () C:\ProgramData\AVG2014
2014-03-24 17:54 - 2014-03-24 17:54 - 00000000 ___HD () C:\$AVG
2014-03-24 17:54 - 2014-03-24 17:54 - 00000000 ____D () C:\Program Files (x86)\AVG
2014-03-24 17:53 - 2014-04-06 11:40 - 00000000 ____D () C:\ProgramData\MFAData
2014-03-24 17:53 - 2014-04-03 20:59 - 00000000 ____D () C:\Users\User\AppData\Local\Avg2014
2014-03-24 17:53 - 2014-03-24 17:53 - 00000000 ____D () C:\Users\User\AppData\Local\MFAData
2014-03-24 17:33 - 2014-03-24 17:33 - 00000000 ___RD () C:\WINDOWS\BrowserChoice
2014-03-20 16:31 - 2014-04-06 11:38 - 00003930 _____ () C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{2033FA2E-7191-41AE-B4E8-6F112590EA2B}
2014-03-20 16:30 - 2014-04-06 11:52 - 01893953 _____ () C:\WINDOWS\WindowsUpdate.log
2014-03-20 16:30 - 2014-03-20 16:30 - 00001465 _____ () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-03-20 16:30 - 2014-03-20 16:30 - 00000020 ___SH () C:\Users\User\ntuser.ini
2014-03-20 16:30 - 2014-03-20 16:30 - 00000000 _SHDL () C:\Users\Default\Vorlagen
2014-03-20 16:30 - 2014-03-20 16:30 - 00000000 _SHDL () C:\Users\Default\Startmenü
2014-03-20 16:30 - 2014-03-20 16:30 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung
2014-03-20 16:30 - 2014-03-20 16:30 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen
2014-03-20 16:30 - 2014-03-20 16:30 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien
2014-03-20 16:30 - 2014-03-20 16:30 - 00000000 _SHDL () C:\Users\Default\Druckumgebung
2014-03-20 16:30 - 2014-03-20 16:30 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik
2014-03-20 16:30 - 2014-03-20 16:30 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder
2014-03-20 16:30 - 2014-03-20 16:30 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-03-20 16:30 - 2014-03-20 16:30 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf
2014-03-20 16:30 - 2014-03-20 16:30 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten
2014-03-20 16:30 - 2014-03-20 16:30 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten
2014-03-20 16:30 - 2014-03-20 16:30 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik
2014-03-20 16:30 - 2014-03-20 16:30 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder
2014-03-20 16:30 - 2014-03-20 16:30 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-03-20 16:30 - 2014-03-20 16:30 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf
2014-03-20 16:30 - 2014-03-20 16:30 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten
2014-03-20 16:29 - 2014-03-20 16:29 - 00023572 _____ () C:\WINDOWS\system32\emptyregdb.dat
2014-03-20 16:28 - 2014-03-20 16:29 - 00020958 _____ () C:\WINDOWS\diagwrn.xml
2014-03-20 16:28 - 2014-03-20 16:29 - 00020958 _____ () C:\WINDOWS\diagerr.xml
2014-03-20 16:28 - 2014-03-20 16:28 - 00000000 _SHDL () C:\Users\User\Vorlagen
2014-03-20 16:28 - 2014-03-20 16:28 - 00000000 _SHDL () C:\Users\User\Startmenü
2014-03-20 16:28 - 2014-03-20 16:28 - 00000000 _SHDL () C:\Users\User\Netzwerkumgebung
2014-03-20 16:28 - 2014-03-20 16:28 - 00000000 _SHDL () C:\Users\User\Lokale Einstellungen
2014-03-20 16:28 - 2014-03-20 16:28 - 00000000 _SHDL () C:\Users\User\Eigene Dateien
2014-03-20 16:28 - 2014-03-20 16:28 - 00000000 _SHDL () C:\Users\User\Druckumgebung
2014-03-20 16:28 - 2014-03-20 16:28 - 00000000 _SHDL () C:\Users\User\Documents\Eigene Musik
2014-03-20 16:28 - 2014-03-20 16:28 - 00000000 _SHDL () C:\Users\User\Documents\Eigene Bilder
2014-03-20 16:28 - 2014-03-20 16:28 - 00000000 _SHDL () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-03-20 16:28 - 2014-03-20 16:28 - 00000000 _SHDL () C:\Users\User\AppData\Local\Verlauf
2014-03-20 16:28 - 2014-03-20 16:28 - 00000000 _SHDL () C:\Users\User\AppData\Local\Anwendungsdaten
2014-03-20 16:28 - 2014-03-20 16:28 - 00000000 _SHDL () C:\Users\User\Anwendungsdaten
2014-03-20 16:28 - 2014-03-20 16:28 - 00000000 ___RD () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-03-20 16:28 - 2014-03-20 16:28 - 00000000 ____D () C:\WINDOWS\system32\config\bbimigrate
2014-03-20 16:28 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-03-20 16:28 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-03-20 16:28 - 2013-08-22 17:36 - 00000000 ____D () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-03-20 16:26 - 2014-03-25 00:21 - 00000000 ___DC () C:\WINDOWS\Panther
2014-03-20 16:26 - 2014-03-20 16:28 - 00000000 ____D () C:\Program Files\Intel
2014-03-20 16:26 - 2014-03-20 16:28 - 00000000 ____D () C:\Program Files (x86)\Intel
2014-03-20 16:26 - 2014-03-20 16:26 - 00000000 __SHD () C:\Recovery
2014-03-20 16:26 - 2014-03-20 16:26 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2014-03-20 16:26 - 2014-03-20 16:26 - 00000000 ____D () C:\WINDOWS\SysWOW64\RTCOM
2014-03-20 16:26 - 2014-03-20 16:26 - 00000000 ____D () C:\Program Files\Realtek
2014-03-20 16:26 - 2014-01-25 03:23 - 00064000 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.DLL
2014-03-20 16:26 - 2014-01-25 03:23 - 00060416 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.DLL
2014-03-20 16:25 - 2014-03-20 16:25 - 04189184 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2014-03-20 16:25 - 2014-03-20 16:25 - 03395920 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSService.dll
2014-03-20 16:25 - 2014-03-20 16:25 - 01643584 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2014-03-20 16:25 - 2014-03-20 16:25 - 01507704 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2014-03-20 16:25 - 2014-03-20 16:25 - 01113040 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2014-03-20 16:25 - 2014-03-20 16:25 - 00848384 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll
2014-03-20 16:25 - 2014-03-20 16:25 - 00835584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2014-03-20 16:25 - 2014-03-20 16:25 - 00787968 _____ (Microsoft Corporation) C:\WINDOWS\system32\uDWM.dll
2014-03-20 16:25 - 2014-03-20 16:25 - 00695808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll
2014-03-20 16:25 - 2014-03-20 16:25 - 00615936 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAgent.exe
2014-03-20 16:25 - 2014-03-20 16:25 - 00570880 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdrm.dll
2014-03-20 16:25 - 2014-03-20 16:25 - 00548864 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2014-03-20 16:25 - 2014-03-20 16:25 - 00454656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2014-03-20 16:25 - 2014-03-20 16:25 - 00444928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdrm.dll
2014-03-20 16:25 - 2014-03-20 16:25 - 00393216 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMPhoto.dll
2014-03-20 16:25 - 2014-03-20 16:25 - 00348160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMPhoto.dll
2014-03-20 16:25 - 2014-03-20 16:25 - 00287744 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmregistration.dll
2014-03-20 16:25 - 2014-03-20 16:25 - 00249856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2014-03-20 16:25 - 2014-03-20 16:25 - 00240128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mdmregistration.dll
2014-03-20 16:25 - 2014-03-20 16:25 - 00197120 _____ (Microsoft Corporation) C:\WINDOWS\system32\scrrun.dll
2014-03-20 16:25 - 2014-03-20 16:25 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2014-03-20 16:25 - 2014-03-20 16:25 - 00156672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scrrun.dll
2014-03-20 16:25 - 2014-03-20 16:25 - 00084480 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSCollect.exe
2014-03-20 16:25 - 2014-03-20 16:25 - 00075360 _____ (Microsoft Corporation) C:\WINDOWS\system32\imagehlp.dll
2014-03-20 16:25 - 2014-03-20 16:25 - 00070680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\imagehlp.dll
2014-03-20 16:25 - 2014-03-20 16:25 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcaui.exe
2014-03-20 16:25 - 2014-03-20 16:25 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pcaui.exe
2014-03-20 16:24 - 2014-03-20 16:24 - 13209088 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2014-03-20 16:24 - 2014-03-20 16:24 - 11702272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2014-03-20 16:24 - 2014-03-20 16:24 - 07416832 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll
2014-03-20 16:24 - 2014-03-20 16:24 - 04961792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Search.dll
2014-03-20 16:24 - 2014-03-20 16:24 - 04217344 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncEngine.dll
2014-03-20 16:24 - 2014-03-20 16:24 - 02804224 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll
2014-03-20 16:24 - 2014-03-20 16:24 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2014-03-20 16:24 - 2014-03-20 16:24 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2014-03-20 16:24 - 2014-03-20 16:24 - 02041856 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2014-03-20 16:24 - 2014-03-20 16:24 - 01964032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2014-03-20 16:24 - 2014-03-20 16:24 - 01462216 _____ (Microsoft Corporation) C:\WINDOWS\system32\propsys.dll
2014-03-20 16:24 - 2014-03-20 16:24 - 01202888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\propsys.dll
2014-03-20 16:24 - 2014-03-20 16:24 - 01105408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFolder.dll
2014-03-20 16:24 - 2014-03-20 16:24 - 01020928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll
2014-03-20 16:24 - 2014-03-20 16:24 - 00919040 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll
2014-03-20 16:24 - 2014-03-20 16:24 - 00870912 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDrive.exe
2014-03-20 16:24 - 2014-03-20 16:24 - 00830976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchFolder.dll
2014-03-20 16:24 - 2014-03-20 16:24 - 00720384 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveTelemetry.dll
2014-03-20 16:24 - 2014-03-20 16:24 - 00708608 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2014-03-20 16:24 - 2014-03-20 16:24 - 00628736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmCoreR.dll
2014-03-20 16:24 - 2014-03-20 16:24 - 00553472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll
2014-03-20 16:24 - 2014-03-20 16:24 - 00236888 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdFilter.sys
2014-03-20 16:24 - 2014-03-20 16:24 - 00195584 _____ (Microsoft Corporation) C:\WINDOWS\system32\msrating.dll
2014-03-20 16:24 - 2014-03-20 16:24 - 00164864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrating.dll
2014-03-20 16:24 - 2014-03-20 16:24 - 00139776 _____ (Microsoft Corporation) C:\WINDOWS\system32\poqexec.exe
2014-03-20 16:24 - 2014-03-20 16:24 - 00139264 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieUnatt.exe
2014-03-20 16:24 - 2014-03-20 16:24 - 00124760 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdNisDrv.sys
2014-03-20 16:24 - 2014-03-20 16:24 - 00124416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\poqexec.exe
2014-03-20 16:24 - 2014-03-20 16:24 - 00121344 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveShell.dll
2014-03-20 16:24 - 2014-03-20 16:24 - 00115712 _____ (Microsoft Corporation) C:\WINDOWS\system32\winbici.dll
2014-03-20 16:24 - 2014-03-20 16:24 - 00112128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieUnatt.exe
2014-03-20 16:24 - 2014-03-20 16:24 - 00111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollector.exe
2014-03-20 16:24 - 2014-03-20 16:24 - 00105984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SkyDriveShell.dll
2014-03-20 16:24 - 2014-03-20 16:24 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll
2014-03-20 16:24 - 2014-03-20 16:24 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesetup.dll
2014-03-20 16:24 - 2014-03-20 16:24 - 00053760 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll
2014-03-20 16:24 - 2014-03-20 16:24 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieetwproxystub.dll
2014-03-20 16:24 - 2014-03-20 16:24 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwproxystub.dll
2014-03-20 16:24 - 2014-03-20 16:24 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll
2014-03-20 16:24 - 2014-03-20 16:24 - 00035856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdBoot.sys
2014-03-20 16:24 - 2014-03-20 16:24 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll
2014-03-20 16:24 - 2014-03-20 16:24 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iernonce.dll
2014-03-20 16:24 - 2014-03-20 16:24 - 00009701 _____ () C:\WINDOWS\SysWOW64\connectedsearch-results.searchconnector-ms
2014-03-20 16:24 - 2014-03-20 16:24 - 00009701 _____ () C:\WINDOWS\system32\connectedsearch-results.searchconnector-ms
2014-03-20 16:24 - 2014-03-20 16:24 - 00004096 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollectorres.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 21199256 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 18643560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 18576384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 13949440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 06640640 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 06353960 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppsvc.exe
2014-03-20 16:23 - 2014-03-20 16:23 - 05770752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 04604416 _____ (Microsoft Corporation) C:\WINDOWS\system32\d2d1.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 04175360 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbgeng.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 03936256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 03210528 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 02873344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbgeng.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 02804528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2vdec.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 02617344 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 02543960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2014-03-20 16:23 - 2014-03-20 16:23 - 02397184 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10warp.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 02295808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 02152448 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 02143960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 02133208 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 02071552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10warp.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 01928144 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 01720560 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 01530712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2014-03-20 16:23 - 2014-03-20 16:23 - 01503232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 01486848 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbghelp.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 01472048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 01415680 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 01399176 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 01374384 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpmde.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 01371824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 01317376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 01287064 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel32.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 01238016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbghelp.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 01227264 _____ (Microsoft Corporation) C:\WINDOWS\system32\mispace.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 01214976 _____ (Microsoft Corporation) C:\WINDOWS\system32\schedsvc.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 01204968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmde.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 01119064 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys
2014-03-20 16:23 - 2014-03-20 16:23 - 01057280 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdvidcrl.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 01036288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kernel32.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00980480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mispace.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00960512 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00947712 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00914944 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgent.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00855552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdvidcrl.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00842752 _____ (Microsoft Corporation) C:\WINDOWS\system32\MsSpellCheckingFacility.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00834048 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00809872 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00802816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00770560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReAgent.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00764864 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00749056 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00745336 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00716288 _____ (Microsoft Corporation) C:\WINDOWS\system32\swprv.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00669352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00663680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00630272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MsSpellCheckingFacility.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00628736 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe
2014-03-20 16:23 - 2014-03-20 16:23 - 00589824 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastls.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00588800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00552624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00513536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastls.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00481944 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00478208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe
2014-03-20 16:23 - 2014-03-20 16:23 - 00470016 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfds.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00461312 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsGdiConverter.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00458616 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFault.exe
2014-03-20 16:23 - 2014-03-20 16:23 - 00447488 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppcomapi.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00433664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfds.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00419160 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00408576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdbss.sys
2014-03-20 16:23 - 2014-03-20 16:23 - 00408480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFault.exe
2014-03-20 16:23 - 2014-03-20 16:23 - 00407024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Faultrep.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00403456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
2014-03-20 16:23 - 2014-03-20 16:23 - 00386722 _____ () C:\WINDOWS\system32\ApnDatabase.xml
2014-03-20 16:23 - 2014-03-20 16:23 - 00382808 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2014-03-20 16:23 - 2014-03-20 16:23 - 00381168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00376320 _____ (Microsoft Corporation) C:\WINDOWS\system32\pnrpsvc.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00369280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Faultrep.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00336896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsGdiConverter.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00325464 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBXHCI.SYS
2014-03-20 16:23 - 2014-03-20 16:23 - 00311640 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\volsnap.sys
2014-03-20 16:23 - 2014-03-20 16:23 - 00306688 _____ (Microsoft Corporation) C:\WINDOWS\system32\msieftp.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00303616 _____ (Microsoft Corporation) C:\WINDOWS\system32\sti.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00282112 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemEventsBrokerServer.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00273920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msieftp.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00273408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00263168 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00249856 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpencom.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00233920 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00218112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Graphics.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00218112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sti.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00208896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpencom.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00207872 _____ (Microsoft Corporation) C:\WINDOWS\system32\deviceregistration.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00206336 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSClient.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00202240 _____ (Microsoft Corporation) C:\WINDOWS\system32\ubpm.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00178176 _____ (Microsoft Corporation) C:\WINDOWS\system32\easwrt.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00174592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSClient.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00160256 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWWIN.EXE
2014-03-20 16:23 - 2014-03-20 16:23 - 00142848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ipnat.sys
2014-03-20 16:23 - 2014-03-20 16:23 - 00142680 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBSTOR.SYS
2014-03-20 16:23 - 2014-03-20 16:23 - 00140800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\easwrt.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00138752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWWIN.EXE
2014-03-20 16:23 - 2014-03-20 16:23 - 00138240 _____ () C:\WINDOWS\system32\OEMLicense.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00136704 _____ (Microsoft Corporation) C:\WINDOWS\system32\psmsrv.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00131160 _____ (Microsoft Corporation) C:\WINDOWS\system32\easinvoker.exe
2014-03-20 16:23 - 2014-03-20 16:23 - 00103936 _____ () C:\WINDOWS\SysWOW64\OEMLicense.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsgqec.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tsgqec.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00032088 _____ (Microsoft Corporation) C:\WINDOWS\system32\ploptin.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00024064 _____ (Microsoft Corporation) C:\WINDOWS\system32\bi.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00019456 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BtaMPM.sys
2014-03-20 16:22 - 2014-03-20 16:22 - 07399256 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2014-03-20 16:22 - 2014-03-20 16:22 - 02896896 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll
2014-03-20 16:22 - 2014-03-20 16:22 - 02570240 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers.dll
2014-03-20 16:22 - 2014-03-20 16:22 - 02266624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll
2014-03-20 16:22 - 2014-03-20 16:22 - 02143744 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2014-03-20 16:22 - 2014-03-20 16:22 - 02140888 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
2014-03-20 16:22 - 2014-03-20 16:22 - 01843712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Display.dll
2014-03-20 16:22 - 2014-03-20 16:22 - 01816576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Display.dll
2014-03-20 16:22 - 2014-03-20 16:22 - 01765384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll
2014-03-20 16:22 - 2014-03-20 16:22 - 01765376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2014-03-20 16:22 - 2014-03-20 16:22 - 01756160 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMPDMC.exe
2014-03-20 16:22 - 2014-03-20 16:22 - 01476184 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2014-03-20 16:22 - 2014-03-20 16:22 - 01391104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMPDMC.exe
2014-03-20 16:22 - 2014-03-20 16:22 - 01345536 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe
2014-03-20 16:22 - 2014-03-20 16:22 - 01302528 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2014-03-20 16:22 - 2014-03-20 16:22 - 00922624 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2014-03-20 16:22 - 2014-03-20 16:22 - 00747008 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidcli.dll
2014-03-20 16:22 - 2014-03-20 16:22 - 00586240 _____ (Microsoft Corporation) C:\WINDOWS\system32\qedit.dll
2014-03-20 16:22 - 2014-03-20 16:22 - 00566784 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpncore.dll
2014-03-20 16:22 - 2014-03-20 16:22 - 00544768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlidcli.dll
2014-03-20 16:22 - 2014-03-20 16:22 - 00516496 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
2014-03-20 16:22 - 2014-03-20 16:22 - 00488448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qedit.dll
2014-03-20 16:22 - 2014-03-20 16:22 - 00449024 _____ (Microsoft Corporation) C:\WINDOWS\system32\appmgr.dll
2014-03-20 16:22 - 2014-03-20 16:22 - 00406400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll
2014-03-20 16:22 - 2014-03-20 16:22 - 00372568 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spaceport.sys
2014-03-20 16:22 - 2014-03-20 16:22 - 00366080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\appmgr.dll
2014-03-20 16:22 - 2014-03-20 16:22 - 00358896 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcomp.dll
2014-03-20 16:22 - 2014-03-20 16:22 - 00262144 _____ () C:\WINDOWS\system32\config\userdiff
2014-03-20 16:22 - 2014-03-20 16:22 - 00254464 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll
2014-03-20 16:22 - 2014-03-20 16:22 - 00225792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dcomp.dll
2014-03-20 16:22 - 2014-03-20 16:22 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll
2014-03-20 16:22 - 2014-03-20 16:22 - 00146776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\SerCx2.sys
2014-03-20 16:22 - 2014-03-20 16:22 - 00086872 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pdc.sys
2014-03-20 16:22 - 2014-03-20 16:22 - 00039768 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\intelpep.sys
2014-03-20 16:22 - 2014-03-20 16:22 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredentialMigrationHandler.dll
2014-03-20 16:22 - 2014-03-20 16:22 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredentialMigrationHandler.dll
2014-03-20 16:21 - 2014-03-20 16:21 - 00000000 ____D () C:\WINDOWS\SysWOW64\XPSViewer
2014-03-20 16:21 - 2014-03-20 16:21 - 00000000 ____D () C:\Program Files\Reference Assemblies
2014-03-20 16:21 - 2014-03-20 16:21 - 00000000 ____D () C:\Program Files\MSBuild
2014-03-20 16:21 - 2014-03-20 16:21 - 00000000 ____D () C:\Program Files (x86)\Reference Assemblies
2014-03-20 16:21 - 2014-03-20 16:21 - 00000000 ____D () C:\Program Files (x86)\MSBuild
2014-03-20 16:21 - 2013-08-03 06:48 - 01166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll
2014-03-20 16:21 - 2013-08-03 06:48 - 00124112 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2014-03-20 16:21 - 2013-08-03 06:48 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe
2014-03-20 16:21 - 2013-08-03 06:41 - 00778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll
2014-03-20 16:21 - 2013-08-03 06:41 - 00102608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2014-03-20 16:21 - 2013-08-03 06:41 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe
2014-03-20 16:09 - 2014-03-20 16:29 - 00006593 _____ () C:\WINDOWS\comsetup.log
2014-03-20 13:40 - 2014-03-20 13:40 - 00000000 ____D () C:\Users\User\AppData\Roaming\Mozilla
2014-03-20 13:40 - 2014-03-20 13:40 - 00000000 ____D () C:\Users\User\AppData\Local\Mozilla
2014-03-20 13:39 - 2014-03-20 13:39 - 00003550 _____ () C:\WINDOWS\System32\Tasks\CreateChoiceProcessTask
2014-03-20 12:48 - 2014-03-20 12:48 - 00000117 _____ () C:\WINDOWS\system32\netcfg-5187.txt
2014-03-20 12:48 - 2014-03-20 12:48 - 00000117 _____ () C:\WINDOWS\system32\netcfg-4968.txt
2014-03-20 12:46 - 2014-03-20 12:47 - 00000000 ____D () C:\WINDOWS\system32\MRT
2014-03-20 12:46 - 2014-03-02 15:05 - 90015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2014-03-20 12:46 - 2014-01-19 09:33 - 00270496 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2014-03-20 12:40 - 2013-05-04 06:51 - 00014848 ____N (Microsoft) C:\WINDOWS\system32\rars.rs
2014-03-20 12:40 - 2013-05-04 06:10 - 00014848 ____N (Microsoft) C:\WINDOWS\SysWOW64\rars.rs
2014-03-20 12:35 - 2014-03-20 12:35 - 00000117 _____ () C:\WINDOWS\system32\netcfg-5343.txt
2014-03-20 12:35 - 2014-03-20 12:35 - 00000117 _____ () C:\WINDOWS\system32\netcfg-5234.txt
2014-03-20 12:16 - 2014-04-06 11:39 - 00000884 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2014-03-20 12:16 - 2014-03-20 12:40 - 00003772 _____ () C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2014-03-20 12:16 - 2014-03-20 12:16 - 01199175 _____ () C:\WINDOWS\unins001.exe
2014-03-20 12:16 - 2014-03-20 12:16 - 01198049 _____ () C:\WINDOWS\unins000.exe
2014-03-20 12:16 - 2014-03-20 12:16 - 00021723 _____ () C:\WINDOWS\unins001.dat
2014-03-20 12:16 - 2014-03-20 12:16 - 00010818 _____ () C:\WINDOWS\unins000.dat
2014-03-20 12:16 - 2014-01-25 14:30 - 00131072 _____ (Sereby Corporation) C:\WINDOWS\SysWOW64\AiORuntimes.dll
2014-03-20 12:16 - 2013-12-23 15:44 - 00163480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comdlg32.ocx
2014-03-20 12:16 - 2013-12-20 01:48 - 01070232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mscomctl.ocx
2014-03-20 12:16 - 2013-12-20 01:48 - 00660120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mscomct2.ocx
2014-03-20 12:16 - 2013-12-20 01:48 - 00617896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comctl32.ocx
2014-03-20 12:16 - 2013-12-20 01:48 - 00444328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshflxgd.ocx
2014-03-20 12:16 - 2013-12-20 01:48 - 00416408 _____ (Microsoft Corporation ) C:\WINDOWS\SysWOW64\comct332.ocx
2014-03-20 12:16 - 2013-12-20 01:48 - 00279192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdatgrd.ocx
2014-03-20 12:16 - 2013-12-20 01:48 - 00259736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msflxgrd.ocx
2014-03-20 12:16 - 2013-12-20 01:48 - 00253080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdatlst.ocx
2014-03-20 12:16 - 2013-12-20 01:48 - 00222360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tabctl32.ocx
2014-03-20 12:16 - 2013-12-20 01:48 - 00219288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\richtx32.ocx
2014-03-20 12:16 - 2013-12-20 01:48 - 00218776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dblist32.ocx
2014-03-20 12:16 - 2013-12-20 01:48 - 00212112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mci32.ocx
2014-03-20 12:16 - 2013-12-20 01:48 - 00179352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmask32.ocx
2014-03-20 12:16 - 2013-12-20 01:48 - 00170920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comct232.ocx
2014-03-20 12:16 - 2013-12-20 01:48 - 00131728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msinet.ocx
2014-03-20 12:16 - 2013-12-20 01:48 - 00130712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msstdfmt.dll
2014-03-20 12:16 - 2013-12-20 01:48 - 00127640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mswinsck.ocx
2014-03-20 12:16 - 2013-12-20 01:48 - 00119960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mscomm32.ocx
2014-03-20 12:16 - 2013-12-20 01:48 - 00108696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msstkprp.dll
2014-03-20 12:16 - 2013-12-20 01:48 - 00104088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\picclp32.ocx
2014-03-20 12:16 - 2013-12-20 01:48 - 00084624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sysinfo.ocx
2014-03-20 12:16 - 2013-09-20 00:00 - 00269824 _____ (The OpenSSL Project, hxxp://www.openssl.org/) C:\WINDOWS\SysWOW64\libssl32.dll
2014-03-20 12:16 - 2013-09-11 10:55 - 00458608 _____ (AutoIt Team) C:\WINDOWS\SysWOW64\autoitx3.dll
2014-03-20 12:16 - 2013-08-31 21:40 - 03115385 _____ (Red Hat) C:\WINDOWS\SysWOW64\cygwin1.dll
2014-03-20 12:16 - 2013-02-11 10:35 - 01178624 _____ (The OpenSSL Project, hxxp://www.openssl.org/) C:\WINDOWS\SysWOW64\libeay32.dll
2014-03-20 12:16 - 2013-02-11 10:35 - 00269824 _____ (The OpenSSL Project, hxxp://www.openssl.org/) C:\WINDOWS\SysWOW64\ssleay32.dll
2014-03-20 12:16 - 2012-06-14 15:36 - 00107520 _____ () C:\WINDOWS\SysWOW64\zlib1.dll
2014-03-20 12:16 - 2012-04-03 17:11 - 00138752 _____ () C:\WINDOWS\SysWOW64\libpng15.dll
2014-03-20 12:16 - 2011-10-12 04:09 - 04033440 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\libmmd.dll
2014-03-20 12:16 - 2011-10-01 09:16 - 00445016 _____ (Creative Labs) C:\WINDOWS\SysWOW64\wrap_oal.dll
2014-03-20 12:16 - 2011-10-01 09:16 - 00109144 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\WINDOWS\SysWOW64\openal32.dll
2014-03-20 12:16 - 2011-01-12 14:36 - 01054208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfc71u.dll
2014-03-20 12:16 - 2011-01-12 14:25 - 00065536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfc71deu.dll
2014-03-20 12:16 - 2011-01-12 14:25 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfc71ita.dll
2014-03-20 12:16 - 2011-01-12 14:25 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfc71fra.dll
2014-03-20 12:16 - 2011-01-12 14:25 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfc71esp.dll
2014-03-20 12:16 - 2011-01-12 14:25 - 00057344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfc71enu.dll
2014-03-20 12:16 - 2011-01-12 14:25 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfc71kor.dll
2014-03-20 12:16 - 2011-01-12 14:25 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfc71jpn.dll
2014-03-20 12:16 - 2011-01-12 14:25 - 00045056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfc71cht.dll
2014-03-20 12:16 - 2011-01-12 14:25 - 00040960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfc71chs.dll
2014-03-20 12:16 - 2011-01-12 14:19 - 01060864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfc71.dll
2014-03-20 12:16 - 2011-01-12 13:53 - 00090112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\atl71.dll
2014-03-20 12:16 - 2010-06-27 18:44 - 00053248 _____ (Adobe Systems, Incorporated) C:\WINDOWS\system\plugin.dll
2014-03-20 12:16 - 2010-06-02 05:55 - 00527192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_7.dll
2014-03-20 12:16 - 2010-06-02 05:55 - 00518488 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_7.dll
2014-03-20 12:16 - 2010-06-02 05:55 - 00239960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_7.dll
2014-03-20 12:16 - 2010-06-02 05:55 - 00176984 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_7.dll
2014-03-20 12:16 - 2010-06-02 05:55 - 00077656 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_5.dll
2014-03-20 12:16 - 2010-06-02 05:55 - 00074072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_5.dll
2014-03-20 12:16 - 2010-05-26 12:41 - 02526056 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_43.dll
2014-03-20 12:16 - 2010-05-26 12:41 - 02401112 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_43.dll
2014-03-20 12:16 - 2010-05-26 12:41 - 02106216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_43.dll
2014-03-20 12:16 - 2010-05-26 12:41 - 01998168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_43.dll
2014-03-20 12:16 - 2010-05-26 12:41 - 01907552 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dcsx_43.dll
2014-03-20 12:16 - 2010-05-26 12:41 - 01868128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dcsx_43.dll
2014-03-20 12:16 - 2010-05-26 12:41 - 00511328 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_43.dll
2014-03-20 12:16 - 2010-05-26 12:41 - 00470880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_43.dll
2014-03-20 12:16 - 2010-05-26 12:41 - 00276832 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx11_43.dll
2014-03-20 12:16 - 2010-05-26 12:41 - 00248672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx11_43.dll
2014-03-20 12:16 - 2010-03-18 21:21 - 00799568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdia100.dll
2014-03-20 12:16 - 2010-02-04 11:01 - 00530776 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_6.dll
2014-03-20 12:16 - 2010-02-04 11:01 - 00528216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_6.dll
2014-03-20 12:16 - 2010-02-04 11:01 - 00238936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_6.dll
2014-03-20 12:16 - 2010-02-04 11:01 - 00176984 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_6.dll
2014-03-20 12:16 - 2010-02-04 11:01 - 00078680 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_4.dll
2014-03-20 12:16 - 2010-02-04 11:01 - 00074072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_4.dll
2014-03-20 12:16 - 2010-02-04 11:01 - 00024920 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_7.dll
2014-03-20 12:16 - 2010-02-04 11:01 - 00022360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_7.dll
2014-03-20 12:16 - 2009-09-04 18:44 - 00517960 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_5.dll
2014-03-20 12:16 - 2009-09-04 18:44 - 00515416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_5.dll
2014-03-20 12:16 - 2009-09-04 18:44 - 00238936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_5.dll
2014-03-20 12:16 - 2009-09-04 18:44 - 00176968 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_5.dll
2014-03-20 12:16 - 2009-09-04 18:44 - 00073544 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_3.dll
2014-03-20 12:16 - 2009-09-04 18:44 - 00069464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_3.dll
2014-03-20 12:16 - 2009-09-04 18:29 - 05554512 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dcsx_42.dll
2014-03-20 12:16 - 2009-09-04 18:29 - 05501792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dcsx_42.dll
2014-03-20 12:16 - 2009-09-04 18:29 - 02582888 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_42.dll
2014-03-20 12:16 - 2009-09-04 18:29 - 02475352 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_42.dll
2014-03-20 12:16 - 2009-09-04 18:29 - 01974616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_42.dll
2014-03-20 12:16 - 2009-09-04 18:29 - 01892184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_42.dll
2014-03-20 12:16 - 2009-09-04 18:29 - 00523088 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_42.dll
2014-03-20 12:16 - 2009-09-04 18:29 - 00453456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_42.dll
2014-03-20 12:16 - 2009-09-04 18:29 - 00285024 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx11_42.dll
2014-03-20 12:16 - 2009-09-04 18:29 - 00235344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx11_42.dll
2014-03-20 12:16 - 2009-03-16 15:18 - 00521560 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_4.dll
2014-03-20 12:16 - 2009-03-16 15:18 - 00517448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_4.dll
2014-03-20 12:16 - 2009-03-16 15:18 - 00235352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_4.dll
2014-03-20 12:16 - 2009-03-16 15:18 - 00174936 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_4.dll
2014-03-20 12:16 - 2009-03-16 15:18 - 00024920 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_6.dll
2014-03-20 12:16 - 2009-03-16 15:18 - 00022360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_6.dll
2014-03-20 12:16 - 2009-03-09 16:27 - 05425496 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_41.dll
2014-03-20 12:16 - 2009-03-09 16:27 - 04178264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_41.dll
2014-03-20 12:16 - 2009-03-09 16:27 - 02430312 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_41.dll
2014-03-20 12:16 - 2009-03-09 16:27 - 01846632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_41.dll
2014-03-20 12:16 - 2009-03-09 16:27 - 00520544 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_41.dll
2014-03-20 12:16 - 2009-03-09 16:27 - 00453456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_41.dll
2014-03-20 12:16 - 2008-10-27 11:04 - 00518480 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_3.dll
2014-03-20 12:16 - 2008-10-27 11:04 - 00514384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_3.dll
2014-03-20 12:16 - 2008-10-27 11:04 - 00235856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_3.dll
2014-03-20 12:16 - 2008-10-27 11:04 - 00175440 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_3.dll
2014-03-20 12:16 - 2008-10-27 11:04 - 00074576 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_2.dll
2014-03-20 12:16 - 2008-10-27 11:04 - 00070992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_2.dll
2014-03-20 12:16 - 2008-10-27 11:04 - 00025936 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_5.dll
2014-03-20 12:16 - 2008-10-27 11:04 - 00023376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_5.dll
2014-03-20 12:16 - 2008-10-15 07:22 - 05631312 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_40.dll
2014-03-20 12:16 - 2008-10-15 07:22 - 04379984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_40.dll
2014-03-20 12:16 - 2008-10-15 07:22 - 02605920 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_40.dll
2014-03-20 12:16 - 2008-10-15 07:22 - 02036576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_40.dll
2014-03-20 12:16 - 2008-10-15 07:22 - 00519000 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_40.dll
2014-03-20 12:16 - 2008-10-15 07:22 - 00452440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_40.dll
2014-03-20 12:16 - 2008-08-26 07:40 - 00162304 _____ () C:\WINDOWS\SysWOW64\libpng13.dll
2014-03-20 12:16 - 2008-07-31 11:41 - 00238088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_2.dll
2014-03-20 12:16 - 2008-07-31 11:41 - 00177672 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_2.dll
2014-03-20 12:16 - 2008-07-31 11:41 - 00072200 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_1.dll
2014-03-20 12:16 - 2008-07-31 11:41 - 00068616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_1.dll
2014-03-20 12:16 - 2008-07-31 11:40 - 00513544 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_2.dll
2014-03-20 12:16 - 2008-07-31 11:40 - 00509448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_2.dll
2014-03-20 12:16 - 2008-07-10 12:01 - 00467984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_39.dll
2014-03-20 12:16 - 2008-07-10 12:00 - 04992520 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_39.dll
2014-03-20 12:16 - 2008-07-10 12:00 - 03851784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_39.dll
2014-03-20 12:16 - 2008-07-10 12:00 - 01942552 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_39.dll
2014-03-20 12:16 - 2008-07-10 12:00 - 01493528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_39.dll
2014-03-20 12:16 - 2008-07-10 12:00 - 00540688 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_39.dll
2014-03-20 12:16 - 2008-05-30 15:19 - 00511496 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_1.dll
2014-03-20 12:16 - 2008-05-30 15:19 - 00507400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_1.dll
2014-03-20 12:16 - 2008-05-30 15:18 - 00238088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_1.dll
2014-03-20 12:16 - 2008-05-30 15:18 - 00177672 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_1.dll
2014-03-20 12:16 - 2008-05-30 15:17 - 00068104 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_0.dll
2014-03-20 12:16 - 2008-05-30 15:17 - 00065032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_0.dll
2014-03-20 12:16 - 2008-05-30 15:17 - 00025608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_4.dll
2014-03-20 12:16 - 2008-05-30 15:16 - 00028168 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_4.dll
2014-03-20 12:16 - 2008-05-30 15:11 - 04991496 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_38.dll
2014-03-20 12:16 - 2008-05-30 15:11 - 03850760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_38.dll
2014-03-20 12:16 - 2008-05-30 15:11 - 01941528 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_38.dll
2014-03-20 12:16 - 2008-05-30 15:11 - 01491992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_38.dll
2014-03-20 12:16 - 2008-05-30 15:11 - 00540688 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_38.dll
2014-03-20 12:16 - 2008-05-30 15:11 - 00467984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_38.dll
2014-03-20 12:16 - 2008-03-14 18:21 - 01008128 _____ (GnuWin32 <hxxp://gnuwin32.sourceforge.net>) C:\WINDOWS\SysWOW64\libiconv2.dll
2014-03-20 12:16 - 2008-03-05 17:04 - 00489480 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_0.dll
2014-03-20 12:16 - 2008-03-05 17:03 - 00479752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_0.dll
2014-03-20 12:16 - 2008-03-05 17:03 - 00238088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_0.dll
2014-03-20 12:16 - 2008-03-05 17:03 - 00177672 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_0.dll
2014-03-20 12:16 - 2008-03-05 17:00 - 00028168 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_3.dll
2014-03-20 12:16 - 2008-03-05 17:00 - 00025608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_3.dll
2014-03-20 12:16 - 2008-03-05 16:56 - 04910088 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_37.dll
2014-03-20 12:16 - 2008-03-05 16:56 - 03786760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_37.dll
2014-03-20 12:16 - 2008-03-05 16:56 - 01860120 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_37.dll
2014-03-20 12:16 - 2008-03-05 16:56 - 01420824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_37.dll
2014-03-20 12:16 - 2008-02-06 00:07 - 00529424 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_37.dll
2014-03-20 12:16 - 2008-02-06 00:07 - 00462864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_37.dll
2014-03-20 12:16 - 2007-10-22 04:40 - 00411656 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_10.dll
2014-03-20 12:16 - 2007-10-22 04:39 - 00267272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_10.dll
2014-03-20 12:16 - 2007-10-22 04:37 - 00021000 _____ (Microsoft Corporation) C:\WINDOWS\system32\x3daudio1_2.dll
2014-03-20 12:16 - 2007-10-22 04:37 - 00017928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\x3daudio1_2.dll
2014-03-20 12:16 - 2007-10-12 16:14 - 05081608 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_36.dll
2014-03-20 12:16 - 2007-10-12 16:14 - 03734536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_36.dll
2014-03-20 12:16 - 2007-10-12 16:14 - 02006552 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dcompiler_36.dll
2014-03-20 12:16 - 2007-10-12 16:14 - 01374232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dcompiler_36.dll
2014-03-20 12:16 - 2007-10-02 10:56 - 00508264 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_36.dll
2014-03-20 12:16 - 2007-10-02 10:56 - 00444776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_36.dll
2014-03-20 12:16 - 2007-07-20 01:57 - 00411496 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_9.dll
2014-03-20 12:16 - 2007-07-20 01:57 - 00267112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_9.dll
2014-03-20 12:16 - 2007-07-19 19:14 - 05073256 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_35.dll
2014-03-20 12:16 - 2007-07-19 19:14 - 03727720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_35.dll
2014-03-20 12:16 - 2007-07-19 19:14 - 01985904 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dcompiler_35.dll
2014-03-20 12:16 - 2007-07-19 19:14 - 01358192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dcompiler_35.dll
2014-03-20 12:16 - 2007-07-19 19:14 - 00508264 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_35.dll
2014-03-20 12:16 - 2007-07-19 19:14 - 00444776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_35.dll
2014-03-20 12:16 - 2007-06-20 21:49 - 00409960 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_8.dll
2014-03-20 12:16 - 2007-06-20 21:46 - 00266088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_8.dll
2014-03-20 12:16 - 2007-05-16 17:45 - 04496232 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_34.dll
2014-03-20 12:16 - 2007-05-16 17:45 - 03497832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_34.dll
2014-03-20 12:16 - 2007-05-16 17:45 - 01401200 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dcompiler_34.dll
2014-03-20 12:16 - 2007-05-16 17:45 - 01124720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dcompiler_34.dll
2014-03-20 12:16 - 2007-05-16 17:45 - 00506728 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_34.dll
2014-03-20 12:16 - 2007-05-16 17:45 - 00443752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_34.dll
2014-03-20 12:16 - 2007-04-04 19:55 - 00403304 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_7.dll
2014-03-20 12:16 - 2007-04-04 19:55 - 00261480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_7.dll
2014-03-20 12:16 - 2007-04-04 19:54 - 00107368 _____ (Microsoft Corporation) C:\WINDOWS\system32\xinput1_3.dll
2014-03-20 12:16 - 2007-04-04 19:53 - 00081768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xinput1_3.dll
2014-03-20 12:16 - 2007-03-15 17:57 - 00506728 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_33.dll
2014-03-20 12:16 - 2007-03-15 17:57 - 00443752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_33.dll
2014-03-20 12:16 - 2007-03-12 17:42 - 04494184 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_33.dll
2014-03-20 12:16 - 2007-03-12 17:42 - 03495784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_33.dll
2014-03-20 12:16 - 2007-03-12 17:42 - 01400176 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dcompiler_33.dll
2014-03-20 12:16 - 2007-03-12 17:42 - 01123696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dcompiler_33.dll
2014-03-20 12:16 - 2007-03-05 13:42 - 00015128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\x3daudio1_1.dll
2014-03-20 12:16 - 2007-02-01 23:13 - 00503808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcp71.dll
2014-03-20 12:16 - 2007-02-01 20:11 - 00344064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcr71.dll
2014-03-20 12:16 - 2007-01-30 23:04 - 00339968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcr70.dll
2014-03-20 12:16 - 2007-01-24 16:27 - 00393576 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_6.dll
2014-03-20 12:16 - 2007-01-24 16:27 - 00255848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_6.dll
2014-03-20 12:16 - 2006-12-08 13:02 - 00251672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_5.dll
2014-03-20 12:16 - 2006-12-08 13:00 - 00390424 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_5.dll
2014-03-20 12:16 - 2006-11-29 14:06 - 04398360 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_32.dll
2014-03-20 12:16 - 2006-11-29 14:06 - 03426072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_32.dll
2014-03-20 12:16 - 2006-11-29 14:06 - 00469264 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10.dll
2014-03-20 12:16 - 2006-11-29 14:06 - 00440080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10.dll
2014-03-20 12:16 - 2006-09-28 17:05 - 03977496 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_31.dll
2014-03-20 12:16 - 2006-09-28 17:05 - 02414360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_31.dll
2014-03-20 12:16 - 2006-09-28 17:05 - 00237848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_4.dll
2014-03-20 12:16 - 2006-09-28 17:04 - 00364824 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_4.dll
2014-03-20 12:16 - 2006-09-28 17:03 - 00017688 _____ (Microsoft Corporation) C:\WINDOWS\system32\x3daudio1_1.dll
2014-03-20 12:16 - 2006-08-26 01:28 - 01017344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfc70u.dll
2014-03-20 12:16 - 2006-08-26 01:15 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfc70ita.dll
2014-03-20 12:16 - 2006-08-26 01:15 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfc70fra.dll
2014-03-20 12:16 - 2006-08-26 01:15 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfc70esp.dll
2014-03-20 12:16 - 2006-08-26 01:15 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfc70deu.dll
2014-03-20 12:16 - 2006-08-26 01:15 - 00057344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfc70enu.dll
2014-03-20 12:16 - 2006-08-26 01:15 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfc70kor.dll
2014-03-20 12:16 - 2006-08-26 01:15 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfc70jpn.dll
2014-03-20 12:16 - 2006-08-26 01:15 - 00045056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfc70cht.dll
2014-03-20 12:16 - 2006-08-26 01:15 - 00040960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfc70chs.dll
2014-03-20 12:16 - 2006-08-26 01:07 - 01024000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfc70.dll
2014-03-20 12:16 - 2006-08-26 00:17 - 00086016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\atl70.dll
2014-03-20 12:16 - 2006-07-28 10:31 - 00083736 _____ (Microsoft Corporation) C:\WINDOWS\system32\xinput1_2.dll
2014-03-20 12:16 - 2006-07-28 10:30 - 00363288 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_3.dll
2014-03-20 12:16 - 2006-07-28 10:30 - 00236824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_3.dll
2014-03-20 12:16 - 2006-07-28 10:30 - 00062744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xinput1_2.dll
2014-03-20 12:16 - 2006-05-31 08:24 - 00230168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_2.dll
2014-03-20 12:16 - 2006-05-31 08:22 - 00354072 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_2.dll
2014-03-20 12:16 - 2006-03-31 13:41 - 03927248 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_30.dll
2014-03-20 12:16 - 2006-03-31 13:40 - 02388176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_30.dll
2014-03-20 12:16 - 2006-03-31 13:40 - 00352464 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_1.dll
2014-03-20 12:16 - 2006-03-31 13:39 - 00229584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_1.dll
2014-03-20 12:16 - 2006-03-31 13:39 - 00083664 _____ (Microsoft Corporation) C:\WINDOWS\system32\xinput1_1.dll
2014-03-20 12:16 - 2006-03-31 13:39 - 00062672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xinput1_1.dll
2014-03-20 12:16 - 2006-02-03 09:43 - 03830992 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_29.dll
2014-03-20 12:16 - 2006-02-03 09:43 - 02332368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_29.dll
2014-03-20 12:16 - 2006-02-03 09:42 - 00355536 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_0.dll
2014-03-20 12:16 - 2006-02-03 09:42 - 00230096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_0.dll
2014-03-20 12:16 - 2006-02-03 09:41 - 00016592 _____ (Microsoft Corporation) C:\WINDOWS\system32\x3daudio1_0.dll
2014-03-20 12:16 - 2006-02-03 09:41 - 00014032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\x3daudio1_0.dll
2014-03-20 12:16 - 2005-12-05 19:09 - 03815120 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_28.dll
2014-03-20 12:16 - 2005-12-05 19:09 - 02323664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_28.dll
2014-03-20 12:16 - 2005-07-22 20:59 - 03807440 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_27.dll
2014-03-20 12:16 - 2005-07-22 20:59 - 02319568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_27.dll
2014-03-20 12:16 - 2005-05-26 16:34 - 03767504 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_26.dll
2014-03-20 12:16 - 2005-05-26 16:34 - 02297552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_26.dll
2014-03-20 12:16 - 2005-05-06 14:52 - 00103424 _____ (GNU <www.gnu.org>) C:\WINDOWS\SysWOW64\libintl3.dll
2014-03-20 12:16 - 2005-03-18 18:19 - 03823312 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_25.dll
2014-03-20 12:16 - 2005-03-18 18:19 - 02337488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_25.dll
2014-03-20 12:16 - 2005-02-05 20:45 - 03544272 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_24.dll
2014-03-20 12:16 - 2005-02-05 20:45 - 02222800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_24.dll
2014-03-20 12:16 - 2005-01-20 20:25 - 00054784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvci70.dll
2014-03-20 12:16 - 2002-01-05 06:40 - 00487424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcp70.dll
2014-03-20 12:16 - 1996-01-12 04:00 - 00935632 _____ (Microsoft Corporation) C:\WINDOWS\system\vb40016.dll
2014-03-20 12:16 - 1996-01-12 04:00 - 00722192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vb40032.dll
2014-03-20 12:16 - 1994-11-17 14:00 - 00210944 _____ () C:\WINDOWS\system\msvcrt10.dll
2014-03-20 12:16 - 1993-05-11 20:00 - 00398416 _____ (Microsoft Corporation) C:\WINDOWS\system\vbrun300.dll
2014-03-20 12:16 - 1992-10-21 01:00 - 00356992 _____ (Microsoft Corporation) C:\WINDOWS\system\vbrun200.dll
2014-03-20 12:16 - 1991-05-10 02:00 - 00271264 _____ () C:\WINDOWS\system\vbrun100.dll
2014-03-20 12:14 - 2014-03-20 12:15 - 00000000 ____D () C:\ProgramData\Package Cache
2014-03-20 12:09 - 2014-03-20 12:09 - 00000000 ____D () C:\ProgramData\Adobe
2014-03-20 12:09 - 2014-03-20 12:09 - 00000000 ____D () C:\Program Files (x86)\Adobe
2014-03-20 12:08 - 2014-03-20 12:08 - 00000000 ____D () C:\Program Files (x86)\K-Lite Codec Pack
2014-03-20 12:08 - 2013-12-01 15:10 - 00257624 _____ () C:\WINDOWS\system32\unrar64.dll
2014-03-20 12:08 - 2013-12-01 15:10 - 00218200 _____ () C:\WINDOWS\SysWOW64\unrar.dll
2014-03-20 12:07 - 2014-03-20 16:28 - 00000000 ____D () C:\WINDOWS\SysWOW64\Adobe
2014-03-20 12:07 - 2014-03-20 12:07 - 00312744 _____ (Oracle Corporation) C:\WINDOWS\system32\javaws.exe
2014-03-20 12:07 - 2014-03-20 12:07 - 00264616 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\javaws.exe
2014-03-20 12:07 - 2014-03-20 12:07 - 00189352 _____ (Oracle Corporation) C:\WINDOWS\system32\javaw.exe
2014-03-20 12:07 - 2014-03-20 12:07 - 00189352 _____ (Oracle Corporation) C:\WINDOWS\system32\java.exe
2014-03-20 12:07 - 2014-03-20 12:07 - 00175016 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\javaw.exe
2014-03-20 12:07 - 2014-03-20 12:07 - 00174504 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\java.exe
2014-03-20 12:07 - 2014-03-20 12:07 - 00108968 _____ (Oracle Corporation) C:\WINDOWS\system32\WindowsAccessBridge-64.dll
2014-03-20 12:07 - 2014-03-20 12:07 - 00096168 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll
2014-03-20 12:07 - 2014-03-20 12:07 - 00000000 ____D () C:\ProgramData\Sun
2014-03-20 12:07 - 2014-03-20 12:07 - 00000000 ____D () C:\Program Files\Java
2014-03-20 12:07 - 2014-03-20 12:07 - 00000000 ____D () C:\Program Files\7-Zip
2014-03-20 12:07 - 2014-03-20 12:07 - 00000000 ____D () C:\Program Files (x86)\VideoLAN
2014-03-20 12:07 - 2014-03-20 12:07 - 00000000 ____D () C:\Program Files (x86)\Java
2014-03-20 12:06 - 2014-04-06 00:15 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-03-20 12:06 - 2014-03-20 12:06 - 00001147 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-03-20 12:06 - 2014-03-20 12:06 - 00000000 ____D () C:\ProgramData\Mozilla
2014-03-20 12:06 - 2014-03-20 12:06 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-03-20 12:06 - 2014-03-20 12:06 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-03-20 12:06 - 2014-03-20 12:06 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-03-20 11:59 - 2014-03-20 11:59 - 00000136 _____ () C:\WINDOWS\system32\netcfg-9437.txt
2014-03-20 11:59 - 2014-03-20 11:59 - 00000134 _____ () C:\WINDOWS\system32\netcfg-9328.txt
2014-03-20 11:59 - 2014-03-20 11:59 - 00000134 _____ () C:\WINDOWS\system32\netcfg-9156.txt
2014-03-20 11:59 - 2014-03-20 11:59 - 00000128 _____ () C:\WINDOWS\system32\netcfg-10234.txt
2014-03-20 11:58 - 2014-03-20 11:58 - 00000117 _____ () C:\WINDOWS\system32\netcfg-1236562.txt
2014-03-20 11:58 - 2014-03-20 11:58 - 00000117 _____ () C:\WINDOWS\system32\netcfg-1231484.txt
2014-03-20 11:54 - 2014-03-20 11:54 - 00000032 _____ () C:\csb.log
2014-03-20 11:54 - 2014-03-20 11:54 - 00000000 ____D () C:\Program Files\GIGABYTE
2014-03-20 11:54 - 2014-03-20 11:54 - 00000000 ____D () C:\Program Files (x86)\GIGABYTE
2014-03-20 11:54 - 2013-05-06 11:45 - 00021584 _____ () C:\WINDOWS\system32\Drivers\UsbCharger.sys
2014-03-20 11:54 - 2013-02-19 13:18 - 00021584 _____ () C:\WINDOWS\system32\Drivers\AppleCharger.sys
2014-03-20 11:54 - 2010-04-06 17:30 - 00031272 _____ () C:\WINDOWS\system32\AppleChargerSrv.exe
2014-03-20 11:50 - 2014-03-20 12:20 - 01830594 _____ () C:\WINDOWS\SysWOW64\PerfStringBackup.INI
2014-03-20 11:50 - 2014-03-20 11:50 - 00000306 _____ () C:\WINDOWS\system32\netcfg-721343.txt
2014-03-20 11:50 - 2014-03-20 11:50 - 00000000 ____D () C:\Users\User\Intel
2014-03-20 11:50 - 2014-03-20 11:50 - 00000000 ____D () C:\Users\User\AppData\Roaming\Intel Corporation
2014-03-20 11:49 - 2013-02-26 14:42 - 03333576 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\Drivers\RTKVHD64.sys
2014-03-20 11:49 - 2013-02-26 12:04 - 00429097 _____ () C:\WINDOWS\system32\Drivers\RTAIODAT.DAT
2014-03-20 11:49 - 2013-02-26 07:30 - 03685448 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkAPO64.dll
2014-03-20 11:49 - 2013-02-21 10:11 - 00131656 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RCoInstII64.dll
2014-03-20 11:49 - 2013-02-20 12:55 - 01284680 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RTCOM64.dll
2014-03-20 11:49 - 2013-02-19 12:52 - 00991816 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkApi64.dll
2014-03-20 11:49 - 2013-02-19 09:11 - 02751560 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtPgEx64.dll
2014-03-20 11:49 - 2013-02-05 14:32 - 01658952 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RTSnMg64.cpl
2014-03-20 11:49 - 2013-02-02 15:30 - 02099480 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\WavesGUILib64.dll
2014-03-20 11:49 - 2013-02-02 15:30 - 00907544 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPOShell64.dll
2014-03-20 11:49 - 2013-01-23 10:36 - 00613448 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtDataProc64.dll
2014-03-20 11:49 - 2012-12-17 11:49 - 02032584 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioEQ64.dll
2014-03-20 11:49 - 2012-06-08 10:23 - 00083072 _____ (Creative Technology Ltd.) C:\WINDOWS\system32\MBWrp64.dll
2014-03-20 11:49 - 2012-06-08 10:21 - 00897152 _____ (Creative Technology Ltd.) C:\WINDOWS\system32\MBAPO64.dll
2014-03-20 11:49 - 2012-06-08 10:21 - 00753280 _____ (Creative Technology Ltd.) C:\WINDOWS\SysWOW64\MBAPO32.dll
2014-03-20 11:49 - 2011-12-20 09:32 - 00331880 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtlCPAPI64.dll
2014-03-20 11:49 - 2011-12-16 08:57 - 00065112 _____ (Creative Technology Ltd.) C:\WINDOWS\system32\MBppld64.dll
2014-03-20 11:49 - 2011-11-22 10:28 - 00014952 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkCoLDR64.dll
2014-03-20 11:49 - 2010-11-08 01:31 - 00375128 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEEP64A.dll
2014-03-20 11:49 - 2010-11-08 01:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RP3DHT64.dll
2014-03-20 11:49 - 2010-11-08 01:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RP3DAA64.dll
2014-03-20 11:49 - 2010-11-08 01:31 - 00204120 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEED64A.dll
2014-03-20 11:49 - 2010-11-08 01:31 - 00101208 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEEL64A.dll
2014-03-20 11:49 - 2010-11-08 01:31 - 00078680 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEEG64A.dll
2014-03-20 11:49 - 2010-11-03 12:30 - 00149608 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkCfg64.dll
2014-03-20 11:49 - 2010-09-27 03:34 - 00318808 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPO20.dll
2014-03-20 11:49 - 2009-11-24 03:55 - 00518896 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSTSX64.dll
2014-03-20 11:49 - 2009-11-24 03:55 - 00211184 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSTSH64.dll
2014-03-20 11:49 - 2009-11-24 03:55 - 00198896 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSHP64.dll
2014-03-20 11:49 - 2009-11-24 03:55 - 00155888 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSWOW64.dll
2014-03-20 11:49 - 2009-11-18 01:13 - 00060504 _____ (Creative Technology Ltd.) C:\WINDOWS\system32\MBPPCn64.dll
2014-03-20 11:48 - 2014-03-20 11:50 - 00000189 _____ () C:\Install.log
2014-03-20 11:48 - 2014-03-20 11:49 - 00003074 _____ () C:\RHDSetup.log
2014-03-20 11:48 - 2014-03-20 11:49 - 00000000 ____D () C:\Program Files (x86)\Realtek
2014-03-20 11:48 - 2013-01-21 19:41 - 00204864 _____ (Andrea Electronics Corporation) C:\WINDOWS\system32\AERTAC64.dll
2014-03-20 11:48 - 2013-01-16 10:02 - 02079816 ____R (Realtek Semiconductor Corp.) C:\WINDOWS\RtlExUpd.dll
2014-03-20 11:48 - 2013-01-15 04:33 - 02722848 _____ (Fortemedia Corporation) C:\WINDOWS\system32\FMAPO64.dll
2014-03-20 11:48 - 2012-06-20 11:26 - 00110592 _____ (Real Sound Lab SIA) C:\WINDOWS\system32\CONEQMSAPOGUILibrary.dll
2014-03-20 11:48 - 2012-03-08 05:47 - 00108640 _____ (Andrea Electronics Corporation) C:\WINDOWS\system32\AERTAR64.dll
2014-03-20 11:47 - 2014-03-20 11:59 - 00000000 ____D () C:\ProgramData\Intel
2014-03-20 11:47 - 2013-05-17 22:25 - 00442368 _____ (Intel(R) Corporation) C:\WINDOWS\system32\Drivers\IntcDAud.sys
2014-03-20 11:47 - 2013-05-17 22:25 - 00015360 _____ (Intel(R) Corporation) C:\WINDOWS\system32\IntcDAuC.dll
2014-03-20 11:47 - 2013-04-11 16:29 - 00064624 _____ (Intel Corporation) C:\WINDOWS\system32\Drivers\HECIx64.sys
2014-03-20 11:47 - 2013-04-11 16:29 - 00016344 _____ (Intel Corporation) C:\WINDOWS\system32\Drivers\IntelMEFWVer.dll
2014-03-20 11:46 - 2014-03-20 11:54 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-03-20 11:46 - 2014-03-20 11:46 - 00000000 ____D () C:\Users\User\AppData\Roaming\InstallShield
2014-03-20 11:46 - 2014-03-20 11:46 - 00000000 ____D () C:\Intel
2014-03-20 11:46 - 2013-02-27 16:37 - 00053248 _____ (Windows XP Bundled build C-Centric Single User) C:\WINDOWS\SysWOW64\CSVer.dll
2014-03-20 11:45 - 2014-04-06 11:40 - 00003594 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-55448800-1307107506-1312735153-1001
2014-03-20 11:44 - 2014-03-20 11:44 - 00000010 _____ () C:\WINDOWS\GSetup.ini
2014-03-20 11:44 - 2009-08-27 09:04 - 00207400 ____R () C:\WINDOWS\GSetup.exe
2014-03-20 11:39 - 2014-03-25 00:11 - 00000000 ___RD () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-03-20 11:39 - 2014-03-24 17:33 - 00000000 ____D () C:\Users\User\AppData\Local\Packages
2014-03-20 11:39 - 2014-03-20 16:30 - 00000000 ___RD () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-03-20 11:39 - 2014-03-20 16:28 - 00000000 ____D () C:\ProgramData\PRICache
2014-03-20 11:39 - 2014-03-20 16:19 - 01864581 _____ () C:\WINDOWS\WindowsUpdate (1).log
2014-03-20 11:39 - 2014-03-20 11:39 - 00000000 ____D () C:\WINDOWS\System32\Tasks\WPD
2014-03-20 11:39 - 2014-03-20 11:39 - 00000000 ____D () C:\WINDOWS\CSC
2014-03-20 11:39 - 2014-03-20 11:39 - 00000000 ____D () C:\Users\User\AppData\Roaming\Adobe
2014-03-20 11:39 - 2014-03-20 11:39 - 00000000 ____D () C:\Users\User\AppData\Local\VirtualStore
2014-03-20 11:38 - 2014-03-20 11:38 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Musik
2014-03-20 11:38 - 2014-03-20 11:38 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Bilder
2014-03-20 11:38 - 2014-03-20 11:38 - 00000000 _SHDL () C:\Users\Default.migrated\Vorlagen
2014-03-20 11:38 - 2014-03-20 11:38 - 00000000 _SHDL () C:\Users\Default.migrated\Startmenü
2014-03-20 11:38 - 2014-03-20 11:38 - 00000000 _SHDL () C:\Users\Default.migrated\Netzwerkumgebung
2014-03-20 11:38 - 2014-03-20 11:38 - 00000000 _SHDL () C:\Users\Default.migrated\Lokale Einstellungen
2014-03-20 11:38 - 2014-03-20 11:38 - 00000000 _SHDL () C:\Users\Default.migrated\Eigene Dateien
2014-03-20 11:38 - 2014-03-20 11:38 - 00000000 _SHDL () C:\Users\Default.migrated\Druckumgebung
2014-03-20 11:38 - 2014-03-20 11:38 - 00000000 _SHDL () C:\Users\Default.migrated\Documents\Eigene Musik
2014-03-20 11:38 - 2014-03-20 11:38 - 00000000 _SHDL () C:\Users\Default.migrated\Documents\Eigene Bilder
2014-03-20 11:38 - 2014-03-20 11:38 - 00000000 _SHDL () C:\Users\Default.migrated\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-03-20 11:38 - 2014-03-20 11:38 - 00000000 _SHDL () C:\Users\Default.migrated\AppData\Local\Verlauf
2014-03-20 11:38 - 2014-03-20 11:38 - 00000000 _SHDL () C:\Users\Default.migrated\AppData\Local\Anwendungsdaten
2014-03-20 11:38 - 2014-03-20 11:38 - 00000000 _SHDL () C:\Users\Default.migrated\Anwendungsdaten
2014-03-20 11:38 - 2014-03-20 11:38 - 00000000 _SHDL () C:\Programme
2014-03-20 11:38 - 2014-03-20 11:38 - 00000000 _SHDL () C:\ProgramData\Vorlagen
2014-03-20 11:38 - 2014-03-20 11:38 - 00000000 _SHDL () C:\ProgramData\Startmenü
2014-03-20 11:38 - 2014-03-20 11:38 - 00000000 _SHDL () C:\ProgramData\Dokumente
2014-03-20 11:38 - 2014-03-20 11:38 - 00000000 _SHDL () C:\ProgramData\Anwendungsdaten
2014-03-20 11:38 - 2014-03-20 11:38 - 00000000 _SHDL () C:\Program Files\Gemeinsame Dateien
2014-03-20 11:38 - 2014-03-20 11:38 - 00000000 _SHDL () C:\Dokumente und Einstellungen
2014-03-20 11:37 - 2014-03-20 11:37 - 00001136 _____ () C:\WINDOWS\system32\netcfg-15687.txt
2014-03-20 11:37 - 2014-03-20 11:37 - 00000185 _____ () C:\WINDOWS\system32\netcfg-13875.txt
2014-03-20 11:37 - 2014-03-20 11:37 - 00000164 _____ () C:\WINDOWS\system32\netcfg-12703.txt
2014-03-20 11:37 - 2014-03-20 11:37 - 00000161 _____ () C:\WINDOWS\system32\netcfg-13765.txt
2014-03-20 11:37 - 2014-03-20 11:37 - 00000160 _____ () C:\WINDOWS\system32\netcfg-13640.txt
2014-03-20 11:37 - 2014-03-20 11:37 - 00000160 _____ () C:\WINDOWS\system32\netcfg-13421.txt
2014-03-20 11:37 - 2014-03-20 11:37 - 00000160 _____ () C:\WINDOWS\system32\netcfg-12812.txt
2014-03-20 11:37 - 2014-03-20 11:37 - 00000159 _____ () C:\WINDOWS\system32\netcfg-13312.txt
2014-03-20 11:37 - 2014-03-20 11:37 - 00000157 _____ () C:\WINDOWS\system32\netcfg-13531.txt
2014-03-20 11:37 - 2014-03-20 11:37 - 00000157 _____ () C:\WINDOWS\system32\netcfg-13109.txt
2014-03-20 11:37 - 2014-03-20 11:37 - 00000150 _____ () C:\WINDOWS\system32\netcfg-12984.txt

==================== One Month Modified Files and Folders =======

2014-04-06 11:52 - 2014-04-06 11:49 - 00012843 _____ () C:\Users\User\Downloads\FRST.txt
2014-04-06 11:52 - 2014-04-06 11:49 - 00000000 ____D () C:\FRST
2014-04-06 11:52 - 2014-03-20 16:30 - 01893953 _____ () C:\WINDOWS\WindowsUpdate.log
2014-04-06 11:51 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\AppReadiness
2014-04-06 11:50 - 2014-04-06 11:50 - 00031515 _____ () C:\Users\User\Downloads\Shortcut.txt
2014-04-06 11:50 - 2014-04-06 11:50 - 00022301 _____ () C:\Users\User\Downloads\Addition.txt
2014-04-06 11:46 - 2014-04-06 11:46 - 02157056 _____ (Farbar) C:\Users\User\Downloads\FRST64.exe
2014-04-06 11:45 - 2014-04-06 11:45 - 01145856 _____ (Farbar) C:\Users\User\Downloads\FRST.exe
2014-04-06 11:44 - 2014-04-06 11:44 - 00000000 ____D () C:\Users\User\AppData\Local\Intel_Corporation
2014-04-06 11:40 - 2014-03-24 17:53 - 00000000 ____D () C:\ProgramData\MFAData
2014-04-06 11:40 - 2014-03-20 11:45 - 00003594 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-55448800-1307107506-1312735153-1001
2014-04-06 11:39 - 2014-03-20 12:16 - 00000884 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2014-04-06 11:38 - 2014-03-20 16:31 - 00003930 _____ () C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{2033FA2E-7191-41AE-B4E8-6F112590EA2B}
2014-04-06 11:35 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\sru
2014-04-06 01:50 - 2014-04-05 22:48 - 00000000 ____D () C:\Users\User\AppData\Roaming\BitTorrent
2014-04-06 01:23 - 2014-04-06 01:23 - 00004321 _____ () C:\Users\User\Documents\Malwarebytes060414.txt
2014-04-06 01:15 - 2014-04-06 01:15 - 00084333 _____ () C:\Users\User\Documents\OLtPapa.odt
2014-04-06 00:49 - 2014-04-06 00:48 - 00119512 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2014-04-06 00:49 - 2014-04-06 00:48 - 00001129 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-04-06 00:49 - 2014-04-06 00:48 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-04-06 00:48 - 2014-04-06 00:48 - 17523384 _____ (Malwarebytes Corporation ) C:\Users\User\Downloads\mbam-setup-2.0.0.1000.exe
2014-04-06 00:48 - 2014-04-06 00:48 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-04-06 00:34 - 2014-04-06 00:14 - 00000000 ____D () C:\AdwCleaner
2014-04-06 00:21 - 2013-11-14 09:26 - 01901564 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2014-04-06 00:21 - 2013-11-14 09:11 - 00810756 _____ () C:\WINDOWS\system32\perfh007.dat
2014-04-06 00:21 - 2013-11-14 09:11 - 00179196 _____ () C:\WINDOWS\system32\perfc007.dat
2014-04-06 00:16 - 2013-08-22 16:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2014-04-06 00:15 - 2014-03-20 12:06 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-04-06 00:15 - 2013-11-14 00:18 - 00002346 _____ () C:\WINDOWS\PFRO.log
2014-04-06 00:15 - 2013-08-22 15:25 - 00262144 ___SH () C:\WINDOWS\system32\config\BBI
2014-04-06 00:09 - 2014-04-06 00:09 - 01426178 _____ () C:\Users\User\Downloads\adwcleaner.exe
2014-04-05 23:55 - 2014-04-05 23:55 - 00000893 _____ () C:\Users\User\Desktop\BitTorrent.lnk
2014-04-05 23:55 - 2014-04-05 23:55 - 00000873 _____ () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\BitTorrent.lnk
2014-04-05 23:54 - 2014-04-05 23:54 - 01642072 _____ (BitTorrent Inc.) C:\Users\User\Downloads\BitTorrent_7.9.1.30769.exe
2014-04-05 23:54 - 2014-04-05 23:54 - 01642072 _____ (BitTorrent Inc.) C:\Users\User\Downloads\BitTorrent_7.9.1.30769(1).exe
2014-04-05 22:54 - 2014-04-05 22:54 - 01035926 _____ () C:\Users\User\Downloads\MozBackup-1.5.1-EN.exe
2014-04-05 22:54 - 2014-04-05 22:54 - 00001054 _____ () C:\Users\Public\Desktop\MozBackup.lnk
2014-04-05 22:54 - 2014-04-05 22:54 - 00000000 ____D () C:\Program Files (x86)\MozBackup
2014-04-05 21:57 - 2014-04-05 21:57 - 00000000 ____D () C:\Users\User\Desktop\Alte Firefox-Daten
2014-04-05 21:11 - 2014-04-05 21:11 - 00009443 _____ () C:\Users\User\Documents\teseskklappt.odt
2014-04-05 13:15 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\rescache
2014-04-03 20:59 - 2014-03-24 17:53 - 00000000 ____D () C:\Users\User\AppData\Local\Avg2014
2014-04-03 20:10 - 2014-04-03 20:10 - 00000000 ____D () C:\Users\User\AppData\Roaming\LibreOffice
2014-04-03 19:58 - 2014-04-03 19:58 - 00000000 ____D () C:\Users\Default\AppData\Roaming\TuneUp Software
2014-04-03 19:58 - 2014-04-03 19:58 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\TuneUp Software
2014-04-03 19:55 - 2014-04-03 19:55 - 00002113 _____ () C:\Users\Public\Desktop\Mozilla Thunderbird.lnk
2014-04-03 19:55 - 2014-04-03 19:55 - 00000000 ____D () C:\Users\User\AppData\Roaming\Thunderbird
2014-04-03 19:55 - 2014-04-03 19:55 - 00000000 ____D () C:\Users\User\AppData\Local\Thunderbird
2014-04-03 19:54 - 2014-04-03 19:54 - 21987424 _____ (Mozilla) C:\Users\User\Downloads\Thunderbird_Setup_de24.4.0.exe
2014-04-03 19:54 - 2014-04-03 19:54 - 00000000 ____D () C:\Users\User\AppData\Roaming\Macromedia
2014-04-03 19:54 - 2014-04-03 19:54 - 00000000 ____D () C:\Users\User\AppData\Local\Macromedia
2014-04-03 19:54 - 2014-04-03 19:54 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird
2014-04-03 09:51 - 2014-04-06 00:48 - 00088280 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2014-04-03 09:51 - 2014-04-06 00:48 - 00063192 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys
2014-04-03 09:50 - 2014-04-06 00:48 - 00025816 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys
2014-04-01 09:35 - 2014-04-01 09:35 - 00000000 ____D () C:\Users\User\AppData\Roaming\vlc
2014-04-01 09:16 - 2014-04-01 09:16 - 00000742 _____ () C:\Users\User\Desktop\Datensicherung - Verknüpfung.lnk
2014-04-01 09:11 - 2013-08-22 15:25 - 00262144 ___SH () C:\WINDOWS\system32\config\ELAM
2014-03-31 17:23 - 2013-08-22 16:46 - 00291524 _____ () C:\WINDOWS\setupact.log
2014-03-27 13:58 - 2014-04-03 20:58 - 652747882 _____ () C:\Users\User\Documents\Thunderbird 24.4.0 (de) - 2014-03-27.pcv
2014-03-26 01:31 - 2014-04-03 20:57 - 26713231 _____ () C:\Users\User\Documents\Firefox 27.0.1 (de) - 2014-03-26.pcv
2014-03-26 01:28 - 2014-04-03 20:58 - 571328306 _____ () C:\Users\User\Documents\Thunderbird 24.4.0 (de) - 2014-03-26.pcv
2014-03-26 01:08 - 2014-04-03 20:57 - 00418189 _____ () C:\Users\User\Documents\Firefoxbookmarks-2014-03-26
2014-03-26 00:30 - 2014-04-05 22:55 - 00001001 _____ () C:\Users\User\Documents\indexfile.txt
2014-03-25 00:21 - 2014-03-20 16:26 - 00000000 ___DC () C:\WINDOWS\Panther
2014-03-25 00:20 - 2014-03-25 00:18 - 00000000 ____D () C:\Program Files (x86)\Nero
2014-03-25 00:20 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\Cursors
2014-03-25 00:19 - 2014-03-25 00:18 - 00000000 ____D () C:\ProgramData\Nero
2014-03-25 00:14 - 2014-03-25 00:14 - 00001484 _____ () C:\Users\Public\Desktop\LibreOffice 4.2.lnk
2014-03-25 00:14 - 2014-03-25 00:13 - 00000000 ____D () C:\Program Files (x86)\LibreOffice 4
2014-03-25 00:13 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\restore
2014-03-25 00:11 - 2014-03-20 11:39 - 00000000 ___RD () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-03-24 17:55 - 2014-03-24 17:55 - 00000000 ____D () C:\Users\User\AppData\Roaming\TuneUp Software
2014-03-24 17:55 - 2014-03-24 17:55 - 00000000 ____D () C:\Users\User\AppData\Roaming\AVG2014
2014-03-24 17:55 - 2014-03-24 17:54 - 00000000 ____D () C:\ProgramData\AVG2014
2014-03-24 17:55 - 2012-07-26 10:12 - 00000000 ___HD () C:\WINDOWS\ELAMBKUP
2014-03-24 17:54 - 2014-03-24 17:54 - 00000000 ___HD () C:\$AVG
2014-03-24 17:54 - 2014-03-24 17:54 - 00000000 ____D () C:\Program Files (x86)\AVG
2014-03-24 17:53 - 2014-03-24 17:53 - 00000000 ____D () C:\Users\User\AppData\Local\MFAData
2014-03-24 17:34 - 2013-08-22 16:44 - 00394472 _____ () C:\WINDOWS\system32\FNTCACHE.DAT
2014-03-24 17:33 - 2014-03-24 17:33 - 00000000 ___RD () C:\WINDOWS\BrowserChoice
2014-03-24 17:33 - 2014-03-20 11:39 - 00000000 ____D () C:\Users\User\AppData\Local\Packages
2014-03-20 16:30 - 2014-03-20 16:30 - 00001465 _____ () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-03-20 16:30 - 2014-03-20 16:30 - 00000020 ___SH () C:\Users\User\ntuser.ini
2014-03-20 16:30 - 2014-03-20 16:30 - 00000000 _SHDL () C:\Users\Default\Vorlagen
2014-03-20 16:30 - 2014-03-20 16:30 - 00000000 _SHDL () C:\Users\Default\Startmenü
2014-03-20 16:30 - 2014-03-20 16:30 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung
2014-03-20 16:30 - 2014-03-20 16:30 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen
2014-03-20 16:30 - 2014-03-20 16:30 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien
2014-03-20 16:30 - 2014-03-20 16:30 - 00000000 _SHDL () C:\Users\Default\Druckumgebung
2014-03-20 16:30 - 2014-03-20 16:30 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik
2014-03-20 16:30 - 2014-03-20 16:30 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder
2014-03-20 16:30 - 2014-03-20 16:30 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-03-20 16:30 - 2014-03-20 16:30 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf
2014-03-20 16:30 - 2014-03-20 16:30 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten
2014-03-20 16:30 - 2014-03-20 16:30 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten
2014-03-20 16:30 - 2014-03-20 16:30 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik
2014-03-20 16:30 - 2014-03-20 16:30 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder
2014-03-20 16:30 - 2014-03-20 16:30 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-03-20 16:30 - 2014-03-20 16:30 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf
2014-03-20 16:30 - 2014-03-20 16:30 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten
2014-03-20 16:30 - 2014-03-20 11:39 - 00000000 ___RD () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-03-20 16:30 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\Registration
2014-03-20 16:30 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files\Windows NT
2014-03-20 16:30 - 2013-08-22 15:36 - 00000000 __RHD () C:\Users\Default
2014-03-20 16:29 - 2014-03-20 16:29 - 00023572 _____ () C:\WINDOWS\system32\emptyregdb.dat
2014-03-20 16:29 - 2014-03-20 16:28 - 00020958 _____ () C:\WINDOWS\diagwrn.xml
2014-03-20 16:29 - 2014-03-20 16:28 - 00020958 _____ () C:\WINDOWS\diagerr.xml
2014-03-20 16:29 - 2014-03-20 16:09 - 00006593 _____ () C:\WINDOWS\comsetup.log
2014-03-20 16:29 - 2013-08-22 17:36 - 00000000 __RSD () C:\WINDOWS\Media
2014-03-20 16:29 - 2013-08-22 17:36 - 00000000 __RHD () C:\Users\Public\Libraries
2014-03-20 16:28 - 2014-03-20 16:28 - 00000000 _SHDL () C:\Users\User\Vorlagen
2014-03-20 16:28 - 2014-03-20 16:28 - 00000000 _SHDL () C:\Users\User\Startmenü
2014-03-20 16:28 - 2014-03-20 16:28 - 00000000 _SHDL () C:\Users\User\Netzwerkumgebung
2014-03-20 16:28 - 2014-03-20 16:28 - 00000000 _SHDL () C:\Users\User\Lokale Einstellungen
2014-03-20 16:28 - 2014-03-20 16:28 - 00000000 _SHDL () C:\Users\User\Eigene Dateien
2014-03-20 16:28 - 2014-03-20 16:28 - 00000000 _SHDL () C:\Users\User\Druckumgebung
2014-03-20 16:28 - 2014-03-20 16:28 - 00000000 _SHDL () C:\Users\User\Documents\Eigene Musik
2014-03-20 16:28 - 2014-03-20 16:28 - 00000000 _SHDL () C:\Users\User\Documents\Eigene Bilder
2014-03-20 16:28 - 2014-03-20 16:28 - 00000000 _SHDL () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-03-20 16:28 - 2014-03-20 16:28 - 00000000 _SHDL () C:\Users\User\AppData\Local\Verlauf
2014-03-20 16:28 - 2014-03-20 16:28 - 00000000 _SHDL () C:\Users\User\AppData\Local\Anwendungsdaten
2014-03-20 16:28 - 2014-03-20 16:28 - 00000000 _SHDL () C:\Users\User\Anwendungsdaten
2014-03-20 16:28 - 2014-03-20 16:28 - 00000000 ___RD () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-03-20 16:28 - 2014-03-20 16:28 - 00000000 ____D () C:\WINDOWS\system32\config\bbimigrate
2014-03-20 16:28 - 2014-03-20 16:26 - 00000000 ____D () C:\Program Files\Intel
2014-03-20 16:28 - 2014-03-20 16:26 - 00000000 ____D () C:\Program Files (x86)\Intel
2014-03-20 16:28 - 2014-03-20 12:07 - 00000000 ____D () C:\WINDOWS\SysWOW64\Adobe
2014-03-20 16:28 - 2014-03-20 11:39 - 00000000 ____D () C:\ProgramData\PRICache
2014-03-20 16:28 - 2013-11-14 09:11 - 00000000 ____D () C:\WINDOWS\SysWOW64\WCN
2014-03-20 16:28 - 2013-11-14 09:11 - 00000000 ____D () C:\WINDOWS\SysWOW64\sysprep
2014-03-20 16:28 - 2013-11-14 09:11 - 00000000 ____D () C:\WINDOWS\system32\WCN
2014-03-20 16:28 - 2013-08-22 17:43 - 00000000 ____D () C:\WINDOWS\DigitalLocker
2014-03-20 16:28 - 2013-08-22 17:37 - 00004893 _____ () C:\WINDOWS\DtcInstall.log
2014-03-20 16:28 - 2013-08-22 17:36 - 00000000 __SHD () C:\Program Files\Windows Sidebar
2014-03-20 16:28 - 2013-08-22 17:36 - 00000000 __SHD () C:\Program Files (x86)\Windows Sidebar
2014-03-20 16:28 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\MUI
2014-03-20 16:28 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\migwiz
2014-03-20 16:28 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\IME
2014-03-20 16:28 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\WinBioPlugIns
2014-03-20 16:28 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\spool
2014-03-20 16:28 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\Recovery
2014-03-20 16:28 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\MUI
2014-03-20 16:28 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\IME
2014-03-20 16:28 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\System
2014-03-20 16:28 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\IME
2014-03-20 16:28 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\Help
2014-03-20 16:28 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared
2014-03-20 16:28 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\SMI
2014-03-20 16:28 - 2012-07-26 07:37 - 00000000 ____D () C:\Users\Default.migrated
2014-03-20 16:26 - 2014-03-20 16:26 - 00000000 __SHD () C:\Recovery
2014-03-20 16:26 - 2014-03-20 16:26 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2014-03-20 16:26 - 2014-03-20 16:26 - 00000000 ____D () C:\WINDOWS\SysWOW64\RTCOM
2014-03-20 16:26 - 2014-03-20 16:26 - 00000000 ____D () C:\Program Files\Realtek
2014-03-20 16:26 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\system32\Sysprep
2014-03-20 16:25 - 2014-03-20 16:25 - 04189184 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2014-03-20 16:25 - 2014-03-20 16:25 - 03395920 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSService.dll
2014-03-20 16:25 - 2014-03-20 16:25 - 01643584 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2014-03-20 16:25 - 2014-03-20 16:25 - 01507704 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2014-03-20 16:25 - 2014-03-20 16:25 - 01113040 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2014-03-20 16:25 - 2014-03-20 16:25 - 00848384 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll
2014-03-20 16:25 - 2014-03-20 16:25 - 00835584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2014-03-20 16:25 - 2014-03-20 16:25 - 00787968 _____ (Microsoft Corporation) C:\WINDOWS\system32\uDWM.dll
2014-03-20 16:25 - 2014-03-20 16:25 - 00695808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll
2014-03-20 16:25 - 2014-03-20 16:25 - 00615936 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAgent.exe
2014-03-20 16:25 - 2014-03-20 16:25 - 00570880 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdrm.dll
2014-03-20 16:25 - 2014-03-20 16:25 - 00548864 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2014-03-20 16:25 - 2014-03-20 16:25 - 00454656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2014-03-20 16:25 - 2014-03-20 16:25 - 00444928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdrm.dll
2014-03-20 16:25 - 2014-03-20 16:25 - 00393216 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMPhoto.dll
2014-03-20 16:25 - 2014-03-20 16:25 - 00348160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMPhoto.dll
2014-03-20 16:25 - 2014-03-20 16:25 - 00287744 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmregistration.dll
2014-03-20 16:25 - 2014-03-20 16:25 - 00249856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2014-03-20 16:25 - 2014-03-20 16:25 - 00240128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mdmregistration.dll
2014-03-20 16:25 - 2014-03-20 16:25 - 00197120 _____ (Microsoft Corporation) C:\WINDOWS\system32\scrrun.dll
2014-03-20 16:25 - 2014-03-20 16:25 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2014-03-20 16:25 - 2014-03-20 16:25 - 00156672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scrrun.dll
2014-03-20 16:25 - 2014-03-20 16:25 - 00084480 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSCollect.exe
2014-03-20 16:25 - 2014-03-20 16:25 - 00075360 _____ (Microsoft Corporation) C:\WINDOWS\system32\imagehlp.dll
2014-03-20 16:25 - 2014-03-20 16:25 - 00070680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\imagehlp.dll
2014-03-20 16:25 - 2014-03-20 16:25 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcaui.exe
2014-03-20 16:25 - 2014-03-20 16:25 - 00017408 _____ (Microsoft Corporation)

AnneSommer · 06.04.2014, 11:01

Und hir Teil 2

Code:

ATTFilter

C:\WINDOWS\SysWOW64\pcaui.exe
2014-03-20 16:25 - 2013-08-22 17:36 - 00262144 _____ () C:\WINDOWS\system32\config\BCD-Template
2014-03-20 16:25 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\WinStore
2014-03-20 16:24 - 2014-03-20 16:24 - 13209088 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2014-03-20 16:24 - 2014-03-20 16:24 - 11702272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2014-03-20 16:24 - 2014-03-20 16:24 - 07416832 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll
2014-03-20 16:24 - 2014-03-20 16:24 - 04961792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Search.dll
2014-03-20 16:24 - 2014-03-20 16:24 - 04217344 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncEngine.dll
2014-03-20 16:24 - 2014-03-20 16:24 - 02804224 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll
2014-03-20 16:24 - 2014-03-20 16:24 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2014-03-20 16:24 - 2014-03-20 16:24 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2014-03-20 16:24 - 2014-03-20 16:24 - 02041856 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2014-03-20 16:24 - 2014-03-20 16:24 - 01964032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2014-03-20 16:24 - 2014-03-20 16:24 - 01462216 _____ (Microsoft Corporation) C:\WINDOWS\system32\propsys.dll
2014-03-20 16:24 - 2014-03-20 16:24 - 01202888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\propsys.dll
2014-03-20 16:24 - 2014-03-20 16:24 - 01105408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFolder.dll
2014-03-20 16:24 - 2014-03-20 16:24 - 01020928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll
2014-03-20 16:24 - 2014-03-20 16:24 - 00919040 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll
2014-03-20 16:24 - 2014-03-20 16:24 - 00870912 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDrive.exe
2014-03-20 16:24 - 2014-03-20 16:24 - 00830976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchFolder.dll
2014-03-20 16:24 - 2014-03-20 16:24 - 00720384 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveTelemetry.dll
2014-03-20 16:24 - 2014-03-20 16:24 - 00708608 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2014-03-20 16:24 - 2014-03-20 16:24 - 00628736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmCoreR.dll
2014-03-20 16:24 - 2014-03-20 16:24 - 00553472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll
2014-03-20 16:24 - 2014-03-20 16:24 - 00236888 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdFilter.sys
2014-03-20 16:24 - 2014-03-20 16:24 - 00195584 _____ (Microsoft Corporation) C:\WINDOWS\system32\msrating.dll
2014-03-20 16:24 - 2014-03-20 16:24 - 00164864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrating.dll
2014-03-20 16:24 - 2014-03-20 16:24 - 00139776 _____ (Microsoft Corporation) C:\WINDOWS\system32\poqexec.exe
2014-03-20 16:24 - 2014-03-20 16:24 - 00139264 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieUnatt.exe
2014-03-20 16:24 - 2014-03-20 16:24 - 00124760 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdNisDrv.sys
2014-03-20 16:24 - 2014-03-20 16:24 - 00124416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\poqexec.exe
2014-03-20 16:24 - 2014-03-20 16:24 - 00121344 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveShell.dll
2014-03-20 16:24 - 2014-03-20 16:24 - 00115712 _____ (Microsoft Corporation) C:\WINDOWS\system32\winbici.dll
2014-03-20 16:24 - 2014-03-20 16:24 - 00112128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieUnatt.exe
2014-03-20 16:24 - 2014-03-20 16:24 - 00111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollector.exe
2014-03-20 16:24 - 2014-03-20 16:24 - 00105984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SkyDriveShell.dll
2014-03-20 16:24 - 2014-03-20 16:24 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll
2014-03-20 16:24 - 2014-03-20 16:24 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesetup.dll
2014-03-20 16:24 - 2014-03-20 16:24 - 00053760 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll
2014-03-20 16:24 - 2014-03-20 16:24 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieetwproxystub.dll
2014-03-20 16:24 - 2014-03-20 16:24 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwproxystub.dll
2014-03-20 16:24 - 2014-03-20 16:24 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll
2014-03-20 16:24 - 2014-03-20 16:24 - 00035856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdBoot.sys
2014-03-20 16:24 - 2014-03-20 16:24 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll
2014-03-20 16:24 - 2014-03-20 16:24 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iernonce.dll
2014-03-20 16:24 - 2014-03-20 16:24 - 00009701 _____ () C:\WINDOWS\SysWOW64\connectedsearch-results.searchconnector-ms
2014-03-20 16:24 - 2014-03-20 16:24 - 00009701 _____ () C:\WINDOWS\system32\connectedsearch-results.searchconnector-ms
2014-03-20 16:24 - 2014-03-20 16:24 - 00004096 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollectorres.dll
2014-03-20 16:24 - 2013-08-22 17:36 - 00000000 ___RD () C:\WINDOWS\ToastData
2014-03-20 16:24 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-03-20 16:24 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-03-20 16:24 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\MediaViewer
2014-03-20 16:24 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\FileManager
2014-03-20 16:24 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\Camera
2014-03-20 16:24 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files\Windows Defender
2014-03-20 16:24 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files (x86)\Windows Defender
2014-03-20 16:23 - 2014-03-20 16:23 - 21199256 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 18643560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 18576384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 13949440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 06640640 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 06353960 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppsvc.exe
2014-03-20 16:23 - 2014-03-20 16:23 - 05770752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 04604416 _____ (Microsoft Corporation) C:\WINDOWS\system32\d2d1.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 04175360 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbgeng.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 03936256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 03210528 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 02873344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbgeng.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 02804528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2vdec.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 02617344 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 02543960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2014-03-20 16:23 - 2014-03-20 16:23 - 02397184 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10warp.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 02295808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 02152448 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 02143960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 02133208 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 02071552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10warp.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 01928144 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 01720560 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 01530712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2014-03-20 16:23 - 2014-03-20 16:23 - 01503232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 01486848 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbghelp.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 01472048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 01415680 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 01399176 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 01374384 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpmde.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 01371824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 01317376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 01287064 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel32.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 01238016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbghelp.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 01227264 _____ (Microsoft Corporation) C:\WINDOWS\system32\mispace.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 01214976 _____ (Microsoft Corporation) C:\WINDOWS\system32\schedsvc.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 01204968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmde.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 01119064 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys
2014-03-20 16:23 - 2014-03-20 16:23 - 01057280 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdvidcrl.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 01036288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kernel32.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00980480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mispace.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00960512 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00947712 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00914944 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgent.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00855552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdvidcrl.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00842752 _____ (Microsoft Corporation) C:\WINDOWS\system32\MsSpellCheckingFacility.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00834048 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00809872 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00802816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00770560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReAgent.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00764864 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00749056 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00745336 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00716288 _____ (Microsoft Corporation) C:\WINDOWS\system32\swprv.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00669352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00663680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00630272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MsSpellCheckingFacility.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00628736 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe
2014-03-20 16:23 - 2014-03-20 16:23 - 00589824 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastls.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00588800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00552624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00513536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastls.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00481944 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00478208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe
2014-03-20 16:23 - 2014-03-20 16:23 - 00470016 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfds.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00461312 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsGdiConverter.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00458616 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFault.exe
2014-03-20 16:23 - 2014-03-20 16:23 - 00447488 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppcomapi.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00433664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfds.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00419160 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00408576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdbss.sys
2014-03-20 16:23 - 2014-03-20 16:23 - 00408480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFault.exe
2014-03-20 16:23 - 2014-03-20 16:23 - 00407024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Faultrep.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00403456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
2014-03-20 16:23 - 2014-03-20 16:23 - 00386722 _____ () C:\WINDOWS\system32\ApnDatabase.xml
2014-03-20 16:23 - 2014-03-20 16:23 - 00382808 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2014-03-20 16:23 - 2014-03-20 16:23 - 00381168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00376320 _____ (Microsoft Corporation) C:\WINDOWS\system32\pnrpsvc.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00369280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Faultrep.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00336896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsGdiConverter.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00325464 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBXHCI.SYS
2014-03-20 16:23 - 2014-03-20 16:23 - 00311640 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\volsnap.sys
2014-03-20 16:23 - 2014-03-20 16:23 - 00306688 _____ (Microsoft Corporation) C:\WINDOWS\system32\msieftp.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00303616 _____ (Microsoft Corporation) C:\WINDOWS\system32\sti.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00282112 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemEventsBrokerServer.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00273920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msieftp.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00273408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00263168 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00249856 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpencom.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00233920 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00218112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Graphics.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00218112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sti.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00208896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpencom.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00207872 _____ (Microsoft Corporation) C:\WINDOWS\system32\deviceregistration.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00206336 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSClient.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00202240 _____ (Microsoft Corporation) C:\WINDOWS\system32\ubpm.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00178176 _____ (Microsoft Corporation) C:\WINDOWS\system32\easwrt.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00174592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSClient.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00160256 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWWIN.EXE
2014-03-20 16:23 - 2014-03-20 16:23 - 00142848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ipnat.sys
2014-03-20 16:23 - 2014-03-20 16:23 - 00142680 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBSTOR.SYS
2014-03-20 16:23 - 2014-03-20 16:23 - 00140800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\easwrt.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00138752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWWIN.EXE
2014-03-20 16:23 - 2014-03-20 16:23 - 00138240 _____ () C:\WINDOWS\system32\OEMLicense.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00136704 _____ (Microsoft Corporation) C:\WINDOWS\system32\psmsrv.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00131160 _____ (Microsoft Corporation) C:\WINDOWS\system32\easinvoker.exe
2014-03-20 16:23 - 2014-03-20 16:23 - 00103936 _____ () C:\WINDOWS\SysWOW64\OEMLicense.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsgqec.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tsgqec.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00032088 _____ (Microsoft Corporation) C:\WINDOWS\system32\ploptin.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00024064 _____ (Microsoft Corporation) C:\WINDOWS\system32\bi.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00019456 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BtaMPM.sys
2014-03-20 16:23 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\Dism
2014-03-20 16:23 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\system32\Dism
2014-03-20 16:22 - 2014-03-20 16:22 - 07399256 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2014-03-20 16:22 - 2014-03-20 16:22 - 02896896 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll
2014-03-20 16:22 - 2014-03-20 16:22 - 02570240 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers.dll
2014-03-20 16:22 - 2014-03-20 16:22 - 02266624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll
2014-03-20 16:22 - 2014-03-20 16:22 - 02143744 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2014-03-20 16:22 - 2014-03-20 16:22 - 02140888 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
2014-03-20 16:22 - 2014-03-20 16:22 - 01843712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Display.dll
2014-03-20 16:22 - 2014-03-20 16:22 - 01816576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Display.dll
2014-03-20 16:22 - 2014-03-20 16:22 - 01765384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll
2014-03-20 16:22 - 2014-03-20 16:22 - 01765376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2014-03-20 16:22 - 2014-03-20 16:22 - 01756160 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMPDMC.exe
2014-03-20 16:22 - 2014-03-20 16:22 - 01476184 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2014-03-20 16:22 - 2014-03-20 16:22 - 01391104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMPDMC.exe
2014-03-20 16:22 - 2014-03-20 16:22 - 01345536 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe
2014-03-20 16:22 - 2014-03-20 16:22 - 01302528 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2014-03-20 16:22 - 2014-03-20 16:22 - 00922624 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2014-03-20 16:22 - 2014-03-20 16:22 - 00747008 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidcli.dll
2014-03-20 16:22 - 2014-03-20 16:22 - 00586240 _____ (Microsoft Corporation) C:\WINDOWS\system32\qedit.dll
2014-03-20 16:22 - 2014-03-20 16:22 - 00566784 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpncore.dll
2014-03-20 16:22 - 2014-03-20 16:22 - 00544768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlidcli.dll
2014-03-20 16:22 - 2014-03-20 16:22 - 00516496 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
2014-03-20 16:22 - 2014-03-20 16:22 - 00488448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qedit.dll
2014-03-20 16:22 - 2014-03-20 16:22 - 00449024 _____ (Microsoft Corporation) C:\WINDOWS\system32\appmgr.dll
2014-03-20 16:22 - 2014-03-20 16:22 - 00406400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll
2014-03-20 16:22 - 2014-03-20 16:22 - 00372568 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spaceport.sys
2014-03-20 16:22 - 2014-03-20 16:22 - 00366080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\appmgr.dll
2014-03-20 16:22 - 2014-03-20 16:22 - 00358896 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcomp.dll
2014-03-20 16:22 - 2014-03-20 16:22 - 00262144 _____ () C:\WINDOWS\system32\config\userdiff
2014-03-20 16:22 - 2014-03-20 16:22 - 00254464 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll
2014-03-20 16:22 - 2014-03-20 16:22 - 00225792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dcomp.dll
2014-03-20 16:22 - 2014-03-20 16:22 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll
2014-03-20 16:22 - 2014-03-20 16:22 - 00146776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\SerCx2.sys
2014-03-20 16:22 - 2014-03-20 16:22 - 00086872 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pdc.sys
2014-03-20 16:22 - 2014-03-20 16:22 - 00039768 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\intelpep.sys
2014-03-20 16:22 - 2014-03-20 16:22 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredentialMigrationHandler.dll
2014-03-20 16:22 - 2014-03-20 16:22 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredentialMigrationHandler.dll
2014-03-20 16:21 - 2014-03-20 16:21 - 00000000 ____D () C:\WINDOWS\SysWOW64\XPSViewer
2014-03-20 16:21 - 2014-03-20 16:21 - 00000000 ____D () C:\Program Files\Reference Assemblies
2014-03-20 16:21 - 2014-03-20 16:21 - 00000000 ____D () C:\Program Files\MSBuild
2014-03-20 16:21 - 2014-03-20 16:21 - 00000000 ____D () C:\Program Files (x86)\Reference Assemblies
2014-03-20 16:21 - 2014-03-20 16:21 - 00000000 ____D () C:\Program Files (x86)\MSBuild
2014-03-20 16:19 - 2014-03-20 11:39 - 01864581 _____ () C:\WINDOWS\WindowsUpdate (1).log
2014-03-20 16:01 - 2012-07-26 10:12 - 00000000 ____D () C:\WINDOWS\AUInstallAgent
2014-03-20 13:40 - 2014-03-20 13:40 - 00000000 ____D () C:\Users\User\AppData\Roaming\Mozilla
2014-03-20 13:40 - 2014-03-20 13:40 - 00000000 ____D () C:\Users\User\AppData\Local\Mozilla
2014-03-20 13:39 - 2014-03-20 13:39 - 00003550 _____ () C:\WINDOWS\System32\Tasks\CreateChoiceProcessTask
2014-03-20 12:48 - 2014-03-20 12:48 - 00000117 _____ () C:\WINDOWS\system32\netcfg-5187.txt
2014-03-20 12:48 - 2014-03-20 12:48 - 00000117 _____ () C:\WINDOWS\system32\netcfg-4968.txt
2014-03-20 12:47 - 2014-03-20 12:46 - 00000000 ____D () C:\WINDOWS\system32\MRT
2014-03-20 12:40 - 2014-03-20 12:16 - 00003772 _____ () C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2014-03-20 12:35 - 2014-03-20 12:35 - 00000117 _____ () C:\WINDOWS\system32\netcfg-5343.txt
2014-03-20 12:35 - 2014-03-20 12:35 - 00000117 _____ () C:\WINDOWS\system32\netcfg-5234.txt
2014-03-20 12:20 - 2014-03-20 11:50 - 01830594 _____ () C:\WINDOWS\SysWOW64\PerfStringBackup.INI
2014-03-20 12:16 - 2014-03-20 12:16 - 01199175 _____ () C:\WINDOWS\unins001.exe
2014-03-20 12:16 - 2014-03-20 12:16 - 01198049 _____ () C:\WINDOWS\unins000.exe
2014-03-20 12:16 - 2014-03-20 12:16 - 00021723 _____ () C:\WINDOWS\unins001.dat
2014-03-20 12:16 - 2014-03-20 12:16 - 00010818 _____ () C:\WINDOWS\unins000.dat
2014-03-20 12:15 - 2014-03-20 12:14 - 00000000 ____D () C:\ProgramData\Package Cache
2014-03-20 12:09 - 2014-03-20 12:09 - 00000000 ____D () C:\ProgramData\Adobe
2014-03-20 12:09 - 2014-03-20 12:09 - 00000000 ____D () C:\Program Files (x86)\Adobe
2014-03-20 12:08 - 2014-03-20 12:08 - 00000000 ____D () C:\Program Files (x86)\K-Lite Codec Pack
2014-03-20 12:07 - 2014-03-20 12:07 - 00312744 _____ (Oracle Corporation) C:\WINDOWS\system32\javaws.exe
2014-03-20 12:07 - 2014-03-20 12:07 - 00264616 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\javaws.exe
2014-03-20 12:07 - 2014-03-20 12:07 - 00189352 _____ (Oracle Corporation) C:\WINDOWS\system32\javaw.exe
2014-03-20 12:07 - 2014-03-20 12:07 - 00189352 _____ (Oracle Corporation) C:\WINDOWS\system32\java.exe
2014-03-20 12:07 - 2014-03-20 12:07 - 00175016 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\javaw.exe
2014-03-20 12:07 - 2014-03-20 12:07 - 00174504 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\java.exe
2014-03-20 12:07 - 2014-03-20 12:07 - 00108968 _____ (Oracle Corporation) C:\WINDOWS\system32\WindowsAccessBridge-64.dll
2014-03-20 12:07 - 2014-03-20 12:07 - 00096168 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll
2014-03-20 12:07 - 2014-03-20 12:07 - 00000000 ____D () C:\ProgramData\Sun
2014-03-20 12:07 - 2014-03-20 12:07 - 00000000 ____D () C:\Program Files\Java
2014-03-20 12:07 - 2014-03-20 12:07 - 00000000 ____D () C:\Program Files\7-Zip
2014-03-20 12:07 - 2014-03-20 12:07 - 00000000 ____D () C:\Program Files (x86)\VideoLAN
2014-03-20 12:07 - 2014-03-20 12:07 - 00000000 ____D () C:\Program Files (x86)\Java
2014-03-20 12:06 - 2014-03-20 12:06 - 00001147 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-03-20 12:06 - 2014-03-20 12:06 - 00000000 ____D () C:\ProgramData\Mozilla
2014-03-20 12:06 - 2014-03-20 12:06 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-03-20 12:06 - 2014-03-20 12:06 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-03-20 12:06 - 2014-03-20 12:06 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-03-20 11:59 - 2014-03-20 11:59 - 00000136 _____ () C:\WINDOWS\system32\netcfg-9437.txt
2014-03-20 11:59 - 2014-03-20 11:59 - 00000134 _____ () C:\WINDOWS\system32\netcfg-9328.txt
2014-03-20 11:59 - 2014-03-20 11:59 - 00000134 _____ () C:\WINDOWS\system32\netcfg-9156.txt
2014-03-20 11:59 - 2014-03-20 11:59 - 00000128 _____ () C:\WINDOWS\system32\netcfg-10234.txt
2014-03-20 11:59 - 2014-03-20 11:47 - 00000000 ____D () C:\ProgramData\Intel
2014-03-20 11:58 - 2014-03-20 11:58 - 00000117 _____ () C:\WINDOWS\system32\netcfg-1236562.txt
2014-03-20 11:58 - 2014-03-20 11:58 - 00000117 _____ () C:\WINDOWS\system32\netcfg-1231484.txt
2014-03-20 11:54 - 2014-03-20 11:54 - 00000032 _____ () C:\csb.log
2014-03-20 11:54 - 2014-03-20 11:54 - 00000000 ____D () C:\Program Files\GIGABYTE
2014-03-20 11:54 - 2014-03-20 11:54 - 00000000 ____D () C:\Program Files (x86)\GIGABYTE
2014-03-20 11:54 - 2014-03-20 11:46 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-03-20 11:50 - 2014-03-20 11:50 - 00000306 _____ () C:\WINDOWS\system32\netcfg-721343.txt
2014-03-20 11:50 - 2014-03-20 11:50 - 00000000 ____D () C:\Users\User\Intel
2014-03-20 11:50 - 2014-03-20 11:50 - 00000000 ____D () C:\Users\User\AppData\Roaming\Intel Corporation
2014-03-20 11:50 - 2014-03-20 11:48 - 00000189 _____ () C:\Install.log
2014-03-20 11:49 - 2014-03-20 11:48 - 00003074 _____ () C:\RHDSetup.log
2014-03-20 11:49 - 2014-03-20 11:48 - 00000000 ____D () C:\Program Files (x86)\Realtek
2014-03-20 11:46 - 2014-03-20 11:46 - 00000000 ____D () C:\Users\User\AppData\Roaming\InstallShield
2014-03-20 11:46 - 2014-03-20 11:46 - 00000000 ____D () C:\Intel
2014-03-20 11:44 - 2014-03-20 11:44 - 00000010 _____ () C:\WINDOWS\GSetup.ini
2014-03-20 11:39 - 2014-03-20 11:39 - 00000000 ____D () C:\WINDOWS\System32\Tasks\WPD
2014-03-20 11:39 - 2014-03-20 11:39 - 00000000 ____D () C:\WINDOWS\CSC
2014-03-20 11:39 - 2014-03-20 11:39 - 00000000 ____D () C:\Users\User\AppData\Roaming\Adobe
2014-03-20 11:39 - 2014-03-20 11:39 - 00000000 ____D () C:\Users\User\AppData\Local\VirtualStore
2014-03-20 11:38 - 2014-03-20 11:38 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Musik
2014-03-20 11:38 - 2014-03-20 11:38 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Bilder
2014-03-20 11:38 - 2014-03-20 11:38 - 00000000 _SHDL () C:\Users\Default.migrated\Vorlagen
2014-03-20 11:38 - 2014-03-20 11:38 - 00000000 _SHDL () C:\Users\Default.migrated\Startmenü
2014-03-20 11:38 - 2014-03-20 11:38 - 00000000 _SHDL () C:\Users\Default.migrated\Netzwerkumgebung
2014-03-20 11:38 - 2014-03-20 11:38 - 00000000 _SHDL () C:\Users\Default.migrated\Lokale Einstellungen
2014-03-20 11:38 - 2014-03-20 11:38 - 00000000 _SHDL () C:\Users\Default.migrated\Eigene Dateien
2014-03-20 11:38 - 2014-03-20 11:38 - 00000000 _SHDL () C:\Users\Default.migrated\Druckumgebung
2014-03-20 11:38 - 2014-03-20 11:38 - 00000000 _SHDL () C:\Users\Default.migrated\Documents\Eigene Musik
2014-03-20 11:38 - 2014-03-20 11:38 - 00000000 _SHDL () C:\Users\Default.migrated\Documents\Eigene Bilder
2014-03-20 11:38 - 2014-03-20 11:38 - 00000000 _SHDL () C:\Users\Default.migrated\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-03-20 11:38 - 2014-03-20 11:38 - 00000000 _SHDL () C:\Users\Default.migrated\AppData\Local\Verlauf
2014-03-20 11:38 - 2014-03-20 11:38 - 00000000 _SHDL () C:\Users\Default.migrated\AppData\Local\Anwendungsdaten
2014-03-20 11:38 - 2014-03-20 11:38 - 00000000 _SHDL () C:\Users\Default.migrated\Anwendungsdaten
2014-03-20 11:38 - 2014-03-20 11:38 - 00000000 _SHDL () C:\Programme
2014-03-20 11:38 - 2014-03-20 11:38 - 00000000 _SHDL () C:\ProgramData\Vorlagen
2014-03-20 11:38 - 2014-03-20 11:38 - 00000000 _SHDL () C:\ProgramData\Startmenü
2014-03-20 11:38 - 2014-03-20 11:38 - 00000000 _SHDL () C:\ProgramData\Dokumente
2014-03-20 11:38 - 2014-03-20 11:38 - 00000000 _SHDL () C:\ProgramData\Anwendungsdaten
2014-03-20 11:38 - 2014-03-20 11:38 - 00000000 _SHDL () C:\Program Files\Gemeinsame Dateien
2014-03-20 11:38 - 2014-03-20 11:38 - 00000000 _SHDL () C:\Dokumente und Einstellungen
2014-03-20 11:37 - 2014-03-20 11:37 - 00001136 _____ () C:\WINDOWS\system32\netcfg-15687.txt
2014-03-20 11:37 - 2014-03-20 11:37 - 00000185 _____ () C:\WINDOWS\system32\netcfg-13875.txt
2014-03-20 11:37 - 2014-03-20 11:37 - 00000164 _____ () C:\WINDOWS\system32\netcfg-12703.txt
2014-03-20 11:37 - 2014-03-20 11:37 - 00000161 _____ () C:\WINDOWS\system32\netcfg-13765.txt
2014-03-20 11:37 - 2014-03-20 11:37 - 00000160 _____ () C:\WINDOWS\system32\netcfg-13640.txt
2014-03-20 11:37 - 2014-03-20 11:37 - 00000160 _____ () C:\WINDOWS\system32\netcfg-13421.txt
2014-03-20 11:37 - 2014-03-20 11:37 - 00000160 _____ () C:\WINDOWS\system32\netcfg-12812.txt
2014-03-20 11:37 - 2014-03-20 11:37 - 00000159 _____ () C:\WINDOWS\system32\netcfg-13312.txt
2014-03-20 11:37 - 2014-03-20 11:37 - 00000157 _____ () C:\WINDOWS\system32\netcfg-13531.txt
2014-03-20 11:37 - 2014-03-20 11:37 - 00000157 _____ () C:\WINDOWS\system32\netcfg-13109.txt
2014-03-20 11:37 - 2014-03-20 11:37 - 00000150 _____ () C:\WINDOWS\system32\netcfg-12984.txt

Some content of TEMP:
====================
C:\Users\User\AppData\Local\Temp\AskSLib.dll
C:\Users\User\AppData\Local\Temp\nsiA57C.exe
C:\Users\User\AppData\Local\Temp\nsnBF52.exe
C:\Users\User\AppData\Local\Temp\nsxBDBB.exe
C:\Users\User\AppData\Local\Temp\nsyA713.exe
C:\Users\User\AppData\Local\Temp\utt8CB3.tmp.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys
[2014-03-20 16:23] - [2014-03-20 16:23] - 0311640 ___AC (Microsoft Corporation) C85C075DE5B6D0FE116043054DE8EE02



LastRegBack: 2014-04-03 22:53

==================== End Of Log ============================

Und die Addtion File

Code:

ATTFilter

Startzeit: 01cf4d7cce6b287f

Endzeit: 4294967295

Anwendungspfad: C:\WINDOWS\FileManager\PhotosApp.exe

Berichts-ID: 1aba03c4-b970-11e3-be75-74d4350708ae

Vollständiger Name des fehlerhaften Pakets: FileManager_6.3.9600.16384_neutral_neutral_cw5n1h2txyewy

Anwendungs-ID, die relativ zum fehlerhaften Paket ist: Microsoft.Windows.PhotoManager

Error: (04/01/2014 09:34:51 AM) (Source: Microsoft-Windows-Immersive-Shell) (User: Arbeit_PC)
Description: Bei der Aktivierung der App „FileManager_cw5n1h2txyewy!Microsoft.Windows.PhotoManager“ ist folgender Fehler aufgetreten: -2144927142. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (04/01/2014 09:34:41 AM) (Source: Microsoft-Windows-Immersive-Shell) (User: Arbeit_PC)
Description: Die App „FileManager_6.3.9600.16384_neutral_neutral_cw5n1h2txyewy+Microsoft.Windows.PhotoManager“ wurde nicht innerhalb der vorgesehenen Zeit gestartet.

Error: (03/24/2014 05:32:38 PM) (Source: Microsoft-Windows-CAPI2) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".


Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll.

System Error:
Zugriff verweigert
.

Error: (03/25/2014 00:13:34 AM) (Source: Microsoft-Windows-CAPI2) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".


Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll.

System Error:
Zugriff verweigert
.

Error: (03/25/2014 00:09:04 AM) (Source: Software Protection Platform Service) (User: )
Description: Fehler bei der Lizenzaktivierung (slui.exe). Fehlercode:
hr=0xC004C008
Befehlszeilenargumente:
RuleId=3482d82e-ca2c-4e1f-8864-da0267b484b2;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=9e473b6d-b591-4c46-9c44-90a865f22e76;NotificationInterval=1440;Trigger=TimerEvent

Error: (03/25/2014 00:09:04 AM) (Source: Software Protection Platform Service) (User: )
Description: Fehler beim Erwerb der Endbenutzerlizenz. hr=0xC004C008
SKU-ID=9e473b6d-b591-4c46-9c44-90a865f22e76


System errors:
=============
Error: (04/06/2014 11:46:29 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070490 fehlgeschlagen: Microsoft.BingFinance

Error: (04/06/2014 11:46:29 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070490 fehlgeschlagen: Microsoft.BingSports

Error: (04/06/2014 11:46:29 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070490 fehlgeschlagen: Microsoft.XboxLIVEGames

Error: (04/06/2014 11:46:29 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070490 fehlgeschlagen: Microsoft.HelpAndTips

Error: (04/06/2014 11:46:17 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070490 fehlgeschlagen: Microsoft.BingMaps

Error: (04/06/2014 11:46:17 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070490 fehlgeschlagen: Microsoft.WindowsAlarms

Error: (04/06/2014 11:46:17 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070490 fehlgeschlagen: Microsoft.BingNews

Error: (04/06/2014 11:46:17 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070490 fehlgeschlagen: Microsoft.WindowsReadingList

Error: (04/06/2014 11:46:17 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070490 fehlgeschlagen: Microsoft.WindowsSoundRecorder

Error: (04/06/2014 11:46:17 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070490 fehlgeschlagen: Microsoft.BingWeather


Microsoft Office Sessions:
=========================
Error: (04/05/2014 01:18:42 PM) (Source: Microsoft-Windows-Defrag)(User: )
Description: Daten (D:)Die Speicheroptimierung kann nicht fortgesetzt werden, da die Masterdateitabelle des Dateisystems zu stark fragmentiert ist. (0x89000023)

Error: (04/05/2014 01:09:11 PM) (Source: Microsoft-Windows-CAPI2)(User: )
Description: 
Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll.

System Error:
Zugriff verweigert

Error: (04/03/2014 10:52:53 PM) (Source: Application Error)(User: )
Description: firefox.exe28.0.0.518653240e37xul.dll28.0.0.518653240e04c000000500184729a9001cf4f7989f38de4C:\Program Files (x86)\Mozilla Firefox\firefox.exeC:\Program Files (x86)\Mozilla Firefox\xul.dllec3aa912-bb71-11e3-be77-74d4350708ae

Error: (04/01/2014 09:35:10 AM) (Source: Application Hang)(User: )
Description: PhotosApp.exe6.3.9600.16507ea401cf4d7cce6b287f4294967295C:\WINDOWS\FileManager\PhotosApp.exe1aba03c4-b970-11e3-be75-74d4350708aeFileManager_6.3.9600.16384_neutral_neutral_cw5n1h2txyewyMicrosoft.Windows.PhotoManager

Error: (04/01/2014 09:34:51 AM) (Source: Microsoft-Windows-Immersive-Shell)(User: Arbeit_PC)
Description: FileManager_cw5n1h2txyewy!Microsoft.Windows.PhotoManager-2144927142

Error: (04/01/2014 09:34:41 AM) (Source: Microsoft-Windows-Immersive-Shell)(User: Arbeit_PC)
Description: FileManager_6.3.9600.16384_neutral_neutral_cw5n1h2txyewy+Microsoft.Windows.PhotoManager

Error: (03/24/2014 05:32:38 PM) (Source: Microsoft-Windows-CAPI2)(User: )
Description: 
Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll.

System Error:
Zugriff verweigert

Error: (03/25/2014 00:13:34 AM) (Source: Microsoft-Windows-CAPI2)(User: )
Description: 
Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll.

System Error:
Zugriff verweigert

Error: (03/25/2014 00:09:04 AM) (Source: Software Protection Platform Service)(User: )
Description: hr=0xC004C008RuleId=3482d82e-ca2c-4e1f-8864-da0267b484b2;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=9e473b6d-b591-4c46-9c44-90a865f22e76;NotificationInterval=1440;Trigger=TimerEvent

Error: (03/25/2014 00:09:04 AM) (Source: Software Protection Platform Service)(User: )
Description: hr=0xC004C0089e473b6d-b591-4c46-9c44-90a865f22e76


==================== Memory info =========================== 

Percentage of memory in use: 27%
Total physical RAM: 8087.38 MB
Available physical RAM: 5827.16 MB
Total Pagefile: 9367.38 MB
Available Pagefile: 7307.61 MB
Total Virtual: 131072 MB
Available Virtual: 131071.77 MB

==================== Drives ================================

Drive c: (Windows_8.1_Pro) (Fixed) (Total:466.33 GB) (Free:432.2 GB) NTFS
Drive d: (Daten) (Fixed) (Total:464.23 GB) (Free:408.99 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 932 GB) (Disk ID: 63E39877)

Partition: GPT Partition Type.

==================== End Of Log ============================

schrauber · 07.04.2014, 11:30

MBAM updaten, scannen und löschen lassen.

Downloade Dir bitte

AdwCleaner auf deinen Desktop.

Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
Starte die AdwCleaner.exe mit einem Doppelklick.
Stimme den Nutzungsbedingungen zu.
Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
- "Tracing" Schlüssel löschen
- Winsock Einstellungen zurücksetzen
- Proxy Einstellungen zurücksetzen
- Internet Explorer Richtlinien zurücksetzen
- Chrome Richtlinien zurücksetzen
- Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
Drücke eine beliebige Taste, um das Tool zu starten.
Je nach System kann der Scan eine Weile dauern.
Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

und ein frisches FRST log bitte.

AnneSommer · 07.04.2014, 21:29

Zitat:

Zitat von schrauber

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden..

Eine Frage zwischen durch

Nur beenden oder deaktivieren?

Anne

Und noch eine VorabFrage Malwarebyte bietet mir nur diese 3 Möglichkeiten

1. Quaratäne
2. Auschluss hinzufügen und
3.) ignorieren

Aber nichts von entfernen

schrauber · 08.04.2014, 12:17

Quarantäne ist das gleiche wie Entfernen

Zitat:

Nur beenden oder deaktivieren?

wenn müsste es korrekt beenden oder nur deaktivieren heissen

Aber ist eigentlich schnuppe

AnneSommer · 08.04.2014, 13:04

Danke Schonmal. mehr im laufe der nächsten 24 Stunden.

schrauber · 09.04.2014, 11:25

ok

AnneSommer · 09.04.2014, 23:35

Erst habe Ich MBAM laufen lassen, in die Quratäne verschoben und dann gelöscht.

Adware laufen lassen. Aus den fireFox Profil/Chronik wurde nichts gefunden.

Das Antivirenprogramm hatte Ich garnicht aufgerufen. So musste Ich es auch nicht bendet. Allerdings war es wie die Firewall aktiv.

Code:

ATTFilter

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.4 (04.06.2014:1)
OS: Windows 8.1 Pro x64
Ran by User on 10.04.2014 at  0:25:04,76
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values

Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows\\AppInit_DLLs



~~~ Registry Keys



~~~ Files



~~~ Folders



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 10.04.2014 at  0:28:21,87
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Heute Abend folgt der andere Rechner. Hat super gut geklappt. Danke für die Hilfe.

Anne

schrauber · 10.04.2014, 20:39

Zitat:

Heute Abend folgt der andere Rechner.

Anderer Rechner? Wir sind hier doch noch gar nit fertig

AnneSommer · 10.04.2014, 21:31

ADWCleaner habe Ich vergessen Moment

File 1 von Heute Nacht

Code:

ATTFilter

# AdwCleaner v3.023 - Bericht erstellt am 10/04/2014 um 00:22:03
# Aktualisiert 01/04/2014 von Xplode
# Betriebssystem : Windows 8.1 Pro  (64 bits)
# Benutzername : User - ARBEIT_PC
# Gestartet von : C:\Users\User\Downloads\adwcleaner.exe
# Option : Suchen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****


***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****


***** [ Browser ] *****

-\\ Internet Explorer v11.0.9600.16518


-\\ Mozilla Firefox v28.0 (de)

[ Datei : C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\qj4nih19.default-1396727863678\prefs.js ]


*************************

AdwCleaner[R0].txt - [3611 octets] - [06/04/2014 00:14:28]
AdwCleaner[R1].txt - [916 octets] - [06/04/2014 00:34:26]
AdwCleaner[R2].txt - [777 octets] - [10/04/2014 00:22:03]
AdwCleaner[S0].txt - [3499 octets] - [06/04/2014 00:15:02]

########## EOF - C:\AdwCleaner\AdwCleaner[R2].txt - [896 octets] ##########

ADW 2

Code:

ATTFilter

# AdwCleaner v3.023 - Bericht erstellt am 10/04/2014 um 01:13:14
# Aktualisiert 01/04/2014 von Xplode
# Betriebssystem : Windows 8.1 Pro  (64 bits)
# Benutzername : User - ARBEIT_PC
# Gestartet von : C:\Users\User\Downloads\adwcleaner.exe
# Option : Suchen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****


***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****


***** [ Browser ] *****

-\\ Internet Explorer v11.0.9600.16518


-\\ Mozilla Firefox v28.0 (de)

[ Datei : C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\qj4nih19.default-1396727863678\prefs.js ]


*************************

AdwCleaner[R0].txt - [3611 octets] - [06/04/2014 00:14:28]
AdwCleaner[R1].txt - [916 octets] - [06/04/2014 00:34:26]
AdwCleaner[R2].txt - [975 octets] - [10/04/2014 00:22:03]
AdwCleaner[R3].txt - [836 octets] - [10/04/2014 01:13:14]
AdwCleaner[S0].txt - [3499 octets] - [06/04/2014 00:15:02]

########## EOF - C:\AdwCleaner\AdwCleaner[R3].txt - [955 octets] ##########

schrauber · 13.04.2014, 13:46

ESET Online Scanner

Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
Lade und starte Eset Online Scanner
Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
Klicke auf Starten.
Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
Klicke am Ende des Suchlaufs auf Fertig stellen.
Schließe das Fenster von ESET.
Explorer öffnen.
C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
Logfile hier posten.
Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Downloade Dir bitte

SecurityCheck und:

Speichere es auf dem Desktop.
Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.

Poste den Inhalt bitte hier.

und ein frisches FRST log bitte. Noch Probleme?

AnneSommer · 13.04.2014, 22:40

Hallo

Hier das Eset Log

Code:

ATTFilter

ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=c6dbc22c48abbd448992c6cc71d69bbc
# engine=17868
# end=stopped
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2014-04-13 08:27:19
# local_time=2014-04-13 10:27:19 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1033
# osver=6.2.9200 NT 
# compatibility_mode=5893 16776574 100 94 1721391 3285811 0 0
# scanned=66337
# found=0
# cleaned=0
# scan_time=1055
ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=c6dbc22c48abbd448992c6cc71d69bbc
# engine=17868
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2014-04-13 09:07:24
# local_time=2014-04-13 11:07:24 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1033
# osver=6.2.9200 NT 
# compatibility_mode=5893 16776574 100 94 1727396 3288216 0 0
# scanned=170930
# found=0
# cleaned=0
# scan_time=2367

Security Check File

Code:

ATTFilter

 Results of screen317's Security Check version 0.99.81  
   x64 (UAC is enabled)  
 Internet Explorer 11  
``````````````Antivirus/Firewall Check:`````````````` 
AVG AntiVirus Free Edition 2014   
Windows Defender                  
 Antivirus up to date!   
`````````Anti-malware/Other Utilities Check:````````` 
 Java 7 Update 51  
 Adobe Flash Player 	13.0.0.182  
 Adobe Reader XI  
 Mozilla Firefox (28.0) 
 Mozilla Thunderbird (24.4.0) 
````````Process Check: objlist.exe by Laurent````````  
 AVG avgwdsvc.exe 
`````````````````System Health check````````````````` 
 Total Fragmentation on Drive C:  % 
````````````````````End of Log``````````````````````

FRST Files folgen gleich in seperaten Posts

FRST Teil 1

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-04-2014
Ran by User (administrator) on ARBEIT_PC on 13-04-2014 23:36:08
Running from C:\Users\User\Downloads
Windows 8.1 Pro (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal


==================== Processes (Whitelisted) =================

(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgrsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgcsrva.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
() C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgnsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgemca.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\WINDOWS\system32\igfxsrvc.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgui.exe
(RealNetworks, Inc.) C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PrivacyIconClient.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [IgfxTray] => C:\WINDOWS\system32\igfxtray.exe [391128 2014-01-25] (Intel Corporation)
HKLM\...\Run: [HotKeysCmds] => C:\WINDOWS\system32\hkcmd.exe [771544 2014-01-25] (Intel Corporation)
HKLM\...\Run: [Persistence] => C:\WINDOWS\system32\igfxpers.exe [770520 2014-01-25] (Intel Corporation)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13423688 2013-02-26] (Realtek Semiconductor)
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [286704 2013-04-30] (Intel Corporation)
HKLM-x32\...\Run: [IMSS] => C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe [134616 2013-04-11] (Intel Corporation)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-12-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AVG_UI] => C:\Program Files (x86)\AVG\AVG2014\avgui.exe [5180432 2014-04-06] (AVG Technologies CZ, s.r.o.)
HKLM-x32\...\Run: [TkBellExe] => C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe [295512 2014-04-09] (RealNetworks, Inc.)
Winlogon\Notify\igfxcui: C:\WINDOWS\system32\igfxdev.dll (Intel Corporation)
AppInit_DLLs: C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC64Loader.dll => C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC64Loader.dll File Not Found

==================== Internet (Whitelisted) ====================

BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: RealNetworks Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll (RealDownloader)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\qj4nih19.default-1396727863678
FF Homepage: https://www.google.com/?gfe_rd=cr&ei=KIFAU9qgF8yK8QeLxIGgAw
FF NetworkProxy: "backup.ftp", "66.35.68.145"
FF NetworkProxy: "backup.ftp_port", 8089
FF NetworkProxy: "backup.gopher", "216.24.198.210"
FF NetworkProxy: "backup.gopher_port", 80
FF NetworkProxy: "backup.socks", "66.35.68.145"
FF NetworkProxy: "backup.socks_port", 8089
FF NetworkProxy: "backup.ssl", "66.35.68.145"
FF NetworkProxy: "backup.ssl_port", 8089
FF NetworkProxy: "ftp", "168.63.150.60"
FF NetworkProxy: "ftp_port", 3128
FF NetworkProxy: "gopher", "216.24.198.210"
FF NetworkProxy: "gopher_port", 80
FF NetworkProxy: "http", "168.63.150.60"
FF NetworkProxy: "http_port", 3128
FF NetworkProxy: "no_proxies_on", ""
FF NetworkProxy: "share_proxy_settings", true
FF NetworkProxy: "socks", "168.63.150.60"
FF NetworkProxy: "socks_port", 3128
FF NetworkProxy: "ssl", "168.63.150.60"
FF NetworkProxy: "ssl_port", 3128
FF NetworkProxy: "type", 4
FF Plugin: @adobe.com/FlashPlayer - C:\WINDOWS\system32\Macromed\Flash\NPSWF64_13_0_0_182.dll ()
FF Plugin: @java.com/DTPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_182.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1210150.dll (Adobe Systems, Inc.)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=3.0.72 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @Nero.com/KM - C:\PROGRA~2\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL (Nero AG)
FF Plugin-x32: @real.com/nppl3260;version=16.0.3.51 - C:\Program Files (x86)\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlchromebrowserrecordext;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlhtml5videoshim;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlpepperflashvideoshim;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpplugin;version=16.0.3.51 - C:\Program Files (x86)\Real\RealPlayer\Netscape6\nprpplugin.dll (RealPlayer)
FF Plugin-x32: @realnetworks.com/npdlplugin;version=1 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll (RealDownloader)
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\qj4nih19.default-1396727863678\searchplugins\searchplugins-backup
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Microsoft .NET Framework Assistant - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\qj4nih19.default-1396727863678\Extensions\{20a82645-c095-46ed-80e3-08825760534b} [2014-04-05]
FF Extension: ProxTube - Unblock YouTube - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\qj4nih19.default-1396727863678\Extensions\{2541D29A-DB9E-4c1e-949A-31EFB4AEF4E7} [2014-04-05]
FF Extension: Proxy-Listen.de - Proxyswitcher - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\qj4nih19.default-1396727863678\Extensions\admin@proxy-listen.de.xpi [2014-04-05]
FF Extension: anonymoX - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\qj4nih19.default-1396727863678\Extensions\client@anonymox.net.xpi [2014-04-05]
FF Extension: Adblock Plus - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\qj4nih19.default-1396727863678\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-04-05]
FF Extension: BetterPrivacy - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\qj4nih19.default-1396727863678\Extensions\{d40f5e7b-d2cf-4856-b441-cc613eeffbe3}.xpi [2014-04-05]
FF HKLM-x32\...\Firefox\Extensions: [{DF153AFF-6948-45d7-AC98-4FC4AF8A08E2}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\
FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\ []

==================== Services (Whitelisted) =================

S3 AppleChargerSrv; C:\Windows\System32\AppleChargerSrv.exe [31272 2010-04-06] ()
R2 AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe [3655184 2014-04-01] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe [291912 2014-03-27] (AVG Technologies CZ, s.r.o.)
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15344 2013-04-30] (Intel Corporation)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [820184 2013-02-13] (Intel(R) Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-04-11] (Intel Corporation)
R2 RealNetworks Downloader Resolver Service; C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe [39056 2013-08-14] ()
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [348392 2014-03-20] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2014-03-20] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

S0 ADP80XX; C:\Windows\System32\drivers\ADP80XX.SYS [782176 2013-08-22] (PMC-Sierra)
R1 AppleCharger; C:\Windows\System32\DRIVERS\AppleCharger.sys [21584 2013-02-19] ()
S0 Avgboota; C:\Windows\System32\DRIVERS\avgboota.sys [20496 2013-09-04] (AVG Technologies CZ, s.r.o.)
R1 Avgdiska; C:\Windows\System32\DRIVERS\avgdiska.sys [153368 2014-03-27] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [236824 2014-04-01] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [192792 2014-03-27] (AVG Technologies CZ, s.r.o.)
R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [236824 2014-03-27] (AVG Technologies CZ, s.r.o.)
R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [324376 2014-03-27] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [130840 2014-03-31] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [32536 2014-03-27] (AVG Technologies CZ, s.r.o.)
R1 Avgwfpa; C:\Windows\system32\DRIVERS\avgwfpa.sys [274712 2014-03-31] (AVG Technologies CZ, s.r.o.)
S3 bcmfn2; C:\Windows\System32\drivers\bcmfn2.sys [17624 2013-08-13] (Windows (R) Win 7 DDK provider)
S3 iaLPSSi_GPIO; C:\Windows\System32\drivers\iaLPSSi_GPIO.sys [24568 2013-07-30] (Intel Corporation)
S3 iaLPSSi_I2C; C:\Windows\System32\drivers\iaLPSSi_I2C.sys [99320 2013-07-25] (Intel Corporation)
S0 iaStorAV; C:\Windows\System32\drivers\iaStorAV.sys [651248 2013-08-10] (Intel Corporation)
R0 intelpep; C:\Windows\System32\drivers\intelpep.sys [39768 2014-03-20] (Microsoft Corporation)
S3 kbldfltr; C:\Windows\System32\drivers\kbldfltr.sys [22272 2013-11-14] (Microsoft Corporation)
S0 LSI_SAS3; C:\Windows\System32\drivers\lsi_sas3.sys [81760 2013-08-22] (LSI Corporation)
R3 NdisVirtualBus; C:\Windows\System32\drivers\NdisVirtualBus.sys [16384 2013-08-22] (Microsoft Corporation)
S3 netvsc; C:\Windows\system32\DRIVERS\netvsc63.sys [87040 2013-08-22] (Microsoft Corporation)
S3 ReFS; C:\Windows\System32\Drivers\ReFS.sys [924512 2013-08-22] (Microsoft Corporation)
S3 SerCx2; C:\Windows\System32\drivers\SerCx2.sys [146776 2014-03-20] (Microsoft Corporation)
S0 stornvme; C:\Windows\System32\drivers\stornvme.sys [57176 2013-11-14] (Microsoft Corporation)
S3 UEFI; C:\Windows\System32\drivers\UEFI.sys [26976 2013-08-22] (Microsoft Corporation)
S1 UsbCharger; C:\Windows\System32\DRIVERS\UsbCharger.sys [21584 2013-05-06] ()
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [124760 2014-03-20] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-04-13 23:29 - 2014-04-13 23:29 - 00987448 _____ () C:\Users\User\Desktop\SecurityCheck.exe
2014-04-13 21:51 - 2014-04-13 21:51 - 00000639 _____ () C:\Users\User\Documents\esest1.txt
2014-04-13 21:18 - 2014-04-13 21:18 - 00000000 ____D () C:\Users\User\Downloads\FRST-OlderVersion
2014-04-11 18:25 - 2014-04-11 18:25 - 00085953 _____ () C:\Users\User\Documents\Expedia  Bestätigung2014.htm
2014-04-11 18:25 - 2014-04-11 18:25 - 00000000 ____D () C:\Users\User\Documents\Expedia  Bestätigung2014-Dateien
2014-04-11 18:24 - 2014-04-11 18:24 - 00281692 _____ () C:\Users\User\Documents\FLug2014nr1.odt
2014-04-11 16:54 - 2014-04-11 17:00 - 00000000 ____D () C:\Users\User\AppData\Local\Adobe
2014-04-10 22:24 - 2014-04-10 22:24 - 00001150 _____ () C:\Users\User\Documents\MBAM1004.txt
2014-04-10 21:57 - 2014-04-10 21:57 - 00000161 _____ () C:\Users\User\Documents\mbamprotect.txt
2014-04-10 21:56 - 2014-04-10 21:56 - 00000261 _____ () C:\Users\User\Documents\mabam9neu.txt
2014-04-10 21:53 - 2014-04-10 21:53 - 00001885 _____ () C:\Users\User\Documents\MBAMoheuhr.txt
2014-04-10 21:53 - 2014-04-10 21:53 - 00001883 _____ () C:\Users\User\Documents\MBAMkurz.txt
2014-04-10 21:52 - 2014-04-10 21:52 - 00003811 _____ () C:\Users\User\Documents\MBAMlang2.txt
2014-04-10 21:52 - 2014-04-10 21:52 - 00003810 _____ () C:\Users\User\Documents\MBAMlang.txt
2014-04-10 21:51 - 2014-04-10 21:51 - 00001880 _____ () C:\Users\User\Documents\1MBAM.txt
2014-04-10 21:49 - 2014-04-10 21:49 - 00001883 _____ () C:\Users\User\Documents\MBAMv943.txt
2014-04-10 21:48 - 2014-04-10 21:48 - 00001883 _____ () C:\Users\User\Documents\MBAMv942.txt
2014-04-10 21:48 - 2014-04-10 21:48 - 00000261 _____ () C:\Users\User\Documents\MBAMv941.txt
2014-04-10 00:28 - 2014-04-10 00:28 - 00000746 _____ () C:\Users\User\Desktop\JRT.txt
2014-04-10 00:25 - 2014-04-10 00:25 - 00000000 ____D () C:\WINDOWS\ERUNT
2014-04-10 00:24 - 2014-04-10 00:24 - 01016261 _____ (Thisisu) C:\Users\User\Downloads\JRT.exe
2014-04-09 21:50 - 2014-04-13 20:00 - 00003340 _____ () C:\WINDOWS\System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-55448800-1307107506-1312735153-1001
2014-04-09 21:50 - 2014-04-13 20:00 - 00003284 _____ () C:\WINDOWS\System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-55448800-1307107506-1312735153-1001
2014-04-09 21:50 - 2014-04-09 21:50 - 00000000 ____D () C:\Users\User\AppData\Roaming\RealNetworks
2014-04-09 21:49 - 2014-04-09 21:50 - 00000000 ____D () C:\Users\User\AppData\Roaming\Real
2014-04-09 21:49 - 2014-04-09 21:50 - 00000000 ____D () C:\ProgramData\Real
2014-04-09 21:49 - 2014-04-09 21:49 - 00272896 _____ (Progressive Networks) C:\WINDOWS\SysWOW64\pncrt.dll
2014-04-09 21:49 - 2014-04-09 21:49 - 00201872 _____ (RealNetworks, Inc.) C:\WINDOWS\SysWOW64\rmoc3260.dll
2014-04-09 21:49 - 2014-04-09 21:49 - 00006656 _____ (RealNetworks, Inc.) C:\WINDOWS\SysWOW64\pndx5016.dll
2014-04-09 21:49 - 2014-04-09 21:49 - 00005632 _____ (RealNetworks, Inc.) C:\WINDOWS\SysWOW64\pndx5032.dll
2014-04-09 21:49 - 2014-04-09 21:49 - 00001385 _____ () C:\Users\Public\Desktop\RealPlayer.lnk
2014-04-09 21:49 - 2014-04-09 21:49 - 00000000 ____D () C:\ProgramData\RealNetworks
2014-04-09 21:49 - 2014-04-09 21:49 - 00000000 ____D () C:\Program Files (x86)\RealNetworks
2014-04-09 21:49 - 2014-04-09 21:49 - 00000000 ____D () C:\Program Files (x86)\Real
2014-04-09 21:48 - 2014-04-09 21:48 - 39382624 _____ (RealNetworks, Inc.) C:\Users\User\Downloads\RealPlayer_de16.0.3.51.exe
2014-04-09 19:42 - 2014-04-09 19:42 - 00000000 ____D () C:\Users\User\Downloads\NCIS Los Angeles S05E20 HDTV XviD-FUM[ettv]
2014-04-09 19:41 - 2014-04-09 19:44 - 00000000 ____D () C:\Users\User\Downloads\NCIS.S11E20.HDTV.XviD-AFG
2014-04-09 19:39 - 2014-04-09 19:39 - 00029000 _____ () C:\Users\User\Downloads\E5622E0DFEB9B2A3E985ABFAA07678ADA5340E2A.torrent
2014-04-09 19:39 - 2014-04-09 19:39 - 00028775 _____ () C:\Users\User\Downloads\CB0EADBB8C371643D0C44533FBB465B6A335AAF5.torrent
2014-04-09 18:50 - 2014-03-31 03:16 - 23134208 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2014-04-09 18:50 - 2014-03-10 12:35 - 02008408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2014-04-09 18:50 - 2014-03-10 12:35 - 00377176 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys
2014-04-09 18:50 - 2014-03-06 11:19 - 01287576 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel32.dll
2014-04-09 18:50 - 2014-03-06 11:02 - 01109424 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2014-04-09 18:50 - 2014-03-06 08:17 - 00835584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2014-04-09 18:50 - 2014-03-06 08:10 - 01036288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kernel32.dll
2014-04-09 18:49 - 2014-04-09 18:49 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2014-04-09 18:49 - 2014-04-09 18:49 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2014-04-09 18:49 - 2014-03-31 01:57 - 17073152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2014-04-07 23:34 - 2014-04-07 23:34 - 00008864 _____ () C:\Users\User\Documents\test2.odt
2014-04-07 23:07 - 2014-04-07 23:07 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_User_LocationProvider_01_11_00.Wdf
2014-04-07 22:18 - 2014-04-07 22:18 - 00004321 _____ () C:\Users\User\Documents\Malwarebytes070414.txt
2014-04-07 20:25 - 2014-04-07 20:25 - 02278856 _____ () C:\Users\User\Downloads\avira_pc_cleaner_de.exe
2014-04-06 11:50 - 2014-04-06 11:53 - 00022406 _____ () C:\Users\User\Downloads\Addition.txt
2014-04-06 11:50 - 2014-04-06 11:50 - 00031515 _____ () C:\Users\User\Downloads\Shortcut.txt
2014-04-06 11:49 - 2014-04-13 23:36 - 00014824 _____ () C:\Users\User\Downloads\FRST.txt
2014-04-06 11:49 - 2014-04-13 23:36 - 00000000 ____D () C:\FRST
2014-04-06 11:46 - 2014-04-13 21:18 - 02157568 _____ (Farbar) C:\Users\User\Downloads\FRST64.exe
2014-04-06 11:44 - 2014-04-06 11:44 - 00000000 ____D () C:\Users\User\AppData\Local\Intel_Corporation
2014-04-06 01:23 - 2014-04-06 01:23 - 00004321 _____ () C:\Users\User\Documents\Malwarebytes060414.txt
2014-04-06 01:15 - 2014-04-06 01:15 - 00084333 _____ () C:\Users\User\Documents\OLtPapa.odt
2014-04-06 00:48 - 2014-04-10 21:56 - 00119512 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2014-04-06 00:48 - 2014-04-06 00:49 - 00001129 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-04-06 00:48 - 2014-04-06 00:49 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-04-06 00:48 - 2014-04-06 00:48 - 17523384 _____ (Malwarebytes Corporation ) C:\Users\User\Downloads\mbam-setup-2.0.0.1000.exe
2014-04-06 00:48 - 2014-04-06 00:48 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-04-06 00:48 - 2014-04-03 09:51 - 00088280 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2014-04-06 00:48 - 2014-04-03 09:51 - 00063192 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys
2014-04-06 00:48 - 2014-04-03 09:50 - 00025816 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys
2014-04-06 00:14 - 2014-04-10 22:29 - 00000000 ____D () C:\AdwCleaner
2014-04-06 00:09 - 2014-04-06 00:09 - 01426178 _____ () C:\Users\User\Downloads\adwcleaner.exe
2014-04-05 23:55 - 2014-04-05 23:55 - 00000893 _____ () C:\Users\User\Desktop\BitTorrent.lnk
2014-04-05 23:55 - 2014-04-05 23:55 - 00000873 _____ () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\BitTorrent.lnk
2014-04-05 23:54 - 2014-04-05 23:54 - 01642072 _____ (BitTorrent Inc.) C:\Users\User\Downloads\BitTorrent_7.9.1.30769.exe
2014-04-05 23:54 - 2014-04-05 23:54 - 01642072 _____ (BitTorrent Inc.) C:\Users\User\Downloads\BitTorrent_7.9.1.30769(1).exe
2014-04-05 22:55 - 2014-03-26 00:30 - 00001001 _____ () C:\Users\User\Documents\indexfile.txt
2014-04-05 22:54 - 2014-04-05 22:54 - 01035926 _____ () C:\Users\User\Downloads\MozBackup-1.5.1-EN.exe
2014-04-05 22:54 - 2014-04-05 22:54 - 00001054 _____ () C:\Users\Public\Desktop\MozBackup.lnk
2014-04-05 22:54 - 2014-04-05 22:54 - 00000000 ____D () C:\Program Files (x86)\MozBackup
2014-04-05 22:48 - 2014-04-09 23:36 - 00000000 ____D () C:\Users\User\AppData\Roaming\BitTorrent
2014-04-05 21:57 - 2014-04-05 21:57 - 00000000 ____D () C:\Users\User\Desktop\Alte Firefox-Daten
2014-04-05 21:11 - 2014-04-05 21:11 - 00009443 _____ () C:\Users\User\Documents\teseskklappt.odt
2014-04-03 20:58 - 2014-03-27 13:58 - 652747882 _____ () C:\Users\User\Documents\Thunderbird 24.4.0 (de) - 2014-03-27.pcv
2014-04-03 20:58 - 2014-03-26 01:28 - 571328306 _____ () C:\Users\User\Documents\Thunderbird 24.4.0 (de) - 2014-03-26.pcv
2014-04-03 20:57 - 2014-03-26 01:31 - 26713231 _____ () C:\Users\User\Documents\Firefox 27.0.1 (de) - 2014-03-26.pcv
2014-04-03 20:57 - 2014-03-26 01:08 - 00418189 _____ () C:\Users\User\Documents\Firefoxbookmarks-2014-03-26
2014-04-03 20:10 - 2014-04-03 20:10 - 00000000 ____D () C:\Users\User\AppData\Roaming\LibreOffice
2014-04-03 19:58 - 2014-04-03 19:58 - 00000000 ____D () C:\Users\Default\AppData\Roaming\TuneUp Software
2014-04-03 19:58 - 2014-04-03 19:58 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\TuneUp Software
2014-04-03 19:55 - 2014-04-03 19:55 - 00002113 _____ () C:\Users\Public\Desktop\Mozilla Thunderbird.lnk
2014-04-03 19:55 - 2014-04-03 19:55 - 00000000 ____D () C:\Users\User\AppData\Roaming\Thunderbird
2014-04-03 19:55 - 2014-04-03 19:55 - 00000000 ____D () C:\Users\User\AppData\Local\Thunderbird
2014-04-03 19:54 - 2014-04-03 19:54 - 21987424 _____ (Mozilla) C:\Users\User\Downloads\Thunderbird_Setup_de24.4.0.exe
2014-04-03 19:54 - 2014-04-03 19:54 - 00000000 ____D () C:\Users\User\AppData\Roaming\Macromedia
2014-04-03 19:54 - 2014-04-03 19:54 - 00000000 ____D () C:\Users\User\AppData\Local\Macromedia
2014-04-03 19:54 - 2014-04-03 19:54 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird
2014-04-01 21:03 - 2014-04-01 21:03 - 00236824 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgidsdrivera.sys
2014-04-01 09:35 - 2014-04-01 09:35 - 00000000 ____D () C:\Users\User\AppData\Roaming\vlc
2014-04-01 09:16 - 2014-04-01 09:16 - 00000742 _____ () C:\Users\User\Desktop\Datensicherung - Verknüpfung.lnk
2014-03-31 16:06 - 2014-03-31 16:06 - 00274712 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgwfpa.sys
2014-03-31 16:06 - 2014-03-31 16:06 - 00130840 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgmfx64.sys
2014-03-27 22:14 - 2014-03-27 22:14 - 00192792 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgidsha.sys
2014-03-27 22:14 - 2014-03-27 22:14 - 00153368 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgdiska.sys
2014-03-27 22:07 - 2014-03-27 22:07 - 00236824 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgldx64.sys
2014-03-27 22:05 - 2014-03-27 22:05 - 00324376 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgloga.sys
2014-03-27 22:03 - 2014-03-27 22:03 - 00032536 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgrkx64.sys
2014-03-25 00:19 - 2014-03-01 06:58 - 02765824 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2014-03-25 00:19 - 2014-03-01 06:17 - 00218624 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2014-03-25 00:19 - 2014-03-01 05:54 - 05768704 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2014-03-25 00:19 - 2014-03-01 05:47 - 02168320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2014-03-25 00:19 - 2014-03-01 05:42 - 00627200 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2014-03-25 00:19 - 2014-03-01 05:18 - 13051904 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2014-03-25 00:19 - 2014-03-01 05:14 - 04244480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2014-03-25 00:19 - 2014-03-01 05:10 - 02334208 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2014-03-25 00:19 - 2014-03-01 05:03 - 00524288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2014-03-25 00:19 - 2014-03-01 04:57 - 11266048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2014-03-25 00:19 - 2014-03-01 04:38 - 01393664 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2014-03-25 00:19 - 2014-03-01 04:32 - 01820160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2014-03-25 00:19 - 2014-03-01 04:27 - 01156096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2014-03-25 00:19 - 2014-03-01 04:25 - 00817664 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2014-03-25 00:19 - 2014-03-01 04:25 - 00703488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2014-03-25 00:18 - 2014-03-25 00:20 - 00000000 ____D () C:\Program Files (x86)\Nero
2014-03-25 00:18 - 2014-03-25 00:19 - 00000000 ____D () C:\ProgramData\Nero
2014-03-25 00:14 - 2014-03-25 00:14 - 00001484 _____ () C:\Users\Public\Desktop\LibreOffice 4.2.lnk
2014-03-25 00:13 - 2014-03-25 00:14 - 00000000 ____D () C:\Program Files (x86)\LibreOffice 4
2014-03-24 17:55 - 2014-03-24 17:55 - 00000000 ____D () C:\Users\User\AppData\Roaming\TuneUp Software
2014-03-24 17:55 - 2014-03-24 17:55 - 00000000 ____D () C:\Users\User\AppData\Roaming\AVG2014
2014-03-24 17:54 - 2014-03-24 17:55 - 00000000 ____D () C:\ProgramData\AVG2014
2014-03-24 17:54 - 2014-03-24 17:54 - 00000000 ___HD () C:\$AVG
2014-03-24 17:54 - 2014-03-24 17:54 - 00000000 ____D () C:\Program Files (x86)\AVG
2014-03-24 17:53 - 2014-04-13 20:05 - 00000000 ____D () C:\ProgramData\MFAData
2014-03-24 17:53 - 2014-04-03 20:59 - 00000000 ____D () C:\Users\User\AppData\Local\Avg2014
2014-03-24 17:53 - 2014-03-24 17:53 - 00000000 ____D () C:\Users\User\AppData\Local\MFAData
2014-03-24 17:33 - 2014-03-24 17:33 - 00000000 ___RD () C:\WINDOWS\BrowserChoice
2014-03-20 16:31 - 2014-04-13 23:23 - 00003930 _____ () C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{2033FA2E-7191-41AE-B4E8-6F112590EA2B}
2014-03-20 16:30 - 2014-04-13 22:56 - 01734124 _____ () C:\WINDOWS\WindowsUpdate.log
2014-03-20 16:30 - 2014-03-20 16:30 - 00001465 _____ () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-03-20 16:30 - 2014-03-20 16:30 - 00000020 ___SH () C:\Users\User\ntuser.ini
2014-03-20 16:30 - 2014-03-20 16:30 - 00000000 _SHDL () C:\Users\Default\Vorlagen
2014-03-20 16:30 - 2014-03-20 16:30 - 00000000 _SHDL () C:\Users\Default\Startmenü
2014-03-20 16:30 - 2014-03-20 16:30 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung
2014-03-20 16:30 - 2014-03-20 16:30 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen
2014-03-20 16:30 - 2014-03-20 16:30 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien
2014-03-20 16:30 - 2014-03-20 16:30 - 00000000 _SHDL () C:\Users\Default\Druckumgebung
2014-03-20 16:30 - 2014-03-20 16:30 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik
2014-03-20 16:30 - 2014-03-20 16:30 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder
2014-03-20 16:30 - 2014-03-20 16:30 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-03-20 16:30 - 2014-03-20 16:30 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf
2014-03-20 16:30 - 2014-03-20 16:30 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten
2014-03-20 16:30 - 2014-03-20 16:30 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten
2014-03-20 16:30 - 2014-03-20 16:30 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik
2014-03-20 16:30 - 2014-03-20 16:30 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder
2014-03-20 16:30 - 2014-03-20 16:30 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-03-20 16:30 - 2014-03-20 16:30 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf
2014-03-20 16:30 - 2014-03-20 16:30 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten
2014-03-20 16:29 - 2014-03-20 16:29 - 00023572 _____ () C:\WINDOWS\system32\emptyregdb.dat
2014-03-20 16:28 - 2014-03-20 16:29 - 00020958 _____ () C:\WINDOWS\diagwrn.xml
2014-03-20 16:28 - 2014-03-20 16:29 - 00020958 _____ () C:\WINDOWS\diagerr.xml
2014-03-20 16:28 - 2014-03-20 16:28 - 00000000 _SHDL () C:\Users\User\Vorlagen
2014-03-20 16:28 - 2014-03-20 16:28 - 00000000 _SHDL () C:\Users\User\Startmenü
2014-03-20 16:28 - 2014-03-20 16:28 - 00000000 _SHDL () C:\Users\User\Netzwerkumgebung
2014-03-20 16:28 - 2014-03-20 16:28 - 00000000 _SHDL () C:\Users\User\Lokale Einstellungen
2014-03-20 16:28 - 2014-03-20 16:28 - 00000000 _SHDL () C:\Users\User\Eigene Dateien
2014-03-20 16:28 - 2014-03-20 16:28 - 00000000 _SHDL () C:\Users\User\Druckumgebung
2014-03-20 16:28 - 2014-03-20 16:28 - 00000000 _SHDL () C:\Users\User\Documents\Eigene Musik
2014-03-20 16:28 - 2014-03-20 16:28 - 00000000 _SHDL () C:\Users\User\Documents\Eigene Bilder
2014-03-20 16:28 - 2014-03-20 16:28 - 00000000 _SHDL () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-03-20 16:28 - 2014-03-20 16:28 - 00000000 _SHDL () C:\Users\User\AppData\Local\Verlauf
2014-03-20 16:28 - 2014-03-20 16:28 - 00000000 _SHDL () C:\Users\User\AppData\Local\Anwendungsdaten
2014-03-20 16:28 - 2014-03-20 16:28 - 00000000 _SHDL () C:\Users\User\Anwendungsdaten
2014-03-20 16:28 - 2014-03-20 16:28 - 00000000 ___RD () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-03-20 16:28 - 2014-03-20 16:28 - 00000000 ____D () C:\WINDOWS\system32\config\bbimigrate
2014-03-20 16:28 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-03-20 16:28 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-03-20 16:28 - 2013-08-22 17:36 - 00000000 ____D () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-03-20 16:26 - 2014-03-25 00:21 - 00000000 ___DC () C:\WINDOWS\Panther
2014-03-20 16:26 - 2014-03-20 16:28 - 00000000 ____D () C:\Program Files\Intel
2014-03-20 16:26 - 2014-03-20 16:28 - 00000000 ____D () C:\Program Files (x86)\Intel
2014-03-20 16:26 - 2014-03-20 16:26 - 00000000 __SHD () C:\Recovery
2014-03-20 16:26 - 2014-03-20 16:26 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2014-03-20 16:26 - 2014-03-20 16:26 - 00000000 ____D () C:\WINDOWS\SysWOW64\RTCOM
2014-03-20 16:26 - 2014-03-20 16:26 - 00000000 ____D () C:\Program Files\Realtek
2014-03-20 16:26 - 2014-01-25 03:23 - 00064000 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.DLL
2014-03-20 16:26 - 2014-01-25 03:23 - 00060416 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.DLL
2014-03-20 16:25 - 2014-03-20 16:25 - 04189184 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2014-03-20 16:25 - 2014-03-20 16:25 - 03395920 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSService.dll
2014-03-20 16:25 - 2014-03-20 16:25 - 01643584 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2014-03-20 16:25 - 2014-03-20 16:25 - 01507704 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2014-03-20 16:25 - 2014-03-20 16:25 - 00848384 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll
2014-03-20 16:25 - 2014-03-20 16:25 - 00787968 _____ (Microsoft Corporation) C:\WINDOWS\system32\uDWM.dll
2014-03-20 16:25 - 2014-03-20 16:25 - 00695808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll
2014-03-20 16:25 - 2014-03-20 16:25 - 00615936 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAgent.exe
2014-03-20 16:25 - 2014-03-20 16:25 - 00570880 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdrm.dll
2014-03-20 16:25 - 2014-03-20 16:25 - 00548864 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2014-03-20 16:25 - 2014-03-20 16:25 - 00454656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2014-03-20 16:25 - 2014-03-20 16:25 - 00444928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdrm.dll
2014-03-20 16:25 - 2014-03-20 16:25 - 00393216 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMPhoto.dll
2014-03-20 16:25 - 2014-03-20 16:25 - 00348160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMPhoto.dll
2014-03-20 16:25 - 2014-03-20 16:25 - 00287744 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmregistration.dll
2014-03-20 16:25 - 2014-03-20 16:25 - 00249856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2014-03-20 16:25 - 2014-03-20 16:25 - 00240128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mdmregistration.dll
2014-03-20 16:25 - 2014-03-20 16:25 - 00197120 _____ (Microsoft Corporation) C:\WINDOWS\system32\scrrun.dll
2014-03-20 16:25 - 2014-03-20 16:25 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2014-03-20 16:25 - 2014-03-20 16:25 - 00156672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scrrun.dll
2014-03-20 16:25 - 2014-03-20 16:25 - 00084480 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSCollect.exe
2014-03-20 16:25 - 2014-03-20 16:25 - 00075360 _____ (Microsoft Corporation) C:\WINDOWS\system32\imagehlp.dll
2014-03-20 16:25 - 2014-03-20 16:25 - 00070680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\imagehlp.dll
2014-03-20 16:25 - 2014-03-20 16:25 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcaui.exe
2014-03-20 16:25 - 2014-03-20 16:25 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pcaui.exe
2014-03-20 16:24 - 2014-03-20 16:24 - 13209088 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2014-03-20 16:24 - 2014-03-20 16:24 - 11702272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2014-03-20 16:24 - 2014-03-20 16:24 - 07416832 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll
2014-03-20 16:24 - 2014-03-20 16:24 - 04961792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Search.dll
2014-03-20 16:24 - 2014-03-20 16:24 - 04217344 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncEngine.dll
2014-03-20 16:24 - 2014-03-20 16:24 - 02804224 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll
2014-03-20 16:24 - 2014-03-20 16:24 - 02041856 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2014-03-20 16:24 - 2014-03-20 16:24 - 01964032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2014-03-20 16:24 - 2014-03-20 16:24 - 01462216 _____ (Microsoft Corporation) C:\WINDOWS\system32\propsys.dll
2014-03-20 16:24 - 2014-03-20 16:24 - 01202888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\propsys.dll
2014-03-20 16:24 - 2014-03-20 16:24 - 01105408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFolder.dll
2014-03-20 16:24 - 2014-03-20 16:24 - 01020928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll
2014-03-20 16:24 - 2014-03-20 16:24 - 00919040 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll
2014-03-20 16:24 - 2014-03-20 16:24 - 00870912 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDrive.exe
2014-03-20 16:24 - 2014-03-20 16:24 - 00830976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchFolder.dll
2014-03-20 16:24 - 2014-03-20 16:24 - 00720384 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveTelemetry.dll
2014-03-20 16:24 - 2014-03-20 16:24 - 00708608 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2014-03-20 16:24 - 2014-03-20 16:24 - 00628736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmCoreR.dll
2014-03-20 16:24 - 2014-03-20 16:24 - 00553472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll
2014-03-20 16:24 - 2014-03-20 16:24 - 00236888 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdFilter.sys
2014-03-20 16:24 - 2014-03-20 16:24 - 00195584 _____ (Microsoft Corporation) C:\WINDOWS\system32\msrating.dll
2014-03-20 16:24 - 2014-03-20 16:24 - 00164864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrating.dll
2014-03-20 16:24 - 2014-03-20 16:24 - 00139776 _____ (Microsoft Corporation) C:\WINDOWS\system32\poqexec.exe
2014-03-20 16:24 - 2014-03-20 16:24 - 00139264 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieUnatt.exe
2014-03-20 16:24 - 2014-03-20 16:24 - 00124760 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdNisDrv.sys
2014-03-20 16:24 - 2014-03-20 16:24 - 00124416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\poqexec.exe
2014-03-20 16:24 - 2014-03-20 16:24 - 00121344 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveShell.dll
2014-03-20 16:24 - 2014-03-20 16:24 - 00115712 _____ (Microsoft Corporation) C:\WINDOWS\system32\winbici.dll
2014-03-20 16:24 - 2014-03-20 16:24 - 00112128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieUnatt.exe
2014-03-20 16:24 - 2014-03-20 16:24 - 00111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollector.exe
2014-03-20 16:24 - 2014-03-20 16:24 - 00105984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SkyDriveShell.dll
2014-03-20 16:24 - 2014-03-20 16:24 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll
2014-03-20 16:24 - 2014-03-20 16:24 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesetup.dll
2014-03-20 16:24 - 2014-03-20 16:24 - 00053760 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll
2014-03-20 16:24 - 2014-03-20 16:24 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieetwproxystub.dll
2014-03-20 16:24 - 2014-03-20 16:24 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwproxystub.dll
2014-03-20 16:24 - 2014-03-20 16:24 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll
2014-03-20 16:24 - 2014-03-20 16:24 - 00035856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdBoot.sys
2014-03-20 16:24 - 2014-03-20 16:24 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll
2014-03-20 16:24 - 2014-03-20 16:24 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iernonce.dll
2014-03-20 16:24 - 2014-03-20 16:24 - 00009701 _____ () C:\WINDOWS\SysWOW64\connectedsearch-results.searchconnector-ms
2014-03-20 16:24 - 2014-03-20 16:24 - 00009701 _____ () C:\WINDOWS\system32\connectedsearch-results.searchconnector-ms
2014-03-20 16:24 - 2014-03-20 16:24 - 00004096 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollectorres.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 21199256 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 18643560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 18576384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 13949440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 06640640 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 06353960 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppsvc.exe
2014-03-20 16:23 - 2014-03-20 16:23 - 05770752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 04604416 _____ (Microsoft Corporation) C:\WINDOWS\system32\d2d1.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 04175360 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbgeng.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 03936256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 03210528 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 02873344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbgeng.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 02804528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2vdec.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 02617344 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 02543960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2014-03-20 16:23 - 2014-03-20 16:23 - 02397184 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10warp.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 02295808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 02152448 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 02143960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 02133208 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 02071552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10warp.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 01928144 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 01720560 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 01530712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2014-03-20 16:23 - 2014-03-20 16:23 - 01503232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 01486848 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbghelp.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 01472048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 01415680 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 01399176 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 01374384 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpmde.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 01371824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 01317376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 01238016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbghelp.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 01227264 _____ (Microsoft Corporation) C:\WINDOWS\system32\mispace.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 01214976 _____ (Microsoft Corporation) C:\WINDOWS\system32\schedsvc.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 01204968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmde.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 01119064 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys
2014-03-20 16:23 - 2014-03-20 16:23 - 01057280 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdvidcrl.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00980480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mispace.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00960512 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00947712 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00914944 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgent.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00855552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdvidcrl.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00842752 _____ (Microsoft Corporation) C:\WINDOWS\system32\MsSpellCheckingFacility.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00834048 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00809872 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00802816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00770560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReAgent.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00764864 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00749056 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00745336 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00716288 _____ (Microsoft Corporation) C:\WINDOWS\system32\swprv.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00669352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00663680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00630272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MsSpellCheckingFacility.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00628736 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe
2014-03-20 16:23 - 2014-03-20 16:23 - 00589824 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastls.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00588800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00552624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00513536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastls.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00481944 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00478208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe
2014-03-20 16:23 - 2014-03-20 16:23 - 00470016 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfds.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00461312 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsGdiConverter.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00458616 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFault.exe
2014-03-20 16:23 - 2014-03-20 16:23 - 00447488 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppcomapi.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00433664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfds.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00419160 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00408576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdbss.sys
2014-03-20 16:23 - 2014-03-20 16:23 - 00408480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFault.exe
2014-03-20 16:23 - 2014-03-20 16:23 - 00407024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Faultrep.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00403456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
2014-03-20 16:23 - 2014-03-20 16:23 - 00386722 _____ () C:\WINDOWS\system32\ApnDatabase.xml
2014-03-20 16:23 - 2014-03-20 16:23 - 00382808 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2014-03-20 16:23 - 2014-03-20 16:23 - 00381168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00376320 _____ (Microsoft Corporation) C:\WINDOWS\system32\pnrpsvc.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00369280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Faultrep.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00336896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsGdiConverter.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00325464 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBXHCI.SYS
2014-03-20 16:23 - 2014-03-20 16:23 - 00311640 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\volsnap.sys
2014-03-20 16:23 - 2014-03-20 16:23 - 00306688 _____ (Microsoft Corporation) C:\WINDOWS\system32\msieftp.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00303616 _____ (Microsoft Corporation) C:\WINDOWS\system32\sti.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00282112 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemEventsBrokerServer.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00273920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msieftp.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00273408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00263168 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00249856 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpencom.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00233920 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00218112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Graphics.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00218112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sti.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00208896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpencom.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00207872 _____ (Microsoft Corporation) C:\WINDOWS\system32\deviceregistration.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00206336 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSClient.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00202240 _____ (Microsoft Corporation) C:\WINDOWS\system32\ubpm.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00178176 _____ (Microsoft Corporation) C:\WINDOWS\system32\easwrt.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00174592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSClient.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00160256 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWWIN.EXE
2014-03-20 16:23 - 2014-03-20 16:23 - 00142848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ipnat.sys
2014-03-20 16:23 - 2014-03-20 16:23 - 00142680 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBSTOR.SYS
2014-03-20 16:23 - 2014-03-20 16:23 - 00140800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\easwrt.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00138752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWWIN.EXE
2014-03-20 16:23 - 2014-03-20 16:23 - 00138240 _____ () C:\WINDOWS\system32\OEMLicense.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00136704 _____ (Microsoft Corporation) C:\WINDOWS\system32\psmsrv.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00131160 _____ (Microsoft Corporation) C:\WINDOWS\system32\easinvoker.exe
2014-03-20 16:23 - 2014-03-20 16:23 - 00103936 _____ () C:\WINDOWS\SysWOW64\OEMLicense.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsgqec.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tsgqec.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00032088 _____ (Microsoft Corporation) C:\WINDOWS\system32\ploptin.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00024064 _____ (Microsoft Corporation) C:\WINDOWS\system32\bi.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00019456 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BtaMPM.sys
2014-03-20 16:22 - 2014-03-20 16:22 - 07399256 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2014-03-20 16:22 - 2014-03-20 16:22 - 02896896 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll
2014-03-20 16:22 - 2014-03-20 16:22 - 02570240 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers.dll
2014-03-20 16:22 - 2014-03-20 16:22 - 02266624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll
2014-03-20 16:22 - 2014-03-20 16:22 - 02143744 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2014-03-20 16:22 - 2014-03-20 16:22 - 02140888 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
2014-03-20 16:22 - 2014-03-20 16:22 - 01843712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Display.dll
2014-03-20 16:22 - 2014-03-20 16:22 - 01816576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Display.dll
2014-03-20 16:22 - 2014-03-20 16:22 - 01765384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll
2014-03-20 16:22 - 2014-03-20 16:22 - 01765376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2014-03-20 16:22 - 2014-03-20 16:22 - 01756160 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMPDMC.exe
2014-03-20 16:22 - 2014-03-20 16:22 - 01476184 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2014-03-20 16:22 - 2014-03-20 16:22 - 01391104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMPDMC.exe
2014-03-20 16:22 - 2014-03-20 16:22 - 01345536 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe
2014-03-20 16:22 - 2014-03-20 16:22 - 01302528 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2014-03-20 16:22 - 2014-03-20 16:22 - 00922624 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2014-03-20 16:22 - 2014-03-20 16:22 - 00747008 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidcli.dll
2014-03-20 16:22 - 2014-03-20 16:22 - 00586240 _____ (Microsoft Corporation) C:\WINDOWS\system32\qedit.dll
2014-03-20 16:22 - 2014-03-20 16:22 - 00566784 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpncore.dll
2014-03-20 16:22 - 2014-03-20 16:22 - 00544768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlidcli.dll
2014-03-20 16:22 - 2014-03-20 16:22 - 00516496 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
2014-03-20 16:22 - 2014-03-20 16:22 - 00488448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qedit.dll
2014-03-20 16:22 - 2014-03-20 16:22 - 00449024 _____ (Microsoft Corporation) C:\WINDOWS\system32\appmgr.dll
2014-03-20 16:22 - 2014-03-20 16:22 - 00406400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll
2014-03-20 16:22 - 2014-03-20 16:22 - 00372568 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spaceport.sys
2014-03-20 16:22 - 2014-03-20 16:22 - 00366080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\appmgr.dll
2014-03-20 16:22 - 2014-03-20 16:22 - 00358896 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcomp.dll
2014-03-20 16:22 - 2014-03-20 16:22 - 00262144 _____ () C:\WINDOWS\system32\config\userdiff
2014-03-20 16:22 - 2014-03-20 16:22 - 00254464 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll
2014-03-20 16:22 - 2014-03-20 16:22 - 00225792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dcomp.dll
2014-03-20 16:22 - 2014-03-20 16:22 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll
2014-03-20 16:22 - 2014-03-20 16:22 - 00146776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\SerCx2.sys
2014-03-20 16:22 - 2014-03-20 16:22 - 00086872 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pdc.sys
2014-03-20 16:22 - 2014-03-20 16:22 - 00039768 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\intelpep.sys
2014-03-20 16:22 - 2014-03-20 16:22 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredentialMigrationHandler.dll
2014-03-20 16:22 - 2014-03-20 16:22 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredentialMigrationHandler.dll
2014-03-20 16:21 - 2014-03-20 16:21 - 00000000 ____D () C:\WINDOWS\SysWOW64\XPSViewer
2014-03-20 16:21 - 2014-03-20 16:21 - 00000000 ____D () C:\Program Files\Reference Assemblies
2014-03-20 16:21 - 2014-03-20 16:21 - 00000000 ____D () C:\Program Files\MSBuild
2014-03-20 16:21 - 2014-03-20 16:21 - 00000000 ____D () C:\Program Files (x86)\Reference Assemblies
2014-03-20 16:21 - 2014-03-20 16:21 - 00000000 ____D () C:\Program Files (x86)\MSBuild
2014-03-20 16:21 - 2013-08-03 06:48 - 01166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll
2014-03-20 16:21 - 2013-08-03 06:48 - 00124112 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2014-03-20 16:21 - 2013-08-03 06:48 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe
2014-03-20 16:21 - 2013-08-03 06:41 - 00778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll
2014-03-20 16:21 - 2013-08-03 06:41 - 00102608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2014-03-20 16:21 - 2013-08-03 06:41 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe
2014-03-20 16:09 - 2014-03-20 16:29 - 00006593 _____ () C:\WINDOWS\comsetup.log
2014-03-20 13:40 - 2014-03-20 13:40 - 00000000 ____D () C:\Users\User\AppData\Roaming\Mozilla
2014-03-20 13:40 - 2014-03-20 13:40 - 00000000 ____D () C:\Users\User\AppData\Local\Mozilla
2014-03-20 13:39 - 2014-03-20 13:39 - 00003550 _____ () C:\WINDOWS\System32\Tasks\CreateChoiceProcessTask
2014-03-20 12:48 - 2014-03-20 12:48 - 00000117 _____ () C:\WINDOWS\system32\netcfg-5187.txt
2014-03-20 12:48 - 2014-03-20 12:48 - 00000117 _____ () C:\WINDOWS\system32\netcfg-4968.txt
2014-03-20 12:46 - 2014-04-09 21:58 - 90655440 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2014-03-20 12:46 - 2014-04-09 21:58 - 00000000 ____D () C:\WINDOWS\system32\MRT
2014-03-20 12:46 - 2014-01-19 09:33 - 00270496 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2014-03-20 12:40 - 2013-05-04 06:51 - 00014848 ____N (Microsoft) C:\WINDOWS\system32\rars.rs
2014-03-20 12:40 - 2013-05-04 06:10 - 00014848 ____N (Microsoft) C:\WINDOWS\SysWOW64\rars.rs
2014-03-20 12:35 - 2014-03-20 12:35 - 00000117 _____ () C:\WINDOWS\system32\netcfg-5343.txt
2014-03-20 12:35 - 2014-03-20 12:35 - 00000117 _____ () C:\WINDOWS\system32\netcfg-5234.txt
2014-03-20 12:16 - 2014-04-13 22:39 - 00000884 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2014-03-20 12:16 - 2014-04-11 16:55 - 00003772 _____ () C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2014-03-20 12:16 - 2014-03-20 12:16 - 01199175 _____ () C:\WINDOWS\unins001.exe
2014-03-20 12:16 - 2014-03-20 12:16 - 01198049 _____ () C:\WINDOWS\unins000.exe
2014-03-20 12:16 - 2014-03-20 12:16 - 00021723 _____ () C:\WINDOWS\unins001.dat
2014-03-20 12:16 - 2014-03-20 12:16 - 00010818 _____ () C:\WINDOWS\unins000.dat
2014-03-20 12:16 - 2014-01-25 14:30 - 00131072 _____ (Sereby Corporation) C:\WINDOWS\SysWOW64\AiORuntimes.dll
2014-03-20 12:16 - 2013-12-23 15:44 - 00163480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comdlg32.ocx
2014-03-20 12:16 - 2013-12-20 01:48 - 01070232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mscomctl.ocx
2014-03-20 12:16 - 2013-12-20 01:48 - 00660120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mscomct2.ocx
2014-03-20 12:16 - 2013-12-20 01:48 - 00617896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comctl32.ocx
2014-03-20 12:16 - 2013-12-20 01:48 - 00444328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshflxgd.ocx
2014-03-20 12:16 - 2013-12-20 01:48 - 00416408 _____ (Microsoft Corporation ) C:\WINDOWS\SysWOW64\comct332.ocx
2014-03-20 12:16 - 2013-12-20 01:48 - 00279192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdatgrd.ocx
2014-03-20 12:16 - 2013-12-20 01:48 - 00259736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msflxgrd.ocx
2014-03-20 12:16 - 2013-12-20 01:48 - 00253080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdatlst.ocx
2014-03-20 12:16 - 2013-12-20 01:48 - 00222360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tabctl32.ocx
2014-03-20 12:16 - 2013-12-20 01:48 - 00219288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\richtx32.ocx
2014-03-20 12:16 - 2013-12-20 01:48 - 00218776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dblist32.ocx
2014-03-20 12:16 - 2013-12-20 01:48 - 00212112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mci32.ocx
2014-03-20 12:16 - 2013-12-20 01:48 - 00179352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmask32.ocx
2014-03-20 12:16 - 2013-12-20 01:48 - 00170920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comct232.ocx
2014-03-20 12:16 - 2013-12-20 01:48 - 00131728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msinet.ocx
2014-03-20 12:16 - 2013-12-20 01:48 - 00130712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msstdfmt.dll
2014-03-20 12:16 - 2013-12-20 01:48 - 00127640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mswinsck.ocx
2014-03-20 12:16 - 2013-12-20 01:48 - 00119960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mscomm32.ocx
2014-03-20 12:16 - 2013-12-20 01:48 - 00108696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msstkprp.dll
2014-03-20 12:16 - 2013-12-20 01:48 - 00104088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\picclp32.ocx
2014-03-20 12:16 - 2013-12-20 01:48 - 00084624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sysinfo.ocx
2014-03-20 12:16 - 2013-09-20 00:00 - 00269824 _____ (The OpenSSL Project, hxxp://www.openssl.org/) C:\WINDOWS\SysWOW64\libssl32.dll
2014-03-20 12:16 - 2013-09-11 10:55 - 00458608 _____ (AutoIt Team) C:\WINDOWS\SysWOW64\autoitx3.dll
2014-03-20 12:16 - 2013-08-31 21:40 - 03115385 _____ (Red Hat) C:\WINDOWS\SysWOW64\cygwin1.dll
2014-03-20 12:16 - 2013-02-11 10:35 - 01178624 _____ (The OpenSSL Project, hxxp://www.openssl.org/) C:\WINDOWS\SysWOW64\libeay32.dll
2014-03-20 12:16 - 2013-02-11 10:35 - 00269824 _____ (The OpenSSL Project, hxxp://www.openssl.org/) C:\WINDOWS\SysWOW64\ssleay32.dll
2014-03-20 12:16 - 2012-06-14 15:36 - 00107520 _____ () C:\WINDOWS\SysWOW64\zlib1.dll
2014-03-20 12:16 - 2012-04-03 17:11 - 00138752 _____ () C:\WINDOWS\SysWOW64\libpng15.dll
2014-03-20 12:16 - 2011-10-12 04:09 - 04033440 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\libmmd.dll
2014-03-20 12:16 - 2011-10-01 09:16 - 00445016 _____ (Creative Labs) C:\WINDOWS\SysWOW64\wrap_oal.dll
2014-03-20 12:16 - 2011-10-01 09:16 - 00109144 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\WINDOWS\SysWOW64\openal32.dll
2014-03-20 12:16 - 2011-01-12 14:36 - 01054208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfc71u.dll
2014-03-20 12:16 - 2011-01-12 14:25 - 00065536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfc71deu.dll
2014-03-20 12:16 - 2011-01-12 14:25 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfc71ita.dll
2014-03-20 12:16 - 2011-01-12 14:25 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfc71fra.dll
2014-03-20 12:16 - 2011-01-12 14:25 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfc71esp.dll
2014-03-20 12:16 - 2011-01-12 14:25 - 00057344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfc71enu.dll
2014-03-20 12:16 - 2011-01-12 14:25 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfc71kor.dll
2014-03-20 12:16 - 2011-01-12 14:25 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfc71jpn.dll
2014-03-20 12:16 - 2011-01-12 14:25 - 00045056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfc71cht.dll
2014-03-20 12:16 - 2011-01-12 14:25 - 00040960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfc71chs.dll
2014-03-20 12:16 - 2011-01-12 14:19 - 01060864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfc71.dll
2014-03-20 12:16 - 2011-01-12 13:53 - 00090112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\atl71.dll
2014-03-20 12:16 - 2010-06-27 18:44 - 00053248 _____ (Adobe Systems, Incorporated) C:\WINDOWS\system\plugin.dll
2014-03-20 12:16 - 2010-06-02 05:55 - 00527192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_7.dll
2014-03-20 12:16 - 2010-06-02 05:55 - 00518488 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_7.dll
2014-03-20 12:16 - 2010-06-02 05:55 - 00239960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_7.dll
2014-03-20 12:16 - 2010-06-02 05:55 - 00176984 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_7.dll
2014-03-20 12:16 - 2010-06-02 05:55 - 00077656 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_5.dll
2014-03-20 12:16 - 2010-06-02 05:55 - 00074072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_5.dll
2014-03-20 12:16 - 2010-05-26 12:41 - 02526056 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_43.dll
2014-03-20 12:16 - 2010-05-26 12:41 - 02401112 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_43.dll
2014-03-20 12:16 - 2010-05-26 12:41 - 02106216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_43.dll
2014-03-20 12:16 - 2010-05-26 12:41 - 01998168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_43.dll
2014-03-20 12:16 - 2010-05-26 12:41 - 01907552 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dcsx_43.dll
2014-03-20 12:16 - 2010-05-26 12:41 - 01868128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dcsx_43.dll
2014-03-20 12:16 - 2010-05-26 12:41 - 00511328 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_43.dll
2014-03-20 12:16 - 2010-05-26 12:41 - 00470880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_43.dll
2014-03-20 12:16 - 2010-05-26 12:41 - 00276832 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx11_43.dll
2014-03-20 12:16 - 2010-05-26 12:41 - 00248672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx11_43.dll
2014-03-20 12:16 - 2010-03-18 21:21 - 00799568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdia100.dll
2014-03-20 12:16 - 2010-02-04 11:01 - 00530776 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_6.dll
2014-03-20 12:16 - 2010-02-04 11:01 - 00528216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_6.dll
2014-03-20 12:16 - 2010-02-04 11:01 - 00238936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_6.dll
2014-03-20 12:16 - 2010-02-04 11:01 - 00176984 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_6.dll
2014-03-20 12:16 - 2010-02-04 11:01 - 00078680 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_4.dll
2014-03-20 12:16 - 2010-02-04 11:01 - 00074072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_4.dll
2014-03-20 12:16 - 2010-02-04 11:01 - 00024920 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_7.dll
2014-03-20 12:16 - 2010-02-04 11:01 - 00022360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_7.dll
2014-03-20 12:16 - 2009-09-04 18:44 - 00517960 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_5.dll
2014-03-20 12:16 - 2009-09-04 18:44 - 00515416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_5.dll
2014-03-20 12:16 - 2009-09-04 18:44 - 00238936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_5.dll
2014-03-20 12:16 - 2009-09-04 18:44 - 00176968 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_5.dll
2014-03-20 12:16 - 2009-09-04 18:44 - 00073544 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_3.dll
2014-03-20 12:16 - 2009-09-04 18:44 - 00069464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_3.dll
2014-03-20 12:16 - 2009-09-04 18:29 - 05554512 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dcsx_42.dll
2014-03-20 12:16 - 2009-09-04 18:29 - 05501792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dcsx_42.dll
2014-03-20 12:16 - 2009-09-04 18:29 - 02582888 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_42.dll
2014-03-20 12:16 - 2009-09-04 18:29 - 02475352 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_42.dll
2014-03-20 12:16 - 2009-09-04 18:29 - 01974616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_42.dll
2014-03-20 12:16 - 2009-09-04 18:29 - 01892184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_42.dll
2014-03-20 12:16 - 2009-09-04 18:29 - 00523088 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_42.dll
2014-03-20 12:16 - 2009-09-04 18:29 - 00453456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_42.dll
2014-03-20 12:16 - 2009-09-04 18:29 - 00285024 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx11_42.dll
2014-03-20 12:16 - 2009-09-04 18:29 - 00235344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx11_42.dll
2014-03-20 12:16 - 2009-03-16 15:18 - 00521560 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_4.dll
2014-03-20 12:16 - 2009-03-16 15:18 - 00517448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_4.dll
2014-03-20 12:16 - 2009-03-16 15:18 - 00235352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_4.dll
2014-03-20 12:16 - 2009-03-16 15:18 - 00174936 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_4.dll
2014-03-20 12:16 - 2009-03-16 15:18 - 00024920 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_6.dll
2014-03-20 12:16 - 2009-03-16 15:18 - 00022360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_6.dll
2014-03-20 12:16 - 2009-03-09 16:27 - 05425496 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_41.dll
2014-03-20 12:16 - 2009-03-09 16:27 - 04178264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_41.dll
2014-03-20 12:16 - 2009-03-09 16:27 - 02430312 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_41.dll
2014-03-20 12:16 - 2009-03-09 16:27 - 01846632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_41.dll
2014-03-20 12:16 - 2009-03-09 16:27 - 00520544 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_41.dll
2014-03-20 12:16 - 2009-03-09 16:27 - 00453456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_41.dll
2014-03-20 12:16 - 2008-10-27 11:04 - 00518480 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_3.dll
2014-03-20 12:16 - 2008-10-27 11:04 - 00514384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_3.dll
2014-03-20 12:16 - 2008-10-27 11:04 - 00235856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_3.dll
2014-03-20 12:16 - 2008-10-27 11:04 - 00175440 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_3.dll
2014-03-20 12:16 - 2008-10-27 11:04 - 00074576 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_2.dll
2014-03-20 12:16 - 2008-10-27 11:04 - 00070992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_2.dll
2014-03-20 12:16 - 2008-10-27 11:04 - 00025936 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_5.dll
2014-03-20 12:16 - 2008-10-27 11:04 - 00023376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_5.dll
2014-03-20 12:16 - 2008-10-15 07:22 - 05631312 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_40.dll
2014-03-20 12:16 - 2008-10-15 07:22 - 04379984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_40.dll
2014-03-20 12:16 - 2008-10-15 07:22 - 02605920 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_40.dll
2014-03-20 12:16 - 2008-10-15 07:22 - 02036576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_40.dll
2014-03-20 12:16 - 2008-10-15 07:22 - 00519000 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_40.dll
2014-03-20 12:16 - 2008-10-15 07:22 - 00452440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_40.dll
2014-03-20 12:16 - 2008-08-26 07:40 - 00162304 _____ () C:\WINDOWS\SysWOW64\libpng13.dll
2014-03-20 12:16 - 2008-07-31 11:41 - 00238088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_2.dll
2014-03-20 12:16 - 2008-07-31 11:41 - 00177672 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_2.dll
2014-03-20 12:16 - 2008-07-31 11:41 - 00072200 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_1.dll
2014-03-20 12:16 - 2008-07-31 11:41 - 00068616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_1.dll
2014-03-20 12:16 - 2008-07-31 11:40 - 00513544 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_2.dll
2014-03-20 12:16 - 2008-07-31 11:40 - 00509448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_2.dll
2014-03-20 12:16 - 2008-07-10 12:01 - 00467984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_39.dll
2014-03-20 12:16 - 2008-07-10 12:00 - 04992520 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_39.dll
2014-03-20 12:16 - 2008-07-10 12:00 - 03851784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_39.dll
2014-03-20 12:16 - 2008-07-10 12:00 - 01942552 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_39.dll
2014-03-20 12:16 - 2008-07-10 12:00 - 01493528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_39.dll
2014-03-20 12:16 - 2008-07-10 12:00 - 00540688 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_39.dll
2014-03-20 12:16 - 2008-05-30 15:19 - 00511496 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_1.dll
2014-03-20 12:16 - 2008-05-30 15:19 - 00507400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_1.dll
2014-03-20 12:16 - 2008-05-30 15:18 - 00238088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_1.dll
2014-03-20 12:16 - 2008-05-30 15:18 - 00177672 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_1.dll
2014-03-20 12:16 - 2008-05-30 15:17 - 00068104 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_0.dll
2014-03-20 12:16 - 2008-05-30 15:17 - 00065032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_0.dll
2014-03-20 12:16 - 2008-05-30 15:17 - 00025608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_4.dll
2014-03-20 12:16 - 2008-05-30 15:16 - 00028168 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_4.dll
2014-03-20 12:16 - 2008-05-30 15:11 - 04991496 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_38.dll
2014-03-20 12:16 - 2008-05-30 15:11 - 03850760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_38.dll
2014-03-20 12:16 - 2008-05-30 15:11 - 01941528 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_38.dll
2014-03-20 12:16 - 2008-05-30 15:11 - 01491992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_38.dll
2014-03-20 12:16 - 2008-05-30 15:11 - 00540688 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_38.dll
2014-03-20 12:16 - 2008-05-30 15:11 - 00467984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_38.dll
2014-03-20 12:16 - 2008-03-14 18:21 - 01008128 _____ (GnuWin32 <hxxp://gnuwin32.sourceforge.net>) C:\WINDOWS\SysWOW64\libiconv2.dll
2014-03-20 12:16 - 2008-03-05 17:04 - 00489480 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_0.dll
2014-03-20 12:16 - 2008-03-05 17:03 - 00479752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_0.dll
2014-03-20 12:16 - 2008-03-05 17:03 - 00238088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_0.dll
2014-03-20 12:16 - 2008-03-05 17:03 - 00177672 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_0.dll
2014-03-20 12:16 - 2008-03-05 17:00 - 00028168 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_3.dll
2014-03-20 12:16 - 2008-03-05 17:00 - 00025608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_3.dll
2014-03-20 12:16 - 2008-03-05 16:56 - 04910088 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_37.dll
2014-03-20 12:16 - 2008-03-05 16:56 - 03786760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_37.dll
2014-03-20 12:16 - 2008-03-05 16:56 - 01860120 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_37.dll
2014-03-20 12:16 - 2008-03-05 16:56 - 01420824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_37.dll
2014-03-20 12:16 - 2008-02-06 00:07 - 00529424 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_37.dll
2014-03-20 12:16 - 2008-02-06 00:07 - 00462864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_37.dll
2014-03-20 12:16 - 2007-10-22 04:40 - 00411656 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_10.dll
2014-03-20 12:16 - 2007-10-22 04:39 - 00267272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_10.dll
2014-03-20 12:16 - 2007-10-22 04:37 - 00021000 _____ (Microsoft Corporation) C:\WINDOWS\system32\x3daudio1_2.dll
2014-03-20 12:16 - 2007-10-22 04:37 - 00017928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\x3daudio1_2.dll
2014-03-20 12:16 - 2007-10-12 16:14 - 05081608 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_36.dll
2014-03-20 12:16 - 2007-10-12 16:14 - 03734536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_36.dll
2014-03-20 12:16 - 2007-10-12 16:14 - 02006552 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dcompiler_36.dll
2014-03-20 12:16 - 2007-10-12 16:14 - 01374232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dcompiler_36.dll
2014-03-20 12:16 - 2007-10-02 10:56 - 00508264 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_36.dll
2014-03-20 12:16 - 2007-10-02 10:56 - 00444776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_36.dll
2014-03-20 12:16 - 2007-07-20 01:57 - 00411496 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_9.dll
2014-03-20 12:16 - 2007-07-20 01:57 - 00267112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_9.dll
2014-03-20 12:16 - 2007-07-19 19:14 - 05073256 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_35.dll
2014-03-20 12:16 - 2007-07-19 19:14 - 03727720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_35.dll
2014-03-20 12:16 - 2007-07-19 19:14 - 01985904 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dcompiler_35.dll
2014-03-20 12:16 - 2007-07-19 19:14 - 01358192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dcompiler_35.dll
2014-03-20 12:16 - 2007-07-19 19:14 - 00508264 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_35.dll
2014-03-20 12:16 - 2007-07-19 19:14 - 00444776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_35.dll
2014-03-20 12:16 - 2007-06-20 21:49 - 00409960 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_8.dll
2014-03-20 12:16 - 2007-06-20 21:46 - 00266088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_8.dll
2014-03-20 12:16 - 2007-05-16 17:45 - 04496232 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_34.dll

AnneSommer · 13.04.2014, 22:41

Teil 2

Code:

ATTFilter

2014-03-20 12:16 - 2007-05-16 17:45 - 03497832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_34.dll
2014-03-20 12:16 - 2007-05-16 17:45 - 01401200 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dcompiler_34.dll
2014-03-20 12:16 - 2007-05-16 17:45 - 01124720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dcompiler_34.dll
2014-03-20 12:16 - 2007-05-16 17:45 - 00506728 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_34.dll
2014-03-20 12:16 - 2007-05-16 17:45 - 00443752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_34.dll
2014-03-20 12:16 - 2007-04-04 19:55 - 00403304 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_7.dll
2014-03-20 12:16 - 2007-04-04 19:55 - 00261480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_7.dll
2014-03-20 12:16 - 2007-04-04 19:54 - 00107368 _____ (Microsoft Corporation) C:\WINDOWS\system32\xinput1_3.dll
2014-03-20 12:16 - 2007-04-04 19:53 - 00081768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xinput1_3.dll
2014-03-20 12:16 - 2007-03-15 17:57 - 00506728 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_33.dll
2014-03-20 12:16 - 2007-03-15 17:57 - 00443752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_33.dll
2014-03-20 12:16 - 2007-03-12 17:42 - 04494184 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_33.dll
2014-03-20 12:16 - 2007-03-12 17:42 - 03495784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_33.dll
2014-03-20 12:16 - 2007-03-12 17:42 - 01400176 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dcompiler_33.dll
2014-03-20 12:16 - 2007-03-12 17:42 - 01123696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dcompiler_33.dll
2014-03-20 12:16 - 2007-03-05 13:42 - 00015128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\x3daudio1_1.dll
2014-03-20 12:16 - 2007-02-01 23:13 - 00503808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcp71.dll
2014-03-20 12:16 - 2007-02-01 20:11 - 00344064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcr71.dll
2014-03-20 12:16 - 2007-01-30 23:04 - 00339968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcr70.dll
2014-03-20 12:16 - 2007-01-24 16:27 - 00393576 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_6.dll
2014-03-20 12:16 - 2007-01-24 16:27 - 00255848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_6.dll
2014-03-20 12:16 - 2006-12-08 13:02 - 00251672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_5.dll
2014-03-20 12:16 - 2006-12-08 13:00 - 00390424 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_5.dll
2014-03-20 12:16 - 2006-11-29 14:06 - 04398360 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_32.dll
2014-03-20 12:16 - 2006-11-29 14:06 - 03426072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_32.dll
2014-03-20 12:16 - 2006-11-29 14:06 - 00469264 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10.dll
2014-03-20 12:16 - 2006-11-29 14:06 - 00440080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10.dll
2014-03-20 12:16 - 2006-09-28 17:05 - 03977496 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_31.dll
2014-03-20 12:16 - 2006-09-28 17:05 - 02414360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_31.dll
2014-03-20 12:16 - 2006-09-28 17:05 - 00237848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_4.dll
2014-03-20 12:16 - 2006-09-28 17:04 - 00364824 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_4.dll
2014-03-20 12:16 - 2006-09-28 17:03 - 00017688 _____ (Microsoft Corporation) C:\WINDOWS\system32\x3daudio1_1.dll
2014-03-20 12:16 - 2006-08-26 01:28 - 01017344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfc70u.dll
2014-03-20 12:16 - 2006-08-26 01:15 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfc70ita.dll
2014-03-20 12:16 - 2006-08-26 01:15 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfc70fra.dll
2014-03-20 12:16 - 2006-08-26 01:15 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfc70esp.dll
2014-03-20 12:16 - 2006-08-26 01:15 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfc70deu.dll
2014-03-20 12:16 - 2006-08-26 01:15 - 00057344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfc70enu.dll
2014-03-20 12:16 - 2006-08-26 01:15 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfc70kor.dll
2014-03-20 12:16 - 2006-08-26 01:15 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfc70jpn.dll
2014-03-20 12:16 - 2006-08-26 01:15 - 00045056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfc70cht.dll
2014-03-20 12:16 - 2006-08-26 01:15 - 00040960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfc70chs.dll
2014-03-20 12:16 - 2006-08-26 01:07 - 01024000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfc70.dll
2014-03-20 12:16 - 2006-08-26 00:17 - 00086016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\atl70.dll
2014-03-20 12:16 - 2006-07-28 10:31 - 00083736 _____ (Microsoft Corporation) C:\WINDOWS\system32\xinput1_2.dll
2014-03-20 12:16 - 2006-07-28 10:30 - 00363288 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_3.dll
2014-03-20 12:16 - 2006-07-28 10:30 - 00236824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_3.dll
2014-03-20 12:16 - 2006-07-28 10:30 - 00062744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xinput1_2.dll
2014-03-20 12:16 - 2006-05-31 08:24 - 00230168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_2.dll
2014-03-20 12:16 - 2006-05-31 08:22 - 00354072 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_2.dll
2014-03-20 12:16 - 2006-03-31 13:41 - 03927248 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_30.dll
2014-03-20 12:16 - 2006-03-31 13:40 - 02388176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_30.dll
2014-03-20 12:16 - 2006-03-31 13:40 - 00352464 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_1.dll
2014-03-20 12:16 - 2006-03-31 13:39 - 00229584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_1.dll
2014-03-20 12:16 - 2006-03-31 13:39 - 00083664 _____ (Microsoft Corporation) C:\WINDOWS\system32\xinput1_1.dll
2014-03-20 12:16 - 2006-03-31 13:39 - 00062672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xinput1_1.dll
2014-03-20 12:16 - 2006-02-03 09:43 - 03830992 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_29.dll
2014-03-20 12:16 - 2006-02-03 09:43 - 02332368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_29.dll
2014-03-20 12:16 - 2006-02-03 09:42 - 00355536 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_0.dll
2014-03-20 12:16 - 2006-02-03 09:42 - 00230096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_0.dll
2014-03-20 12:16 - 2006-02-03 09:41 - 00016592 _____ (Microsoft Corporation) C:\WINDOWS\system32\x3daudio1_0.dll
2014-03-20 12:16 - 2006-02-03 09:41 - 00014032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\x3daudio1_0.dll
2014-03-20 12:16 - 2005-12-05 19:09 - 03815120 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_28.dll
2014-03-20 12:16 - 2005-12-05 19:09 - 02323664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_28.dll
2014-03-20 12:16 - 2005-07-22 20:59 - 03807440 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_27.dll
2014-03-20 12:16 - 2005-07-22 20:59 - 02319568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_27.dll
2014-03-20 12:16 - 2005-05-26 16:34 - 03767504 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_26.dll
2014-03-20 12:16 - 2005-05-26 16:34 - 02297552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_26.dll
2014-03-20 12:16 - 2005-05-06 14:52 - 00103424 _____ (GNU <www.gnu.org>) C:\WINDOWS\SysWOW64\libintl3.dll
2014-03-20 12:16 - 2005-03-18 18:19 - 03823312 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_25.dll
2014-03-20 12:16 - 2005-03-18 18:19 - 02337488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_25.dll
2014-03-20 12:16 - 2005-02-05 20:45 - 03544272 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_24.dll
2014-03-20 12:16 - 2005-02-05 20:45 - 02222800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_24.dll
2014-03-20 12:16 - 2005-01-20 20:25 - 00054784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvci70.dll
2014-03-20 12:16 - 2002-01-05 06:40 - 00487424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcp70.dll
2014-03-20 12:16 - 1996-01-12 04:00 - 00935632 _____ (Microsoft Corporation) C:\WINDOWS\system\vb40016.dll
2014-03-20 12:16 - 1996-01-12 04:00 - 00722192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vb40032.dll
2014-03-20 12:16 - 1994-11-17 14:00 - 00210944 _____ () C:\WINDOWS\system\msvcrt10.dll
2014-03-20 12:16 - 1993-05-11 20:00 - 00398416 _____ (Microsoft Corporation) C:\WINDOWS\system\vbrun300.dll
2014-03-20 12:16 - 1992-10-21 01:00 - 00356992 _____ (Microsoft Corporation) C:\WINDOWS\system\vbrun200.dll
2014-03-20 12:16 - 1991-05-10 02:00 - 00271264 _____ () C:\WINDOWS\system\vbrun100.dll
2014-03-20 12:14 - 2014-03-20 12:15 - 00000000 ____D () C:\ProgramData\Package Cache
2014-03-20 12:09 - 2014-03-20 12:09 - 00000000 ____D () C:\ProgramData\Adobe
2014-03-20 12:09 - 2014-03-20 12:09 - 00000000 ____D () C:\Program Files (x86)\Adobe
2014-03-20 12:08 - 2014-03-20 12:08 - 00000000 ____D () C:\Program Files (x86)\K-Lite Codec Pack
2014-03-20 12:08 - 2013-12-01 15:10 - 00257624 _____ () C:\WINDOWS\system32\unrar64.dll
2014-03-20 12:08 - 2013-12-01 15:10 - 00218200 _____ () C:\WINDOWS\SysWOW64\unrar.dll
2014-03-20 12:07 - 2014-03-20 16:28 - 00000000 ____D () C:\WINDOWS\SysWOW64\Adobe
2014-03-20 12:07 - 2014-03-20 12:07 - 00312744 _____ (Oracle Corporation) C:\WINDOWS\system32\javaws.exe
2014-03-20 12:07 - 2014-03-20 12:07 - 00264616 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\javaws.exe
2014-03-20 12:07 - 2014-03-20 12:07 - 00189352 _____ (Oracle Corporation) C:\WINDOWS\system32\javaw.exe
2014-03-20 12:07 - 2014-03-20 12:07 - 00189352 _____ (Oracle Corporation) C:\WINDOWS\system32\java.exe
2014-03-20 12:07 - 2014-03-20 12:07 - 00175016 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\javaw.exe
2014-03-20 12:07 - 2014-03-20 12:07 - 00174504 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\java.exe
2014-03-20 12:07 - 2014-03-20 12:07 - 00108968 _____ (Oracle Corporation) C:\WINDOWS\system32\WindowsAccessBridge-64.dll
2014-03-20 12:07 - 2014-03-20 12:07 - 00096168 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll
2014-03-20 12:07 - 2014-03-20 12:07 - 00000000 ____D () C:\ProgramData\Sun
2014-03-20 12:07 - 2014-03-20 12:07 - 00000000 ____D () C:\Program Files\Java
2014-03-20 12:07 - 2014-03-20 12:07 - 00000000 ____D () C:\Program Files\7-Zip
2014-03-20 12:07 - 2014-03-20 12:07 - 00000000 ____D () C:\Program Files (x86)\VideoLAN
2014-03-20 12:07 - 2014-03-20 12:07 - 00000000 ____D () C:\Program Files (x86)\Java
2014-03-20 12:06 - 2014-04-06 00:15 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-03-20 12:06 - 2014-03-20 12:06 - 00001147 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-03-20 12:06 - 2014-03-20 12:06 - 00000000 ____D () C:\ProgramData\Mozilla
2014-03-20 12:06 - 2014-03-20 12:06 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-03-20 12:06 - 2014-03-20 12:06 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-03-20 12:06 - 2014-03-20 12:06 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-03-20 11:59 - 2014-03-20 11:59 - 00000136 _____ () C:\WINDOWS\system32\netcfg-9437.txt
2014-03-20 11:59 - 2014-03-20 11:59 - 00000134 _____ () C:\WINDOWS\system32\netcfg-9328.txt
2014-03-20 11:59 - 2014-03-20 11:59 - 00000134 _____ () C:\WINDOWS\system32\netcfg-9156.txt
2014-03-20 11:59 - 2014-03-20 11:59 - 00000128 _____ () C:\WINDOWS\system32\netcfg-10234.txt
2014-03-20 11:58 - 2014-03-20 11:58 - 00000117 _____ () C:\WINDOWS\system32\netcfg-1236562.txt
2014-03-20 11:58 - 2014-03-20 11:58 - 00000117 _____ () C:\WINDOWS\system32\netcfg-1231484.txt
2014-03-20 11:54 - 2014-03-20 11:54 - 00000032 _____ () C:\csb.log
2014-03-20 11:54 - 2014-03-20 11:54 - 00000000 ____D () C:\Program Files\GIGABYTE
2014-03-20 11:54 - 2014-03-20 11:54 - 00000000 ____D () C:\Program Files (x86)\GIGABYTE
2014-03-20 11:54 - 2013-05-06 11:45 - 00021584 _____ () C:\WINDOWS\system32\Drivers\UsbCharger.sys
2014-03-20 11:54 - 2013-02-19 13:18 - 00021584 _____ () C:\WINDOWS\system32\Drivers\AppleCharger.sys
2014-03-20 11:54 - 2010-04-06 17:30 - 00031272 _____ () C:\WINDOWS\system32\AppleChargerSrv.exe
2014-03-20 11:50 - 2014-03-20 12:20 - 01830594 _____ () C:\WINDOWS\SysWOW64\PerfStringBackup.INI
2014-03-20 11:50 - 2014-03-20 11:50 - 00000306 _____ () C:\WINDOWS\system32\netcfg-721343.txt
2014-03-20 11:50 - 2014-03-20 11:50 - 00000000 ____D () C:\Users\User\Intel
2014-03-20 11:50 - 2014-03-20 11:50 - 00000000 ____D () C:\Users\User\AppData\Roaming\Intel Corporation
2014-03-20 11:49 - 2013-02-26 14:42 - 03333576 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\Drivers\RTKVHD64.sys
2014-03-20 11:49 - 2013-02-26 12:04 - 00429097 _____ () C:\WINDOWS\system32\Drivers\RTAIODAT.DAT
2014-03-20 11:49 - 2013-02-26 07:30 - 03685448 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkAPO64.dll
2014-03-20 11:49 - 2013-02-21 10:11 - 00131656 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RCoInstII64.dll
2014-03-20 11:49 - 2013-02-20 12:55 - 01284680 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RTCOM64.dll
2014-03-20 11:49 - 2013-02-19 12:52 - 00991816 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkApi64.dll
2014-03-20 11:49 - 2013-02-19 09:11 - 02751560 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtPgEx64.dll
2014-03-20 11:49 - 2013-02-05 14:32 - 01658952 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RTSnMg64.cpl
2014-03-20 11:49 - 2013-02-02 15:30 - 02099480 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\WavesGUILib64.dll
2014-03-20 11:49 - 2013-02-02 15:30 - 00907544 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPOShell64.dll
2014-03-20 11:49 - 2013-01-23 10:36 - 00613448 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtDataProc64.dll
2014-03-20 11:49 - 2012-12-17 11:49 - 02032584 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioEQ64.dll
2014-03-20 11:49 - 2012-06-08 10:23 - 00083072 _____ (Creative Technology Ltd.) C:\WINDOWS\system32\MBWrp64.dll
2014-03-20 11:49 - 2012-06-08 10:21 - 00897152 _____ (Creative Technology Ltd.) C:\WINDOWS\system32\MBAPO64.dll
2014-03-20 11:49 - 2012-06-08 10:21 - 00753280 _____ (Creative Technology Ltd.) C:\WINDOWS\SysWOW64\MBAPO32.dll
2014-03-20 11:49 - 2011-12-20 09:32 - 00331880 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtlCPAPI64.dll
2014-03-20 11:49 - 2011-12-16 08:57 - 00065112 _____ (Creative Technology Ltd.) C:\WINDOWS\system32\MBppld64.dll
2014-03-20 11:49 - 2011-11-22 10:28 - 00014952 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkCoLDR64.dll
2014-03-20 11:49 - 2010-11-08 01:31 - 00375128 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEEP64A.dll
2014-03-20 11:49 - 2010-11-08 01:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RP3DHT64.dll
2014-03-20 11:49 - 2010-11-08 01:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RP3DAA64.dll
2014-03-20 11:49 - 2010-11-08 01:31 - 00204120 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEED64A.dll
2014-03-20 11:49 - 2010-11-08 01:31 - 00101208 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEEL64A.dll
2014-03-20 11:49 - 2010-11-08 01:31 - 00078680 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEEG64A.dll
2014-03-20 11:49 - 2010-11-03 12:30 - 00149608 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkCfg64.dll
2014-03-20 11:49 - 2010-09-27 03:34 - 00318808 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPO20.dll
2014-03-20 11:49 - 2009-11-24 03:55 - 00518896 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSTSX64.dll
2014-03-20 11:49 - 2009-11-24 03:55 - 00211184 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSTSH64.dll
2014-03-20 11:49 - 2009-11-24 03:55 - 00198896 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSHP64.dll
2014-03-20 11:49 - 2009-11-24 03:55 - 00155888 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSWOW64.dll
2014-03-20 11:49 - 2009-11-18 01:13 - 00060504 _____ (Creative Technology Ltd.) C:\WINDOWS\system32\MBPPCn64.dll
2014-03-20 11:48 - 2014-03-20 11:50 - 00000189 _____ () C:\Install.log
2014-03-20 11:48 - 2014-03-20 11:49 - 00003074 _____ () C:\RHDSetup.log
2014-03-20 11:48 - 2014-03-20 11:49 - 00000000 ____D () C:\Program Files (x86)\Realtek
2014-03-20 11:48 - 2013-01-21 19:41 - 00204864 _____ (Andrea Electronics Corporation) C:\WINDOWS\system32\AERTAC64.dll
2014-03-20 11:48 - 2013-01-16 10:02 - 02079816 ____R (Realtek Semiconductor Corp.) C:\WINDOWS\RtlExUpd.dll
2014-03-20 11:48 - 2013-01-15 04:33 - 02722848 _____ (Fortemedia Corporation) C:\WINDOWS\system32\FMAPO64.dll
2014-03-20 11:48 - 2012-06-20 11:26 - 00110592 _____ (Real Sound Lab SIA) C:\WINDOWS\system32\CONEQMSAPOGUILibrary.dll
2014-03-20 11:48 - 2012-03-08 05:47 - 00108640 _____ (Andrea Electronics Corporation) C:\WINDOWS\system32\AERTAR64.dll
2014-03-20 11:47 - 2014-03-20 11:59 - 00000000 ____D () C:\ProgramData\Intel
2014-03-20 11:47 - 2013-05-17 22:25 - 00442368 _____ (Intel(R) Corporation) C:\WINDOWS\system32\Drivers\IntcDAud.sys
2014-03-20 11:47 - 2013-05-17 22:25 - 00015360 _____ (Intel(R) Corporation) C:\WINDOWS\system32\IntcDAuC.dll
2014-03-20 11:47 - 2013-04-11 16:29 - 00064624 _____ (Intel Corporation) C:\WINDOWS\system32\Drivers\HECIx64.sys
2014-03-20 11:47 - 2013-04-11 16:29 - 00016344 _____ (Intel Corporation) C:\WINDOWS\system32\Drivers\IntelMEFWVer.dll
2014-03-20 11:46 - 2014-03-20 11:54 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-03-20 11:46 - 2014-03-20 11:46 - 00000000 ____D () C:\Users\User\AppData\Roaming\InstallShield
2014-03-20 11:46 - 2014-03-20 11:46 - 00000000 ____D () C:\Intel
2014-03-20 11:46 - 2013-02-27 16:37 - 00053248 _____ (Windows XP Bundled build C-Centric Single User) C:\WINDOWS\SysWOW64\CSVer.dll
2014-03-20 11:45 - 2014-04-13 23:09 - 00003596 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-55448800-1307107506-1312735153-1001
2014-03-20 11:44 - 2014-03-20 11:44 - 00000010 _____ () C:\WINDOWS\GSetup.ini
2014-03-20 11:44 - 2009-08-27 09:04 - 00207400 ____R () C:\WINDOWS\GSetup.exe
2014-03-20 11:39 - 2014-03-25 00:11 - 00000000 ___RD () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-03-20 11:39 - 2014-03-24 17:33 - 00000000 ____D () C:\Users\User\AppData\Local\Packages
2014-03-20 11:39 - 2014-03-20 16:30 - 00000000 ___RD () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-03-20 11:39 - 2014-03-20 16:28 - 00000000 ____D () C:\ProgramData\PRICache
2014-03-20 11:39 - 2014-03-20 16:19 - 01864581 _____ () C:\WINDOWS\WindowsUpdate (1).log
2014-03-20 11:39 - 2014-03-20 11:39 - 00000000 ____D () C:\WINDOWS\System32\Tasks\WPD
2014-03-20 11:39 - 2014-03-20 11:39 - 00000000 ____D () C:\WINDOWS\CSC
2014-03-20 11:39 - 2014-03-20 11:39 - 00000000 ____D () C:\Users\User\AppData\Roaming\Adobe
2014-03-20 11:39 - 2014-03-20 11:39 - 00000000 ____D () C:\Users\User\AppData\Local\VirtualStore
2014-03-20 11:38 - 2014-03-20 11:38 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Musik
2014-03-20 11:38 - 2014-03-20 11:38 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Bilder
2014-03-20 11:38 - 2014-03-20 11:38 - 00000000 _SHDL () C:\Users\Default.migrated\Vorlagen
2014-03-20 11:38 - 2014-03-20 11:38 - 00000000 _SHDL () C:\Users\Default.migrated\Startmenü
2014-03-20 11:38 - 2014-03-20 11:38 - 00000000 _SHDL () C:\Users\Default.migrated\Netzwerkumgebung
2014-03-20 11:38 - 2014-03-20 11:38 - 00000000 _SHDL () C:\Users\Default.migrated\Lokale Einstellungen
2014-03-20 11:38 - 2014-03-20 11:38 - 00000000 _SHDL () C:\Users\Default.migrated\Eigene Dateien
2014-03-20 11:38 - 2014-03-20 11:38 - 00000000 _SHDL () C:\Users\Default.migrated\Druckumgebung
2014-03-20 11:38 - 2014-03-20 11:38 - 00000000 _SHDL () C:\Users\Default.migrated\Documents\Eigene Musik
2014-03-20 11:38 - 2014-03-20 11:38 - 00000000 _SHDL () C:\Users\Default.migrated\Documents\Eigene Bilder
2014-03-20 11:38 - 2014-03-20 11:38 - 00000000 _SHDL () C:\Users\Default.migrated\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-03-20 11:38 - 2014-03-20 11:38 - 00000000 _SHDL () C:\Users\Default.migrated\AppData\Local\Verlauf
2014-03-20 11:38 - 2014-03-20 11:38 - 00000000 _SHDL () C:\Users\Default.migrated\AppData\Local\Anwendungsdaten
2014-03-20 11:38 - 2014-03-20 11:38 - 00000000 _SHDL () C:\Users\Default.migrated\Anwendungsdaten
2014-03-20 11:38 - 2014-03-20 11:38 - 00000000 _SHDL () C:\Programme
2014-03-20 11:38 - 2014-03-20 11:38 - 00000000 _SHDL () C:\ProgramData\Vorlagen
2014-03-20 11:38 - 2014-03-20 11:38 - 00000000 _SHDL () C:\ProgramData\Startmenü
2014-03-20 11:38 - 2014-03-20 11:38 - 00000000 _SHDL () C:\ProgramData\Dokumente
2014-03-20 11:38 - 2014-03-20 11:38 - 00000000 _SHDL () C:\ProgramData\Anwendungsdaten
2014-03-20 11:38 - 2014-03-20 11:38 - 00000000 _SHDL () C:\Program Files\Gemeinsame Dateien
2014-03-20 11:38 - 2014-03-20 11:38 - 00000000 _SHDL () C:\Dokumente und Einstellungen
2014-03-20 11:37 - 2014-03-20 11:37 - 00001136 _____ () C:\WINDOWS\system32\netcfg-15687.txt
2014-03-20 11:37 - 2014-03-20 11:37 - 00000185 _____ () C:\WINDOWS\system32\netcfg-13875.txt
2014-03-20 11:37 - 2014-03-20 11:37 - 00000164 _____ () C:\WINDOWS\system32\netcfg-12703.txt
2014-03-20 11:37 - 2014-03-20 11:37 - 00000161 _____ () C:\WINDOWS\system32\netcfg-13765.txt
2014-03-20 11:37 - 2014-03-20 11:37 - 00000160 _____ () C:\WINDOWS\system32\netcfg-13640.txt
2014-03-20 11:37 - 2014-03-20 11:37 - 00000160 _____ () C:\WINDOWS\system32\netcfg-13421.txt
2014-03-20 11:37 - 2014-03-20 11:37 - 00000160 _____ () C:\WINDOWS\system32\netcfg-12812.txt
2014-03-20 11:37 - 2014-03-20 11:37 - 00000159 _____ () C:\WINDOWS\system32\netcfg-13312.txt
2014-03-20 11:37 - 2014-03-20 11:37 - 00000157 _____ () C:\WINDOWS\system32\netcfg-13531.txt
2014-03-20 11:37 - 2014-03-20 11:37 - 00000157 _____ () C:\WINDOWS\system32\netcfg-13109.txt
2014-03-20 11:37 - 2014-03-20 11:37 - 00000150 _____ () C:\WINDOWS\system32\netcfg-12984.txt

==================== One Month Modified Files and Folders =======

2014-04-13 23:36 - 2014-04-06 11:49 - 00014824 _____ () C:\Users\User\Downloads\FRST.txt
2014-04-13 23:36 - 2014-04-06 11:49 - 00000000 ____D () C:\FRST
2014-04-13 23:29 - 2014-04-13 23:29 - 00987448 _____ () C:\Users\User\Desktop\SecurityCheck.exe
2014-04-13 23:23 - 2014-03-20 16:31 - 00003930 _____ () C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{2033FA2E-7191-41AE-B4E8-6F112590EA2B}
2014-04-13 23:09 - 2014-03-20 11:45 - 00003596 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-55448800-1307107506-1312735153-1001
2014-04-13 22:56 - 2014-03-20 16:30 - 01734124 _____ () C:\WINDOWS\WindowsUpdate.log
2014-04-13 22:39 - 2014-03-20 12:16 - 00000884 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2014-04-13 22:00 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\sru
2014-04-13 21:51 - 2014-04-13 21:51 - 00000639 _____ () C:\Users\User\Documents\esest1.txt
2014-04-13 21:18 - 2014-04-13 21:18 - 00000000 ____D () C:\Users\User\Downloads\FRST-OlderVersion
2014-04-13 21:18 - 2014-04-06 11:46 - 02157568 _____ (Farbar) C:\Users\User\Downloads\FRST64.exe
2014-04-13 20:42 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\AppReadiness
2014-04-13 20:05 - 2014-03-24 17:53 - 00000000 ____D () C:\ProgramData\MFAData
2014-04-13 20:00 - 2014-04-09 21:50 - 00003340 _____ () C:\WINDOWS\System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-55448800-1307107506-1312735153-1001
2014-04-13 20:00 - 2014-04-09 21:50 - 00003284 _____ () C:\WINDOWS\System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-55448800-1307107506-1312735153-1001
2014-04-11 18:25 - 2014-04-11 18:25 - 00085953 _____ () C:\Users\User\Documents\Expedia  Bestätigung2014.htm
2014-04-11 18:25 - 2014-04-11 18:25 - 00000000 ____D () C:\Users\User\Documents\Expedia  Bestätigung2014-Dateien
2014-04-11 18:24 - 2014-04-11 18:24 - 00281692 _____ () C:\Users\User\Documents\FLug2014nr1.odt
2014-04-11 17:26 - 2013-11-14 09:26 - 01901628 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2014-04-11 17:26 - 2013-11-14 09:11 - 00810756 _____ () C:\WINDOWS\system32\perfh007.dat
2014-04-11 17:26 - 2013-11-14 09:11 - 00179196 _____ () C:\WINDOWS\system32\perfc007.dat
2014-04-11 17:22 - 2013-11-14 00:18 - 00010076 _____ () C:\WINDOWS\PFRO.log
2014-04-11 17:22 - 2013-08-22 16:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2014-04-11 17:21 - 2013-08-22 15:25 - 00262144 ___SH () C:\WINDOWS\system32\config\BBI
2014-04-11 17:00 - 2014-04-11 16:54 - 00000000 ____D () C:\Users\User\AppData\Local\Adobe
2014-04-11 16:55 - 2014-03-20 12:16 - 00003772 _____ () C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2014-04-10 22:29 - 2014-04-06 00:14 - 00000000 ____D () C:\AdwCleaner
2014-04-10 22:24 - 2014-04-10 22:24 - 00001150 _____ () C:\Users\User\Documents\MBAM1004.txt
2014-04-10 21:57 - 2014-04-10 21:57 - 00000161 _____ () C:\Users\User\Documents\mbamprotect.txt
2014-04-10 21:56 - 2014-04-10 21:56 - 00000261 _____ () C:\Users\User\Documents\mabam9neu.txt
2014-04-10 21:56 - 2014-04-06 00:48 - 00119512 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2014-04-10 21:53 - 2014-04-10 21:53 - 00001885 _____ () C:\Users\User\Documents\MBAMoheuhr.txt
2014-04-10 21:53 - 2014-04-10 21:53 - 00001883 _____ () C:\Users\User\Documents\MBAMkurz.txt
2014-04-10 21:52 - 2014-04-10 21:52 - 00003811 _____ () C:\Users\User\Documents\MBAMlang2.txt
2014-04-10 21:52 - 2014-04-10 21:52 - 00003810 _____ () C:\Users\User\Documents\MBAMlang.txt
2014-04-10 21:51 - 2014-04-10 21:51 - 00001880 _____ () C:\Users\User\Documents\1MBAM.txt
2014-04-10 21:49 - 2014-04-10 21:49 - 00001883 _____ () C:\Users\User\Documents\MBAMv943.txt
2014-04-10 21:48 - 2014-04-10 21:48 - 00001883 _____ () C:\Users\User\Documents\MBAMv942.txt
2014-04-10 21:48 - 2014-04-10 21:48 - 00000261 _____ () C:\Users\User\Documents\MBAMv941.txt
2014-04-10 00:28 - 2014-04-10 00:28 - 00000746 _____ () C:\Users\User\Desktop\JRT.txt
2014-04-10 00:25 - 2014-04-10 00:25 - 00000000 ____D () C:\WINDOWS\ERUNT
2014-04-10 00:24 - 2014-04-10 00:24 - 01016261 _____ (Thisisu) C:\Users\User\Downloads\JRT.exe
2014-04-09 23:36 - 2014-04-05 22:48 - 00000000 ____D () C:\Users\User\AppData\Roaming\BitTorrent
2014-04-09 23:36 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\addins
2014-04-09 21:58 - 2014-03-20 12:46 - 90655440 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2014-04-09 21:58 - 2014-03-20 12:46 - 00000000 ____D () C:\WINDOWS\system32\MRT
2014-04-09 21:50 - 2014-04-09 21:50 - 00000000 ____D () C:\Users\User\AppData\Roaming\RealNetworks
2014-04-09 21:50 - 2014-04-09 21:49 - 00000000 ____D () C:\Users\User\AppData\Roaming\Real
2014-04-09 21:50 - 2014-04-09 21:49 - 00000000 ____D () C:\ProgramData\Real
2014-04-09 21:49 - 2014-04-09 21:49 - 00272896 _____ (Progressive Networks) C:\WINDOWS\SysWOW64\pncrt.dll
2014-04-09 21:49 - 2014-04-09 21:49 - 00201872 _____ (RealNetworks, Inc.) C:\WINDOWS\SysWOW64\rmoc3260.dll
2014-04-09 21:49 - 2014-04-09 21:49 - 00006656 _____ (RealNetworks, Inc.) C:\WINDOWS\SysWOW64\pndx5016.dll
2014-04-09 21:49 - 2014-04-09 21:49 - 00005632 _____ (RealNetworks, Inc.) C:\WINDOWS\SysWOW64\pndx5032.dll
2014-04-09 21:49 - 2014-04-09 21:49 - 00001385 _____ () C:\Users\Public\Desktop\RealPlayer.lnk
2014-04-09 21:49 - 2014-04-09 21:49 - 00000000 ____D () C:\ProgramData\RealNetworks
2014-04-09 21:49 - 2014-04-09 21:49 - 00000000 ____D () C:\Program Files (x86)\RealNetworks
2014-04-09 21:49 - 2014-04-09 21:49 - 00000000 ____D () C:\Program Files (x86)\Real
2014-04-09 21:48 - 2014-04-09 21:48 - 39382624 _____ (RealNetworks, Inc.) C:\Users\User\Downloads\RealPlayer_de16.0.3.51.exe
2014-04-09 19:44 - 2014-04-09 19:41 - 00000000 ____D () C:\Users\User\Downloads\NCIS.S11E20.HDTV.XviD-AFG
2014-04-09 19:42 - 2014-04-09 19:42 - 00000000 ____D () C:\Users\User\Downloads\NCIS Los Angeles S05E20 HDTV XviD-FUM[ettv]
2014-04-09 19:39 - 2014-04-09 19:39 - 00029000 _____ () C:\Users\User\Downloads\E5622E0DFEB9B2A3E985ABFAA07678ADA5340E2A.torrent
2014-04-09 19:39 - 2014-04-09 19:39 - 00028775 _____ () C:\Users\User\Downloads\CB0EADBB8C371643D0C44533FBB465B6A335AAF5.torrent
2014-04-09 18:49 - 2014-04-09 18:49 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2014-04-09 18:49 - 2014-04-09 18:49 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2014-04-08 22:39 - 2013-08-22 15:25 - 00262144 ___SH () C:\WINDOWS\system32\config\ELAM
2014-04-07 23:34 - 2014-04-07 23:34 - 00008864 _____ () C:\Users\User\Documents\test2.odt
2014-04-07 23:07 - 2014-04-07 23:07 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_User_LocationProvider_01_11_00.Wdf
2014-04-07 23:07 - 2013-08-22 16:46 - 00292204 _____ () C:\WINDOWS\setupact.log
2014-04-07 22:18 - 2014-04-07 22:18 - 00004321 _____ () C:\Users\User\Documents\Malwarebytes070414.txt
2014-04-07 20:25 - 2014-04-07 20:25 - 02278856 _____ () C:\Users\User\Downloads\avira_pc_cleaner_de.exe
2014-04-06 11:53 - 2014-04-06 11:50 - 00022406 _____ () C:\Users\User\Downloads\Addition.txt
2014-04-06 11:50 - 2014-04-06 11:50 - 00031515 _____ () C:\Users\User\Downloads\Shortcut.txt
2014-04-06 11:44 - 2014-04-06 11:44 - 00000000 ____D () C:\Users\User\AppData\Local\Intel_Corporation
2014-04-06 01:23 - 2014-04-06 01:23 - 00004321 _____ () C:\Users\User\Documents\Malwarebytes060414.txt
2014-04-06 01:15 - 2014-04-06 01:15 - 00084333 _____ () C:\Users\User\Documents\OLtPapa.odt
2014-04-06 00:49 - 2014-04-06 00:48 - 00001129 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-04-06 00:49 - 2014-04-06 00:48 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-04-06 00:48 - 2014-04-06 00:48 - 17523384 _____ (Malwarebytes Corporation ) C:\Users\User\Downloads\mbam-setup-2.0.0.1000.exe
2014-04-06 00:48 - 2014-04-06 00:48 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-04-06 00:15 - 2014-03-20 12:06 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-04-06 00:09 - 2014-04-06 00:09 - 01426178 _____ () C:\Users\User\Downloads\adwcleaner.exe
2014-04-05 23:55 - 2014-04-05 23:55 - 00000893 _____ () C:\Users\User\Desktop\BitTorrent.lnk
2014-04-05 23:55 - 2014-04-05 23:55 - 00000873 _____ () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\BitTorrent.lnk
2014-04-05 23:54 - 2014-04-05 23:54 - 01642072 _____ (BitTorrent Inc.) C:\Users\User\Downloads\BitTorrent_7.9.1.30769.exe
2014-04-05 23:54 - 2014-04-05 23:54 - 01642072 _____ (BitTorrent Inc.) C:\Users\User\Downloads\BitTorrent_7.9.1.30769(1).exe
2014-04-05 22:54 - 2014-04-05 22:54 - 01035926 _____ () C:\Users\User\Downloads\MozBackup-1.5.1-EN.exe
2014-04-05 22:54 - 2014-04-05 22:54 - 00001054 _____ () C:\Users\Public\Desktop\MozBackup.lnk
2014-04-05 22:54 - 2014-04-05 22:54 - 00000000 ____D () C:\Program Files (x86)\MozBackup
2014-04-05 21:57 - 2014-04-05 21:57 - 00000000 ____D () C:\Users\User\Desktop\Alte Firefox-Daten
2014-04-05 21:11 - 2014-04-05 21:11 - 00009443 _____ () C:\Users\User\Documents\teseskklappt.odt
2014-04-05 13:15 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\rescache
2014-04-03 20:59 - 2014-03-24 17:53 - 00000000 ____D () C:\Users\User\AppData\Local\Avg2014
2014-04-03 20:10 - 2014-04-03 20:10 - 00000000 ____D () C:\Users\User\AppData\Roaming\LibreOffice
2014-04-03 19:58 - 2014-04-03 19:58 - 00000000 ____D () C:\Users\Default\AppData\Roaming\TuneUp Software
2014-04-03 19:58 - 2014-04-03 19:58 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\TuneUp Software
2014-04-03 19:55 - 2014-04-03 19:55 - 00002113 _____ () C:\Users\Public\Desktop\Mozilla Thunderbird.lnk
2014-04-03 19:55 - 2014-04-03 19:55 - 00000000 ____D () C:\Users\User\AppData\Roaming\Thunderbird
2014-04-03 19:55 - 2014-04-03 19:55 - 00000000 ____D () C:\Users\User\AppData\Local\Thunderbird
2014-04-03 19:54 - 2014-04-03 19:54 - 21987424 _____ (Mozilla) C:\Users\User\Downloads\Thunderbird_Setup_de24.4.0.exe
2014-04-03 19:54 - 2014-04-03 19:54 - 00000000 ____D () C:\Users\User\AppData\Roaming\Macromedia
2014-04-03 19:54 - 2014-04-03 19:54 - 00000000 ____D () C:\Users\User\AppData\Local\Macromedia
2014-04-03 19:54 - 2014-04-03 19:54 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird
2014-04-03 09:51 - 2014-04-06 00:48 - 00088280 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2014-04-03 09:51 - 2014-04-06 00:48 - 00063192 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys
2014-04-03 09:50 - 2014-04-06 00:48 - 00025816 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys
2014-04-01 21:03 - 2014-04-01 21:03 - 00236824 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgidsdrivera.sys
2014-04-01 09:35 - 2014-04-01 09:35 - 00000000 ____D () C:\Users\User\AppData\Roaming\vlc
2014-04-01 09:16 - 2014-04-01 09:16 - 00000742 _____ () C:\Users\User\Desktop\Datensicherung - Verknüpfung.lnk
2014-03-31 23:23 - 2013-08-22 17:38 - 00693240 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2014-03-31 23:23 - 2013-08-22 17:38 - 00105464 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2014-03-31 16:06 - 2014-03-31 16:06 - 00274712 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgwfpa.sys
2014-03-31 16:06 - 2014-03-31 16:06 - 00130840 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgmfx64.sys
2014-03-31 03:16 - 2014-04-09 18:50 - 23134208 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2014-03-31 01:57 - 2014-04-09 18:49 - 17073152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2014-03-27 22:14 - 2014-03-27 22:14 - 00192792 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgidsha.sys
2014-03-27 22:14 - 2014-03-27 22:14 - 00153368 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgdiska.sys
2014-03-27 22:07 - 2014-03-27 22:07 - 00236824 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgldx64.sys
2014-03-27 22:05 - 2014-03-27 22:05 - 00324376 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgloga.sys
2014-03-27 22:03 - 2014-03-27 22:03 - 00032536 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgrkx64.sys
2014-03-27 13:58 - 2014-04-03 20:58 - 652747882 _____ () C:\Users\User\Documents\Thunderbird 24.4.0 (de) - 2014-03-27.pcv
2014-03-26 01:31 - 2014-04-03 20:57 - 26713231 _____ () C:\Users\User\Documents\Firefox 27.0.1 (de) - 2014-03-26.pcv
2014-03-26 01:28 - 2014-04-03 20:58 - 571328306 _____ () C:\Users\User\Documents\Thunderbird 24.4.0 (de) - 2014-03-26.pcv
2014-03-26 01:08 - 2014-04-03 20:57 - 00418189 _____ () C:\Users\User\Documents\Firefoxbookmarks-2014-03-26
2014-03-26 00:30 - 2014-04-05 22:55 - 00001001 _____ () C:\Users\User\Documents\indexfile.txt
2014-03-25 00:21 - 2014-03-20 16:26 - 00000000 ___DC () C:\WINDOWS\Panther
2014-03-25 00:20 - 2014-03-25 00:18 - 00000000 ____D () C:\Program Files (x86)\Nero
2014-03-25 00:20 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\Cursors
2014-03-25 00:19 - 2014-03-25 00:18 - 00000000 ____D () C:\ProgramData\Nero
2014-03-25 00:14 - 2014-03-25 00:14 - 00001484 _____ () C:\Users\Public\Desktop\LibreOffice 4.2.lnk
2014-03-25 00:14 - 2014-03-25 00:13 - 00000000 ____D () C:\Program Files (x86)\LibreOffice 4
2014-03-25 00:13 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\restore
2014-03-25 00:11 - 2014-03-20 11:39 - 00000000 ___RD () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-03-24 17:55 - 2014-03-24 17:55 - 00000000 ____D () C:\Users\User\AppData\Roaming\TuneUp Software
2014-03-24 17:55 - 2014-03-24 17:55 - 00000000 ____D () C:\Users\User\AppData\Roaming\AVG2014
2014-03-24 17:55 - 2014-03-24 17:54 - 00000000 ____D () C:\ProgramData\AVG2014
2014-03-24 17:55 - 2012-07-26 10:12 - 00000000 ___HD () C:\WINDOWS\ELAMBKUP
2014-03-24 17:54 - 2014-03-24 17:54 - 00000000 ___HD () C:\$AVG
2014-03-24 17:54 - 2014-03-24 17:54 - 00000000 ____D () C:\Program Files (x86)\AVG
2014-03-24 17:53 - 2014-03-24 17:53 - 00000000 ____D () C:\Users\User\AppData\Local\MFAData
2014-03-24 17:34 - 2013-08-22 16:44 - 00394472 _____ () C:\WINDOWS\system32\FNTCACHE.DAT
2014-03-24 17:33 - 2014-03-24 17:33 - 00000000 ___RD () C:\WINDOWS\BrowserChoice
2014-03-24 17:33 - 2014-03-20 11:39 - 00000000 ____D () C:\Users\User\AppData\Local\Packages
2014-03-20 16:30 - 2014-03-20 16:30 - 00001465 _____ () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-03-20 16:30 - 2014-03-20 16:30 - 00000020 ___SH () C:\Users\User\ntuser.ini
2014-03-20 16:30 - 2014-03-20 16:30 - 00000000 _SHDL () C:\Users\Default\Vorlagen
2014-03-20 16:30 - 2014-03-20 16:30 - 00000000 _SHDL () C:\Users\Default\Startmenü
2014-03-20 16:30 - 2014-03-20 16:30 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung
2014-03-20 16:30 - 2014-03-20 16:30 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen
2014-03-20 16:30 - 2014-03-20 16:30 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien
2014-03-20 16:30 - 2014-03-20 16:30 - 00000000 _SHDL () C:\Users\Default\Druckumgebung
2014-03-20 16:30 - 2014-03-20 16:30 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik
2014-03-20 16:30 - 2014-03-20 16:30 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder
2014-03-20 16:30 - 2014-03-20 16:30 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-03-20 16:30 - 2014-03-20 16:30 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf
2014-03-20 16:30 - 2014-03-20 16:30 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten
2014-03-20 16:30 - 2014-03-20 16:30 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten
2014-03-20 16:30 - 2014-03-20 16:30 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik
2014-03-20 16:30 - 2014-03-20 16:30 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder
2014-03-20 16:30 - 2014-03-20 16:30 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-03-20 16:30 - 2014-03-20 16:30 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf
2014-03-20 16:30 - 2014-03-20 16:30 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten
2014-03-20 16:30 - 2014-03-20 11:39 - 00000000 ___RD () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-03-20 16:30 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\Registration
2014-03-20 16:30 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files\Windows NT
2014-03-20 16:30 - 2013-08-22 15:36 - 00000000 __RHD () C:\Users\Default
2014-03-20 16:29 - 2014-03-20 16:29 - 00023572 _____ () C:\WINDOWS\system32\emptyregdb.dat
2014-03-20 16:29 - 2014-03-20 16:28 - 00020958 _____ () C:\WINDOWS\diagwrn.xml
2014-03-20 16:29 - 2014-03-20 16:28 - 00020958 _____ () C:\WINDOWS\diagerr.xml
2014-03-20 16:29 - 2014-03-20 16:09 - 00006593 _____ () C:\WINDOWS\comsetup.log
2014-03-20 16:29 - 2013-08-22 17:36 - 00000000 __RSD () C:\WINDOWS\Media
2014-03-20 16:29 - 2013-08-22 17:36 - 00000000 __RHD () C:\Users\Public\Libraries
2014-03-20 16:28 - 2014-03-20 16:28 - 00000000 _SHDL () C:\Users\User\Vorlagen
2014-03-20 16:28 - 2014-03-20 16:28 - 00000000 _SHDL () C:\Users\User\Startmenü
2014-03-20 16:28 - 2014-03-20 16:28 - 00000000 _SHDL () C:\Users\User\Netzwerkumgebung
2014-03-20 16:28 - 2014-03-20 16:28 - 00000000 _SHDL () C:\Users\User\Lokale Einstellungen
2014-03-20 16:28 - 2014-03-20 16:28 - 00000000 _SHDL () C:\Users\User\Eigene Dateien
2014-03-20 16:28 - 2014-03-20 16:28 - 00000000 _SHDL () C:\Users\User\Druckumgebung
2014-03-20 16:28 - 2014-03-20 16:28 - 00000000 _SHDL () C:\Users\User\Documents\Eigene Musik
2014-03-20 16:28 - 2014-03-20 16:28 - 00000000 _SHDL () C:\Users\User\Documents\Eigene Bilder
2014-03-20 16:28 - 2014-03-20 16:28 - 00000000 _SHDL () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-03-20 16:28 - 2014-03-20 16:28 - 00000000 _SHDL () C:\Users\User\AppData\Local\Verlauf
2014-03-20 16:28 - 2014-03-20 16:28 - 00000000 _SHDL () C:\Users\User\AppData\Local\Anwendungsdaten
2014-03-20 16:28 - 2014-03-20 16:28 - 00000000 _SHDL () C:\Users\User\Anwendungsdaten
2014-03-20 16:28 - 2014-03-20 16:28 - 00000000 ___RD () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-03-20 16:28 - 2014-03-20 16:28 - 00000000 ____D () C:\WINDOWS\system32\config\bbimigrate
2014-03-20 16:28 - 2014-03-20 16:26 - 00000000 ____D () C:\Program Files\Intel
2014-03-20 16:28 - 2014-03-20 16:26 - 00000000 ____D () C:\Program Files (x86)\Intel
2014-03-20 16:28 - 2014-03-20 12:07 - 00000000 ____D () C:\WINDOWS\SysWOW64\Adobe
2014-03-20 16:28 - 2014-03-20 11:39 - 00000000 ____D () C:\ProgramData\PRICache
2014-03-20 16:28 - 2013-11-14 09:11 - 00000000 ____D () C:\WINDOWS\SysWOW64\WCN
2014-03-20 16:28 - 2013-11-14 09:11 - 00000000 ____D () C:\WINDOWS\SysWOW64\sysprep
2014-03-20 16:28 - 2013-11-14 09:11 - 00000000 ____D () C:\WINDOWS\system32\WCN
2014-03-20 16:28 - 2013-08-22 17:43 - 00000000 ____D () C:\WINDOWS\DigitalLocker
2014-03-20 16:28 - 2013-08-22 17:37 - 00004893 _____ () C:\WINDOWS\DtcInstall.log
2014-03-20 16:28 - 2013-08-22 17:36 - 00000000 __SHD () C:\Program Files\Windows Sidebar
2014-03-20 16:28 - 2013-08-22 17:36 - 00000000 __SHD () C:\Program Files (x86)\Windows Sidebar
2014-03-20 16:28 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\MUI
2014-03-20 16:28 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\migwiz
2014-03-20 16:28 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\IME
2014-03-20 16:28 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\WinBioPlugIns
2014-03-20 16:28 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\spool
2014-03-20 16:28 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\Recovery
2014-03-20 16:28 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\MUI
2014-03-20 16:28 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\IME
2014-03-20 16:28 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\System
2014-03-20 16:28 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\IME
2014-03-20 16:28 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\Help
2014-03-20 16:28 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared
2014-03-20 16:28 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\SMI
2014-03-20 16:28 - 2012-07-26 07:37 - 00000000 ____D () C:\Users\Default.migrated
2014-03-20 16:26 - 2014-03-20 16:26 - 00000000 __SHD () C:\Recovery
2014-03-20 16:26 - 2014-03-20 16:26 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2014-03-20 16:26 - 2014-03-20 16:26 - 00000000 ____D () C:\WINDOWS\SysWOW64\RTCOM
2014-03-20 16:26 - 2014-03-20 16:26 - 00000000 ____D () C:\Program Files\Realtek
2014-03-20 16:26 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\system32\Sysprep
2014-03-20 16:25 - 2014-03-20 16:25 - 04189184 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2014-03-20 16:25 - 2014-03-20 16:25 - 03395920 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSService.dll
2014-03-20 16:25 - 2014-03-20 16:25 - 01643584 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2014-03-20 16:25 - 2014-03-20 16:25 - 01507704 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2014-03-20 16:25 - 2014-03-20 16:25 - 00848384 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll
2014-03-20 16:25 - 2014-03-20 16:25 - 00787968 _____ (Microsoft Corporation) C:\WINDOWS\system32\uDWM.dll
2014-03-20 16:25 - 2014-03-20 16:25 - 00695808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll
2014-03-20 16:25 - 2014-03-20 16:25 - 00615936 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAgent.exe
2014-03-20 16:25 - 2014-03-20 16:25 - 00570880 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdrm.dll
2014-03-20 16:25 - 2014-03-20 16:25 - 00548864 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2014-03-20 16:25 - 2014-03-20 16:25 - 00454656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2014-03-20 16:25 - 2014-03-20 16:25 - 00444928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdrm.dll
2014-03-20 16:25 - 2014-03-20 16:25 - 00393216 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMPhoto.dll
2014-03-20 16:25 - 2014-03-20 16:25 - 00348160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMPhoto.dll
2014-03-20 16:25 - 2014-03-20 16:25 - 00287744 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmregistration.dll
2014-03-20 16:25 - 2014-03-20 16:25 - 00249856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2014-03-20 16:25 - 2014-03-20 16:25 - 00240128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mdmregistration.dll
2014-03-20 16:25 - 2014-03-20 16:25 - 00197120 _____ (Microsoft Corporation) C:\WINDOWS\system32\scrrun.dll
2014-03-20 16:25 - 2014-03-20 16:25 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2014-03-20 16:25 - 2014-03-20 16:25 - 00156672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scrrun.dll
2014-03-20 16:25 - 2014-03-20 16:25 - 00084480 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSCollect.exe
2014-03-20 16:25 - 2014-03-20 16:25 - 00075360 _____ (Microsoft Corporation) C:\WINDOWS\system32\imagehlp.dll
2014-03-20 16:25 - 2014-03-20 16:25 - 00070680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\imagehlp.dll
2014-03-20 16:25 - 2014-03-20 16:25 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcaui.exe
2014-03-20 16:25 - 2014-03-20 16:25 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pcaui.exe
2014-03-20 16:25 - 2013-08-22 17:36 - 00262144 _____ () C:\WINDOWS\system32\config\BCD-Template
2014-03-20 16:25 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\WinStore
2014-03-20 16:24 - 2014-03-20 16:24 - 13209088 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2014-03-20 16:24 - 2014-03-20 16:24 - 11702272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2014-03-20 16:24 - 2014-03-20 16:24 - 07416832 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll
2014-03-20 16:24 - 2014-03-20 16:24 - 04961792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Search.dll
2014-03-20 16:24 - 2014-03-20 16:24 - 04217344 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncEngine.dll
2014-03-20 16:24 - 2014-03-20 16:24 - 02804224 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll
2014-03-20 16:24 - 2014-03-20 16:24 - 02041856 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2014-03-20 16:24 - 2014-03-20 16:24 - 01964032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2014-03-20 16:24 - 2014-03-20 16:24 - 01462216 _____ (Microsoft Corporation) C:\WINDOWS\system32\propsys.dll
2014-03-20 16:24 - 2014-03-20 16:24 - 01202888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\propsys.dll
2014-03-20 16:24 - 2014-03-20 16:24 - 01105408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFolder.dll
2014-03-20 16:24 - 2014-03-20 16:24 - 01020928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll
2014-03-20 16:24 - 2014-03-20 16:24 - 00919040 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll
2014-03-20 16:24 - 2014-03-20 16:24 - 00870912 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDrive.exe
2014-03-20 16:24 - 2014-03-20 16:24 - 00830976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchFolder.dll
2014-03-20 16:24 - 2014-03-20 16:24 - 00720384 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveTelemetry.dll
2014-03-20 16:24 - 2014-03-20 16:24 - 00708608 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2014-03-20 16:24 - 2014-03-20 16:24 - 00628736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmCoreR.dll
2014-03-20 16:24 - 2014-03-20 16:24 - 00553472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll
2014-03-20 16:24 - 2014-03-20 16:24 - 00236888 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdFilter.sys
2014-03-20 16:24 - 2014-03-20 16:24 - 00195584 _____ (Microsoft Corporation) C:\WINDOWS\system32\msrating.dll
2014-03-20 16:24 - 2014-03-20 16:24 - 00164864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrating.dll
2014-03-20 16:24 - 2014-03-20 16:24 - 00139776 _____ (Microsoft Corporation) C:\WINDOWS\system32\poqexec.exe
2014-03-20 16:24 - 2014-03-20 16:24 - 00139264 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieUnatt.exe
2014-03-20 16:24 - 2014-03-20 16:24 - 00124760 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdNisDrv.sys
2014-03-20 16:24 - 2014-03-20 16:24 - 00124416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\poqexec.exe
2014-03-20 16:24 - 2014-03-20 16:24 - 00121344 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveShell.dll
2014-03-20 16:24 - 2014-03-20 16:24 - 00115712 _____ (Microsoft Corporation) C:\WINDOWS\system32\winbici.dll
2014-03-20 16:24 - 2014-03-20 16:24 - 00112128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieUnatt.exe
2014-03-20 16:24 - 2014-03-20 16:24 - 00111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollector.exe
2014-03-20 16:24 - 2014-03-20 16:24 - 00105984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SkyDriveShell.dll
2014-03-20 16:24 - 2014-03-20 16:24 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll
2014-03-20 16:24 - 2014-03-20 16:24 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesetup.dll
2014-03-20 16:24 - 2014-03-20 16:24 - 00053760 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll
2014-03-20 16:24 - 2014-03-20 16:24 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieetwproxystub.dll
2014-03-20 16:24 - 2014-03-20 16:24 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwproxystub.dll
2014-03-20 16:24 - 2014-03-20 16:24 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll
2014-03-20 16:24 - 2014-03-20 16:24 - 00035856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdBoot.sys
2014-03-20 16:24 - 2014-03-20 16:24 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll
2014-03-20 16:24 - 2014-03-20 16:24 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iernonce.dll
2014-03-20 16:24 - 2014-03-20 16:24 - 00009701 _____ () C:\WINDOWS\SysWOW64\connectedsearch-results.searchconnector-ms
2014-03-20 16:24 - 2014-03-20 16:24 - 00009701 _____ () C:\WINDOWS\system32\connectedsearch-results.searchconnector-ms
2014-03-20 16:24 - 2014-03-20 16:24 - 00004096 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollectorres.dll
2014-03-20 16:24 - 2013-08-22 17:36 - 00000000 ___RD () C:\WINDOWS\ToastData
2014-03-20 16:24 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-03-20 16:24 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-03-20 16:24 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\MediaViewer
2014-03-20 16:24 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\FileManager
2014-03-20 16:24 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\Camera
2014-03-20 16:24 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files\Windows Defender
2014-03-20 16:24 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files (x86)\Windows Defender
2014-03-20 16:23 - 2014-03-20 16:23 - 21199256 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 18643560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 18576384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 13949440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 06640640 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 06353960 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppsvc.exe
2014-03-20 16:23 - 2014-03-20 16:23 - 05770752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 04604416 _____ (Microsoft Corporation) C:\WINDOWS\system32\d2d1.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 04175360 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbgeng.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 03936256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 03210528 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 02873344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbgeng.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 02804528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2vdec.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 02617344 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 02543960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2014-03-20 16:23 - 2014-03-20 16:23 - 02397184 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10warp.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 02295808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 02152448 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 02143960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 02133208 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 02071552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10warp.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 01928144 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 01720560 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 01530712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2014-03-20 16:23 - 2014-03-20 16:23 - 01503232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 01486848 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbghelp.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 01472048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 01415680 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 01399176 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 01374384 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpmde.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 01371824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 01317376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 01238016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbghelp.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 01227264 _____ (Microsoft Corporation) C:\WINDOWS\system32\mispace.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 01214976 _____ (Microsoft Corporation) C:\WINDOWS\system32\schedsvc.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 01204968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmde.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 01119064 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys
2014-03-20 16:23 - 2014-03-20 16:23 - 01057280 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdvidcrl.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00980480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mispace.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00960512 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00947712 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00914944 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgent.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00855552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdvidcrl.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00842752 _____ (Microsoft Corporation) C:\WINDOWS\system32\MsSpellCheckingFacility.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00834048 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00809872 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00802816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00770560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReAgent.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00764864 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00749056 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00745336 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00716288 _____ (Microsoft Corporation) C:\WINDOWS\system32\swprv.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00669352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00663680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00630272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MsSpellCheckingFacility.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00628736 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe
2014-03-20 16:23 - 2014-03-20 16:23 - 00589824 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastls.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00588800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00552624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00513536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastls.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00481944 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00478208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe
2014-03-20 16:23 - 2014-03-20 16:23 - 00470016 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfds.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00461312 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsGdiConverter.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00458616 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFault.exe
2014-03-20 16:23 - 2014-03-20 16:23 - 00447488 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppcomapi.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00433664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfds.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00419160 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00408576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdbss.sys
2014-03-20 16:23 - 2014-03-20 16:23 - 00408480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFault.exe
2014-03-20 16:23 - 2014-03-20 16:23 - 00407024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Faultrep.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00403456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
2014-03-20 16:23 - 2014-03-20 16:23 - 00386722 _____ () C:\WINDOWS\system32\ApnDatabase.xml
2014-03-20 16:23 - 2014-03-20 16:23 - 00382808 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2014-03-20 16:23 - 2014-03-20 16:23 - 00381168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00376320 _____ (Microsoft Corporation) C:\WINDOWS\system32\pnrpsvc.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00369280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Faultrep.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00336896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsGdiConverter.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00325464 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBXHCI.SYS
2014-03-20 16:23 - 2014-03-20 16:23 - 00311640 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\volsnap.sys
2014-03-20 16:23 - 2014-03-20 16:23 - 00306688 _____ (Microsoft Corporation) C:\WINDOWS\system32\msieftp.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00303616 _____ (Microsoft Corporation) C:\WINDOWS\system32\sti.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00282112 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemEventsBrokerServer.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00273920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msieftp.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00273408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00263168 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00249856 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpencom.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00233920 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00218112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Graphics.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00218112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sti.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00208896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpencom.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00207872 _____ (Microsoft Corporation) C:\WINDOWS\system32\deviceregistration.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00206336 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSClient.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00202240 _____ (Microsoft Corporation) C:\WINDOWS\system32\ubpm.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00178176 _____ (Microsoft Corporation) C:\WINDOWS\system32\easwrt.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00174592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSClient.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00160256 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWWIN.EXE
2014-03-20 16:23 - 2014-03-20 16:23 - 00142848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ipnat.sys
2014-03-20 16:23 - 2014-03-20 16:23 - 00142680 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBSTOR.SYS
2014-03-20 16:23 - 2014-03-20 16:23 - 00140800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\easwrt.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00138752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWWIN.EXE
2014-03-20 16:23 - 2014-03-20 16:23 - 00138240 _____ () C:\WINDOWS\system32\OEMLicense.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00136704 _____ (Microsoft Corporation) C:\WINDOWS\system32\psmsrv.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00131160 _____ (Microsoft Corporation) C:\WINDOWS\system32\easinvoker.exe
2014-03-20 16:23 - 2014-03-20 16:23 - 00103936 _____ () C:\WINDOWS\SysWOW64\OEMLicense.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsgqec.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tsgqec.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00032088 _____ (Microsoft Corporation) C:\WINDOWS\system32\ploptin.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00024064 _____ (Microsoft Corporation) C:\WINDOWS\system32\bi.dll
2014-03-20 16:23 - 2014-03-20 16:23 - 00019456 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BtaMPM.sys
2014-03-20 16:23 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\Dism
2014-03-20 16:23 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\system32\Dism
2014-03-20 16:22 - 2014-03-20 16:22 - 07399256 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2014-03-20 16:22 - 2014-03-20 16:22 - 02896896 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll
2014-03-20 16:22 - 2014-03-20 16:22 - 02570240 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers.dll
2014-03-20 16:22 - 2014-03-20 16:22 - 02266624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll
2014-03-20 16:22 - 2014-03-20 16:22 - 02143744 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2014-03-20 16:22 - 2014-03-20 16:22 - 02140888 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
2014-03-20 16:22 - 2014-03-20 16:22 - 01843712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Display.dll
2014-03-20 16:22 - 2014-03-20 16:22 - 01816576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Display.dll
2014-03-20 16:22 - 2014-03-20 16:22 - 01765384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll
2014-03-20 16:22 - 2014-03-20 16:22 - 01765376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2014-03-20 16:22 - 2014-03-20 16:22 - 01756160 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMPDMC.exe
2014-03-20 16:22 - 2014-03-20 16:22 - 01476184 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2014-03-20 16:22 - 2014-03-20 16:22 - 01391104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMPDMC.exe
2014-03-20 16:22 - 2014-03-20 16:22 - 01345536 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe
2014-03-20 16:22 - 2014-03-20 16:22 - 01302528 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2014-03-20 16:22 - 2014-03-20 16:22 - 00922624 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2014-03-20 16:22 - 2014-03-20 16:22 - 00747008 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidcli.dll
2014-03-20 16:22 - 2014-03-20 16:22 - 00586240 _____ (Microsoft Corporation) C:\WINDOWS\system32\qedit.dll
2014-03-20 16:22 - 2014-03-20 16:22 - 00566784 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpncore.dll
2014-03-20 16:22 - 2014-03-20 16:22 - 00544768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlidcli.dll
2014-03-20 16:22 - 2014-03-20 16:22 - 00516496 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
2014-03-20 16:22 - 2014-03-20 16:22 - 00488448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qedit.dll
2014-03-20 16:22 - 2014-03-20 16:22 - 00449024 _____ (Microsoft Corporation) C:\WINDOWS\system32\appmgr.dll
2014-03-20 16:22 - 2014-03-20 16:22 - 00406400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll
2014-03-20 16:22 - 2014-03-20 16:22 - 00372568 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spaceport.sys
2014-03-20 16:22 - 2014-03-20 16:22 - 00366080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\appmgr.dll
2014-03-20 16:22 - 2014-03-20 16:22 - 00358896 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcomp.dll
2014-03-20 16:22 - 2014-03-20 16:22 - 00262144 _____ () C:\WINDOWS\system32\config\userdiff
2014-03-20 16:22 - 2014-03-20 16:22 - 00254464 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll
2014-03-20 16:22 - 2014-03-20 16:22 - 00225792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dcomp.dll
2014-03-20 16:22 - 2014-03-20 16:22 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll
2014-03-20 16:22 - 2014-03-20 16:22 - 00146776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\SerCx2.sys
2014-03-20 16:22 - 2014-03-20 16:22 - 00086872 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pdc.sys
2014-03-20 16:22 - 2014-03-20 16:22 - 00039768 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\intelpep.sys
2014-03-20 16:22 - 2014-03-20 16:22 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredentialMigrationHandler.dll
2014-03-20 16:22 - 2014-03-20 16:22 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredentialMigrationHandler.dll
2014-03-20 16:21 - 2014-03-20 16:21 - 00000000 ____D () C:\WINDOWS\SysWOW64\XPSViewer
2014-03-20 16:21 - 2014-03-20 16:21 - 00000000 ____D () C:\Program Files\Reference Assemblies
2014-03-20 16:21 - 2014-03-20 16:21 - 00000000 ____D () C:\Program Files\MSBuild
2014-03-20 16:21 - 2014-03-20 16:21 - 00000000 ____D () C:\Program Files (x86)\Reference Assemblies
2014-03-20 16:21 - 2014-03-20 16:21 - 00000000 ____D () C:\Program Files (x86)\MSBuild
2014-03-20 16:19 - 2014-03-20 11:39 - 01864581 _____ () C:\WINDOWS\WindowsUpdate (1).log
2014-03-20 16:01 - 2012-07-26 10:12 - 00000000 ____D () C:\WINDOWS\AUInstallAgent
2014-03-20 13:40 - 2014-03-20 13:40 - 00000000 ____D () C:\Users\User\AppData\Roaming\Mozilla
2014-03-20 13:40 - 2014-03-20 13:40 - 00000000 ____D () C:\Users\User\AppData\Local\Mozilla
2014-03-20 13:39 - 2014-03-20 13:39 - 00003550 _____ () C:\WINDOWS\System32\Tasks\CreateChoiceProcessTask
2014-03-20 12:48 - 2014-03-20 12:48 - 00000117 _____ () C:\WINDOWS\system32\netcfg-5187.txt
2014-03-20 12:48 - 2014-03-20 12:48 - 00000117 _____ () C:\WINDOWS\system32\netcfg-4968.txt
2014-03-20 12:35 - 2014-03-20 12:35 - 00000117 _____ () C:\WINDOWS\system32\netcfg-5343.txt
2014-03-20 12:35 - 2014-03-20 12:35 - 00000117 _____ () C:\WINDOWS\system32\netcfg-5234.txt
2014-03-20 12:20 - 2014-03-20 11:50 - 01830594 _____ () C:\WINDOWS\SysWOW64\PerfStringBackup.INI
2014-03-20 12:16 - 2014-03-20 12:16 - 01199175 _____ () C:\WINDOWS\unins001.exe
2014-03-20 12:16 - 2014-03-20 12:16 - 01198049 _____ () C:\WINDOWS\unins000.exe
2014-03-20 12:16 - 2014-03-20 12:16 - 00021723 _____ () C:\WINDOWS\unins001.dat
2014-03-20 12:16 - 2014-03-20 12:16 - 00010818 _____ () C:\WINDOWS\unins000.dat
2014-03-20 12:15 - 2014-03-20 12:14 - 00000000 ____D () C:\ProgramData\Package Cache
2014-03-20 12:09 - 2014-03-20 12:09 - 00000000 ____D () C:\ProgramData\Adobe
2014-03-20 12:09 - 2014-03-20 12:09 - 00000000 ____D () C:\Program Files (x86)\Adobe
2014-03-20 12:08 - 2014-03-20 12:08 - 00000000 ____D () C:\Program Files (x86)\K-Lite Codec Pack
2014-03-20 12:07 - 2014-03-20 12:07 - 00312744 _____ (Oracle Corporation) C:\WINDOWS\system32\javaws.exe
2014-03-20 12:07 - 2014-03-20 12:07 - 00264616 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\javaws.exe
2014-03-20 12:07 - 2014-03-20 12:07 - 00189352 _____ (Oracle Corporation) C:\WINDOWS\system32\javaw.exe
2014-03-20 12:07 - 2014-03-20 12:07 - 00189352 _____ (Oracle Corporation) C:\WINDOWS\system32\java.exe
2014-03-20 12:07 - 2014-03-20 12:07 - 00175016 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\javaw.exe
2014-03-20 12:07 - 2014-03-20 12:07 - 00174504 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\java.exe
2014-03-20 12:07 - 2014-03-20 12:07 - 00108968 _____ (Oracle Corporation) C:\WINDOWS\system32\WindowsAccessBridge-64.dll
2014-03-20 12:07 - 2014-03-20 12:07 - 00096168 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll
2014-03-20 12:07 - 2014-03-20 12:07 - 00000000 ____D () C:\ProgramData\Sun
2014-03-20 12:07 - 2014-03-20 12:07 - 00000000 ____D () C:\Program Files\Java
2014-03-20 12:07 - 2014-03-20 12:07 - 00000000 ____D () C:\Program Files\7-Zip
2014-03-20 12:07 - 2014-03-20 12:07 - 00000000 ____D () C:\Program Files (x86)\VideoLAN
2014-03-20 12:07 - 2014-03-20 12:07 - 00000000 ____D () C:\Program Files (x86)\Java
2014-03-20 12:06 - 2014-03-20 12:06 - 00001147 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-03-20 12:06 - 2014-03-20 12:06 - 00000000 ____D () C:\ProgramData\Mozilla
2014-03-20 12:06 - 2014-03-20 12:06 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-03-20 12:06 - 2014-03-20 12:06 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-03-20 12:06 - 2014-03-20 12:06 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-03-20 11:59 - 2014-03-20 11:59 - 00000136 _____ () C:\WINDOWS\system32\netcfg-9437.txt
2014-03-20 11:59 - 2014-03-20 11:59 - 00000134 _____ () C:\WINDOWS\system32\netcfg-9328.txt
2014-03-20 11:59 - 2014-03-20 11:59 - 00000134 _____ () C:\WINDOWS\system32\netcfg-9156.txt
2014-03-20 11:59 - 2014-03-20 11:59 - 00000128 _____ () C:\WINDOWS\system32\netcfg-10234.txt
2014-03-20 11:59 - 2014-03-20 11:47 - 00000000 ____D () C:\ProgramData\Intel
2014-03-20 11:58 - 2014-03-20 11:58 - 00000117 _____ () C:\WINDOWS\system32\netcfg-1236562.txt
2014-03-20 11:58 - 2014-03-20 11:58 - 00000117 _____ () C:\WINDOWS\system32\netcfg-1231484.txt
2014-03-20 11:54 - 2014-03-20 11:54 - 00000032 _____ () C:\csb.log
2014-03-20 11:54 - 2014-03-20 11:54 - 00000000 ____D () C:\Program Files\GIGABYTE
2014-03-20 11:54 - 2014-03-20 11:54 - 00000000 ____D () C:\Program Files (x86)\GIGABYTE
2014-03-20 11:54 - 2014-03-20 11:46 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-03-20 11:50 - 2014-03-20 11:50 - 00000306 _____ () C:\WINDOWS\system32\netcfg-721343.txt
2014-03-20 11:50 - 2014-03-20 11:50 - 00000000 ____D () C:\Users\User\Intel
2014-03-20 11:50 - 2014-03-20 11:50 - 00000000 ____D () C:\Users\User\AppData\Roaming\Intel Corporation
2014-03-20 11:50 - 2014-03-20 11:48 - 00000189 _____ () C:\Install.log
2014-03-20 11:49 - 2014-03-20 11:48 - 00003074 _____ () C:\RHDSetup.log
2014-03-20 11:49 - 2014-03-20 11:48 - 00000000 ____D () C:\Program Files (x86)\Realtek
2014-03-20 11:46 - 2014-03-20 11:46 - 00000000 ____D () C:\Users\User\AppData\Roaming\InstallShield
2014-03-20 11:46 - 2014-03-20 11:46 - 00000000 ____D () C:\Intel
2014-03-20 11:44 - 2014-03-20 11:44 - 00000010 _____ () C:\WINDOWS\GSetup.ini
2014-03-20 11:39 - 2014-03-20 11:39 - 00000000 ____D () C:\WINDOWS\System32\Tasks\WPD
2014-03-20 11:39 - 2014-03-20 11:39 - 00000000 ____D () C:\WINDOWS\CSC
2014-03-20 11:39 - 2014-03-20 11:39 - 00000000 ____D () C:\Users\User\AppData\Roaming\Adobe
2014-03-20 11:39 - 2014-03-20 11:39 - 00000000 ____D () C:\Users\User\AppData\Local\VirtualStore
2014-03-20 11:38 - 2014-03-20 11:38 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Musik
2014-03-20 11:38 - 2014-03-20 11:38 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Bilder
2014-03-20 11:38 - 2014-03-20 11:38 - 00000000 _SHDL () C:\Users\Default.migrated\Vorlagen
2014-03-20 11:38 - 2014-03-20 11:38 - 00000000 _SHDL () C:\Users\Default.migrated\Startmenü
2014-03-20 11:38 - 2014-03-20 11:38 - 00000000 _SHDL () C:\Users\Default.migrated\Netzwerkumgebung
2014-03-20 11:38 - 2014-03-20 11:38 - 00000000 _SHDL () C:\Users\Default.migrated\Lokale Einstellungen
2014-03-20 11:38 - 2014-03-20 11:38 - 00000000 _SHDL () C:\Users\Default.migrated\Eigene Dateien
2014-03-20 11:38 - 2014-03-20 11:38 - 00000000 _SHDL () C:\Users\Default.migrated\Druckumgebung
2014-03-20 11:38 - 2014-03-20 11:38 - 00000000 _SHDL () C:\Users\Default.migrated\Documents\Eigene Musik
2014-03-20 11:38 - 2014-03-20 11:38 - 00000000 _SHDL () C:\Users\Default.migrated\Documents\Eigene Bilder
2014-03-20 11:38 - 2014-03-20 11:38 - 00000000 _SHDL () C:\Users\Default.migrated\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-03-20 11:38 - 2014-03-20 11:38 - 00000000 _SHDL () C:\Users\Default.migrated\AppData\Local\Verlauf
2014-03-20 11:38 - 2014-03-20 11:38 - 00000000 _SHDL () C:\Users\Default.migrated\AppData\Local\Anwendungsdaten
2014-03-20 11:38 - 2014-03-20 11:38 - 00000000 _SHDL () C:\Users\Default.migrated\Anwendungsdaten
2014-03-20 11:38 - 2014-03-20 11:38 - 00000000 _SHDL () C:\Programme
2014-03-20 11:38 - 2014-03-20 11:38 - 00000000 _SHDL () C:\ProgramData\Vorlagen
2014-03-20 11:38 - 2014-03-20 11:38 - 00000000 _SHDL () C:\ProgramData\Startmenü
2014-03-20 11:38 - 2014-03-20 11:38 - 00000000 _SHDL () C:\ProgramData\Dokumente
2014-03-20 11:38 - 2014-03-20 11:38 - 00000000 _SHDL () C:\ProgramData\Anwendungsdaten
2014-03-20 11:38 - 2014-03-20 11:38 - 00000000 _SHDL () C:\Program Files\Gemeinsame Dateien
2014-03-20 11:38 - 2014-03-20 11:38 - 00000000 _SHDL () C:\Dokumente und Einstellungen
2014-03-20 11:37 - 2014-03-20 11:37 - 00001136 _____ () C:\WINDOWS\system32\netcfg-15687.txt
2014-03-20 11:37 - 2014-03-20 11:37 - 00000185 _____ () C:\WINDOWS\system32\netcfg-13875.txt
2014-03-20 11:37 - 2014-03-20 11:37 - 00000164 _____ () C:\WINDOWS\system32\netcfg-12703.txt
2014-03-20 11:37 - 2014-03-20 11:37 - 00000161 _____ () C:\WINDOWS\system32\netcfg-13765.txt
2014-03-20 11:37 - 2014-03-20 11:37 - 00000160 _____ () C:\WINDOWS\system32\netcfg-13640.txt
2014-03-20 11:37 - 2014-03-20 11:37 - 00000160 _____ () C:\WINDOWS\system32\netcfg-13421.txt
2014-03-20 11:37 - 2014-03-20 11:37 - 00000160 _____ () C:\WINDOWS\system32\netcfg-12812.txt
2014-03-20 11:37 - 2014-03-20 11:37 - 00000159 _____ () C:\WINDOWS\system32\netcfg-13312.txt
2014-03-20 11:37 - 2014-03-20 11:37 - 00000157 _____ () C:\WINDOWS\system32\netcfg-13531.txt
2014-03-20 11:37 - 2014-03-20 11:37 - 00000157 _____ () C:\WINDOWS\system32\netcfg-13109.txt
2014-03-20 11:37 - 2014-03-20 11:37 - 00000150 _____ () C:\WINDOWS\system32\netcfg-12984.txt

Some content of TEMP:
====================
C:\Users\User\AppData\Local\Temp\AskSLib.dll


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys
[2014-03-20 16:23] - [2014-03-20 16:23] - 0311640 ___AC (Microsoft Corporation) C85C075DE5B6D0FE116043054DE8EE02



LastRegBack: 2014-04-12 18:33

==================== End Of Log ============================

09.04.2014, 11:25	#9
schrauber /// the machine /// TB-Ausbilder	PU.Optional.Conduit... eingefangen ok __________________ gruß, schrauber *Proud Member of UNITE and ASAP since 2009* Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM!

PU.Optional.Conduit... eingefangen

Plagegeister aller Art und deren Bekämpfung: PU.Optional.Conduit... eingefangen