Seiten öffnen sich von selbst, Seitenteile sehen komisch aus und HDvid Codec V6.0 erscheint ständig. Habe mir schon frst runtergeladen und durchgeführt.

Hier noch die Infos der beiden Scans. Würde mich über Eure Hilfe sehr freuen. Habe schon mehrere Programme ausprobiert. Aber keins konnte mir so richtig helfen.
FRST.text

FRST Logfile:

FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 27-04-2014
Ran by Tobias Wessel (administrator) on TOBISPC on 27-04-2014 18:35:46
Running from C:\FRST
Microsoft Windows 8.1 Pro Update 1 (X86) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal


==================== Processes (Whitelisted) =================

(DisplayLink Corp.) C:\Program Files\DisplayLink Core Software\DisplayLinkManager.exe
(DisplayLink Corp.) C:\Program Files\DisplayLink Core Software\DisplayLinkUserAgent.exe
(Microsoft Corporation) C:\WINDOWS\system32\WLANExt.exe
(Trend Micro Inc.) E:\Programme\Trend Micro\AMSP\coreServiceShell.exe
(Trend Micro Inc.) E:\Programme\Trend Micro\UniClient\UiFrmWrk\uiWatchDog.exe
(Trend Micro Inc.) E:\Programme\Trend Micro\AMSP\coreFrameworkHost.exe
(Microsoft Corporation) C:\WINDOWS\system32\dashost.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Trend Micro Inc.) E:\Programme\Trend Micro\Trend Micro\TMIDS\PwmSvc.exe
(Validity Sensors, Inc.) C:\WINDOWS\system32\valWBFPolicyService.exe
() C:\Program Files\Ashampoo\Ashampoo WinOptimizer 9\LiveTunerService.exe
() C:\Program Files\XSManager\WTGService.exe
(4G Systems GmbH & Co. KG) C:\WINDOWS\service4g.exe
(DisplayLink Corp.) C:\Program Files\DisplayLink Core Software\DisplayLinkUI.exe
(Microsoft Corporation) C:\WINDOWS\System32\mobsync.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Ashampoo Development GmbH & Co. KG) C:\Program Files\Ashampoo\Ashampoo WinOptimizer 9\LiveTuner.exe
(Sun Microsystems, Inc.) C:\Program Files\HanseMerkur\ServiceExtensions\jre\bin\javaw.exe
(Trend Micro Inc.) E:\Programme\Trend Micro\Trend Micro\TMIDS\PwmConsole.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office14\MSOSYNC.EXE
() C:\Users\Tobias Wessel\AppData\Local\CloudStation\bin\cloud.exe
(Trend Micro Inc.) E:\Programme\Trend Micro\UniClient\UiFrmWrk\uiSeAgnt.exe
(Dropbox, Inc.) C:\Users\Tobias Wessel\AppData\Roaming\Dropbox\bin\Dropbox.exe
() C:\Users\Tobias Wessel\AppData\Local\CloudStation\bin\client-win.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Nero AG) C:\Program Files\Nero\Update\NASvc.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Google Inc.) C:\Users\Tobias Wessel\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Tobias Wessel\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Tobias Wessel\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Tobias Wessel\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Tobias Wessel\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Tobias Wessel\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Tobias Wessel\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Tobias Wessel\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Tobias Wessel\AppData\Local\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\WINDOWS\system32\cmd.exe
(Microsoft Corporation) C:\WINDOWS\system32\cmd.exe
(Trend Micro Inc.) E:\Programme\Trend Micro\AMSP\module\20013\ChromeExt\chromeextension\TmopChromeMsgHost32.exe
(Trend Micro Inc.) E:\Programme\Trend Micro\AMSP\module\20002\8.0.1170\8.0.1170\chrome_extension2\host\chrome_native_msg_host.exe
(Microsoft Corporation) C:\WINDOWS\system32\cmd.exe
(Trend Micro Inc.) E:\Programme\Trend Micro\Titanium\UIFramework\Toolbar\chromeextension\NativeMessageHost\ToolbarNativeMsgHost.exe
(Google Inc.) C:\Users\Tobias Wessel\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Tobias Wessel\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Tobias Wessel\AppData\Local\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\WINDOWS\system32\cmd.exe
(Trend Micro Inc.) E:\Programme\Trend Micro\Trend Micro\TMIDS\PwmNativeMessaging\PwmNativeMessaging.exe
(Microsoft Corporation) C:\Program Files\Windows Media Player\wmplayer.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM\...\Run: [Ashampoo WinOptimizer Live-Tuner] => C:\Program Files\Ashampoo\Ashampoo WinOptimizer 9\LiveTuner.exe [2883936 2013-05-07] (Ashampoo Development GmbH & Co. KG)
HKLM\...\Run: [DivXMediaServer] => C:\Program Files\DivX\DivX Media Server\DivXMediaServer.exe [450560 2013-09-11] (DivX, LLC)
HKLM\...\Run: [DivXUpdate] => C:\Program Files\DivX\DivX Update\DivXUpdate.exe [1861968 2013-08-29] ()
HKLM\...\Run: [ISA Service Extensions] => C:\Program Files\HanseMerkur\ServiceExtensions\start_serviceextensions.bat [79 2013-11-06] ()
HKLM\...\Run: [PwmConsole.exe] => E:\Programme\Trend Micro\Trend Micro\TMIDS\PwmConsole.exe [1235616 2014-03-24] (Trend Micro Inc.)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1791272 2010-06-10] (Synaptics Incorporated)
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284696 2010-03-03] (Intel Corporation)
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM\...\Run: [Trend Micro Client Framework] => E:\Programme\Trend Micro\UniClient\UiFrmWrk\UIWatchDog.exe [143792 2013-10-09] (Trend Micro Inc.)
HKLM\...\Run: [PDFPrint] => C:\Program Files\PDF24\pdf24.exe [189480 2014-02-06] (Geek Software GmbH)
HKU\S-1-5-21-3608396222-1875968445-4039553499-1001\...\Run: [DAEMON Tools Lite] => E:\Programme\DAEMON Tools Lite\DTLite.exe [3672640 2013-03-14] (Disc Soft Ltd)
HKU\S-1-5-21-3608396222-1875968445-4039553499-1001\...\Run: [OfficeSyncProcess] => C:\Program Files\Microsoft Office\Office14\MSOSYNC.EXE [720064 2013-04-22] (Microsoft Corporation)
HKU\S-1-5-21-3608396222-1875968445-4039553499-1001\...\Run: [Google Update] => C:\Users\Tobias Wessel\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2013-09-12] (Google Inc.)
HKU\S-1-5-21-3608396222-1875968445-4039553499-1001\...\Run: [Cloud Station] => C:\Users\Tobias Wessel\AppData\Local\CloudStation\bin\cloud.exe [3772320 2014-04-02] ()
HKU\S-1-5-21-3608396222-1875968445-4039553499-1001\...\Policies\system: [DisableLockWorkstation] 0
HKU\S-1-5-21-3608396222-1875968445-4039553499-1001\...\MountPoints2: {3366dff5-fa77-11e2-afa2-f04da2a11890} - "G:\autorun.exe" 
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Quicken 2014 Zahlungserinnerung.lnk
ShortcutTarget: Quicken 2014 Zahlungserinnerung.lnk -> C:\Windows\Installer\{E60036CF-1E46-4DFE-832F-5476574B30FF}\BillMinder.8C5DA79E_7079_4AB3_81F7_712153351D0D.exe (Macrovision Corporation)
Startup: C:\Users\Tobias Wessel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Tobias Wessel\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://t.de.msn.com/
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://www.buenosearch.com/?q={searchTerms}&babsrc=SP_ss&mntrId=0E4EC2CB3835AF94&affID=127885&tsp=5215
SearchScopes: HKCU - {2AAEB659-739C-41E0-ABA5-AC61A5D5ACD0} URL = hxxp://search.us.com/serp?guid={D5A7CFA5-7E7F-4292-9735-8F1E81BAC5B9}&action=default_search&serpv=5&k={searchTerms}
SearchScopes: HKCU - {7383D4B5-1A90-4A3C-8909-3DE6F3FE302F} URL = hxxp://search.yahoo.com/search?p={searchTerms}&fr=tightropetb&type=10447
BHO: ExplorerWnd Helper - {10921475-03CE-4E04-90CE-E2E7EF20C814} - C:\Program Files\IObit\IObit Uninstaller\UninstallExplorer32.dll (IObit)
BHO: Trend Micro DirectPass BHO - {3F019D1C-7EAA-4F25-A765-FBA635BD0AFF} - E:\Programme\Trend Micro\Trend Micro\TMIDS\PwmIEBHO32.dll (Trend Micro Inc.)
BHO: TSToolbarBHO - {43C6D902-A1C5-45c9-91F6-FD9E90337E18} - E:\Programme\Trend Micro\Titanium\UIFramework\ToolbarIE.dll (Trend Micro Inc.)
BHO: CmjBrowserHelperObject Object - {6FE6A929-59D1-4763-91AD-29B61CFFB35B} - C:\Program Files\Mindjet\MindManager 11\Mm8InternetExplorer.dll (Mindjet)
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: TmIEPlugInBHO Class - {959A5673-7971-48e6-AF54-58F745AC4ABC} - E:\Programme\Trend Micro\AMSP\module\20013\3.0.1313\1.6.1102\TmopIEPlg.dll (Trend Micro Inc.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: TmBpIeBHO Class - {BBACBAFD-FA5E-4079-8B33-00EB9F13D4AC} - E:\Programme\Trend Micro\AMSP\module\20002\8.0.1170\8.0.1170\TmBpIe32.dll (Trend Micro Inc.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - Trend Micro Toolbar - {CCAC5586-44D7-4c43-B64A-F042461A97D2} - E:\Programme\Trend Micro\Titanium\UIFramework\ToolbarIE.dll (Trend Micro Inc.)
Toolbar: HKLM - Trend Micro DirectPass Symbolleiste - {9B4B91FC-EC4D-4018-9575-96FA5A3C03C5} - E:\Programme\Trend Micro\Trend Micro\TMIDS\PwmIEBHO32.dll (Trend Micro Inc.)
DPF: {C752FF21-A8EF-468E-B507-5BBAFB84359E} https://hbciweb.olb.de/financebrowser5/plugin/Signlet-Plugin.CAB
Handler: tmbp - {1A77E7DC-C9A0-4110-8A37-2F36BAE71ECF} - E:\Programme\Trend Micro\AMSP\module\20002\8.0.1170\8.0.1170\TmBpIe32.dll (Trend Micro Inc.)
Handler: tmop - {69FD7CE3-4604-4fe6-967C-49B9735CEE70} - E:\Programme\Trend Micro\AMSP\module\20013\3.0.1313\1.6.1102\TmopIEPlg.dll (Trend Micro Inc.)
Handler: tmtb - {04EAF3FB-4BAC-4B5A-A37D-A1CF210A5A42} - E:\Programme\Trend Micro\Titanium\UIFramework\ToolbarIE.dll (Trend Micro Inc.)
Handler: tmtbim - {0B37915C-8B98-4B9E-80D4-464D2C830D10} - E:\Programme\Trend Micro\Titanium\UIFramework\ProToolbarIMRatingActiveX.dll (Trend Micro Inc.)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1

FireFox:
========
FF ProfilePath: C:\Users\Tobias Wessel\AppData\Roaming\Mozilla\Firefox\Profiles\63305blf.default-1379009700912
FF user.js: detected! => C:\Users\Tobias Wessel\AppData\Roaming\Mozilla\Firefox\Profiles\63305blf.default-1379009700912\user.js
FF Plugin: @adobe.com/FlashPlayer - C:\WINDOWS\system32\Macromed\Flash\NPSWF32_13_0_0_182.dll ()
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin: @divx.com/DivX Web Player Plug-In,version=1.0.0 - C:\Program Files\DivX\DivX Web Player\npdivx32.dll (DivX, LLC)
FF Plugin: @Google.com/GoogleEarthPlugin - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin: @java.com/DTPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~1\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.0.2 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.2 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\Tobias Wessel\AppData\Local\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\Tobias Wessel\AppData\Local\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\Tobias Wessel\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\Tobias Wessel\AppData\Roaming\Mozilla\Firefox\Profiles\63305blf.default-1379009700912\searchplugins\buenosearch.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: HDvid Codec V6.0 - C:\Users\Tobias Wessel\AppData\Roaming\Mozilla\Firefox\Profiles\63305blf.default-1379009700912\Extensions\34f57b0c-8cdb-4914-818c-928df47c6c4f@3a243122-a6fc-40c9-a1e6-ba11e930da09.com [2014-03-08]
FF Extension: FoxyProxy Standard - C:\Users\Tobias Wessel\AppData\Roaming\Mozilla\Firefox\Profiles\63305blf.default-1379009700912\Extensions\foxyproxy@eric.h.jung [2014-02-05]
FF Extension: NetVideoHunter - C:\Users\Tobias Wessel\AppData\Roaming\Mozilla\Firefox\Profiles\63305blf.default-1379009700912\Extensions\netvideohunter@netvideohunter.com [2013-12-04]
FF Extension: DDBAC Plug-In - C:\Users\Tobias Wessel\AppData\Roaming\Mozilla\Firefox\Profiles\63305blf.default-1379009700912\Extensions\{271A3CF5-5A54-447B-A08F-BE805F0DA60A} [2013-09-20]
FF Extension: OLB - C:\Users\Tobias Wessel\AppData\Roaming\Mozilla\Firefox\Profiles\63305blf.default-1379009700912\Extensions\{C752FF21-A8EF-468E-B507-5BBAFB84359D} [2013-12-10]
FF Extension: Webmail Ad Blocker - C:\Users\Tobias Wessel\AppData\Roaming\Mozilla\Firefox\Profiles\63305blf.default-1379009700912\Extensions\gmailnoads@mywebber.com.xpi [2013-09-12]
FF Extension: YouTube ALL HTML5 - C:\Users\Tobias Wessel\AppData\Roaming\Mozilla\Firefox\Profiles\63305blf.default-1379009700912\Extensions\jid1-qj0w91o64N7Eeg@jetpack.xpi [2013-09-12]
FF Extension: FastestFox - C:\Users\Tobias Wessel\AppData\Roaming\Mozilla\Firefox\Profiles\63305blf.default-1379009700912\Extensions\smarterwiki@wikiatic.com.xpi [2013-12-03]
FF Extension: Youtube and more - Easy Video Downloader - C:\Users\Tobias Wessel\AppData\Roaming\Mozilla\Firefox\Profiles\63305blf.default-1379009700912\Extensions\vdpure@link64.xpi [2013-12-03]
FF Extension: 1-Click YouTube Video Downloader - C:\Users\Tobias Wessel\AppData\Roaming\Mozilla\Firefox\Profiles\63305blf.default-1379009700912\Extensions\YoutubeDownloader@PeterOlayev.com.xpi [2013-12-02]
FF Extension: NoScript - C:\Users\Tobias Wessel\AppData\Roaming\Mozilla\Firefox\Profiles\63305blf.default-1379009700912\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2013-09-12]
FF Extension: Adblock Plus - C:\Users\Tobias Wessel\AppData\Roaming\Mozilla\Firefox\Profiles\63305blf.default-1379009700912\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2013-09-12]
FF Extension: BetterPrivacy - C:\Users\Tobias Wessel\AppData\Roaming\Mozilla\Firefox\Profiles\63305blf.default-1379009700912\Extensions\{d40f5e7b-d2cf-4856-b441-cc613eeffbe3}.xpi [2013-09-12]
FF Extension: DownThemAll! - C:\Users\Tobias Wessel\AppData\Roaming\Mozilla\Firefox\Profiles\63305blf.default-1379009700912\Extensions\{DDC359D1-844A-42a7-9AA1-88A850A938A8}.xpi [2013-09-12]
FF HKLM\...\Firefox\Extensions: [tmbepff@trendmicro.com] - E:\Programme\Trend Micro\AMSP\module\20002\8.0.1170\8.0.1170\firefoxextension
FF Extension: Trend Micro BEP Firefox Extension - E:\Programme\Trend Micro\AMSP\module\20002\8.0.1170\8.0.1170\firefoxextension [2014-04-24]
FF HKLM\...\Firefox\Extensions: [{22181a4d-af90-4ca3-a569-faed9118d6bc}] - E:\Programme\Trend Micro\Titanium\UIFramework\Toolbar\firefoxextension
FF Extension: Trend Micro Toolbar - E:\Programme\Trend Micro\Titanium\UIFramework\Toolbar\firefoxextension [2013-12-06]
FF HKLM\...\Firefox\Extensions: [{8197dd50-b252-4b08-a1be-1277f22357bb}] - E:\Programme\Trend Micro\Trend Micro\TMIDS\PwmFirefoxExt
FF Extension: Trend Micro DirectPass Firefox Extension - E:\Programme\Trend Micro\Trend Micro\TMIDS\PwmFirefoxExt [2013-12-06]
FF HKLM\...\Firefox\Extensions: [{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}] - C:\Program Files\V-bates\Firefox
FF HKLM\...\Firefox\Extensions: [{BBB77B49-9FF4-4d5c-8FE2-92B1D6CD696C}] - E:\Programme\Trend Micro\AMSP\module\20013\FxExt\firefoxextension\
FF Extension: Trend Micro Osprey Firefox Extension - E:\Programme\Trend Micro\AMSP\module\20013\FxExt\firefoxextension\ []

Chrome: 
=======
CHR HomePage: hxxp://www.buenosearch.com/?babsrc=HP_ss&mntrId=0E4EC2CB3835AF94&affID=127885&tsp=5215
CHR StartupUrls: "hxxp://www.buenosearch.com/?babsrc=HP_ss&mntrId=0E4EC2CB3835AF94&affID=127885&tsp=5215"
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

========================== Services (Whitelisted) =================

S3 DfSdkS; C:\Program Files\Ashampoo\Ashampoo WinOptimizer 9\DfsdkS.exe [406016 2009-08-24] (mst software GmbH, Germany)
R2 DisplayLinkService; C:\Program Files\DisplayLink Core Software\DisplayLinkManager.exe [8216368 2013-11-29] (DisplayLink Corp.)
S2 LiveUpdateSvc; C:\Program Files\IObit\LiveUpdate\LiveUpdate.exe [2153792 2014-03-19] (IObit)
R2 NAUpdate; C:\Program Files\Nero\Update\NASvc.exe [762192 2013-07-18] (Nero AG)
R2 PwmSvc; E:\Programme\Trend Micro\Trend Micro\TMIDS\PwmSvc.exe [257128 2014-03-24] (Trend Micro Inc.)
S3 ScDeviceEnum; C:\WINDOWS\System32\ScDeviceEnum.dll [105472 2013-08-22] (Microsoft Corporation)
R2 valWBFPolicyService; C:\WINDOWS\system32\valWBFPolicyService.exe [29184 2013-10-11] (Validity Sensors, Inc.)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [280296 2013-10-31] (Microsoft Corporation)
S3 WEPHOSTSVC; C:\WINDOWS\system32\wephostsvc.dll [20992 2013-08-22] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [22224 2013-10-31] (Microsoft Corporation)
S3 workfolderssvc; C:\WINDOWS\system32\workfolderssvc.dll [1210368 2013-11-26] (Microsoft Corporation)
R2 WO_LiveService; C:\Program Files\Ashampoo\Ashampoo WinOptimizer 9\LiveTunerService.exe [885088 2013-05-07] ()
R2 WTGService; C:\Program Files\XSManager\WTGService.exe [329168 2010-04-12] ()
R2 XS Stick Service; C:\WINDOWS\service4g.exe [145064 2010-04-30] (4G Systems GmbH & Co. KG)
R2 Amsp; "E:\Programme\Trend Micro\AMSP\coreServiceShell.exe" coreFrameworkHost.exe -m=rb -dt=60000 -ad -bt=0 [X]

==================== Drivers (Whitelisted) ====================

R1 BasicRender; C:\WINDOWS\System32\drivers\BasicRender.sys [25600 2014-02-22] (Microsoft Corporation)
R3 BCM43XX; C:\WINDOWS\system32\DRIVERS\bcmwl63.sys [6715568 2014-03-19] (Broadcom Corporation)
S3 cmnsusbser; C:\WINDOWS\system32\DRIVERS\cmnsusbser.sys [103424 2013-08-05] (Mobile Connector)
R3 DisplayLinkUsbIo; C:\WINDOWS\System32\drivers\DisplayLinkUsbIo_7.5.52277.0.sys [38192 2014-01-25] ()
R3 dlcdcncm6; C:\WINDOWS\system32\DRIVERS\dlcdcncm6.sys [61232 2013-11-29] (DisplayLink Corp.)
R3 dlkmd; C:\WINDOWS\system32\drivers\dlkmd.sys [337712 2013-11-29] (DisplayLink Corp.)
R0 dlkmdldr; C:\WINDOWS\System32\drivers\dlkmdldr.sys [16688 2013-11-29] (DisplayLink Corp.)
R3 dlusbaudio; C:\WINDOWS\system32\DRIVERS\dlusbaudio.sys [148272 2013-11-29] (DisplayLink Corp.)
S3 GPIO; C:\WINDOWS\System32\drivers\iaiogpio.sys [22016 2013-07-23] (Intel Corporation)
R3 kbfilter; C:\WINDOWS\system32\DRIVERS\kbfilter.sys [61728 2014-03-24] (Trend Micro Inc.)
R2 LiveTunerPM; C:\Program Files\Ashampoo\Ashampoo WinOptimizer 9\LiveTunerProcessMonitor32.sys [12696 2011-03-08] ()
R1 tmactmon; C:\WINDOWS\system32\DRIVERS\tmactmon.sys [102904 2013-09-04] (Trend Micro Inc.)
R0 tmcomm; C:\WINDOWS\System32\DRIVERS\tmcomm.sys [288840 2013-09-04] (Trend Micro Inc.)
R0 TMEBC; C:\WINDOWS\System32\DRIVERS\TMEBC32.sys [40736 2013-07-01] (Trend Micro Inc.)
R3 tmeevw; C:\WINDOWS\system32\DRIVERS\tmeevw.sys [85280 2013-06-13] (Trend Micro Inc.)
S0 tmel; C:\WINDOWS\System32\DRIVERS\tmel.sys [32272 2013-07-11] (Trend Micro Inc.)
R1 tmevtmgr; C:\WINDOWS\system32\DRIVERS\tmevtmgr.sys [83352 2013-09-04] (Trend Micro Inc.)
R3 tmnciesc; C:\WINDOWS\system32\DRIVERS\tmnciesc.sys [282272 2013-05-22] (Trend Micro Inc.)
R2 tmusa; C:\WINDOWS\system32\DRIVERS\tmusa.sys [84768 2013-07-08] (Trend Micro Inc.)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [93016 2013-10-31] (Microsoft Corporation)
R0 Wof; C:\WINDOWS\system32\Drivers\Wof.sys [138584 2014-03-13] (Microsoft Corporation)
R3 WUDFSensorLP; C:\WINDOWS\System32\drivers\WUDFRd.sys [187392 2013-08-22] (Microsoft Corporation)
R3 WUDFWpdMtp; C:\WINDOWS\system32\DRIVERS\WUDFRd.sys [187392 2013-08-22] (Microsoft Corporation)
S3 RSUSBSTOR; System32\Drivers\RtsUStor.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-04-27 18:05 - 2014-04-27 18:08 - 84638145 _____ () C:\Users\Tobias Wessel\Downloads\videoplayback (5)
2014-04-27 18:02 - 2014-04-27 18:03 - 48056289 _____ () C:\Users\Tobias Wessel\Downloads\videoplayback (4)
2014-04-27 17:53 - 2014-04-27 17:54 - 17762999 _____ () C:\Users\Tobias Wessel\Downloads\'Thrift Shop' Macklemore choreography by Jasmine Meakin (Mega Jam).mp4
2014-04-27 17:53 - 2014-04-27 17:54 - 12156473 _____ () C:\Users\Tobias Wessel\Downloads\videoplayback (3)
2014-04-27 17:25 - 2014-04-27 18:28 - 00048939 _____ () C:\WINDOWS\WindowsUpdate.log
2014-04-27 15:40 - 2014-04-27 15:40 - 00707006 _____ () C:\Users\Tobias Wessel\Downloads\delfix.exe
2014-04-27 15:17 - 2014-04-27 18:35 - 00000000 ____D () C:\FRST
2014-04-26 12:13 - 2014-03-20 03:31 - 01037504 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel32.dll
2014-04-26 12:13 - 2014-03-20 03:20 - 18679216 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2014-04-26 12:13 - 2014-03-20 03:12 - 00863552 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2014-04-26 12:13 - 2014-03-20 03:09 - 01679704 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2014-04-26 12:13 - 2014-03-20 03:09 - 00283992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys
2014-04-26 12:13 - 2014-03-20 02:08 - 03562496 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncEngine.dll
2014-04-26 12:13 - 2014-03-11 14:35 - 02317824 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2014-04-26 12:13 - 2014-03-08 07:42 - 01131520 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2014-04-26 12:13 - 2014-03-06 12:46 - 01679128 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll
2014-04-26 12:13 - 2014-03-06 12:43 - 01326936 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2014-04-26 12:13 - 2014-03-06 12:37 - 05786968 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2014-04-26 12:13 - 2014-03-06 10:20 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Shell.Search.UriHandler.dll
2014-04-26 12:13 - 2014-03-06 08:59 - 12732416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2014-04-26 12:13 - 2014-03-06 08:29 - 11791360 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2014-04-26 12:13 - 2014-03-06 08:23 - 02270208 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll
2014-04-26 12:13 - 2014-03-06 07:27 - 05833728 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll
2014-04-26 12:13 - 2014-03-06 07:21 - 05770752 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2014-04-26 12:13 - 2014-03-04 13:16 - 02088160 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2014-04-26 12:13 - 2014-03-04 13:09 - 01871192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2014-04-26 12:13 - 2014-03-02 11:33 - 17387008 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2014-04-26 12:13 - 2014-02-26 08:35 - 02124288 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers.dll
2014-04-26 12:12 - 2014-03-20 01:39 - 00800256 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgent.dll
2014-04-26 12:12 - 2014-03-20 01:36 - 00172544 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReInfo.dll
2014-04-26 12:12 - 2014-03-19 07:25 - 00491008 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAgent.exe
2014-04-26 12:12 - 2014-03-19 07:20 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\system32\w32tm.exe
2014-04-26 12:12 - 2014-03-19 07:08 - 01351168 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll
2014-04-26 12:12 - 2014-03-19 06:33 - 00590336 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveTelemetry.dll
2014-04-26 12:12 - 2014-03-19 06:10 - 00672256 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDrive.exe
2014-04-26 12:12 - 2014-03-13 12:12 - 00138584 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wof.sys
2014-04-26 12:12 - 2014-03-12 15:45 - 00387210 _____ () C:\WINDOWS\system32\ApnDatabase.xml
2014-04-26 12:12 - 2014-03-11 17:05 - 00128000 _____ (Microsoft Corporation) C:\WINDOWS\system32\BdeHdCfg.exe
2014-04-26 12:12 - 2014-03-11 16:49 - 00082944 _____ (Microsoft Corporation) C:\WINDOWS\system32\BdeHdCfgLib.dll
2014-04-26 12:12 - 2014-03-11 16:28 - 00887296 _____ (Microsoft Corporation) C:\WINDOWS\system32\aclui.dll
2014-04-26 12:12 - 2014-03-11 16:09 - 00761856 _____ (Microsoft Corporation) C:\WINDOWS\system32\fvewiz.dll
2014-04-26 12:12 - 2014-03-11 15:46 - 00100864 _____ (Microsoft Corporation) C:\WINDOWS\system32\BitLockerDeviceEncryption.exe
2014-04-26 12:12 - 2014-03-11 15:34 - 00184832 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapibase.dll
2014-04-26 12:12 - 2014-03-11 15:32 - 00299008 _____ (Microsoft Corporation) C:\WINDOWS\system32\bdesvc.dll
2014-04-26 12:12 - 2014-03-11 15:30 - 00571392 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll
2014-04-26 12:12 - 2014-03-11 15:02 - 00629760 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll
2014-04-26 12:12 - 2014-03-08 14:00 - 01092896 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll
2014-04-26 12:12 - 2014-03-08 14:00 - 00241664 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcomp.dll
2014-04-26 12:12 - 2014-03-08 13:53 - 00147800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2014-04-26 12:12 - 2014-03-08 13:49 - 00482416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2014-04-26 12:12 - 2014-03-08 13:49 - 00376152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS
2014-04-26 12:12 - 2014-03-08 13:45 - 00069464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wfplwfs.sys
2014-04-26 12:12 - 2014-03-08 13:35 - 00295256 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Classpnp.sys
2014-04-26 12:12 - 2014-03-08 13:34 - 01095488 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll
2014-04-26 12:12 - 2014-03-08 10:44 - 00731648 _____ (Microsoft Corporation) C:\WINDOWS\system32\adtschema.dll
2014-04-26 12:12 - 2014-03-08 10:12 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\sxproxy.dll
2014-04-26 12:12 - 2014-03-08 09:47 - 00222720 _____ (Microsoft Corporation) C:\WINDOWS\system32\spp.dll
2014-04-26 12:12 - 2014-03-08 09:40 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\SetNetworkLocation.dll
2014-04-26 12:12 - 2014-03-08 09:14 - 00264192 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDEServer.exe
2014-04-26 12:12 - 2014-03-08 09:12 - 01816576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Display.dll
2014-04-26 12:12 - 2014-03-08 08:40 - 00139776 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxAllUserStore.dll
2014-04-26 12:12 - 2014-03-08 08:38 - 01089024 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2014-04-26 12:12 - 2014-03-08 08:37 - 00755712 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2014-04-26 12:12 - 2014-03-08 08:37 - 00551424 _____ (Microsoft Corporation) C:\WINDOWS\system32\BFE.DLL
2014-04-26 12:12 - 2014-03-08 08:30 - 00197632 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll
2014-04-26 12:12 - 2014-03-08 08:25 - 00264192 _____ (Microsoft Corporation) C:\WINDOWS\system32\FWPUCLNT.DLL
2014-04-26 12:12 - 2014-03-08 08:23 - 00731648 _____ (Microsoft Corporation) C:\WINDOWS\system32\IKEEXT.DLL
2014-04-26 12:12 - 2014-03-08 08:02 - 00801792 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2014-04-26 12:12 - 2014-03-08 07:58 - 00567296 _____ (Microsoft Corporation) C:\WINDOWS\system32\nshwfp.dll
2014-04-26 12:12 - 2014-03-08 07:16 - 00735232 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2014-04-26 12:12 - 2014-03-06 13:20 - 01200296 _____ (Microsoft Corporation) C:\WINDOWS\system32\propsys.dll
2014-04-26 12:12 - 2014-03-06 13:19 - 00390488 _____ (Microsoft Corporation) C:\WINDOWS\system32\netcfgx.dll
2014-04-26 12:12 - 2014-03-06 13:19 - 00094016 _____ (Microsoft Corporation) C:\WINDOWS\system32\userenv.dll
2014-04-26 12:12 - 2014-03-06 13:13 - 01779800 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
2014-04-26 12:12 - 2014-03-06 13:13 - 00406912 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
2014-04-26 12:12 - 2014-03-06 12:43 - 00321880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2014-04-26 12:12 - 2014-03-06 12:35 - 00406512 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2014-04-26 12:12 - 2014-03-06 12:35 - 00388408 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2014-04-26 12:12 - 2014-03-06 12:35 - 00326024 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2014-04-26 12:12 - 2014-03-06 12:35 - 00305768 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2014-04-26 12:12 - 2014-03-06 12:35 - 00194752 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2014-04-26 12:12 - 2014-03-06 12:34 - 00179200 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdd.dll
2014-04-26 12:12 - 2014-03-06 10:28 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanhlp.dll
2014-04-26 12:12 - 2014-03-06 10:24 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidclass.sys
2014-04-26 12:12 - 2014-03-06 10:24 - 00068608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\IPMIDrv.sys
2014-04-26 12:12 - 2014-03-06 10:24 - 00020992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidusb.sys
2014-04-26 12:12 - 2014-03-06 10:23 - 00102400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dfsc.sys
2014-04-26 12:12 - 2014-03-06 10:22 - 00560128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys
2014-04-26 12:12 - 2014-03-06 10:22 - 00124416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxdav.sys
2014-04-26 12:12 - 2014-03-06 10:21 - 00374784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\nwifi.sys
2014-04-26 12:12 - 2014-03-06 10:21 - 00333824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
2014-04-26 12:12 - 2014-03-06 10:20 - 00227840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb10.sys
2014-04-26 12:12 - 2014-03-06 10:20 - 00185856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srvnet.sys
2014-04-26 12:12 - 2014-03-06 10:20 - 00096256 _____ (Microsoft Corporation) C:\WINDOWS\system32\umpnpmgr.dll
2014-04-26 12:12 - 2014-03-06 10:20 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\system32\drvcfg.exe
2014-04-26 12:12 - 2014-03-06 10:20 - 00038400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpipreg.sys
2014-04-26 12:12 - 2014-03-06 10:10 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\system32\l2gpstore.dll
2014-04-26 12:12 - 2014-03-06 10:09 - 00098816 _____ (Microsoft Corporation) C:\WINDOWS\system32\drvinst.exe
2014-04-26 12:12 - 2014-03-06 09:47 - 00095744 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevPropMgr.dll
2014-04-26 12:12 - 2014-03-06 09:46 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\system32\davclnt.dll
2014-04-26 12:12 - 2014-03-06 09:44 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsgqec.dll
2014-04-26 12:12 - 2014-03-06 09:16 - 00171008 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsApi.dll
2014-04-26 12:12 - 2014-03-06 09:08 - 00855552 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdvidcrl.dll
2014-04-26 12:12 - 2014-03-06 08:42 - 00589824 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpprefcl.dll
2014-04-26 12:12 - 2014-03-06 08:29 - 00688640 _____ (Microsoft Corporation) C:\WINDOWS\system32\netlogon.dll
2014-04-26 12:12 - 2014-03-06 08:14 - 00174080 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2014-04-26 12:12 - 2014-03-06 08:13 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanapi.dll
2014-04-26 12:12 - 2014-03-06 08:11 - 02030080 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmSvc.dll
2014-04-26 12:12 - 2014-03-06 08:09 - 01764864 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2014-04-26 12:12 - 2014-03-06 08:06 - 00386560 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlangpui.dll
2014-04-26 12:12 - 2014-03-06 08:06 - 00153600 _____ (Microsoft Corporation) C:\WINDOWS\system32\dafWfdProvider.dll
2014-04-26 12:12 - 2014-03-06 08:04 - 00300544 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanmsm.dll
2014-04-26 12:12 - 2014-03-06 08:04 - 00226304 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Sensors.dll
2014-04-26 12:12 - 2014-03-06 08:02 - 00623104 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2014-04-26 12:12 - 2014-03-06 08:01 - 00251392 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSDMon.dll
2014-04-26 12:12 - 2014-03-06 08:00 - 01309184 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll
2014-04-26 12:12 - 2014-03-06 07:54 - 00888320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2014-04-26 12:12 - 2014-03-06 07:51 - 00151040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Scanners.dll
2014-04-26 12:12 - 2014-03-06 07:45 - 00833536 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2014-04-26 12:12 - 2014-03-06 07:42 - 00280576 _____ (Microsoft Corporation) C:\WINDOWS\system32\SessEnv.dll
2014-04-26 12:12 - 2014-03-06 07:33 - 00839168 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFolder.dll
2014-04-26 12:12 - 2014-03-06 07:32 - 00828928 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.appcore.dll
2014-04-26 12:12 - 2014-03-04 13:10 - 00355832 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfreadwrite.dll
2014-04-26 12:12 - 2014-03-04 13:09 - 00286040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS
2014-04-26 12:12 - 2014-03-04 09:26 - 00444928 _____ (Microsoft Corporation) C:\WINDOWS\system32\AdmTmpl.dll
2014-04-26 12:12 - 2014-03-04 08:42 - 00494592 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsapi.dll
2014-04-26 12:12 - 2014-03-04 08:42 - 00186880 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsrslvr.dll
2014-04-26 12:12 - 2014-03-04 08:39 - 00254976 _____ (Microsoft Corporation) C:\WINDOWS\system32\pdh.dll
2014-04-26 12:12 - 2014-03-04 08:32 - 00356864 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidprov.dll
2014-04-26 12:12 - 2014-03-04 08:30 - 00069120 _____ (Microsoft Corporation) C:\WINDOWS\system32\RMapi.dll
2014-04-26 12:12 - 2014-03-04 08:26 - 00184832 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll
2014-04-26 12:12 - 2014-03-04 08:05 - 00402432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.Printing.dll
2014-04-26 12:12 - 2014-03-04 07:54 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredentialMigrationHandler.dll
2014-04-26 12:12 - 2014-03-04 07:52 - 00605184 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasapi32.dll
2014-04-26 12:12 - 2014-02-06 23:26 - 00313344 _____ (Microsoft Corporation) C:\WINDOWS\system32\clusapi.dll
2014-04-26 12:12 - 2013-12-24 01:28 - 00262656 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationApi.dll
2014-04-26 12:09 - 2014-02-22 12:44 - 02178048 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2014-04-26 12:09 - 2014-02-22 12:36 - 04254720 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2014-04-26 12:09 - 2014-02-22 11:33 - 11745792 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2014-04-26 12:09 - 2014-02-22 11:33 - 01967104 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2014-04-26 12:09 - 2014-02-22 10:27 - 01143808 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2014-04-26 12:08 - 2014-02-22 16:52 - 01767440 _____ (Microsoft Corporation) C:\WINDOWS\system32\setupapi.dll
2014-04-26 12:08 - 2014-02-22 16:51 - 01063976 _____ (Microsoft Corporation) C:\WINDOWS\system32\Taskmgr.exe
2014-04-26 12:08 - 2014-02-22 16:42 - 01370696 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll
2014-04-26 12:08 - 2014-02-22 16:42 - 01017936 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll
2014-04-26 12:08 - 2014-02-22 16:42 - 00422968 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll
2014-04-26 12:08 - 2014-02-22 16:42 - 00410568 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFault.exe
2014-04-26 12:08 - 2014-02-22 16:42 - 00369288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Faultrep.dll
2014-04-26 12:08 - 2014-02-22 16:40 - 00333656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spaceport.sys
2014-04-26 12:08 - 2014-02-22 16:38 - 01374384 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll
2014-04-26 12:08 - 2014-02-22 16:38 - 01129064 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll
2014-04-26 12:08 - 2014-02-22 16:38 - 01077944 _____ (Microsoft Corporation) C:\WINDOWS\system32\webservices.dll
2014-04-26 12:08 - 2014-02-22 16:26 - 00502616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fvevol.sys
2014-04-26 12:08 - 2014-02-22 16:26 - 00198488 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdyboost.sys
2014-04-26 12:08 - 2014-02-22 16:25 - 02871672 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSService.dll
2014-04-26 12:08 - 2014-02-22 16:25 - 02410496 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMVDECOD.DLL
2014-04-26 12:08 - 2014-02-22 16:18 - 01914616 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcMon.exe
2014-04-26 12:08 - 2014-02-22 16:18 - 00477744 _____ (Microsoft Corporation) C:\WINDOWS\system32\SHCore.dll
2014-04-26 12:08 - 2014-02-22 16:18 - 00419928 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.appcore.dll
2014-04-26 12:08 - 2014-02-22 16:08 - 01451392 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2014-04-26 12:08 - 2014-02-22 16:08 - 01389960 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2014-04-26 12:08 - 2014-02-22 16:08 - 01280960 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2014-04-26 12:08 - 2014-02-22 16:08 - 01270608 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2014-04-26 12:08 - 2014-02-22 16:08 - 01167856 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe
2014-04-26 12:08 - 2014-02-22 16:08 - 00431960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\acpi.sys
2014-04-26 12:08 - 2014-02-22 16:08 - 00337752 _____ (Microsoft Corporation) C:\WINDOWS\system32\halmacpi.dll
2014-04-26 12:08 - 2014-02-22 16:08 - 00337752 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll
2014-04-26 12:08 - 2014-02-22 16:08 - 00265048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\volsnap.sys
2014-04-26 12:08 - 2014-02-22 16:04 - 02144984 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2014-04-26 12:08 - 2014-02-22 16:04 - 01206000 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll
2014-04-26 12:08 - 2014-02-22 16:04 - 01155392 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpmde.dll
2014-04-26 12:08 - 2014-02-22 16:04 - 01011280 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetsrc.dll
2014-04-26 12:08 - 2014-02-22 16:04 - 00869720 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys
2014-04-26 12:08 - 2014-02-22 16:04 - 00707048 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll
2014-04-26 12:08 - 2014-02-22 16:04 - 00650736 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetcore.dll
2014-04-26 12:08 - 2014-02-22 16:04 - 00518552 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf.dll
2014-04-26 12:08 - 2014-02-22 16:04 - 00296448 _____ (Microsoft Corporation) C:\WINDOWS\system32\MMDevAPI.dll
2014-04-26 12:08 - 2014-02-22 13:28 - 02428928 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExplorerFrame.dll
2014-04-26 12:08 - 2014-02-22 13:23 - 00903168 _____ (Microsoft Corporation) C:\WINDOWS\system32\uxtheme.dll
2014-04-26 12:08 - 2014-02-22 13:22 - 03499008 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2014-04-26 12:08 - 2014-02-22 13:22 - 00219648 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ks.sys
2014-04-26 12:08 - 2014-02-22 13:17 - 00630272 _____ (Microsoft Corporation) C:\WINDOWS\system32\OobeFldr.dll
2014-04-26 12:08 - 2014-02-22 13:16 - 00617472 _____ (Microsoft Corporation) C:\WINDOWS\system32\apphelp.dll
2014-04-26 12:08 - 2014-02-22 13:16 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\WofUtil.dll
2014-04-26 12:08 - 2014-02-22 12:57 - 00156672 _____ (Microsoft Corporation) C:\WINDOWS\system32\scrrun.dll
2014-04-26 12:08 - 2014-02-22 12:40 - 00479744 _____ (Microsoft Corporation) C:\WINDOWS\system32\recimg.exe
2014-04-26 12:08 - 2014-02-22 12:40 - 00138752 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWWIN.EXE
2014-04-26 12:08 - 2014-02-22 12:33 - 00592896 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2014-04-26 12:08 - 2014-02-22 12:18 - 00488448 _____ (Microsoft Corporation) C:\WINDOWS\system32\qedit.dll
2014-04-26 12:08 - 2014-02-22 12:14 - 00575488 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2014-04-26 12:08 - 2014-02-22 12:09 - 00027648 _____ (Microsoft Corporation) C:\WINDOWS\system32\dfp.exe
2014-04-26 12:08 - 2014-02-22 12:02 - 08946688 _____ (Microsoft Corporation) C:\WINDOWS\system32\glcndFilter.dll
2014-04-26 12:08 - 2014-02-22 12:02 - 00282112 _____ (Microsoft Corporation) C:\WINDOWS\system32\DfpCommon.dll
2014-04-26 12:08 - 2014-02-22 12:01 - 00367616 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssph.dll
2014-04-26 12:08 - 2014-02-22 11:52 - 00926720 _____ (Microsoft Corporation) C:\WINDOWS\system32\RecoveryDrive.exe
2014-04-26 12:08 - 2014-02-22 11:46 - 00528896 _____ (Microsoft Corporation) C:\WINDOWS\system32\comdlg32.dll
2014-04-26 12:08 - 2014-02-22 11:40 - 00524288 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2014-04-26 12:08 - 2014-02-22 11:39 - 00854528 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll
2014-04-26 12:08 - 2014-02-22 11:37 - 02220032 _____ (Microsoft Corporation) C:\WINDOWS\system32\Wpc.dll
2014-04-26 12:08 - 2014-02-22 11:36 - 01392640 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMPDMC.exe
2014-04-26 12:08 - 2014-02-22 11:33 - 01882624 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebSync.dll
2014-04-26 12:08 - 2014-02-22 11:32 - 01162752 _____ (Microsoft Corporation) C:\WINDOWS\system32\usercpl.dll
2014-04-26 12:08 - 2014-02-22 11:28 - 02643456 _____ (Microsoft Corporation) C:\WINDOWS\system32\tquery.dll
2014-04-26 12:08 - 2014-02-22 11:26 - 00792576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Globalization.dll
2014-04-26 12:08 - 2014-02-22 11:24 - 00604672 _____ (Microsoft Corporation) C:\WINDOWS\system32\samsrv.dll
2014-04-26 12:08 - 2014-02-22 11:23 - 00344576 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll
2014-04-26 12:08 - 2014-02-22 11:20 - 00428032 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimserv.exe
2014-04-26 12:08 - 2014-02-22 11:16 - 11776000 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmp.dll
2014-04-26 12:08 - 2014-02-22 11:16 - 00593408 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcss.dll
2014-04-26 12:08 - 2014-02-22 11:14 - 00892416 _____ (Microsoft Corporation) C:\WINDOWS\system32\sysmain.dll
2014-04-26 12:08 - 2014-02-22 11:14 - 00034816 _____ (Microsoft Corporation) C:\WINDOWS\system32\WofTasks.dll
2014-04-26 12:08 - 2014-02-22 11:10 - 00300032 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmsvc.dll
2014-04-26 12:08 - 2014-02-22 11:08 - 00207872 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll
2014-04-26 12:08 - 2014-02-22 11:07 - 01203200 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidsvc.dll
2014-04-26 12:08 - 2014-02-22 11:07 - 00551424 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimgapi.dll
2014-04-26 12:08 - 2014-02-22 11:06 - 00434176 _____ (Microsoft Corporation) C:\WINDOWS\system32\msTextPrediction.dll
2014-04-26 12:08 - 2014-02-22 11:04 - 01029120 _____ (Microsoft Corporation) C:\WINDOWS\system32\mispace.dll
2014-04-26 12:08 - 2014-02-22 11:00 - 01341440 _____ (Microsoft Corporation) C:\WINDOWS\system32\dui70.dll
2014-04-26 12:08 - 2014-02-22 11:00 - 00418304 _____ (Microsoft Corporation) C:\WINDOWS\system32\StructuredQuery.dll
2014-04-26 12:08 - 2014-02-22 10:59 - 01403392 _____ (Microsoft Corporation) C:\WINDOWS\system32\storagewmi.dll
2014-04-26 12:08 - 2014-02-22 10:59 - 00553472 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.OnlineId.dll
2014-04-26 12:08 - 2014-02-22 10:58 - 00479232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpncore.dll
2014-04-26 12:08 - 2014-02-22 10:57 - 00829440 _____ (Microsoft Corporation) C:\WINDOWS\system32\perftrack.dll
2014-04-26 12:08 - 2014-02-22 10:56 - 00353280 _____ (Microsoft Corporation) C:\WINDOWS\system32\swprv.dll
2014-04-26 12:08 - 2014-02-22 10:51 - 01258496 _____ (Microsoft Corporation) C:\WINDOWS\system32\RacEngn.dll
2014-04-26 12:08 - 2014-02-22 10:49 - 08874496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
2014-04-26 12:08 - 2014-02-22 10:47 - 00517120 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe
2014-04-26 12:08 - 2014-02-22 10:45 - 00612352 _____ (Microsoft Corporation) C:\WINDOWS\system32\uDWM.dll
2014-04-26 12:08 - 2014-02-22 10:39 - 00556032 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.dll
2014-04-26 12:08 - 2014-02-22 10:37 - 01716736 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssrch.dll
2014-04-26 12:08 - 2014-02-22 10:35 - 00704512 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2014-04-26 12:08 - 2014-02-22 10:32 - 01789440 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2014-04-26 12:08 - 2014-02-22 10:29 - 01631232 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlowUI.dll
2014-04-26 12:08 - 2014-02-22 10:21 - 00600576 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll
2014-04-26 12:08 - 2014-02-22 10:19 - 00698880 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll
2014-04-26 12:08 - 2014-02-22 10:17 - 00459264 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSync.dll
2014-04-26 12:08 - 2014-02-22 10:03 - 01496576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Immersive.dll
2014-04-26 12:08 - 2014-02-22 10:01 - 00978944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Streaming.dll
2014-04-26 12:08 - 2014-02-22 10:00 - 00514560 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe
2014-04-26 12:08 - 2014-02-22 06:35 - 00262335 _____ () C:\WINDOWS\system32\dfpinc.dat
2014-04-26 12:08 - 2014-02-08 03:08 - 00081975 _____ () C:\WINDOWS\system32\systemsf.ebd
2014-04-26 12:08 - 2014-02-02 15:33 - 00230808 _____ (Microsoft Corporation) C:\WINDOWS\system32\wintrust.dll
2014-04-26 12:08 - 2014-01-29 09:44 - 01369736 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecs.dll
2014-04-26 12:08 - 2013-12-10 08:10 - 00406528 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppReadiness.dll
2014-04-26 12:07 - 2014-02-22 16:52 - 00251504 _____ (Microsoft Corporation) C:\WINDOWS\system32\powrprof.dll
2014-04-26 12:07 - 2014-02-22 16:52 - 00171936 _____ (Microsoft Corporation) C:\WINDOWS\system32\systemreset.exe
2014-04-26 12:07 - 2014-02-22 16:52 - 00063592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpfve.sys
2014-04-26 12:07 - 2014-02-22 16:51 - 00491744 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll
2014-04-26 12:07 - 2014-02-22 16:51 - 00140456 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscapi.dll
2014-04-26 12:07 - 2014-02-22 16:51 - 00066624 _____ (Microsoft Corporation) C:\WINDOWS\system32\taskhostex.exe
2014-04-26 12:07 - 2014-02-22 16:51 - 00065056 _____ (Microsoft Corporation) C:\WINDOWS\system32\taskhost.exe
2014-04-26 12:07 - 2014-02-22 16:42 - 00232896 _____ (Microsoft Corporation) C:\WINDOWS\system32\sqmapi.dll
2014-04-26 12:07 - 2014-02-22 16:42 - 00146672 _____ (Microsoft Corporation) C:\WINDOWS\system32\imm32.dll
2014-04-26 12:07 - 2014-02-22 16:42 - 00137344 _____ (Microsoft Corporation) C:\WINDOWS\system32\wermgr.exe
2014-04-26 12:07 - 2014-02-22 16:42 - 00098072 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmapi.dll
2014-04-26 12:07 - 2014-02-22 16:41 - 00033056 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFaultSecure.exe
2014-04-26 12:07 - 2014-02-22 16:40 - 00311128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storport.sys
2014-04-26 12:07 - 2014-02-22 16:40 - 00261464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBXHCI.SYS
2014-04-26 12:07 - 2014-02-22 16:40 - 00211800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pci.sys
2014-04-26 12:07 - 2014-02-22 16:40 - 00163672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\UCX01000.SYS
2014-04-26 12:07 - 2014-02-22 16:40 - 00122712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msgpioclx.sys
2014-04-26 12:07 - 2014-02-22 16:40 - 00120664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBSTOR.SYS
2014-04-26 12:07 - 2014-02-22 16:40 - 00064344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdstor.sys
2014-04-26 12:07 - 2014-02-22 16:38 - 00506120 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinTypes.dll
2014-04-26 12:07 - 2014-02-22 16:38 - 00336232 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcryptprimitives.dll
2014-04-26 12:07 - 2014-02-22 16:38 - 00197280 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppwinob.dll
2014-04-26 12:07 - 2014-02-22 16:38 - 00136320 _____ (Microsoft Corporation) C:\WINDOWS\system32\AuthHost.exe
2014-04-26 12:07 - 2014-02-22 16:38 - 00125976 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcrypt.dll
2014-04-26 12:07 - 2014-02-22 16:38 - 00107352 _____ (Microsoft Corporation) C:\WINDOWS\system32\consent.exe
2014-04-26 12:07 - 2014-02-22 16:38 - 00089848 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncryptsslp.dll
2014-04-26 12:07 - 2014-02-22 16:26 - 00197976 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdbus.sys
2014-04-26 12:07 - 2014-02-22 16:26 - 00130904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpsd.sys
2014-04-26 12:07 - 2014-02-22 16:26 - 00063832 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fileinfo.sys
2014-04-26 12:07 - 2014-02-22 16:26 - 00030552 _____ (Microsoft Corporation) C:\WINDOWS\system32\ploptin.dll
2014-04-26 12:07 - 2014-02-22 16:26 - 00025944 _____ (Microsoft Corporation) C:\WINDOWS\system32\SysResetErr.exe
2014-04-26 12:07 - 2014-02-22 16:25 - 00180240 _____ (Microsoft Corporation) C:\WINDOWS\system32\SndVol.exe
2014-04-26 12:07 - 2014-02-22 16:18 - 00759192 _____ (Microsoft Corporation) C:\WINDOWS\system32\iuilp.dll
2014-04-26 12:07 - 2014-02-22 16:18 - 00224664 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlows.exe
2014-04-26 12:07 - 2014-02-22 16:18 - 00089848 _____ (Microsoft Corporation) C:\WINDOWS\system32\RestoreOptIn.exe
2014-04-26 12:07 - 2014-02-22 16:18 - 00046000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wpcfltr.sys
2014-04-26 12:07 - 2014-02-22 16:18 - 00041320 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudNotifications.exe
2014-04-26 12:07 - 2014-02-22 16:18 - 00029912 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserAccountBroker.exe
2014-04-26 12:07 - 2014-02-22 16:12 - 01468872 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMALFXGFXDSP.dll
2014-04-26 12:07 - 2014-02-22 16:11 - 00490136 _____ (Microsoft Corporation) C:\WINDOWS\system32\advapi32.dll
2014-04-26 12:07 - 2014-02-22 16:10 - 00105896 _____ (Microsoft Corporation) C:\WINDOWS\system32\smss.exe
2014-04-26 12:07 - 2014-02-22 16:08 - 00271192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fltMgr.sys
2014-04-26 12:07 - 2014-02-22 16:08 - 00079496 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcd.dll
2014-04-26 12:07 - 2014-02-22 16:04 - 00317584 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvproc.dll
2014-04-26 12:07 - 2014-02-22 16:04 - 00285144 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFCaptureEngine.dll
2014-04-26 12:07 - 2014-02-22 13:28 - 00245248 _____ (Microsoft Corporation) C:\WINDOWS\system32\microsoft-windows-system-events.dll
2014-04-26 12:07 - 2014-02-22 13:28 - 00128512 _____ (Microsoft Corporation) C:\WINDOWS\system32\microsoft-windows-kernel-power-events.dll
2014-04-26 12:07 - 2014-02-22 13:22 - 00097280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\luafv.sys
2014-04-26 12:07 - 2014-02-22 13:22 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BasicRender.sys
2014-04-26 12:07 - 2014-02-22 13:19 - 00205312 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\portcls.sys
2014-04-26 12:07 - 2014-02-22 13:18 - 00640000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\PEAuth.sys
2014-04-26 12:07 - 2014-02-22 13:16 - 00012288 _____ (Microsoft Corporation) C:\WINDOWS\system32\clrhost.dll
2014-04-26 12:07 - 2014-02-22 13:15 - 00088576 _____ (Microsoft Corporation) C:\WINDOWS\system32\appinfo.dll
2014-04-26 12:07 - 2014-02-22 13:11 - 00160768 _____ (Microsoft Corporation) C:\WINDOWS\system32\aelupsvc.dll
2014-04-26 12:07 - 2014-02-22 13:06 - 00148992 _____ (Microsoft Corporation) C:\WINDOWS\system32\slc.dll
2014-04-26 12:07 - 2014-02-22 13:05 - 00095232 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppc.dll
2014-04-26 12:07 - 2014-02-22 13:01 - 00112640 _____ (Microsoft Corporation) C:\WINDOWS\system32\fsutil.exe
2014-04-26 12:07 - 2014-02-22 12:58 - 00455168 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2014-04-26 12:07 - 2014-02-22 12:58 - 00207872 _____ (Microsoft Corporation) C:\WINDOWS\system32\vdsbas.dll
2014-04-26 12:07 - 2014-02-22 12:47 - 00207872 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmdskmgr.dll
2014-04-26 12:07 - 2014-02-22 12:33 - 00402944 _____ (Microsoft Corporation) C:\WINDOWS\system32\zipfldr.dll
2014-04-26 12:07 - 2014-02-22 12:30 - 00213504 _____ (Microsoft Corporation) C:\WINDOWS\system32\cleanmgr.exe
2014-04-26 12:07 - 2014-02-22 12:24 - 00448512 _____ (Microsoft Corporation) C:\WINDOWS\system32\RASMM.dll
2014-04-26 12:07 - 2014-02-22 12:21 - 00104960 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockScreenContent.dll
2014-04-26 12:07 - 2014-02-22 12:21 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\system32\srclient.dll
2014-04-26 12:07 - 2014-02-22 12:17 - 00367616 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtmsft.dll
2014-04-26 12:07 - 2014-02-22 12:16 - 00308224 _____ (Microsoft Corporation) C:\WINDOWS\system32\srchadmin.dll
2014-04-26 12:07 - 2014-02-22 12:16 - 00151040 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmvdsitf.dll
2014-04-26 12:07 - 2014-02-22 12:14 - 02811392 _____ (Microsoft Corporation) C:\WINDOWS\system32\themeui.dll
2014-04-26 12:07 - 2014-02-22 12:14 - 02165760 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncCenter.dll
2014-04-26 12:07 - 2014-02-22 12:13 - 00307200 _____ (Microsoft Corporation) C:\WINDOWS\system32\newdev.dll
2014-04-26 12:07 - 2014-02-22 12:12 - 00552960 _____ (Microsoft Corporation) C:\WINDOWS\system32\cscui.dll
2014-04-26 12:07 - 2014-02-22 12:04 - 00098304 _____ (Microsoft Corporation) C:\WINDOWS\system32\netid.dll
2014-04-26 12:07 - 2014-02-22 12:03 - 00779264 _____ (Microsoft Corporation) C:\WINDOWS\system32\osk.exe
2014-04-26 12:07 - 2014-02-22 12:02 - 00258560 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchProtocolHost.exe
2014-04-26 12:07 - 2014-02-22 12:01 - 00832512 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActionCenter.dll
2014-04-26 12:07 - 2014-02-22 12:01 - 00726528 _____ (Microsoft Corporation) C:\WINDOWS\system32\nettrace.dll
2014-04-26 12:07 - 2014-02-22 12:00 - 00217600 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssphtb.dll
2014-04-26 12:07 - 2014-02-22 11:55 - 00244224 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll
2014-04-26 12:07 - 2014-02-22 11:54 - 00225280 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2014-04-26 12:07 - 2014-02-22 11:52 - 00342016 _____ (Microsoft Corporation) C:\WINDOWS\system32\sharemediacpl.dll
2014-04-26 12:07 - 2014-02-22 11:44 - 00675328 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssvp.dll
2014-04-26 12:07 - 2014-02-22 11:44 - 00316928 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhcfg.dll
2014-04-26 12:07 - 2014-02-22 11:43 - 01294848 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbengine.exe
2014-04-26 12:07 - 2014-02-22 11:43 - 00601088 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsAnytimeUpgradeui.exe
2014-04-26 12:07 - 2014-02-22 11:42 - 00869888 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdclt.exe
2014-04-26 12:07 - 2014-02-22 11:42 - 00333824 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsqmcons.exe
2014-04-26 12:07 - 2014-02-22 11:40 - 02537472 _____ (Microsoft Corporation) C:\WINDOWS\system32\gameux.dll
2014-04-26 12:07 - 2014-02-22 11:40 - 01095680 _____ (Microsoft Corporation) C:\WINDOWS\system32\werconcpl.dll
2014-04-26 12:07 - 2014-02-22 11:39 - 00667136 _____ (Microsoft Corporation) C:\WINDOWS\system32\PurchaseWindowsLicense.dll
2014-04-26 12:07 - 2014-02-22 11:36 - 00835584 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasgcw.dll
2014-04-26 12:07 - 2014-02-22 11:36 - 00391680 _____ (Microsoft Corporation) C:\WINDOWS\system32\WLanConn.dll
2014-04-26 12:07 - 2014-02-22 11:31 - 00242688 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmregistration.dll
2014-04-26 12:07 - 2014-02-22 11:28 - 00176128 _____ (Microsoft Corporation) C:\WINDOWS\system32\authz.dll
2014-04-26 12:07 - 2014-02-22 11:23 - 00103936 _____ (Microsoft Corporation) C:\WINDOWS\system32\psmsrv.dll
2014-04-26 12:07 - 2014-02-22 11:21 - 00459264 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe
2014-04-26 12:07 - 2014-02-22 11:21 - 00145408 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsrv.dll
2014-04-26 12:07 - 2014-02-22 11:20 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\system32\WiFiDisplay.dll
2014-04-26 12:07 - 2014-02-22 11:19 - 00090112 _____ (Microsoft Corporation) C:\WINDOWS\system32\wersvc.dll
2014-04-26 12:07 - 2014-02-22 11:16 - 00291328 _____ (Microsoft Corporation) C:\WINDOWS\system32\conhost.exe
2014-04-26 12:07 - 2014-02-22 11:15 - 00211968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Dism.exe
2014-04-26 12:07 - 2014-02-22 11:14 - 00752640 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdh.dll
2014-04-26 12:07 - 2014-02-22 11:13 - 00348672 _____ (Microsoft Corporation) C:\WINDOWS\system32\energy.dll
2014-04-26 12:07 - 2014-02-22 11:13 - 00113152 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmredir.dll
2014-04-26 12:07 - 2014-02-22 11:12 - 00459776 _____ (Microsoft Corporation) C:\WINDOWS\system32\DismApi.dll
2014-04-26 12:07 - 2014-02-22 11:08 - 00357888 _____ (Microsoft Corporation) C:\WINDOWS\system32\defragsvc.dll
2014-04-26 12:07 - 2014-02-22 11:08 - 00306688 _____ (Microsoft Corporation) C:\WINDOWS\system32\das.dll
2014-04-26 12:07 - 2014-02-22 11:08 - 00155136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.HumanInterfaceDevice.dll
2014-04-26 12:07 - 2014-02-22 11:07 - 00613376 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsm.dll
2014-04-26 12:07 - 2014-02-22 11:07 - 00109568 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscinterop.dll
2014-04-26 12:07 - 2014-02-22 11:06 - 01035264 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll
2014-04-26 12:07 - 2014-02-22 11:03 - 00089600 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmcsp.dll
2014-04-26 12:07 - 2014-02-22 10:56 - 00084480 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwm.exe
2014-04-26 12:07 - 2014-02-22 10:54 - 00137216 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToManager.dll
2014-04-26 12:07 - 2014-02-22 10:54 - 00045568 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxSysprep.dll
2014-04-26 12:07 - 2014-02-22 10:52 - 00969728 _____ (Microsoft Corporation) C:\WINDOWS\system32\VSSVC.exe
2014-04-26 12:07 - 2014-02-22 10:48 - 00506880 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdbui.dll
2014-04-26 12:07 - 2014-02-22 10:45 - 00169472 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSClient.dll
2014-04-26 12:07 - 2014-02-22 10:45 - 00164352 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFilterHost.exe
2014-04-26 12:07 - 2014-02-22 10:45 - 00098304 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscsvc.dll
2014-04-26 12:07 - 2014-02-22 10:43 - 01108480 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanmm.dll
2014-04-26 12:07 - 2014-02-22 10:43 - 00644608 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntshrui.dll
2014-04-26 12:07 - 2014-02-22 10:43 - 00260608 _____ (Microsoft Corporation) C:\WINDOWS\system32\BioCredProv.dll
2014-04-26 12:07 - 2014-02-22 10:43 - 00117760 _____ (Microsoft Corporation) C:\WINDOWS\system32\thumbcache.dll
2014-04-26 12:07 - 2014-02-22 10:42 - 00943104 _____ (Microsoft Corporation) C:\WINDOWS\system32\WlanMM.dll
2014-04-26 12:07 - 2014-02-22 10:42 - 00709120 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctfuimanager.dll
2014-04-26 12:07 - 2014-02-22 10:42 - 00448000 _____ (Microsoft Corporation) C:\WINDOWS\system32\VAN.dll
2014-04-26 12:07 - 2014-02-22 10:42 - 00078848 _____ (Microsoft Corporation) C:\WINDOWS\system32\AltTab.dll
2014-04-26 12:07 - 2014-02-22 10:41 - 03278848 _____ (Microsoft Corporation) C:\WINDOWS\system32\bootux.dll
2014-04-26 12:07 - 2014-02-22 10:41 - 00662528 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2014-04-26 12:07 - 2014-02-22 10:39 - 00356352 _____ (Microsoft Corporation) C:\WINDOWS\system32\taskeng.exe
2014-04-26 12:07 - 2014-02-22 10:38 - 00470016 _____ (Microsoft Corporation) C:\WINDOWS\system32\timedate.cpl
2014-04-26 12:07 - 2014-02-22 10:38 - 00121856 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveShell.dll
2014-04-26 12:07 - 2014-02-22 10:37 - 00658432 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchIndexer.exe
2014-04-26 12:07 - 2014-02-22 10:34 - 00288768 _____ (Microsoft Corporation) C:\WINDOWS\system32\stobject.dll
2014-04-26 12:07 - 2014-02-22 10:33 - 00308224 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhcpl.dll
2014-04-26 12:07 - 2014-02-22 10:29 - 00191488 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputSwitch.dll
2014-04-26 12:07 - 2014-02-22 10:28 - 00557568 _____ (Microsoft Corporation) C:\WINDOWS\system32\pnidui.dll
2014-04-26 12:07 - 2014-02-22 10:25 - 00352256 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanconn.dll
2014-04-26 12:07 - 2014-02-22 10:21 - 00518144 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmIndexer.dll
2014-04-26 12:07 - 2014-02-22 10:20 - 02302976 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpccpl.dll
2014-04-26 12:07 - 2014-02-22 09:56 - 00519680 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepdu.dll
2014-04-26 12:07 - 2014-02-22 09:54 - 00214016 _____ (Microsoft Corporation) C:\WINDOWS\system32\SndVolSSO.dll
2014-04-26 12:07 - 2014-02-08 03:08 - 00024518 _____ () C:\WINDOWS\system32\systemsflm.ebd
2014-04-26 12:07 - 2014-01-31 11:35 - 03085824 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcore.dll
2014-04-26 12:07 - 2014-01-31 11:08 - 00507392 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSDApi.dll
2014-04-26 12:07 - 2014-01-31 11:04 - 00409600 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.Connectivity.dll
2014-04-26 12:07 - 2014-01-29 09:43 - 00411992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vhdmp.sys
2014-04-26 12:07 - 2014-01-29 09:38 - 00735576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\http.sys
2014-04-26 12:07 - 2014-01-29 08:41 - 00218624 _____ (Microsoft Corporation) C:\WINDOWS\system32\rascustom.dll
2014-04-26 12:07 - 2014-01-29 08:25 - 00197632 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.Vpn.dll
2014-04-26 12:07 - 2014-01-27 19:25 - 00667136 _____ (Microsoft Corporation) C:\WINDOWS\system32\WorkfoldersControl.dll
2014-04-26 12:07 - 2014-01-27 18:47 - 01165312 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpsvc.dll
2014-04-26 12:07 - 2014-01-17 19:04 - 00292864 _____ (Microsoft Corporation) C:\WINDOWS\system32\ninput.dll
2014-04-26 12:07 - 2014-01-08 02:33 - 00552632 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll
2014-04-26 12:07 - 2013-12-04 15:53 - 00473600 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxPackaging.dll
2014-04-26 12:07 - 2013-11-27 10:56 - 00167936 _____ (Microsoft Corporation) C:\WINDOWS\system32\netiohlp.dll
2014-04-26 12:06 - 2014-02-22 16:38 - 00078000 _____ (Microsoft Corporation) C:\WINDOWS\system32\easinvoker.exe
2014-04-26 12:06 - 2014-02-22 13:24 - 00800256 _____ (Microsoft Corporation) C:\WINDOWS\system32\autoconv.exe
2014-04-26 12:06 - 2014-02-22 13:24 - 00792576 _____ (Microsoft Corporation) C:\WINDOWS\system32\autochk.exe
2014-04-26 12:06 - 2014-02-22 13:24 - 00780288 _____ (Microsoft Corporation) C:\WINDOWS\system32\autofmt.exe
2014-04-26 12:06 - 2014-02-22 13:24 - 00109056 _____ (Microsoft Corporation) C:\WINDOWS\system32\SSShim.dll
2014-04-26 12:06 - 2014-02-22 13:24 - 00005632 ____H (Microsoft Corporation) C:\WINDOWS\system32\ext-ms-win-session-winsta-l1-1-0.dll
2014-04-26 12:06 - 2014-02-22 13:22 - 00040448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\watchdog.sys
2014-04-26 12:06 - 2014-02-22 13:16 - 00055808 _____ (Microsoft Corporation) C:\WINDOWS\system32\setbcdlocale.dll
2014-04-26 12:06 - 2014-02-22 13:13 - 00047104 _____ (Microsoft Corporation) C:\WINDOWS\system32\offreg.dll
2014-04-26 12:06 - 2014-02-22 13:12 - 00310272 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcdedit.exe
2014-04-26 12:06 - 2014-02-22 13:11 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\spbcd.dll
2014-04-26 12:06 - 2014-02-22 13:09 - 00024576 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups.dll
2014-04-26 12:06 - 2014-02-22 13:09 - 00023040 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgentc.exe
2014-04-26 12:06 - 2014-02-22 13:09 - 00022528 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll
2014-04-26 12:06 - 2014-02-22 13:07 - 00050176 _____ (Microsoft Corporation) C:\WINDOWS\system32\UXInit.dll
2014-04-26 12:06 - 2014-02-22 13:04 - 00192512 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsAnytimeUpgrade.exe
2014-04-26 12:06 - 2014-02-22 13:01 - 00194048 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActionQueue.dll
2014-04-26 12:06 - 2014-02-22 12:59 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll
2014-04-26 12:06 - 2014-02-22 12:58 - 00136192 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcdboot.exe
2014-04-26 12:06 - 2014-02-22 12:57 - 00165376 _____ (Microsoft Corporation) C:\WINDOWS\system32\scrobj.dll
2014-04-26 12:06 - 2014-02-22 12:56 - 00057344 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhevents.dll
2014-04-26 12:06 - 2014-02-22 12:54 - 00035024 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockScreenContentServer.exe
2014-04-26 12:06 - 2014-02-22 12:53 - 00195584 _____ (Microsoft Corporation) C:\WINDOWS\system32\PkgMgr.exe
2014-04-26 12:06 - 2014-02-22 12:50 - 00136192 _____ (Microsoft Corporation) C:\WINDOWS\system32\diskpart.exe
2014-04-26 12:06 - 2014-02-22 12:47 - 00106496 _____ (Microsoft Corporation) C:\WINDOWS\system32\setupugc.exe
2014-04-26 12:06 - 2014-02-22 12:46 - 00111104 _____ (Microsoft Corporation) C:\WINDOWS\system32\vdsutil.dll
2014-04-26 12:06 - 2014-02-22 12:43 - 00157696 _____ (Microsoft Corporation) C:\WINDOWS\system32\RelPost.exe
2014-04-26 12:06 - 2014-02-22 12:41 - 00122880 _____ (Microsoft Corporation) C:\WINDOWS\system32\dot3mm.dll
2014-04-26 12:06 - 2014-02-22 12:40 - 00304640 _____ (Microsoft Corporation) C:\WINDOWS\system32\wusa.exe
2014-04-26 12:06 - 2014-02-22 12:40 - 00124928 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppnp.dll
2014-04-26 12:06 - 2014-02-22 12:38 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\easwrt.dll
2014-04-26 12:06 - 2014-02-22 12:37 - 00084480 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll
2014-04-26 12:06 - 2014-02-22 12:33 - 00101376 _____ (Microsoft Corporation) C:\WINDOWS\system32\DAMM.dll
2014-04-26 12:06 - 2014-02-22 12:33 - 00062976 _____ (Microsoft Corporation) C:\WINDOWS\system32\BulkOperationHost.exe
2014-04-26 12:06 - 2014-02-22 12:32 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\cscript.exe
2014-04-26 12:06 - 2014-02-22 12:27 - 00625664 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpksetup.exe
2014-04-26 12:06 - 2014-02-22 12:26 - 00059392 _____ (Microsoft Corporation) C:\WINDOWS\system32\wercplsupport.dll
2014-04-26 12:06 - 2014-02-22 12:25 - 00101376 _____ (Microsoft Corporation) C:\WINDOWS\system32\scavengeui.dll
2014-04-26 12:06 - 2014-02-22 12:25 - 00059392 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorageContextHandler.dll
2014-04-26 12:06 - 2014-02-22 12:23 - 00107008 _____ (Microsoft Corporation) C:\WINDOWS\system32\pnpclean.dll
2014-04-26 12:06 - 2014-02-22 12:23 - 00022016 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockScreenContentHost.dll
2014-04-26 12:06 - 2014-02-22 12:21 - 00561664 _____ (Microsoft Corporation) C:\WINDOWS\system32\dfrgui.exe
2014-04-26 12:06 - 2014-02-22 12:21 - 00045568 _____ (Microsoft Corporation) C:\WINDOWS\system32\acppage.dll
2014-04-26 12:06 - 2014-02-22 12:17 - 00570368 _____ (Microsoft Corporation) C:\WINDOWS\system32\vds.exe
2014-04-26 12:06 - 2014-02-22 12:17 - 00159232 _____ (Microsoft Corporation) C:\WINDOWS\system32\werui.dll
2014-04-26 12:06 - 2014-02-22 12:17 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\system32\DAConn.dll
2014-04-26 12:06 - 2014-02-22 12:16 - 00592896 _____ (Microsoft Corporation) C:\WINDOWS\system32\sud.dll
2014-04-26 12:06 - 2014-02-22 12:16 - 00389120 _____ (Microsoft Corporation) C:\WINDOWS\system32\srcore.dll
2014-04-26 12:06 - 2014-02-22 12:15 - 00235008 _____ (Microsoft Corporation) C:\WINDOWS\system32\srrstr.dll
2014-04-26 12:06 - 2014-02-22 12:15 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\system32\SrTasks.exe
2014-04-26 12:06 - 2014-02-22 12:12 - 00352768 _____ (Microsoft Corporation) C:\WINDOWS\system32\spwizeng.dll
2014-04-26 12:06 - 2014-02-22 12:09 - 00097280 _____ (Microsoft Corporation) C:\WINDOWS\system32\migisol.dll
2014-04-26 12:06 - 2014-02-22 12:09 - 00032256 _____ (Microsoft Corporation) C:\WINDOWS\system32\JavaScriptCollectionAgent.dll
2014-04-26 12:06 - 2014-02-22 12:08 - 00244224 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbadmin.exe
2014-04-26 12:06 - 2014-02-22 12:00 - 00159744 _____ (Microsoft Corporation) C:\WINDOWS\system32\aitagent.exe
2014-04-26 12:06 - 2014-02-22 11:59 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2014-04-26 12:06 - 2014-02-22 11:58 - 00090112 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsAnytimeUpgradeResults.exe
2014-04-26 12:06 - 2014-02-22 11:54 - 00245248 _____ (Microsoft Corporation) C:\WINDOWS\system32\rstrui.exe
2014-04-26 12:06 - 2014-02-22 11:48 - 01136128 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscui.cpl
2014-04-26 12:06 - 2014-02-22 11:41 - 00492032 _____ (Microsoft Corporation) C:\WINDOWS\system32\PrintDialogs.dll
2014-04-26 12:06 - 2014-02-22 11:29 - 00062976 _____ (Microsoft Corporation) C:\WINDOWS\system32\samlib.dll
2014-04-26 12:06 - 2014-02-22 11:28 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\system32\deviceassociation.dll
2014-04-26 12:06 - 2014-02-22 11:27 - 00484864 _____ (Microsoft Corporation) C:\WINDOWS\system32\untfs.dll
2014-04-26 12:06 - 2014-02-22 11:26 - 00067584 _____ (Microsoft Corporation) C:\WINDOWS\system32\powercfg.exe
2014-04-26 12:06 - 2014-02-22 11:25 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\system32\winbrand.dll
2014-04-26 12:06 - 2014-02-22 11:23 - 00256000 _____ (Microsoft Corporation) C:\WINDOWS\system32\wincorlib.dll
2014-04-26 12:06 - 2014-02-22 11:23 - 00116736 _____ (Microsoft Corporation) C:\WINDOWS\system32\MicrosoftAccountTokenProvider.dll
2014-04-26 12:06 - 2014-02-22 11:22 - 00270336 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsku.dll
2014-04-26 12:06 - 2014-02-22 11:19 - 00059392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.Sockets.PushEnabledApplication.dll
2014-04-26 12:06 - 2014-02-22 11:17 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\dasHost.exe
2014-04-26 12:06 - 2014-02-22 11:16 - 00017920 _____ (Microsoft Corporation) C:\WINDOWS\system32\sxshared.dll
2014-04-26 12:06 - 2014-02-22 11:15 - 00178176 _____ (Microsoft Corp.) C:\WINDOWS\system32\Defrag.exe
2014-04-26 12:06 - 2014-02-22 11:10 - 00117248 _____ (Microsoft Corporation) C:\WINDOWS\system32\BootMenuUX.dll
2014-04-26 12:06 - 2014-02-22 11:09 - 00208384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2014-04-26 12:06 - 2014-02-22 11:06 - 00251904 _____ (Microsoft Corporation) C:\WINDOWS\system32\MbaeApiPublic.dll
2014-04-26 12:06 - 2014-02-22 11:02 - 00559104 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserLanguagesCpl.dll
2014-04-26 12:06 - 2014-02-22 10:58 - 00544768 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidcli.dll
2014-04-26 12:06 - 2014-02-22 10:55 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\system32\slpts.dll
2014-04-26 12:06 - 2014-02-22 10:49 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapp.exe
2014-04-26 12:06 - 2014-02-22 10:48 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2014-04-26 12:06 - 2014-02-22 10:48 - 00123904 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuwebv.dll
2014-04-26 12:06 - 2014-02-22 10:48 - 00051712 _____ (Microsoft Corporation) C:\WINDOWS\system32\ConfigureExpandedStorage.dll
2014-04-26 12:06 - 2014-02-22 10:48 - 00047104 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssprxy.dll
2014-04-26 12:06 - 2014-02-22 10:48 - 00016384 _____ (Microsoft Corporation) C:\WINDOWS\system32\energytask.dll
2014-04-26 12:06 - 2014-02-22 10:48 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\system32\msshooks.dll
2014-04-26 12:06 - 2014-02-22 10:47 - 00185856 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidcredprov.dll
2014-04-26 12:06 - 2014-02-22 10:47 - 00045056 _____ (Microsoft Corporation) C:\WINDOWS\system32\AepRoam.dll
2014-04-26 12:06 - 2014-02-22 10:44 - 00154624 _____ (Microsoft Corporation) C:\WINDOWS\system32\netplwiz.dll
2014-04-26 12:06 - 2014-02-22 10:43 - 00390144 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.Handlers.dll
2014-04-26 12:06 - 2014-02-22 10:43 - 00080896 _____ (Microsoft Corporation) C:\WINDOWS\system32\wudriver.dll
2014-04-26 12:06 - 2014-02-22 10:40 - 00203776 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToDevice.dll
2014-04-26 12:06 - 2014-02-22 10:39 - 00321536 _____ (Microsoft Corporation) C:\WINDOWS\system32\provsvc.dll
2014-04-26 12:06 - 2014-02-22 10:38 - 00062464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Renewal.dll
2014-04-26 12:06 - 2014-02-22 10:33 - 00130560 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingMonitor.dll
2014-04-26 12:06 - 2014-02-22 10:24 - 00082432 _____ (Microsoft Corporation) C:\WINDOWS\system32\IdCtrls.dll
2014-04-26 12:06 - 2014-02-22 10:23 - 00165888 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnprv.dll
2014-04-26 12:06 - 2014-02-22 10:19 - 00099840 _____ (Microsoft Corporation) C:\WINDOWS\system32\AuthBroker.dll
2014-04-26 12:06 - 2014-02-22 10:17 - 00109568 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudStorageWizard.exe
2014-04-26 12:06 - 2014-02-01 08:00 - 00002255 _____ () C:\WINDOWS\system32\WimBootCompress.ini
2014-04-26 12:06 - 2014-01-31 13:11 - 00144384 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpchttp.dll
2014-04-26 12:06 - 2014-01-31 11:10 - 00080896 _____ (Microsoft Corporation) C:\WINDOWS\system32\dafBth.dll
2014-04-26 12:06 - 2014-01-31 10:24 - 01057792 _____ (Microsoft Corporation) C:\WINDOWS\system32\printui.dll
2014-04-26 12:06 - 2014-01-29 08:25 - 00457216 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasmans.dll
2014-04-26 12:06 - 2014-01-22 07:50 - 00147968 _____ (Microsoft Corporation) C:\WINDOWS\system32\deviceaccess.dll
2014-04-26 12:06 - 2013-12-04 16:19 - 00439808 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Bluetooth.dll
2014-04-26 12:06 - 2013-11-27 11:20 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\finger.exe
2014-04-26 12:06 - 2013-11-23 10:37 - 00036696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\intelpep.sys
2014-04-26 12:06 - 2013-11-08 05:47 - 00370176 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv
2014-04-26 12:05 - 2014-02-22 13:25 - 00027648 _____ (Microsoft Corporation) C:\WINDOWS\system32\f3ahvoas.dll
2014-04-26 12:05 - 2014-02-22 13:25 - 00008192 ____H (Microsoft Corporation) C:\WINDOWS\system32\ext-ms-win-ntuser-private-l1-1-1.dll
2014-04-26 12:05 - 2014-02-22 13:25 - 00003584 ____H (Microsoft Corporation) C:\WINDOWS\system32\ext-ms-win-ntuser-private-l1-1-0.dll
2014-04-26 12:05 - 2014-02-22 13:24 - 00003584 ____H (Microsoft Corporation) C:\WINDOWS\system32\ext-ms-win-networking-wcmapi-l1-1-0.dll
2014-04-26 12:05 - 2014-02-22 13:24 - 00003584 ____H (Microsoft Corporation) C:\WINDOWS\system32\ext-ms-win-kernel32-package-l1-1-1.dll
2014-04-26 12:05 - 2014-02-22 13:23 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\system32\workerdd.dll
2014-04-26 12:05 - 2014-02-22 12:59 - 00163328 _____ (Microsoft Corporation) C:\WINDOWS\system32\ocsetapi.dll
2014-04-26 12:05 - 2014-02-22 12:50 - 00181248 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhengine.dll
2014-04-26 12:05 - 2014-02-22 12:31 - 00438784 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2014-04-26 12:05 - 2014-02-22 12:03 - 02544128 _____ (Microsoft Corporation) C:\WINDOWS\system32\themecpl.dll
2014-04-26 12:05 - 2014-02-22 11:59 - 00313856 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2014-04-26 12:05 - 2014-02-22 11:53 - 00127488 _____ (Microsoft Corporation) C:\WINDOWS\system32\occache.dll
2014-04-26 12:05 - 2014-02-22 11:27 - 00202240 _____ (Microsoft Corporation) C:\WINDOWS\system32\GlobCollationHost.dll
2014-04-26 12:05 - 2014-02-22 11:26 - 00047104 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveskybackup.dll
2014-04-26 12:05 - 2014-02-22 11:21 - 00314368 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbiosrvc.dll
2014-04-26 12:05 - 2014-02-22 11:19 - 00146944 _____ (Microsoft Corporation) C:\WINDOWS\system32\korwbrkr.dll
2014-04-26 12:05 - 2014-02-22 10:50 - 00096768 _____ (Microsoft Corporation) C:\WINDOWS\system32\winbici.dll
2014-04-26 12:05 - 2014-02-22 10:48 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\dataclen.dll
2014-04-26 12:05 - 2014-02-22 10:39 - 00193024 _____ (Microsoft Corporation) C:\WINDOWS\system32\bthprops.cpl
2014-04-26 12:05 - 2014-02-22 10:20 - 00027648 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncPolicy.dll
2014-04-26 12:05 - 2014-02-22 06:46 - 00002440 ___RS () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FileManager.lnk
2014-04-26 12:05 - 2014-02-22 06:38 - 00000369 _____ () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk
2014-04-26 12:05 - 2014-02-22 06:38 - 00000369 _____ () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk
2014-04-26 12:05 - 2014-02-22 06:38 - 00000369 _____ () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk
2014-04-26 12:05 - 2014-02-22 06:38 - 00000369 _____ () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk
2014-04-26 12:05 - 2014-02-08 03:08 - 00100197 _____ () C:\WINDOWS\system32\RacRules.xml
2014-04-26 12:05 - 2014-02-01 08:00 - 00011109 _____ () C:\WINDOWS\system32\connectedsearch-results.searchconnector-ms
2014-04-26 12:05 - 2014-02-01 08:00 - 00007762 _____ () C:\WINDOWS\system32\connectedsearch-suggestions.searchconnector-ms
2014-04-26 12:05 - 2014-02-01 08:00 - 00007130 _____ () C:\WINDOWS\system32\connectedsearch-zeroinput.searchconnector-ms
2014-04-26 12:05 - 2014-01-27 13:52 - 00050053 _____ () C:\WINDOWS\system32\srms.dat
2014-04-26 11:36 - 2014-04-09 12:54 - 00049544 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2014-04-26 11:36 - 2014-04-09 05:21 - 00307200 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUSettingsProvider.dll
2014-04-26 11:36 - 2014-04-09 05:21 - 00159744 _____ (Microsoft Corporation) C:\WINDOWS\system32\storewuauth.dll
2014-04-26 11:36 - 2014-04-09 05:07 - 01634304 _____ (Microsoft Corporation) C:\WINDOWS\system32\wucltux.dll
2014-04-26 11:36 - 2014-04-09 05:05 - 02767360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2014-04-25 22:52 - 2014-04-25 22:52 - 00112128 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieUnatt.exe
2014-04-25 22:52 - 2014-04-25 22:52 - 00108032 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollector.exe
2014-04-25 22:52 - 2014-04-25 22:52 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwproxystub.dll
2014-04-25 22:52 - 2014-04-25 22:52 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll
2014-04-25 22:52 - 2014-04-25 22:52 - 00004096 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollectorres.dll
2014-04-25 22:51 - 2014-04-25 22:51 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll
2014-04-24 19:59 - 2014-04-24 20:00 - 00013312 _____ () C:\Users\Tobias Wessel\Downloads\Wertentwicklung-26111385.xls
2014-04-24 19:46 - 2014-04-24 19:46 - 00164864 _____ (Microsoft Corporation) C:\WINDOWS\system32\msrating.dll
2014-04-22 12:10 - 2014-04-22 12:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GeoGebra 4.4
2014-04-22 12:09 - 2014-04-22 12:10 - 00000000 ____D () C:\Program Files\GeoGebra 4.4
2014-04-22 12:06 - 2014-04-22 12:06 - 00008405 _____ () C:\Users\Tobias Wessel\Downloads\geogebra.ggb
2014-04-22 11:38 - 2014-04-22 11:38 - 41904816 _____ (International GeoGebra Institute) C:\Users\Tobias Wessel\Downloads\GeoGebra-Windows-Installer-4-4-29-0.exe
2014-04-22 11:37 - 2014-04-27 11:21 - 00000000 ____D () C:\Users\Tobias Wessel\AppData\Roaming\megaglest
2014-04-22 11:37 - 2014-04-22 11:37 - 00000000 ____D () C:\Users\Tobias Wessel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MegaGlest
2014-04-22 11:37 - 2014-04-22 11:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MegaGlest
2014-04-22 11:34 - 2014-04-22 11:37 - 00000000 ____D () C:\Program Files\MegaGlest
2014-04-22 11:28 - 2014-04-22 11:30 - 255309153 _____ () C:\Users\Tobias Wessel\Downloads\MegaGlest-Installer-3.9.1_i386_win32.exe
2014-04-19 18:43 - 2014-04-19 18:44 - 00000000 ____D () C:\Users\Tobias Wessel\Desktop\Kreysing, Anna Lena
2014-04-15 16:29 - 2014-04-15 16:29 - 00741888 _____ () C:\Users\Tobias Wessel\Downloads\Tarif_Rechner_03-2014.xls
2014-04-15 16:25 - 2014-04-15 16:32 - 269951012 _____ () C:\Users\Tobias Wessel\Downloads\SetupGenTarif_01_2014_480.exe
2014-04-15 14:42 - 2014-04-15 14:42 - 00000141 _____ () C:\Users\Tobias Wessel\Downloads\sky_drive_off.reg
2014-04-14 11:07 - 2014-04-14 11:07 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2014-04-12 08:37 - 2014-04-12 08:37 - 00000000 ____D () C:\Users\Tobias Wessel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Video Performer
2014-04-12 08:36 - 2014-04-12 08:37 - 00000000 ____D () C:\Program Files\Video Performer
2014-04-12 08:35 - 2014-04-12 08:35 - 00000000 ____D () C:\ProgramData\Babylon
2014-04-12 08:09 - 2014-04-12 08:09 - 16204160 _____ (Geek Software GmbH ) C:\Users\Tobias Wessel\Downloads\pdf24-creator-6.3.2.exe
2014-04-09 18:53 - 2014-04-09 18:53 - 00377856 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnet.dll
2014-04-09 18:53 - 2014-04-09 18:53 - 00214016 _____ (Microsoft Corporation) C:\WINDOWS\system32\dplayx.dll
2014-04-09 18:53 - 2014-04-09 18:53 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnathlp.dll
2014-04-09 18:53 - 2014-04-09 18:53 - 00045056 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpwsockx.dll
2014-04-09 18:53 - 2014-04-09 18:53 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnsvr.exe
2014-04-09 18:53 - 2014-04-09 18:53 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\system32\dplaysvr.exe
2014-04-09 18:53 - 2014-04-09 18:53 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpmodemx.dll
2014-04-09 18:53 - 2014-04-09 18:53 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnhupnp.dll
2014-04-09 18:53 - 2014-04-09 18:53 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnhpast.dll
2014-04-09 18:52 - 2014-04-09 18:52 - 00000000 ____D () C:\Users\Tobias Wessel\Documents\Fireglow Games
2014-04-09 18:47 - 2014-04-09 18:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GameTop.com
2014-04-09 18:42 - 2014-04-09 18:45 - 180394690 _____ (Media Contact LLC ) C:\Users\Tobias Wessel\Downloads\SS_Iwojima.exe
2014-04-09 18:38 - 2014-04-10 11:31 - 00000000 ____D () C:\Users\Tobias Wessel\AppData\Roaming\arkana-fts
2014-04-09 18:38 - 2014-04-09 18:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Arkana-FTS 0.0.4
2014-04-09 18:36 - 2014-04-09 18:37 - 41323935 _____ () C:\Users\Tobias Wessel\Downloads\Arkana-FTS-0.0.4-Setup.exe
2014-04-09 18:32 - 2014-04-09 18:33 - 142457013 _____ () C:\Users\Tobias Wessel\Downloads\unknown-horizons-2013.3_win32 (1).exe
2014-04-09 18:32 - 2014-04-09 18:32 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Glest_3.2.2
2014-04-09 18:32 - 2014-04-09 18:32 - 00000000 ____D () C:\Program Files\Glest_3.2.2
2014-04-09 18:29 - 2014-04-09 18:30 - 55968880 _____ (Glest Team ) C:\Users\Tobias Wessel\Downloads\glest_3.2.2.exe
2014-04-08 17:33 - 2014-04-08 17:33 - 00000000 ____D () C:\Users\Tobias Wessel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Synology
2014-04-02 12:22 - 2014-04-02 12:22 - 00000000 ____D () C:\Users\Tobias Wessel\Desktop\Didaktische Jahresplanung_Einzelhandel
2014-03-29 15:08 - 2014-03-29 15:08 - 00000000 ____D () C:\Users\Tobias Wessel\AppData\Roaming\Maitre
2014-03-29 15:03 - 2014-01-24 16:26 - 46484063 _____ () C:\Users\Tobias Wessel\Downloads\Setup_001.exe
2014-03-29 15:03 - 2013-12-06 14:43 - 00001024 _____ () C:\Users\Tobias Wessel\Downloads\@.ashx.html
2014-03-29 13:09 - 2014-03-29 13:09 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-03-29 12:40 - 2014-03-29 12:40 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HanseMerkur

==================== One Month Modified Files and Folders =======

2014-04-27 18:35 - 2014-04-27 15:17 - 00000000 ____D () C:\FRST
2014-04-27 18:28 - 2014-04-27 17:25 - 00048939 _____ () C:\WINDOWS\WindowsUpdate.log
2014-04-27 18:08 - 2014-04-27 18:05 - 84638145 _____ () C:\Users\Tobias Wessel\Downloads\videoplayback (5)
2014-04-27 18:03 - 2014-04-27 18:02 - 48056289 _____ () C:\Users\Tobias Wessel\Downloads\videoplayback (4)
2014-04-27 18:00 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\sru
2014-04-27 17:55 - 2013-09-12 20:19 - 00001168 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-3608396222-1875968445-4039553499-1001UA.job
2014-04-27 17:54 - 2014-04-27 17:53 - 17762999 _____ () C:\Users\Tobias Wessel\Downloads\'Thrift Shop' Macklemore choreography by Jasmine Meakin (Mega Jam).mp4
2014-04-27 17:54 - 2014-04-27 17:53 - 12156473 _____ () C:\Users\Tobias Wessel\Downloads\videoplayback (3)
2014-04-27 17:53 - 2013-08-05 09:21 - 00001128 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2014-04-27 17:42 - 2013-08-05 20:22 - 00000884 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2014-04-27 17:39 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\Microsoft.NET
2014-04-27 15:40 - 2014-04-27 15:40 - 00707006 _____ () C:\Users\Tobias Wessel\Downloads\delfix.exe
2014-04-27 14:43 - 2013-09-30 06:08 - 01776918 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2014-04-27 14:43 - 2013-08-06 20:16 - 00000000 ____D () C:\Users\Tobias Wessel\AppData\Roaming\Dropbox
2014-04-27 14:42 - 2013-08-22 08:13 - 00262144 ___SH () C:\WINDOWS\system32\config\ELAM
2014-04-27 14:39 - 2013-08-01 08:19 - 00000000 ___RD () C:\Users\Tobias Wessel\Dropbox
2014-04-27 14:37 - 2013-11-30 19:23 - 00000000 ____D () C:\Users\Tobias Wessel\AppData\Local\CloudStation
2014-04-27 14:37 - 2013-11-30 19:19 - 00000000 ___RD () C:\Users\Tobias Wessel\Wessel Tobias
2014-04-27 14:37 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\tracing
2014-04-27 14:37 - 2013-08-05 09:21 - 00001124 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2014-04-27 14:36 - 2013-11-30 12:05 - 00065536 _____ () C:\WINDOWS\system32\Ikeext.etl
2014-04-27 14:36 - 2013-08-22 09:23 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2014-04-27 13:04 - 2013-08-22 08:13 - 00262144 ___SH () C:\WINDOWS\system32\config\BBI
2014-04-27 11:21 - 2014-04-22 11:37 - 00000000 ____D () C:\Users\Tobias Wessel\AppData\Roaming\megaglest
2014-04-26 22:51 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\AppReadiness
2014-04-26 22:44 - 2014-02-18 17:50 - 00000000 ___RD () C:\Users\Tobias Wessel\SkyDrive
2014-04-26 22:41 - 2013-08-22 09:22 - 00489272 _____ () C:\WINDOWS\system32\FNTCACHE.DAT
2014-04-26 17:52 - 2013-09-30 05:47 - 00000000 ____D () C:\WINDOWS\system32\Drivers\de-DE
2014-04-26 17:52 - 2013-09-30 05:47 - 00000000 ____D () C:\WINDOWS\de-DE
2014-04-26 17:52 - 2013-08-22 10:17 - 00000000 ___RD () C:\WINDOWS\ToastData
2014-04-26 17:52 - 2013-08-22 10:17 - 00000000 ___RD () C:\WINDOWS\ImmersiveControlPanel
2014-04-26 17:52 - 2013-08-22 10:17 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-04-26 17:52 - 2013-08-22 10:17 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-04-26 17:52 - 2013-08-22 10:17 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-04-26 17:52 - 2013-08-22 10:17 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-04-26 17:52 - 2013-08-22 10:17 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools
2014-04-26 17:52 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\WinStore
2014-04-26 17:52 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\zh-TW
2014-04-26 17:52 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\zh-HK
2014-04-26 17:52 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\zh-CN
2014-04-26 17:52 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\uk-UA
2014-04-26 17:52 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\tr-TR
2014-04-26 17:52 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\th-TH
2014-04-26 17:52 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\SystemResetPlatform
2014-04-26 17:52 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\sv-SE
2014-04-26 17:52 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\sr-Latn-RS
2014-04-26 17:52 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\sr-Latn-CS
2014-04-26 17:52 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\sl-SI
2014-04-26 17:52 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\sk-SK
2014-04-26 17:52 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\ru-RU
2014-04-26 17:52 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\ro-RO
2014-04-26 17:52 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\pt-PT
2014-04-26 17:52 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\pt-BR
2014-04-26 17:52 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\pl-PL
2014-04-26 17:52 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\nl-NL
2014-04-26 17:52 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\nb-NO
2014-04-26 17:52 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\lv-LV
2014-04-26 17:52 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\lt-LT
2014-04-26 17:52 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\ko-KR
2014-04-26 17:52 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\ja-JP
2014-04-26 17:52 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\it-IT
2014-04-26 17:52 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\hu-HU
2014-04-26 17:52 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\hr-HR
2014-04-26 17:52 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\he-IL
2014-04-26 17:52 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\fr-FR
2014-04-26 17:52 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\fi-FI
2014-04-26 17:52 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\et-EE
2014-04-26 17:52 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\en-GB
2014-04-26 17:52 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\el-GR
2014-04-26 17:52 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\de-DE
2014-04-26 17:52 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\bg-BG
2014-04-26 17:52 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\ar-SA
2014-04-26 17:52 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\MediaViewer
2014-04-26 17:52 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\FileManager
2014-04-26 17:52 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\Camera
2014-04-26 17:52 - 2013-08-22 10:17 - 00000000 ____D () C:\Program Files\Windows Portable Devices
2014-04-26 17:52 - 2013-08-22 10:17 - 00000000 ____D () C:\Program Files\Windows Multimedia Platform
2014-04-25 22:52 - 2014-04-25 22:52 - 00112128 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieUnatt.exe
2014-04-25 22:52 - 2014-04-25 22:52 - 00108032 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollector.exe
2014-04-25 22:52 - 2014-04-25 22:52 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwproxystub.dll
2014-04-25 22:52 - 2014-04-25 22:52 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll
2014-04-25 22:52 - 2014-04-25 22:52 - 00004096 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollectorres.dll
2014-04-25 22:51 - 2014-04-25 22:51 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll
2014-04-25 22:40 - 2014-03-19 16:25 - 00000000 ____D () C:\ProgramData\ProductData
2014-04-24 20:00 - 2014-04-24 19:59 - 00013312 _____ () C:\Users\Tobias Wessel\Downloads\Wertentwicklung-26111385.xls
2014-04-24 19:46 - 2014-04-24 19:46 - 00164864 _____ (Microsoft Corporation) C:\WINDOWS\system32\msrating.dll
2014-04-22 18:56 - 2013-09-12 20:19 - 00001116 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-3608396222-1875968445-4039553499-1001Core.job
2014-04-22 12:41 - 2013-08-05 09:58 - 00000000 ____D () C:\Users\Tobias Wessel\AppData\Roaming\Mozilla
2014-04-22 12:10 - 2014-04-22 12:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GeoGebra 4.4
2014-04-22 12:10 - 2014-04-22 12:09 - 00000000 ____D () C:\Program Files\GeoGebra 4.4
2014-04-22 12:06 - 2014-04-22 12:06 - 00008405 _____ () C:\Users\Tobias Wessel\Downloads\geogebra.ggb
2014-04-22 11:38 - 2014-04-22 11:38 - 41904816 _____ (International GeoGebra Institute) C:\Users\Tobias Wessel\Downloads\GeoGebra-Windows-Installer-4-4-29-0.exe
2014-04-22 11:37 - 2014-04-22 11:37 - 00000000 ____D () C:\Users\Tobias Wessel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MegaGlest
2014-04-22 11:37 - 2014-04-22 11:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MegaGlest
2014-04-22 11:37 - 2014-04-22 11:34 - 00000000 ____D () C:\Program Files\MegaGlest
2014-04-22 11:30 - 2014-04-22 11:28 - 255309153 _____ () C:\Users\Tobias Wessel\Downloads\MegaGlest-Installer-3.9.1_i386_win32.exe
2014-04-19 18:44 - 2014-04-19 18:43 - 00000000 ____D () C:\Users\Tobias Wessel\Desktop\Kreysing, Anna Lena
2014-04-15 16:32 - 2014-04-15 16:25 - 269951012 _____ () C:\Users\Tobias Wessel\Downloads\SetupGenTarif_01_2014_480.exe
2014-04-15 16:29 - 2014-04-15 16:29 - 00741888 _____ () C:\Users\Tobias Wessel\Downloads\Tarif_Rechner_03-2014.xls
2014-04-15 15:22 - 2013-08-08 19:49 - 00000000 ____D () C:\Users\Tobias Wessel\AppData\Local\Adobe
2014-04-15 14:42 - 2014-04-15 14:42 - 00000141 _____ () C:\Users\Tobias Wessel\Downloads\sky_drive_off.reg
2014-04-15 14:20 - 2014-03-19 16:25 - 00000298 _____ () C:\WINDOWS\Tasks\Uninstaller_SkipUac_Administrator.job
2014-04-15 11:28 - 2013-09-12 19:38 - 00000000 ____D () C:\Users\Tobias Wessel\AppData\Roaming\vlc
2014-04-14 11:08 - 2013-08-11 14:29 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-04-14 11:07 - 2014-04-14 11:07 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2014-04-14 11:07 - 2013-08-15 12:02 - 00000000 ____D () C:\WINDOWS\system32\MRT
2014-04-14 11:04 - 2013-08-06 21:34 - 88028728 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2014-04-12 09:18 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\rescache
2014-04-12 08:38 - 2014-02-11 19:23 - 00209432 _____ () C:\WINDOWS\RegBootClean.exe
2014-04-12 08:37 - 2014-04-12 08:37 - 00000000 ____D () C:\Users\Tobias Wessel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Video Performer
2014-04-12 08:37 - 2014-04-12 08:36 - 00000000 ____D () C:\Program Files\Video Performer
2014-04-12 08:35 - 2014-04-12 08:35 - 00000000 ____D () C:\ProgramData\Babylon
2014-04-12 08:10 - 2013-09-14 18:01 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDF24
2014-04-12 08:10 - 2013-09-14 18:01 - 00000000 ____D () C:\Program Files\PDF24
2014-04-12 08:09 - 2014-04-12 08:09 - 16204160 _____ (Geek Software GmbH ) C:\Users\Tobias Wessel\Downloads\pdf24-creator-6.3.2.exe
2014-04-10 11:31 - 2014-04-09 18:38 - 00000000 ____D () C:\Users\Tobias Wessel\AppData\Roaming\arkana-fts
2014-04-09 18:53 - 2014-04-09 18:53 - 00377856 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnet.dll
2014-04-09 18:53 - 2014-04-09 18:53 - 00214016 _____ (Microsoft Corporation) C:\WINDOWS\system32\dplayx.dll
2014-04-09 18:53 - 2014-04-09 18:53 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnathlp.dll
2014-04-09 18:53 - 2014-04-09 18:53 - 00045056 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpwsockx.dll
2014-04-09 18:53 - 2014-04-09 18:53 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnsvr.exe
2014-04-09 18:53 - 2014-04-09 18:53 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\system32\dplaysvr.exe
2014-04-09 18:53 - 2014-04-09 18:53 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpmodemx.dll
2014-04-09 18:53 - 2014-04-09 18:53 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnhupnp.dll
2014-04-09 18:53 - 2014-04-09 18:53 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnhpast.dll
2014-04-09 18:52 - 2014-04-09 18:52 - 00000000 ____D () C:\Users\Tobias Wessel\Documents\Fireglow Games
2014-04-09 18:47 - 2014-04-09 18:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GameTop.com
2014-04-09 18:45 - 2014-04-09 18:42 - 180394690 _____ (Media Contact LLC ) C:\Users\Tobias Wessel\Downloads\SS_Iwojima.exe
2014-04-09 18:38 - 2014-04-09 18:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Arkana-FTS 0.0.4
2014-04-09 18:37 - 2014-04-09 18:36 - 41323935 _____ () C:\Users\Tobias Wessel\Downloads\Arkana-FTS-0.0.4-Setup.exe
2014-04-09 18:33 - 2014-04-09 18:32 - 142457013 _____ () C:\Users\Tobias Wessel\Downloads\unknown-horizons-2013.3_win32 (1).exe
2014-04-09 18:32 - 2014-04-09 18:32 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Glest_3.2.2
2014-04-09 18:32 - 2014-04-09 18:32 - 00000000 ____D () C:\Program Files\Glest_3.2.2
2014-04-09 18:30 - 2014-04-09 18:29 - 55968880 _____ (Glest Team ) C:\Users\Tobias Wessel\Downloads\glest_3.2.2.exe
2014-04-09 12:54 - 2014-04-26 11:36 - 00049544 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2014-04-09 11:47 - 2013-08-13 23:09 - 00000000 ____D () C:\Users\Tobias Wessel\.freemind
2014-04-09 05:21 - 2014-04-26 11:36 - 00307200 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUSettingsProvider.dll
2014-04-09 05:21 - 2014-04-26 11:36 - 00159744 _____ (Microsoft Corporation) C:\WINDOWS\system32\storewuauth.dll
2014-04-09 05:07 - 2014-04-26 11:36 - 01634304 _____ (Microsoft Corporation) C:\WINDOWS\system32\wucltux.dll
2014-04-09 05:05 - 2014-04-26 11:36 - 02767360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2014-04-08 17:33 - 2014-04-08 17:33 - 00000000 ____D () C:\Users\Tobias Wessel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Synology
2014-04-03 14:38 - 2014-01-21 17:27 - 00000444 __RSH () C:\ProgramData\ntuser.pol
2014-04-02 12:22 - 2014-04-02 12:22 - 00000000 ____D () C:\Users\Tobias Wessel\Desktop\Didaktische Jahresplanung_Einzelhandel
2014-04-01 17:43 - 2013-09-10 14:57 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lexware
2014-03-31 23:23 - 2013-08-22 10:18 - 00693240 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerApp.exe
2014-03-31 23:23 - 2013-08-22 10:18 - 00105464 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerCPLApp.cpl
2014-03-30 18:40 - 2013-09-12 20:18 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2014-03-29 15:08 - 2014-03-29 15:08 - 00000000 ____D () C:\Users\Tobias Wessel\AppData\Roaming\Maitre
2014-03-29 15:05 - 2014-02-07 17:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maitre
2014-03-29 13:09 - 2014-03-29 13:09 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-03-29 12:40 - 2014-03-29 12:40 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HanseMerkur
2014-03-29 12:40 - 2013-11-04 20:49 - 00000000 ____D () C:\Program Files\HanseMerkur

Some content of TEMP:
====================
C:\Users\Tobias Wessel\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpiyvduc.dll


==================== Bamital & volsnap Check =================

C:\WINDOWS\explorer.exe
[2014-04-26 12:13] - [2014-03-04 13:16] - 2088160 ____A (Microsoft Corporation) 119E091B5386379BC5AA598BE9440C75

C:\WINDOWS\system32\winlogon.exe
[2014-04-26 12:07] - [2014-02-22 11:21] - 0459264 ____A (Microsoft Corporation) 70C57DC69D4A7D92D2CAC90C3AD16E6F

C:\WINDOWS\system32\wininit.exe => MD5 is legit
C:\WINDOWS\system32\svchost.exe => MD5 is legit
C:\WINDOWS\system32\services.exe => MD5 is legit
C:\WINDOWS\system32\User32.dll
[2014-04-26 12:08] - [2014-02-22 16:42] - 1370696 ____A (Microsoft Corporation) 43B0EB86B10506AD564E2005A6156D30

C:\WINDOWS\system32\userinit.exe => MD5 is legit
C:\WINDOWS\system32\rpcss.dll
[2014-04-26 12:08] - [2014-02-22 11:16] - 0593408 ____A (Microsoft Corporation) 05C0337538BEECC04FC695808EFF201C

 ATTENTION ======> If the system is having audio adware rpcss.dll is patched. Google the MD5, if the MD5 is unique the file is infected.
C:\WINDOWS\system32\Drivers\volsnap.sys
[2014-04-26 12:08] - [2014-02-22 16:08] - 0265048 ____A (Microsoft Corporation) 085918BF459BCB835CFC535BE7138539



LastRegBack: 2014-04-27 17:25

==================== End Of Log ============================
         

--- --- ---

--- --- ---

Addition.txt

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 27-04-2014
Ran by Tobias Wessel at 2014-04-27 18:37:11
Running from C:\FRST
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Trend Micro Titanium Maximum Security (Enabled - Up to date) {5D349EF8-873B-C657-917F-F1D93E101A7C}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Trend Micro Titanium Maximum Security (Enabled - Up to date) {E6557F1C-A101-C9D9-ABCF-CAAB459750C1}

==================== Installed Programs ======================

Adobe Flash Player 13 Plugin (HKLM\...\Adobe Flash Player Plugin) (Version: 13.0.0.182 - Adobe Systems Incorporated)
Dell System Detect (HKCU\...\9204f5692a8faf3b) (Version: 5.4.0.4 - Dell)
Driver Booster (HKLM\...\Driver Booster_is1) (Version: 1.3 - IObit)
Dropbox (HKCU\...\Dropbox) (Version: 2.6.2 - Dropbox, Inc.)
Free Screen To Video V 2.0 (HKLM\...\Free Screen To Video_is1) (Version: 2.0.0.0 - Koyote Soft)
Free Screen Video Recorder version 2.5.32.304 (HKLM\...\Free Screen Video Recorder_is1) (Version: 2.5.32.304 - DVDVideoSoft Ltd.)
GeoGebra 4.4 (HKLM\...\GeoGebra 4.4) (Version: 4.4.29.0 - International GeoGebra Institute)
Glest 3.2.2 (HKLM\...\Glest_is1) (Version:  - Glest Team)
Google Chrome (HKCU\...\Google Chrome) (Version: 34.0.1847.131 - Google Inc.)
Google Update Helper (Version: 1.3.23.9 - Google Inc.) Hidden
HanseMerkur ISA Makler (HKLM\...\HanseMerkurISAMA) (Version: 1.19.0 - HanseMerkur Krankenversicherung AG)
HanseMerkur ISA Makler (Version: 1.19.0 - HanseMerkur Krankenversicherung AG) Hidden
HanseMerkur ISA Service Extensions (HKLM\...\{280E91D7-BBA8-42A2-8F45-00FD89E454B0}_is1) (Version: 1.2.6 - Hanse Merkur)
IObit Uninstaller (HKLM\...\IObitUninstall) (Version: 3.2.9.10 - IObit)
Maitre (HKLM\...\Maitre) (Version: 1.16.4.198 - Swiss Life Partner)
MegaGlest v3.9.1 (HKLM\...\MegaGlest) (Version:  - )
Microsoft Office PowerPoint MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Professional Plus 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Mozilla Firefox 28.0 (x86 de) (HKLM\...\Mozilla Firefox 28.0 (x86 de)) (Version: 28.0 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 28.0 - Mozilla)
Nero ControlCenter (Version: 11.0.16700 - Nero AG) Hidden
Nero ControlCenter Help (CHM) (Version: 15.0.00015 - Nero AG) Hidden
Nero Core Components (Version: 11.0.23400 - Nero AG) Hidden
Nero Update (Version: 11.0.13300.42.0 - Nero AG) Hidden
Nero WaveEditor (HKLM\...\{8F7F40B4-8C55-4B92-8C89-16501DAC697F}) (Version: 12.5.00800 - Nero AG)
Nero WaveEditor (Version: 12.0.12000 - Nero AG) Hidden
Nero WaveEditor Help (CHM) (Version: 12.0.7000 - Nero AG) Hidden
PDF24 Creator 6.3.2 (HKLM\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version:  - PDF24.org)
Prerequisite installer (Version: 12.0.0003 - Nero AG) Hidden
Quicken DELUXE 2014 (HKLM\...\{E60036CF-1E46-4DFE-832F-5476574B30FF}) (Version: 21.37.00.0185 - Haufe-Lexware GmbH & Co.KG)
Synology Cloud Station (remove only) (HKCU\...\Synology CloudStation) (Version:  - )
Unity Web Player (HKCU\...\UnityWebPlayer) (Version:  - Unity Technologies ApS)
VCRT for DirectPass x86 (Version: 1.0.0.1000 - Trend Micro, Inc.) Hidden
Video Performer (HKLM\...\Video Performer) (Version:  - PerformerSoft LLC) <==== ATTENTION
VLC Media Player Setup Packages (HKCU\...\VLC Media Player Setup Packages) (Version:  - ) <==== ATTENTION

==================== Restore Points  =========================

09-04-2014 16:52:35 Windows Modules Installer
14-04-2014 09:02:23 Windows Update
15-04-2014 14:40:36 Generali Tarifierungen wurde installiert.
26-04-2014 10:23:44 Windows Update
27-04-2014 12:59:43 TITANUIMRES

==================== Hosts content: ==========================

2012-07-26 06:17 - 2013-11-12 11:34 - 00450639 ___RA C:\WINDOWS\system32\Drivers\etc\hosts
127.0.0.1	www.007guard.com
127.0.0.1	007guard.com
127.0.0.1	008i.com
127.0.0.1	www.008k.com
127.0.0.1	008k.com
127.0.0.1	www.00hq.com
127.0.0.1	00hq.com
127.0.0.1	010402.com
127.0.0.1	www.032439.com
127.0.0.1	032439.com
127.0.0.1	www.0scan.com
127.0.0.1	0scan.com
127.0.0.1	1000gratisproben.com
127.0.0.1	www.1000gratisproben.com
127.0.0.1	1001namen.com
127.0.0.1	www.1001namen.com
127.0.0.1	100888290cs.com
127.0.0.1	www.100888290cs.com
127.0.0.1	www.100sexlinks.com
127.0.0.1	100sexlinks.com
127.0.0.1	10sek.com
127.0.0.1	www.10sek.com
127.0.0.1	www.1-2005-search.com
127.0.0.1	1-2005-search.com
127.0.0.1	123fporn.info
127.0.0.1	www.123fporn.info
127.0.0.1	123haustiereundmehr.com
127.0.0.1	www.123haustiereundmehr.com
127.0.0.1	123moviedownload.com

There are 1000 more lines.


==================== Scheduled Tasks (whitelisted) =============

Task: {00BC77BF-3352-4FE8-9617-4F1B27BEC19A} - System32\Tasks\Microsoft\Windows\Plug and Play\Plug and Play Cleanup
Task: {17233BE9-87E9-40B0-B003-AE9D2B92CBBE} - System32\Tasks\Microsoft\Windows\SettingSync\BackupTask
Task: {237DC35F-B8C6-4EAD-96DE-812137FAB571} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2013-08-05] (Google Inc.)
Task: {247BD142-0549-4E91-84B0-172C25563718} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join => C:\WINDOWS\System32\AutoWorkplace.exe [2013-08-22] (Microsoft Corporation)
Task: {2BE65564-89D1-4396-A5CC-D7D9283FC4A1} - System32\Tasks\Microsoft\Windows\SkyDrive\Routine Maintenance Task
Task: {392EB017-207C-42BF-A061-F3BE721F456C} - System32\Tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState => Rundll32.exe Windows.Storage.ApplicationData.dll,CleanupTemporaryState
Task: {43A8931A-A6DE-440D-BD04-889AF03C9499} - System32\Tasks\Driver Booster SkipUAC (Tobias Wessel) => C:\Program Files\IObit\Driver Booster\DriverBooster.exe [2014-03-14] (IObit)
Task: {4754B94C-CB5C-411B-9DCF-C7F20BBADF13} - System32\Tasks\Google Updater and Installer => C:\Users\Tobias Wessel\AppData\Local\Google\Update\GoogleUpdate.exe [2013-09-12] (Google Inc.)
Task: {4B7EF56A-8A42-4BD2-BB5C-7C389AC54A37} - System32\Tasks\Microsoft\Windows\AppxDeploymentClient\Pre-staged app cleanup => Rundll32.exe %windir%\system32\AppxDeploymentClient.dll,AppxPreStageCleanupRunTask
Task: {4BDC72A4-BFA1-49B3-AF26-D1367E888C93} - System32\Tasks\Java Update Scheduler => C:\Program Files\Common Files\Java\Java Update\jusched.exe [2013-07-02] (Oracle Corporation)
Task: {4F22E517-9B35-436A-A541-622A73446D29} - System32\Tasks\iolo System Checkup => C:\ProgramData\iolo\scustask.lnk [2013-12-19] ()
Task: {5643926D-0DF4-4676-B941-A5A6FE4EBC66} - System32\Tasks\PCDoctorBackgroundMonitorTask => C:\Program Files\My Dell\uaclauncher.exe [2014-01-31] (PC-Doctor, Inc.)
Task: {5700ACE8-D0AF-4BA7-98B6-1033521A877A} - System32\Tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask => Rundll32.exe sysmain.dll,PfSvWsSwapAssessmentTask
Task: {58C23221-6838-46AE-A939-2F17CB48E578} - System32\Tasks\PCDEventLauncherTask => C:\Program Files\My Dell\sessionchecker.exe [2014-01-31] (PC-Doctor, Inc.)
Task: {634C37F1-DE43-484B-93C1-A1C7F38AE869} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-11-21] (Adobe Systems Incorporated)
Task: {6403088B-3CE9-4570-8FB6-56CE450C5E7F} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2013-08-05] (Google Inc.)
Task: {6CB62E5E-1B20-4B77-B251-5F71BBB4E1A5} - System32\Tasks\SystemToolsDailyTest => uaclauncher.exe
Task: {6E84A59B-1863-4B21-8BD8-C9B20FD15484} - System32\Tasks\Microsoft\Windows\Application Experience\StartupAppTask => Rundll32.exe Startupscan.dll,SusRunTask
Task: {712D39A7-44E7-4C94-A32A-465F93031BFF} - System32\Tasks\DivX-Online-Aktualisierungsprogramm => C:\Program Files\DivX\DivX Update\DivXUpdate.exe [2013-08-29] ()
Task: {7C7CF1DA-F461-4850-96B2-ADCA8A67E59C} - System32\Tasks\Microsoft\Windows\WS\License Validation => Rundll32.exe WSClient.dll,WSpTLR licensing
Task: {8B5819AE-7B44-478B-A3D3-8846AF160A8F} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCachePrepopulate
Task: {8C58AFA6-13B7-4500-99CC-3AC7AA362561} - System32\Tasks\Microsoft\Windows\WOF\WIM-Hash-Validation
Task: {913B9E8B-D8CE-4DAE-8F39-5FCEC76C53FC} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2014-04-14] (Microsoft Corporation)
Task: {92ED6570-4654-4BFA-9A6C-1084C6939C16} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Maintenance Work
Task: {937EA8EF-A71F-47CD-8951-3EDF8146E0CD} - System32\Tasks\Titanium BTC => E:\Programme\Trend Micro\Titanium\plugin\TMDC\TMDC.exe [2013-08-27] (Trend Micro Inc.)
Task: {997C8BBD-710B-4E66-B5BC-CC09575A58D2} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCacheRebalance
Task: {A44563A7-D425-421A-A788-F8B054391F7C} - System32\Tasks\Microsoft\Windows\DiskFootprint\Diagnostics
Task: {A5D45ED3-F524-4574-8F39-527F3729D1E2} - System32\Tasks\Microsoft\Windows\Time Zone\SynchronizeTimeZone => C:\WINDOWS\system32\tzsync.exe [2013-08-22] (Microsoft Corporation)
Task: {B9280CE4-E0AA-410E-A414-C082D45E8F26} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-04-15] (Adobe Systems Incorporated)
Task: {BEBE44E6-26D6-44CC-9A3C-A2ADC15CD42B} - System32\Tasks\Microsoft\Windows\WOF\WIM-Hash-Management
Task: {C0D0F7C4-419F-41B3-90A2-FE79270B828A} - System32\Tasks\Microsoft\Windows\SettingSync\NetworkStateChangeTask
Task: {C4D8F20F-6D3C-426E-89E8-C0F54424DD8F} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3608396222-1875968445-4039553499-1001Core => C:\Users\Tobias Wessel\AppData\Local\Google\Update\GoogleUpdate.exe [2013-09-12] (Google Inc.)
Task: {CC8B8DA2-8A80-409D-9C59-73D7A1FF1628} - System32\Tasks\Microsoft\Windows\DiskCleanup\SilentCleanup => C:\WINDOWS\system32\cleanmgr.exe [2014-02-22] (Microsoft Corporation)
Task: {CF5A1DDC-D14D-4D59-AD49-A19A645B087B} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Logon Synchronization
Task: {DB8D73C5-EC5D-4352-9B74-2F94D9875238} - System32\Tasks\Driver Booster Scan => C:\Program Files\IObit\Driver Booster\Scheduler.exe [2014-03-12] (IObit)
Task: {DC12B3E6-ADCB-417F-99E3-71D15DD8EE97} - System32\Tasks\Uninstaller_SkipUac_Administrator => C:\Program Files\IObit\IObit Uninstaller\IObitUninstaler.exe [2014-03-19] (IObit)
Task: {DCF55BED-B1DF-4ABF-8D85-6542C7007799} - System32\Tasks\Microsoft\Windows\RecoveryEnvironment\VerifyWinRE
Task: {DEF7A50C-2112-4671-A59D-BD99F9122EE0} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3608396222-1875968445-4039553499-1001UA => C:\Users\Tobias Wessel\AppData\Local\Google\Update\GoogleUpdate.exe [2013-09-12] (Google Inc.)
Task: {E4C8774A-2818-45A4-8A6D-11DDF6348886} - System32\Tasks\Microsoft\Windows\SkyDrive\Idle Sync Maintenance Task
Task: {FAB49829-3EE7-4234-BE84-277862F2A57C} - System32\Tasks\Microsoft\Windows\WS\WSRefreshBannedAppsListTask => Rundll32.exe WSClient.dll,RefreshBannedAppsList
Task: {FE657CDF-5250-447C-8605-88D3FFA40741} - System32\Tasks\Driver Booster Update => C:\Program Files\IObit\Driver Booster\AutoUpdate.exe [2014-03-13] (IObit)
Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\Driver Booster SkipUAC (Tobias Wessel).job => C:\Program Files\IObit\Driver Booster\DriverBooster.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-3608396222-1875968445-4039553499-1001Core.job => C:\Users\Tobias Wessel\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-3608396222-1875968445-4039553499-1001UA.job => C:\Users\Tobias Wessel\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\Uninstaller_SkipUac_Administrator.job => C:\Program Files\IObit\IObit Uninstaller\IObitUninstaler.exe

==================== Loaded Modules (whitelisted) =============

2013-12-06 15:14 - 2013-01-16 03:50 - 00039424 _____ () E:\Programme\Trend Micro\AMSP\boost_date_time-vc110-mt-1_49.dll
2013-12-06 15:14 - 2013-04-02 06:25 - 00543744 _____ () E:\Programme\Trend Micro\AMSP\sqlite3.dll
2013-12-06 15:14 - 2013-01-16 03:55 - 00049152 _____ () E:\Programme\Trend Micro\AMSP\boost_thread-vc110-mt-1_49.dll
2013-12-06 15:14 - 2012-12-18 22:04 - 01098240 _____ () E:\Programme\Trend Micro\AMSP\libprotobuf.dll
2013-12-06 15:14 - 2013-01-16 03:50 - 00016896 _____ () E:\Programme\Trend Micro\AMSP\boost_system-vc110-mt-1_49.dll
2013-12-06 15:11 - 2013-07-23 17:28 - 00179872 _____ () E:\Programme\Trend Micro\UniClient\plugins\LUADLL.dll
2013-08-05 09:49 - 2013-05-07 15:31 - 00885088 _____ () C:\Program Files\Ashampoo\Ashampoo WinOptimizer 9\LiveTunerService.exe
2013-08-05 09:17 - 2010-04-12 18:03 - 00329168 ____N () C:\Program Files\XSManager\WTGService.exe
2013-09-05 01:14 - 2013-09-05 01:14 - 04300456 _____ () C:\Program Files\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF
2014-04-02 15:32 - 2014-04-02 15:32 - 00544768 _____ () C:\Users\Tobias Wessel\AppData\Local\CloudStation\iconoverlay_v7\IconOverlayDLLs\ContextMenu.dll
2012-11-27 00:54 - 2012-11-27 00:54 - 00094208 _____ () C:\Windows\System32\IccLibDll.dll
2014-04-02 15:33 - 2014-04-02 15:33 - 03772320 _____ () C:\Users\Tobias Wessel\AppData\Local\CloudStation\bin\cloud.exe
2013-05-31 11:15 - 2013-05-31 11:15 - 01259320 _____ () C:\Users\Tobias Wessel\AppData\Local\CloudStation\bin\libsqlite3-0.dll
2013-05-31 11:15 - 2013-05-31 11:15 - 00043008 _____ () C:\Users\Tobias Wessel\AppData\Local\CloudStation\bin\libgcc_s_dw2-1.dll
2014-03-24 05:18 - 2014-03-24 05:18 - 02554368 _____ () C:\Users\Tobias Wessel\AppData\Local\CloudStation\bin\QtCore4.dll
2014-03-24 05:18 - 2014-03-24 05:18 - 09824768 _____ () C:\Users\Tobias Wessel\AppData\Local\CloudStation\bin\QtGui4.dll
2014-03-24 05:18 - 2014-03-24 05:18 - 01218048 _____ () C:\Users\Tobias Wessel\AppData\Local\CloudStation\bin\QtNetwork4.dll
2013-05-31 11:15 - 2013-05-31 11:15 - 01599298 _____ () C:\Users\Tobias Wessel\AppData\Local\CloudStation\bin\icuuc50.dll
2013-05-31 11:15 - 2013-05-31 11:15 - 00879630 _____ () C:\Users\Tobias Wessel\AppData\Local\CloudStation\bin\libstdc++-6.dll
2013-05-31 11:15 - 2013-05-31 11:15 - 20803927 _____ () C:\Users\Tobias Wessel\AppData\Local\CloudStation\bin\icudt50.dll
2014-01-08 18:01 - 2013-12-18 15:33 - 00047784 _____ () E:\Programme\Trend Micro\Titanium\plugin\fcMsgDispatcher.dll
2014-04-27 14:37 - 2014-04-27 14:37 - 00041984 ____N () C:\Users\Tobias Wessel\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpiyvduc.dll
2013-10-19 01:55 - 2013-10-19 01:55 - 25100288 _____ () C:\Users\Tobias Wessel\AppData\Roaming\Dropbox\bin\libcef.dll
2014-04-02 15:33 - 2014-04-02 15:33 - 10110424 _____ () C:\Users\Tobias Wessel\AppData\Local\CloudStation\bin\client-win.exe
2014-02-13 23:25 - 2014-02-13 23:25 - 00170496 _____ () C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\IsdiInterop\da9b91a4c50d88d608ef03f8c257b081\IsdiInterop.ni.dll
2013-12-18 19:08 - 2010-03-03 21:08 - 00058880 _____ () C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll
2014-04-26 16:57 - 2014-04-24 02:33 - 00065352 _____ () C:\Users\Tobias Wessel\AppData\Local\Google\Chrome\Application\34.0.1847.131\chrome_elf.dll
2014-04-26 16:57 - 2014-04-24 02:33 - 00674632 _____ () C:\Users\Tobias Wessel\AppData\Local\Google\Chrome\Application\34.0.1847.131\libglesv2.dll
2014-04-26 16:57 - 2014-04-24 02:33 - 00093000 _____ () C:\Users\Tobias Wessel\AppData\Local\Google\Chrome\Application\34.0.1847.131\libegl.dll
2014-04-26 16:57 - 2014-04-24 02:33 - 04081480 _____ () C:\Users\Tobias Wessel\AppData\Local\Google\Chrome\Application\34.0.1847.131\pdf.dll
2014-04-26 16:57 - 2014-04-24 02:33 - 00390472 _____ () C:\Users\Tobias Wessel\AppData\Local\Google\Chrome\Application\34.0.1847.131\ppGoogleNaClPluginChrome.dll
2014-04-26 16:57 - 2014-04-24 02:33 - 01647432 _____ () C:\Users\Tobias Wessel\AppData\Local\Google\Chrome\Application\34.0.1847.131\ffmpegsumo.dll
2013-12-06 15:11 - 2013-07-23 17:28 - 00049152 _____ () E:\Programme\Trend Micro\Titanium\UIFramework\boost_thread-vc110-mt-1_49.dll
2013-12-06 15:11 - 2013-07-23 17:28 - 00039424 _____ () E:\Programme\Trend Micro\Titanium\UIFramework\boost_date_time-vc110-mt-1_49.dll
2014-04-26 16:57 - 2014-04-24 02:33 - 13692232 _____ () C:\Users\Tobias Wessel\AppData\Local\Google\Chrome\Application\34.0.1847.131\PepperFlash\pepflashplayer.dll

==================== Alternate Data Streams (whitelisted) =========

AlternateDataStreams: C:\Users\Tobias Wessel\SkyDrive:ms-properties
AlternateDataStreams: C:\Users\Tobias Wessel\SkyDrive.old:ms-properties

==================== Safe Mode (whitelisted) ===================


==================== Disabled items from MSCONFIG ==============


==================== Faulty Device Manager Devices =============

Name: Microsoft Basic Display Adapter
Description: Microsoft Basic Display Adapter
Class Guid: {4d36e968-e325-11ce-bfc1-08002be10318}
Manufacturer: (Standardgrafikkartentypen)
Service: BasicDisplay
Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31)
Resolution: Update the driver


==================== Event log errors: =========================

Application errors:
==================
Error: (04/27/2014 03:00:01 PM) (Source: Microsoft-Windows-CAPI2) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".


Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll.

System Error:
Zugriff verweigert
.

Error: (04/27/2014 02:59:42 PM) (Source: VSS) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Abfragen nach der Schnittstelle "IVssWriterCallback" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070005, Zugriff verweigert
.
Die Ursache hierfür ist oft eine falsche Sicherheitseinstellung im Schreib- oder Anfrageprozess.


Vorgang:
   Generatordaten werden gesammelt

Kontext:
   Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
   Generatorname: System Writer
   Generatorinstanz-ID: {5a967feb-a6a8-4e00-8ec9-68d546297e26}

Error: (04/27/2014 02:38:25 PM) (Source: Application Hang) (User: )
Description: Programm WWAHost.exe, Version 6.3.9600.17031 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 146c

Startzeit: 01cf62157c37a21f

Endzeit: 4294967295

Anwendungspfad: C:\Windows\System32\WWAHost.exe

Berichts-ID: c5baddf0-ce08-11e3-b165-00249b0c190b

Vollständiger Name des fehlerhaften Pakets: winstore_1.0.0.0_neutral_neutral_cw5n1h2txyewy

Anwendungs-ID, die relativ zum fehlerhaften Paket ist: Windows.Store

Error: (04/27/2014 02:38:16 PM) (Source: Microsoft-Windows-Immersive-Shell) (User: TOBISPC)
Description: Bei der Aktivierung der App „winstore_cw5n1h2txyewy!Windows.Store“ ist folgender Fehler aufgetreten: -2144927142. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (04/27/2014 02:37:59 PM) (Source: Microsoft-Windows-Immersive-Shell) (User: TOBISPC)
Description: Die App „winstore_1.0.0.0_neutral_neutral_cw5n1h2txyewy+Windows.Store“ wurde nicht innerhalb der vorgesehenen Zeit gestartet.

Error: (04/27/2014 11:21:01 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: megaglest.exe, Version: 0.0.0.0, Zeitstempel: 0x52db2a51
Name des fehlerhaften Moduls: megaglest.exe, Version: 0.0.0.0, Zeitstempel: 0x52db2a51
Ausnahmecode: 0x40000015
Fehleroffset: 0x007abf8c
ID des fehlerhaften Prozesses: 0xa90
Startzeit der fehlerhaften Anwendung: 0xmegaglest.exe0
Pfad der fehlerhaften Anwendung: megaglest.exe1
Pfad des fehlerhaften Moduls: megaglest.exe2
Berichtskennung: megaglest.exe3
Vollständiger Name des fehlerhaften Pakets: megaglest.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: megaglest.exe5

Error: (04/27/2014 11:17:03 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: megaglest.exe, Version: 0.0.0.0, Zeitstempel: 0x52db2a51
Name des fehlerhaften Moduls: megaglest.exe, Version: 0.0.0.0, Zeitstempel: 0x52db2a51
Ausnahmecode: 0x40000015
Fehleroffset: 0x007abf8c
ID des fehlerhaften Prozesses: 0x1624
Startzeit der fehlerhaften Anwendung: 0xmegaglest.exe0
Pfad der fehlerhaften Anwendung: megaglest.exe1
Pfad des fehlerhaften Moduls: megaglest.exe2
Berichtskennung: megaglest.exe3
Vollständiger Name des fehlerhaften Pakets: megaglest.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: megaglest.exe5

Error: (04/27/2014 11:10:00 AM) (Source: Application Hang) (User: )
Description: Programm megaglest.exe, Version 0.0.0.0 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 16d4

Startzeit: 01cf61f79deac6e0

Endzeit: 9

Anwendungspfad: C:\Program Files\MegaGlest\megaglest.exe

Berichts-ID: acaea6b4-cdeb-11e3-b164-f04da2a11890

Vollständiger Name des fehlerhaften Pakets: 

Anwendungs-ID, die relativ zum fehlerhaften Paket ist:

Error: (04/26/2014 10:49:54 PM) (Source: Application Hang) (User: )
Description: Programm LiveComm.exe, Version 17.5.9600.20461 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 10ac

Startzeit: 01cf619056db3b84

Endzeit: 4294967295

Anwendungspfad: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20461_x86__8wekyb3d8bbwe\LiveComm.exe

Berichts-ID: 4f9fc330-cd84-11e3-b163-f04da2a11890

Vollständiger Name des fehlerhaften Pakets: microsoft.windowscommunicationsapps_17.5.9600.20461_x86__8wekyb3d8bbwe

Anwendungs-ID, die relativ zum fehlerhaften Paket ist: ppleae38af2e007f4358a809ac99a64a67c1

Error: (04/26/2014 03:09:17 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: iexplore.exe, Version: 11.0.9600.16518, Zeitstempel: 0x52f347b2
Name des fehlerhaften Moduls: IEFRAME.dll, Version: 11.0.9600.16521, Zeitstempel: 0x53114c49
Ausnahmecode: 0xc0000005
Fehleroffset: 0x002045b2
ID des fehlerhaften Prozesses: 0xcc0
Startzeit der fehlerhaften Anwendung: 0xiexplore.exe0
Pfad der fehlerhaften Anwendung: iexplore.exe1
Pfad des fehlerhaften Moduls: iexplore.exe2
Berichtskennung: iexplore.exe3
Vollständiger Name des fehlerhaften Pakets: iexplore.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: iexplore.exe5


System errors:
=============
Error: (04/27/2014 05:26:51 PM) (Source: DCOM) (User: TOBISPC)
Description: {1B1F472E-3221-4826-97DB-2C2324D389AE}

Error: (04/27/2014 05:26:20 PM) (Source: DCOM) (User: TOBISPC)
Description: {BF6C1E47-86EC-4194-9CE5-13C15DCB2001}

Error: (04/27/2014 02:55:36 PM) (Source: DCOM) (User: TOBISPC)
Description: {1B1F472E-3221-4826-97DB-2C2324D389AE}

Error: (04/27/2014 02:42:39 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Intel(R) Management & Security Application User Notification Service" wurde nicht richtig gestartet.

Error: (04/27/2014 01:04:35 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst Windows Update konnte nach dem Empfang eines Preshutdown-Steuerelements nicht richtig heruntergefahren werden.

Error: (04/27/2014 11:04:04 AM) (Source: DCOM) (User: TOBISPC)
Description: {1B1F472E-3221-4826-97DB-2C2324D389AE}

Error: (04/26/2014 11:13:22 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Superfetch" wurde mit folgendem Fehler beendet: 
%%1062

Error: (04/26/2014 10:42:37 PM) (Source: Microsoft-Windows-Eventlog) (User: NT-AUTORITÄT)
Description: Der Ereignisprotokollierungsdienst hat beim Aktivieren des Herausgebers "{0BF2FB94-7B60-4B4D-9766-E82F658DF540}" für den Kanal "Microsoft-Windows-Kernel-ShimEngine/Operational" einen Fehler (5) erkannt. Dieser Fehler hat keinen Einfluss auf den Betrieb des Kanals, beeinträchtigt jedoch die Fähigkeit des Herausgebers, Ereignisse für den Kanal auszulösen. Dieser Fehler ist oft darauf zurückzuführen, dass der Anbieter die ETW-Anbietersicherheit verwendet und der Ereignisprotokoll-Dienstidentität keine Berechtigungen zum Aktivieren gewährt hat.

Error: (04/26/2014 05:51:20 PM) (Source: DCOM) (User: TOBISPC)
Description: {078AEF33-C48A-49F7-AFF3-A0EE810BFE7C}

Error: (04/26/2014 03:58:00 PM) (Source: bowser) (User: )
Description: Der Hauptsuchdienst erhielt eine Serverankündigung vom Computer "MARTINKENFEN-PC",
der der Hauptsuchdienst der Domäne für den NetBT_Tcpip_{16328733-E206-4CE9-9A44-BC-Transport zu sein scheint.
Der Hauptsuchdienst wurde beendet oder es wird eine Auswahl erzwungen.


Microsoft Office Sessions:
=========================
Error: (04/27/2014 03:00:01 PM) (Source: Microsoft-Windows-CAPI2)(User: )
Description: 
Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll.

System Error:
Zugriff verweigert

Error: (04/27/2014 02:59:42 PM) (Source: VSS)(User: )
Description: 0x80070005, Zugriff verweigert


Vorgang:
   Generatordaten werden gesammelt

Kontext:
   Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
   Generatorname: System Writer
   Generatorinstanz-ID: {5a967feb-a6a8-4e00-8ec9-68d546297e26}

Error: (04/27/2014 02:38:25 PM) (Source: Application Hang)(User: )
Description: WWAHost.exe6.3.9600.17031146c01cf62157c37a21f4294967295C:\Windows\System32\WWAHost.exec5baddf0-ce08-11e3-b165-00249b0c190bwinstore_1.0.0.0_neutral_neutral_cw5n1h2txyewyWindows.Store

Error: (04/27/2014 02:38:16 PM) (Source: Microsoft-Windows-Immersive-Shell)(User: TOBISPC)
Description: winstore_cw5n1h2txyewy!Windows.Store-2144927142

Error: (04/27/2014 02:37:59 PM) (Source: Microsoft-Windows-Immersive-Shell)(User: TOBISPC)
Description: winstore_1.0.0.0_neutral_neutral_cw5n1h2txyewy+Windows.Store

Error: (04/27/2014 11:21:01 AM) (Source: Application Error)(User: )
Description: megaglest.exe0.0.0.052db2a51megaglest.exe0.0.0.052db2a5140000015007abf8ca9001cf61f97f9f7d49C:\Program Files\MegaGlest\megaglest.exeC:\Program Files\MegaGlest\megaglest.exe3f12d814-cded-11e3-b164-f04da2a11890

Error: (04/27/2014 11:17:03 AM) (Source: Application Error)(User: )
Description: megaglest.exe0.0.0.052db2a51megaglest.exe0.0.0.052db2a5140000015007abf8c162401cf61f89cdfd547C:\Program Files\MegaGlest\megaglest.exeC:\Program Files\MegaGlest\megaglest.exeb13b7f01-cdec-11e3-b164-f04da2a11890

Error: (04/27/2014 11:10:00 AM) (Source: Application Hang)(User: )
Description: megaglest.exe0.0.0.016d401cf61f79deac6e09C:\Program Files\MegaGlest\megaglest.exeacaea6b4-cdeb-11e3-b164-f04da2a11890

Error: (04/26/2014 10:49:54 PM) (Source: Application Hang)(User: )
Description: LiveComm.exe17.5.9600.2046110ac01cf619056db3b844294967295C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20461_x86__8wekyb3d8bbwe\LiveComm.exe4f9fc330-cd84-11e3-b163-f04da2a11890microsoft.windowscommunicationsapps_17.5.9600.20461_x86__8wekyb3d8bbweppleae38af2e007f4358a809ac99a64a67c1

Error: (04/26/2014 03:09:17 PM) (Source: Application Error)(User: )
Description: iexplore.exe11.0.9600.1651852f347b2IEFRAME.dll11.0.9600.1652153114c49c0000005002045b2cc001cf61508aef96deC:\Program Files\Internet Explorer\iexplore.exeC:\WINDOWS\SYSTEM32\IEFRAME.dllf8af3500-cd43-11e3-b162-f04da2a11890


CodeIntegrity Errors:
===================================
  Date: 2013-12-06 11:06:55.363
  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2013-12-06 11:06:55.359
  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2013-12-06 11:06:47.863
  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2013-12-05 12:02:51.144
  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2013-12-05 12:02:51.138
  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2013-12-05 12:02:38.545
  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2013-12-04 16:37:20.440
  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2013-12-04 16:37:20.438
  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2013-12-04 16:37:05.212
  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2013-12-03 18:29:05.144
  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.


==================== Memory info =========================== 

Percentage of memory in use: 66%
Total physical RAM: 2742.6 MB
Available physical RAM: 916.18 MB
Total Pagefile: 4918.04 MB
Available Pagefile: 1710.4 MB
Total Virtual: 2047.88 MB
Available Virtual: 1914.3 MB

==================== Drives ================================

Drive c: (OS) (Fixed) (Total:150.44 GB) (Free:66.74 GB) NTFS
Drive d: (Backup) (Fixed) (Total:35.3 GB) (Free:12.55 GB) NTFS
Drive e: (Programme) (Fixed) (Total:78.19 GB) (Free:34.24 GB) NTFS
Drive h: () (Removable) (Total:0.94 GB) (Free:0.94 GB) FAT

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 298 GB) (Disk ID: E46BDF93)
Partition 1: (Not Active) - (Size=39 MB) - (Type=DE)
Partition 2: (Active) - (Size=15 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=150 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=133 GB) - (Type=OF Extended)

========================================================
Disk: 1 (Size: 962 MB) (Disk ID: 1D778CF2)
Partition 1: (Not Active) - (Size=962 MB) - (Type=06)

==================== End Of Log ============================
         

Hallo und

Habe schon mehrere Programme ausprobiert. Aber keins konnte mir so richtig helfen.

Geht das auch bitte genauer? Was wurde schon ausprobiert an Programmen, wo sind die Logs dazu abgesehen von FRST?



Hast du noch weitere Logs (mit Funden)? Malwarebytes und/oder andere Virenscanner, sind die mal fündig geworden?

Ich frage deswegen nach => http://www.trojaner-board.de/125889-...tml#post941520

Bitte keine neuen Virenscans machen sondern erst nur schon vorhandene Logs in CODE-Tags posten!
Relevant sind nur Logs der letzten 7 Tage bzw. seitdem das Problem besteht!

Lesestoff:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR oder 7Z-Archiv zu packen erschwert mir massiv die Arbeit.
Auch wenn die Logs für einen Beitrag zu groß sein sollten, bitte ich dich die Logs direkt und notfalls über mehrere Beiträge verteilt zu posten.
Um die Logfiles in eine CODE-Box zu stellen gehe so vor:

• Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
• Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
• Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
• Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.

Hallo Cosinus,
habe am 24.4. (226 Einträge wurden gelöscht), 26.4 (0 Einträge wurden gelöscht)und 27.4 (43 Einträge wurden gelöscht) WinOptimizer9 durchgeführt. Modul Registry Optimizer.
Zusätzlich habe ich noch mit Trend Micro Titanium Maximum Security den System Tuner durchgeführt. Über das Ergebnis kann ich keine Infos finden. Mehr sollte ich nicht gemacht haben. Hilft das schon?

Ergebnisse von Trend Micro:

Datum/Uhrzeit,Bedrohung,Quelle,Betroffene Dateien,Maßnahme,Entdeckt von
04.03.2014 22:52,HEU_AEGIS_HttpDownloadChecker,Bedrohung,c:\users\tobias YYY\appdata\local\temp\9cd83d2f-01af-40e9-809c-8f01cea7addc\software\feven-pro-1-2.exe,Entfernt,Echtzeitsuche
04.03.2014 22:53,TSC_GENCLEAN,Bedrohung,C:\WINDOWS\system32\Tasks\Ongoing package check,Entfernt,Echtzeitsuche
04.03.2014 22:53,HEU_AEGISCS922,Bedrohung,c:\users\tobias YYY\appdata\roaming\vopackage\vopackage.exe,Entfernt,Echtzeitsuche
04.03.2014 22:53,HEU_AEGISCS922,Bedrohung,C:\Users\Tobias YYY\AppData\Local\Temp\9cd83d2f-01af-40e9-809c-8f01cea7addc\software\VOPackage.exe,Entfernt,Echtzeitsuche
04.03.2014 22:55,HEU_CDPLC004,Bedrohung,C:\Users\Tobias YYY\Downloads\Java.exe,Entfernt,Korrelations-Suche
08.03.2014 07:03,Adware_FasterXP,Spyware,Komprimierte Sicherungsdatei,Entfernt,Manuelle Suche
13.03.2014 17:18,HEU_DLTI.G186,Bedrohung,C:\Users\Tobias YYY\Downloads\FreeScreenVideoRecorder-2.5.32.304.exe,Entfernt,Korrelations-Suche
19.03.2014 15:21,VBS_SOLOW.A,Bedrohung,G:\FS6519.dll.vbs,Entfernt,Manuelle Suche
19.03.2014 15:21,TSC_GENCLEAN,Bedrohung,g:\autorun.inf,Entfernt,Manuelle Suche
22.03.2014 07:04,Adware_FasterXP,Spyware,Komprimierte Sicherungsdatei,Entfernt,Manuelle Suche
12.04.2014 08:35,TROJ_GEN.R0CBOC0DA14,Malware,C:\Users\Tobias YYY\AppData\Local\Temp\5ry76tl2u\app_16547.part,Entfernt,Echtzeitsuche
12.04.2014 08:35,TROJ_GEN.R0CBOC0DA14,Malware,C:\Users\Tobias YYY\AppData\Local\Temp\5ry76tl2u\app_16547,Entfernt,Echtzeitsuche
12.04.2014 08:37,ADW_MONTIERA,Spyware,C:\Program Files\buenosearch LTD\buenosearch\1.8.28.7\buenosearchTlbr.dll,Entfernt,Echtzeitsuche
12.04.2014 08:37,ADW_MONTIERA,Spyware,C:\Program Files\buenosearch LTD\buenosearch\1.8.28.7\buenosearchsrv.exe,Entfernt,Echtzeitsuche
12.04.2014 08:37,ADW_MONTIERA,Spyware,C:\Program Files\buenosearch LTD\buenosearch\1.8.28.7\buenosearchEng.dll,Entfernt,Echtzeitsuche
12.04.2014 08:37,ADW_MONTIERA,Spyware,C:\Program Files\buenosearch LTD\buenosearch\1.8.28.7\bh\buenosearch.dll,Entfernt,Echtzeitsuche
12.04.2014 08:37,ADW_MONTIERA,Spyware,C:\Program Files\buenosearch LTD\buenosearch\1.8.28.7\bh\buenosearch.dll,Entfernt,Echtzeitsuche
12.04.2014 08:37,ADW_MONTIERA,Spyware,C:\Program Files\buenosearch LTD\buenosearch\1.8.28.7\buenosearchApp.dll,Entfernt,Echtzeitsuche
12.04.2014 08:37,ADW_MONTIERA,Spyware,C:\Program Files\buenosearch LTD\buenosearch\1.8.28.7\buenosearchApp.dll,Entfernt,Echtzeitsuche
12.04.2014 08:37,ADW_MONTIERA,Spyware,C:\Program Files\buenosearch LTD\buenosearch\1.8.28.7\buenosearchEng.dll,Entfernt,Echtzeitsuche
12.04.2014 08:37,ADW_MONTIERA,Spyware,C:\Program Files\buenosearch LTD\buenosearch\1.8.28.7\buenosearchTlbr.dll,Entfernt,Echtzeitsuche
12.04.2014 08:37,ADW_MONTIERA,Spyware,C:\Program Files\buenosearch LTD\buenosearch\1.8.28.7\buenosearchsrv.exe,Entfernt,Echtzeitsuche
12.04.2014 08:37,HEU_CDPLC013,Bedrohung,C:\Users\Tobias YYY\AppData\Local\Temp\BackupSetup.exe,Entfernt,Korrelations-Suche
12.04.2014 08:37,HEU_CDPLC005,Bedrohung,C:\Users\Tobias YYY\Downloads\VideoPerformerSetup.exe,Entfernt,Korrelations-Suche
12.04.2014 08:37,HEU_CDPLC016,Bedrohung,C:\Users\Tobias YYY\AppData\Local\Temp\~15.tmp,Entfernt,Korrelations-Suche
15.04.2014 16:35,HEU_AEGISCS957,Bedrohung,C:\Users\Tobias YYY\AppData\Local\Temp\GINAOFFLINE\setup.exe,Entfernt,Echtzeitsuche
15.04.2014 16:37,HEU_CDPLC024,Bedrohung,C:\Users\Tobias YYY\AppData\Local\Temp\{72D95CB2-A28C-4A49-B057-0EA9DBFEE15A}\IsConfig.ini,Entfernt,Korrelations-Suche
15.04.2014 16:37,HEU_CDPLC024,Bedrohung,C:\Users\Tobias YYY\AppData\Local\Temp\{50603EB3-EAF1-405A-BC4B-4ECD134C0380}\IsConfig.ini,Entfernt,Korrelations-Suche
15.04.2014 16:37,HEU_CDPLC024,Bedrohung,C:\Users\Tobias YYY\AppData\Local\Temp\{50603EB3-EAF1-405A-BC4B-4ECD134C0380}\Setup.inx,Entfernt,Korrelations-Suche
15.04.2014 16:37,HEU_CDPLC024,Bedrohung,C:\Users\Tobias YYY\AppData\Local\Temp\{72D95CB2-A28C-4A49-B057-0EA9DBFEE15A}\String1033.txt,Entfernt,Korrelations-Suche
15.04.2014 16:37,HEU_CDPLC024,Bedrohung,C:\Users\Tobias YYY\AppData\Local\Temp\{72D95CB2-A28C-4A49-B057-0EA9DBFEE15A}\Setup.inx,Entfernt,Korrelations-Suche
15.04.2014 16:37,HEU_CDPLC024,Bedrohung,C:\Users\Tobias YYY\AppData\Local\Temp\{B67132AB-C9A3-4695-9C79-BA82B04A5577}\_ISMSIDEL.INI,Entfernt,Korrelations-Suche
15.04.2014 16:37,HEU_CDPLC024,Bedrohung,C:\Users\Tobias YYY\AppData\Local\Temp\{50603EB3-EAF1-405A-BC4B-4ECD134C0380}\String1031.txt,Entfernt,Korrelations-Suche
22.04.2014 11:44,HTTP_VARNEP_REQUEST,Bedrohung,C:\users\tobias YYY\appdata\local\temp\ins7078\ins7078.exe,Entdeckt,Suche nach Netzwerkinhalten
22.04.2014 11:44,HTTP_VARNEP_REQUEST,Bedrohung,C:\users\tobias YYY\appdata\local\temp\ins7078\ins7078.exe,Entdeckt,Suche nach Netzwerkinhalten
         

Adware/Junkware/Toolbars entfernen


1. Schritt: adwCleaner

Downloade Dir bitte AdwCleaner auf deinen Desktop.

• Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
• Starte die AdwCleaner.exe mit einem Doppelklick.
• Stimme den Nutzungsbedingungen zu.
• Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
  • "Tracing" Schlüssel löschen
  • Winsock Einstellungen zurücksetzen
  • Proxy Einstellungen zurücksetzen
  • Internet Explorer Richtlinien zurücksetzen
  • Chrome Richtlinien zurücksetzen
  • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
• Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
• Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
• Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
• Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

2. Schritt: JRT - Junkware Removal Tool

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

• Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
• Drücke eine beliebige Taste, um das Tool zu starten.
• Je nach System kann der Scan eine Weile dauern.
• Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
• Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

3. Schritt: Frisches Log mit FRST

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

• Starte jetzt FRST.
• Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
• Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
• Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

1. Schritt adwCleaner

# AdwCleaner v3.205 - Bericht erstellt am 04/05/2014 um 15:13:35
# Aktualisiert 28/04/2014 von Xplode
# Betriebssystem : Windows 8.1 Pro  (32 bits)
# Benutzername : Tobias YYYY - TOBISPC
# Gestartet von : C:\Users\Tobias YYYY\Downloads\adwcleaner.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****

Ordner Gelöscht : C:\Program Files\Video Performer
Ordner Gelöscht : C:\Users\Tobias YYYY\AppData\Roaming\OpenCandy
Ordner Gelöscht : C:\Users\Tobias YYYY\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Video Performer
Ordner Gelöscht : C:\Users\Tobias YYYY\AppData\Roaming\Mozilla\Firefox\Profiles\63305blf.default-1379009700912\Extensions\34f57b0c-8cdb-4914-818c-928df47c6c4f@3a243122-a6fc-40c9-a1e6-ba11e930da09.com
Datei Gelöscht : C:\Users\Tobias YYYY\AppData\Roaming\Mozilla\Firefox\Profiles\63305blf.default-1379009700912\invalidprefs.js
Datei Gelöscht : C:\Users\Tobias YYYY\AppData\Roaming\Mozilla\Firefox\Profiles\63305blf.default-1379009700912\searchplugins\buenosearch.xml
Datei Gelöscht : C:\Users\Tobias YYYY\AppData\Roaming\Mozilla\Firefox\Profiles\63305blf.default-1379009700912\user.js
Datei Gelöscht : C:\WINDOWS\System32\Tasks\Driver Booster Update

***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Wert Gelöscht : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}]
[#] Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{FE657CDF-5250-447C-8605-88D3FFA40741}
[#] Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{FE657CDF-5250-447C-8605-88D3FFA40741}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{C007DADD-132A-624C-088E-59EE6CF0711F}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Schlüssel Gelöscht : HKCU\Software\performersoft llc
Schlüssel Gelöscht : HKCU\Software\Softonic
Schlüssel Gelöscht : HKLM\Software\PerformerSoft
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Video Performer

***** [ Browser ] *****

-\\ Internet Explorer v11.0.9600.17037


-\\ Mozilla Firefox v28.0 (de)

[ Datei : C:\Users\Tobias YYYY\AppData\Roaming\Mozilla\Firefox\Profiles\63305blf.default-1379009700912\prefs.js ]

Zeile gelöscht : user_pref("extensions.buenosearch.admin", false);
Zeile gelöscht : user_pref("extensions.buenosearch.aflt", "babsst");
Zeile gelöscht : user_pref("extensions.buenosearch.appId", "{37EB75F2-7392-4DBE-B5AD-147EC6D7BF5F}");
Zeile gelöscht : user_pref("extensions.buenosearch.autoRvrt", "false");
Zeile gelöscht : user_pref("extensions.buenosearch.bbDpng", "12");
Zeile gelöscht : user_pref("extensions.buenosearch.cntry", "DE");
Zeile gelöscht : user_pref("extensions.buenosearch.dfltLng", "en");
Zeile gelöscht : user_pref("extensions.buenosearch.excTlbr", false);
Zeile gelöscht : user_pref("extensions.buenosearch.ffxUnstlRst", true);
Zeile gelöscht : user_pref("extensions.buenosearch.hdrMd5", "31B92F49DDA9571F9C713F01DD723247");
Zeile gelöscht : user_pref("extensions.buenosearch.id", "0e4e1138000000000000c2cb3835af94");
Zeile gelöscht : user_pref("extensions.buenosearch.instlDay", "16172");
Zeile gelöscht : user_pref("extensions.buenosearch.instlRef", "sst");
Zeile gelöscht : user_pref("extensions.buenosearch.lastB", "hxxp://www.buenosearch.com/?babsrc=HP_ss&mntrId=0E4EC2CB3835AF94&affID=127885&tsp=5215");
Zeile gelöscht : user_pref("extensions.buenosearch.lastVrsnTs", "1.8.28.78:36:51");
Zeile gelöscht : user_pref("extensions.buenosearch.newTab", false);
Zeile gelöscht : user_pref("extensions.buenosearch.prdct", "buenosearch");
Zeile gelöscht : user_pref("extensions.buenosearch.prtnrId", "buenosearch");
Zeile gelöscht : user_pref("extensions.buenosearch.rvrt", "false");
Zeile gelöscht : user_pref("extensions.buenosearch.sg", "azb");
Zeile gelöscht : user_pref("extensions.buenosearch.smplGrp", "none");
Zeile gelöscht : user_pref("extensions.buenosearch.tb_url", "hxxp://www.buenosearch.com/?q={searchTerms}&babsrc=TB_ss&mntrId=0E4EC2CB3835AF94&affID=127885&tsp=5215");
Zeile gelöscht : user_pref("extensions.buenosearch.tlbrId", "base");
Zeile gelöscht : user_pref("extensions.buenosearch.tlbrSrchUrl", "hxxp://www.buenosearch.com/?q={searchTerms}&babsrc=TB_ss&mntrId=0E4EC2CB3835AF94&affID=127885&tsp=5215");
Zeile gelöscht : user_pref("extensions.buenosearch.vrsn", "1.8.28.7");
Zeile gelöscht : user_pref("extensions.buenosearch.vrsnTs", "1.8.28.78:36:51");
Zeile gelöscht : user_pref("extensions.buenosearch.vrsni", "1.8.28.7");
Zeile gelöscht : user_pref("extensions.crossrider.bic", "144a08047155cd2c3e67b1f497dabdd4");
Zeile gelöscht : user_pref("extensions.ffxtlbr@buenosearch.com.install-event-fired", true);
Zeile gelöscht : user_pref("extensions.gmailnoads@mywebber.com.install-event-fired", true);
Zeile gelöscht : user_pref("{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}.ScriptData_whiteListSearch", "{\"isearch.babylon.com\":\"q\",\"search.imesh.net\":\"q\",\"www.search-results.com\":\"q\",\"home.mywebsearch.com\":\"se[...]

-\\ Google Chrome v

[ Datei : C:\Users\Tobias YYYY\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Gelöscht [Startup_urls] : hxxp://www.buenosearch.com/?babsrc=HP_ss&mntrId=0E4EC2CB3835AF94&affID=127885&tsp=5215
Gelöscht [Homepage] : hxxp://www.buenosearch.com/?babsrc=HP_ss&mntrId=0E4EC2CB3835AF94&affID=127885&tsp=5215

*************************

AdwCleaner[R1].txt - [5684 octets] - [04/05/2014 15:10:45]
AdwCleaner[S1].txt - [5613 octets] - [04/05/2014 15:13:35]

########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [5673 octets] ##########
         

JRT.TXT

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.3 (03.23.2014:1)
OS: Windows 8.1 Pro x86
Ran by Tobias YYYY on 04.05.2014 at 15:27:50,43
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{2AAEB659-739C-41E0-ABA5-AC61A5D5ACD0}



~~~ Files



~~~ Folders

Successfully deleted: [Folder] "C:\ProgramData\babylon"
Successfully deleted: [Folder] "C:\ProgramData\ytd video downloader"
Successfully deleted: [Folder] "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ytd video downloader"



~~~ FireFox

Successfully deleted the following from C:\Users\Tobias YYYY\AppData\Roaming\mozilla\firefox\profiles\63305blf.default-1379009700912\prefs.js

user_pref("iminent.adapters", "{\"live\":{\"CountryCode\":\"DE\",\"NoAds\":false,\"Status\":1,\"expireTime\":\"1385147956891259200\"},\"google\":{\"CountryCode\":\"DE\",\"NoAd
Emptied folder: C:\Users\Tobias YYYY\AppData\Roaming\mozilla\firefox\profiles\63305blf.default-1379009700912\minidumps [26 files]



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 04.05.2014 at 15:29:36,75
Computer was rebooted
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
         

FRST.txt

FRST Logfile:

FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:01-05-2014
Ran by Tobias YYYY (administrator) on TOBISPC on 04-05-2014 15:36:54
Running from C:\Users\Tobias YYYY\Downloads
Microsoft Windows 8.1 Pro Update 1 (X86) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal


==================== Processes (Whitelisted) =================

(DisplayLink Corp.) C:\Program Files\DisplayLink Core Software\DisplayLinkManager.exe
(DisplayLink Corp.) C:\Program Files\DisplayLink Core Software\DisplayLinkUserAgent.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Trend Micro Inc.) E:\Programme\Trend Micro\AMSP\coreServiceShell.exe
(Trend Micro Inc.) E:\Programme\Trend Micro\UniClient\UiFrmwrk\uiWatchDog.exe
(Trend Micro Inc.) E:\Programme\Trend Micro\AMSP\coreFrameworkHost.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Trend Micro Inc.) E:\Programme\Trend Micro\Trend Micro\TMIDS\PwmSvc.exe
(Validity Sensors, Inc.) C:\Windows\System32\valWBFPolicyService.exe
() C:\Program Files\Ashampoo\Ashampoo WinOptimizer 9\LiveTunerService.exe
() C:\Program Files\XSManager\WTGService.exe
(4G Systems GmbH & Co. KG) C:\Windows\service4g.exe
(DisplayLink Corp.) C:\Program Files\DisplayLink Core Software\DisplayLinkUI.exe
(Microsoft Corporation) C:\Windows\System32\mobsync.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Ashampoo Development GmbH & Co. KG) C:\Program Files\Ashampoo\Ashampoo WinOptimizer 9\LiveTuner.exe
(Sun Microsystems, Inc.) C:\Program Files\HanseMerkur\ServiceExtensions\jre\bin\javaw.exe
(Trend Micro Inc.) E:\Programme\Trend Micro\Trend Micro\TMIDS\PwmConsole.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office14\MSOSYNC.EXE
(Trend Micro Inc.) E:\Programme\Trend Micro\UniClient\UiFrmwrk\uiSeAgnt.exe
() C:\Users\Tobias YYYY\AppData\Local\CloudStation\bin\cloud.exe
() C:\Users\Tobias YYYY\AppData\Local\CloudStation\bin\client-win.exe
(Dropbox, Inc.) C:\Users\Tobias YYYY\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
(Intel Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(Microsoft Corporation) C:\Windows\splwow64.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Nero AG) C:\Program Files\Nero\Update\NASvc.exe
(Google Inc.) C:\Users\Tobias YYYY\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Tobias YYYY\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Tobias YYYY\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Tobias YYYY\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Tobias YYYY\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Tobias YYYY\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Tobias YYYY\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Tobias YYYY\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Tobias YYYY\AppData\Local\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\cmd.exe
(Microsoft Corporation) C:\Windows\System32\cmd.exe
(Microsoft Corporation) C:\Windows\System32\cmd.exe
(Trend Micro Inc.) E:\Programme\Trend Micro\AMSP\module\20013\ChromeExt\chromeextension\TmopChromeMsgHost32.exe
(Trend Micro Inc.) E:\Programme\Trend Micro\Trend Micro\TMIDS\PwmNativeMessaging\PwmNativeMessaging.exe
(Microsoft Corporation) C:\Windows\System32\cmd.exe
(Trend Micro Inc.) E:\Programme\Trend Micro\Titanium\UIFramework\Toolbar\chromeextension\NativeMessageHost\ToolbarNativeMsgHost.exe
(Trend Micro Inc.) E:\Programme\Trend Micro\AMSP\module\20002\8.0.1170\8.0.1170\chrome_extension2\host\chrome_native_msg_host.exe
(Google Inc.) C:\Users\Tobias YYYY\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Tobias YYYY\AppData\Local\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM\...\Run: [Ashampoo WinOptimizer Live-Tuner] => C:\Program Files\Ashampoo\Ashampoo WinOptimizer 9\LiveTuner.exe [2883936 2013-05-07] (Ashampoo Development GmbH & Co. KG)
HKLM\...\Run: [DivXMediaServer] => C:\Program Files\DivX\DivX Media Server\DivXMediaServer.exe [450560 2013-09-11] (DivX, LLC)
HKLM\...\Run: [DivXUpdate] => C:\Program Files\DivX\DivX Update\DivXUpdate.exe [1861968 2013-08-29] ()
HKLM\...\Run: [ISA Service Extensions] => C:\Program Files\HanseMerkur\ServiceExtensions\start_serviceextensions.bat [79 2013-11-06] ()
HKLM\...\Run: [PwmConsole.exe] => E:\Programme\Trend Micro\Trend Micro\TMIDS\PwmConsole.exe [1235616 2014-03-24] (Trend Micro Inc.)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1791272 2010-06-10] (Synaptics Incorporated)
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284696 2010-03-03] (Intel Corporation)
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM\...\Run: [Trend Micro Client Framework] => E:\Programme\Trend Micro\UniClient\UiFrmWrk\UIWatchDog.exe [143792 2013-10-09] (Trend Micro Inc.)
HKLM\...\Run: [PDFPrint] => C:\Program Files\PDF24\pdf24.exe [189480 2014-02-06] (Geek Software GmbH)
HKU\S-1-5-21-3608396222-1875968445-4039553499-1001\...\Run: [DAEMON Tools Lite] => E:\Programme\DAEMON Tools Lite\DTLite.exe [3672640 2013-03-14] (Disc Soft Ltd)
HKU\S-1-5-21-3608396222-1875968445-4039553499-1001\...\Run: [OfficeSyncProcess] => C:\Program Files\Microsoft Office\Office14\MSOSYNC.EXE [720064 2013-04-22] (Microsoft Corporation)
HKU\S-1-5-21-3608396222-1875968445-4039553499-1001\...\Run: [Google Update] => C:\Users\Tobias YYYY\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2013-09-12] (Google Inc.)
HKU\S-1-5-21-3608396222-1875968445-4039553499-1001\...\Run: [Cloud Station] => C:\Users\Tobias YYYY\AppData\Local\CloudStation\bin\cloud.exe [3772320 2014-04-23] ()
HKU\S-1-5-21-3608396222-1875968445-4039553499-1001\...\Policies\system: [DisableLockWorkstation] 0
HKU\S-1-5-21-3608396222-1875968445-4039553499-1001\...\MountPoints2: {3366dff5-fa77-11e2-afa2-f04da2a11890} - "G:\autorun.exe" 
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Quicken 2014 Zahlungserinnerung.lnk
ShortcutTarget: Quicken 2014 Zahlungserinnerung.lnk -> C:\Windows\Installer\{E60036CF-1E46-4DFE-832F-5476574B30FF}\BillMinder.8C5DA79E_7079_4AB3_81F7_712153351D0D.exe (Macrovision Corporation)
Startup: C:\Users\Tobias YYYY\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Tobias YYYY\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://t.de.msn.com/
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKCU - {7383D4B5-1A90-4A3C-8909-3DE6F3FE302F} URL = hxxp://search.yahoo.com/search?p={searchTerms}&fr=tightropetb&type=10447
BHO: ExplorerWnd Helper - {10921475-03CE-4E04-90CE-E2E7EF20C814} - C:\Program Files\IObit\IObit Uninstaller\UninstallExplorer32.dll (IObit)
BHO: Trend Micro DirectPass BHO - {3F019D1C-7EAA-4F25-A765-FBA635BD0AFF} - E:\Programme\Trend Micro\Trend Micro\TMIDS\PwmIEBHO32.dll (Trend Micro Inc.)
BHO: TSToolbarBHO - {43C6D902-A1C5-45c9-91F6-FD9E90337E18} - E:\Programme\Trend Micro\Titanium\UIFramework\ToolbarIE.dll (Trend Micro Inc.)
BHO: CmjBrowserHelperObject Object - {6FE6A929-59D1-4763-91AD-29B61CFFB35B} - C:\Program Files\Mindjet\MindManager 11\Mm8InternetExplorer.dll (Mindjet)
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: TmIEPlugInBHO Class - {959A5673-7971-48e6-AF54-58F745AC4ABC} - E:\Programme\Trend Micro\AMSP\module\20013\3.0.1313\1.6.1102\TmopIEPlg.dll (Trend Micro Inc.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: TmBpIeBHO Class - {BBACBAFD-FA5E-4079-8B33-00EB9F13D4AC} - E:\Programme\Trend Micro\AMSP\module\20002\8.0.1170\8.0.1170\TmBpIe32.dll (Trend Micro Inc.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - Trend Micro Toolbar - {CCAC5586-44D7-4c43-B64A-F042461A97D2} - E:\Programme\Trend Micro\Titanium\UIFramework\ToolbarIE.dll (Trend Micro Inc.)
Toolbar: HKLM - Trend Micro DirectPass Symbolleiste - {9B4B91FC-EC4D-4018-9575-96FA5A3C03C5} - E:\Programme\Trend Micro\Trend Micro\TMIDS\PwmIEBHO32.dll (Trend Micro Inc.)
DPF: {C752FF21-A8EF-468E-B507-5BBAFB84359E} https://hbciweb.olb.de/financebrowser5/plugin/Signlet-Plugin.CAB
Handler: tmbp - {1A77E7DC-C9A0-4110-8A37-2F36BAE71ECF} - E:\Programme\Trend Micro\AMSP\module\20002\8.0.1170\8.0.1170\TmBpIe32.dll (Trend Micro Inc.)
Handler: tmop - {69FD7CE3-4604-4fe6-967C-49B9735CEE70} - E:\Programme\Trend Micro\AMSP\module\20013\3.0.1313\1.6.1102\TmopIEPlg.dll (Trend Micro Inc.)
Handler: tmtb - {04EAF3FB-4BAC-4B5A-A37D-A1CF210A5A42} - E:\Programme\Trend Micro\Titanium\UIFramework\ToolbarIE.dll (Trend Micro Inc.)
Handler: tmtbim - {0B37915C-8B98-4B9E-80D4-464D2C830D10} - E:\Programme\Trend Micro\Titanium\UIFramework\ProToolbarIMRatingActiveX.dll (Trend Micro Inc.)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1

FireFox:
========
FF ProfilePath: C:\Users\Tobias YYYY\AppData\Roaming\Mozilla\Firefox\Profiles\63305blf.default-1379009700912
FF NetworkProxy: "socks_remote_dns", true
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer - C:\WINDOWS\system32\Macromed\Flash\NPSWF32_13_0_0_206.dll ()
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin: @divx.com/DivX Web Player Plug-In,version=1.0.0 - C:\Program Files\DivX\DivX Web Player\npdivx32.dll (DivX, LLC)
FF Plugin: @Google.com/GoogleEarthPlugin - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin: @java.com/DTPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~1\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.0.2 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.2 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.3 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\Tobias YYYY\AppData\Local\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\Tobias YYYY\AppData\Local\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\Tobias YYYY\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: FoxyProxy Standard - C:\Users\Tobias YYYY\AppData\Roaming\Mozilla\Firefox\Profiles\63305blf.default-1379009700912\Extensions\foxyproxy@eric.h.jung [2014-02-05]
FF Extension: NetVideoHunter - C:\Users\Tobias YYYY\AppData\Roaming\Mozilla\Firefox\Profiles\63305blf.default-1379009700912\Extensions\netvideohunter@netvideohunter.com [2013-12-04]
FF Extension: DDBAC Plug-In - C:\Users\Tobias YYYY\AppData\Roaming\Mozilla\Firefox\Profiles\63305blf.default-1379009700912\Extensions\{271A3CF5-5A54-447B-A08F-BE805F0DA60A} [2013-09-20]
FF Extension: OLB - C:\Users\Tobias YYYY\AppData\Roaming\Mozilla\Firefox\Profiles\63305blf.default-1379009700912\Extensions\{C752FF21-A8EF-468E-B507-5BBAFB84359D} [2013-12-10]
FF Extension: Webmail Ad Blocker - C:\Users\Tobias YYYY\AppData\Roaming\Mozilla\Firefox\Profiles\63305blf.default-1379009700912\Extensions\gmailnoads@mywebber.com.xpi [2013-09-12]
FF Extension: YouTube ALL HTML5 - C:\Users\Tobias YYYY\AppData\Roaming\Mozilla\Firefox\Profiles\63305blf.default-1379009700912\Extensions\jid1-qj0w91o64N7Eeg@jetpack.xpi [2013-09-12]
FF Extension: FastestFox - C:\Users\Tobias YYYY\AppData\Roaming\Mozilla\Firefox\Profiles\63305blf.default-1379009700912\Extensions\smarterwiki@wikiatic.com.xpi [2013-12-03]
FF Extension: Youtube and more - Easy Video Downloader - C:\Users\Tobias YYYY\AppData\Roaming\Mozilla\Firefox\Profiles\63305blf.default-1379009700912\Extensions\vdpure@link64.xpi [2013-12-03]
FF Extension: 1-Click YouTube Video Downloader - C:\Users\Tobias YYYY\AppData\Roaming\Mozilla\Firefox\Profiles\63305blf.default-1379009700912\Extensions\YoutubeDownloader@PeterOlayev.com.xpi [2013-12-02]
FF Extension: NoScript - C:\Users\Tobias YYYY\AppData\Roaming\Mozilla\Firefox\Profiles\63305blf.default-1379009700912\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2013-09-12]
FF Extension: Adblock Plus - C:\Users\Tobias YYYY\AppData\Roaming\Mozilla\Firefox\Profiles\63305blf.default-1379009700912\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2013-09-12]
FF Extension: BetterPrivacy - C:\Users\Tobias YYYY\AppData\Roaming\Mozilla\Firefox\Profiles\63305blf.default-1379009700912\Extensions\{d40f5e7b-d2cf-4856-b441-cc613eeffbe3}.xpi [2013-09-12]
FF Extension: DownThemAll! - C:\Users\Tobias YYYY\AppData\Roaming\Mozilla\Firefox\Profiles\63305blf.default-1379009700912\Extensions\{DDC359D1-844A-42a7-9AA1-88A850A938A8}.xpi [2013-09-12]
FF HKLM\...\Firefox\Extensions: [tmbepff@trendmicro.com] - E:\Programme\Trend Micro\AMSP\module\20002\8.0.1170\8.0.1170\firefoxextension
FF Extension: Trend Micro BEP Firefox Extension - E:\Programme\Trend Micro\AMSP\module\20002\8.0.1170\8.0.1170\firefoxextension [2014-05-04]
FF HKLM\...\Firefox\Extensions: [{22181a4d-af90-4ca3-a569-faed9118d6bc}] - E:\Programme\Trend Micro\Titanium\UIFramework\Toolbar\firefoxextension
FF Extension: Trend Micro Toolbar - E:\Programme\Trend Micro\Titanium\UIFramework\Toolbar\firefoxextension [2013-12-06]
FF HKLM\...\Firefox\Extensions: [{8197dd50-b252-4b08-a1be-1277f22357bb}] - E:\Programme\Trend Micro\Trend Micro\TMIDS\PwmFirefoxExt
FF Extension: Trend Micro DirectPass Firefox Extension - E:\Programme\Trend Micro\Trend Micro\TMIDS\PwmFirefoxExt [2013-12-06]
FF HKLM\...\Firefox\Extensions: [{BBB77B49-9FF4-4d5c-8FE2-92B1D6CD696C}] - E:\Programme\Trend Micro\AMSP\module\20013\FxExt\firefoxextension\
FF Extension: Trend Micro Osprey Firefox Extension - E:\Programme\Trend Micro\AMSP\module\20013\FxExt\firefoxextension\ []

Chrome: 
=======
CHR HomePage: hxxp://www.google.com/
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

========================== Services (Whitelisted) =================

S3 DfSdkS; C:\Program Files\Ashampoo\Ashampoo WinOptimizer 9\DfsdkS.exe [406016 2009-08-24] (mst software GmbH, Germany)
R2 DisplayLinkService; C:\Program Files\DisplayLink Core Software\DisplayLinkManager.exe [8216368 2013-11-29] (DisplayLink Corp.)
S2 LiveUpdateSvc; C:\Program Files\IObit\LiveUpdate\LiveUpdate.exe [2153792 2014-03-19] (IObit)
R2 NAUpdate; C:\Program Files\Nero\Update\NASvc.exe [762192 2013-07-18] (Nero AG)
R2 PwmSvc; E:\Programme\Trend Micro\Trend Micro\TMIDS\PwmSvc.exe [257128 2014-03-24] (Trend Micro Inc.)
S3 ScDeviceEnum; C:\WINDOWS\System32\ScDeviceEnum.dll [105472 2013-08-22] (Microsoft Corporation)
R2 valWBFPolicyService; C:\WINDOWS\system32\valWBFPolicyService.exe [29184 2013-10-11] (Validity Sensors, Inc.)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [280296 2013-10-31] (Microsoft Corporation)
S3 WEPHOSTSVC; C:\WINDOWS\system32\wephostsvc.dll [20992 2013-08-22] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [22224 2013-10-31] (Microsoft Corporation)
S3 workfolderssvc; C:\WINDOWS\system32\workfolderssvc.dll [1210368 2013-11-26] (Microsoft Corporation)
R2 WO_LiveService; C:\Program Files\Ashampoo\Ashampoo WinOptimizer 9\LiveTunerService.exe [885088 2013-05-07] ()
R2 WTGService; C:\Program Files\XSManager\WTGService.exe [329168 2010-04-12] ()
R2 XS Stick Service; C:\WINDOWS\service4g.exe [145064 2010-04-30] (4G Systems GmbH & Co. KG)
R2 Amsp; "E:\Programme\Trend Micro\AMSP\coreServiceShell.exe" coreFrameworkHost.exe -m=rb -dt=60000 -ad -bt=0 [X]

==================== Drivers (Whitelisted) ====================

R1 BasicRender; C:\WINDOWS\System32\drivers\BasicRender.sys [25600 2014-02-22] (Microsoft Corporation)
R3 BCM43XX; C:\WINDOWS\system32\DRIVERS\bcmwl63.sys [6715568 2014-03-19] (Broadcom Corporation)
S3 cmnsusbser; C:\WINDOWS\system32\DRIVERS\cmnsusbser.sys [103424 2013-08-05] (Mobile Connector)
R3 DisplayLinkUsbIo; C:\WINDOWS\System32\drivers\DisplayLinkUsbIo_7.5.52277.0.sys [38192 2014-01-25] ()
R3 dlcdcncm6; C:\WINDOWS\system32\DRIVERS\dlcdcncm6.sys [61232 2013-11-29] (DisplayLink Corp.)
R3 dlkmd; C:\WINDOWS\system32\drivers\dlkmd.sys [337712 2013-11-29] (DisplayLink Corp.)
R0 dlkmdldr; C:\WINDOWS\System32\drivers\dlkmdldr.sys [16688 2013-11-29] (DisplayLink Corp.)
R3 dlusbaudio; C:\WINDOWS\system32\DRIVERS\dlusbaudio.sys [148272 2013-11-29] (DisplayLink Corp.)
S3 GPIO; C:\WINDOWS\System32\drivers\iaiogpio.sys [22016 2013-07-23] (Intel Corporation)
R3 kbfilter; C:\WINDOWS\system32\DRIVERS\kbfilter.sys [61728 2014-03-24] (Trend Micro Inc.)
R2 LiveTunerPM; C:\Program Files\Ashampoo\Ashampoo WinOptimizer 9\LiveTunerProcessMonitor32.sys [12696 2011-03-08] ()
R1 tmactmon; C:\WINDOWS\system32\DRIVERS\tmactmon.sys [102904 2013-09-04] (Trend Micro Inc.)
R0 tmcomm; C:\WINDOWS\System32\DRIVERS\tmcomm.sys [288840 2013-09-04] (Trend Micro Inc.)
R0 TMEBC; C:\WINDOWS\System32\DRIVERS\TMEBC32.sys [40736 2013-07-01] (Trend Micro Inc.)
R3 tmeevw; C:\WINDOWS\system32\DRIVERS\tmeevw.sys [85280 2013-06-13] (Trend Micro Inc.)
S0 tmel; C:\WINDOWS\System32\DRIVERS\tmel.sys [32272 2013-07-11] (Trend Micro Inc.)
R1 tmevtmgr; C:\WINDOWS\system32\DRIVERS\tmevtmgr.sys [83352 2013-09-04] (Trend Micro Inc.)
R3 tmnciesc; C:\WINDOWS\system32\DRIVERS\tmnciesc.sys [282272 2013-05-22] (Trend Micro Inc.)
R2 tmusa; C:\WINDOWS\system32\DRIVERS\tmusa.sys [84768 2013-07-08] (Trend Micro Inc.)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [93016 2013-10-31] (Microsoft Corporation)
R0 Wof; C:\WINDOWS\system32\Drivers\Wof.sys [138584 2014-03-13] (Microsoft Corporation)
R3 WUDFSensorLP; C:\WINDOWS\System32\drivers\WUDFRd.sys [187392 2013-08-22] (Microsoft Corporation)
R3 WUDFWpdMtp; C:\WINDOWS\system32\DRIVERS\WUDFRd.sys [187392 2013-08-22] (Microsoft Corporation)
S3 RSUSBSTOR; System32\Drivers\RtsUStor.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-05-04 15:36 - 2014-05-04 15:36 - 00021965 _____ () C:\Users\Tobias YYYY\Downloads\FRST.txt
2014-05-04 15:35 - 2014-05-04 15:35 - 01050624 _____ (Farbar) C:\Users\Tobias YYYY\Downloads\FRST.exe
2014-05-04 15:29 - 2014-05-04 15:29 - 00001511 _____ () C:\Users\Tobias YYYY\Desktop\JRT.txt
2014-05-04 15:24 - 2014-05-04 15:24 - 01016261 _____ (Thisisu) C:\Users\Tobias YYYY\Downloads\JRT.exe
2014-05-04 15:24 - 2014-05-04 15:24 - 00000000 ____D () C:\WINDOWS\ERUNT
2014-05-04 15:16 - 2014-05-04 15:16 - 00000310 _____ () C:\WINDOWS\PFRO.log
2014-05-04 15:11 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\WINDOWS\system32\sqlite3.dll
2014-05-04 15:10 - 2014-05-04 15:13 - 00000000 ____D () C:\AdwCleaner
2014-05-04 15:09 - 2014-05-04 15:09 - 01310621 _____ () C:\Users\Tobias YYYY\Downloads\adwcleaner.exe
2014-04-30 18:32 - 2014-04-30 18:32 - 00004835 _____ () C:\Users\Tobias YYYY\Desktop\Letzte Suche.csv
2014-04-29 13:36 - 2014-04-29 13:36 - 00000000 ____D () C:\Users\Tobias YYYY\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Synology
2014-04-27 18:05 - 2014-04-27 18:08 - 84638145 _____ () C:\Users\Tobias YYYY\Downloads\Thrift Shop Tutorial in Slowmo.mp4
2014-04-27 17:53 - 2014-04-27 17:54 - 17762999 _____ () C:\Users\Tobias YYYY\Downloads\'Thrift Shop' Macklemore choreography by Jasmine Meakin (Mega Jam).mp4
2014-04-27 17:25 - 2014-05-04 15:30 - 00555603 _____ () C:\WINDOWS\WindowsUpdate.log
2014-04-27 15:40 - 2014-04-27 15:40 - 00707006 _____ () C:\Users\Tobias YYYY\Downloads\delfix.exe
2014-04-27 15:17 - 2014-05-04 15:36 - 00000000 ____D () C:\FRST
2014-04-26 12:13 - 2014-03-20 03:31 - 01037504 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel32.dll
2014-04-26 12:13 - 2014-03-20 03:20 - 18679216 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2014-04-26 12:13 - 2014-03-20 03:12 - 00863552 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2014-04-26 12:13 - 2014-03-20 03:09 - 01679704 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2014-04-26 12:13 - 2014-03-20 03:09 - 00283992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys
2014-04-26 12:13 - 2014-03-20 02:08 - 03562496 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncEngine.dll
2014-04-26 12:13 - 2014-03-11 14:35 - 02317824 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2014-04-26 12:13 - 2014-03-08 07:42 - 01131520 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2014-04-26 12:13 - 2014-03-06 12:46 - 01679128 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll
2014-04-26 12:13 - 2014-03-06 12:43 - 01326936 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2014-04-26 12:13 - 2014-03-06 12:37 - 05786968 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2014-04-26 12:13 - 2014-03-06 10:20 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Shell.Search.UriHandler.dll
2014-04-26 12:13 - 2014-03-06 08:59 - 12732416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2014-04-26 12:13 - 2014-03-06 08:29 - 11791360 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2014-04-26 12:13 - 2014-03-06 08:23 - 02270208 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll
2014-04-26 12:13 - 2014-03-06 07:27 - 05833728 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll
2014-04-26 12:13 - 2014-03-06 07:21 - 05770752 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2014-04-26 12:13 - 2014-03-04 13:16 - 02088160 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2014-04-26 12:13 - 2014-03-04 13:09 - 01871192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2014-04-26 12:13 - 2014-03-02 11:33 - 17387008 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2014-04-26 12:13 - 2014-02-26 08:35 - 02124288 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers.dll
2014-04-26 12:12 - 2014-03-20 01:39 - 00800256 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgent.dll
2014-04-26 12:12 - 2014-03-20 01:36 - 00172544 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReInfo.dll
2014-04-26 12:12 - 2014-03-19 07:25 - 00491008 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAgent.exe
2014-04-26 12:12 - 2014-03-19 07:20 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\system32\w32tm.exe
2014-04-26 12:12 - 2014-03-19 07:08 - 01351168 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll
2014-04-26 12:12 - 2014-03-19 06:33 - 00590336 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveTelemetry.dll
2014-04-26 12:12 - 2014-03-19 06:10 - 00672256 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDrive.exe
2014-04-26 12:12 - 2014-03-13 12:12 - 00138584 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wof.sys
2014-04-26 12:12 - 2014-03-12 15:45 - 00387210 _____ () C:\WINDOWS\system32\ApnDatabase.xml
2014-04-26 12:12 - 2014-03-11 17:05 - 00128000 _____ (Microsoft Corporation) C:\WINDOWS\system32\BdeHdCfg.exe
2014-04-26 12:12 - 2014-03-11 16:49 - 00082944 _____ (Microsoft Corporation) C:\WINDOWS\system32\BdeHdCfgLib.dll
2014-04-26 12:12 - 2014-03-11 16:28 - 00887296 _____ (Microsoft Corporation) C:\WINDOWS\system32\aclui.dll
2014-04-26 12:12 - 2014-03-11 16:09 - 00761856 _____ (Microsoft Corporation) C:\WINDOWS\system32\fvewiz.dll
2014-04-26 12:12 - 2014-03-11 15:46 - 00100864 _____ (Microsoft Corporation) C:\WINDOWS\system32\BitLockerDeviceEncryption.exe
2014-04-26 12:12 - 2014-03-11 15:34 - 00184832 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapibase.dll
2014-04-26 12:12 - 2014-03-11 15:32 - 00299008 _____ (Microsoft Corporation) C:\WINDOWS\system32\bdesvc.dll
2014-04-26 12:12 - 2014-03-11 15:30 - 00571392 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll
2014-04-26 12:12 - 2014-03-11 15:02 - 00629760 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll
2014-04-26 12:12 - 2014-03-08 14:00 - 01092896 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll
2014-04-26 12:12 - 2014-03-08 14:00 - 00241664 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcomp.dll
2014-04-26 12:12 - 2014-03-08 13:53 - 00147800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2014-04-26 12:12 - 2014-03-08 13:49 - 00482416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2014-04-26 12:12 - 2014-03-08 13:49 - 00376152 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS
2014-04-26 12:12 - 2014-03-08 13:45 - 00069464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wfplwfs.sys
2014-04-26 12:12 - 2014-03-08 13:35 - 00295256 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Classpnp.sys
2014-04-26 12:12 - 2014-03-08 13:34 - 01095488 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll
2014-04-26 12:12 - 2014-03-08 10:44 - 00731648 _____ (Microsoft Corporation) C:\WINDOWS\system32\adtschema.dll
2014-04-26 12:12 - 2014-03-08 10:12 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\sxproxy.dll
2014-04-26 12:12 - 2014-03-08 09:47 - 00222720 _____ (Microsoft Corporation) C:\WINDOWS\system32\spp.dll
2014-04-26 12:12 - 2014-03-08 09:40 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\SetNetworkLocation.dll
2014-04-26 12:12 - 2014-03-08 09:14 - 00264192 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDEServer.exe
2014-04-26 12:12 - 2014-03-08 09:12 - 01816576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Display.dll
2014-04-26 12:12 - 2014-03-08 08:40 - 00139776 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxAllUserStore.dll
2014-04-26 12:12 - 2014-03-08 08:38 - 01089024 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2014-04-26 12:12 - 2014-03-08 08:37 - 00755712 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2014-04-26 12:12 - 2014-03-08 08:37 - 00551424 _____ (Microsoft Corporation) C:\WINDOWS\system32\BFE.DLL
2014-04-26 12:12 - 2014-03-08 08:30 - 00197632 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll
2014-04-26 12:12 - 2014-03-08 08:25 - 00264192 _____ (Microsoft Corporation) C:\WINDOWS\system32\FWPUCLNT.DLL
2014-04-26 12:12 - 2014-03-08 08:23 - 00731648 _____ (Microsoft Corporation) C:\WINDOWS\system32\IKEEXT.DLL
2014-04-26 12:12 - 2014-03-08 08:02 - 00801792 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2014-04-26 12:12 - 2014-03-08 07:58 - 00567296 _____ (Microsoft Corporation) C:\WINDOWS\system32\nshwfp.dll
2014-04-26 12:12 - 2014-03-08 07:16 - 00735232 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2014-04-26 12:12 - 2014-03-06 13:20 - 01200296 _____ (Microsoft Corporation) C:\WINDOWS\system32\propsys.dll
2014-04-26 12:12 - 2014-03-06 13:19 - 00390488 _____ (Microsoft Corporation) C:\WINDOWS\system32\netcfgx.dll
2014-04-26 12:12 - 2014-03-06 13:19 - 00094016 _____ (Microsoft Corporation) C:\WINDOWS\system32\userenv.dll
2014-04-26 12:12 - 2014-03-06 13:13 - 01779800 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
2014-04-26 12:12 - 2014-03-06 13:13 - 00406912 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
2014-04-26 12:12 - 2014-03-06 12:43 - 00321880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2014-04-26 12:12 - 2014-03-06 12:35 - 00406512 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2014-04-26 12:12 - 2014-03-06 12:35 - 00388408 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2014-04-26 12:12 - 2014-03-06 12:35 - 00326024 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2014-04-26 12:12 - 2014-03-06 12:35 - 00305768 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2014-04-26 12:12 - 2014-03-06 12:35 - 00194752 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2014-04-26 12:12 - 2014-03-06 12:34 - 00179200 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdd.dll
2014-04-26 12:12 - 2014-03-06 10:28 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanhlp.dll
2014-04-26 12:12 - 2014-03-06 10:24 - 00092160 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidclass.sys
2014-04-26 12:12 - 2014-03-06 10:24 - 00068608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\IPMIDrv.sys
2014-04-26 12:12 - 2014-03-06 10:24 - 00020992 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidusb.sys
2014-04-26 12:12 - 2014-03-06 10:23 - 00102400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dfsc.sys
2014-04-26 12:12 - 2014-03-06 10:22 - 00560128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys
2014-04-26 12:12 - 2014-03-06 10:22 - 00124416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxdav.sys
2014-04-26 12:12 - 2014-03-06 10:21 - 00374784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\nwifi.sys
2014-04-26 12:12 - 2014-03-06 10:21 - 00333824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
2014-04-26 12:12 - 2014-03-06 10:20 - 00227840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb10.sys
2014-04-26 12:12 - 2014-03-06 10:20 - 00185856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srvnet.sys
2014-04-26 12:12 - 2014-03-06 10:20 - 00096256 _____ (Microsoft Corporation) C:\WINDOWS\system32\umpnpmgr.dll
2014-04-26 12:12 - 2014-03-06 10:20 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\system32\drvcfg.exe
2014-04-26 12:12 - 2014-03-06 10:20 - 00038400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpipreg.sys
2014-04-26 12:12 - 2014-03-06 10:10 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\system32\l2gpstore.dll
2014-04-26 12:12 - 2014-03-06 10:09 - 00098816 _____ (Microsoft Corporation) C:\WINDOWS\system32\drvinst.exe
2014-04-26 12:12 - 2014-03-06 09:47 - 00095744 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevPropMgr.dll
2014-04-26 12:12 - 2014-03-06 09:46 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\system32\davclnt.dll
2014-04-26 12:12 - 2014-03-06 09:44 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsgqec.dll
2014-04-26 12:12 - 2014-03-06 09:16 - 00171008 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsApi.dll
2014-04-26 12:12 - 2014-03-06 09:08 - 00855552 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdvidcrl.dll
2014-04-26 12:12 - 2014-03-06 08:42 - 00589824 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpprefcl.dll
2014-04-26 12:12 - 2014-03-06 08:29 - 00688640 _____ (Microsoft Corporation) C:\WINDOWS\system32\netlogon.dll
2014-04-26 12:12 - 2014-03-06 08:14 - 00174080 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2014-04-26 12:12 - 2014-03-06 08:13 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanapi.dll
2014-04-26 12:12 - 2014-03-06 08:11 - 02030080 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmSvc.dll
2014-04-26 12:12 - 2014-03-06 08:09 - 01764864 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2014-04-26 12:12 - 2014-03-06 08:06 - 00386560 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlangpui.dll
2014-04-26 12:12 - 2014-03-06 08:06 - 00153600 _____ (Microsoft Corporation) C:\WINDOWS\system32\dafWfdProvider.dll
2014-04-26 12:12 - 2014-03-06 08:04 - 00300544 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanmsm.dll
2014-04-26 12:12 - 2014-03-06 08:04 - 00226304 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Sensors.dll
2014-04-26 12:12 - 2014-03-06 08:02 - 00623104 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2014-04-26 12:12 - 2014-03-06 08:01 - 00251392 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSDMon.dll
2014-04-26 12:12 - 2014-03-06 08:00 - 01309184 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll
2014-04-26 12:12 - 2014-03-06 07:54 - 00888320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2014-04-26 12:12 - 2014-03-06 07:51 - 00151040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Scanners.dll
2014-04-26 12:12 - 2014-03-06 07:45 - 00833536 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2014-04-26 12:12 - 2014-03-06 07:42 - 00280576 _____ (Microsoft Corporation) C:\WINDOWS\system32\SessEnv.dll
2014-04-26 12:12 - 2014-03-06 07:33 - 00839168 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFolder.dll
2014-04-26 12:12 - 2014-03-06 07:32 - 00828928 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.appcore.dll
2014-04-26 12:12 - 2014-03-04 13:10 - 00355832 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfreadwrite.dll
2014-04-26 12:12 - 2014-03-04 13:09 - 00286040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS
2014-04-26 12:12 - 2014-03-04 09:26 - 00444928 _____ (Microsoft Corporation) C:\WINDOWS\system32\AdmTmpl.dll
2014-04-26 12:12 - 2014-03-04 08:42 - 00494592 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsapi.dll
2014-04-26 12:12 - 2014-03-04 08:42 - 00186880 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsrslvr.dll
2014-04-26 12:12 - 2014-03-04 08:39 - 00254976 _____ (Microsoft Corporation) C:\WINDOWS\system32\pdh.dll
2014-04-26 12:12 - 2014-03-04 08:32 - 00356864 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidprov.dll
2014-04-26 12:12 - 2014-03-04 08:30 - 00069120 _____ (Microsoft Corporation) C:\WINDOWS\system32\RMapi.dll
2014-04-26 12:12 - 2014-03-04 08:26 - 00184832 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll
2014-04-26 12:12 - 2014-03-04 08:05 - 00402432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.Printing.dll
2014-04-26 12:12 - 2014-03-04 07:54 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredentialMigrationHandler.dll
2014-04-26 12:12 - 2014-03-04 07:52 - 00605184 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasapi32.dll
2014-04-26 12:12 - 2014-02-06 23:26 - 00313344 _____ (Microsoft Corporation) C:\WINDOWS\system32\clusapi.dll
2014-04-26 12:12 - 2013-12-24 01:28 - 00262656 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationApi.dll
2014-04-26 12:09 - 2014-02-22 12:44 - 02178048 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2014-04-26 12:09 - 2014-02-22 12:36 - 04254720 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2014-04-26 12:09 - 2014-02-22 11:33 - 11745792 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2014-04-26 12:09 - 2014-02-22 11:33 - 01967104 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2014-04-26 12:09 - 2014-02-22 10:27 - 01143808 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2014-04-26 12:08 - 2014-02-22 16:52 - 01767440 _____ (Microsoft Corporation) C:\WINDOWS\system32\setupapi.dll
2014-04-26 12:08 - 2014-02-22 16:51 - 01063976 _____ (Microsoft Corporation) C:\WINDOWS\system32\Taskmgr.exe
2014-04-26 12:08 - 2014-02-22 16:42 - 01370696 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll
2014-04-26 12:08 - 2014-02-22 16:42 - 01017936 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll
2014-04-26 12:08 - 2014-02-22 16:42 - 00422968 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll
2014-04-26 12:08 - 2014-02-22 16:42 - 00410568 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFault.exe
2014-04-26 12:08 - 2014-02-22 16:42 - 00369288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Faultrep.dll
2014-04-26 12:08 - 2014-02-22 16:40 - 00333656 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spaceport.sys
2014-04-26 12:08 - 2014-02-22 16:38 - 01374384 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll
2014-04-26 12:08 - 2014-02-22 16:38 - 01129064 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll
2014-04-26 12:08 - 2014-02-22 16:38 - 01077944 _____ (Microsoft Corporation) C:\WINDOWS\system32\webservices.dll
2014-04-26 12:08 - 2014-02-22 16:26 - 00502616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fvevol.sys
2014-04-26 12:08 - 2014-02-22 16:26 - 00198488 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdyboost.sys
2014-04-26 12:08 - 2014-02-22 16:25 - 02871672 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSService.dll
2014-04-26 12:08 - 2014-02-22 16:25 - 02410496 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMVDECOD.DLL
2014-04-26 12:08 - 2014-02-22 16:18 - 01914616 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcMon.exe
2014-04-26 12:08 - 2014-02-22 16:18 - 00477744 _____ (Microsoft Corporation) C:\WINDOWS\system32\SHCore.dll
2014-04-26 12:08 - 2014-02-22 16:18 - 00419928 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.appcore.dll
2014-04-26 12:08 - 2014-02-22 16:08 - 01451392 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2014-04-26 12:08 - 2014-02-22 16:08 - 01389960 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2014-04-26 12:08 - 2014-02-22 16:08 - 01280960 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2014-04-26 12:08 - 2014-02-22 16:08 - 01270608 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2014-04-26 12:08 - 2014-02-22 16:08 - 01167856 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe
2014-04-26 12:08 - 2014-02-22 16:08 - 00431960 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\acpi.sys
2014-04-26 12:08 - 2014-02-22 16:08 - 00337752 _____ (Microsoft Corporation) C:\WINDOWS\system32\halmacpi.dll
2014-04-26 12:08 - 2014-02-22 16:08 - 00337752 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll
2014-04-26 12:08 - 2014-02-22 16:08 - 00265048 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\volsnap.sys
2014-04-26 12:08 - 2014-02-22 16:04 - 02144984 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2014-04-26 12:08 - 2014-02-22 16:04 - 01206000 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll
2014-04-26 12:08 - 2014-02-22 16:04 - 01155392 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpmde.dll
2014-04-26 12:08 - 2014-02-22 16:04 - 01011280 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetsrc.dll
2014-04-26 12:08 - 2014-02-22 16:04 - 00869720 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys
2014-04-26 12:08 - 2014-02-22 16:04 - 00707048 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll
2014-04-26 12:08 - 2014-02-22 16:04 - 00650736 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetcore.dll
2014-04-26 12:08 - 2014-02-22 16:04 - 00518552 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf.dll
2014-04-26 12:08 - 2014-02-22 16:04 - 00296448 _____ (Microsoft Corporation) C:\WINDOWS\system32\MMDevAPI.dll
2014-04-26 12:08 - 2014-02-22 13:28 - 02428928 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExplorerFrame.dll
2014-04-26 12:08 - 2014-02-22 13:23 - 00903168 _____ (Microsoft Corporation) C:\WINDOWS\system32\uxtheme.dll
2014-04-26 12:08 - 2014-02-22 13:22 - 03499008 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2014-04-26 12:08 - 2014-02-22 13:22 - 00219648 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ks.sys
2014-04-26 12:08 - 2014-02-22 13:17 - 00630272 _____ (Microsoft Corporation) C:\WINDOWS\system32\OobeFldr.dll
2014-04-26 12:08 - 2014-02-22 13:16 - 00617472 _____ (Microsoft Corporation) C:\WINDOWS\system32\apphelp.dll
2014-04-26 12:08 - 2014-02-22 13:16 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\WofUtil.dll
2014-04-26 12:08 - 2014-02-22 12:57 - 00156672 _____ (Microsoft Corporation) C:\WINDOWS\system32\scrrun.dll
2014-04-26 12:08 - 2014-02-22 12:40 - 00479744 _____ (Microsoft Corporation) C:\WINDOWS\system32\recimg.exe
2014-04-26 12:08 - 2014-02-22 12:40 - 00138752 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWWIN.EXE
2014-04-26 12:08 - 2014-02-22 12:33 - 00592896 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2014-04-26 12:08 - 2014-02-22 12:18 - 00488448 _____ (Microsoft Corporation) C:\WINDOWS\system32\qedit.dll
2014-04-26 12:08 - 2014-02-22 12:14 - 00575488 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2014-04-26 12:08 - 2014-02-22 12:09 - 00027648 _____ (Microsoft Corporation) C:\WINDOWS\system32\dfp.exe
2014-04-26 12:08 - 2014-02-22 12:02 - 08946688 _____ (Microsoft Corporation) C:\WINDOWS\system32\glcndFilter.dll
2014-04-26 12:08 - 2014-02-22 12:02 - 00282112 _____ (Microsoft Corporation) C:\WINDOWS\system32\DfpCommon.dll
2014-04-26 12:08 - 2014-02-22 12:01 - 00367616 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssph.dll
2014-04-26 12:08 - 2014-02-22 11:52 - 00926720 _____ (Microsoft Corporation) C:\WINDOWS\system32\RecoveryDrive.exe
2014-04-26 12:08 - 2014-02-22 11:46 - 00528896 _____ (Microsoft Corporation) C:\WINDOWS\system32\comdlg32.dll
2014-04-26 12:08 - 2014-02-22 11:40 - 00524288 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2014-04-26 12:08 - 2014-02-22 11:39 - 00854528 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll
2014-04-26 12:08 - 2014-02-22 11:37 - 02220032 _____ (Microsoft Corporation) C:\WINDOWS\system32\Wpc.dll
2014-04-26 12:08 - 2014-02-22 11:36 - 01392640 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMPDMC.exe
2014-04-26 12:08 - 2014-02-22 11:33 - 01882624 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebSync.dll
2014-04-26 12:08 - 2014-02-22 11:32 - 01162752 _____ (Microsoft Corporation) C:\WINDOWS\system32\usercpl.dll
2014-04-26 12:08 - 2014-02-22 11:28 - 02643456 _____ (Microsoft Corporation) C:\WINDOWS\system32\tquery.dll
2014-04-26 12:08 - 2014-02-22 11:26 - 00792576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Globalization.dll
2014-04-26 12:08 - 2014-02-22 11:24 - 00604672 _____ (Microsoft Corporation) C:\WINDOWS\system32\samsrv.dll
2014-04-26 12:08 - 2014-02-22 11:23 - 00344576 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll
2014-04-26 12:08 - 2014-02-22 11:20 - 00428032 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimserv.exe
2014-04-26 12:08 - 2014-02-22 11:16 - 11776000 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmp.dll
2014-04-26 12:08 - 2014-02-22 11:16 - 00593408 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcss.dll
2014-04-26 12:08 - 2014-02-22 11:14 - 00892416 _____ (Microsoft Corporation) C:\WINDOWS\system32\sysmain.dll
2014-04-26 12:08 - 2014-02-22 11:14 - 00034816 _____ (Microsoft Corporation) C:\WINDOWS\system32\WofTasks.dll
2014-04-26 12:08 - 2014-02-22 11:10 - 00300032 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmsvc.dll
2014-04-26 12:08 - 2014-02-22 11:08 - 00207872 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll
2014-04-26 12:08 - 2014-02-22 11:07 - 01203200 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidsvc.dll
2014-04-26 12:08 - 2014-02-22 11:07 - 00551424 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimgapi.dll
2014-04-26 12:08 - 2014-02-22 11:06 - 00434176 _____ (Microsoft Corporation) C:\WINDOWS\system32\msTextPrediction.dll
2014-04-26 12:08 - 2014-02-22 11:04 - 01029120 _____ (Microsoft Corporation) C:\WINDOWS\system32\mispace.dll
2014-04-26 12:08 - 2014-02-22 11:00 - 01341440 _____ (Microsoft Corporation) C:\WINDOWS\system32\dui70.dll
2014-04-26 12:08 - 2014-02-22 11:00 - 00418304 _____ (Microsoft Corporation) C:\WINDOWS\system32\StructuredQuery.dll
2014-04-26 12:08 - 2014-02-22 10:59 - 01403392 _____ (Microsoft Corporation) C:\WINDOWS\system32\storagewmi.dll
2014-04-26 12:08 - 2014-02-22 10:59 - 00553472 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.OnlineId.dll
2014-04-26 12:08 - 2014-02-22 10:58 - 00479232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpncore.dll
2014-04-26 12:08 - 2014-02-22 10:57 - 00829440 _____ (Microsoft Corporation) C:\WINDOWS\system32\perftrack.dll
2014-04-26 12:08 - 2014-02-22 10:56 - 00353280 _____ (Microsoft Corporation) C:\WINDOWS\system32\swprv.dll
2014-04-26 12:08 - 2014-02-22 10:51 - 01258496 _____ (Microsoft Corporation) C:\WINDOWS\system32\RacEngn.dll
2014-04-26 12:08 - 2014-02-22 10:49 - 08874496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
2014-04-26 12:08 - 2014-02-22 10:47 - 00517120 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe
2014-04-26 12:08 - 2014-02-22 10:45 - 00612352 _____ (Microsoft Corporation) C:\WINDOWS\system32\uDWM.dll
2014-04-26 12:08 - 2014-02-22 10:39 - 00556032 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.dll
2014-04-26 12:08 - 2014-02-22 10:37 - 01716736 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssrch.dll
2014-04-26 12:08 - 2014-02-22 10:35 - 00704512 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2014-04-26 12:08 - 2014-02-22 10:32 - 01789440 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2014-04-26 12:08 - 2014-02-22 10:29 - 01631232 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlowUI.dll
2014-04-26 12:08 - 2014-02-22 10:21 - 00600576 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll
2014-04-26 12:08 - 2014-02-22 10:19 - 00698880 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll
2014-04-26 12:08 - 2014-02-22 10:17 - 00459264 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSync.dll
2014-04-26 12:08 - 2014-02-22 10:03 - 01496576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Immersive.dll
2014-04-26 12:08 - 2014-02-22 10:01 - 00978944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Streaming.dll
2014-04-26 12:08 - 2014-02-22 10:00 - 00514560 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe
2014-04-26 12:08 - 2014-02-22 06:35 - 00262335 _____ () C:\WINDOWS\system32\dfpinc.dat
2014-04-26 12:08 - 2014-02-08 03:08 - 00081975 _____ () C:\WINDOWS\system32\systemsf.ebd
2014-04-26 12:08 - 2014-02-02 15:33 - 00230808 _____ (Microsoft Corporation) C:\WINDOWS\system32\wintrust.dll
2014-04-26 12:08 - 2014-01-29 09:44 - 01369736 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecs.dll
2014-04-26 12:08 - 2013-12-10 08:10 - 00406528 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppReadiness.dll
2014-04-26 12:07 - 2014-02-22 16:52 - 00251504 _____ (Microsoft Corporation) C:\WINDOWS\system32\powrprof.dll
2014-04-26 12:07 - 2014-02-22 16:52 - 00171936 _____ (Microsoft Corporation) C:\WINDOWS\system32\systemreset.exe
2014-04-26 12:07 - 2014-02-22 16:52 - 00063592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpfve.sys
2014-04-26 12:07 - 2014-02-22 16:51 - 00491744 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll
2014-04-26 12:07 - 2014-02-22 16:51 - 00140456 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscapi.dll
2014-04-26 12:07 - 2014-02-22 16:51 - 00066624 _____ (Microsoft Corporation) C:\WINDOWS\system32\taskhostex.exe
2014-04-26 12:07 - 2014-02-22 16:51 - 00065056 _____ (Microsoft Corporation) C:\WINDOWS\system32\taskhost.exe
2014-04-26 12:07 - 2014-02-22 16:42 - 00232896 _____ (Microsoft Corporation) C:\WINDOWS\system32\sqmapi.dll
2014-04-26 12:07 - 2014-02-22 16:42 - 00146672 _____ (Microsoft Corporation) C:\WINDOWS\system32\imm32.dll
2014-04-26 12:07 - 2014-02-22 16:42 - 00137344 _____ (Microsoft Corporation) C:\WINDOWS\system32\wermgr.exe
2014-04-26 12:07 - 2014-02-22 16:42 - 00098072 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmapi.dll
2014-04-26 12:07 - 2014-02-22 16:41 - 00033056 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFaultSecure.exe
2014-04-26 12:07 - 2014-02-22 16:40 - 00311128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storport.sys
2014-04-26 12:07 - 2014-02-22 16:40 - 00261464 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBXHCI.SYS
2014-04-26 12:07 - 2014-02-22 16:40 - 00211800 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pci.sys
2014-04-26 12:07 - 2014-02-22 16:40 - 00163672 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\UCX01000.SYS
2014-04-26 12:07 - 2014-02-22 16:40 - 00122712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msgpioclx.sys
2014-04-26 12:07 - 2014-02-22 16:40 - 00120664 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBSTOR.SYS
2014-04-26 12:07 - 2014-02-22 16:40 - 00064344 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdstor.sys
2014-04-26 12:07 - 2014-02-22 16:38 - 00506120 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinTypes.dll
2014-04-26 12:07 - 2014-02-22 16:38 - 00336232 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcryptprimitives.dll
2014-04-26 12:07 - 2014-02-22 16:38 - 00197280 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppwinob.dll
2014-04-26 12:07 - 2014-02-22 16:38 - 00136320 _____ (Microsoft Corporation) C:\WINDOWS\system32\AuthHost.exe
2014-04-26 12:07 - 2014-02-22 16:38 - 00125976 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcrypt.dll
2014-04-26 12:07 - 2014-02-22 16:38 - 00107352 _____ (Microsoft Corporation) C:\WINDOWS\system32\consent.exe
2014-04-26 12:07 - 2014-02-22 16:38 - 00089848 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncryptsslp.dll
2014-04-26 12:07 - 2014-02-22 16:26 - 00197976 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdbus.sys
2014-04-26 12:07 - 2014-02-22 16:26 - 00130904 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpsd.sys
2014-04-26 12:07 - 2014-02-22 16:26 - 00063832 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fileinfo.sys
2014-04-26 12:07 - 2014-02-22 16:26 - 00030552 _____ (Microsoft Corporation) C:\WINDOWS\system32\ploptin.dll
2014-04-26 12:07 - 2014-02-22 16:26 - 00025944 _____ (Microsoft Corporation) C:\WINDOWS\system32\SysResetErr.exe
2014-04-26 12:07 - 2014-02-22 16:25 - 00180240 _____ (Microsoft Corporation) C:\WINDOWS\system32\SndVol.exe
2014-04-26 12:07 - 2014-02-22 16:18 - 00759192 _____ (Microsoft Corporation) C:\WINDOWS\system32\iuilp.dll
2014-04-26 12:07 - 2014-02-22 16:18 - 00224664 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlows.exe
2014-04-26 12:07 - 2014-02-22 16:18 - 00089848 _____ (Microsoft Corporation) C:\WINDOWS\system32\RestoreOptIn.exe
2014-04-26 12:07 - 2014-02-22 16:18 - 00046000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wpcfltr.sys
2014-04-26 12:07 - 2014-02-22 16:18 - 00041320 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudNotifications.exe
2014-04-26 12:07 - 2014-02-22 16:18 - 00029912 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserAccountBroker.exe
2014-04-26 12:07 - 2014-02-22 16:12 - 01468872 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMALFXGFXDSP.dll
2014-04-26 12:07 - 2014-02-22 16:11 - 00490136 _____ (Microsoft Corporation) C:\WINDOWS\system32\advapi32.dll
2014-04-26 12:07 - 2014-02-22 16:10 - 00105896 _____ (Microsoft Corporation) C:\WINDOWS\system32\smss.exe
2014-04-26 12:07 - 2014-02-22 16:08 - 00271192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fltMgr.sys
2014-04-26 12:07 - 2014-02-22 16:08 - 00079496 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcd.dll
2014-04-26 12:07 - 2014-02-22 16:04 - 00317584 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvproc.dll
2014-04-26 12:07 - 2014-02-22 16:04 - 00285144 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFCaptureEngine.dll
2014-04-26 12:07 - 2014-02-22 13:28 - 00245248 _____ (Microsoft Corporation) C:\WINDOWS\system32\microsoft-windows-system-events.dll
2014-04-26 12:07 - 2014-02-22 13:28 - 00128512 _____ (Microsoft Corporation) C:\WINDOWS\system32\microsoft-windows-kernel-power-events.dll
2014-04-26 12:07 - 2014-02-22 13:22 - 00097280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\luafv.sys
2014-04-26 12:07 - 2014-02-22 13:22 - 00025600 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BasicRender.sys
2014-04-26 12:07 - 2014-02-22 13:19 - 00205312 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\portcls.sys
2014-04-26 12:07 - 2014-02-22 13:18 - 00640000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\PEAuth.sys
2014-04-26 12:07 - 2014-02-22 13:16 - 00012288 _____ (Microsoft Corporation) C:\WINDOWS\system32\clrhost.dll
2014-04-26 12:07 - 2014-02-22 13:15 - 00088576 _____ (Microsoft Corporation) C:\WINDOWS\system32\appinfo.dll
2014-04-26 12:07 - 2014-02-22 13:11 - 00160768 _____ (Microsoft Corporation) C:\WINDOWS\system32\aelupsvc.dll
2014-04-26 12:07 - 2014-02-22 13:06 - 00148992 _____ (Microsoft Corporation) C:\WINDOWS\system32\slc.dll
2014-04-26 12:07 - 2014-02-22 13:05 - 00095232 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppc.dll
2014-04-26 12:07 - 2014-02-22 13:01 - 00112640 _____ (Microsoft Corporation) C:\WINDOWS\system32\fsutil.exe
2014-04-26 12:07 - 2014-02-22 12:58 - 00455168 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2014-04-26 12:07 - 2014-02-22 12:58 - 00207872 _____ (Microsoft Corporation) C:\WINDOWS\system32\vdsbas.dll
2014-04-26 12:07 - 2014-02-22 12:47 - 00207872 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmdskmgr.dll
2014-04-26 12:07 - 2014-02-22 12:33 - 00402944 _____ (Microsoft Corporation) C:\WINDOWS\system32\zipfldr.dll
2014-04-26 12:07 - 2014-02-22 12:30 - 00213504 _____ (Microsoft Corporation) C:\WINDOWS\system32\cleanmgr.exe
2014-04-26 12:07 - 2014-02-22 12:24 - 00448512 _____ (Microsoft Corporation) C:\WINDOWS\system32\RASMM.dll
2014-04-26 12:07 - 2014-02-22 12:21 - 00104960 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockScreenContent.dll
2014-04-26 12:07 - 2014-02-22 12:21 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\system32\srclient.dll
2014-04-26 12:07 - 2014-02-22 12:17 - 00367616 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtmsft.dll
2014-04-26 12:07 - 2014-02-22 12:16 - 00308224 _____ (Microsoft Corporation) C:\WINDOWS\system32\srchadmin.dll
2014-04-26 12:07 - 2014-02-22 12:16 - 00151040 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmvdsitf.dll
2014-04-26 12:07 - 2014-02-22 12:14 - 02811392 _____ (Microsoft Corporation) C:\WINDOWS\system32\themeui.dll
2014-04-26 12:07 - 2014-02-22 12:14 - 02165760 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncCenter.dll
2014-04-26 12:07 - 2014-02-22 12:13 - 00307200 _____ (Microsoft Corporation) C:\WINDOWS\system32\newdev.dll
2014-04-26 12:07 - 2014-02-22 12:12 - 00552960 _____ (Microsoft Corporation) C:\WINDOWS\system32\cscui.dll
2014-04-26 12:07 - 2014-02-22 12:04 - 00098304 _____ (Microsoft Corporation) C:\WINDOWS\system32\netid.dll
2014-04-26 12:07 - 2014-02-22 12:03 - 00779264 _____ (Microsoft Corporation) C:\WINDOWS\system32\osk.exe
2014-04-26 12:07 - 2014-02-22 12:02 - 00258560 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchProtocolHost.exe
2014-04-26 12:07 - 2014-02-22 12:01 - 00832512 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActionCenter.dll
2014-04-26 12:07 - 2014-02-22 12:01 - 00726528 _____ (Microsoft Corporation) C:\WINDOWS\system32\nettrace.dll
2014-04-26 12:07 - 2014-02-22 12:00 - 00217600 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssphtb.dll
2014-04-26 12:07 - 2014-02-22 11:55 - 00244224 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll
2014-04-26 12:07 - 2014-02-22 11:54 - 00225280 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2014-04-26 12:07 - 2014-02-22 11:52 - 00342016 _____ (Microsoft Corporation) C:\WINDOWS\system32\sharemediacpl.dll
2014-04-26 12:07 - 2014-02-22 11:44 - 00675328 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssvp.dll
2014-04-26 12:07 - 2014-02-22 11:44 - 00316928 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhcfg.dll
2014-04-26 12:07 - 2014-02-22 11:43 - 01294848 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbengine.exe
2014-04-26 12:07 - 2014-02-22 11:43 - 00601088 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsAnytimeUpgradeui.exe
2014-04-26 12:07 - 2014-02-22 11:42 - 00869888 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdclt.exe
2014-04-26 12:07 - 2014-02-22 11:42 - 00333824 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsqmcons.exe
2014-04-26 12:07 - 2014-02-22 11:40 - 02537472 _____ (Microsoft Corporation) C:\WINDOWS\system32\gameux.dll
2014-04-26 12:07 - 2014-02-22 11:40 - 01095680 _____ (Microsoft Corporation) C:\WINDOWS\system32\werconcpl.dll
2014-04-26 12:07 - 2014-02-22 11:39 - 00667136 _____ (Microsoft Corporation) C:\WINDOWS\system32\PurchaseWindowsLicense.dll
2014-04-26 12:07 - 2014-02-22 11:36 - 00835584 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasgcw.dll
2014-04-26 12:07 - 2014-02-22 11:36 - 00391680 _____ (Microsoft Corporation) C:\WINDOWS\system32\WLanConn.dll
2014-04-26 12:07 - 2014-02-22 11:31 - 00242688 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmregistration.dll
2014-04-26 12:07 - 2014-02-22 11:28 - 00176128 _____ (Microsoft Corporation) C:\WINDOWS\system32\authz.dll
2014-04-26 12:07 - 2014-02-22 11:23 - 00103936 _____ (Microsoft Corporation) C:\WINDOWS\system32\psmsrv.dll
2014-04-26 12:07 - 2014-02-22 11:21 - 00459264 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe
2014-04-26 12:07 - 2014-02-22 11:21 - 00145408 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsrv.dll
2014-04-26 12:07 - 2014-02-22 11:20 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\system32\WiFiDisplay.dll
2014-04-26 12:07 - 2014-02-22 11:19 - 00090112 _____ (Microsoft Corporation) C:\WINDOWS\system32\wersvc.dll
2014-04-26 12:07 - 2014-02-22 11:16 - 00291328 _____ (Microsoft Corporation) C:\WINDOWS\system32\conhost.exe
2014-04-26 12:07 - 2014-02-22 11:15 - 00211968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Dism.exe
2014-04-26 12:07 - 2014-02-22 11:14 - 00752640 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdh.dll
2014-04-26 12:07 - 2014-02-22 11:13 - 00348672 _____ (Microsoft Corporation) C:\WINDOWS\system32\energy.dll
2014-04-26 12:07 - 2014-02-22 11:13 - 00113152 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmredir.dll
2014-04-26 12:07 - 2014-02-22 11:12 - 00459776 _____ (Microsoft Corporation) C:\WINDOWS\system32\DismApi.dll
2014-04-26 12:07 - 2014-02-22 11:08 - 00357888 _____ (Microsoft Corporation) C:\WINDOWS\system32\defragsvc.dll
2014-04-26 12:07 - 2014-02-22 11:08 - 00306688 _____ (Microsoft Corporation) C:\WINDOWS\system32\das.dll
2014-04-26 12:07 - 2014-02-22 11:08 - 00155136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.HumanInterfaceDevice.dll
2014-04-26 12:07 - 2014-02-22 11:07 - 00613376 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsm.dll
2014-04-26 12:07 - 2014-02-22 11:07 - 00109568 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscinterop.dll
2014-04-26 12:07 - 2014-02-22 11:06 - 01035264 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll
2014-04-26 12:07 - 2014-02-22 11:03 - 00089600 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmcsp.dll
2014-04-26 12:07 - 2014-02-22 10:56 - 00084480 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwm.exe
2014-04-26 12:07 - 2014-02-22 10:54 - 00137216 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToManager.dll
2014-04-26 12:07 - 2014-02-22 10:54 - 00045568 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxSysprep.dll
2014-04-26 12:07 - 2014-02-22 10:52 - 00969728 _____ (Microsoft Corporation) C:\WINDOWS\system32\VSSVC.exe
2014-04-26 12:07 - 2014-02-22 10:48 - 00506880 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdbui.dll
2014-04-26 12:07 - 2014-02-22 10:45 - 00169472 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSClient.dll
2014-04-26 12:07 - 2014-02-22 10:45 - 00164352 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFilterHost.exe
2014-04-26 12:07 - 2014-02-22 10:45 - 00098304 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscsvc.dll
2014-04-26 12:07 - 2014-02-22 10:43 - 01108480 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanmm.dll
2014-04-26 12:07 - 2014-02-22 10:43 - 00644608 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntshrui.dll
2014-04-26 12:07 - 2014-02-22 10:43 - 00260608 _____ (Microsoft Corporation) C:\WINDOWS\system32\BioCredProv.dll
2014-04-26 12:07 - 2014-02-22 10:43 - 00117760 _____ (Microsoft Corporation) C:\WINDOWS\system32\thumbcache.dll
2014-04-26 12:07 - 2014-02-22 10:42 - 00943104 _____ (Microsoft Corporation) C:\WINDOWS\system32\WlanMM.dll
2014-04-26 12:07 - 2014-02-22 10:42 - 00709120 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctfuimanager.dll
2014-04-26 12:07 - 2014-02-22 10:42 - 00448000 _____ (Microsoft Corporation) C:\WINDOWS\system32\VAN.dll
2014-04-26 12:07 - 2014-02-22 10:42 - 00078848 _____ (Microsoft Corporation) C:\WINDOWS\system32\AltTab.dll
2014-04-26 12:07 - 2014-02-22 10:41 - 03278848 _____ (Microsoft Corporation) C:\WINDOWS\system32\bootux.dll
2014-04-26 12:07 - 2014-02-22 10:41 - 00662528 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2014-04-26 12:07 - 2014-02-22 10:39 - 00356352 _____ (Microsoft Corporation) C:\WINDOWS\system32\taskeng.exe
2014-04-26 12:07 - 2014-02-22 10:38 - 00470016 _____ (Microsoft Corporation) C:\WINDOWS\system32\timedate.cpl
2014-04-26 12:07 - 2014-02-22 10:38 - 00121856 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveShell.dll
2014-04-26 12:07 - 2014-02-22 10:37 - 00658432 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchIndexer.exe
2014-04-26 12:07 - 2014-02-22 10:34 - 00288768 _____ (Microsoft Corporation) C:\WINDOWS\system32\stobject.dll
2014-04-26 12:07 - 2014-02-22 10:33 - 00308224 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhcpl.dll
2014-04-26 12:07 - 2014-02-22 10:29 - 00191488 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputSwitch.dll
2014-04-26 12:07 - 2014-02-22 10:28 - 00557568 _____ (Microsoft Corporation) C:\WINDOWS\system32\pnidui.dll
2014-04-26 12:07 - 2014-02-22 10:25 - 00352256 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanconn.dll
2014-04-26 12:07 - 2014-02-22 10:21 - 00518144 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmIndexer.dll
2014-04-26 12:07 - 2014-02-22 10:20 - 02302976 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpccpl.dll
2014-04-26 12:07 - 2014-02-22 09:56 - 00519680 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepdu.dll
2014-04-26 12:07 - 2014-02-22 09:54 - 00214016 _____ (Microsoft Corporation) C:\WINDOWS\system32\SndVolSSO.dll
2014-04-26 12:07 - 2014-02-08 03:08 - 00024518 _____ () C:\WINDOWS\system32\systemsflm.ebd
2014-04-26 12:07 - 2014-01-31 11:35 - 03085824 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcore.dll
2014-04-26 12:07 - 2014-01-31 11:08 - 00507392 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSDApi.dll
2014-04-26 12:07 - 2014-01-31 11:04 - 00409600 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.Connectivity.dll
2014-04-26 12:07 - 2014-01-29 09:43 - 00411992 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vhdmp.sys
2014-04-26 12:07 - 2014-01-29 09:38 - 00735576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\http.sys
2014-04-26 12:07 - 2014-01-29 08:41 - 00218624 _____ (Microsoft Corporation) C:\WINDOWS\system32\rascustom.dll
2014-04-26 12:07 - 2014-01-29 08:25 - 00197632 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.Vpn.dll
2014-04-26 12:07 - 2014-01-27 19:25 - 00667136 _____ (Microsoft Corporation) C:\WINDOWS\system32\WorkfoldersControl.dll
2014-04-26 12:07 - 2014-01-27 18:47 - 01165312 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpsvc.dll
2014-04-26 12:07 - 2014-01-17 19:04 - 00292864 _____ (Microsoft Corporation) C:\WINDOWS\system32\ninput.dll
2014-04-26 12:07 - 2014-01-08 02:33 - 00552632 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll
2014-04-26 12:07 - 2013-12-04 15:53 - 00473600 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxPackaging.dll
2014-04-26 12:07 - 2013-11-27 10:56 - 00167936 _____ (Microsoft Corporation) C:\WINDOWS\system32\netiohlp.dll
2014-04-26 12:06 - 2014-02-22 16:38 - 00078000 _____ (Microsoft Corporation) C:\WINDOWS\system32\easinvoker.exe
2014-04-26 12:06 - 2014-02-22 13:24 - 00800256 _____ (Microsoft Corporation) C:\WINDOWS\system32\autoconv.exe
2014-04-26 12:06 - 2014-02-22 13:24 - 00792576 _____ (Microsoft Corporation) C:\WINDOWS\system32\autochk.exe
2014-04-26 12:06 - 2014-02-22 13:24 - 00780288 _____ (Microsoft Corporation) C:\WINDOWS\system32\autofmt.exe
2014-04-26 12:06 - 2014-02-22 13:24 - 00109056 _____ (Microsoft Corporation) C:\WINDOWS\system32\SSShim.dll
2014-04-26 12:06 - 2014-02-22 13:24 - 00005632 ____H (Microsoft Corporation) C:\WINDOWS\system32\ext-ms-win-session-winsta-l1-1-0.dll
2014-04-26 12:06 - 2014-02-22 13:22 - 00040448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\watchdog.sys
2014-04-26 12:06 - 2014-02-22 13:16 - 00055808 _____ (Microsoft Corporation) C:\WINDOWS\system32\setbcdlocale.dll
2014-04-26 12:06 - 2014-02-22 13:13 - 00047104 _____ (Microsoft Corporation) C:\WINDOWS\system32\offreg.dll
2014-04-26 12:06 - 2014-02-22 13:12 - 00310272 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcdedit.exe
2014-04-26 12:06 - 2014-02-22 13:11 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\spbcd.dll
2014-04-26 12:06 - 2014-02-22 13:09 - 00024576 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups.dll
2014-04-26 12:06 - 2014-02-22 13:09 - 00023040 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgentc.exe
2014-04-26 12:06 - 2014-02-22 13:09 - 00022528 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll
2014-04-26 12:06 - 2014-02-22 13:07 - 00050176 _____ (Microsoft Corporation) C:\WINDOWS\system32\UXInit.dll
2014-04-26 12:06 - 2014-02-22 13:04 - 00192512 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsAnytimeUpgrade.exe
2014-04-26 12:06 - 2014-02-22 13:01 - 00194048 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActionQueue.dll
2014-04-26 12:06 - 2014-02-22 12:59 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll
2014-04-26 12:06 - 2014-02-22 12:58 - 00136192 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcdboot.exe
2014-04-26 12:06 - 2014-02-22 12:57 - 00165376 _____ (Microsoft Corporation) C:\WINDOWS\system32\scrobj.dll
2014-04-26 12:06 - 2014-02-22 12:56 - 00057344 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhevents.dll
2014-04-26 12:06 - 2014-02-22 12:54 - 00035024 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockScreenContentServer.exe
2014-04-26 12:06 - 2014-02-22 12:53 - 00195584 _____ (Microsoft Corporation) C:\WINDOWS\system32\PkgMgr.exe
2014-04-26 12:06 - 2014-02-22 12:50 - 00136192 _____ (Microsoft Corporation) C:\WINDOWS\system32\diskpart.exe
2014-04-26 12:06 - 2014-02-22 12:47 - 00106496 _____ (Microsoft Corporation) C:\WINDOWS\system32\setupugc.exe
2014-04-26 12:06 - 2014-02-22 12:46 - 00111104 _____ (Microsoft Corporation) C:\WINDOWS\system32\vdsutil.dll
2014-04-26 12:06 - 2014-02-22 12:43 - 00157696 _____ (Microsoft Corporation) C:\WINDOWS\system32\RelPost.exe
2014-04-26 12:06 - 2014-02-22 12:41 - 00122880 _____ (Microsoft Corporation) C:\WINDOWS\system32\dot3mm.dll
2014-04-26 12:06 - 2014-02-22 12:40 - 00304640 _____ (Microsoft Corporation) C:\WINDOWS\system32\wusa.exe
2014-04-26 12:06 - 2014-02-22 12:40 - 00124928 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppnp.dll
2014-04-26 12:06 - 2014-02-22 12:38 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\easwrt.dll
2014-04-26 12:06 - 2014-02-22 12:37 - 00084480 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll
2014-04-26 12:06 - 2014-02-22 12:33 - 00101376 _____ (Microsoft Corporation) C:\WINDOWS\system32\DAMM.dll
2014-04-26 12:06 - 2014-02-22 12:33 - 00062976 _____ (Microsoft Corporation) C:\WINDOWS\system32\BulkOperationHost.exe
2014-04-26 12:06 - 2014-02-22 12:32 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\cscript.exe
2014-04-26 12:06 - 2014-02-22 12:27 - 00625664 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpksetup.exe
2014-04-26 12:06 - 2014-02-22 12:26 - 00059392 _____ (Microsoft Corporation) C:\WINDOWS\system32\wercplsupport.dll
2014-04-26 12:06 - 2014-02-22 12:25 - 00101376 _____ (Microsoft Corporation) C:\WINDOWS\system32\scavengeui.dll
2014-04-26 12:06 - 2014-02-22 12:25 - 00059392 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorageContextHandler.dll
2014-04-26 12:06 - 2014-02-22 12:23 - 00107008 _____ (Microsoft Corporation) C:\WINDOWS\system32\pnpclean.dll
2014-04-26 12:06 - 2014-02-22 12:23 - 00022016 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockScreenContentHost.dll
2014-04-26 12:06 - 2014-02-22 12:21 - 00561664 _____ (Microsoft Corporation) C:\WINDOWS\system32\dfrgui.exe
2014-04-26 12:06 - 2014-02-22 12:21 - 00045568 _____ (Microsoft Corporation) C:\WINDOWS\system32\acppage.dll
2014-04-26 12:06 - 2014-02-22 12:17 - 00570368 _____ (Microsoft Corporation) C:\WINDOWS\system32\vds.exe
2014-04-26 12:06 - 2014-02-22 12:17 - 00159232 _____ (Microsoft Corporation) C:\WINDOWS\system32\werui.dll
2014-04-26 12:06 - 2014-02-22 12:17 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\system32\DAConn.dll
2014-04-26 12:06 - 2014-02-22 12:16 - 00592896 _____ (Microsoft Corporation) C:\WINDOWS\system32\sud.dll
2014-04-26 12:06 - 2014-02-22 12:16 - 00389120 _____ (Microsoft Corporation) C:\WINDOWS\system32\srcore.dll
2014-04-26 12:06 - 2014-02-22 12:15 - 00235008 _____ (Microsoft Corporation) C:\WINDOWS\system32\srrstr.dll
2014-04-26 12:06 - 2014-02-22 12:15 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\system32\SrTasks.exe
2014-04-26 12:06 - 2014-02-22 12:12 - 00352768 _____ (Microsoft Corporation) C:\WINDOWS\system32\spwizeng.dll
2014-04-26 12:06 - 2014-02-22 12:09 - 00097280 _____ (Microsoft Corporation) C:\WINDOWS\system32\migisol.dll
2014-04-26 12:06 - 2014-02-22 12:09 - 00032256 _____ (Microsoft Corporation) C:\WINDOWS\system32\JavaScriptCollectionAgent.dll
2014-04-26 12:06 - 2014-02-22 12:08 - 00244224 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbadmin.exe
2014-04-26 12:06 - 2014-02-22 12:00 - 00159744 _____ (Microsoft Corporation) C:\WINDOWS\system32\aitagent.exe
2014-04-26 12:06 - 2014-02-22 11:59 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2014-04-26 12:06 - 2014-02-22 11:58 - 00090112 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsAnytimeUpgradeResults.exe
2014-04-26 12:06 - 2014-02-22 11:54 - 00245248 _____ (Microsoft Corporation) C:\WINDOWS\system32\rstrui.exe
2014-04-26 12:06 - 2014-02-22 11:48 - 01136128 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscui.cpl
2014-04-26 12:06 - 2014-02-22 11:41 - 00492032 _____ (Microsoft Corporation) C:\WINDOWS\system32\PrintDialogs.dll
2014-04-26 12:06 - 2014-02-22 11:29 - 00062976 _____ (Microsoft Corporation) C:\WINDOWS\system32\samlib.dll
2014-04-26 12:06 - 2014-02-22 11:28 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\system32\deviceassociation.dll
2014-04-26 12:06 - 2014-02-22 11:27 - 00484864 _____ (Microsoft Corporation) C:\WINDOWS\system32\untfs.dll
2014-04-26 12:06 - 2014-02-22 11:26 - 00067584 _____ (Microsoft Corporation) C:\WINDOWS\system32\powercfg.exe
2014-04-26 12:06 - 2014-02-22 11:25 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\system32\winbrand.dll
2014-04-26 12:06 - 2014-02-22 11:23 - 00256000 _____ (Microsoft Corporation) C:\WINDOWS\system32\wincorlib.dll
2014-04-26 12:06 - 2014-02-22 11:23 - 00116736 _____ (Microsoft Corporation) C:\WINDOWS\system32\MicrosoftAccountTokenProvider.dll
2014-04-26 12:06 - 2014-02-22 11:22 - 00270336 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsku.dll
2014-04-26 12:06 - 2014-02-22 11:19 - 00059392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.Sockets.PushEnabledApplication.dll
2014-04-26 12:06 - 2014-02-22 11:17 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\dasHost.exe
2014-04-26 12:06 - 2014-02-22 11:16 - 00017920 _____ (Microsoft Corporation) C:\WINDOWS\system32\sxshared.dll
2014-04-26 12:06 - 2014-02-22 11:15 - 00178176 _____ (Microsoft Corp.) C:\WINDOWS\system32\Defrag.exe
2014-04-26 12:06 - 2014-02-22 11:10 - 00117248 _____ (Microsoft Corporation) C:\WINDOWS\system32\BootMenuUX.dll
2014-04-26 12:06 - 2014-02-22 11:09 - 00208384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2014-04-26 12:06 - 2014-02-22 11:06 - 00251904 _____ (Microsoft Corporation) C:\WINDOWS\system32\MbaeApiPublic.dll
2014-04-26 12:06 - 2014-02-22 11:02 - 00559104 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserLanguagesCpl.dll
2014-04-26 12:06 - 2014-02-22 10:58 - 00544768 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidcli.dll
2014-04-26 12:06 - 2014-02-22 10:55 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\system32\slpts.dll
2014-04-26 12:06 - 2014-02-22 10:49 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapp.exe
2014-04-26 12:06 - 2014-02-22 10:48 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2014-04-26 12:06 - 2014-02-22 10:48 - 00123904 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuwebv.dll
2014-04-26 12:06 - 2014-02-22 10:48 - 00051712 _____ (Microsoft Corporation) C:\WINDOWS\system32\ConfigureExpandedStorage.dll
2014-04-26 12:06 - 2014-02-22 10:48 - 00047104 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssprxy.dll
2014-04-26 12:06 - 2014-02-22 10:48 - 00016384 _____ (Microsoft Corporation) C:\WINDOWS\system32\energytask.dll
2014-04-26 12:06 - 2014-02-22 10:48 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\system32\msshooks.dll
2014-04-26 12:06 - 2014-02-22 10:47 - 00185856 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidcredprov.dll
2014-04-26 12:06 - 2014-02-22 10:47 - 00045056 _____ (Microsoft Corporation) C:\WINDOWS\system32\AepRoam.dll
2014-04-26 12:06 - 2014-02-22 10:44 - 00154624 _____ (Microsoft Corporation) C:\WINDOWS\system32\netplwiz.dll
2014-04-26 12:06 - 2014-02-22 10:43 - 00390144 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.Handlers.dll
2014-04-26 12:06 - 2014-02-22 10:43 - 00080896 _____ (Microsoft Corporation) C:\WINDOWS\system32\wudriver.dll
2014-04-26 12:06 - 2014-02-22 10:40 - 00203776 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToDevice.dll
2014-04-26 12:06 - 2014-02-22 10:39 - 00321536 _____ (Microsoft Corporation) C:\WINDOWS\system32\provsvc.dll
2014-04-26 12:06 - 2014-02-22 10:38 - 00062464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Renewal.dll
2014-04-26 12:06 - 2014-02-22 10:33 - 00130560 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingMonitor.dll
2014-04-26 12:06 - 2014-02-22 10:24 - 00082432 _____ (Microsoft Corporation) C:\WINDOWS\system32\IdCtrls.dll
2014-04-26 12:06 - 2014-02-22 10:23 - 00165888 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnprv.dll
2014-04-26 12:06 - 2014-02-22 10:19 - 00099840 _____ (Microsoft Corporation) C:\WINDOWS\system32\AuthBroker.dll
2014-04-26 12:06 - 2014-02-22 10:17 - 00109568 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudStorageWizard.exe
2014-04-26 12:06 - 2014-02-01 08:00 - 00002255 _____ () C:\WINDOWS\system32\WimBootCompress.ini
2014-04-26 12:06 - 2014-01-31 13:11 - 00144384 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpchttp.dll
2014-04-26 12:06 - 2014-01-31 11:10 - 00080896 _____ (Microsoft Corporation) C:\WINDOWS\system32\dafBth.dll
2014-04-26 12:06 - 2014-01-31 10:24 - 01057792 _____ (Microsoft Corporation) C:\WINDOWS\system32\printui.dll
2014-04-26 12:06 - 2014-01-29 08:25 - 00457216 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasmans.dll
2014-04-26 12:06 - 2014-01-22 07:50 - 00147968 _____ (Microsoft Corporation) C:\WINDOWS\system32\deviceaccess.dll
2014-04-26 12:06 - 2013-12-04 16:19 - 00439808 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Bluetooth.dll
2014-04-26 12:06 - 2013-11-27 11:20 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\finger.exe
2014-04-26 12:06 - 2013-11-23 10:37 - 00036696 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\intelpep.sys
2014-04-26 12:06 - 2013-11-08 05:47 - 00370176 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv
2014-04-26 12:05 - 2014-02-22 13:25 - 00027648 _____ (Microsoft Corporation) C:\WINDOWS\system32\f3ahvoas.dll
2014-04-26 12:05 - 2014-02-22 13:25 - 00008192 ____H (Microsoft Corporation) C:\WINDOWS\system32\ext-ms-win-ntuser-private-l1-1-1.dll
2014-04-26 12:05 - 2014-02-22 13:25 - 00003584 ____H (Microsoft Corporation) C:\WINDOWS\system32\ext-ms-win-ntuser-private-l1-1-0.dll
2014-04-26 12:05 - 2014-02-22 13:24 - 00003584 ____H (Microsoft Corporation) C:\WINDOWS\system32\ext-ms-win-networking-wcmapi-l1-1-0.dll
2014-04-26 12:05 - 2014-02-22 13:24 - 00003584 ____H (Microsoft Corporation) C:\WINDOWS\system32\ext-ms-win-kernel32-package-l1-1-1.dll
2014-04-26 12:05 - 2014-02-22 13:23 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\system32\workerdd.dll
2014-04-26 12:05 - 2014-02-22 12:59 - 00163328 _____ (Microsoft Corporation) C:\WINDOWS\system32\ocsetapi.dll
2014-04-26 12:05 - 2014-02-22 12:50 - 00181248 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhengine.dll
2014-04-26 12:05 - 2014-02-22 12:31 - 00438784 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2014-04-26 12:05 - 2014-02-22 12:03 - 02544128 _____ (Microsoft Corporation) C:\WINDOWS\system32\themecpl.dll
2014-04-26 12:05 - 2014-02-22 11:59 - 00313856 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2014-04-26 12:05 - 2014-02-22 11:53 - 00127488 _____ (Microsoft Corporation) C:\WINDOWS\system32\occache.dll
2014-04-26 12:05 - 2014-02-22 11:27 - 00202240 _____ (Microsoft Corporation) C:\WINDOWS\system32\GlobCollationHost.dll
2014-04-26 12:05 - 2014-02-22 11:26 - 00047104 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveskybackup.dll
2014-04-26 12:05 - 2014-02-22 11:21 - 00314368 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbiosrvc.dll
2014-04-26 12:05 - 2014-02-22 11:19 - 00146944 _____ (Microsoft Corporation) C:\WINDOWS\system32\korwbrkr.dll
2014-04-26 12:05 - 2014-02-22 10:50 - 00096768 _____ (Microsoft Corporation) C:\WINDOWS\system32\winbici.dll
2014-04-26 12:05 - 2014-02-22 10:48 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\dataclen.dll
2014-04-26 12:05 - 2014-02-22 10:39 - 00193024 _____ (Microsoft Corporation) C:\WINDOWS\system32\bthprops.cpl
2014-04-26 12:05 - 2014-02-22 10:20 - 00027648 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncPolicy.dll
2014-04-26 12:05 - 2014-02-22 06:46 - 00002440 ___RS () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FileManager.lnk
2014-04-26 12:05 - 2014-02-22 06:38 - 00000369 _____ () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk
2014-04-26 12:05 - 2014-02-22 06:38 - 00000369 _____ () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk
2014-04-26 12:05 - 2014-02-22 06:38 - 00000369 _____ () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk
2014-04-26 12:05 - 2014-02-22 06:38 - 00000369 _____ () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk
2014-04-26 12:05 - 2014-02-08 03:08 - 00100197 _____ () C:\WINDOWS\system32\RacRules.xml
2014-04-26 12:05 - 2014-02-01 08:00 - 00011109 _____ () C:\WINDOWS\system32\connectedsearch-results.searchconnector-ms
2014-04-26 12:05 - 2014-02-01 08:00 - 00007762 _____ () C:\WINDOWS\system32\connectedsearch-suggestions.searchconnector-ms
2014-04-26 12:05 - 2014-02-01 08:00 - 00007130 _____ () C:\WINDOWS\system32\connectedsearch-zeroinput.searchconnector-ms
2014-04-26 12:05 - 2014-01-27 13:52 - 00050053 _____ () C:\WINDOWS\system32\srms.dat
2014-04-26 11:36 - 2014-04-09 12:54 - 00049544 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2014-04-26 11:36 - 2014-04-09 05:21 - 00307200 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUSettingsProvider.dll
2014-04-26 11:36 - 2014-04-09 05:21 - 00159744 _____ (Microsoft Corporation) C:\WINDOWS\system32\storewuauth.dll
2014-04-26 11:36 - 2014-04-09 05:07 - 01634304 _____ (Microsoft Corporation) C:\WINDOWS\system32\wucltux.dll
2014-04-26 11:36 - 2014-04-09 05:05 - 02767360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2014-04-25 22:52 - 2014-04-25 22:52 - 00112128 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieUnatt.exe
2014-04-25 22:52 - 2014-04-25 22:52 - 00108032 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollector.exe
2014-04-25 22:52 - 2014-04-25 22:52 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwproxystub.dll
2014-04-25 22:52 - 2014-04-25 22:52 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll
2014-04-25 22:52 - 2014-04-25 22:52 - 00004096 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollectorres.dll
2014-04-25 22:51 - 2014-04-25 22:51 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll
2014-04-24 19:59 - 2014-04-24 20:00 - 00013312 _____ () C:\Users\Tobias YYYY\Downloads\Wertentwicklung-26111385.xls
2014-04-24 19:46 - 2014-04-24 19:46 - 00164864 _____ (Microsoft Corporation) C:\WINDOWS\system32\msrating.dll
2014-04-22 12:10 - 2014-04-22 12:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GeoGebra 4.4
2014-04-22 12:09 - 2014-04-22 12:10 - 00000000 ____D () C:\Program Files\GeoGebra 4.4
2014-04-22 12:06 - 2014-04-22 12:06 - 00008405 _____ () C:\Users\Tobias YYYY\Downloads\geogebra.ggb
2014-04-22 11:38 - 2014-04-22 11:38 - 41904816 _____ (International GeoGebra Institute) C:\Users\Tobias YYYY\Downloads\GeoGebra-Windows-Installer-4-4-29-0.exe
2014-04-22 11:37 - 2014-05-01 10:27 - 00000000 ____D () C:\Users\Tobias YYYY\AppData\Roaming\megaglest
2014-04-22 11:37 - 2014-04-22 11:37 - 00000000 ____D () C:\Users\Tobias YYYY\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MegaGlest
2014-04-22 11:37 - 2014-04-22 11:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MegaGlest
2014-04-22 11:34 - 2014-04-22 11:37 - 00000000 ____D () C:\Program Files\MegaGlest
2014-04-22 11:28 - 2014-04-22 11:30 - 255309153 _____ () C:\Users\Tobias YYYY\Downloads\MegaGlest-Installer-3.9.1_i386_win32.exe
2014-04-19 18:43 - 2014-04-19 18:44 - 00000000 ____D () C:\Users\Tobias YYYY\Desktop\Kreysing, Anna Lena
2014-04-15 16:29 - 2014-04-15 16:29 - 00741888 _____ () C:\Users\Tobias YYYY\Downloads\Tarif_Rechner_03-2014.xls
2014-04-15 16:25 - 2014-04-15 16:32 - 269951012 _____ () C:\Users\Tobias YYYY\Downloads\SetupGenTarif_01_2014_480.exe
2014-04-15 14:42 - 2014-04-15 14:42 - 00000141 _____ () C:\Users\Tobias YYYY\Downloads\sky_drive_off.reg
2014-04-14 11:07 - 2014-04-14 11:07 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2014-04-12 08:09 - 2014-04-12 08:09 - 16204160 _____ (Geek Software GmbH ) C:\Users\Tobias YYYY\Downloads\pdf24-creator-6.3.2.exe
2014-04-09 18:53 - 2014-04-09 18:53 - 00377856 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnet.dll
2014-04-09 18:53 - 2014-04-09 18:53 - 00214016 _____ (Microsoft Corporation) C:\WINDOWS\system32\dplayx.dll
2014-04-09 18:53 - 2014-04-09 18:53 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnathlp.dll
2014-04-09 18:53 - 2014-04-09 18:53 - 00045056 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpwsockx.dll
2014-04-09 18:53 - 2014-04-09 18:53 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnsvr.exe
2014-04-09 18:53 - 2014-04-09 18:53 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\system32\dplaysvr.exe
2014-04-09 18:53 - 2014-04-09 18:53 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpmodemx.dll
2014-04-09 18:53 - 2014-04-09 18:53 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnhupnp.dll
2014-04-09 18:53 - 2014-04-09 18:53 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnhpast.dll
2014-04-09 18:52 - 2014-04-09 18:52 - 00000000 ____D () C:\Users\Tobias YYYY\Documents\Fireglow Games
2014-04-09 18:47 - 2014-04-09 18:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GameTop.com
2014-04-09 18:42 - 2014-04-09 18:45 - 180394690 _____ (Media Contact LLC ) C:\Users\Tobias YYYY\Downloads\SS_Iwojima.exe
2014-04-09 18:38 - 2014-04-10 11:31 - 00000000 ____D () C:\Users\Tobias YYYY\AppData\Roaming\arkana-fts
2014-04-09 18:38 - 2014-04-09 18:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Arkana-FTS 0.0.4
2014-04-09 18:36 - 2014-04-09 18:37 - 41323935 _____ () C:\Users\Tobias YYYY\Downloads\Arkana-FTS-0.0.4-Setup.exe
2014-04-09 18:32 - 2014-04-09 18:33 - 142457013 _____ () C:\Users\Tobias YYYY\Downloads\unknown-horizons-2013.3_win32 (1).exe
2014-04-09 18:32 - 2014-04-09 18:32 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Glest_3.2.2
2014-04-09 18:32 - 2014-04-09 18:32 - 00000000 ____D () C:\Program Files\Glest_3.2.2
2014-04-09 18:29 - 2014-04-09 18:30 - 55968880 _____ (Glest Team ) C:\Users\Tobias YYYY\Downloads\glest_3.2.2.exe

==================== One Month Modified Files and Folders =======

2014-05-04 15:37 - 2014-05-04 15:36 - 00021965 _____ () C:\Users\Tobias YYYY\Downloads\FRST.txt
2014-05-04 15:36 - 2014-04-27 15:17 - 00000000 ____D () C:\FRST
2014-05-04 15:35 - 2014-05-04 15:35 - 01050624 _____ (Farbar) C:\Users\Tobias YYYY\Downloads\FRST.exe
2014-05-04 15:31 - 2013-08-22 08:13 - 00262144 ___SH () C:\WINDOWS\system32\config\ELAM
2014-05-04 15:31 - 2013-08-06 20:16 - 00000000 ____D () C:\Users\Tobias YYYY\AppData\Roaming\Dropbox
2014-05-04 15:30 - 2014-04-27 17:25 - 00555603 _____ () C:\WINDOWS\WindowsUpdate.log
2014-05-04 15:29 - 2014-05-04 15:29 - 00001511 _____ () C:\Users\Tobias YYYY\Desktop\JRT.txt
2014-05-04 15:28 - 2013-08-01 08:19 - 00000000 ___RD () C:\Users\Tobias YYYY\Dropbox
2014-05-04 15:27 - 2013-11-30 19:19 - 00000000 ___RD () C:\Users\Tobias YYYY\YYYY Tobias
2014-05-04 15:27 - 2013-11-30 12:05 - 00065536 _____ () C:\WINDOWS\system32\Ikeext.etl
2014-05-04 15:27 - 2013-08-22 09:23 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2014-05-04 15:27 - 2013-08-05 09:21 - 00001124 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2014-05-04 15:26 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\tracing
2014-05-04 15:26 - 2013-08-22 08:13 - 00262144 ___SH () C:\WINDOWS\system32\config\BBI
2014-05-04 15:24 - 2014-05-04 15:24 - 01016261 _____ (Thisisu) C:\Users\Tobias YYYY\Downloads\JRT.exe
2014-05-04 15:24 - 2014-05-04 15:24 - 00000000 ____D () C:\WINDOWS\ERUNT
2014-05-04 15:16 - 2014-05-04 15:16 - 00000310 _____ () C:\WINDOWS\PFRO.log
2014-05-04 15:13 - 2014-05-04 15:10 - 00000000 ____D () C:\AdwCleaner
2014-05-04 15:09 - 2014-05-04 15:09 - 01310621 _____ () C:\Users\Tobias YYYY\Downloads\adwcleaner.exe
2014-05-04 15:05 - 2014-03-19 16:25 - 00000000 ____D () C:\ProgramData\ProductData
2014-05-01 23:00 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\sru
2014-05-01 22:55 - 2013-09-12 20:19 - 00001168 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-3608396222-1875968445-4039553499-1001UA.job
2014-05-01 22:53 - 2013-08-05 09:21 - 00001128 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2014-05-01 22:42 - 2013-08-05 20:22 - 00000884 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2014-05-01 20:05 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\AppReadiness
2014-05-01 10:27 - 2014-04-22 11:37 - 00000000 ____D () C:\Users\Tobias YYYY\AppData\Roaming\megaglest
2014-04-30 18:55 - 2013-09-12 20:19 - 00001116 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-3608396222-1875968445-4039553499-1001Core.job
2014-04-30 18:32 - 2014-04-30 18:32 - 00004835 _____ () C:\Users\Tobias YYYY\Desktop\Letzte Suche.csv
2014-04-30 18:31 - 2014-03-19 16:27 - 00000268 _____ () C:\WINDOWS\Tasks\Driver Booster SkipUAC (Tobias YYYY).job
2014-04-30 16:20 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\Microsoft.NET
2014-04-29 20:47 - 2014-03-08 09:33 - 00000000 ____D () C:\Users\Tobias YYYY\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-04-29 20:45 - 2013-09-30 06:08 - 01776918 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2014-04-29 13:37 - 2013-08-13 23:09 - 00000000 ____D () C:\Users\Tobias YYYY\.freemind
2014-04-29 13:36 - 2014-04-29 13:36 - 00000000 ____D () C:\Users\Tobias YYYY\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Synology
2014-04-29 13:36 - 2013-11-30 19:23 - 00000000 ____D () C:\Users\Tobias YYYY\AppData\Local\CloudStation
2014-04-27 19:16 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\rescache
2014-04-27 18:08 - 2014-04-27 18:05 - 84638145 _____ () C:\Users\Tobias YYYY\Downloads\Thrift Shop Tutorial in Slowmo.mp4
2014-04-27 17:54 - 2014-04-27 17:53 - 17762999 _____ () C:\Users\Tobias YYYY\Downloads\'Thrift Shop' Macklemore choreography by Jasmine Meakin (Mega Jam).mp4
2014-04-27 15:40 - 2014-04-27 15:40 - 00707006 _____ () C:\Users\Tobias YYYY\Downloads\delfix.exe
2014-04-26 22:44 - 2014-02-18 17:50 - 00000000 ___RD () C:\Users\Tobias YYYY\SkyDrive
2014-04-26 22:41 - 2013-08-22 09:22 - 00489272 _____ () C:\WINDOWS\system32\FNTCACHE.DAT
2014-04-26 17:52 - 2013-09-30 05:47 - 00000000 ____D () C:\WINDOWS\system32\Drivers\de-DE
2014-04-26 17:52 - 2013-09-30 05:47 - 00000000 ____D () C:\WINDOWS\de-DE
2014-04-26 17:52 - 2013-08-22 10:17 - 00000000 ___RD () C:\WINDOWS\ToastData
2014-04-26 17:52 - 2013-08-22 10:17 - 00000000 ___RD () C:\WINDOWS\ImmersiveControlPanel
2014-04-26 17:52 - 2013-08-22 10:17 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-04-26 17:52 - 2013-08-22 10:17 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-04-26 17:52 - 2013-08-22 10:17 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-04-26 17:52 - 2013-08-22 10:17 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-04-26 17:52 - 2013-08-22 10:17 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools
2014-04-26 17:52 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\WinStore
2014-04-26 17:52 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\zh-TW
2014-04-26 17:52 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\zh-HK
2014-04-26 17:52 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\zh-CN
2014-04-26 17:52 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\uk-UA
2014-04-26 17:52 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\tr-TR
2014-04-26 17:52 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\th-TH
2014-04-26 17:52 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\SystemResetPlatform
2014-04-26 17:52 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\sv-SE
2014-04-26 17:52 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\sr-Latn-RS
2014-04-26 17:52 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\sr-Latn-CS
2014-04-26 17:52 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\sl-SI
2014-04-26 17:52 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\sk-SK
2014-04-26 17:52 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\ru-RU
2014-04-26 17:52 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\ro-RO
2014-04-26 17:52 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\pt-PT
2014-04-26 17:52 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\pt-BR
2014-04-26 17:52 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\pl-PL
2014-04-26 17:52 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\nl-NL
2014-04-26 17:52 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\nb-NO
2014-04-26 17:52 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\lv-LV
2014-04-26 17:52 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\lt-LT
2014-04-26 17:52 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\ko-KR
2014-04-26 17:52 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\ja-JP
2014-04-26 17:52 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\it-IT
2014-04-26 17:52 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\hu-HU
2014-04-26 17:52 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\hr-HR
2014-04-26 17:52 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\he-IL
2014-04-26 17:52 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\fr-FR
2014-04-26 17:52 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\fi-FI
2014-04-26 17:52 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\et-EE
2014-04-26 17:52 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\en-GB
2014-04-26 17:52 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\el-GR
2014-04-26 17:52 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\de-DE
2014-04-26 17:52 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\bg-BG
2014-04-26 17:52 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\ar-SA
2014-04-26 17:52 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\MediaViewer
2014-04-26 17:52 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\FileManager
2014-04-26 17:52 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\Camera
2014-04-26 17:52 - 2013-08-22 10:17 - 00000000 ____D () C:\Program Files\Windows Portable Devices
2014-04-26 17:52 - 2013-08-22 10:17 - 00000000 ____D () C:\Program Files\Windows Multimedia Platform
2014-04-25 22:52 - 2014-04-25 22:52 - 00112128 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieUnatt.exe
2014-04-25 22:52 - 2014-04-25 22:52 - 00108032 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollector.exe
2014-04-25 22:52 - 2014-04-25 22:52 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwproxystub.dll
2014-04-25 22:52 - 2014-04-25 22:52 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll
2014-04-25 22:52 - 2014-04-25 22:52 - 00004096 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollectorres.dll
2014-04-25 22:51 - 2014-04-25 22:51 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll
2014-04-24 20:00 - 2014-04-24 19:59 - 00013312 _____ () C:\Users\Tobias YYYY\Downloads\Wertentwicklung-26111385.xls
2014-04-24 19:46 - 2014-04-24 19:46 - 00164864 _____ (Microsoft Corporation) C:\WINDOWS\system32\msrating.dll
2014-04-23 02:24 - 2013-08-22 10:18 - 00693240 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerApp.exe
2014-04-23 02:24 - 2013-08-22 10:18 - 00105464 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerCPLApp.cpl
2014-04-22 12:41 - 2013-08-05 09:58 - 00000000 ____D () C:\Users\Tobias YYYY\AppData\Roaming\Mozilla
2014-04-22 12:10 - 2014-04-22 12:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GeoGebra 4.4
2014-04-22 12:10 - 2014-04-22 12:09 - 00000000 ____D () C:\Program Files\GeoGebra 4.4
2014-04-22 12:06 - 2014-04-22 12:06 - 00008405 _____ () C:\Users\Tobias YYYY\Downloads\geogebra.ggb
2014-04-22 11:38 - 2014-04-22 11:38 - 41904816 _____ (International GeoGebra Institute) C:\Users\Tobias YYYY\Downloads\GeoGebra-Windows-Installer-4-4-29-0.exe
2014-04-22 11:37 - 2014-04-22 11:37 - 00000000 ____D () C:\Users\Tobias YYYY\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MegaGlest
2014-04-22 11:37 - 2014-04-22 11:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MegaGlest
2014-04-22 11:37 - 2014-04-22 11:34 - 00000000 ____D () C:\Program Files\MegaGlest
2014-04-22 11:30 - 2014-04-22 11:28 - 255309153 _____ () C:\Users\Tobias YYYY\Downloads\MegaGlest-Installer-3.9.1_i386_win32.exe
2014-04-19 18:44 - 2014-04-19 18:43 - 00000000 ____D () C:\Users\Tobias YYYY\Desktop\Kreysing, Anna Lena
2014-04-15 16:32 - 2014-04-15 16:25 - 269951012 _____ () C:\Users\Tobias YYYY\Downloads\SetupGenTarif_01_2014_480.exe
2014-04-15 16:29 - 2014-04-15 16:29 - 00741888 _____ () C:\Users\Tobias YYYY\Downloads\Tarif_Rechner_03-2014.xls
2014-04-15 15:22 - 2013-08-08 19:49 - 00000000 ____D () C:\Users\Tobias YYYY\AppData\Local\Adobe
2014-04-15 14:42 - 2014-04-15 14:42 - 00000141 _____ () C:\Users\Tobias YYYY\Downloads\sky_drive_off.reg
2014-04-15 14:20 - 2014-03-19 16:25 - 00000298 _____ () C:\WINDOWS\Tasks\Uninstaller_SkipUac_Administrator.job
2014-04-15 11:28 - 2013-09-12 19:38 - 00000000 ____D () C:\Users\Tobias YYYY\AppData\Roaming\vlc
2014-04-14 11:08 - 2013-08-11 14:29 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-04-14 11:07 - 2014-04-14 11:07 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2014-04-14 11:07 - 2013-08-15 12:02 - 00000000 ____D () C:\WINDOWS\system32\MRT
2014-04-14 11:04 - 2013-08-06 21:34 - 88028728 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2014-04-12 08:38 - 2014-02-11 19:23 - 00209432 _____ () C:\WINDOWS\RegBootClean.exe
2014-04-12 08:10 - 2013-09-14 18:01 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDF24
2014-04-12 08:10 - 2013-09-14 18:01 - 00000000 ____D () C:\Program Files\PDF24
2014-04-12 08:09 - 2014-04-12 08:09 - 16204160 _____ (Geek Software GmbH ) C:\Users\Tobias YYYY\Downloads\pdf24-creator-6.3.2.exe
2014-04-10 11:31 - 2014-04-09 18:38 - 00000000 ____D () C:\Users\Tobias YYYY\AppData\Roaming\arkana-fts
2014-04-09 18:53 - 2014-04-09 18:53 - 00377856 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnet.dll
2014-04-09 18:53 - 2014-04-09 18:53 - 00214016 _____ (Microsoft Corporation) C:\WINDOWS\system32\dplayx.dll
2014-04-09 18:53 - 2014-04-09 18:53 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnathlp.dll
2014-04-09 18:53 - 2014-04-09 18:53 - 00045056 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpwsockx.dll
2014-04-09 18:53 - 2014-04-09 18:53 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnsvr.exe
2014-04-09 18:53 - 2014-04-09 18:53 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\system32\dplaysvr.exe
2014-04-09 18:53 - 2014-04-09 18:53 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpmodemx.dll
2014-04-09 18:53 - 2014-04-09 18:53 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnhupnp.dll
2014-04-09 18:53 - 2014-04-09 18:53 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnhpast.dll
2014-04-09 18:52 - 2014-04-09 18:52 - 00000000 ____D () C:\Users\Tobias YYYY\Documents\Fireglow Games
2014-04-09 18:47 - 2014-04-09 18:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GameTop.com
2014-04-09 18:45 - 2014-04-09 18:42 - 180394690 _____ (Media Contact LLC ) C:\Users\Tobias YYYY\Downloads\SS_Iwojima.exe
2014-04-09 18:38 - 2014-04-09 18:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Arkana-FTS 0.0.4
2014-04-09 18:37 - 2014-04-09 18:36 - 41323935 _____ () C:\Users\Tobias YYYY\Downloads\Arkana-FTS-0.0.4-Setup.exe
2014-04-09 18:33 - 2014-04-09 18:32 - 142457013 _____ () C:\Users\Tobias YYYY\Downloads\unknown-horizons-2013.3_win32 (1).exe
2014-04-09 18:32 - 2014-04-09 18:32 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Glest_3.2.2
2014-04-09 18:32 - 2014-04-09 18:32 - 00000000 ____D () C:\Program Files\Glest_3.2.2
2014-04-09 18:30 - 2014-04-09 18:29 - 55968880 _____ (Glest Team ) C:\Users\Tobias YYYY\Downloads\glest_3.2.2.exe
2014-04-09 12:54 - 2014-04-26 11:36 - 00049544 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2014-04-09 05:21 - 2014-04-26 11:36 - 00307200 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUSettingsProvider.dll
2014-04-09 05:21 - 2014-04-26 11:36 - 00159744 _____ (Microsoft Corporation) C:\WINDOWS\system32\storewuauth.dll
2014-04-09 05:07 - 2014-04-26 11:36 - 01634304 _____ (Microsoft Corporation) C:\WINDOWS\system32\wucltux.dll
2014-04-09 05:05 - 2014-04-26 11:36 - 02767360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll

Some content of TEMP:
====================
C:\Users\Tobias YYYY\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmp9dmmz4.dll
C:\Users\Tobias YYYY\AppData\Local\Temp\Quarantine.exe
C:\Users\Tobias YYYY\AppData\Local\Temp\Synology-CloudStation-Upgrader-3109.exe
C:\Users\Tobias YYYY\AppData\Local\Temp\vlc-2.1.3-win32.exe


==================== Bamital & volsnap Check =================

C:\WINDOWS\explorer.exe
[2014-04-26 12:13] - [2014-03-04 13:16] - 2088160 ____A (Microsoft Corporation) 119E091B5386379BC5AA598BE9440C75

C:\WINDOWS\system32\winlogon.exe
[2014-04-26 12:07] - [2014-02-22 11:21] - 0459264 ____A (Microsoft Corporation) 70C57DC69D4A7D92D2CAC90C3AD16E6F

C:\WINDOWS\system32\wininit.exe => MD5 is legit
C:\WINDOWS\system32\svchost.exe => MD5 is legit
C:\WINDOWS\system32\services.exe => MD5 is legit
C:\WINDOWS\system32\User32.dll
[2014-04-26 12:08] - [2014-02-22 16:42] - 1370696 ____A (Microsoft Corporation) 43B0EB86B10506AD564E2005A6156D30

C:\WINDOWS\system32\userinit.exe => MD5 is legit
C:\WINDOWS\system32\rpcss.dll
[2014-04-26 12:08] - [2014-02-22 11:16] - 0593408 ____A (Microsoft Corporation) 05C0337538BEECC04FC695808EFF201C

 ATTENTION ======> If the system is having audio adware rpcss.dll is patched. Google the MD5, if the MD5 is unique the file is infected.
C:\WINDOWS\system32\Drivers\volsnap.sys
[2014-04-26 12:08] - [2014-02-22 16:08] - 0265048 ___AC (Microsoft Corporation) 085918BF459BCB835CFC535BE7138539



LastRegBack: 2014-04-30 16:19

==================== End Of Log ============================
         

--- --- ---

--- --- ---

FRST Additions Logfile:

Additional scan result of Farbar Recovery Scan Tool (x86) Version:01-05-2014
Ran by Tobias YYYY at 2014-05-04 15:43:13
Running from C:\Users\Tobias YYYY\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Trend Micro Titanium Maximum Security (Enabled - Up to date) {5D349EF8-873B-C657-917F-F1D93E101A7C}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Trend Micro Titanium Maximum Security (Enabled - Up to date) {E6557F1C-A101-C9D9-ABCF-CAAB459750C1}

==================== Installed Programs ======================

Adobe Flash Player 13 Plugin (HKLM\...\Adobe Flash Player Plugin) (Version: 13.0.0.206 - Adobe Systems Incorporated)
Dell System Detect (HKCU\...\9204f5692a8faf3b) (Version: 5.4.0.4 - Dell)
Driver Booster (HKLM\...\Driver Booster_is1) (Version: 1.3 - IObit)
Dropbox (HKCU\...\Dropbox) (Version: 2.6.31 - Dropbox, Inc.)
Free Screen To Video V 2.0 (HKLM\...\Free Screen To Video_is1) (Version: 2.0.0.0 - Koyote Soft)
Free Screen Video Recorder version 2.5.32.304 (HKLM\...\Free Screen Video Recorder_is1) (Version: 2.5.32.304 - DVDVideoSoft Ltd.)
GeoGebra 4.4 (HKLM\...\GeoGebra 4.4) (Version: 4.4.29.0 - International GeoGebra Institute)
Glest 3.2.2 (HKLM\...\Glest_is1) (Version:  - Glest Team)
Google Chrome (HKCU\...\Google Chrome) (Version: 34.0.1847.131 - Google Inc.)
Google Update Helper (Version: 1.3.23.9 - Google Inc.) Hidden
HanseMerkur ISA Makler (HKLM\...\HanseMerkurISAMA) (Version: 1.19.0 - HanseMerkur Krankenversicherung AG)
HanseMerkur ISA Makler (Version: 1.19.0 - HanseMerkur Krankenversicherung AG) Hidden
HanseMerkur ISA Service Extensions (HKLM\...\{280E91D7-BBA8-42A2-8F45-00FD89E454B0}_is1) (Version: 1.2.6 - Hanse Merkur)
IObit Uninstaller (HKLM\...\IObitUninstall) (Version: 3.2.9.10 - IObit)
Maitre (HKLM\...\Maitre) (Version: 1.16.4.198 - Swiss Life Partner)
MegaGlest v3.9.1 (HKLM\...\MegaGlest) (Version:  - )
Microsoft Office PowerPoint MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Professional Plus 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Mozilla Firefox 28.0 (x86 de) (HKLM\...\Mozilla Firefox 28.0 (x86 de)) (Version: 28.0 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 28.0 - Mozilla)
Nero ControlCenter (Version: 11.0.16700 - Nero AG) Hidden
Nero ControlCenter Help (CHM) (Version: 15.0.00015 - Nero AG) Hidden
Nero Core Components (Version: 11.0.23400 - Nero AG) Hidden
Nero Update (Version: 11.0.13300.42.0 - Nero AG) Hidden
Nero WaveEditor (HKLM\...\{8F7F40B4-8C55-4B92-8C89-16501DAC697F}) (Version: 12.5.00800 - Nero AG)
Nero WaveEditor (Version: 12.0.12000 - Nero AG) Hidden
Nero WaveEditor Help (CHM) (Version: 12.0.7000 - Nero AG) Hidden
PDF24 Creator 6.3.2 (HKLM\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version:  - PDF24.org)
Prerequisite installer (Version: 12.0.0003 - Nero AG) Hidden
Quicken DELUXE 2014 (HKLM\...\{E60036CF-1E46-4DFE-832F-5476574B30FF}) (Version: 21.37.00.0185 - Haufe-Lexware GmbH & Co.KG)
Synology Cloud Station (remove only) (HKCU\...\Synology CloudStation) (Version:  - )
Unity Web Player (HKCU\...\UnityWebPlayer) (Version:  - Unity Technologies ApS)
VCRT for DirectPass x86 (Version: 1.0.0.1000 - Trend Micro, Inc.) Hidden
VLC media player 2.1.3 (HKLM\...\VLC media player) (Version: 2.1.3 - VideoLAN)
VLC Media Player Setup Packages (HKCU\...\VLC Media Player Setup Packages) (Version:  - ) <==== ATTENTION

==================== Restore Points  =========================

27-04-2014 17:08:55 Windows Update

==================== Hosts content: ==========================

2012-07-26 06:17 - 2013-11-12 11:34 - 00450639 ___RA C:\WINDOWS\system32\Drivers\etc\hosts
127.0.0.1	www.007guard.com
127.0.0.1	007guard.com
127.0.0.1	008i.com
127.0.0.1	www.008k.com
127.0.0.1	008k.com
127.0.0.1	www.00hq.com
127.0.0.1	00hq.com
127.0.0.1	010402.com
127.0.0.1	www.032439.com
127.0.0.1	032439.com
127.0.0.1	www.0scan.com
127.0.0.1	0scan.com
127.0.0.1	1000gratisproben.com
127.0.0.1	www.1000gratisproben.com
127.0.0.1	1001namen.com
127.0.0.1	www.1001namen.com
127.0.0.1	100888290cs.com
127.0.0.1	www.100888290cs.com
127.0.0.1	www.100sexlinks.com
127.0.0.1	100sexlinks.com
127.0.0.1	10sek.com
127.0.0.1	www.10sek.com
127.0.0.1	www.1-2005-search.com
127.0.0.1	1-2005-search.com
127.0.0.1	123fporn.info
127.0.0.1	www.123fporn.info
127.0.0.1	123haustiereundmehr.com
127.0.0.1	www.123haustiereundmehr.com
127.0.0.1	123moviedownload.com

There are 1000 more lines.


==================== Scheduled Tasks (whitelisted) =============

Task: {00BC77BF-3352-4FE8-9617-4F1B27BEC19A} - System32\Tasks\Microsoft\Windows\Plug and Play\Plug and Play Cleanup
Task: {17233BE9-87E9-40B0-B003-AE9D2B92CBBE} - System32\Tasks\Microsoft\Windows\SettingSync\BackupTask
Task: {237DC35F-B8C6-4EAD-96DE-812137FAB571} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2013-08-05] (Google Inc.)
Task: {247BD142-0549-4E91-84B0-172C25563718} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join => C:\WINDOWS\System32\AutoWorkplace.exe [2013-08-22] (Microsoft Corporation)
Task: {2BE65564-89D1-4396-A5CC-D7D9283FC4A1} - System32\Tasks\Microsoft\Windows\SkyDrive\Routine Maintenance Task
Task: {392EB017-207C-42BF-A061-F3BE721F456C} - System32\Tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState => Rundll32.exe Windows.Storage.ApplicationData.dll,CleanupTemporaryState
Task: {43A8931A-A6DE-440D-BD04-889AF03C9499} - System32\Tasks\Driver Booster SkipUAC (Tobias YYYY) => C:\Program Files\IObit\Driver Booster\DriverBooster.exe [2014-03-14] (IObit)
Task: {4754B94C-CB5C-411B-9DCF-C7F20BBADF13} - System32\Tasks\Google Updater and Installer => C:\Users\Tobias YYYY\AppData\Local\Google\Update\GoogleUpdate.exe [2013-09-12] (Google Inc.)
Task: {4B7EF56A-8A42-4BD2-BB5C-7C389AC54A37} - System32\Tasks\Microsoft\Windows\AppxDeploymentClient\Pre-staged app cleanup => Rundll32.exe %windir%\system32\AppxDeploymentClient.dll,AppxPreStageCleanupRunTask
Task: {4BDC72A4-BFA1-49B3-AF26-D1367E888C93} - System32\Tasks\Java Update Scheduler => C:\Program Files\Common Files\Java\Java Update\jusched.exe [2013-07-02] (Oracle Corporation)
Task: {4F22E517-9B35-436A-A541-622A73446D29} - System32\Tasks\iolo System Checkup => C:\ProgramData\iolo\scustask.lnk [2013-12-19] ()
Task: {5643926D-0DF4-4676-B941-A5A6FE4EBC66} - System32\Tasks\PCDoctorBackgroundMonitorTask => C:\Program Files\My Dell\uaclauncher.exe [2014-01-31] (PC-Doctor, Inc.)
Task: {5700ACE8-D0AF-4BA7-98B6-1033521A877A} - System32\Tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask => Rundll32.exe sysmain.dll,PfSvWsSwapAssessmentTask
Task: {58C23221-6838-46AE-A939-2F17CB48E578} - System32\Tasks\PCDEventLauncherTask => C:\Program Files\My Dell\sessionchecker.exe [2014-01-31] (PC-Doctor, Inc.)
Task: {5E1AA260-139E-4EE5-B19F-A14D1258B9F4} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2014-04-14] (Microsoft Corporation)
Task: {634C37F1-DE43-484B-93C1-A1C7F38AE869} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-11-21] (Adobe Systems Incorporated)
Task: {6403088B-3CE9-4570-8FB6-56CE450C5E7F} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2013-08-05] (Google Inc.)
Task: {6CB62E5E-1B20-4B77-B251-5F71BBB4E1A5} - System32\Tasks\SystemToolsDailyTest => uaclauncher.exe
Task: {6E84A59B-1863-4B21-8BD8-C9B20FD15484} - System32\Tasks\Microsoft\Windows\Application Experience\StartupAppTask => Rundll32.exe Startupscan.dll,SusRunTask
Task: {712D39A7-44E7-4C94-A32A-465F93031BFF} - System32\Tasks\DivX-Online-Aktualisierungsprogramm => C:\Program Files\DivX\DivX Update\DivXUpdate.exe [2013-08-29] ()
Task: {7C7CF1DA-F461-4850-96B2-ADCA8A67E59C} - System32\Tasks\Microsoft\Windows\WS\License Validation => Rundll32.exe WSClient.dll,WSpTLR licensing
Task: {8B5819AE-7B44-478B-A3D3-8846AF160A8F} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCachePrepopulate
Task: {8C58AFA6-13B7-4500-99CC-3AC7AA362561} - System32\Tasks\Microsoft\Windows\WOF\WIM-Hash-Validation
Task: {92ED6570-4654-4BFA-9A6C-1084C6939C16} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Maintenance Work
Task: {937EA8EF-A71F-47CD-8951-3EDF8146E0CD} - System32\Tasks\Titanium BTC => E:\Programme\Trend Micro\Titanium\plugin\TMDC\TMDC.exe [2013-08-27] (Trend Micro Inc.)
Task: {997C8BBD-710B-4E66-B5BC-CC09575A58D2} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCacheRebalance
Task: {A44563A7-D425-421A-A788-F8B054391F7C} - System32\Tasks\Microsoft\Windows\DiskFootprint\Diagnostics
Task: {A5D45ED3-F524-4574-8F39-527F3729D1E2} - System32\Tasks\Microsoft\Windows\Time Zone\SynchronizeTimeZone => C:\WINDOWS\system32\tzsync.exe [2013-08-22] (Microsoft Corporation)
Task: {B9280CE4-E0AA-410E-A414-C082D45E8F26} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-04-28] (Adobe Systems Incorporated)
Task: {BEBE44E6-26D6-44CC-9A3C-A2ADC15CD42B} - System32\Tasks\Microsoft\Windows\WOF\WIM-Hash-Management
Task: {C0D0F7C4-419F-41B3-90A2-FE79270B828A} - System32\Tasks\Microsoft\Windows\SettingSync\NetworkStateChangeTask
Task: {C4D8F20F-6D3C-426E-89E8-C0F54424DD8F} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3608396222-1875968445-4039553499-1001Core => C:\Users\Tobias YYYY\AppData\Local\Google\Update\GoogleUpdate.exe [2013-09-12] (Google Inc.)
Task: {CC8B8DA2-8A80-409D-9C59-73D7A1FF1628} - System32\Tasks\Microsoft\Windows\DiskCleanup\SilentCleanup => C:\WINDOWS\system32\cleanmgr.exe [2014-02-22] (Microsoft Corporation)
Task: {CF5A1DDC-D14D-4D59-AD49-A19A645B087B} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Logon Synchronization
Task: {DB8D73C5-EC5D-4352-9B74-2F94D9875238} - System32\Tasks\Driver Booster Scan => C:\Program Files\IObit\Driver Booster\Scheduler.exe [2014-03-12] (IObit)
Task: {DC12B3E6-ADCB-417F-99E3-71D15DD8EE97} - System32\Tasks\Uninstaller_SkipUac_Administrator => C:\Program Files\IObit\IObit Uninstaller\IObitUninstaler.exe [2014-03-19] (IObit)
Task: {DCF55BED-B1DF-4ABF-8D85-6542C7007799} - System32\Tasks\Microsoft\Windows\RecoveryEnvironment\VerifyWinRE
Task: {DEF7A50C-2112-4671-A59D-BD99F9122EE0} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3608396222-1875968445-4039553499-1001UA => C:\Users\Tobias YYYY\AppData\Local\Google\Update\GoogleUpdate.exe [2013-09-12] (Google Inc.)
Task: {E4C8774A-2818-45A4-8A6D-11DDF6348886} - System32\Tasks\Microsoft\Windows\SkyDrive\Idle Sync Maintenance Task
Task: {FAB49829-3EE7-4234-BE84-277862F2A57C} - System32\Tasks\Microsoft\Windows\WS\WSRefreshBannedAppsListTask => Rundll32.exe WSClient.dll,RefreshBannedAppsList
Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\Driver Booster SkipUAC (Tobias YYYY).job => C:\Program Files\IObit\Driver Booster\DriverBooster.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-3608396222-1875968445-4039553499-1001Core.job => C:\Users\Tobias YYYY\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-3608396222-1875968445-4039553499-1001UA.job => C:\Users\Tobias YYYY\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\Uninstaller_SkipUac_Administrator.job => C:\Program Files\IObit\IObit Uninstaller\IObitUninstaler.exe

==================== Loaded Modules (whitelisted) =============

2013-12-06 15:14 - 2013-01-16 03:50 - 00039424 _____ () E:\Programme\Trend Micro\AMSP\boost_date_time-vc110-mt-1_49.dll
2013-12-06 15:14 - 2013-04-02 06:25 - 00543744 _____ () E:\Programme\Trend Micro\AMSP\sqlite3.dll
2013-12-06 15:14 - 2013-01-16 03:55 - 00049152 _____ () E:\Programme\Trend Micro\AMSP\boost_thread-vc110-mt-1_49.dll
2013-12-06 15:14 - 2012-12-18 22:04 - 01098240 _____ () E:\Programme\Trend Micro\AMSP\libprotobuf.dll
2013-12-06 15:14 - 2013-01-16 03:50 - 00016896 _____ () E:\Programme\Trend Micro\AMSP\boost_system-vc110-mt-1_49.dll
2013-12-06 15:11 - 2013-07-23 17:28 - 00179872 _____ () E:\Programme\Trend Micro\UniClient\plugins\LUADLL.dll
2013-08-05 09:49 - 2013-05-07 15:31 - 00885088 _____ () C:\Program Files\Ashampoo\Ashampoo WinOptimizer 9\LiveTunerService.exe
2013-08-05 09:17 - 2010-04-12 18:03 - 00329168 ____N () C:\Program Files\XSManager\WTGService.exe
2012-11-27 00:54 - 2012-11-27 00:54 - 00094208 _____ () C:\Windows\System32\IccLibDll.dll
2014-01-08 18:01 - 2013-12-18 15:33 - 00047784 _____ () E:\Programme\Trend Micro\Titanium\plugin\fcMsgDispatcher.dll
2014-04-23 19:52 - 2014-04-23 19:52 - 03772320 _____ () C:\Users\Tobias YYYY\AppData\Local\CloudStation\bin\cloud.exe
2013-05-31 11:15 - 2013-05-31 11:15 - 01259320 _____ () C:\Users\Tobias YYYY\AppData\Local\CloudStation\bin\libsqlite3-0.dll
2013-05-31 11:15 - 2013-05-31 11:15 - 00043008 _____ () C:\Users\Tobias YYYY\AppData\Local\CloudStation\bin\libgcc_s_dw2-1.dll
2014-03-24 05:18 - 2014-03-24 05:18 - 02554368 _____ () C:\Users\Tobias YYYY\AppData\Local\CloudStation\bin\QtCore4.dll
2014-03-24 05:18 - 2014-03-24 05:18 - 09824768 _____ () C:\Users\Tobias YYYY\AppData\Local\CloudStation\bin\QtGui4.dll
2014-03-24 05:18 - 2014-03-24 05:18 - 01218048 _____ () C:\Users\Tobias YYYY\AppData\Local\CloudStation\bin\QtNetwork4.dll
2013-05-31 11:15 - 2013-05-31 11:15 - 01599298 _____ () C:\Users\Tobias YYYY\AppData\Local\CloudStation\bin\icuuc50.dll
2013-05-31 11:15 - 2013-05-31 11:15 - 00879630 _____ () C:\Users\Tobias YYYY\AppData\Local\CloudStation\bin\libstdc++-6.dll
2013-05-31 11:15 - 2013-05-31 11:15 - 20803927 _____ () C:\Users\Tobias YYYY\AppData\Local\CloudStation\bin\icudt50.dll
2014-04-23 19:52 - 2014-04-23 19:52 - 10110424 _____ () C:\Users\Tobias YYYY\AppData\Local\CloudStation\bin\client-win.exe
2014-05-04 15:27 - 2014-05-04 15:27 - 00041984 _____ () C:\Users\Tobias YYYY\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmp9dmmz4.dll
2013-10-19 01:55 - 2013-10-19 01:55 - 25100288 _____ () C:\Users\Tobias YYYY\AppData\Roaming\Dropbox\bin\libcef.dll
2013-09-05 01:14 - 2013-09-05 01:14 - 04300456 _____ () C:\Program Files\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF
2014-02-13 23:25 - 2014-02-13 23:25 - 00170496 _____ () C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\IsdiInterop\da9b91a4c50d88d608ef03f8c257b081\IsdiInterop.ni.dll
2013-12-18 19:08 - 2010-03-03 21:08 - 00058880 _____ () C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll
2013-09-05 01:14 - 2013-09-05 01:14 - 04300456 _____ () C:\Program Files\Common Files\Microsoft Shared\office14\Cultures\office.odf
2012-11-12 04:48 - 2012-11-12 04:48 - 00151408 _____ () C:\Program Files\Mindjet\MindManager 11\zlib.dll
2014-04-26 16:57 - 2014-04-24 02:33 - 00065352 _____ () C:\Users\Tobias YYYY\AppData\Local\Google\Chrome\Application\34.0.1847.131\chrome_elf.dll
2014-04-26 16:57 - 2014-04-24 02:33 - 00674632 _____ () C:\Users\Tobias YYYY\AppData\Local\Google\Chrome\Application\34.0.1847.131\libglesv2.dll
2014-04-26 16:57 - 2014-04-24 02:33 - 00093000 _____ () C:\Users\Tobias YYYY\AppData\Local\Google\Chrome\Application\34.0.1847.131\libegl.dll
2014-04-26 16:57 - 2014-04-24 02:33 - 04081480 _____ () C:\Users\Tobias YYYY\AppData\Local\Google\Chrome\Application\34.0.1847.131\pdf.dll
2014-04-26 16:57 - 2014-04-24 02:33 - 00390472 _____ () C:\Users\Tobias YYYY\AppData\Local\Google\Chrome\Application\34.0.1847.131\ppGoogleNaClPluginChrome.dll
2014-04-26 16:57 - 2014-04-24 02:33 - 01647432 _____ () C:\Users\Tobias YYYY\AppData\Local\Google\Chrome\Application\34.0.1847.131\ffmpegsumo.dll
2013-12-06 15:11 - 2013-07-23 17:28 - 00049152 _____ () E:\Programme\Trend Micro\Titanium\UIFramework\boost_thread-vc110-mt-1_49.dll
2013-12-06 15:11 - 2013-07-23 17:28 - 00039424 _____ () E:\Programme\Trend Micro\Titanium\UIFramework\boost_date_time-vc110-mt-1_49.dll
2014-04-26 16:57 - 2014-04-24 02:33 - 13692232 _____ () C:\Users\Tobias YYYY\AppData\Local\Google\Chrome\Application\34.0.1847.131\PepperFlash\pepflashplayer.dll

==================== Alternate Data Streams (whitelisted) =========

AlternateDataStreams: C:\Users\Tobias YYYY\SkyDrive:ms-properties
AlternateDataStreams: C:\Users\Tobias YYYY\SkyDrive.old:ms-properties

==================== Safe Mode (whitelisted) ===================


==================== Disabled items from MSCONFIG ==============


==================== Faulty Device Manager Devices =============

Name: Microsoft Basic Display Adapter
Description: Microsoft Basic Display Adapter
Class Guid: {4d36e968-e325-11ce-bfc1-08002be10318}
Manufacturer: (Standardgrafikkartentypen)
Service: BasicDisplay
Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31)
Resolution: Update the driver

Name: Dell Wireless 5540
Description: Dell Wireless 5540
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: 
Description: 
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Event log errors: =========================

Application errors:
==================
Error: (05/04/2014 03:33:59 PM) (Source: Microsoft-Windows-LocationProvider) (User: NT-AUTORITÄT)
Description: There was an error with the Windows Location Provider database


System errors:
=============

Microsoft Office Sessions:
=========================
Error: (05/04/2014 03:33:59 PM) (Source: Microsoft-Windows-LocationProvider)(User: NT-AUTORITÄT)
Description: -2147024883


CodeIntegrity Errors:
===================================
  Date: 2013-12-06 11:06:55.363
  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2013-12-06 11:06:55.359
  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2013-12-06 11:06:47.863
  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2013-12-05 12:02:51.144
  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2013-12-05 12:02:51.138
  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2013-12-05 12:02:38.545
  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2013-12-04 16:37:20.440
  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2013-12-04 16:37:20.438
  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2013-12-04 16:37:05.212
  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2013-12-03 18:29:05.144
  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.


==================== Memory info =========================== 

Percentage of memory in use: 58%
Total physical RAM: 2742.6 MB
Available physical RAM: 1136.33 MB
Total Pagefile: 4150.6 MB
Available Pagefile: 1795.61 MB
Total Virtual: 2047.88 MB
Available Virtual: 1910.34 MB

==================== Drives ================================

Drive c: (OS) (Fixed) (Total:150.44 GB) (Free:70.22 GB) NTFS
Drive d: (Backup) (Fixed) (Total:35.3 GB) (Free:12.55 GB) NTFS
Drive e: (Programme) (Fixed) (Total:78.19 GB) (Free:34.56 GB) NTFS
Drive h: () (Removable) (Total:0.94 GB) (Free:0.94 GB) FAT

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 298 GB) (Disk ID: E46BDF93)
Partition 1: (Not Active) - (Size=39 MB) - (Type=DE)
Partition 2: (Active) - (Size=15 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=150 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=133 GB) - (Type=OF Extended)

========================================================
Disk: 1 (Size: 962 MB) (Disk ID: 1D778CF2)
Partition 1: (Not Active) - (Size=962 MB) - (Type=06)

==================== End Of Log ============================
         

--- --- ---

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
         

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

• Starte nun FRST erneut und klicke den Entfernen Button.
• Das Tool erstellt eine Fixlog.txt.
• Poste mir deren Inhalt.

Fixlo.txt

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version:06-05-2014
Ran by Tobias YYYYY at 2014-05-06 16:29:57 Run:1
Running from C:\Users\Tobias YYYYY\Downloads
Boot Mode: Normal

==============================================

Content of fixlist:
*****************
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
*****************

C:\WINDOWS\system32\GroupPolicy\Machine => Moved successfully.
C:\WINDOWS\system32\GroupPolicy\GPT.ini => Moved successfully.


The system needed a reboot. 

==== End of Fixlog ====
         

Okay, dann bitte Kontrollscans mit MBAM und ESET bitte:

Downloade Dir bitte Malwarebytes Anti-Malware

• Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
• Starte Malwarebytes' Anti-Malware (MBAM).
• Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
• Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
• Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
• Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
• Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
• Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

ESET Online Scanner

• Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
• Lade und starte Eset Online Scanner
• Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
• Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
• Klicke auf Starten.
• Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
• Klicke am Ende des Suchlaufs auf Fertig stellen.
• Schließe das Fenster von ESET.
• Explorer öffnen.
• C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
• Logfile hier posten.
• Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
• Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

mbam:

 Malwarebytes Anti-Malware 
www.malwarebytes.org

Suchlauf Datum: 06.05.2014
Suchlauf-Zeit: 17:30:59
Logdatei: mbam.txt
Administrator: Ja

Version: 2.00.1.1004
Malware Datenbank: v2014.05.06.06
Rootkit Datenbank: v2014.03.27.01
Lizenz: Testversion
Malware Schutz: Aktiviert
Bösartiger Webseiten Schutz: Aktiviert
Chameleon: Deaktiviert

Betriebssystem: Windows 8.1
CPU: x86
Dateisystem: NTFS
Benutzer: Tobias YYYY

Suchlauf-Art: Bedrohungs-Suchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 254666
Verstrichene Zeit: 41 Min, 31 Sek

Speicher: Aktiviert
Autostart: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Aktiviert
Shuriken: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

Prozesse: 0
(No malicious items detected)

Module: 0
(No malicious items detected)

Registrierungsschlüssel: 2
PUP.Optional.HDvidCodec.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\HDvid Codec V6.0, In Quarantäne, [31cfc040bc441fe1f2491b6f857dc33d], 
PUP.Optional.Iminent.A, HKU\S-1-5-21-3608396222-1875968445-4039553499-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOWREGISTRY\Iminent, In Quarantäne, [5ca48e7247b9c040d28f4237c93905fb], 

Registrierungswerte: 2
PUP.Optional.VBates, HKLM\SOFTWARE\WOW6432NODE\MOZILLA\FIREFOX\EXTENSIONS\{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}, In Quarantäne, [ce32f8087b8501ffae3973afea1850b0], 
PUP.Optional.VBates, HKLM\SOFTWARE\WOW6432NODE\MOZILLA\FIREFOX\EXTENSIONS|{21EAF666-26B3-4A3C-ABD0-CA2F5A326744}, C:\Program Files\V-bates\Firefox, In Quarantäne, [ce32f8087b8501ffae3973afea1850b0]

Registrierungsdaten: 0
(No malicious items detected)

Ordner: 0
(No malicious items detected)

Dateien: 9
PUP.DownloadAdmin, C:\Users\Tobias YYYY\Downloads\flvplayer-setup.exe, In Quarantäne, [639d768a8f7116ea19b69e37a2615ba5], 
PUP.Optional.OpenCandy, C:\Users\Tobias YYYY\Downloads\DTLite4471-0333.exe, In Quarantäne, [2fd19e62867a7987c0bbdd828282ec14], 
PUP.Optional.OneClickDownloader.A, C:\Users\Tobias YYYY\Downloads\OnlineHD-Chrome-V2.1.exe, In Quarantäne, [aa56c33d9e628080acf851e8c83948b8], 
PUP.Optional.Spigot.A, C:\Users\Tobias YYYY\Downloads\YTD471Setup.exe, In Quarantäne, [9c64de227a86996795e937ef857bad53], 
PUP.Optional.Softonic, C:\Users\Tobias YYYY\Downloads\SoftonicDownloader_fuer_picasa.exe, In Quarantäne, [09f7df2112eebb4583c06b972cd5946c], 
PUP.Optional.OneClickDownloader.A, C:\Users\Tobias YYYY\Downloads\HDvid-codec-Chrome.exe, In Quarantäne, [dc24847c41bf926e702631de3fc257a9], 
PUP.Optional.Softonic.A, C:\Users\Tobias YYYY\Downloads\SoftonicDownloader_fuer_free-screen-to-video.exe, In Quarantäne, [639daa5660a0b050a4fe2af3a958c739], 
PUP.Optional.Softonic.A, C:\Users\Tobias YYYY\Downloads\SoftonicDownloader_fuer_hot-potatoes.exe, In Quarantäne, [b74947b9f50b03fdcad8c459a25f7b85], 
PUP.Optional.InstallCore.A, C:\Users\Tobias YYYY\Downloads\uplayermediaplayer-setup.exe, In Quarantäne, [58a8718f20e02fd14b912bf5956f21df], 

Physische Sektoren: 0
(No malicious items detected)


(end)
         

Eset:

ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=5e0667fc235327478cdbdd4b6d357035
# engine=18156
# end=stopped
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2014-05-06 05:14:37
# local_time=2014-05-06 07:14:37 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1031
# osver=6.2.9200 NT 
# compatibility_mode=5893 16776574 100 94 4680200 16701302 0 0
# scanned=79294
# found=3
# cleaned=0
# scan_time=3717
sh=345BCEE8E07162A35063858A86EDE7FD47FE163A ft=1 fh=1df13c4e78c182ca vn="Win32/AdWare.1ClickDownload.AR Anwendung" ac=I fn="C:\Users\Tobias Wessel\AppData\Local\Google\Chrome\User Data\Profile 1\File System\000\t\00\00000000"
sh=3395E76ED69C29E96955998DDFD53A3B92489651 ft=1 fh=d8b6024ba5c33e8c vn="Win32/AdWare.1ClickDownload.AR Anwendung" ac=I fn="C:\Users\Tobias Wessel\AppData\Local\Google\Chrome\User Data\Profile 1\File System\002\t\00\00000000"
sh=AB01F26502880C788835246A77576D99ADAD4454 ft=1 fh=c71c0011e8464a4f vn="Variante von Win32/Injected.F Trojaner" ac=I fn="C:\Users\Tobias Wessel\Downloads\COMPUTER_BILD-Download-Manager_fuer_Nero_WaveEditor.exe"
         

Kann es sein, dass ich Eset gestoppt habe? Mein Bildschirmschoner war an und nachdem er wieder aus war stand da, dass der Vorgang durch den Benutzer beendet wurde. Soll ich erneut scannen?

Mach den Bildschirmschoner aus, deaktiviere auch in den Energieoptionen mal am besten den Ruhezustand und mach den Scan erneut.

Eset:

ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=5e0667fc235327478cdbdd4b6d357035
# engine=18156
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2014-05-06 10:27:03
# local_time=2014-05-07 12:27:03 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1031
# osver=6.2.9200 NT 
# compatibility_mode=5893 16776574 100 94 4698946 16720048 0 0
# scanned=365534
# found=4
# cleaned=0
# scan_time=17680
sh=345BCEE8E07162A35063858A86EDE7FD47FE163A ft=1 fh=1df13c4e78c182ca vn="Win32/AdWare.1ClickDownload.AR Anwendung" ac=I fn="C:\Users\Tobias Wessel\AppData\Local\Google\Chrome\User Data\Profile 1\File System\000\t\00\00000000"
sh=3395E76ED69C29E96955998DDFD53A3B92489651 ft=1 fh=d8b6024ba5c33e8c vn="Win32/AdWare.1ClickDownload.AR Anwendung" ac=I fn="C:\Users\Tobias Wessel\AppData\Local\Google\Chrome\User Data\Profile 1\File System\002\t\00\00000000"
sh=AB01F26502880C788835246A77576D99ADAD4454 ft=1 fh=c71c0011e8464a4f vn="Variante von Win32/Injected.F Trojaner" ac=I fn="C:\Users\Tobias Wessel\Downloads\COMPUTER_BILD-Download-Manager_fuer_Nero_WaveEditor.exe"
sh=2F14B2F0E7DBD2D5B3B2F0AEFA52FD34F9F28FAD ft=0 fh=0000000000000000 vn="Win32/Filecoder.BH.Gen Trojaner" ac=I fn="E:\Dropbox ALT Kopie\Stiftung Warentest\Stationenlernen.rar"
         

TFC - Temp File Cleaner

Lade dir TFC (TempFileCleaner von Oldtimer) herunter und speichere es auf den Desktop.

• Öffne die TFC.exe.
  Vista und Win 7 User mit Rechtsklick "als Administrator starten".
• Schließe alle anderen Programme.
• Drücke auf den Button Start.
• Falls du zu einem Neustart aufgefordert wirst, bestätige diesen.

Sieht soweit ok aus

Wegen Cookies und anderer Dinge im Web: Um die Pest von vornherein zu blocken (also TrackingCookies, Werbebanner etc.) müsstest du dir mal sowas wie MVPS Hosts File anschauen => Blocking Unwanted Parasites with a Hosts File - sinnvollerweise solltest du alle 4 Wochen mal bei MVPS nachsehen, ob er eine neue Hosts Datei herausgebracht hat. Ist aber nur optional. Um Usertracking zu verhindern kann man gut die Firefox-Erweiterung Ghostery verwenden.

Info: Cookies sind keine Schädlinge direkt, aber es besteht die Gefahr der missbräuchlichen Verwendung (eindeutige Wiedererkennung zB für gezielte Werbung o.ä. => HTTP-Cookie )

Ansonsten gibt es noch gute Cookiemanager, Erweiterungen für den Firefox zB wäre da CookieCuller
Wenn du aber damit leben kannst, dich bei jeder Browsersession überall neu einzuloggen (zB Facebook, Ebay, GMX, oder auch Trojaner-Board) dann stell den Browser einfach so ein, dass einfach alles beim Beenden des Browser inkl. Cookies gelöscht wird.

Ist dein System nun wieder in Ordnung oder gibt's noch andere Funde oder Probleme?

Hallo,
habe Ghostery installiert und es ist alles erstmal gut. Sollen die Säuberungsprogramme noch alle gelöscht werden? Bei ESET Online Scanner hatte ich ja nicht das Häkchen für remove found threats angeklickt. Die gefundenen Datein wurden dann TFC gelöscht?
Wenn Dir nicht noch was aufgefallen sein sollte, dann bin ich erstmal erleichtert und danke Dir vielmals.
Gruß
Tobirobi