| |
| |||||||
Log-Analyse und Auswertung: Win 8.1: Avast meldet Iframe-inf, JS: Agent-CYP und Somoto-JWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
 |
28.04.2014, 13:37
| #1 |
| |  Win 8.1: Avast meldet Iframe-inf, JS: Agent-CYP und Somoto-J Liebes Board, nachdem ich mich kuerzlich mit meinem Laptop auseinandergesetzt habe, weil ich dachte ich hätte einen Virus (aber keinen hatte), habe ich mir nun meinen aelteren Desktop vorgeknoepft. Ich dachte eigentlich der sei sauber, aber das scheint nicht so zu sein. Der vollständige Scan mit Avast meldete mir zunächst 2 Funde: HTML: IFrame-inf JS: Agent-CYP [Expl] Danach schlug mir Avast vor, einen Scan vor Start des Betriebssystems zu fahren. Habe ich gemacht. Dabei kamen 2 weitere Funde zu Tage. Beide Male Win32: Somoto-J [PUP] und jeweils im Windows.old Folder. Scheinen also Altlasten zu sein. Alle Funde habe ich automatisch korrigieren lassen. Liegen jetzt im Virus Container. Habe versucht die Einträge in ein Text-File zu kopieren, aber nicht geschafft. Wenn Ihr Details braucht, lasst mich bitte wissen, welchen Log-File Ihr braucht und wo ich den finde. Entsprechend Eurer Anleitung, habe ich den Defogger enabled und FRST ausgeführt. Hier die Logs: FRST Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 27-04-2014
Ran by [USRNAME] (administrator) on HAN on 28-04-2014 14:18:13
Running from C:\Users\[USRNAME]\Desktop
Microsoft Windows 8.1 Pro Update 1 (X86) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal
The only official download link for FRST:
Download link for 32-Bit version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/
Download link for 64-Bit Version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Foxit Corporation) C:\Program Files\Foxit Software\Foxit Reader\Foxit Cloud\FCUpdateService.exe
(Microsoft Corporation) C:\WINDOWS\system32\dashost.exe
(Paramount Software UK Ltd) C:\Program Files\Macrium\Reflect\ReflectService.exe
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(IvoSoft) C:\Program Files\Classic Shell\ClassicStartMenu.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
() C:\Program Files\Unlocker\UnlockerAssistant.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\plugin-container.exe
(Adobe Systems, Inc.) C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_12_0_0_77.exe
(Adobe Systems, Inc.) C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_12_0_0_77.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [NvBackend] => C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe [1797064 2014-03-20] (NVIDIA Corporation)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [3873704 2014-04-27] (AVAST Software)
HKLM\...\Run: [UnlockerAssistant] => C:\Program Files\Unlocker\UnlockerAssistant.exe [17408 2010-07-04] ()
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM\...\Run: [Classic Start Menu] => C:\Program Files\Classic Shell\ClassicStartMenu.exe [150208 2014-04-20] (IvoSoft)
HKLM\...\Run: [SDTray] => C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe [5624784 2013-07-25] (Safer-Networking Ltd.)
Winlogon\Notify\SDWinLogon: SDWinLogon.dll [X]
HKU\S-1-5-21-3226048418-3006157909-989406201-1001\...\Policies\Explorer: [NoDriveTypeAutoRun] 0x00000000
HKU\S-1-5-21-3226048418-3006157909-989406201-1004\...\RunOnce: [WAB Migrate] - C:\Program Files\Windows Mail\wab.exe [515584 2013-08-22] (Microsoft Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Canon LBP2900 Statusfenster.lnk
ShortcutTarget: Canon LBP2900 Statusfenster.lnk -> C:\Windows\System32\spool\drivers\w32x86\3\CNAB4LAK.EXE (CANON INC.)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://t.de.msn.com/
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xB5C2046CF412CF01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
BHO: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: ExplorerBHO Class - {449D0D6E-2412-4E61-B68F-1CB625CD9E52} - C:\Program Files\Classic Shell\ClassicExplorer32.dll (IvoSoft)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: ClassicIEBHO Class - {EA801577-E6AD-4BD5-8F71-4BE0154331A4} - C:\Program Files\Classic Shell\ClassicIEDLL_32.dll (IvoSoft)
Toolbar: HKLM - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer32.dll (IvoSoft)
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
FireFox:
========
FF ProfilePath: C:\Users\[USRNAME]\AppData\Roaming\Mozilla\Firefox\Profiles\76jffv28.default
FF Homepage: hxxp://www.tagesschau.de/
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_12_0_0_77.dll ()
FF Plugin: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf - C:\Program Files\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
FF Plugin: @java.com/DTPlugin,version=10.55.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.55.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/Lync,version=15.0 - C:\Program Files\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL No File
FF Plugin: @nvidia.com/3DVision - C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin: @nvidia.com/3DVisionStreaming - C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin: @videolan.org/vlc,version=2.1.2 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.3 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npMeetingJoinPluginOC.dll (Microsoft Corporation)
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: NoScript - C:\Users\[USRNAME]\AppData\Roaming\Mozilla\Firefox\Profiles\76jffv28.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2014-01-22]
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-01-16]
========================== Services (Whitelisted) =================
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-04-27] (AVAST Software)
R2 FoxitCloudUpdateService; C:\Program Files\Foxit Software\Foxit Reader\Foxit Cloud\FCUpdateService.exe [239680 2014-02-19] (Foxit Corporation)
R2 ReflectService.exe; C:\Program Files\Macrium\Reflect\ReflectService.exe [605168 2013-12-20] (Paramount Software UK Ltd)
S3 ScDeviceEnum; C:\WINDOWS\System32\ScDeviceEnum.dll [105472 2013-08-22] (Microsoft Corporation)
R2 SDScannerService; C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe [3921880 2013-10-15] (Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe [1042272 2013-09-20] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe [171416 2013-09-13] (Safer-Networking Ltd.)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [280296 2013-10-31] (Microsoft Corporation)
S3 WEPHOSTSVC; C:\WINDOWS\system32\wephostsvc.dll [20992 2013-08-22] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [22224 2013-10-31] (Microsoft Corporation)
S3 workfolderssvc; C:\WINDOWS\system32\workfolderssvc.dll [1210368 2014-03-18] (Microsoft Corporation)
==================== Drivers (Whitelisted) ====================
R2 aswHwid; C:\WINDOWS\system32\drivers\aswHwid.sys [24184 2014-04-27] ()
R2 aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [67824 2014-04-27] (AVAST Software)
R1 aswRdr; C:\WINDOWS\system32\drivers\aswRdr2.sys [81768 2014-04-27] (AVAST Software)
R0 aswRvrt; C:\WINDOWS\system32\Drivers\aswRvrt.sys [49944 2014-04-27] ()
R1 aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [776976 2014-04-27] (AVAST Software)
R1 aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [411552 2014-04-27] (AVAST Software)
R2 aswStm; C:\WINDOWS\system32\drivers\aswStm.sys [67776 2014-04-27] (AVAST Software)
R0 aswVmm; C:\WINDOWS\system32\Drivers\aswVmm.sys [180632 2014-04-27] ()
R1 BasicRender; C:\WINDOWS\System32\drivers\BasicRender.sys [25600 2014-03-18] (Microsoft Corporation)
S3 gdrv; C:\WINDOWS\gdrv.sys [17488 2014-04-28] (Windows (R) 2000 DDK provider)
S3 GPIO; C:\WINDOWS\System32\drivers\iaiogpio.sys [22016 2013-07-23] (Intel Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [93016 2013-10-31] (Microsoft Corporation)
R0 Wof; C:\WINDOWS\system32\Drivers\Wof.sys [138584 2014-04-28] (Microsoft Corporation)
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-04-28 14:18 - 2014-04-28 14:18 - 00010256 _____ () C:\Users\[USRNAME]\Desktop\FRST.txt
2014-04-28 14:18 - 2014-04-28 14:18 - 00000000 ____D () C:\FRST
2014-04-28 14:16 - 2014-04-28 14:16 - 01049600 _____ (Farbar) C:\Users\[USRNAME]\Desktop\FRST.exe
2014-04-28 14:15 - 2014-04-28 14:16 - 00000000 ____D () C:\Users\[USRNAME]\Desktop\Trojaner-Board
2014-04-28 14:15 - 2014-04-28 14:15 - 00000000 _____ () C:\Users\[USRNAME]\defogger_reenable
2014-04-28 10:56 - 2014-04-28 10:57 - 00017488 _____ (Windows (R) 2000 DDK provider) C:\WINDOWS\gdrv.sys
2014-04-28 10:56 - 2014-04-28 10:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GIGABYTE
2014-04-28 10:56 - 2014-04-28 10:56 - 00000000 ____D () C:\Program Files\GIGABYTE
2014-04-28 10:55 - 2014-04-28 10:55 - 05350367 _____ () C:\Users\[USRNAME]\Downloads\motherboard_utility_atbios.exe
2014-04-28 10:47 - 2014-04-28 10:47 - 00536576 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntvdm.exe
2014-04-28 10:47 - 2014-04-28 10:47 - 00256192 _____ (Microsoft Corporation) C:\WINDOWS\winhelp.exe
2014-04-28 10:47 - 2014-04-28 10:47 - 00221600 _____ (Microsoft Corporation) C:\WINDOWS\system32\lanman.drv
2014-04-28 10:47 - 2014-04-28 10:47 - 00177856 _____ (Microsoft Corporation) C:\WINDOWS\system32\typelib.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00169520 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole2disp.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00153008 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole2nls.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00127213 _____ () C:\WINDOWS\system32\ega.cpi
2014-04-28 10:47 - 2014-04-28 10:47 - 00108464 _____ (Microsoft Corporation) C:\WINDOWS\system32\netapi.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00092320 _____ (Microsoft Corporation) C:\WINDOWS\system32\krnl386.exe
2014-04-28 10:47 - 2014-04-28 10:47 - 00082944 _____ (Microsoft Corporation) C:\WINDOWS\system32\olecli.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00082944 _____ (Microsoft Corporation) C:\WINDOWS\system\olecli.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00069886 _____ () C:\WINDOWS\system32\edit.com
2014-04-28 10:47 - 2014-04-28 10:47 - 00068992 _____ (Microsoft Corporation) C:\WINDOWS\system32\MMSYSTEM.DLL
2014-04-28 10:47 - 2014-04-28 10:47 - 00068992 _____ (Microsoft Corporation) C:\WINDOWS\system\MMSYSTEM.DLL
2014-04-28 10:47 - 2014-04-28 10:47 - 00062976 _____ (Microsoft Corporation) C:\WINDOWS\system32\graftabl.com
2014-04-28 10:47 - 2014-04-28 10:47 - 00053600 _____ () C:\WINDOWS\system32\dosx.exe
2014-04-28 10:47 - 2014-04-28 10:47 - 00050648 _____ () C:\WINDOWS\system32\COMMAND.COM
2014-04-28 10:47 - 2014-04-28 10:47 - 00047840 _____ (Microsoft Corporation) C:\WINDOWS\system32\USER.EXE
2014-04-28 10:47 - 2014-04-28 10:47 - 00046592 _____ (Microsoft Corporation) C:\WINDOWS\system32\pmspl.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00042809 _____ () C:\WINDOWS\system32\KEY01.SYS
2014-04-28 10:47 - 2014-04-28 10:47 - 00042592 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole2.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00042537 _____ () C:\WINDOWS\system32\KEYBOARD.SYS
2014-04-28 10:47 - 2014-04-28 10:47 - 00039424 _____ (Microsoft Corporation) C:\WINDOWS\system32\DDEML.DLL
2014-04-28 10:47 - 2014-04-28 10:47 - 00039274 _____ () C:\WINDOWS\system32\mem.exe
2014-04-28 10:47 - 2014-04-28 10:47 - 00035776 _____ () C:\WINDOWS\system32\NTIO411.SYS
2014-04-28 10:47 - 2014-04-28 10:47 - 00035552 _____ () C:\WINDOWS\system32\NTIO412.SYS
2014-04-28 10:47 - 2014-04-28 10:47 - 00034688 _____ () C:\WINDOWS\system32\NTIO804.SYS
2014-04-28 10:47 - 2014-04-28 10:47 - 00034688 _____ () C:\WINDOWS\system32\NTIO404.SYS
2014-04-28 10:47 - 2014-04-28 10:47 - 00033968 _____ () C:\WINDOWS\system32\NTIO.SYS
2014-04-28 10:47 - 2014-04-28 10:47 - 00032816 _____ (Microsoft Corporation) C:\WINDOWS\system32\COMMDLG.DLL
2014-04-28 10:47 - 2014-04-28 10:47 - 00032816 _____ (Microsoft Corporation) C:\WINDOWS\system\COMMDLG.DLL
2014-04-28 10:47 - 2014-04-28 10:47 - 00029370 _____ () C:\WINDOWS\system32\NTDOS411.SYS
2014-04-28 10:47 - 2014-04-28 10:47 - 00029274 _____ () C:\WINDOWS\system32\NTDOS412.SYS
2014-04-28 10:47 - 2014-04-28 10:47 - 00029146 _____ () C:\WINDOWS\system32\NTDOS804.SYS
2014-04-28 10:47 - 2014-04-28 10:47 - 00029146 _____ () C:\WINDOWS\system32\NTDOS404.SYS
2014-04-28 10:47 - 2014-04-28 10:47 - 00028420 _____ () C:\WINDOWS\system32\bios1.rom
2014-04-28 10:47 - 2014-04-28 10:47 - 00028112 _____ (Microsoft Corporation) C:\WINDOWS\system32\DRWATSON.EXE
2014-04-28 10:47 - 2014-04-28 10:47 - 00027866 _____ () C:\WINDOWS\system32\NTDOS.SYS
2014-04-28 10:47 - 2014-04-28 10:47 - 00027792 _____ (Microsoft Corporation) C:\WINDOWS\system32\compobj.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00027200 _____ (Microsoft Corporation) C:\WINDOWS\system32\ctl3dv2.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00027097 _____ () C:\WINDOWS\system32\country.sys
2014-04-28 10:47 - 2014-04-28 10:47 - 00024576 _____ (Microsoft Corporation) C:\WINDOWS\system32\GDI.EXE
2014-04-28 10:47 - 2014-04-28 10:47 - 00024064 _____ (Microsoft Corporation) C:\WINDOWS\system32\OLESVR.DLL
2014-04-28 10:47 - 2014-04-28 10:47 - 00024064 _____ (Microsoft Corporation) C:\WINDOWS\system\OLESVR.DLL
2014-04-28 10:47 - 2014-04-28 10:47 - 00022016 _____ (Microsoft Corporation) C:\WINDOWS\system32\vdmredir.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00021232 _____ () C:\WINDOWS\system32\graphics.pro
2014-04-28 10:47 - 2014-04-28 10:47 - 00020634 _____ () C:\WINDOWS\system32\debug.exe
2014-04-28 10:47 - 2014-04-28 10:47 - 00019694 _____ () C:\WINDOWS\system32\GRAPHICS.COM
2014-04-28 10:47 - 2014-04-28 10:47 - 00018896 _____ (Microsoft Corporation) C:\WINDOWS\system32\sysedit.exe
2014-04-28 10:47 - 2014-04-28 10:47 - 00018832 _____ () C:\WINDOWS\system32\v7vga.rom
2014-04-28 10:47 - 2014-04-28 10:47 - 00014710 _____ () C:\WINDOWS\system32\KB16.COM
2014-04-28 10:47 - 2014-04-28 10:47 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntvdmd.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00013888 _____ (Microsoft Corporation) C:\WINDOWS\system32\TOOLHELP.DLL
2014-04-28 10:47 - 2014-04-28 10:47 - 00013312 _____ () C:\WINDOWS\system32\win87em.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00012704 _____ (Microsoft Corporation) C:\WINDOWS\system32\WFWNET.DRV
2014-04-28 10:47 - 2014-04-28 10:47 - 00012704 _____ (Microsoft Corporation) C:\WINDOWS\system\WFWNET.DRV
2014-04-28 10:47 - 2014-04-28 10:47 - 00012642 _____ () C:\WINDOWS\system32\edlin.exe
2014-04-28 10:47 - 2014-04-28 10:47 - 00012498 _____ () C:\WINDOWS\system32\append.exe
2014-04-28 10:47 - 2014-04-28 10:47 - 00011753 _____ () C:\WINDOWS\system32\setver.exe
2014-04-28 10:47 - 2014-04-28 10:47 - 00010790 _____ () C:\WINDOWS\system32\EDIT.HLP
2014-04-28 10:47 - 2014-04-28 10:47 - 00010544 _____ (Microsoft Corporation) C:\WINDOWS\system32\COMM.drv
2014-04-28 10:47 - 2014-04-28 10:47 - 00009936 _____ (Microsoft Corporation) C:\WINDOWS\system32\lzexpand.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00009936 _____ (Microsoft Corporation) C:\WINDOWS\system\lzexpand.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\system32\WIFEMAN.DLL
2014-04-28 10:47 - 2014-04-28 10:47 - 00009029 _____ () C:\WINDOWS\system32\ANSI.SYS
2014-04-28 10:47 - 2014-04-28 10:47 - 00009008 _____ (Microsoft Corporation) C:\WINDOWS\system32\ver.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00009008 _____ (Microsoft Corporation) C:\WINDOWS\system\ver.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00008424 _____ () C:\WINDOWS\system32\exe2bin.exe
2014-04-28 10:47 - 2014-04-28 10:47 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\system32\win.com
2014-04-28 10:47 - 2014-04-28 10:47 - 00008191 _____ () C:\WINDOWS\system32\bios4.rom
2014-04-28 10:47 - 2014-04-28 10:47 - 00007052 _____ () C:\WINDOWS\system32\nlsfunc.exe
2014-04-28 10:47 - 2014-04-28 10:47 - 00005532 _____ (Microsoft Corporation) C:\WINDOWS\system\stdole.tlb
2014-04-28 10:47 - 2014-04-28 10:47 - 00005120 _____ (Microsoft Corporation) C:\WINDOWS\system32\WINNLS.DLL
2014-04-28 10:47 - 2014-04-28 10:47 - 00005120 _____ (Microsoft Corporation) C:\WINDOWS\system32\SHELL.DLL
2014-04-28 10:47 - 2014-04-28 10:47 - 00005120 _____ (Microsoft Corporation) C:\WINDOWS\system\SHELL.DLL
2014-04-28 10:47 - 2014-04-28 10:47 - 00004768 _____ () C:\WINDOWS\system32\HIMEM.SYS
2014-04-28 10:47 - 2014-04-28 10:47 - 00004208 _____ (Microsoft Corporation) C:\WINDOWS\system32\storage.dll
2014-04-28 10:46 - 2014-04-28 10:46 - 00528620 _____ (Igor Pavlov) C:\Users\[USRNAME]\Downloads\motherboard_bios_ga-p31-ds3l_f9.exe
2014-04-28 00:16 - 2014-04-28 00:16 - 02767360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2014-04-28 00:16 - 2014-04-28 00:16 - 01634304 _____ (Microsoft Corporation) C:\WINDOWS\system32\wucltux.dll
2014-04-28 00:16 - 2014-04-28 00:16 - 00307200 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUSettingsProvider.dll
2014-04-28 00:16 - 2014-04-28 00:16 - 00159744 _____ (Microsoft Corporation) C:\WINDOWS\system32\storewuauth.dll
2014-04-28 00:16 - 2014-04-28 00:16 - 00049544 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2014-04-28 00:16 - 2014-04-28 00:16 - 00000000 ____D () C:\Windows.old
2014-04-28 00:16 - 2014-04-27 23:36 - 00000000 ___DC () C:\WINDOWS\Panther
2014-04-28 00:15 - 2014-04-28 00:15 - 18679216 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 12732416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 11791360 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 05833728 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 05786968 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2014-04-28 00:15 - 2014-04-28 00:15 - 05770752 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 03562496 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncEngine.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 02317824 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 02270208 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 02088160 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2014-04-28 00:15 - 2014-04-28 00:15 - 02030080 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmSvc.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 01871192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 01816576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Display.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 01779800 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 01764864 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 01679704 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 01679128 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 01351168 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 01326936 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 01309184 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 01200296 _____ (Microsoft Corporation) C:\WINDOWS\system32\propsys.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 01131520 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 01095488 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 01092896 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 01089024 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 01037504 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel32.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00888320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00887296 _____ (Microsoft Corporation) C:\WINDOWS\system32\aclui.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00863552 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00855552 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdvidcrl.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00839168 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFolder.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00833536 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00828928 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.appcore.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00801792 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00800256 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgent.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00755712 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00735232 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00731648 _____ (Microsoft Corporation) C:\WINDOWS\system32\IKEEXT.DLL
2014-04-28 00:15 - 2014-04-28 00:15 - 00731648 _____ (Microsoft Corporation) C:\WINDOWS\system32\adtschema.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00688640 _____ (Microsoft Corporation) C:\WINDOWS\system32\netlogon.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00672256 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDrive.exe
2014-04-28 00:15 - 2014-04-28 00:15 - 00629760 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00623104 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00605184 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasapi32.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00590336 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveTelemetry.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00589824 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpprefcl.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00567296 _____ (Microsoft Corporation) C:\WINDOWS\system32\nshwfp.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00560128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00551424 _____ (Microsoft Corporation) C:\WINDOWS\system32\BFE.DLL
2014-04-28 00:15 - 2014-04-28 00:15 - 00494592 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsapi.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00491008 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAgent.exe
2014-04-28 00:15 - 2014-04-28 00:15 - 00482416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00444928 _____ (Microsoft Corporation) C:\WINDOWS\system32\AdmTmpl.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00406912 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00406512 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00402432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.Printing.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00390488 _____ (Microsoft Corporation) C:\WINDOWS\system32\netcfgx.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00388408 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00387210 _____ () C:\WINDOWS\system32\ApnDatabase.xml
2014-04-28 00:15 - 2014-04-28 00:15 - 00386560 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlangpui.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00376152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS
2014-04-28 00:15 - 2014-04-28 00:15 - 00374784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\nwifi.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00356864 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidprov.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00355832 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfreadwrite.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00333824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00326024 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00321880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00313344 _____ (Microsoft Corporation) C:\WINDOWS\system32\clusapi.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00305768 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00300544 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanmsm.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00295256 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Classpnp.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00286040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS
2014-04-28 00:15 - 2014-04-28 00:15 - 00283992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00280576 _____ (Microsoft Corporation) C:\WINDOWS\system32\SessEnv.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00264192 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDEServer.exe
2014-04-28 00:15 - 2014-04-28 00:15 - 00264192 _____ (Microsoft Corporation) C:\WINDOWS\system32\FWPUCLNT.DLL
2014-04-28 00:15 - 2014-04-28 00:15 - 00262656 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationApi.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00254976 _____ (Microsoft Corporation) C:\WINDOWS\system32\pdh.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00251392 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSDMon.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00241664 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcomp.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00232960 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSDScDrv.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanapi.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00227840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb10.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00226304 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Sensors.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00222720 _____ (Microsoft Corporation) C:\WINDOWS\system32\spp.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00197632 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00194752 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2014-04-28 00:15 - 2014-04-28 00:15 - 00186880 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsrslvr.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00185856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srvnet.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00184832 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00179200 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdd.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00174080 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00172544 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReInfo.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00171008 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsApi.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00153600 _____ (Microsoft Corporation) C:\WINDOWS\system32\dafWfdProvider.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00151040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Scanners.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00147800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00139776 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxAllUserStore.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00138584 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wof.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00124416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxdav.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00102400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dfsc.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00098816 _____ (Microsoft Corporation) C:\WINDOWS\system32\drvinst.exe
2014-04-28 00:15 - 2014-04-28 00:15 - 00096256 _____ (Microsoft Corporation) C:\WINDOWS\system32\umpnpmgr.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00095744 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevPropMgr.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00094016 _____ (Microsoft Corporation) C:\WINDOWS\system32\userenv.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidclass.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\system32\davclnt.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\system32\w32tm.exe
2014-04-28 00:15 - 2014-04-28 00:15 - 00069464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wfplwfs.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00069120 _____ (Microsoft Corporation) C:\WINDOWS\system32\RMapi.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00068608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\IPMIDrv.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\system32\l2gpstore.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsgqec.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\system32\drvcfg.exe
2014-04-28 00:15 - 2014-04-28 00:15 - 00038400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpipreg.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\SetNetworkLocation.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Shell.Search.UriHandler.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\sxproxy.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredentialMigrationHandler.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00020992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidusb.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanhlp.dll
2014-04-28 00:14 - 2014-04-28 00:14 - 00262144 _____ () C:\WINDOWS\system32\config\userdiff
2014-04-28 00:13 - 2014-04-28 00:13 - 00000000 ____D () C:\WINDOWS\system32\XPSViewer
2014-04-28 00:13 - 2014-04-28 00:13 - 00000000 ____D () C:\Program Files\Reference Assemblies
2014-04-28 00:13 - 2014-04-28 00:13 - 00000000 ____D () C:\Program Files\MSBuild
2014-04-28 00:13 - 2013-08-03 06:41 - 00778936 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll
2014-04-28 00:13 - 2013-08-03 06:41 - 00102608 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2014-04-28 00:13 - 2013-08-03 06:41 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe
2014-04-28 00:06 - 2014-04-28 00:09 - 00000000 ____D () C:\Program Files\Spybot - Search & Destroy 2
2014-04-28 00:06 - 2014-04-28 00:07 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy
2014-04-28 00:06 - 2014-04-28 00:06 - 00002149 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot-S&D Start Center.lnk
2014-04-28 00:06 - 2014-04-28 00:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2
2014-04-28 00:06 - 2013-09-20 10:49 - 00018968 _____ (Safer Networking Limited) C:\WINDOWS\system32\sdnclean.exe
2014-04-28 00:05 - 2014-04-28 00:05 - 40658208 _____ (Safer-Networking Ltd. ) C:\Users\[USRNAME]\Downloads\spybot-2.2.25.exe
2014-04-27 23:58 - 2014-04-27 23:58 - 00043152 _____ (AVAST Software) C:\WINDOWS\avastSS.scr
2014-04-27 23:58 - 2014-04-27 23:58 - 00024184 _____ () C:\WINDOWS\system32\Drivers\aswHwid.sys
2014-04-27 23:52 - 2014-04-27 23:52 - 00000000 ___RD () C:\WINDOWS\BrowserChoice
2014-04-27 23:52 - 2013-10-31 01:38 - 00202584 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdFilter.sys
2014-04-27 23:52 - 2013-10-31 01:38 - 00093016 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdNisDrv.sys
2014-04-27 23:52 - 2013-10-31 01:36 - 00030224 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdBoot.sys
2014-04-27 23:47 - 2014-04-27 23:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-04-27 23:47 - 2014-04-14 20:13 - 00094632 _____ (Oracle Corporation) C:\WINDOWS\system32\WindowsAccessBridge.dll
2014-04-27 23:47 - 2014-04-14 20:05 - 00264616 _____ (Oracle Corporation) C:\WINDOWS\system32\javaws.exe
2014-04-27 23:47 - 2014-04-14 20:05 - 00175528 _____ (Oracle Corporation) C:\WINDOWS\system32\javaw.exe
2014-04-27 23:47 - 2014-04-14 20:04 - 00175016 _____ (Oracle Corporation) C:\WINDOWS\system32\java.exe
2014-04-27 23:45 - 2014-04-27 23:47 - 00004155 _____ () C:\WINDOWS\system32\jupdate-1.7.0_55-b14.log
2014-04-27 23:44 - 2014-04-27 23:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Classic Shell
2014-04-27 23:43 - 2014-04-27 23:43 - 06869696 _____ (IvoSoft) C:\Users\[USRNAME]\Downloads\ClassicShellSetup_4_1_0-de.exe
2014-04-27 23:37 - 2014-04-27 23:37 - 00000000 ____D () C:\Users\[USRNAME]\AppData\Local\NVIDIA
2014-04-27 23:37 - 2014-04-27 23:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2014-04-27 23:36 - 2014-04-27 23:36 - 00001456 _____ () C:\Users\[USRNAME]\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-04-27 23:36 - 2014-04-27 23:36 - 00000020 ___SH () C:\Users\[USRNAME]\ntuser.ini
2014-04-27 23:34 - 2014-04-27 23:34 - 00000000 _SHDL () C:\Users\Default\Startmenü
2014-04-27 23:34 - 2014-04-27 23:34 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung
2014-04-27 23:34 - 2014-04-27 23:34 - 00000000 _SHDL () C:\Users\Default\Druckumgebung
2014-04-27 23:34 - 2014-04-27 23:34 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik
2014-04-27 23:34 - 2014-04-27 23:34 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder
2014-04-27 23:34 - 2014-04-27 23:34 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-04-27 23:34 - 2014-04-27 23:34 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf
2014-04-27 23:34 - 2014-04-27 23:34 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik
2014-04-27 23:34 - 2014-04-27 23:34 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder
2014-04-27 23:34 - 2014-04-27 23:34 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-04-27 23:34 - 2014-04-27 23:34 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf
2014-04-27 23:34 - 2014-04-27 23:34 - 00000000 _SHDL () C:\Programme
2014-04-27 23:33 - 2014-04-27 23:33 - 00021532 _____ () C:\WINDOWS\system32\emptyregdb.dat
2014-04-27 23:31 - 2014-04-27 23:31 - 00000020 ___SH () C:\Users\UpdatusUser\ntuser.ini
2014-04-27 23:27 - 2014-04-27 23:27 - 00001515 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2014-04-27 23:27 - 2014-04-27 23:27 - 00000000 ____D () C:\Users\Default\AppData\Local\Microsoft Help
2014-04-27 23:27 - 2014-04-27 23:27 - 00000000 ____D () C:\Users\Default User\AppData\Local\Microsoft Help
2014-04-27 23:25 - 2014-04-27 23:25 - 00000000 ____D () C:\WINDOWS\system32\config\bbimigrate
2014-04-27 23:24 - 2014-04-28 14:15 - 00000000 ____D () C:\Users\[USRNAME]
2014-04-27 23:24 - 2014-04-27 23:33 - 00032388 _____ () C:\WINDOWS\diagwrn.xml
2014-04-27 23:24 - 2014-04-27 23:33 - 00032388 _____ () C:\WINDOWS\diagerr.xml
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\[USRNAME]\Startmenü
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\[USRNAME]\Netzwerkumgebung
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\[USRNAME]\Druckumgebung
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\[USRNAME]\Documents\Eigene Musik
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\[USRNAME]\Documents\Eigene Bilder
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\[USRNAME]\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\[USRNAME]\AppData\Local\Verlauf
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\UpdatusUser\Startmenü
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\UpdatusUser\Netzwerkumgebung
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\UpdatusUser\Druckumgebung
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\UpdatusUser\Documents\Eigene Musik
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\UpdatusUser\Documents\Eigene Bilder
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\UpdatusUser\AppData\Local\Verlauf
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 ___RD () C:\Users\[USRNAME]\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 ___RD () C:\Users\[USRNAME]\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 ___RD () C:\Users\[USRNAME]\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 ___RD () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 ___RD () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-04-27 23:24 - 2014-03-18 10:08 - 00000369 _____ () C:\Users\[USRNAME]\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk
2014-04-27 23:24 - 2014-03-18 10:08 - 00000369 _____ () C:\Users\[USRNAME]\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk
2014-04-27 23:24 - 2014-03-18 10:08 - 00000369 _____ () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk
2014-04-27 23:24 - 2014-03-18 10:08 - 00000369 _____ () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk
2014-04-27 23:24 - 2013-08-22 10:17 - 00000000 ___RD () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-04-27 23:24 - 2013-08-22 10:17 - 00000000 ____D () C:\Users\[USRNAME]\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-04-27 23:24 - 2013-08-22 10:17 - 00000000 ____D () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-04-27 23:19 - 2014-04-28 14:00 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-04-27 23:19 - 2014-03-20 23:03 - 00053024 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll
2014-04-27 23:19 - 2014-03-04 14:34 - 04348704 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll
2014-04-27 23:19 - 2014-03-04 14:34 - 03044696 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc.dll
2014-04-27 23:19 - 2014-03-04 14:34 - 02556360 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvcr.dll
2014-04-27 23:19 - 2014-03-04 14:34 - 00663896 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe
2014-04-27 23:19 - 2014-03-04 14:34 - 00375128 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmctray.dll
2014-04-27 23:19 - 2014-03-04 14:34 - 00062752 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvshext.dll
2014-04-27 23:19 - 2014-03-04 13:32 - 00599840 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvStreaming.exe
2014-04-27 23:18 - 2014-04-28 11:55 - 01414220 _____ () C:\WINDOWS\WindowsUpdate.log
2014-04-27 23:18 - 2014-04-27 23:26 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2014-04-27 23:18 - 2014-04-27 23:19 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation
2014-04-27 23:18 - 2014-04-27 23:18 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2014-04-27 22:46 - 2014-04-27 23:33 - 00006674 _____ () C:\WINDOWS\comsetup.log
2014-04-27 21:26 - 2014-04-27 23:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2014-04-27 21:25 - 2014-04-27 23:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Foxit Reader
2014-04-27 21:25 - 2014-04-27 21:25 - 00000000 ____D () C:\Program Files\Foxit Software
2014-04-27 21:24 - 2014-04-27 21:24 - 33488656 _____ (Foxit Corporation ) C:\Users\[USRNAME]\Downloads\FoxitReader614.0217_enu_Setup.exe
2014-04-20 10:17 - 2014-04-20 10:17 - 00244928 _____ (IvoSoft) C:\WINDOWS\system32\StartMenuHelper32.dll
2014-04-14 20:07 - 2014-04-14 20:07 - 00000000 ____D () C:\Program Files\Mozilla Firefox
==================== One Month Modified Files and Folders =======
2014-04-28 14:18 - 2014-04-28 14:18 - 00010256 _____ () C:\Users\[USRNAME]\Desktop\FRST.txt
2014-04-28 14:18 - 2014-04-28 14:18 - 00000000 ____D () C:\FRST
2014-04-28 14:16 - 2014-04-28 14:16 - 01049600 _____ (Farbar) C:\Users\[USRNAME]\Desktop\FRST.exe
2014-04-28 14:16 - 2014-04-28 14:15 - 00000000 ____D () C:\Users\[USRNAME]\Desktop\Trojaner-Board
2014-04-28 14:15 - 2014-04-28 14:15 - 00000000 _____ () C:\Users\[USRNAME]\defogger_reenable
2014-04-28 14:15 - 2014-04-27 23:24 - 00000000 ____D () C:\Users\[USRNAME]
2014-04-28 14:07 - 2014-03-18 10:04 - 01776918 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2014-04-28 14:01 - 2013-08-22 09:23 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2014-04-28 14:00 - 2014-04-27 23:19 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-04-28 12:28 - 2013-08-22 08:13 - 00262144 ___SH () C:\WINDOWS\system32\config\BBI
2014-04-28 12:00 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\sru
2014-04-28 11:55 - 2014-04-27 23:18 - 01414220 _____ () C:\WINDOWS\WindowsUpdate.log
2014-04-28 11:50 - 2014-01-16 23:57 - 00000884 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2014-04-28 11:28 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\Microsoft.NET
2014-04-28 11:15 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\AppReadiness
2014-04-28 11:05 - 2014-01-16 22:02 - 00000000 ____D () C:\Users\[USRNAME]\AppData\Roaming\ClassicShell
2014-04-28 10:57 - 2014-04-28 10:56 - 00017488 _____ (Windows (R) 2000 DDK provider) C:\WINDOWS\gdrv.sys
2014-04-28 10:56 - 2014-04-28 10:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GIGABYTE
2014-04-28 10:56 - 2014-04-28 10:56 - 00000000 ____D () C:\Program Files\GIGABYTE
2014-04-28 10:56 - 2014-01-17 00:40 - 00000000 ___HD () C:\Program Files\InstallShield Installation Information
2014-04-28 10:55 - 2014-04-28 10:55 - 05350367 _____ () C:\Users\[USRNAME]\Downloads\motherboard_utility_atbios.exe
2014-04-28 10:47 - 2014-04-28 10:47 - 00536576 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntvdm.exe
2014-04-28 10:47 - 2014-04-28 10:47 - 00256192 _____ (Microsoft Corporation) C:\WINDOWS\winhelp.exe
2014-04-28 10:47 - 2014-04-28 10:47 - 00221600 _____ (Microsoft Corporation) C:\WINDOWS\system32\lanman.drv
2014-04-28 10:47 - 2014-04-28 10:47 - 00177856 _____ (Microsoft Corporation) C:\WINDOWS\system32\typelib.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00169520 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole2disp.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00153008 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole2nls.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00127213 _____ () C:\WINDOWS\system32\ega.cpi
2014-04-28 10:47 - 2014-04-28 10:47 - 00108464 _____ (Microsoft Corporation) C:\WINDOWS\system32\netapi.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00092320 _____ (Microsoft Corporation) C:\WINDOWS\system32\krnl386.exe
2014-04-28 10:47 - 2014-04-28 10:47 - 00082944 _____ (Microsoft Corporation) C:\WINDOWS\system32\olecli.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00082944 _____ (Microsoft Corporation) C:\WINDOWS\system\olecli.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00069886 _____ () C:\WINDOWS\system32\edit.com
2014-04-28 10:47 - 2014-04-28 10:47 - 00068992 _____ (Microsoft Corporation) C:\WINDOWS\system32\MMSYSTEM.DLL
2014-04-28 10:47 - 2014-04-28 10:47 - 00068992 _____ (Microsoft Corporation) C:\WINDOWS\system\MMSYSTEM.DLL
2014-04-28 10:47 - 2014-04-28 10:47 - 00062976 _____ (Microsoft Corporation) C:\WINDOWS\system32\graftabl.com
2014-04-28 10:47 - 2014-04-28 10:47 - 00053600 _____ () C:\WINDOWS\system32\dosx.exe
2014-04-28 10:47 - 2014-04-28 10:47 - 00050648 _____ () C:\WINDOWS\system32\COMMAND.COM
2014-04-28 10:47 - 2014-04-28 10:47 - 00047840 _____ (Microsoft Corporation) C:\WINDOWS\system32\USER.EXE
2014-04-28 10:47 - 2014-04-28 10:47 - 00046592 _____ (Microsoft Corporation) C:\WINDOWS\system32\pmspl.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00042809 _____ () C:\WINDOWS\system32\KEY01.SYS
2014-04-28 10:47 - 2014-04-28 10:47 - 00042592 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole2.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00042537 _____ () C:\WINDOWS\system32\KEYBOARD.SYS
2014-04-28 10:47 - 2014-04-28 10:47 - 00039424 _____ (Microsoft Corporation) C:\WINDOWS\system32\DDEML.DLL
2014-04-28 10:47 - 2014-04-28 10:47 - 00039274 _____ () C:\WINDOWS\system32\mem.exe
2014-04-28 10:47 - 2014-04-28 10:47 - 00035776 _____ () C:\WINDOWS\system32\NTIO411.SYS
2014-04-28 10:47 - 2014-04-28 10:47 - 00035552 _____ () C:\WINDOWS\system32\NTIO412.SYS
2014-04-28 10:47 - 2014-04-28 10:47 - 00034688 _____ () C:\WINDOWS\system32\NTIO804.SYS
2014-04-28 10:47 - 2014-04-28 10:47 - 00034688 _____ () C:\WINDOWS\system32\NTIO404.SYS
2014-04-28 10:47 - 2014-04-28 10:47 - 00033968 _____ () C:\WINDOWS\system32\NTIO.SYS
2014-04-28 10:47 - 2014-04-28 10:47 - 00032816 _____ (Microsoft Corporation) C:\WINDOWS\system32\COMMDLG.DLL
2014-04-28 10:47 - 2014-04-28 10:47 - 00032816 _____ (Microsoft Corporation) C:\WINDOWS\system\COMMDLG.DLL
2014-04-28 10:47 - 2014-04-28 10:47 - 00029370 _____ () C:\WINDOWS\system32\NTDOS411.SYS
2014-04-28 10:47 - 2014-04-28 10:47 - 00029274 _____ () C:\WINDOWS\system32\NTDOS412.SYS
2014-04-28 10:47 - 2014-04-28 10:47 - 00029146 _____ () C:\WINDOWS\system32\NTDOS804.SYS
2014-04-28 10:47 - 2014-04-28 10:47 - 00029146 _____ () C:\WINDOWS\system32\NTDOS404.SYS
2014-04-28 10:47 - 2014-04-28 10:47 - 00028420 _____ () C:\WINDOWS\system32\bios1.rom
2014-04-28 10:47 - 2014-04-28 10:47 - 00028112 _____ (Microsoft Corporation) C:\WINDOWS\system32\DRWATSON.EXE
2014-04-28 10:47 - 2014-04-28 10:47 - 00027866 _____ () C:\WINDOWS\system32\NTDOS.SYS
2014-04-28 10:47 - 2014-04-28 10:47 - 00027792 _____ (Microsoft Corporation) C:\WINDOWS\system32\compobj.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00027200 _____ (Microsoft Corporation) C:\WINDOWS\system32\ctl3dv2.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00027097 _____ () C:\WINDOWS\system32\country.sys
2014-04-28 10:47 - 2014-04-28 10:47 - 00024576 _____ (Microsoft Corporation) C:\WINDOWS\system32\GDI.EXE
2014-04-28 10:47 - 2014-04-28 10:47 - 00024064 _____ (Microsoft Corporation) C:\WINDOWS\system32\OLESVR.DLL
2014-04-28 10:47 - 2014-04-28 10:47 - 00024064 _____ (Microsoft Corporation) C:\WINDOWS\system\OLESVR.DLL
2014-04-28 10:47 - 2014-04-28 10:47 - 00022016 _____ (Microsoft Corporation) C:\WINDOWS\system32\vdmredir.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00021232 _____ () C:\WINDOWS\system32\graphics.pro
2014-04-28 10:47 - 2014-04-28 10:47 - 00020634 _____ () C:\WINDOWS\system32\debug.exe
2014-04-28 10:47 - 2014-04-28 10:47 - 00019694 _____ () C:\WINDOWS\system32\GRAPHICS.COM
2014-04-28 10:47 - 2014-04-28 10:47 - 00018896 _____ (Microsoft Corporation) C:\WINDOWS\system32\sysedit.exe
2014-04-28 10:47 - 2014-04-28 10:47 - 00018832 _____ () C:\WINDOWS\system32\v7vga.rom
2014-04-28 10:47 - 2014-04-28 10:47 - 00014710 _____ () C:\WINDOWS\system32\KB16.COM
2014-04-28 10:47 - 2014-04-28 10:47 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntvdmd.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00013888 _____ (Microsoft Corporation) C:\WINDOWS\system32\TOOLHELP.DLL
2014-04-28 10:47 - 2014-04-28 10:47 - 00013312 _____ () C:\WINDOWS\system32\win87em.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00012704 _____ (Microsoft Corporation) C:\WINDOWS\system32\WFWNET.DRV
2014-04-28 10:47 - 2014-04-28 10:47 - 00012704 _____ (Microsoft Corporation) C:\WINDOWS\system\WFWNET.DRV
2014-04-28 10:47 - 2014-04-28 10:47 - 00012642 _____ () C:\WINDOWS\system32\edlin.exe
2014-04-28 10:47 - 2014-04-28 10:47 - 00012498 _____ () C:\WINDOWS\system32\append.exe
2014-04-28 10:47 - 2014-04-28 10:47 - 00011753 _____ () C:\WINDOWS\system32\setver.exe
2014-04-28 10:47 - 2014-04-28 10:47 - 00010790 _____ () C:\WINDOWS\system32\EDIT.HLP
2014-04-28 10:47 - 2014-04-28 10:47 - 00010544 _____ (Microsoft Corporation) C:\WINDOWS\system32\COMM.drv
2014-04-28 10:47 - 2014-04-28 10:47 - 00009936 _____ (Microsoft Corporation) C:\WINDOWS\system32\lzexpand.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00009936 _____ (Microsoft Corporation) C:\WINDOWS\system\lzexpand.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\system32\WIFEMAN.DLL
2014-04-28 10:47 - 2014-04-28 10:47 - 00009029 _____ () C:\WINDOWS\system32\ANSI.SYS
2014-04-28 10:47 - 2014-04-28 10:47 - 00009008 _____ (Microsoft Corporation) C:\WINDOWS\system32\ver.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00009008 _____ (Microsoft Corporation) C:\WINDOWS\system\ver.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00008424 _____ () C:\WINDOWS\system32\exe2bin.exe
2014-04-28 10:47 - 2014-04-28 10:47 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\system32\win.com
2014-04-28 10:47 - 2014-04-28 10:47 - 00008191 _____ () C:\WINDOWS\system32\bios4.rom
2014-04-28 10:47 - 2014-04-28 10:47 - 00007052 _____ () C:\WINDOWS\system32\nlsfunc.exe
2014-04-28 10:47 - 2014-04-28 10:47 - 00005532 _____ (Microsoft Corporation) C:\WINDOWS\system\stdole.tlb
2014-04-28 10:47 - 2014-04-28 10:47 - 00005120 _____ (Microsoft Corporation) C:\WINDOWS\system32\WINNLS.DLL
2014-04-28 10:47 - 2014-04-28 10:47 - 00005120 _____ (Microsoft Corporation) C:\WINDOWS\system32\SHELL.DLL
2014-04-28 10:47 - 2014-04-28 10:47 - 00005120 _____ (Microsoft Corporation) C:\WINDOWS\system\SHELL.DLL
2014-04-28 10:47 - 2014-04-28 10:47 - 00004768 _____ () C:\WINDOWS\system32\HIMEM.SYS
2014-04-28 10:47 - 2014-04-28 10:47 - 00004208 _____ (Microsoft Corporation) C:\WINDOWS\system32\storage.dll
2014-04-28 10:47 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\System
2014-04-28 10:46 - 2014-04-28 10:46 - 00528620 _____ (Igor Pavlov) C:\Users\[USRNAME]\Downloads\motherboard_bios_ga-p31-ds3l_f9.exe
2014-04-28 03:35 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\LogFiles
2014-04-28 00:16 - 2014-04-28 00:16 - 02767360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2014-04-28 00:16 - 2014-04-28 00:16 - 01634304 _____ (Microsoft Corporation) C:\WINDOWS\system32\wucltux.dll
2014-04-28 00:16 - 2014-04-28 00:16 - 00307200 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUSettingsProvider.dll
2014-04-28 00:16 - 2014-04-28 00:16 - 00159744 _____ (Microsoft Corporation) C:\WINDOWS\system32\storewuauth.dll
2014-04-28 00:16 - 2014-04-28 00:16 - 00049544 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2014-04-28 00:16 - 2014-04-28 00:16 - 00000000 ____D () C:\Windows.old
2014-04-28 00:16 - 2013-08-22 10:17 - 00262144 _____ () C:\WINDOWS\system32\config\BCD-Template
2014-04-28 00:16 - 2013-08-22 10:17 - 00000000 ___RD () C:\WINDOWS\ToastData
2014-04-28 00:15 - 2014-04-28 00:15 - 18679216 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 12732416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 11791360 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 05833728 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 05786968 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2014-04-28 00:15 - 2014-04-28 00:15 - 05770752 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 03562496 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncEngine.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 02317824 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 02270208 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 02088160 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2014-04-28 00:15 - 2014-04-28 00:15 - 02030080 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmSvc.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 01871192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 01816576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Display.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 01779800 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 01764864 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 01679704 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 01679128 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 01351168 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 01326936 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 01309184 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 01200296 _____ (Microsoft Corporation) C:\WINDOWS\system32\propsys.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 01131520 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 01095488 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 01092896 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 01089024 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 01037504 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel32.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00888320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00887296 _____ (Microsoft Corporation) C:\WINDOWS\system32\aclui.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00863552 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00855552 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdvidcrl.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00839168 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFolder.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00833536 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00828928 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.appcore.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00801792 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00800256 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgent.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00755712 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00735232 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00731648 _____ (Microsoft Corporation) C:\WINDOWS\system32\IKEEXT.DLL
2014-04-28 00:15 - 2014-04-28 00:15 - 00731648 _____ (Microsoft Corporation) C:\WINDOWS\system32\adtschema.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00688640 _____ (Microsoft Corporation) C:\WINDOWS\system32\netlogon.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00672256 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDrive.exe
2014-04-28 00:15 - 2014-04-28 00:15 - 00629760 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00623104 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00605184 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasapi32.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00590336 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveTelemetry.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00589824 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpprefcl.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00567296 _____ (Microsoft Corporation) C:\WINDOWS\system32\nshwfp.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00560128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00551424 _____ (Microsoft Corporation) C:\WINDOWS\system32\BFE.DLL
2014-04-28 00:15 - 2014-04-28 00:15 - 00494592 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsapi.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00491008 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAgent.exe
2014-04-28 00:15 - 2014-04-28 00:15 - 00482416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00444928 _____ (Microsoft Corporation) C:\WINDOWS\system32\AdmTmpl.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00406912 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00406512 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00402432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.Printing.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00390488 _____ (Microsoft Corporation) C:\WINDOWS\system32\netcfgx.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00388408 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00387210 _____ () C:\WINDOWS\system32\ApnDatabase.xml
2014-04-28 00:15 - 2014-04-28 00:15 - 00386560 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlangpui.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00376152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS
2014-04-28 00:15 - 2014-04-28 00:15 - 00374784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\nwifi.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00356864 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidprov.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00355832 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfreadwrite.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00333824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00326024 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00321880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00313344 _____ (Microsoft Corporation) C:\WINDOWS\system32\clusapi.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00305768 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00300544 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanmsm.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00295256 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Classpnp.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00286040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS
2014-04-28 00:15 - 2014-04-28 00:15 - 00283992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00280576 _____ (Microsoft Corporation) C:\WINDOWS\system32\SessEnv.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00264192 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDEServer.exe
2014-04-28 00:15 - 2014-04-28 00:15 - 00264192 _____ (Microsoft Corporation) C:\WINDOWS\system32\FWPUCLNT.DLL
2014-04-28 00:15 - 2014-04-28 00:15 - 00262656 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationApi.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00254976 _____ (Microsoft Corporation) C:\WINDOWS\system32\pdh.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00251392 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSDMon.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00241664 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcomp.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00232960 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSDScDrv.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanapi.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00227840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb10.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00226304 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Sensors.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00222720 _____ (Microsoft Corporation) C:\WINDOWS\system32\spp.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00197632 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00194752 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2014-04-28 00:15 - 2014-04-28 00:15 - 00186880 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsrslvr.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00185856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srvnet.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00184832 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00179200 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdd.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00174080 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00172544 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReInfo.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00171008 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsApi.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00153600 _____ (Microsoft Corporation) C:\WINDOWS\system32\dafWfdProvider.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00151040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Scanners.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00147800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00139776 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxAllUserStore.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00138584 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wof.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00124416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxdav.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00102400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dfsc.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00098816 _____ (Microsoft Corporation) C:\WINDOWS\system32\drvinst.exe
2014-04-28 00:15 - 2014-04-28 00:15 - 00096256 _____ (Microsoft Corporation) C:\WINDOWS\system32\umpnpmgr.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00095744 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevPropMgr.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00094016 _____ (Microsoft Corporation) C:\WINDOWS\system32\userenv.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidclass.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\system32\davclnt.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\system32\w32tm.exe
2014-04-28 00:15 - 2014-04-28 00:15 - 00069464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wfplwfs.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00069120 _____ (Microsoft Corporation) C:\WINDOWS\system32\RMapi.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00068608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\IPMIDrv.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\system32\l2gpstore.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsgqec.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\system32\drvcfg.exe
2014-04-28 00:15 - 2014-04-28 00:15 - 00038400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpipreg.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\SetNetworkLocation.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Shell.Search.UriHandler.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\sxproxy.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredentialMigrationHandler.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00020992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidusb.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanhlp.dll
2014-04-28 00:14 - 2014-04-28 00:14 - 00262144 _____ () C:\WINDOWS\system32\config\userdiff
2014-04-28 00:13 - 2014-04-28 00:13 - 00000000 ____D () C:\WINDOWS\system32\XPSViewer
2014-04-28 00:13 - 2014-04-28 00:13 - 00000000 ____D () C:\Program Files\Reference Assemblies
2014-04-28 00:13 - 2014-04-28 00:13 - 00000000 ____D () C:\Program Files\MSBuild
2014-04-28 00:09 - 2014-04-28 00:06 - 00000000 ____D () C:\Program Files\Spybot - Search & Destroy 2
2014-04-28 00:07 - 2014-04-28 00:06 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy
2014-04-28 00:06 - 2014-04-28 00:06 - 00002149 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot-S&D Start Center.lnk
2014-04-28 00:06 - 2014-04-28 00:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2
2014-04-28 00:05 - 2014-04-28 00:05 - 40658208 _____ (Safer-Networking Ltd. ) C:\Users\[USRNAME]\Downloads\spybot-2.2.25.exe
2014-04-27 23:58 - 2014-04-27 23:58 - 00043152 _____ (AVAST Software) C:\WINDOWS\avastSS.scr
2014-04-27 23:58 - 2014-04-27 23:58 - 00024184 _____ () C:\WINDOWS\system32\Drivers\aswHwid.sys
2014-04-27 23:58 - 2014-01-16 21:55 - 00776976 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys
2014-04-27 23:58 - 2014-01-16 21:55 - 00411552 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys
2014-04-27 23:58 - 2014-01-16 21:55 - 00271264 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2014-04-27 23:58 - 2014-01-16 21:55 - 00180632 _____ () C:\WINDOWS\system32\Drivers\aswVmm.sys
2014-04-27 23:58 - 2014-01-16 21:55 - 00081768 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys
2014-04-27 23:58 - 2014-01-16 21:55 - 00067824 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2014-04-27 23:58 - 2014-01-16 21:55 - 00067776 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswstm.sys
2014-04-27 23:58 - 2014-01-16 21:55 - 00049944 _____ () C:\WINDOWS\system32\Drivers\aswRvrt.sys
2014-04-27 23:53 - 2013-08-22 10:17 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-04-27 23:53 - 2013-08-22 10:17 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-04-27 23:53 - 2013-08-22 10:17 - 00000000 ____D () C:\Program Files\Windows Defender
2014-04-27 23:52 - 2014-04-27 23:52 - 00000000 ___RD () C:\WINDOWS\BrowserChoice
2014-04-27 23:47 - 2014-04-27 23:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-04-27 23:47 - 2014-04-27 23:45 - 00004155 _____ () C:\WINDOWS\system32\jupdate-1.7.0_55-b14.log
2014-04-27 23:47 - 2014-01-17 23:15 - 00000000 ____D () C:\ProgramData\Oracle
2014-04-27 23:47 - 2014-01-17 23:15 - 00000000 ____D () C:\Program Files\Java
2014-04-27 23:44 - 2014-04-27 23:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Classic Shell
2014-04-27 23:44 - 2014-01-16 22:02 - 00000000 ____D () C:\ProgramData\ClassicShell
2014-04-27 23:44 - 2014-01-16 22:01 - 00000000 ____D () C:\Program Files\Classic Shell
2014-04-27 23:43 - 2014-04-27 23:43 - 06869696 _____ (IvoSoft) C:\Users\[USRNAME]\Downloads\ClassicShellSetup_4_1_0-de.exe
2014-04-27 23:43 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\restore
2014-04-27 23:38 - 2014-03-18 11:45 - 00000000 ___HD () C:\$Windows.~BT
2014-04-27 23:37 - 2014-04-27 23:37 - 00000000 ____D () C:\Users\[USRNAME]\AppData\Local\NVIDIA
2014-04-27 23:37 - 2014-04-27 23:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2014-04-27 23:36 - 2014-04-28 00:16 - 00000000 ___DC () C:\WINDOWS\Panther
2014-04-27 23:36 - 2014-04-27 23:36 - 00001456 _____ () C:\Users\[USRNAME]\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-04-27 23:36 - 2014-04-27 23:36 - 00000020 ___SH () C:\Users\[USRNAME]\ntuser.ini
2014-04-27 23:34 - 2014-04-27 23:34 - 00000000 _SHDL () C:\Users\Default\Startmenü
2014-04-27 23:34 - 2014-04-27 23:34 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung
2014-04-27 23:34 - 2014-04-27 23:34 - 00000000 _SHDL () C:\Users\Default\Druckumgebung
2014-04-27 23:34 - 2014-04-27 23:34 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik
2014-04-27 23:34 - 2014-04-27 23:34 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder
2014-04-27 23:34 - 2014-04-27 23:34 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-04-27 23:34 - 2014-04-27 23:34 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf
2014-04-27 23:34 - 2014-04-27 23:34 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik
2014-04-27 23:34 - 2014-04-27 23:34 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder
2014-04-27 23:34 - 2014-04-27 23:34 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-04-27 23:34 - 2014-04-27 23:34 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf
2014-04-27 23:34 - 2014-04-27 23:34 - 00000000 _SHDL () C:\Programme
2014-04-27 23:34 - 2013-08-22 10:17 - 00000000 ____D () C:\Program Files\Windows NT
2014-04-27 23:34 - 2013-08-22 08:21 - 00000000 __RHD () C:\Users\Default
2014-04-27 23:33 - 2014-04-27 23:33 - 00021532 _____ () C:\WINDOWS\system32\emptyregdb.dat
2014-04-27 23:33 - 2014-04-27 23:24 - 00032388 _____ () C:\WINDOWS\diagwrn.xml
2014-04-27 23:33 - 2014-04-27 23:24 - 00032388 _____ () C:\WINDOWS\diagerr.xml
2014-04-27 23:33 - 2014-04-27 22:46 - 00006674 _____ () C:\WINDOWS\comsetup.log
2014-04-27 23:33 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\Registration
2014-04-27 23:33 - 2013-08-22 09:23 - 00332763 _____ () C:\WINDOWS\setupact.log
2014-04-27 23:32 - 2013-08-22 10:17 - 00000000 __RSD () C:\WINDOWS\Media
2014-04-27 23:31 - 2014-04-27 23:31 - 00000020 ___SH () C:\Users\UpdatusUser\ntuser.ini
2014-04-27 23:31 - 2013-08-22 10:17 - 00000000 __RHD () C:\Users\Public\Libraries
2014-04-27 23:31 - 2013-08-22 08:21 - 00000000 ___RD () C:\Users\Public
2014-04-27 23:28 - 2013-08-22 09:22 - 00474824 _____ () C:\WINDOWS\system32\FNTCACHE.DAT
2014-04-27 23:27 - 2014-04-27 23:27 - 00001515 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2014-04-27 23:27 - 2014-04-27 23:27 - 00000000 ____D () C:\Users\Default\AppData\Local\Microsoft Help
2014-04-27 23:27 - 2014-04-27 23:27 - 00000000 ____D () C:\Users\Default User\AppData\Local\Microsoft Help
2014-04-27 23:27 - 2014-04-27 21:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2014-04-27 23:27 - 2014-04-27 21:25 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Foxit Reader
2014-04-27 23:27 - 2014-03-22 23:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickPar
2014-04-27 23:27 - 2014-03-22 21:12 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ImgBurn
2014-04-27 23:27 - 2014-03-18 09:45 - 00000000 ____D () C:\WINDOWS\ShellNew
2014-04-27 23:27 - 2014-03-18 09:30 - 00000000 ____D () C:\WINDOWS\system32\WCN
2014-04-27 23:27 - 2014-03-05 21:18 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FlacSquisher
2014-04-27 23:27 - 2014-03-05 20:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mp3tag
2014-04-27 23:27 - 2014-03-05 20:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Exact Audio Copy
2014-04-27 23:27 - 2014-03-03 21:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2014-04-27 23:27 - 2014-02-18 23:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast
2014-04-27 23:27 - 2014-01-17 22:51 - 00000000 ____D () C:\Users\[USRNAME]\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Unlocker
2014-04-27 23:27 - 2014-01-17 19:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Speccy
2014-04-27 23:27 - 2014-01-16 23:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VLC Player
2014-04-27 23:27 - 2014-01-16 23:26 - 00000000 ____D () C:\Users\[USRNAME]\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\IrfanView
2014-04-27 23:27 - 2013-08-22 10:18 - 00004893 _____ () C:\WINDOWS\DtcInstall.log
2014-04-27 23:27 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\WinBioPlugIns
2014-04-27 23:27 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\spool
2014-04-27 23:27 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\NDF
2014-04-27 23:27 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\MUI
2014-04-27 23:27 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\IME
2014-04-27 23:27 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\de-DE
2014-04-27 23:27 - 2013-08-22 08:13 - 00008192 ___SH () C:\WINDOWS\system32\config\ELAM
2014-04-27 23:27 - 2012-07-26 06:43 - 00000000 ____D () C:\Users\Default.migrated
2014-04-27 23:26 - 2014-04-27 23:18 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2014-04-27 23:26 - 2014-03-22 23:32 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Glorylogic
2014-04-27 23:26 - 2014-03-22 21:25 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Codemasters
2014-04-27 23:26 - 2014-03-03 21:32 - 00000000 ____D () C:\WINDOWS\system32\appmgmt
2014-04-27 23:26 - 2014-01-16 21:50 - 00000000 ____D () C:\ProgramData\PRICache
2014-04-27 23:26 - 2013-08-22 10:17 - 00000000 __SHD () C:\Program Files\Windows Sidebar
2014-04-27 23:26 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\Help
2014-04-27 23:26 - 2013-08-22 10:17 - 00000000 ____D () C:\Program Files\Microsoft.NET
2014-04-27 23:26 - 2013-08-22 10:17 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared
2014-04-27 23:25 - 2014-04-27 23:25 - 00000000 ____D () C:\WINDOWS\system32\config\bbimigrate
2014-04-27 23:25 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\Recovery
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\[USRNAME]\Startmenü
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\[USRNAME]\Netzwerkumgebung
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\[USRNAME]\Druckumgebung
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\[USRNAME]\Documents\Eigene Musik
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\[USRNAME]\Documents\Eigene Bilder
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\[USRNAME]\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\[USRNAME]\AppData\Local\Verlauf
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\UpdatusUser\Startmenü
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\UpdatusUser\Netzwerkumgebung
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\UpdatusUser\Druckumgebung
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\UpdatusUser\Documents\Eigene Musik
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\UpdatusUser\Documents\Eigene Bilder
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\UpdatusUser\AppData\Local\Verlauf
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 ___RD () C:\Users\[USRNAME]\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 ___RD () C:\Users\[USRNAME]\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 ___RD () C:\Users\[USRNAME]\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 ___RD () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 ___RD () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-04-27 23:21 - 2014-01-16 21:46 - 00000000 __SHD () C:\Recovery
2014-04-27 23:19 - 2014-04-27 23:18 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation
2014-04-27 23:18 - 2014-04-27 23:18 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2014-04-27 23:17 - 2014-03-18 01:54 - 00000800 _____ () C:\WINDOWS\PFRO.log
2014-04-27 23:07 - 2014-01-16 21:50 - 02041337 _____ () C:\WINDOWS\WindowsUpdate (1).log
2014-04-27 22:51 - 2014-01-16 21:41 - 00008192 __RSH () C:\BOOTSECT.BAK
2014-04-27 22:34 - 2012-07-26 08:53 - 00000000 ____D () C:\WINDOWS\AUInstallAgent
2014-04-27 21:25 - 2014-04-27 21:25 - 00000000 ____D () C:\Program Files\Foxit Software
2014-04-27 21:24 - 2014-04-27 21:24 - 33488656 _____ (Foxit Corporation ) C:\Users\[USRNAME]\Downloads\FoxitReader614.0217_enu_Setup.exe
2014-04-27 21:24 - 2014-01-17 01:02 - 00000000 ____D () C:\Users\[USRNAME]\AppData\Roaming\Foxit Software
2014-04-20 10:17 - 2014-04-20 10:17 - 00244928 _____ (IvoSoft) C:\WINDOWS\system32\StartMenuHelper32.dll
2014-04-15 11:16 - 2014-01-16 21:58 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2014-04-14 20:13 - 2014-04-27 23:47 - 00094632 _____ (Oracle Corporation) C:\WINDOWS\system32\WindowsAccessBridge.dll
2014-04-14 20:07 - 2014-04-14 20:07 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-04-14 20:05 - 2014-04-27 23:47 - 00264616 _____ (Oracle Corporation) C:\WINDOWS\system32\javaws.exe
2014-04-14 20:05 - 2014-04-27 23:47 - 00175528 _____ (Oracle Corporation) C:\WINDOWS\system32\javaw.exe
2014-04-14 20:04 - 2014-04-27 23:47 - 00175016 _____ (Oracle Corporation) C:\WINDOWS\system32\java.exe
2014-04-14 09:14 - 2014-01-16 23:32 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-04-14 09:11 - 2014-01-16 22:28 - 00000000 ____D () C:\WINDOWS\system32\MRT
2014-04-14 09:10 - 2014-01-16 22:28 - 88028728 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2014-03-31 23:23 - 2013-08-22 10:18 - 00693240 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerApp.exe
2014-03-31 23:23 - 2013-08-22 10:18 - 00105464 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerCPLApp.cpl
Some content of TEMP:
====================
C:\Users\[USRNAME]\AppData\Local\Temp\Foxit Reader Updater.exe
C:\Users\[USRNAME]\AppData\Local\Temp\jre-7u55-windows-i586-iftw.exe
==================== Bamital & volsnap Check =================
C:\WINDOWS\explorer.exe
[2014-04-28 00:15] - [2014-04-28 00:15] - 2088160 ____A (Microsoft Corporation) 119E091B5386379BC5AA598BE9440C75
C:\WINDOWS\system32\winlogon.exe
[2014-03-18 10:08] - [2014-03-18 10:08] - 0459264 ____A (Microsoft Corporation) 70C57DC69D4A7D92D2CAC90C3AD16E6F
C:\WINDOWS\system32\wininit.exe => MD5 is legit
C:\WINDOWS\system32\svchost.exe => MD5 is legit
C:\WINDOWS\system32\services.exe => MD5 is legit
C:\WINDOWS\system32\User32.dll
[2014-03-18 10:08] - [2014-03-18 10:08] - 1370696 ____A (Microsoft Corporation) 43B0EB86B10506AD564E2005A6156D30
C:\WINDOWS\system32\userinit.exe => MD5 is legit
C:\WINDOWS\system32\rpcss.dll
[2014-03-18 10:08] - [2014-03-18 10:08] - 0593408 ____A (Microsoft Corporation) 05C0337538BEECC04FC695808EFF201C
ATTENTION ======> If the system is having audio adware rpcss.dll is patched. Google the MD5, if the MD5 is unique the file is infected.
C:\WINDOWS\system32\Drivers\volsnap.sys
[2014-03-18 10:08] - [2014-03-18 10:08] - 0265048 ____A (Microsoft Corporation) 085918BF459BCB835CFC535BE7138539
LastRegBack: 2014-04-27 23:17
==================== End Of Log ============================
Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x86) Version: 27-04-2014
Ran by [USRNAME] at 2014-04-28 14:18:49
Running from C:\Users\[USRNAME]\Desktop
Boot Mode: Normal
==========================================================
==================== Security Center ========================
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Spybot - Search and Destroy (Enabled - Up to date) {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
==================== Installed Programs ======================
@BIOS (HKLM\...\{B2DC3F08-2EB2-49A5-AA24-15DFC8B1CB83}) (Version: 2.20 - GIGABYTE)
µTorrent (HKCU\...\uTorrent) (Version: 3.4.0.30660 - BitTorrent Inc.)
Adobe Flash Player 12 Plugin (HKLM\...\Adobe Flash Player Plugin) (Version: 12.0.0.77 - Adobe Systems Incorporated)
avast! Free Antivirus (HKLM\...\Avast) (Version: 9.0.2018 - Avast Software)
AXIS CAPT Print Monitor 2.20 (HKLM\...\{7048796B-78EB-45a0-82AF-E8031F4AAE68}) (Version: - )
Canon LBP2900 (HKLM\...\Canon LBP2900) (Version: - )
CDBurnerXP (HKLM\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.2.4478 - CDBurnerXP)
Classic Shell (HKLM\...\{E0E49E80-19DE-43FE-BFF2-8C58DDF3C7F9}) (Version: 4.1.0 - IvoSoft)
Colin McRae Rally 2 (HKLM\...\{19B72AA9-985A-11D4-9C8A-00D0B75D1498}) (Version: - )
Colin McRae Rally 2005 (HKLM\...\{CC67770B-581D-4E96-B72A-A7907CE18725}) (Version: 1.00.000 - )
Colin McRae Rally 3 (HKLM\...\{D26D1A53-D8A2-4004-BC98-0642B4EEAAB2}) (Version: 1.00.000 - )
Definition Update for Microsoft Office 2013 (KB2760587) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{9D8D67FD-8FAB-4B98-A121-4CFA10380058}) (Version: - Microsoft)
Exact Audio Copy 1.0beta3 (HKLM\...\Exact Audio Copy) (Version: 1.0beta3 - Andre Wiethoff)
FlacSquisher 1.2.1 (HKLM\...\FlacSquisher) (Version: 1.2.1 - FlacSquisher)
Foxit Cloud (HKLM\...\{41914D8B-9D6E-4764-A1F9-BC43FB6782C1}_is1) (Version: 1.2.75.126 - Foxit Corporation)
Foxit Reader (HKLM\...\Foxit Reader_is1) (Version: 6.1.4.217 - Foxit Corporation)
ImgBurn (HKLM\...\ImgBurn) (Version: 2.5.8.0 - LIGHTNING UK!)
IrfanView (remove only) (HKLM\...\IrfanView) (Version: 4.37 - Irfan Skiljan)
ISO Workshop 5.1 (HKLM\...\ISO Workshop_is1) (Version: - Glorylogic)
Java 7 Update 55 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83217051FF}) (Version: 7.0.550 - Oracle)
Java Auto Updater (Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
Macrium Reflect Free Edition (HKLM\...\MacriumReflect) (Version: 5.2 - Paramount Software (UK) Ltd.)
Macrium Reflect Free Edition (Version: 5.2.6444 - Paramount Software (UK) Ltd.) Hidden
Microsoft Access MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft DCF MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Excel MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Groove MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft InfoPath MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Lync MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Korrekturhilfen 2013 - Deutsch (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office OSM MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office OSM UX MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Professional Plus 2013 (HKLM\...\Office15.PROPLUSR) (Version: 15.0.4569.1506 - Microsoft Corporation)
Microsoft Office Professional Plus 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Proofing Tools 2013 - English (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Proofing Tools 2013 - Italiano (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft OneNote MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Outlook MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft PowerPoint MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Publisher MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Word MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Mozilla Firefox 28.0 (x86 de) (HKLM\...\Mozilla Firefox 28.0 (x86 de)) (Version: 28.0 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 28.0 - Mozilla)
Mp3tag v2.58 (HKLM\...\Mp3tag) (Version: v2.58 - Florian Heidenreich)
NVIDIA 3D Vision Treiber 335.23 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 335.23 - NVIDIA Corporation)
NVIDIA Grafiktreiber 335.23 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 335.23 - NVIDIA Corporation)
NVIDIA Install Application (Version: 2.1002.145.1024 - NVIDIA Corporation) Hidden
NVIDIA Stereoscopic 3D Driver (Version: 7.17.13.3523 - NVIDIA Corporation) Hidden
NVIDIA Systemsteuerung 335.23 (Version: 335.23 - NVIDIA Corporation) Hidden
NVIDIA Update 10.4.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 10.4.0 - NVIDIA Corporation)
NVIDIA Update Components (Version: 1.15.2 - NVIDIA Corporation) Hidden
NVIDIA Update Core (Version: 10.4.0 - NVIDIA Corporation) Hidden
Outils de vérification linguistique 2013 de Microsoft Office*- Français (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
QuickPar 0.9 (HKLM\...\QuickPar) (Version: 0.9 - Peter B. Clements)
Service Pack 1 for Microsoft Office 2013 (KB2850036) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{7F6C4883-A18C-459A-82C1-A2F9403F2DA6}) (Version: - Microsoft)
Service Pack 1 for Microsoft Office 2013 (KB2850036) 32-Bit Edition (Version: - Microsoft) Hidden
Speccy (HKLM\...\Speccy) (Version: 1.24 - Piriform)
Spybot - Search & Destroy (HKLM\...\{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1) (Version: 2.2.25 - Safer-Networking Ltd.)
Unlocker 1.9.2 (HKLM\...\Unlocker) (Version: 1.9.2 - Cedrick Collomb)
Update for Microsoft Excel 2013 (KB2752087) 32-Bit Edition (HKLM\...\{90150000-0016-0407-0000-0000000FF1CE}_Office15.PROPLUSR_{90060D4D-6BB2-4B29-B804-3C23563EEA6B}) (Version: - Microsoft)
Update for Microsoft Excel 2013 (KB2752087) 32-Bit Edition (HKLM\...\{90150000-0018-0407-0000-0000000FF1CE}_Office15.PROPLUSR_{90060D4D-6BB2-4B29-B804-3C23563EEA6B}) (Version: - Microsoft)
Update for Microsoft Excel 2013 (KB2752087) 32-Bit Edition (HKLM\...\{90150000-001B-0407-0000-0000000FF1CE}_Office15.PROPLUSR_{90060D4D-6BB2-4B29-B804-3C23563EEA6B}) (Version: - Microsoft)
Update for Microsoft Excel 2013 (KB2752087) 32-Bit Edition (HKLM\...\{90150000-006E-0407-0000-0000000FF1CE}_Office15.PROPLUSR_{90060D4D-6BB2-4B29-B804-3C23563EEA6B}) (Version: - Microsoft)
Update for Microsoft Excel 2013 (KB2752087) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{90060D4D-6BB2-4B29-B804-3C23563EEA6B}) (Version: - Microsoft)
Update for Microsoft Lync 2013 (KB2863908) 32-Bit Edition (HKLM\...\{90150000-012B-0407-0000-0000000FF1CE}_Office15.PROPLUSR_{885A0D95-13A8-4A31-B01C-B02454F414AA}) (Version: - Microsoft)
Update for Microsoft Lync 2013 (KB2863908) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{6764E50D-D076-41BC-B069-08DD488AE88B}) (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2760344) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{A7610F07-E844-4444-8E1D-D5BC8AD0B4C5}) (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2760544) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{45B7D395-EB9B-414F-9E46-5849B42326E2}) (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2768012) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{66421820-D3CA-450A-898C-78D7E40108E6}) (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2817636) 32-Bit Edition (HKLM\...\{90150000-006E-0407-0000-0000000FF1CE}_Office15.PROPLUSR_{2D355F71-076A-42AD-8747-6132105441F4}) (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2817636) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{2D355F71-076A-42AD-8747-6132105441F4}) (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2825631) 32-Bit Edition (HKLM\...\{90150000-006E-0407-0000-0000000FF1CE}_Office15.PROPLUSR_{E458713D-E208-4098-A155-EA1152F9B301}) (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2825631) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{E458713D-E208-4098-A155-EA1152F9B301}) (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2827272) 32-Bit Edition (HKLM\...\{90150000-0016-0407-0000-0000000FF1CE}_Office15.PROPLUSR_{5A645CF3-3C40-4172-BCEB-19E3FC855266}) (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2827272) 32-Bit Edition (HKLM\...\{90150000-0090-0407-0000-0000000FF1CE}_Office15.PROPLUSR_{5A645CF3-3C40-4172-BCEB-19E3FC855266}) (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2827272) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{5A645CF3-3C40-4172-BCEB-19E3FC855266}) (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2863825) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{96754DD8-5AF9-4CF8-A5A9-19770CD9AFBC}) (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2863843) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{AD7045B8-1D75-4B4C-8120-12F045D206C7}) (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2863844) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{8AEAF88E-A488-4C1E-B10D-F00143BA650F}) (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2863860) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{4E47A3B9-D863-4CE7-9488-847F2981361B}) (Version: - Microsoft)
Update for Microsoft OneDrive for Business (KB2863864) 32-Bit Edition (HKLM\...\{90150000-00BA-0407-0000-0000000FF1CE}_Office15.PROPLUSR_{48D4C003-065C-460C-A864-BB18A159F3D6}) (Version: - Microsoft)
Update for Microsoft OneDrive for Business (KB2863864) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{48D4C003-065C-460C-A864-BB18A159F3D6}) (Version: - Microsoft)
Update for Microsoft OneNote 2013 (KB2817628) 32-Bit Edition (HKLM\...\{90150000-00A1-0407-0000-0000000FF1CE}_Office15.PROPLUSR_{DF36A224-4C72-4FF4-9961-CD4873DDAE6C}) (Version: - Microsoft)
Update for Microsoft OneNote 2013 (KB2817628) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{DF36A224-4C72-4FF4-9961-CD4873DDAE6C}) (Version: - Microsoft)
Update for Microsoft Outlook 2013 (KB2863911) 32-Bit Edition (HKLM\...\{90150000-001A-0407-0000-0000000FF1CE}_Office15.PROPLUSR_{DA3F3D63-4C9F-407B-9CA1-39638F85BDDD}) (Version: - Microsoft)
Update for Microsoft Outlook 2013 (KB2863911) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{6022B459-32A4-4318-A9A4-815C0BCEF977}) (Version: - Microsoft)
Update for Microsoft PowerPoint 2013 (KB2837627) 32-Bit Edition (HKLM\...\{90150000-0018-0407-0000-0000000FF1CE}_Office15.PROPLUSR_{CA8215E2-4E68-4BCA-BBEB-D4ED8140F037}) (Version: - Microsoft)
Update for Microsoft PowerPoint 2013 (KB2837627) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{CA8215E2-4E68-4BCA-BBEB-D4ED8140F037}) (Version: - Microsoft)
Update for Microsoft Visio Viewer 2013 (KB2817301) 32-Bit Edition (HKLM\...\{90150000-006E-0407-0000-0000000FF1CE}_Office15.PROPLUSR_{25C61889-2E44-4BE1-9E96-9364BFDCF501}) (Version: - Microsoft)
Update for Microsoft Visio Viewer 2013 (KB2817301) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{25C61889-2E44-4BE1-9E96-9364BFDCF501}) (Version: - Microsoft)
Update for Microsoft Word 2013 (KB2863909) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{FF3BD143-BA46-4948-A71F-5B07AA1706BB}) (Version: - Microsoft)
VLC media player 2.1.3 (HKLM\...\VLC media player) (Version: 2.1.3 - VideoLAN)
WinRAR 5.01 (32-Bit) (HKLM\...\WinRAR archiver) (Version: 5.01.0 - win.rar GmbH)
==================== Restore Points =========================
27-04-2014 21:43:31 Classic Shell wird installiert
==================== Hosts content: ==========================
2013-08-22 08:13 - 2013-08-22 08:13 - 00000824 ____A C:\WINDOWS\system32\Drivers\etc\hosts
==================== Scheduled Tasks (whitelisted) =============
Task: {00BC77BF-3352-4FE8-9617-4F1B27BEC19A} - System32\Tasks\Microsoft\Windows\Plug and Play\Plug and Play Cleanup
Task: {01BCC00A-C6A8-474C-BA2D-3076F3CE544D} - System32\Tasks\Microsoft\Windows\DiskCleanup\SilentCleanup => C:\WINDOWS\system32\cleanmgr.exe [2014-03-18] (Microsoft Corporation)
Task: {02B97B27-29F3-4F0D-B9D9-1A218C58AD6F} - System32\Tasks\Microsoft\Windows\DiskFootprint\Diagnostics
Task: {030754FE-CD22-4524-9223-F6029F8661B2} - System32\Tasks\Microsoft Office 15 Sync Maintenance for Han-[USRNAME] Han => C:\Program Files\Microsoft Office\Office15\MsoSync.exe [2014-01-23] (Microsoft Corporation)
Task: {03F00483-DFF0-469F-88A0-E7C9E3D9F4A7} - System32\Tasks\Microsoft\Windows\WOF\WIM-Hash-Validation
Task: {1162FB25-B404-4E6D-81F6-5CED9D9E2420} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe [2014-01-23] (Microsoft Corporation)
Task: {17233BE9-87E9-40B0-B003-AE9D2B92CBBE} - System32\Tasks\Microsoft\Windows\SettingSync\BackupTask
Task: {247BD142-0549-4E91-84B0-172C25563718} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join => C:\WINDOWS\System32\AutoWorkplace.exe [2013-08-22] (Microsoft Corporation)
Task: {2BE65564-89D1-4396-A5CC-D7D9283FC4A1} - System32\Tasks\Microsoft\Windows\SkyDrive\Routine Maintenance Task
Task: {392EB017-207C-42BF-A061-F3BE721F456C} - System32\Tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState => Rundll32.exe Windows.Storage.ApplicationData.dll,CleanupTemporaryState
Task: {3BCE7CAA-B219-4DE1-A204-6D95E59A8C10} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2014-04-27] (AVAST Software)
Task: {4B7EF56A-8A42-4BD2-BB5C-7C389AC54A37} - System32\Tasks\Microsoft\Windows\AppxDeploymentClient\Pre-staged app cleanup => Rundll32.exe %windir%\system32\AppxDeploymentClient.dll,AppxPreStageCleanupRunTask
Task: {4BEFF2C3-9BE2-4BB2-B0C5-4AD60B7F7DA7} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-23] (Microsoft Corporation)
Task: {52CFA6F2-C156-4D64-9023-F3982C0F565C} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files\Spybot - Search & Destroy 2\SDImmunize.exe
Task: {5700ACE8-D0AF-4BA7-98B6-1033521A877A} - System32\Tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask => Rundll32.exe sysmain.dll,PfSvWsSwapAssessmentTask
Task: {6E84A59B-1863-4B21-8BD8-C9B20FD15484} - System32\Tasks\Microsoft\Windows\Application Experience\StartupAppTask => Rundll32.exe Startupscan.dll,SusRunTask
Task: {7276DEEA-6ED2-4091-AF19-079E9B8C56C7} - System32\Tasks\Microsoft\Windows\WOF\WIM-Hash-Management
Task: {7C7CF1DA-F461-4850-96B2-ADCA8A67E59C} - System32\Tasks\Microsoft\Windows\WS\License Validation => Rundll32.exe WSClient.dll,WSpTLR licensing
Task: {87C4F0B9-1B6C-440D-8BC1-8A9517983749} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-23] (Microsoft Corporation)
Task: {8B5819AE-7B44-478B-A3D3-8846AF160A8F} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCachePrepopulate
Task: {8D467E35-0DE8-478D-A88B-1B1394AEE325} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-03-14] (Adobe Systems Incorporated)
Task: {92ED6570-4654-4BFA-9A6C-1084C6939C16} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Maintenance Work
Task: {997C8BBD-710B-4E66-B5BC-CC09575A58D2} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCacheRebalance
Task: {A5D45ED3-F524-4574-8F39-527F3729D1E2} - System32\Tasks\Microsoft\Windows\Time Zone\SynchronizeTimeZone => C:\WINDOWS\system32\tzsync.exe [2013-08-22] (Microsoft Corporation)
Task: {A97156F7-9175-4E02-8CEB-18A7169BE521} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files\Spybot - Search & Destroy 2\SDUpdate.exe
Task: {C0D0F7C4-419F-41B3-90A2-FE79270B828A} - System32\Tasks\Microsoft\Windows\SettingSync\NetworkStateChangeTask
Task: {C259DDA0-DC67-4D80-8DBF-0FA873C25882} - System32\Tasks\Microsoft\Windows\SetupSQMTask => C:\WINDOWS\SYSTEM32\OOBE\SETUPSQM.EXE [2013-08-22] (Microsoft Corporation)
Task: {CF5A1DDC-D14D-4D59-AD49-A19A645B087B} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Logon Synchronization
Task: {DCF55BED-B1DF-4ABF-8D85-6542C7007799} - System32\Tasks\Microsoft\Windows\RecoveryEnvironment\VerifyWinRE
Task: {E4C8774A-2818-45A4-8A6D-11DDF6348886} - System32\Tasks\Microsoft\Windows\SkyDrive\Idle Sync Maintenance Task
Task: {E80A920D-59BD-491A-AB7A-C55ED54079A9} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files\Spybot - Search & Destroy 2\SDScan.exe
Task: {F7217E62-6F97-491F-A19B-413BDD5879FF} - System32\Tasks\Microsoft\Windows\Setup\SetupCleanupTask
Task: {FAB49829-3EE7-4234-BE84-277862F2A57C} - System32\Tasks\Microsoft\Windows\WS\WSRefreshBannedAppsListTask => Rundll32.exe WSClient.dll,RefreshBannedAppsList
Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
==================== Loaded Modules (whitelisted) =============
2014-04-27 23:19 - 2014-03-04 14:34 - 00109000 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax.dll
2014-04-28 10:28 - 2014-04-28 10:28 - 02252800 _____ () C:\Program Files\AVAST Software\Avast\defs\14042800\algo.dll
2014-04-28 00:06 - 2012-08-23 10:38 - 00574840 _____ () C:\Program Files\Spybot - Search & Destroy 2\sqlite3.dll
2014-04-28 00:06 - 2013-05-16 10:55 - 00113496 _____ () C:\Program Files\Spybot - Search & Destroy 2\snlThirdParty150.bpl
2014-04-28 00:06 - 2013-05-16 10:55 - 00416600 _____ () C:\Program Files\Spybot - Search & Destroy 2\DEC150.bpl
2014-04-28 00:06 - 2013-05-16 10:55 - 00161112 _____ () C:\Program Files\Spybot - Search & Destroy 2\snlFileFormats150.bpl
2014-04-28 00:06 - 2012-04-03 17:06 - 00565640 _____ () C:\Program Files\Spybot - Search & Destroy 2\av\BDSmartDB.dll
2010-07-04 23:32 - 2010-07-04 23:32 - 00004608 _____ () C:\Program Files\Unlocker\UnlockerHook.dll
2010-07-04 23:32 - 2010-07-04 23:32 - 00010752 _____ () C:\Program Files\Unlocker\UnlockerCOM.dll
2014-01-16 21:55 - 2014-01-16 21:55 - 19336120 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2010-07-04 21:51 - 2010-07-04 21:51 - 00017408 _____ () C:\Program Files\Unlocker\UnlockerAssistant.exe
2014-04-14 20:07 - 2014-04-14 20:07 - 03642480 _____ () C:\Program Files\Mozilla Firefox\mozjs.dll
2014-03-14 09:50 - 2014-03-14 09:50 - 16276872 _____ () C:\Windows\system32\Macromed\Flash\NPSWF32_12_0_0_77.dll
==================== Alternate Data Streams (whitelisted) =========
==================== Safe Mode (whitelisted) ===================
==================== Disabled items from MSCONFIG ==============
==================== Faulty Device Manager Devices =============
Name: Fast-Ethernet-Netzwerkkarte für Realtek RTL8139/810x-Familie
Description: Fast-Ethernet-Netzwerkkarte für Realtek RTL8139/810x-Familie
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Realtek Semiconductor Corp.
Service: RTL8023xp
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
==================== Event log errors: =========================
Application errors:
==================
Error: (04/27/2014 11:43:34 PM) (Source: Microsoft-Windows-CAPI2) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".
Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll.
System Error:
Zugriff verweigert
.
Error: (04/15/2014 08:45:11 AM) (Source: Desktop Window Manager) (User: )
Description: Der Desktopfenster-Manager hat einen schwerwiegenden Fehler (0x8898008d) festgestellt.
Error: (03/22/2014 10:35:30 PM) (Source: Application Hang) (User: )
Description: Programm uTorrent.exe, Version 3.4.0.30660 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
Prozess-ID: c60
Startzeit: 01cf460df780f995
Endzeit: 0
Anwendungspfad: C:\Users\[USRNAME]\AppData\Roaming\uTorrent\uTorrent.exe
Berichts-ID: 7ee2a833-b201-11e3-afa8-001d7d9a5cf5
Vollständiger Name des fehlerhaften Pakets:
Anwendungs-ID, die relativ zum fehlerhaften Paket ist:
Error: (03/05/2014 09:21:42 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: cdrdao.exe, Version: 0.0.0.0, Zeitstempel: 0x429e389d
Name des fehlerhaften Moduls: cygwin1.dll, Version: 1005.24.0.0, Zeitstempel: 0x45c06855
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000b48b6
ID des fehlerhaften Prozesses: 0xc20
Startzeit der fehlerhaften Anwendung: 0xcdrdao.exe0
Pfad der fehlerhaften Anwendung: cdrdao.exe1
Pfad des fehlerhaften Moduls: cdrdao.exe2
Berichtskennung: cdrdao.exe3
Vollständiger Name des fehlerhaften Pakets: cdrdao.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: cdrdao.exe5
Error: (03/05/2014 08:24:17 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: cdrdao.exe, Version: 0.0.0.0, Zeitstempel: 0x429e389d
Name des fehlerhaften Moduls: cygwin1.dll, Version: 1005.24.0.0, Zeitstempel: 0x45c06855
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000b48b6
ID des fehlerhaften Prozesses: 0x878
Startzeit der fehlerhaften Anwendung: 0xcdrdao.exe0
Pfad der fehlerhaften Anwendung: cdrdao.exe1
Pfad des fehlerhaften Moduls: cdrdao.exe2
Berichtskennung: cdrdao.exe3
Vollständiger Name des fehlerhaften Pakets: cdrdao.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: cdrdao.exe5
Error: (03/03/2014 10:26:47 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: MsiExec.exe, Version: 5.0.9200.16384, Zeitstempel: 0x5010a60b
Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.2.9200.16451, Zeitstempel: 0x50988a1f
Ausnahmecode: 0xc06d007e
Fehleroffset: 0x00012005
ID des fehlerhaften Prozesses: 0x7a8
Startzeit der fehlerhaften Anwendung: 0xMsiExec.exe0
Pfad der fehlerhaften Anwendung: MsiExec.exe1
Pfad des fehlerhaften Moduls: MsiExec.exe2
Berichtskennung: MsiExec.exe3
Vollständiger Name des fehlerhaften Pakets: MsiExec.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: MsiExec.exe5
Error: (03/03/2014 09:34:24 PM) (Source: Windows Search Service) (User: )
Description: Die Leistungsüberwachung für den Gatherer-Dienst kann nicht initialisiert werden, da die Datenquellen nicht geladen sind oder das freigegebene Speicherobjekt nicht geöffnet werden konnte. Dies beeinträchtigt lediglich die Verfügbarkeit der Leistungsindikatoren. Starten Sie den Computer erneut.
Kontext: Anwendung, SystemIndex Katalog
Error: (03/03/2014 09:31:56 PM) (Source: Application Hang) (User: )
Description: Programm WWAHost.exe, Version 6.2.9200.16420 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
Prozess-ID: cf0
Startzeit: 01cf37173202de20
Endzeit: 4294967295
Anwendungspfad: C:\Windows\System32\WWAHost.exe
Berichts-ID: 7657d656-a30a-11e3-afa4-001d7d9a5cf5
Vollständiger Name des fehlerhaften Pakets: winstore_1.0.0.0_neutral_neutral_cw5n1h2txyewy
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: Windows.Store
Error: (03/03/2014 09:31:47 PM) (Source: Microsoft-Windows-Immersive-Shell) (User: Han)
Description: Das Paket „winstore_1.0.0.0_neutral_neutral_cw5n1h2txyewy“ wurde beendet, da das Anhalten zu lange dauerte.
Error: (01/28/2014 09:06:34 PM) (Source: Desktop Window Manager) (User: )
Description: Der Desktopfenster-Manager hat einen schwerwiegenden Fehler (0x8898008d) festgestellt.
System errors:
=============
Error: (04/28/2014 11:29:08 AM) (Source: DCOM) (User: Han)
Description: {1B1F472E-3221-4826-97DB-2C2324D389AE}
Error: (04/28/2014 11:28:38 AM) (Source: DCOM) (User: Han)
Description: {BF6C1E47-86EC-4194-9CE5-13C15DCB2001}
Error: (04/28/2014 10:59:21 AM) (Source: DCOM) (User: Han)
Description: {9BA05972-F6A8-11CF-A442-00A0C90A8F39}
Error: (04/28/2014 10:41:09 AM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Windows-Fehlerberichterstattungsdienst erreicht.
Error: (04/28/2014 10:37:28 AM) (Source: EventLog) (User: )
Description: Das System wurde zuvor am 28.04.2014 um 10:27:57 unerwartet heruntergefahren.
Error: (04/28/2014 10:37:10 AM) (Source: Microsoft-Windows-Kernel-Boot) (User: NT-AUTORITÄT)
Description: 32212265135462597106362228
Error: (04/28/2014 10:27:35 AM) (Source: Microsoft-Windows-Kernel-Boot) (User: NT-AUTORITÄT)
Description: 32212265135462597106362228
Error: (04/28/2014 10:27:57 AM) (Source: EventLog) (User: )
Description: Das System wurde zuvor am 28.04.2014 um 00:40:46 unerwartet heruntergefahren.
Error: (04/27/2014 11:59:43 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst Windows Update konnte nach dem Empfang eines Preshutdown-Steuerelements nicht richtig heruntergefahren werden.
Error: (04/27/2014 11:34:02 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "BranchCache" wurde mit dem folgenden dienstspezifischen Fehler beendet:
%%1260
Microsoft Office Sessions:
=========================
Error: (04/27/2014 11:43:34 PM) (Source: Microsoft-Windows-CAPI2)(User: )
Description:
Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll.
System Error:
Zugriff verweigert
Error: (04/15/2014 08:45:11 AM) (Source: Desktop Window Manager)(User: )
Description: 0x8898008d
Error: (03/22/2014 10:35:30 PM) (Source: Application Hang)(User: )
Description: uTorrent.exe3.4.0.30660c6001cf460df780f9950C:\Users\[USRNAME]\AppData\Roaming\uTorrent\uTorrent.exe7ee2a833-b201-11e3-afa8-001d7d9a5cf5
Error: (03/05/2014 09:21:42 PM) (Source: Application Error)(User: )
Description: cdrdao.exe0.0.0.0429e389dcygwin1.dll1005.24.0.045c06855c0000005000b48b6c2001cf38a822ff446eC:\Program Files\Exact Audio Copy\cdrdao\cdrdao.exeC:\Program Files\Exact Audio Copy\cdrdao\cygwin1.dll618df28d-a49b-11e3-afa6-001d7d9a5cf5
Error: (03/05/2014 08:24:17 PM) (Source: Application Error)(User: )
Description: cdrdao.exe0.0.0.0429e389dcygwin1.dll1005.24.0.045c06855c0000005000b48b687801cf38a01ddba26fC:\Program Files\Exact Audio Copy\cdrdao\cdrdao.exeC:\Program Files\Exact Audio Copy\cdrdao\cygwin1.dll5c330181-a493-11e3-afa6-001d7d9a5cf5
Error: (03/03/2014 10:26:47 PM) (Source: Application Error)(User: )
Description: MsiExec.exe5.0.9200.163845010a60bKERNELBASE.dll6.2.9200.1645150988a1fc06d007e000120057a801cf371ed57e9c34C:\Windows\system32\MsiExec.exeC:\Windows\system32\KERNELBASE.dll24236087-a312-11e3-afa5-001d7d9a5cf5
Error: (03/03/2014 09:34:24 PM) (Source: Windows Search Service)(User: )
Description: Kontext: Anwendung, SystemIndex Katalog
Error: (03/03/2014 09:31:56 PM) (Source: Application Hang)(User: )
Description: WWAHost.exe6.2.9200.16420cf001cf37173202de204294967295C:\Windows\System32\WWAHost.exe7657d656-a30a-11e3-afa4-001d7d9a5cf5winstore_1.0.0.0_neutral_neutral_cw5n1h2txyewyWindows.Store
Error: (03/03/2014 09:31:47 PM) (Source: Microsoft-Windows-Immersive-Shell)(User: Han)
Description: winstore_1.0.0.0_neutral_neutral_cw5n1h2txyewy
Error: (01/28/2014 09:06:34 PM) (Source: Desktop Window Manager)(User: )
Description: 0x8898008d
==================== Memory info ===========================
Percentage of memory in use: 46%
Total physical RAM: 2046.49 MB
Available physical RAM: 1098.53 MB
Total Pagefile: 3198.49 MB
Available Pagefile: 2143.4 MB
Total Virtual: 2047.88 MB
Available Virtual: 1864.2 MB
==================== Drives ================================
Drive c: (SYSTEM) (Fixed) (Total:298.09 GB) (Free:257.9 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 298 GB) (Disk ID: 00000001)
Partition 1: (Active) - (Size=298 GB) - (Type=07 NTFS)
==================== End Of Log ============================
Vielen Dank und liebe Grüße, M4tt0 |
|
28.04.2014, 18:28
| #2 |
| /// the machine /// TB-Ausbilder    | Win 8.1: Avast meldet Iframe-inf, JS: Agent-CYP und Somoto-J hi,
__________________Downloade Dir bitte  Malwarebytes Anti-Malware
Downloade Dir bitte  AdwCleaner auf deinen Desktop.
Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
und ein frisches FRST log bitte.
__________________ |
|
28.04.2014, 20:12
| #3 |
| | Win 8.1: Avast meldet Iframe-inf, JS: Agent-CYP und Somoto-J Hallo schrauber,
__________________na, da bin ich ja wieder in besten Händen! Danke Dir! Hier die Logs... MBAM Code:
ATTFilter Malwarebytes Anti-Malware www.malwarebytes.org Suchlauf Datum: 28.04.2014 Suchlauf-Zeit: 20:23:20 Logdatei: MBAM.txt Administrator: Ja Version: 2.00.1.1004 Malware Datenbank: v2014.04.28.08 Rootkit Datenbank: v2014.03.27.01 Lizenz: Testversion Malware Schutz: Aktiviert Bösartiger Webseiten Schutz: Aktiviert Chameleon: Deaktiviert Betriebssystem: Windows 8.1 CPU: x86 Dateisystem: NTFS Benutzer: [USRNAME] Suchlauf-Art: Bedrohungs-Suchlauf Ergebnis: Abgeschlossen Durchsuchte Objekte: 271623 Verstrichene Zeit: 9 Min, 16 Sek Speicher: Aktiviert Autostart: Aktiviert Dateisystem: Aktiviert Archive: Aktiviert Rootkits: Aktiviert Shuriken: Aktiviert PUP: Aktiviert PUM: Aktiviert Prozesse: 0 (No malicious items detected) Module: 0 (No malicious items detected) Registrierungsschlüssel: 0 (No malicious items detected) Registrierungswerte: 0 (No malicious items detected) Registrierungsdaten: 0 (No malicious items detected) Ordner: 0 (No malicious items detected) Dateien: 1 PUP.Optional.OpenCandy, C:\Users\[USRNAME]\Downloads\SetupImgBurn_2.5.8.0.exe, In Quarantäne, [27d91de3dd23ee126c495006a85c4bb5], Physische Sektoren: 0 (No malicious items detected) (end) AdwCleaner Logfile: Code:
ATTFilter # AdwCleaner v3.205 - Bericht erstellt am 28/04/2014 um 20:30:36
# Aktualisiert 28/04/2014 von Xplode
# Betriebssystem : Windows 8.1 Pro (32 bits)
# Benutzername : [USRNAME] - HAN
# Gestartet von : C:\Users\[USRNAME]\Desktop\adwcleaner.exe
# Option : Löschen
***** [ Dienste ] *****
***** [ Dateien / Ordner ] *****
***** [ Verknüpfungen ] *****
***** [ Registrierungsdatenbank ] *****
***** [ Browser ] *****
-\\ Internet Explorer v11.0.9600.17037
-\\ Mozilla Firefox v28.0 (de)
[ Datei : C:\Users\[USRNAME]\AppData\Roaming\Mozilla\Firefox\Profiles\76jffv28.default\prefs.js ]
*************************
AdwCleaner[R0].txt - [780 octets] - [28/04/2014 20:29:38]
AdwCleaner[S0].txt - [702 octets] - [28/04/2014 20:30:36]
########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [761 octets] ##########
JRT Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.4 (04.06.2014:1)
OS: Windows 8.1 Pro x86
Ran by [USRNAME] on 28.04.2014 at 20:38:25,84
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~ Services
~~~ Registry Values
~~~ Registry Keys
~~~ Files
~~~ Folders
~~~ FireFox
Emptied folder: C:\Users\[USRNAME]\AppData\Roaming\mozilla\firefox\profiles\76jffv28.default\minidumps [2 files]
~~~ Event Viewer Logs were cleared
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 28.04.2014 at 20:41:39,33
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 27-04-2014
Ran by [USRNAME] (administrator) on HAN on 28-04-2014 20:57:45
Running from C:\Users\[USRNAME]\Desktop
Microsoft Windows 8.1 Pro Update 1 (X86) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Microsoft Corporation) C:\WINDOWS\system32\dashost.exe
(Foxit Corporation) C:\Program Files\Foxit Software\Foxit Reader\Foxit Cloud\FCUpdateService.exe
(Paramount Software UK Ltd) C:\Program Files\Macrium\Reflect\ReflectService.exe
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe
(IvoSoft) C:\Program Files\Classic Shell\ClassicStartMenu.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
() C:\Program Files\Unlocker\UnlockerAssistant.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [NvBackend] => C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe [1797064 2014-03-20] (NVIDIA Corporation)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [3873704 2014-04-27] (AVAST Software)
HKLM\...\Run: [UnlockerAssistant] => C:\Program Files\Unlocker\UnlockerAssistant.exe [17408 2010-07-04] ()
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM\...\Run: [Classic Start Menu] => C:\Program Files\Classic Shell\ClassicStartMenu.exe [150208 2014-04-20] (IvoSoft)
HKLM\...\Run: [SDTray] => C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe [5624784 2013-07-25] (Safer-Networking Ltd.)
Winlogon\Notify\SDWinLogon: SDWinLogon.dll [X]
HKU\S-1-5-21-3226048418-3006157909-989406201-1001\...\Policies\Explorer: [NoDriveTypeAutoRun] 0x00000000
HKU\S-1-5-21-3226048418-3006157909-989406201-1004\...\RunOnce: [WAB Migrate] - C:\Program Files\Windows Mail\wab.exe [515584 2013-08-22] (Microsoft Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Canon LBP2900 Statusfenster.lnk
ShortcutTarget: Canon LBP2900 Statusfenster.lnk -> C:\Windows\System32\spool\drivers\w32x86\3\CNAB4LAK.EXE (CANON INC.)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://t.de.msn.com/
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xB5C2046CF412CF01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
SearchScopes: HKLM - DefaultScope value is missing.
BHO: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: ExplorerBHO Class - {449D0D6E-2412-4E61-B68F-1CB625CD9E52} - C:\Program Files\Classic Shell\ClassicExplorer32.dll (IvoSoft)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: ClassicIEBHO Class - {EA801577-E6AD-4BD5-8F71-4BE0154331A4} - C:\Program Files\Classic Shell\ClassicIEDLL_32.dll (IvoSoft)
Toolbar: HKLM - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer32.dll (IvoSoft)
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
FireFox:
========
FF ProfilePath: C:\Users\[USRNAME]\AppData\Roaming\Mozilla\Firefox\Profiles\76jffv28.default
FF Homepage: hxxp://www.tagesschau.de/
FF Plugin: @adobe.com/FlashPlayer - C:\WINDOWS\system32\Macromed\Flash\NPSWF32_13_0_0_206.dll ()
FF Plugin: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf - C:\Program Files\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
FF Plugin: @java.com/DTPlugin,version=10.55.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.55.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/Lync,version=15.0 - C:\Program Files\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL No File
FF Plugin: @nvidia.com/3DVision - C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin: @nvidia.com/3DVisionStreaming - C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin: @videolan.org/vlc,version=2.1.2 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.3 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npMeetingJoinPluginOC.dll (Microsoft Corporation)
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: NoScript - C:\Users\[USRNAME]\AppData\Roaming\Mozilla\Firefox\Profiles\76jffv28.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2014-01-22]
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-01-16]
========================== Services (Whitelisted) =================
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-04-27] (AVAST Software)
R2 FoxitCloudUpdateService; C:\Program Files\Foxit Software\Foxit Reader\Foxit Cloud\FCUpdateService.exe [239680 2014-02-19] (Foxit Corporation)
S2 MBAMScheduler; C:\Program Files\ Malwarebytes Anti-Malware \mbamscheduler.exe [1809720 2014-04-03] (Malwarebytes Corporation)
S2 MBAMService; C:\Program Files\ Malwarebytes Anti-Malware \mbamservice.exe [857912 2014-04-03] (Malwarebytes Corporation)
R2 ReflectService.exe; C:\Program Files\Macrium\Reflect\ReflectService.exe [605168 2013-12-20] (Paramount Software UK Ltd)
S3 ScDeviceEnum; C:\WINDOWS\System32\ScDeviceEnum.dll [105472 2013-08-22] (Microsoft Corporation)
R2 SDScannerService; C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe [3921880 2013-10-15] (Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe [1042272 2013-09-20] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe [171416 2013-09-13] (Safer-Networking Ltd.)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [280296 2013-10-31] (Microsoft Corporation)
S3 WEPHOSTSVC; C:\WINDOWS\system32\wephostsvc.dll [20992 2013-08-22] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [22224 2013-10-31] (Microsoft Corporation)
S3 workfolderssvc; C:\WINDOWS\system32\workfolderssvc.dll [1210368 2014-03-18] (Microsoft Corporation)
==================== Drivers (Whitelisted) ====================
R2 aswHwid; C:\WINDOWS\system32\drivers\aswHwid.sys [24184 2014-04-27] ()
R2 aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [67824 2014-04-27] (AVAST Software)
R1 aswRdr; C:\WINDOWS\system32\drivers\aswRdr2.sys [81768 2014-04-27] (AVAST Software)
R0 aswRvrt; C:\WINDOWS\system32\Drivers\aswRvrt.sys [49944 2014-04-27] ()
R1 aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [776976 2014-04-27] (AVAST Software)
R1 aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [411552 2014-04-27] (AVAST Software)
S2 aswStm; C:\WINDOWS\system32\drivers\aswStm.sys [67776 2014-04-27] (AVAST Software)
R0 aswVmm; C:\WINDOWS\system32\Drivers\aswVmm.sys [180632 2014-04-27] ()
R1 BasicRender; C:\WINDOWS\System32\drivers\BasicRender.sys [25600 2014-03-18] (Microsoft Corporation)
S3 gdrv; C:\WINDOWS\gdrv.sys [17488 2014-04-28] (Windows (R) 2000 DDK provider)
S3 GPIO; C:\WINDOWS\System32\drivers\iaiogpio.sys [22016 2013-07-23] (Intel Corporation)
S3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [23256 2014-04-03] (Malwarebytes Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [93016 2013-10-31] (Microsoft Corporation)
R0 Wof; C:\WINDOWS\system32\Drivers\Wof.sys [138584 2014-04-28] (Microsoft Corporation)
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-04-28 20:57 - 2014-04-28 20:57 - 00010257 _____ () C:\Users\[USRNAME]\Desktop\FRST.txt
2014-04-28 20:41 - 2014-04-28 20:41 - 00000751 _____ () C:\Users\[USRNAME]\Desktop\JRT.txt
2014-04-28 20:38 - 2014-04-28 20:38 - 00000000 ____D () C:\WINDOWS\ERUNT
2014-04-28 20:36 - 2014-04-28 20:36 - 00000569 _____ () C:\Users\[USRNAME]\Desktop\FRST README.txt
2014-04-28 20:35 - 2014-04-28 20:35 - 00000547 _____ () C:\Users\[USRNAME]\Desktop\JRT README.txt
2014-04-28 20:34 - 2014-04-28 20:34 - 01016261 _____ (Thisisu) C:\Users\[USRNAME]\Desktop\JRT.exe
2014-04-28 20:34 - 2014-04-28 20:34 - 00000000 ____D () C:\Users\[USRNAME]\Desktop\06_FRST (zum Zweiten)
2014-04-28 20:34 - 2014-04-28 20:34 - 00000000 ____D () C:\Users\[USRNAME]\Desktop\05_Junkware Removal Tool
2014-04-28 20:32 - 2014-04-28 20:32 - 00000840 _____ () C:\Users\[USRNAME]\Desktop\AdwCleaner[S0].txt
2014-04-28 20:29 - 2014-04-28 20:30 - 00000000 ____D () C:\AdwCleaner
2014-04-28 20:27 - 2014-04-28 20:28 - 01310283 _____ () C:\Users\[USRNAME]\Desktop\adwcleaner.exe
2014-04-28 20:27 - 2014-04-28 20:27 - 00001232 _____ () C:\Users\[USRNAME]\Desktop\mbam.txt
2014-04-28 20:27 - 2014-04-28 20:27 - 00000000 ____D () C:\Users\[USRNAME]\Desktop\04_AdvCleaner
2014-04-28 20:12 - 2014-04-28 20:32 - 00107736 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2014-04-28 20:12 - 2014-04-28 20:12 - 00001078 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-04-28 20:12 - 2014-04-28 20:12 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware
2014-04-28 20:11 - 2014-04-28 20:12 - 00000000 ____D () C:\Program Files\ Malwarebytes Anti-Malware
2014-04-28 20:11 - 2014-04-28 20:11 - 17305616 _____ (Malwarebytes Corporation ) C:\Users\[USRNAME]\Downloads\mbam-setup-2.0.1.1004.exe
2014-04-28 20:11 - 2014-04-28 20:11 - 00000000 ____D () C:\Users\[USRNAME]\Desktop\03_MBAM
2014-04-28 20:11 - 2014-04-28 20:11 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-04-28 20:11 - 2014-04-03 09:51 - 00073432 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2014-04-28 20:11 - 2014-04-03 09:51 - 00051416 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys
2014-04-28 20:11 - 2014-04-03 09:50 - 00023256 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys
2014-04-28 14:18 - 2014-04-28 20:57 - 00000000 ____D () C:\FRST
2014-04-28 14:16 - 2014-04-28 14:16 - 01049600 _____ (Farbar) C:\Users\[USRNAME]\Desktop\FRST.exe
2014-04-28 14:15 - 2014-04-28 14:15 - 00000000 _____ () C:\Users\[USRNAME]\defogger_reenable
2014-04-28 10:56 - 2014-04-28 10:57 - 00017488 _____ (Windows (R) 2000 DDK provider) C:\WINDOWS\gdrv.sys
2014-04-28 10:56 - 2014-04-28 10:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GIGABYTE
2014-04-28 10:56 - 2014-04-28 10:56 - 00000000 ____D () C:\Program Files\GIGABYTE
2014-04-28 10:55 - 2014-04-28 10:55 - 05350367 _____ () C:\Users\[USRNAME]\Downloads\motherboard_utility_atbios.exe
2014-04-28 10:47 - 2014-04-28 10:47 - 00536576 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntvdm.exe
2014-04-28 10:47 - 2014-04-28 10:47 - 00256192 _____ (Microsoft Corporation) C:\WINDOWS\winhelp.exe
2014-04-28 10:47 - 2014-04-28 10:47 - 00221600 _____ (Microsoft Corporation) C:\WINDOWS\system32\lanman.drv
2014-04-28 10:47 - 2014-04-28 10:47 - 00177856 _____ (Microsoft Corporation) C:\WINDOWS\system32\typelib.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00169520 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole2disp.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00153008 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole2nls.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00127213 _____ () C:\WINDOWS\system32\ega.cpi
2014-04-28 10:47 - 2014-04-28 10:47 - 00108464 _____ (Microsoft Corporation) C:\WINDOWS\system32\netapi.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00092320 _____ (Microsoft Corporation) C:\WINDOWS\system32\krnl386.exe
2014-04-28 10:47 - 2014-04-28 10:47 - 00082944 _____ (Microsoft Corporation) C:\WINDOWS\system32\olecli.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00082944 _____ (Microsoft Corporation) C:\WINDOWS\system\olecli.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00069886 _____ () C:\WINDOWS\system32\edit.com
2014-04-28 10:47 - 2014-04-28 10:47 - 00068992 _____ (Microsoft Corporation) C:\WINDOWS\system32\MMSYSTEM.DLL
2014-04-28 10:47 - 2014-04-28 10:47 - 00068992 _____ (Microsoft Corporation) C:\WINDOWS\system\MMSYSTEM.DLL
2014-04-28 10:47 - 2014-04-28 10:47 - 00062976 _____ (Microsoft Corporation) C:\WINDOWS\system32\graftabl.com
2014-04-28 10:47 - 2014-04-28 10:47 - 00053600 _____ () C:\WINDOWS\system32\dosx.exe
2014-04-28 10:47 - 2014-04-28 10:47 - 00050648 _____ () C:\WINDOWS\system32\COMMAND.COM
2014-04-28 10:47 - 2014-04-28 10:47 - 00047840 _____ (Microsoft Corporation) C:\WINDOWS\system32\USER.EXE
2014-04-28 10:47 - 2014-04-28 10:47 - 00046592 _____ (Microsoft Corporation) C:\WINDOWS\system32\pmspl.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00042809 _____ () C:\WINDOWS\system32\KEY01.SYS
2014-04-28 10:47 - 2014-04-28 10:47 - 00042592 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole2.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00042537 _____ () C:\WINDOWS\system32\KEYBOARD.SYS
2014-04-28 10:47 - 2014-04-28 10:47 - 00039424 _____ (Microsoft Corporation) C:\WINDOWS\system32\DDEML.DLL
2014-04-28 10:47 - 2014-04-28 10:47 - 00039274 _____ () C:\WINDOWS\system32\mem.exe
2014-04-28 10:47 - 2014-04-28 10:47 - 00035776 _____ () C:\WINDOWS\system32\NTIO411.SYS
2014-04-28 10:47 - 2014-04-28 10:47 - 00035552 _____ () C:\WINDOWS\system32\NTIO412.SYS
2014-04-28 10:47 - 2014-04-28 10:47 - 00034688 _____ () C:\WINDOWS\system32\NTIO804.SYS
2014-04-28 10:47 - 2014-04-28 10:47 - 00034688 _____ () C:\WINDOWS\system32\NTIO404.SYS
2014-04-28 10:47 - 2014-04-28 10:47 - 00033968 _____ () C:\WINDOWS\system32\NTIO.SYS
2014-04-28 10:47 - 2014-04-28 10:47 - 00032816 _____ (Microsoft Corporation) C:\WINDOWS\system32\COMMDLG.DLL
2014-04-28 10:47 - 2014-04-28 10:47 - 00032816 _____ (Microsoft Corporation) C:\WINDOWS\system\COMMDLG.DLL
2014-04-28 10:47 - 2014-04-28 10:47 - 00029370 _____ () C:\WINDOWS\system32\NTDOS411.SYS
2014-04-28 10:47 - 2014-04-28 10:47 - 00029274 _____ () C:\WINDOWS\system32\NTDOS412.SYS
2014-04-28 10:47 - 2014-04-28 10:47 - 00029146 _____ () C:\WINDOWS\system32\NTDOS804.SYS
2014-04-28 10:47 - 2014-04-28 10:47 - 00029146 _____ () C:\WINDOWS\system32\NTDOS404.SYS
2014-04-28 10:47 - 2014-04-28 10:47 - 00028420 _____ () C:\WINDOWS\system32\bios1.rom
2014-04-28 10:47 - 2014-04-28 10:47 - 00028112 _____ (Microsoft Corporation) C:\WINDOWS\system32\DRWATSON.EXE
2014-04-28 10:47 - 2014-04-28 10:47 - 00027866 _____ () C:\WINDOWS\system32\NTDOS.SYS
2014-04-28 10:47 - 2014-04-28 10:47 - 00027792 _____ (Microsoft Corporation) C:\WINDOWS\system32\compobj.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00027200 _____ (Microsoft Corporation) C:\WINDOWS\system32\ctl3dv2.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00027097 _____ () C:\WINDOWS\system32\country.sys
2014-04-28 10:47 - 2014-04-28 10:47 - 00024576 _____ (Microsoft Corporation) C:\WINDOWS\system32\GDI.EXE
2014-04-28 10:47 - 2014-04-28 10:47 - 00024064 _____ (Microsoft Corporation) C:\WINDOWS\system32\OLESVR.DLL
2014-04-28 10:47 - 2014-04-28 10:47 - 00024064 _____ (Microsoft Corporation) C:\WINDOWS\system\OLESVR.DLL
2014-04-28 10:47 - 2014-04-28 10:47 - 00022016 _____ (Microsoft Corporation) C:\WINDOWS\system32\vdmredir.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00021232 _____ () C:\WINDOWS\system32\graphics.pro
2014-04-28 10:47 - 2014-04-28 10:47 - 00020634 _____ () C:\WINDOWS\system32\debug.exe
2014-04-28 10:47 - 2014-04-28 10:47 - 00019694 _____ () C:\WINDOWS\system32\GRAPHICS.COM
2014-04-28 10:47 - 2014-04-28 10:47 - 00018896 _____ (Microsoft Corporation) C:\WINDOWS\system32\sysedit.exe
2014-04-28 10:47 - 2014-04-28 10:47 - 00018832 _____ () C:\WINDOWS\system32\v7vga.rom
2014-04-28 10:47 - 2014-04-28 10:47 - 00014710 _____ () C:\WINDOWS\system32\KB16.COM
2014-04-28 10:47 - 2014-04-28 10:47 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntvdmd.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00013888 _____ (Microsoft Corporation) C:\WINDOWS\system32\TOOLHELP.DLL
2014-04-28 10:47 - 2014-04-28 10:47 - 00013312 _____ () C:\WINDOWS\system32\win87em.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00012704 _____ (Microsoft Corporation) C:\WINDOWS\system32\WFWNET.DRV
2014-04-28 10:47 - 2014-04-28 10:47 - 00012704 _____ (Microsoft Corporation) C:\WINDOWS\system\WFWNET.DRV
2014-04-28 10:47 - 2014-04-28 10:47 - 00012642 _____ () C:\WINDOWS\system32\edlin.exe
2014-04-28 10:47 - 2014-04-28 10:47 - 00012498 _____ () C:\WINDOWS\system32\append.exe
2014-04-28 10:47 - 2014-04-28 10:47 - 00011753 _____ () C:\WINDOWS\system32\setver.exe
2014-04-28 10:47 - 2014-04-28 10:47 - 00010790 _____ () C:\WINDOWS\system32\EDIT.HLP
2014-04-28 10:47 - 2014-04-28 10:47 - 00010544 _____ (Microsoft Corporation) C:\WINDOWS\system32\COMM.drv
2014-04-28 10:47 - 2014-04-28 10:47 - 00009936 _____ (Microsoft Corporation) C:\WINDOWS\system32\lzexpand.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00009936 _____ (Microsoft Corporation) C:\WINDOWS\system\lzexpand.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\system32\WIFEMAN.DLL
2014-04-28 10:47 - 2014-04-28 10:47 - 00009029 _____ () C:\WINDOWS\system32\ANSI.SYS
2014-04-28 10:47 - 2014-04-28 10:47 - 00009008 _____ (Microsoft Corporation) C:\WINDOWS\system32\ver.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00009008 _____ (Microsoft Corporation) C:\WINDOWS\system\ver.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00008424 _____ () C:\WINDOWS\system32\exe2bin.exe
2014-04-28 10:47 - 2014-04-28 10:47 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\system32\win.com
2014-04-28 10:47 - 2014-04-28 10:47 - 00008191 _____ () C:\WINDOWS\system32\bios4.rom
2014-04-28 10:47 - 2014-04-28 10:47 - 00007052 _____ () C:\WINDOWS\system32\nlsfunc.exe
2014-04-28 10:47 - 2014-04-28 10:47 - 00005532 _____ (Microsoft Corporation) C:\WINDOWS\system\stdole.tlb
2014-04-28 10:47 - 2014-04-28 10:47 - 00005120 _____ (Microsoft Corporation) C:\WINDOWS\system32\WINNLS.DLL
2014-04-28 10:47 - 2014-04-28 10:47 - 00005120 _____ (Microsoft Corporation) C:\WINDOWS\system32\SHELL.DLL
2014-04-28 10:47 - 2014-04-28 10:47 - 00005120 _____ (Microsoft Corporation) C:\WINDOWS\system\SHELL.DLL
2014-04-28 10:47 - 2014-04-28 10:47 - 00004768 _____ () C:\WINDOWS\system32\HIMEM.SYS
2014-04-28 10:47 - 2014-04-28 10:47 - 00004208 _____ (Microsoft Corporation) C:\WINDOWS\system32\storage.dll
2014-04-28 10:46 - 2014-04-28 10:46 - 00528620 _____ (Igor Pavlov) C:\Users\[USRNAME]\Downloads\motherboard_bios_ga-p31-ds3l_f9.exe
2014-04-28 00:16 - 2014-04-28 00:16 - 02767360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2014-04-28 00:16 - 2014-04-28 00:16 - 01634304 _____ (Microsoft Corporation) C:\WINDOWS\system32\wucltux.dll
2014-04-28 00:16 - 2014-04-28 00:16 - 00307200 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUSettingsProvider.dll
2014-04-28 00:16 - 2014-04-28 00:16 - 00159744 _____ (Microsoft Corporation) C:\WINDOWS\system32\storewuauth.dll
2014-04-28 00:16 - 2014-04-28 00:16 - 00049544 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2014-04-28 00:16 - 2014-04-28 00:16 - 00000000 ____D () C:\Windows.old
2014-04-28 00:16 - 2014-04-27 23:36 - 00000000 ___DC () C:\WINDOWS\Panther
2014-04-28 00:15 - 2014-04-28 00:15 - 18679216 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 12732416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 11791360 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 05833728 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 05786968 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2014-04-28 00:15 - 2014-04-28 00:15 - 05770752 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 03562496 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncEngine.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 02317824 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 02270208 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 02088160 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2014-04-28 00:15 - 2014-04-28 00:15 - 02030080 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmSvc.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 01871192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 01816576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Display.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 01779800 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 01764864 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 01679704 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 01679128 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 01351168 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 01326936 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 01309184 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 01200296 _____ (Microsoft Corporation) C:\WINDOWS\system32\propsys.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 01131520 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 01095488 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 01092896 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 01089024 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 01037504 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel32.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00888320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00887296 _____ (Microsoft Corporation) C:\WINDOWS\system32\aclui.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00863552 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00855552 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdvidcrl.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00839168 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFolder.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00833536 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00828928 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.appcore.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00801792 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00800256 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgent.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00755712 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00735232 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00731648 _____ (Microsoft Corporation) C:\WINDOWS\system32\IKEEXT.DLL
2014-04-28 00:15 - 2014-04-28 00:15 - 00731648 _____ (Microsoft Corporation) C:\WINDOWS\system32\adtschema.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00688640 _____ (Microsoft Corporation) C:\WINDOWS\system32\netlogon.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00672256 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDrive.exe
2014-04-28 00:15 - 2014-04-28 00:15 - 00629760 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00623104 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00605184 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasapi32.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00590336 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveTelemetry.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00589824 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpprefcl.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00567296 _____ (Microsoft Corporation) C:\WINDOWS\system32\nshwfp.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00560128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00551424 _____ (Microsoft Corporation) C:\WINDOWS\system32\BFE.DLL
2014-04-28 00:15 - 2014-04-28 00:15 - 00494592 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsapi.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00491008 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAgent.exe
2014-04-28 00:15 - 2014-04-28 00:15 - 00482416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00444928 _____ (Microsoft Corporation) C:\WINDOWS\system32\AdmTmpl.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00406912 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00406512 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00402432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.Printing.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00390488 _____ (Microsoft Corporation) C:\WINDOWS\system32\netcfgx.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00388408 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00387210 _____ () C:\WINDOWS\system32\ApnDatabase.xml
2014-04-28 00:15 - 2014-04-28 00:15 - 00386560 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlangpui.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00376152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS
2014-04-28 00:15 - 2014-04-28 00:15 - 00374784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\nwifi.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00356864 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidprov.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00355832 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfreadwrite.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00333824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00326024 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00321880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00313344 _____ (Microsoft Corporation) C:\WINDOWS\system32\clusapi.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00305768 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00300544 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanmsm.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00295256 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Classpnp.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00286040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS
2014-04-28 00:15 - 2014-04-28 00:15 - 00283992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00280576 _____ (Microsoft Corporation) C:\WINDOWS\system32\SessEnv.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00264192 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDEServer.exe
2014-04-28 00:15 - 2014-04-28 00:15 - 00264192 _____ (Microsoft Corporation) C:\WINDOWS\system32\FWPUCLNT.DLL
2014-04-28 00:15 - 2014-04-28 00:15 - 00262656 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationApi.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00254976 _____ (Microsoft Corporation) C:\WINDOWS\system32\pdh.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00251392 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSDMon.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00241664 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcomp.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00232960 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSDScDrv.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanapi.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00227840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb10.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00226304 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Sensors.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00222720 _____ (Microsoft Corporation) C:\WINDOWS\system32\spp.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00197632 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00194752 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2014-04-28 00:15 - 2014-04-28 00:15 - 00186880 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsrslvr.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00185856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srvnet.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00184832 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00179200 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdd.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00174080 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00172544 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReInfo.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00171008 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsApi.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00153600 _____ (Microsoft Corporation) C:\WINDOWS\system32\dafWfdProvider.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00151040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Scanners.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00147800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00139776 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxAllUserStore.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00138584 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wof.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00124416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxdav.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00102400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dfsc.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00098816 _____ (Microsoft Corporation) C:\WINDOWS\system32\drvinst.exe
2014-04-28 00:15 - 2014-04-28 00:15 - 00096256 _____ (Microsoft Corporation) C:\WINDOWS\system32\umpnpmgr.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00095744 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevPropMgr.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00094016 _____ (Microsoft Corporation) C:\WINDOWS\system32\userenv.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidclass.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\system32\davclnt.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\system32\w32tm.exe
2014-04-28 00:15 - 2014-04-28 00:15 - 00069464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wfplwfs.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00069120 _____ (Microsoft Corporation) C:\WINDOWS\system32\RMapi.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00068608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\IPMIDrv.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\system32\l2gpstore.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsgqec.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\system32\drvcfg.exe
2014-04-28 00:15 - 2014-04-28 00:15 - 00038400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpipreg.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\SetNetworkLocation.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Shell.Search.UriHandler.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\sxproxy.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredentialMigrationHandler.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00020992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidusb.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanhlp.dll
2014-04-28 00:14 - 2014-04-28 00:14 - 00262144 _____ () C:\WINDOWS\system32\config\userdiff
2014-04-28 00:13 - 2014-04-28 00:13 - 00000000 ____D () C:\WINDOWS\system32\XPSViewer
2014-04-28 00:13 - 2014-04-28 00:13 - 00000000 ____D () C:\Program Files\Reference Assemblies
2014-04-28 00:13 - 2014-04-28 00:13 - 00000000 ____D () C:\Program Files\MSBuild
2014-04-28 00:13 - 2013-08-03 06:41 - 00778936 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll
2014-04-28 00:13 - 2013-08-03 06:41 - 00102608 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2014-04-28 00:13 - 2013-08-03 06:41 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe
2014-04-28 00:06 - 2014-04-28 00:09 - 00000000 ____D () C:\Program Files\Spybot - Search & Destroy 2
2014-04-28 00:06 - 2014-04-28 00:07 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy
2014-04-28 00:06 - 2014-04-28 00:06 - 00002149 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot-S&D Start Center.lnk
2014-04-28 00:06 - 2014-04-28 00:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2
2014-04-28 00:06 - 2013-09-20 10:49 - 00018968 _____ (Safer Networking Limited) C:\WINDOWS\system32\sdnclean.exe
2014-04-28 00:05 - 2014-04-28 00:05 - 40658208 _____ (Safer-Networking Ltd. ) C:\Users\[USRNAME]\Downloads\spybot-2.2.25.exe
2014-04-27 23:58 - 2014-04-27 23:58 - 00043152 _____ (AVAST Software) C:\WINDOWS\avastSS.scr
2014-04-27 23:58 - 2014-04-27 23:58 - 00024184 _____ () C:\WINDOWS\system32\Drivers\aswHwid.sys
2014-04-27 23:52 - 2014-04-27 23:52 - 00000000 ___RD () C:\WINDOWS\BrowserChoice
2014-04-27 23:52 - 2013-10-31 01:38 - 00202584 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdFilter.sys
2014-04-27 23:52 - 2013-10-31 01:38 - 00093016 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdNisDrv.sys
2014-04-27 23:52 - 2013-10-31 01:36 - 00030224 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdBoot.sys
2014-04-27 23:47 - 2014-04-27 23:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-04-27 23:47 - 2014-04-14 20:13 - 00094632 _____ (Oracle Corporation) C:\WINDOWS\system32\WindowsAccessBridge.dll
2014-04-27 23:47 - 2014-04-14 20:05 - 00264616 _____ (Oracle Corporation) C:\WINDOWS\system32\javaws.exe
2014-04-27 23:47 - 2014-04-14 20:05 - 00175528 _____ (Oracle Corporation) C:\WINDOWS\system32\javaw.exe
2014-04-27 23:47 - 2014-04-14 20:04 - 00175016 _____ (Oracle Corporation) C:\WINDOWS\system32\java.exe
2014-04-27 23:45 - 2014-04-27 23:47 - 00004155 _____ () C:\WINDOWS\system32\jupdate-1.7.0_55-b14.log
2014-04-27 23:44 - 2014-04-27 23:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Classic Shell
2014-04-27 23:43 - 2014-04-27 23:43 - 06869696 _____ (IvoSoft) C:\Users\[USRNAME]\Downloads\ClassicShellSetup_4_1_0-de.exe
2014-04-27 23:37 - 2014-04-27 23:37 - 00000000 ____D () C:\Users\[USRNAME]\AppData\Local\NVIDIA
2014-04-27 23:37 - 2014-04-27 23:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2014-04-27 23:36 - 2014-04-27 23:36 - 00001456 _____ () C:\Users\[USRNAME]\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-04-27 23:36 - 2014-04-27 23:36 - 00000020 ___SH () C:\Users\[USRNAME]\ntuser.ini
2014-04-27 23:34 - 2014-04-27 23:34 - 00000000 _SHDL () C:\Users\Default\Startmenü
2014-04-27 23:34 - 2014-04-27 23:34 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung
2014-04-27 23:34 - 2014-04-27 23:34 - 00000000 _SHDL () C:\Users\Default\Druckumgebung
2014-04-27 23:34 - 2014-04-27 23:34 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik
2014-04-27 23:34 - 2014-04-27 23:34 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder
2014-04-27 23:34 - 2014-04-27 23:34 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-04-27 23:34 - 2014-04-27 23:34 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf
2014-04-27 23:34 - 2014-04-27 23:34 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik
2014-04-27 23:34 - 2014-04-27 23:34 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder
2014-04-27 23:34 - 2014-04-27 23:34 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-04-27 23:34 - 2014-04-27 23:34 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf
2014-04-27 23:34 - 2014-04-27 23:34 - 00000000 _SHDL () C:\Programme
2014-04-27 23:33 - 2014-04-27 23:33 - 00021532 _____ () C:\WINDOWS\system32\emptyregdb.dat
2014-04-27 23:31 - 2014-04-27 23:31 - 00000020 ___SH () C:\Users\UpdatusUser\ntuser.ini
2014-04-27 23:27 - 2014-04-27 23:27 - 00001515 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2014-04-27 23:27 - 2014-04-27 23:27 - 00000000 ____D () C:\Users\Default\AppData\Local\Microsoft Help
2014-04-27 23:27 - 2014-04-27 23:27 - 00000000 ____D () C:\Users\Default User\AppData\Local\Microsoft Help
2014-04-27 23:25 - 2014-04-27 23:25 - 00000000 ____D () C:\WINDOWS\system32\config\bbimigrate
2014-04-27 23:24 - 2014-04-28 14:15 - 00000000 ____D () C:\Users\[USRNAME]
2014-04-27 23:24 - 2014-04-27 23:33 - 00032388 _____ () C:\WINDOWS\diagwrn.xml
2014-04-27 23:24 - 2014-04-27 23:33 - 00032388 _____ () C:\WINDOWS\diagerr.xml
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\[USRNAME]\Startmenü
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\[USRNAME]\Netzwerkumgebung
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\[USRNAME]\Druckumgebung
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\[USRNAME]\Documents\Eigene Musik
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\[USRNAME]\Documents\Eigene Bilder
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\[USRNAME]\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\[USRNAME]\AppData\Local\Verlauf
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\UpdatusUser\Startmenü
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\UpdatusUser\Netzwerkumgebung
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\UpdatusUser\Druckumgebung
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\UpdatusUser\Documents\Eigene Musik
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\UpdatusUser\Documents\Eigene Bilder
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\UpdatusUser\AppData\Local\Verlauf
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 ___RD () C:\Users\[USRNAME]\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 ___RD () C:\Users\[USRNAME]\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 ___RD () C:\Users\[USRNAME]\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 ___RD () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 ___RD () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-04-27 23:24 - 2014-03-18 10:08 - 00000369 _____ () C:\Users\[USRNAME]\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk
2014-04-27 23:24 - 2014-03-18 10:08 - 00000369 _____ () C:\Users\[USRNAME]\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk
2014-04-27 23:24 - 2014-03-18 10:08 - 00000369 _____ () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk
2014-04-27 23:24 - 2014-03-18 10:08 - 00000369 _____ () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk
2014-04-27 23:24 - 2013-08-22 10:17 - 00000000 ___RD () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-04-27 23:24 - 2013-08-22 10:17 - 00000000 ____D () C:\Users\[USRNAME]\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-04-27 23:24 - 2013-08-22 10:17 - 00000000 ____D () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-04-27 23:19 - 2014-04-28 20:31 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-04-27 23:19 - 2014-03-20 23:03 - 00053024 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll
2014-04-27 23:19 - 2014-03-04 14:34 - 04348704 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll
2014-04-27 23:19 - 2014-03-04 14:34 - 03044696 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc.dll
2014-04-27 23:19 - 2014-03-04 14:34 - 02556360 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvcr.dll
2014-04-27 23:19 - 2014-03-04 14:34 - 00663896 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe
2014-04-27 23:19 - 2014-03-04 14:34 - 00375128 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmctray.dll
2014-04-27 23:19 - 2014-03-04 14:34 - 00062752 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvshext.dll
2014-04-27 23:19 - 2014-03-04 13:32 - 00599840 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvStreaming.exe
2014-04-27 23:18 - 2014-04-28 11:55 - 01414220 _____ () C:\WINDOWS\WindowsUpdate.log
2014-04-27 23:18 - 2014-04-27 23:26 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2014-04-27 23:18 - 2014-04-27 23:19 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation
2014-04-27 23:18 - 2014-04-27 23:18 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2014-04-27 22:46 - 2014-04-27 23:33 - 00006674 _____ () C:\WINDOWS\comsetup.log
2014-04-27 21:26 - 2014-04-27 23:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2014-04-27 21:25 - 2014-04-27 23:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Foxit Reader
2014-04-27 21:25 - 2014-04-27 21:25 - 00000000 ____D () C:\Program Files\Foxit Software
2014-04-27 21:24 - 2014-04-27 21:24 - 33488656 _____ (Foxit Corporation ) C:\Users\[USRNAME]\Downloads\FoxitReader614.0217_enu_Setup.exe
2014-04-20 10:17 - 2014-04-20 10:17 - 00244928 _____ (IvoSoft) C:\WINDOWS\system32\StartMenuHelper32.dll
2014-04-14 20:07 - 2014-04-14 20:07 - 00000000 ____D () C:\Program Files\Mozilla Firefox
==================== One Month Modified Files and Folders =======
2014-04-28 20:57 - 2014-04-28 20:57 - 00010257 _____ () C:\Users\[USRNAME]\Desktop\FRST.txt
2014-04-28 20:57 - 2014-04-28 14:18 - 00000000 ____D () C:\FRST
2014-04-28 20:50 - 2014-01-16 23:57 - 00000884 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2014-04-28 20:41 - 2014-04-28 20:41 - 00000751 _____ () C:\Users\[USRNAME]\Desktop\JRT.txt
2014-04-28 20:38 - 2014-04-28 20:38 - 00000000 ____D () C:\WINDOWS\ERUNT
2014-04-28 20:37 - 2014-03-18 10:04 - 01776918 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2014-04-28 20:36 - 2014-04-28 20:36 - 00000569 _____ () C:\Users\[USRNAME]\Desktop\FRST README.txt
2014-04-28 20:35 - 2014-04-28 20:35 - 00000547 _____ () C:\Users\[USRNAME]\Desktop\JRT README.txt
2014-04-28 20:34 - 2014-04-28 20:34 - 01016261 _____ (Thisisu) C:\Users\[USRNAME]\Desktop\JRT.exe
2014-04-28 20:34 - 2014-04-28 20:34 - 00000000 ____D () C:\Users\[USRNAME]\Desktop\06_FRST (zum Zweiten)
2014-04-28 20:34 - 2014-04-28 20:34 - 00000000 ____D () C:\Users\[USRNAME]\Desktop\05_Junkware Removal Tool
2014-04-28 20:32 - 2014-04-28 20:32 - 00000840 _____ () C:\Users\[USRNAME]\Desktop\AdwCleaner[S0].txt
2014-04-28 20:32 - 2014-04-28 20:12 - 00107736 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2014-04-28 20:32 - 2013-08-22 09:23 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2014-04-28 20:31 - 2014-04-27 23:19 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-04-28 20:31 - 2014-03-18 01:54 - 00001462 _____ () C:\WINDOWS\PFRO.log
2014-04-28 20:30 - 2014-04-28 20:29 - 00000000 ____D () C:\AdwCleaner
2014-04-28 20:28 - 2014-04-28 20:27 - 01310283 _____ () C:\Users\[USRNAME]\Desktop\adwcleaner.exe
2014-04-28 20:27 - 2014-04-28 20:27 - 00001232 _____ () C:\Users\[USRNAME]\Desktop\mbam.txt
2014-04-28 20:27 - 2014-04-28 20:27 - 00000000 ____D () C:\Users\[USRNAME]\Desktop\04_AdvCleaner
2014-04-28 20:23 - 2013-08-22 08:13 - 00262144 ___SH () C:\WINDOWS\system32\config\BBI
2014-04-28 20:12 - 2014-04-28 20:12 - 00001078 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-04-28 20:12 - 2014-04-28 20:12 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware
2014-04-28 20:12 - 2014-04-28 20:11 - 00000000 ____D () C:\Program Files\ Malwarebytes Anti-Malware
2014-04-28 20:11 - 2014-04-28 20:11 - 17305616 _____ (Malwarebytes Corporation ) C:\Users\[USRNAME]\Downloads\mbam-setup-2.0.1.1004.exe
2014-04-28 20:11 - 2014-04-28 20:11 - 00000000 ____D () C:\Users\[USRNAME]\Desktop\03_MBAM
2014-04-28 20:11 - 2014-04-28 20:11 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-04-28 19:00 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\sru
2014-04-28 14:16 - 2014-04-28 14:16 - 01049600 _____ (Farbar) C:\Users\[USRNAME]\Desktop\FRST.exe
2014-04-28 14:15 - 2014-04-28 14:15 - 00000000 _____ () C:\Users\[USRNAME]\defogger_reenable
2014-04-28 14:15 - 2014-04-27 23:24 - 00000000 ____D () C:\Users\[USRNAME]
2014-04-28 11:55 - 2014-04-27 23:18 - 01414220 _____ () C:\WINDOWS\WindowsUpdate.log
2014-04-28 11:28 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\Microsoft.NET
2014-04-28 11:15 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\AppReadiness
2014-04-28 11:05 - 2014-01-16 22:02 - 00000000 ____D () C:\Users\[USRNAME]\AppData\Roaming\ClassicShell
2014-04-28 10:57 - 2014-04-28 10:56 - 00017488 _____ (Windows (R) 2000 DDK provider) C:\WINDOWS\gdrv.sys
2014-04-28 10:56 - 2014-04-28 10:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GIGABYTE
2014-04-28 10:56 - 2014-04-28 10:56 - 00000000 ____D () C:\Program Files\GIGABYTE
2014-04-28 10:56 - 2014-01-17 00:40 - 00000000 ___HD () C:\Program Files\InstallShield Installation Information
2014-04-28 10:55 - 2014-04-28 10:55 - 05350367 _____ () C:\Users\[USRNAME]\Downloads\motherboard_utility_atbios.exe
2014-04-28 10:47 - 2014-04-28 10:47 - 00536576 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntvdm.exe
2014-04-28 10:47 - 2014-04-28 10:47 - 00256192 _____ (Microsoft Corporation) C:\WINDOWS\winhelp.exe
2014-04-28 10:47 - 2014-04-28 10:47 - 00221600 _____ (Microsoft Corporation) C:\WINDOWS\system32\lanman.drv
2014-04-28 10:47 - 2014-04-28 10:47 - 00177856 _____ (Microsoft Corporation) C:\WINDOWS\system32\typelib.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00169520 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole2disp.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00153008 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole2nls.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00127213 _____ () C:\WINDOWS\system32\ega.cpi
2014-04-28 10:47 - 2014-04-28 10:47 - 00108464 _____ (Microsoft Corporation) C:\WINDOWS\system32\netapi.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00092320 _____ (Microsoft Corporation) C:\WINDOWS\system32\krnl386.exe
2014-04-28 10:47 - 2014-04-28 10:47 - 00082944 _____ (Microsoft Corporation) C:\WINDOWS\system32\olecli.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00082944 _____ (Microsoft Corporation) C:\WINDOWS\system\olecli.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00069886 _____ () C:\WINDOWS\system32\edit.com
2014-04-28 10:47 - 2014-04-28 10:47 - 00068992 _____ (Microsoft Corporation) C:\WINDOWS\system32\MMSYSTEM.DLL
2014-04-28 10:47 - 2014-04-28 10:47 - 00068992 _____ (Microsoft Corporation) C:\WINDOWS\system\MMSYSTEM.DLL
2014-04-28 10:47 - 2014-04-28 10:47 - 00062976 _____ (Microsoft Corporation) C:\WINDOWS\system32\graftabl.com
2014-04-28 10:47 - 2014-04-28 10:47 - 00053600 _____ () C:\WINDOWS\system32\dosx.exe
2014-04-28 10:47 - 2014-04-28 10:47 - 00050648 _____ () C:\WINDOWS\system32\COMMAND.COM
2014-04-28 10:47 - 2014-04-28 10:47 - 00047840 _____ (Microsoft Corporation) C:\WINDOWS\system32\USER.EXE
2014-04-28 10:47 - 2014-04-28 10:47 - 00046592 _____ (Microsoft Corporation) C:\WINDOWS\system32\pmspl.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00042809 _____ () C:\WINDOWS\system32\KEY01.SYS
2014-04-28 10:47 - 2014-04-28 10:47 - 00042592 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole2.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00042537 _____ () C:\WINDOWS\system32\KEYBOARD.SYS
2014-04-28 10:47 - 2014-04-28 10:47 - 00039424 _____ (Microsoft Corporation) C:\WINDOWS\system32\DDEML.DLL
2014-04-28 10:47 - 2014-04-28 10:47 - 00039274 _____ () C:\WINDOWS\system32\mem.exe
2014-04-28 10:47 - 2014-04-28 10:47 - 00035776 _____ () C:\WINDOWS\system32\NTIO411.SYS
2014-04-28 10:47 - 2014-04-28 10:47 - 00035552 _____ () C:\WINDOWS\system32\NTIO412.SYS
2014-04-28 10:47 - 2014-04-28 10:47 - 00034688 _____ () C:\WINDOWS\system32\NTIO804.SYS
2014-04-28 10:47 - 2014-04-28 10:47 - 00034688 _____ () C:\WINDOWS\system32\NTIO404.SYS
2014-04-28 10:47 - 2014-04-28 10:47 - 00033968 _____ () C:\WINDOWS\system32\NTIO.SYS
2014-04-28 10:47 - 2014-04-28 10:47 - 00032816 _____ (Microsoft Corporation) C:\WINDOWS\system32\COMMDLG.DLL
2014-04-28 10:47 - 2014-04-28 10:47 - 00032816 _____ (Microsoft Corporation) C:\WINDOWS\system\COMMDLG.DLL
2014-04-28 10:47 - 2014-04-28 10:47 - 00029370 _____ () C:\WINDOWS\system32\NTDOS411.SYS
2014-04-28 10:47 - 2014-04-28 10:47 - 00029274 _____ () C:\WINDOWS\system32\NTDOS412.SYS
2014-04-28 10:47 - 2014-04-28 10:47 - 00029146 _____ () C:\WINDOWS\system32\NTDOS804.SYS
2014-04-28 10:47 - 2014-04-28 10:47 - 00029146 _____ () C:\WINDOWS\system32\NTDOS404.SYS
2014-04-28 10:47 - 2014-04-28 10:47 - 00028420 _____ () C:\WINDOWS\system32\bios1.rom
2014-04-28 10:47 - 2014-04-28 10:47 - 00028112 _____ (Microsoft Corporation) C:\WINDOWS\system32\DRWATSON.EXE
2014-04-28 10:47 - 2014-04-28 10:47 - 00027866 _____ () C:\WINDOWS\system32\NTDOS.SYS
2014-04-28 10:47 - 2014-04-28 10:47 - 00027792 _____ (Microsoft Corporation) C:\WINDOWS\system32\compobj.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00027200 _____ (Microsoft Corporation) C:\WINDOWS\system32\ctl3dv2.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00027097 _____ () C:\WINDOWS\system32\country.sys
2014-04-28 10:47 - 2014-04-28 10:47 - 00024576 _____ (Microsoft Corporation) C:\WINDOWS\system32\GDI.EXE
2014-04-28 10:47 - 2014-04-28 10:47 - 00024064 _____ (Microsoft Corporation) C:\WINDOWS\system32\OLESVR.DLL
2014-04-28 10:47 - 2014-04-28 10:47 - 00024064 _____ (Microsoft Corporation) C:\WINDOWS\system\OLESVR.DLL
2014-04-28 10:47 - 2014-04-28 10:47 - 00022016 _____ (Microsoft Corporation) C:\WINDOWS\system32\vdmredir.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00021232 _____ () C:\WINDOWS\system32\graphics.pro
2014-04-28 10:47 - 2014-04-28 10:47 - 00020634 _____ () C:\WINDOWS\system32\debug.exe
2014-04-28 10:47 - 2014-04-28 10:47 - 00019694 _____ () C:\WINDOWS\system32\GRAPHICS.COM
2014-04-28 10:47 - 2014-04-28 10:47 - 00018896 _____ (Microsoft Corporation) C:\WINDOWS\system32\sysedit.exe
2014-04-28 10:47 - 2014-04-28 10:47 - 00018832 _____ () C:\WINDOWS\system32\v7vga.rom
2014-04-28 10:47 - 2014-04-28 10:47 - 00014710 _____ () C:\WINDOWS\system32\KB16.COM
2014-04-28 10:47 - 2014-04-28 10:47 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntvdmd.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00013888 _____ (Microsoft Corporation) C:\WINDOWS\system32\TOOLHELP.DLL
2014-04-28 10:47 - 2014-04-28 10:47 - 00013312 _____ () C:\WINDOWS\system32\win87em.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00012704 _____ (Microsoft Corporation) C:\WINDOWS\system32\WFWNET.DRV
2014-04-28 10:47 - 2014-04-28 10:47 - 00012704 _____ (Microsoft Corporation) C:\WINDOWS\system\WFWNET.DRV
2014-04-28 10:47 - 2014-04-28 10:47 - 00012642 _____ () C:\WINDOWS\system32\edlin.exe
2014-04-28 10:47 - 2014-04-28 10:47 - 00012498 _____ () C:\WINDOWS\system32\append.exe
2014-04-28 10:47 - 2014-04-28 10:47 - 00011753 _____ () C:\WINDOWS\system32\setver.exe
2014-04-28 10:47 - 2014-04-28 10:47 - 00010790 _____ () C:\WINDOWS\system32\EDIT.HLP
2014-04-28 10:47 - 2014-04-28 10:47 - 00010544 _____ (Microsoft Corporation) C:\WINDOWS\system32\COMM.drv
2014-04-28 10:47 - 2014-04-28 10:47 - 00009936 _____ (Microsoft Corporation) C:\WINDOWS\system32\lzexpand.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00009936 _____ (Microsoft Corporation) C:\WINDOWS\system\lzexpand.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\system32\WIFEMAN.DLL
2014-04-28 10:47 - 2014-04-28 10:47 - 00009029 _____ () C:\WINDOWS\system32\ANSI.SYS
2014-04-28 10:47 - 2014-04-28 10:47 - 00009008 _____ (Microsoft Corporation) C:\WINDOWS\system32\ver.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00009008 _____ (Microsoft Corporation) C:\WINDOWS\system\ver.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00008424 _____ () C:\WINDOWS\system32\exe2bin.exe
2014-04-28 10:47 - 2014-04-28 10:47 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\system32\win.com
2014-04-28 10:47 - 2014-04-28 10:47 - 00008191 _____ () C:\WINDOWS\system32\bios4.rom
2014-04-28 10:47 - 2014-04-28 10:47 - 00007052 _____ () C:\WINDOWS\system32\nlsfunc.exe
2014-04-28 10:47 - 2014-04-28 10:47 - 00005532 _____ (Microsoft Corporation) C:\WINDOWS\system\stdole.tlb
2014-04-28 10:47 - 2014-04-28 10:47 - 00005120 _____ (Microsoft Corporation) C:\WINDOWS\system32\WINNLS.DLL
2014-04-28 10:47 - 2014-04-28 10:47 - 00005120 _____ (Microsoft Corporation) C:\WINDOWS\system32\SHELL.DLL
2014-04-28 10:47 - 2014-04-28 10:47 - 00005120 _____ (Microsoft Corporation) C:\WINDOWS\system\SHELL.DLL
2014-04-28 10:47 - 2014-04-28 10:47 - 00004768 _____ () C:\WINDOWS\system32\HIMEM.SYS
2014-04-28 10:47 - 2014-04-28 10:47 - 00004208 _____ (Microsoft Corporation) C:\WINDOWS\system32\storage.dll
2014-04-28 10:47 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\System
2014-04-28 10:46 - 2014-04-28 10:46 - 00528620 _____ (Igor Pavlov) C:\Users\[USRNAME]\Downloads\motherboard_bios_ga-p31-ds3l_f9.exe
2014-04-28 03:35 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\LogFiles
2014-04-28 00:16 - 2014-04-28 00:16 - 02767360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2014-04-28 00:16 - 2014-04-28 00:16 - 01634304 _____ (Microsoft Corporation) C:\WINDOWS\system32\wucltux.dll
2014-04-28 00:16 - 2014-04-28 00:16 - 00307200 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUSettingsProvider.dll
2014-04-28 00:16 - 2014-04-28 00:16 - 00159744 _____ (Microsoft Corporation) C:\WINDOWS\system32\storewuauth.dll
2014-04-28 00:16 - 2014-04-28 00:16 - 00049544 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2014-04-28 00:16 - 2014-04-28 00:16 - 00000000 ____D () C:\Windows.old
2014-04-28 00:16 - 2013-08-22 10:17 - 00262144 _____ () C:\WINDOWS\system32\config\BCD-Template
2014-04-28 00:16 - 2013-08-22 10:17 - 00000000 ___RD () C:\WINDOWS\ToastData
2014-04-28 00:15 - 2014-04-28 00:15 - 18679216 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 12732416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 11791360 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 05833728 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 05786968 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2014-04-28 00:15 - 2014-04-28 00:15 - 05770752 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 03562496 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncEngine.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 02317824 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 02270208 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 02088160 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2014-04-28 00:15 - 2014-04-28 00:15 - 02030080 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmSvc.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 01871192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 01816576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Display.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 01779800 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 01764864 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 01679704 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 01679128 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 01351168 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 01326936 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 01309184 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 01200296 _____ (Microsoft Corporation) C:\WINDOWS\system32\propsys.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 01131520 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 01095488 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 01092896 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 01089024 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 01037504 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel32.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00888320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00887296 _____ (Microsoft Corporation) C:\WINDOWS\system32\aclui.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00863552 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00855552 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdvidcrl.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00839168 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFolder.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00833536 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00828928 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.appcore.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00801792 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00800256 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgent.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00755712 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00735232 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00731648 _____ (Microsoft Corporation) C:\WINDOWS\system32\IKEEXT.DLL
2014-04-28 00:15 - 2014-04-28 00:15 - 00731648 _____ (Microsoft Corporation) C:\WINDOWS\system32\adtschema.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00688640 _____ (Microsoft Corporation) C:\WINDOWS\system32\netlogon.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00672256 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDrive.exe
2014-04-28 00:15 - 2014-04-28 00:15 - 00629760 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00623104 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00605184 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasapi32.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00590336 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveTelemetry.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00589824 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpprefcl.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00567296 _____ (Microsoft Corporation) C:\WINDOWS\system32\nshwfp.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00560128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00551424 _____ (Microsoft Corporation) C:\WINDOWS\system32\BFE.DLL
2014-04-28 00:15 - 2014-04-28 00:15 - 00494592 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsapi.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00491008 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAgent.exe
2014-04-28 00:15 - 2014-04-28 00:15 - 00482416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00444928 _____ (Microsoft Corporation) C:\WINDOWS\system32\AdmTmpl.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00406912 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00406512 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00402432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.Printing.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00390488 _____ (Microsoft Corporation) C:\WINDOWS\system32\netcfgx.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00388408 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00387210 _____ () C:\WINDOWS\system32\ApnDatabase.xml
2014-04-28 00:15 - 2014-04-28 00:15 - 00386560 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlangpui.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00376152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS
2014-04-28 00:15 - 2014-04-28 00:15 - 00374784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\nwifi.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00356864 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidprov.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00355832 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfreadwrite.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00333824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00326024 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00321880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00313344 _____ (Microsoft Corporation) C:\WINDOWS\system32\clusapi.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00305768 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00300544 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanmsm.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00295256 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Classpnp.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00286040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS
2014-04-28 00:15 - 2014-04-28 00:15 - 00283992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00280576 _____ (Microsoft Corporation) C:\WINDOWS\system32\SessEnv.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00264192 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDEServer.exe
2014-04-28 00:15 - 2014-04-28 00:15 - 00264192 _____ (Microsoft Corporation) C:\WINDOWS\system32\FWPUCLNT.DLL
2014-04-28 00:15 - 2014-04-28 00:15 - 00262656 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationApi.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00254976 _____ (Microsoft Corporation) C:\WINDOWS\system32\pdh.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00251392 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSDMon.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00241664 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcomp.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00232960 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSDScDrv.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanapi.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00227840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb10.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00226304 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Sensors.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00222720 _____ (Microsoft Corporation) C:\WINDOWS\system32\spp.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00197632 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00194752 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2014-04-28 00:15 - 2014-04-28 00:15 - 00186880 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsrslvr.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00185856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srvnet.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00184832 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00179200 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdd.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00174080 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00172544 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReInfo.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00171008 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsApi.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00153600 _____ (Microsoft Corporation) C:\WINDOWS\system32\dafWfdProvider.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00151040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Scanners.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00147800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00139776 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxAllUserStore.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00138584 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wof.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00124416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxdav.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00102400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dfsc.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00098816 _____ (Microsoft Corporation) C:\WINDOWS\system32\drvinst.exe
2014-04-28 00:15 - 2014-04-28 00:15 - 00096256 _____ (Microsoft Corporation) C:\WINDOWS\system32\umpnpmgr.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00095744 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevPropMgr.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00094016 _____ (Microsoft Corporation) C:\WINDOWS\system32\userenv.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidclass.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\system32\davclnt.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\system32\w32tm.exe
2014-04-28 00:15 - 2014-04-28 00:15 - 00069464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wfplwfs.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00069120 _____ (Microsoft Corporation) C:\WINDOWS\system32\RMapi.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00068608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\IPMIDrv.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\system32\l2gpstore.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsgqec.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\system32\drvcfg.exe
2014-04-28 00:15 - 2014-04-28 00:15 - 00038400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpipreg.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\SetNetworkLocation.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Shell.Search.UriHandler.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\sxproxy.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredentialMigrationHandler.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00020992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidusb.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanhlp.dll
2014-04-28 00:14 - 2014-04-28 00:14 - 00262144 _____ () C:\WINDOWS\system32\config\userdiff
2014-04-28 00:13 - 2014-04-28 00:13 - 00000000 ____D () C:\WINDOWS\system32\XPSViewer
2014-04-28 00:13 - 2014-04-28 00:13 - 00000000 ____D () C:\Program Files\Reference Assemblies
2014-04-28 00:13 - 2014-04-28 00:13 - 00000000 ____D () C:\Program Files\MSBuild
2014-04-28 00:09 - 2014-04-28 00:06 - 00000000 ____D () C:\Program Files\Spybot - Search & Destroy 2
2014-04-28 00:07 - 2014-04-28 00:06 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy
2014-04-28 00:06 - 2014-04-28 00:06 - 00002149 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot-S&D Start Center.lnk
2014-04-28 00:06 - 2014-04-28 00:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2
2014-04-28 00:05 - 2014-04-28 00:05 - 40658208 _____ (Safer-Networking Ltd. ) C:\Users\[USRNAME]\Downloads\spybot-2.2.25.exe
2014-04-27 23:58 - 2014-04-27 23:58 - 00043152 _____ (AVAST Software) C:\WINDOWS\avastSS.scr
2014-04-27 23:58 - 2014-04-27 23:58 - 00024184 _____ () C:\WINDOWS\system32\Drivers\aswHwid.sys
2014-04-27 23:58 - 2014-01-16 21:55 - 00776976 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys
2014-04-27 23:58 - 2014-01-16 21:55 - 00411552 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys
2014-04-27 23:58 - 2014-01-16 21:55 - 00271264 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2014-04-27 23:58 - 2014-01-16 21:55 - 00180632 _____ () C:\WINDOWS\system32\Drivers\aswVmm.sys
2014-04-27 23:58 - 2014-01-16 21:55 - 00081768 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys
2014-04-27 23:58 - 2014-01-16 21:55 - 00067824 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2014-04-27 23:58 - 2014-01-16 21:55 - 00067776 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswstm.sys
2014-04-27 23:58 - 2014-01-16 21:55 - 00049944 _____ () C:\WINDOWS\system32\Drivers\aswRvrt.sys
2014-04-27 23:53 - 2013-08-22 10:17 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-04-27 23:53 - 2013-08-22 10:17 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-04-27 23:53 - 2013-08-22 10:17 - 00000000 ____D () C:\Program Files\Windows Defender
2014-04-27 23:52 - 2014-04-27 23:52 - 00000000 ___RD () C:\WINDOWS\BrowserChoice
2014-04-27 23:47 - 2014-04-27 23:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-04-27 23:47 - 2014-04-27 23:45 - 00004155 _____ () C:\WINDOWS\system32\jupdate-1.7.0_55-b14.log
2014-04-27 23:47 - 2014-01-17 23:15 - 00000000 ____D () C:\ProgramData\Oracle
2014-04-27 23:47 - 2014-01-17 23:15 - 00000000 ____D () C:\Program Files\Java
2014-04-27 23:44 - 2014-04-27 23:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Classic Shell
2014-04-27 23:44 - 2014-01-16 22:02 - 00000000 ____D () C:\ProgramData\ClassicShell
2014-04-27 23:44 - 2014-01-16 22:01 - 00000000 ____D () C:\Program Files\Classic Shell
2014-04-27 23:43 - 2014-04-27 23:43 - 06869696 _____ (IvoSoft) C:\Users\[USRNAME]\Downloads\ClassicShellSetup_4_1_0-de.exe
2014-04-27 23:43 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\restore
2014-04-27 23:38 - 2014-03-18 11:45 - 00000000 ___HD () C:\$Windows.~BT
2014-04-27 23:37 - 2014-04-27 23:37 - 00000000 ____D () C:\Users\[USRNAME]\AppData\Local\NVIDIA
2014-04-27 23:37 - 2014-04-27 23:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2014-04-27 23:36 - 2014-04-28 00:16 - 00000000 ___DC () C:\WINDOWS\Panther
2014-04-27 23:36 - 2014-04-27 23:36 - 00001456 _____ () C:\Users\[USRNAME]\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-04-27 23:36 - 2014-04-27 23:36 - 00000020 ___SH () C:\Users\[USRNAME]\ntuser.ini
2014-04-27 23:34 - 2014-04-27 23:34 - 00000000 _SHDL () C:\Users\Default\Startmenü
2014-04-27 23:34 - 2014-04-27 23:34 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung
2014-04-27 23:34 - 2014-04-27 23:34 - 00000000 _SHDL () C:\Users\Default\Druckumgebung
2014-04-27 23:34 - 2014-04-27 23:34 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik
2014-04-27 23:34 - 2014-04-27 23:34 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder
2014-04-27 23:34 - 2014-04-27 23:34 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-04-27 23:34 - 2014-04-27 23:34 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf
2014-04-27 23:34 - 2014-04-27 23:34 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik
2014-04-27 23:34 - 2014-04-27 23:34 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder
2014-04-27 23:34 - 2014-04-27 23:34 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-04-27 23:34 - 2014-04-27 23:34 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf
2014-04-27 23:34 - 2014-04-27 23:34 - 00000000 _SHDL () C:\Programme
2014-04-27 23:34 - 2013-08-22 10:17 - 00000000 ____D () C:\Program Files\Windows NT
2014-04-27 23:34 - 2013-08-22 08:21 - 00000000 __RHD () C:\Users\Default
2014-04-27 23:33 - 2014-04-27 23:33 - 00021532 _____ () C:\WINDOWS\system32\emptyregdb.dat
2014-04-27 23:33 - 2014-04-27 23:24 - 00032388 _____ () C:\WINDOWS\diagwrn.xml
2014-04-27 23:33 - 2014-04-27 23:24 - 00032388 _____ () C:\WINDOWS\diagerr.xml
2014-04-27 23:33 - 2014-04-27 22:46 - 00006674 _____ () C:\WINDOWS\comsetup.log
2014-04-27 23:33 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\Registration
2014-04-27 23:33 - 2013-08-22 09:23 - 00332763 _____ () C:\WINDOWS\setupact.log
2014-04-27 23:32 - 2013-08-22 10:17 - 00000000 __RSD () C:\WINDOWS\Media
2014-04-27 23:31 - 2014-04-27 23:31 - 00000020 ___SH () C:\Users\UpdatusUser\ntuser.ini
2014-04-27 23:31 - 2013-08-22 10:17 - 00000000 __RHD () C:\Users\Public\Libraries
2014-04-27 23:31 - 2013-08-22 08:21 - 00000000 ___RD () C:\Users\Public
2014-04-27 23:28 - 2013-08-22 09:22 - 00474824 _____ () C:\WINDOWS\system32\FNTCACHE.DAT
2014-04-27 23:27 - 2014-04-27 23:27 - 00001515 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2014-04-27 23:27 - 2014-04-27 23:27 - 00000000 ____D () C:\Users\Default\AppData\Local\Microsoft Help
2014-04-27 23:27 - 2014-04-27 23:27 - 00000000 ____D () C:\Users\Default User\AppData\Local\Microsoft Help
2014-04-27 23:27 - 2014-04-27 21:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2014-04-27 23:27 - 2014-04-27 21:25 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Foxit Reader
2014-04-27 23:27 - 2014-03-22 23:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickPar
2014-04-27 23:27 - 2014-03-22 21:12 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ImgBurn
2014-04-27 23:27 - 2014-03-18 09:45 - 00000000 ____D () C:\WINDOWS\ShellNew
2014-04-27 23:27 - 2014-03-18 09:30 - 00000000 ____D () C:\WINDOWS\system32\WCN
2014-04-27 23:27 - 2014-03-05 21:18 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FlacSquisher
2014-04-27 23:27 - 2014-03-05 20:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mp3tag
2014-04-27 23:27 - 2014-03-05 20:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Exact Audio Copy
2014-04-27 23:27 - 2014-03-03 21:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2014-04-27 23:27 - 2014-02-18 23:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast
2014-04-27 23:27 - 2014-01-17 22:51 - 00000000 ____D () C:\Users\[USRNAME]\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Unlocker
2014-04-27 23:27 - 2014-01-17 19:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Speccy
2014-04-27 23:27 - 2014-01-16 23:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VLC Player
2014-04-27 23:27 - 2014-01-16 23:26 - 00000000 ____D () C:\Users\[USRNAME]\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\IrfanView
2014-04-27 23:27 - 2013-08-22 10:18 - 00004893 _____ () C:\WINDOWS\DtcInstall.log
2014-04-27 23:27 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\WinBioPlugIns
2014-04-27 23:27 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\spool
2014-04-27 23:27 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\NDF
2014-04-27 23:27 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\MUI
2014-04-27 23:27 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\IME
2014-04-27 23:27 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\de-DE
2014-04-27 23:27 - 2013-08-22 08:13 - 00008192 ___SH () C:\WINDOWS\system32\config\ELAM
2014-04-27 23:27 - 2012-07-26 06:43 - 00000000 ____D () C:\Users\Default.migrated
2014-04-27 23:26 - 2014-04-27 23:18 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2014-04-27 23:26 - 2014-03-22 23:32 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Glorylogic
2014-04-27 23:26 - 2014-03-22 21:25 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Codemasters
2014-04-27 23:26 - 2014-03-03 21:32 - 00000000 ____D () C:\WINDOWS\system32\appmgmt
2014-04-27 23:26 - 2014-01-16 21:50 - 00000000 ____D () C:\ProgramData\PRICache
2014-04-27 23:26 - 2013-08-22 10:17 - 00000000 __SHD () C:\Program Files\Windows Sidebar
2014-04-27 23:26 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\Help
2014-04-27 23:26 - 2013-08-22 10:17 - 00000000 ____D () C:\Program Files\Microsoft.NET
2014-04-27 23:26 - 2013-08-22 10:17 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared
2014-04-27 23:25 - 2014-04-27 23:25 - 00000000 ____D () C:\WINDOWS\system32\config\bbimigrate
2014-04-27 23:25 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\Recovery
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\[USRNAME]\Startmenü
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\[USRNAME]\Netzwerkumgebung
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\[USRNAME]\Druckumgebung
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\[USRNAME]\Documents\Eigene Musik
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\[USRNAME]\Documents\Eigene Bilder
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\[USRNAME]\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\[USRNAME]\AppData\Local\Verlauf
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\UpdatusUser\Startmenü
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\UpdatusUser\Netzwerkumgebung
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\UpdatusUser\Druckumgebung
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\UpdatusUser\Documents\Eigene Musik
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\UpdatusUser\Documents\Eigene Bilder
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\UpdatusUser\AppData\Local\Verlauf
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 ___RD () C:\Users\[USRNAME]\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 ___RD () C:\Users\[USRNAME]\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 ___RD () C:\Users\[USRNAME]\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 ___RD () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 ___RD () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-04-27 23:21 - 2014-01-16 21:46 - 00000000 __SHD () C:\Recovery
2014-04-27 23:19 - 2014-04-27 23:18 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation
2014-04-27 23:18 - 2014-04-27 23:18 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2014-04-27 23:07 - 2014-01-16 21:50 - 02041337 _____ () C:\WINDOWS\WindowsUpdate (1).log
2014-04-27 22:51 - 2014-01-16 21:41 - 00008192 __RSH () C:\BOOTSECT.BAK
2014-04-27 22:34 - 2012-07-26 08:53 - 00000000 ____D () C:\WINDOWS\AUInstallAgent
2014-04-27 21:25 - 2014-04-27 21:25 - 00000000 ____D () C:\Program Files\Foxit Software
2014-04-27 21:24 - 2014-04-27 21:24 - 33488656 _____ (Foxit Corporation ) C:\Users\[USRNAME]\Downloads\FoxitReader614.0217_enu_Setup.exe
2014-04-27 21:24 - 2014-01-17 01:02 - 00000000 ____D () C:\Users\[USRNAME]\AppData\Roaming\Foxit Software
2014-04-20 10:17 - 2014-04-20 10:17 - 00244928 _____ (IvoSoft) C:\WINDOWS\system32\StartMenuHelper32.dll
2014-04-15 11:16 - 2014-01-16 21:58 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2014-04-14 20:13 - 2014-04-27 23:47 - 00094632 _____ (Oracle Corporation) C:\WINDOWS\system32\WindowsAccessBridge.dll
2014-04-14 20:07 - 2014-04-14 20:07 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-04-14 20:05 - 2014-04-27 23:47 - 00264616 _____ (Oracle Corporation) C:\WINDOWS\system32\javaws.exe
2014-04-14 20:05 - 2014-04-27 23:47 - 00175528 _____ (Oracle Corporation) C:\WINDOWS\system32\javaw.exe
2014-04-14 20:04 - 2014-04-27 23:47 - 00175016 _____ (Oracle Corporation) C:\WINDOWS\system32\java.exe
2014-04-14 09:14 - 2014-01-16 23:32 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-04-14 09:11 - 2014-01-16 22:28 - 00000000 ____D () C:\WINDOWS\system32\MRT
2014-04-14 09:10 - 2014-01-16 22:28 - 88028728 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2014-04-03 09:51 - 2014-04-28 20:11 - 00073432 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2014-04-03 09:51 - 2014-04-28 20:11 - 00051416 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys
2014-04-03 09:50 - 2014-04-28 20:11 - 00023256 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys
2014-03-31 23:23 - 2013-08-22 10:18 - 00693240 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerApp.exe
2014-03-31 23:23 - 2013-08-22 10:18 - 00105464 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerCPLApp.cpl
Some content of TEMP:
====================
C:\Users\[USRNAME]\AppData\Local\Temp\Foxit Reader Updater.exe
C:\Users\[USRNAME]\AppData\Local\Temp\jre-7u55-windows-i586-iftw.exe
C:\Users\[USRNAME]\AppData\Local\Temp\Quarantine.exe
==================== Bamital & volsnap Check =================
C:\WINDOWS\explorer.exe
[2014-04-28 00:15] - [2014-04-28 00:15] - 2088160 ____A (Microsoft Corporation) 119E091B5386379BC5AA598BE9440C75
C:\WINDOWS\system32\winlogon.exe
[2014-03-18 10:08] - [2014-03-18 10:08] - 0459264 ____A (Microsoft Corporation) 70C57DC69D4A7D92D2CAC90C3AD16E6F
C:\WINDOWS\system32\wininit.exe => MD5 is legit
C:\WINDOWS\system32\svchost.exe => MD5 is legit
C:\WINDOWS\system32\services.exe => MD5 is legit
C:\WINDOWS\system32\User32.dll
[2014-03-18 10:08] - [2014-03-18 10:08] - 1370696 ____A (Microsoft Corporation) 43B0EB86B10506AD564E2005A6156D30
C:\WINDOWS\system32\userinit.exe => MD5 is legit
C:\WINDOWS\system32\rpcss.dll
[2014-03-18 10:08] - [2014-03-18 10:08] - 0593408 ____A (Microsoft Corporation) 05C0337538BEECC04FC695808EFF201C
ATTENTION ======> If the system is having audio adware rpcss.dll is patched. Google the MD5, if the MD5 is unique the file is infected.
C:\WINDOWS\system32\Drivers\volsnap.sys
[2014-03-18 10:08] - [2014-03-18 10:08] - 0265048 ____A (Microsoft Corporation) 085918BF459BCB835CFC535BE7138539
LastRegBack: 2014-04-27 23:17
==================== End Of Log ============================
Beste Grüße, M4tt0 |
|
29.04.2014, 17:25
| #4 |
| /// the machine /// TB-Ausbilder | Win 8.1: Avast meldet Iframe-inf, JS: Agent-CYP und Somoto-JESET Online Scanner
Downloade Dir bitte  SecurityCheck und:
und ein frisches FRST log bitte. Noch Probleme? 
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
30.04.2014, 08:32
| #5 |
| | Win 8.1: Avast meldet Iframe-inf, JS: Agent-CYP und Somoto-J Guten Morgen schrauber, so, der ESET Scan hat eine Weile gedauert. Gab wieder einen Fund. Diesmal auf einee externen Backup Platte, die ich (nach Anweisung) angeschlossen hatte. Wieder in einem uralten File... ESET Log Code:
ATTFilter ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=de2e89ec0655dd4f931fa8055b14707c
# engine=18078
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2014-04-29 11:53:37
# local_time=2014-04-30 01:53:37 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1031
# osver=6.2.9200 NT
# compatibility_mode=774 16777213 71 74 179591 179711 0 0
# compatibility_mode=5893 16776574 100 94 180031 23696931 0 0
# scanned=337018
# found=1
# cleaned=0
# scan_time=14516
sh=EB8624B68DCB390F6776405D1C3FD7781A7D47C8 ft=1 fh=8506fd186def9f7b vn="Win32/Adware.1ClickDownload.AM Anwendung" ac=I fn="I:\MyStorage_1\homes\[USRNAME]\#recycle\[USRNAME]\09_Install\Games\XYZ\XYZ_No_CD_zip.exe"
Code:
ATTFilter Results of screen317's Security Check version 0.99.82 x86 (UAC is enabled) Internet Explorer 11 ``````````````Antivirus/Firewall Check:`````````````` Windows Defender avast! Antivirus Antivirus up to date! `````````Anti-malware/Other Utilities Check:````````` Spybot - Search & Destroy Java 7 Update 55 Adobe Flash Player 13.0.0.206 Mozilla Firefox (28.0) ````````Process Check: objlist.exe by Laurent```````` Malwarebytes Anti-Malware mbamservice.exe Malwarebytes Anti-Malware mbam.exe Spybot Teatimer.exe is disabled! system32 AvastSvc.exe -?- AVAST Software Avast AvastUI.exe `````````````````System Health check````````````````` Total Fragmentation on Drive C:: ````````````````````End of Log`````````````````````` FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 27-04-2014 Ran by [USRNAME] (administrator) on HAN on 30-04-2014 08:59:27 Running from C:\Users\[USRNAME]\Desktop Microsoft Windows 8.1 Pro Update 1 (X86) OS Language: German Standard Internet Explorer Version 11 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe (Foxit Corporation) C:\Program Files\Foxit Software\Foxit Reader\Foxit Cloud\FCUpdateService.exe (Microsoft Corporation) C:\WINDOWS\system32\dashost.exe (Malwarebytes Corporation) C:\Program Files\ Malwarebytes Anti-Malware \mbamscheduler.exe (Malwarebytes Corporation) C:\Program Files\ Malwarebytes Anti-Malware \mbamservice.exe (Paramount Software UK Ltd) C:\Program Files\Macrium\Reflect\ReflectService.exe (Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe (Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe (Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe (Malwarebytes Corporation) C:\Program Files\ Malwarebytes Anti-Malware \mbam.exe (IvoSoft) C:\Program Files\Classic Shell\ClassicStartMenu.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe () C:\Program Files\Unlocker\UnlockerAssistant.exe (Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe (Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe (Microsoft Corporation) C:\Program Files\Microsoft Office\Office15\MsoSync.exe (Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation) C:\Program Files\Mozilla Firefox\plugin-container.exe (Adobe Systems, Inc.) C:\WINDOWS\system32\Macromed\Flash\FlashPlayerPlugin_13_0_0_206.exe (Adobe Systems, Inc.) C:\WINDOWS\system32\Macromed\Flash\FlashPlayerPlugin_13_0_0_206.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe (Microsoft Corporation) C:\WINDOWS\system32\wbem\WMIADAP.EXE ==================== Registry (Whitelisted) ================== HKLM\...\Run: [NvBackend] => C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe [1797064 2014-03-20] (NVIDIA Corporation) HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [3873704 2014-04-27] (AVAST Software) HKLM\...\Run: [UnlockerAssistant] => C:\Program Files\Unlocker\UnlockerAssistant.exe [17408 2010-07-04] () HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation) HKLM\...\Run: [Classic Start Menu] => C:\Program Files\Classic Shell\ClassicStartMenu.exe [150208 2014-04-20] (IvoSoft) HKLM\...\Run: [SDTray] => C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe [5624784 2013-07-25] (Safer-Networking Ltd.) Winlogon\Notify\SDWinLogon: SDWinLogon.dll [X] HKU\S-1-5-21-3226048418-3006157909-989406201-1001\...\Policies\Explorer: [NoDriveTypeAutoRun] 0x00000000 HKU\S-1-5-21-3226048418-3006157909-989406201-1004\...\RunOnce: [WAB Migrate] - C:\Program Files\Windows Mail\wab.exe [515584 2013-08-22] (Microsoft Corporation) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Canon LBP2900 Statusfenster.lnk ShortcutTarget: Canon LBP2900 Statusfenster.lnk -> C:\Windows\System32\spool\drivers\w32x86\3\CNAB4LAK.EXE (CANON INC.) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://t.de.msn.com/ HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xB5C2046CF412CF01 HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE SearchScopes: HKLM - DefaultScope value is missing. BHO: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation) BHO: ExplorerBHO Class - {449D0D6E-2412-4E61-B68F-1CB625CD9E52} - C:\Program Files\Classic Shell\ClassicExplorer32.dll (IvoSoft) BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO: ClassicIEBHO Class - {EA801577-E6AD-4BD5-8F71-4BE0154331A4} - C:\Program Files\Classic Shell\ClassicIEDLL_32.dll (IvoSoft) Toolbar: HKLM - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer32.dll (IvoSoft) Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL (Microsoft Corporation) Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 FireFox: ======== FF ProfilePath: C:\Users\[USRNAME]\AppData\Roaming\Mozilla\Firefox\Profiles\76jffv28.default FF Homepage: hxxp://www.tagesschau.de/ FF Plugin: @adobe.com/FlashPlayer - C:\WINDOWS\system32\Macromed\Flash\NPSWF32_13_0_0_206.dll () FF Plugin: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf - C:\Program Files\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation) FF Plugin: @java.com/DTPlugin,version=10.55.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=10.55.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin: @microsoft.com/Lync,version=15.0 - C:\Program Files\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation) FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL No File FF Plugin: @nvidia.com/3DVision - C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation) FF Plugin: @nvidia.com/3DVisionStreaming - C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation) FF Plugin: @videolan.org/vlc,version=2.1.2 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin: @videolan.org/vlc,version=2.1.3 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npMeetingJoinPluginOC.dll (Microsoft Corporation) FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: NoScript - C:\Users\[USRNAME]\AppData\Roaming\Mozilla\Firefox\Profiles\76jffv28.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2014-01-22] FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-01-16] ========================== Services (Whitelisted) ================= R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-04-27] (AVAST Software) R2 FoxitCloudUpdateService; C:\Program Files\Foxit Software\Foxit Reader\Foxit Cloud\FCUpdateService.exe [239680 2014-02-19] (Foxit Corporation) R2 MBAMScheduler; C:\Program Files\ Malwarebytes Anti-Malware \mbamscheduler.exe [1809720 2014-04-03] (Malwarebytes Corporation) R2 MBAMService; C:\Program Files\ Malwarebytes Anti-Malware \mbamservice.exe [857912 2014-04-03] (Malwarebytes Corporation) R2 ReflectService.exe; C:\Program Files\Macrium\Reflect\ReflectService.exe [605168 2013-12-20] (Paramount Software UK Ltd) S3 ScDeviceEnum; C:\WINDOWS\System32\ScDeviceEnum.dll [105472 2013-08-22] (Microsoft Corporation) R2 SDScannerService; C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe [3921880 2013-10-15] (Safer-Networking Ltd.) R2 SDUpdateService; C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe [1042272 2013-09-20] (Safer-Networking Ltd.) R2 SDWSCService; C:\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe [171416 2013-09-13] (Safer-Networking Ltd.) S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [280296 2013-10-31] (Microsoft Corporation) S3 WEPHOSTSVC; C:\WINDOWS\system32\wephostsvc.dll [20992 2013-08-22] (Microsoft Corporation) S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [22224 2013-10-31] (Microsoft Corporation) S3 workfolderssvc; C:\WINDOWS\system32\workfolderssvc.dll [1210368 2014-03-18] (Microsoft Corporation) ==================== Drivers (Whitelisted) ==================== R2 aswHwid; C:\WINDOWS\system32\drivers\aswHwid.sys [24184 2014-04-27] () R2 aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [67824 2014-04-27] (AVAST Software) R1 aswRdr; C:\WINDOWS\system32\drivers\aswRdr2.sys [81768 2014-04-27] (AVAST Software) R0 aswRvrt; C:\WINDOWS\system32\Drivers\aswRvrt.sys [49944 2014-04-27] () R1 aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [776976 2014-04-27] (AVAST Software) R1 aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [411552 2014-04-27] (AVAST Software) R2 aswStm; C:\WINDOWS\system32\drivers\aswStm.sys [67776 2014-04-27] (AVAST Software) R0 aswVmm; C:\WINDOWS\system32\Drivers\aswVmm.sys [180632 2014-04-27] () R1 BasicRender; C:\WINDOWS\System32\drivers\BasicRender.sys [25600 2014-03-18] (Microsoft Corporation) S3 gdrv; C:\WINDOWS\gdrv.sys [17488 2014-04-28] (Windows (R) 2000 DDK provider) S3 GPIO; C:\WINDOWS\System32\drivers\iaiogpio.sys [22016 2013-07-23] (Intel Corporation) R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [23256 2014-04-03] (Malwarebytes Corporation) R3 MBAMSwissArmy; C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [107736 2014-04-30] (Malwarebytes Corporation) R3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [51416 2014-04-03] (Malwarebytes Corporation) S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [93016 2013-10-31] (Microsoft Corporation) R0 Wof; C:\WINDOWS\system32\Drivers\Wof.sys [138584 2014-04-28] (Microsoft Corporation) ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-04-30 08:59 - 2014-04-30 08:59 - 00011284 _____ () C:\Users\[USRNAME]\Desktop\FRST.txt 2014-04-30 08:59 - 2014-04-30 08:59 - 00000892 _____ () C:\Users\[USRNAME]\Desktop\checkup.txt 2014-04-30 08:57 - 2014-04-30 08:57 - 00855379 _____ () C:\Users\[USRNAME]\Desktop\SecurityCheck.exe 2014-04-30 08:57 - 2014-04-29 21:47 - 00000000 ____D () C:\Users\[USRNAME]\Desktop\08_Security Check 2014-04-30 08:56 - 2014-04-28 20:34 - 00000000 ____D () C:\Users\[USRNAME]\Desktop\09_FRST (zum Dritten) - Kopie 2014-04-29 21:48 - 2014-04-29 21:48 - 02347384 _____ (ESET) C:\Users\[USRNAME]\Desktop\esetsmartinstaller_deu.exe 2014-04-29 21:48 - 2014-04-29 21:48 - 00000000 ____D () C:\Program Files\ESET 2014-04-29 21:47 - 2014-04-29 21:47 - 00000000 ____D () C:\Users\[USRNAME]\Desktop\07_ESET Online 2014-04-28 20:38 - 2014-04-28 20:38 - 00000000 ____D () C:\WINDOWS\ERUNT 2014-04-28 20:36 - 2014-04-28 20:36 - 00000569 _____ () C:\Users\[USRNAME]\Desktop\FRST README.txt 2014-04-28 20:35 - 2014-04-28 20:35 - 00000547 _____ () C:\Users\[USRNAME]\Desktop\JRT README.txt 2014-04-28 20:34 - 2014-04-28 20:34 - 01016261 _____ (Thisisu) C:\Users\[USRNAME]\Desktop\JRT.exe 2014-04-28 20:34 - 2014-04-28 20:34 - 00000000 ____D () C:\Users\[USRNAME]\Desktop\06_FRST (zum Zweiten) 2014-04-28 20:34 - 2014-04-28 20:34 - 00000000 ____D () C:\Users\[USRNAME]\Desktop\05_Junkware Removal Tool 2014-04-28 20:29 - 2014-04-28 20:30 - 00000000 ____D () C:\AdwCleaner 2014-04-28 20:27 - 2014-04-28 20:28 - 01310283 _____ () C:\Users\[USRNAME]\Desktop\adwcleaner.exe 2014-04-28 20:27 - 2014-04-28 20:27 - 00000000 ____D () C:\Users\[USRNAME]\Desktop\04_AdvCleaner 2014-04-28 20:12 - 2014-04-30 08:55 - 00107736 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys 2014-04-28 20:12 - 2014-04-28 20:12 - 00001078 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-04-28 20:12 - 2014-04-28 20:12 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2014-04-28 20:11 - 2014-04-28 20:12 - 00000000 ____D () C:\Program Files\ Malwarebytes Anti-Malware 2014-04-28 20:11 - 2014-04-28 20:11 - 17305616 _____ (Malwarebytes Corporation ) C:\Users\[USRNAME]\Downloads\mbam-setup-2.0.1.1004.exe 2014-04-28 20:11 - 2014-04-28 20:11 - 00000000 ____D () C:\Users\[USRNAME]\Desktop\03_MBAM 2014-04-28 20:11 - 2014-04-28 20:11 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-04-28 20:11 - 2014-04-03 09:51 - 00073432 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamchameleon.sys 2014-04-28 20:11 - 2014-04-03 09:51 - 00051416 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys 2014-04-28 20:11 - 2014-04-03 09:50 - 00023256 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys 2014-04-28 14:18 - 2014-04-30 08:59 - 00000000 ____D () C:\FRST 2014-04-28 14:16 - 2014-04-28 14:16 - 01049600 _____ (Farbar) C:\Users\[USRNAME]\Desktop\FRST.exe 2014-04-28 14:15 - 2014-04-28 14:15 - 00000000 _____ () C:\Users\[USRNAME]\defogger_reenable 2014-04-28 10:56 - 2014-04-28 10:57 - 00017488 _____ (Windows (R) 2000 DDK provider) C:\WINDOWS\gdrv.sys 2014-04-28 10:56 - 2014-04-28 10:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GIGABYTE 2014-04-28 10:56 - 2014-04-28 10:56 - 00000000 ____D () C:\Program Files\GIGABYTE 2014-04-28 10:55 - 2014-04-28 10:55 - 05350367 _____ () C:\Users\[USRNAME]\Downloads\motherboard_utility_atbios.exe 2014-04-28 10:47 - 2014-04-28 10:47 - 00536576 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntvdm.exe 2014-04-28 10:47 - 2014-04-28 10:47 - 00256192 _____ (Microsoft Corporation) C:\WINDOWS\winhelp.exe 2014-04-28 10:47 - 2014-04-28 10:47 - 00221600 _____ (Microsoft Corporation) C:\WINDOWS\system32\lanman.drv 2014-04-28 10:47 - 2014-04-28 10:47 - 00177856 _____ (Microsoft Corporation) C:\WINDOWS\system32\typelib.dll 2014-04-28 10:47 - 2014-04-28 10:47 - 00169520 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole2disp.dll 2014-04-28 10:47 - 2014-04-28 10:47 - 00153008 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole2nls.dll 2014-04-28 10:47 - 2014-04-28 10:47 - 00127213 _____ () C:\WINDOWS\system32\ega.cpi 2014-04-28 10:47 - 2014-04-28 10:47 - 00108464 _____ (Microsoft Corporation) C:\WINDOWS\system32\netapi.dll 2014-04-28 10:47 - 2014-04-28 10:47 - 00092320 _____ (Microsoft Corporation) C:\WINDOWS\system32\krnl386.exe 2014-04-28 10:47 - 2014-04-28 10:47 - 00082944 _____ (Microsoft Corporation) C:\WINDOWS\system32\olecli.dll 2014-04-28 10:47 - 2014-04-28 10:47 - 00082944 _____ (Microsoft Corporation) C:\WINDOWS\system\olecli.dll 2014-04-28 10:47 - 2014-04-28 10:47 - 00069886 _____ () C:\WINDOWS\system32\edit.com 2014-04-28 10:47 - 2014-04-28 10:47 - 00068992 _____ (Microsoft Corporation) C:\WINDOWS\system32\MMSYSTEM.DLL 2014-04-28 10:47 - 2014-04-28 10:47 - 00068992 _____ (Microsoft Corporation) C:\WINDOWS\system\MMSYSTEM.DLL 2014-04-28 10:47 - 2014-04-28 10:47 - 00062976 _____ (Microsoft Corporation) C:\WINDOWS\system32\graftabl.com 2014-04-28 10:47 - 2014-04-28 10:47 - 00053600 _____ () C:\WINDOWS\system32\dosx.exe 2014-04-28 10:47 - 2014-04-28 10:47 - 00050648 _____ () C:\WINDOWS\system32\COMMAND.COM 2014-04-28 10:47 - 2014-04-28 10:47 - 00047840 _____ (Microsoft Corporation) C:\WINDOWS\system32\USER.EXE 2014-04-28 10:47 - 2014-04-28 10:47 - 00046592 _____ (Microsoft Corporation) C:\WINDOWS\system32\pmspl.dll 2014-04-28 10:47 - 2014-04-28 10:47 - 00042809 _____ () C:\WINDOWS\system32\KEY01.SYS 2014-04-28 10:47 - 2014-04-28 10:47 - 00042592 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole2.dll 2014-04-28 10:47 - 2014-04-28 10:47 - 00042537 _____ () C:\WINDOWS\system32\KEYBOARD.SYS 2014-04-28 10:47 - 2014-04-28 10:47 - 00039424 _____ (Microsoft Corporation) C:\WINDOWS\system32\DDEML.DLL 2014-04-28 10:47 - 2014-04-28 10:47 - 00039274 _____ () C:\WINDOWS\system32\mem.exe 2014-04-28 10:47 - 2014-04-28 10:47 - 00035776 _____ () C:\WINDOWS\system32\NTIO411.SYS 2014-04-28 10:47 - 2014-04-28 10:47 - 00035552 _____ () C:\WINDOWS\system32\NTIO412.SYS 2014-04-28 10:47 - 2014-04-28 10:47 - 00034688 _____ () C:\WINDOWS\system32\NTIO804.SYS 2014-04-28 10:47 - 2014-04-28 10:47 - 00034688 _____ () C:\WINDOWS\system32\NTIO404.SYS 2014-04-28 10:47 - 2014-04-28 10:47 - 00033968 _____ () C:\WINDOWS\system32\NTIO.SYS 2014-04-28 10:47 - 2014-04-28 10:47 - 00032816 _____ (Microsoft Corporation) C:\WINDOWS\system32\COMMDLG.DLL 2014-04-28 10:47 - 2014-04-28 10:47 - 00032816 _____ (Microsoft Corporation) C:\WINDOWS\system\COMMDLG.DLL 2014-04-28 10:47 - 2014-04-28 10:47 - 00029370 _____ () C:\WINDOWS\system32\NTDOS411.SYS 2014-04-28 10:47 - 2014-04-28 10:47 - 00029274 _____ () C:\WINDOWS\system32\NTDOS412.SYS 2014-04-28 10:47 - 2014-04-28 10:47 - 00029146 _____ () C:\WINDOWS\system32\NTDOS804.SYS 2014-04-28 10:47 - 2014-04-28 10:47 - 00029146 _____ () C:\WINDOWS\system32\NTDOS404.SYS 2014-04-28 10:47 - 2014-04-28 10:47 - 00028420 _____ () C:\WINDOWS\system32\bios1.rom 2014-04-28 10:47 - 2014-04-28 10:47 - 00028112 _____ (Microsoft Corporation) C:\WINDOWS\system32\DRWATSON.EXE 2014-04-28 10:47 - 2014-04-28 10:47 - 00027866 _____ () C:\WINDOWS\system32\NTDOS.SYS 2014-04-28 10:47 - 2014-04-28 10:47 - 00027792 _____ (Microsoft Corporation) C:\WINDOWS\system32\compobj.dll 2014-04-28 10:47 - 2014-04-28 10:47 - 00027200 _____ (Microsoft Corporation) C:\WINDOWS\system32\ctl3dv2.dll 2014-04-28 10:47 - 2014-04-28 10:47 - 00027097 _____ () C:\WINDOWS\system32\country.sys 2014-04-28 10:47 - 2014-04-28 10:47 - 00024576 _____ (Microsoft Corporation) C:\WINDOWS\system32\GDI.EXE 2014-04-28 10:47 - 2014-04-28 10:47 - 00024064 _____ (Microsoft Corporation) C:\WINDOWS\system32\OLESVR.DLL 2014-04-28 10:47 - 2014-04-28 10:47 - 00024064 _____ (Microsoft Corporation) C:\WINDOWS\system\OLESVR.DLL 2014-04-28 10:47 - 2014-04-28 10:47 - 00022016 _____ (Microsoft Corporation) C:\WINDOWS\system32\vdmredir.dll 2014-04-28 10:47 - 2014-04-28 10:47 - 00021232 _____ () C:\WINDOWS\system32\graphics.pro 2014-04-28 10:47 - 2014-04-28 10:47 - 00020634 _____ () C:\WINDOWS\system32\debug.exe 2014-04-28 10:47 - 2014-04-28 10:47 - 00019694 _____ () C:\WINDOWS\system32\GRAPHICS.COM 2014-04-28 10:47 - 2014-04-28 10:47 - 00018896 _____ (Microsoft Corporation) C:\WINDOWS\system32\sysedit.exe 2014-04-28 10:47 - 2014-04-28 10:47 - 00018832 _____ () C:\WINDOWS\system32\v7vga.rom 2014-04-28 10:47 - 2014-04-28 10:47 - 00014710 _____ () C:\WINDOWS\system32\KB16.COM 2014-04-28 10:47 - 2014-04-28 10:47 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntvdmd.dll 2014-04-28 10:47 - 2014-04-28 10:47 - 00013888 _____ (Microsoft Corporation) C:\WINDOWS\system32\TOOLHELP.DLL 2014-04-28 10:47 - 2014-04-28 10:47 - 00013312 _____ () C:\WINDOWS\system32\win87em.dll 2014-04-28 10:47 - 2014-04-28 10:47 - 00012704 _____ (Microsoft Corporation) C:\WINDOWS\system32\WFWNET.DRV 2014-04-28 10:47 - 2014-04-28 10:47 - 00012704 _____ (Microsoft Corporation) C:\WINDOWS\system\WFWNET.DRV 2014-04-28 10:47 - 2014-04-28 10:47 - 00012642 _____ () C:\WINDOWS\system32\edlin.exe 2014-04-28 10:47 - 2014-04-28 10:47 - 00012498 _____ () C:\WINDOWS\system32\append.exe 2014-04-28 10:47 - 2014-04-28 10:47 - 00011753 _____ () C:\WINDOWS\system32\setver.exe 2014-04-28 10:47 - 2014-04-28 10:47 - 00010790 _____ () C:\WINDOWS\system32\EDIT.HLP 2014-04-28 10:47 - 2014-04-28 10:47 - 00010544 _____ (Microsoft Corporation) C:\WINDOWS\system32\COMM.drv 2014-04-28 10:47 - 2014-04-28 10:47 - 00009936 _____ (Microsoft Corporation) C:\WINDOWS\system32\lzexpand.dll 2014-04-28 10:47 - 2014-04-28 10:47 - 00009936 _____ (Microsoft Corporation) C:\WINDOWS\system\lzexpand.dll 2014-04-28 10:47 - 2014-04-28 10:47 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\system32\WIFEMAN.DLL 2014-04-28 10:47 - 2014-04-28 10:47 - 00009029 _____ () C:\WINDOWS\system32\ANSI.SYS 2014-04-28 10:47 - 2014-04-28 10:47 - 00009008 _____ (Microsoft Corporation) C:\WINDOWS\system32\ver.dll 2014-04-28 10:47 - 2014-04-28 10:47 - 00009008 _____ (Microsoft Corporation) C:\WINDOWS\system\ver.dll 2014-04-28 10:47 - 2014-04-28 10:47 - 00008424 _____ () C:\WINDOWS\system32\exe2bin.exe 2014-04-28 10:47 - 2014-04-28 10:47 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\system32\win.com 2014-04-28 10:47 - 2014-04-28 10:47 - 00008191 _____ () C:\WINDOWS\system32\bios4.rom 2014-04-28 10:47 - 2014-04-28 10:47 - 00007052 _____ () C:\WINDOWS\system32\nlsfunc.exe 2014-04-28 10:47 - 2014-04-28 10:47 - 00005532 _____ (Microsoft Corporation) C:\WINDOWS\system\stdole.tlb 2014-04-28 10:47 - 2014-04-28 10:47 - 00005120 _____ (Microsoft Corporation) C:\WINDOWS\system32\WINNLS.DLL 2014-04-28 10:47 - 2014-04-28 10:47 - 00005120 _____ (Microsoft Corporation) C:\WINDOWS\system32\SHELL.DLL 2014-04-28 10:47 - 2014-04-28 10:47 - 00005120 _____ (Microsoft Corporation) C:\WINDOWS\system\SHELL.DLL 2014-04-28 10:47 - 2014-04-28 10:47 - 00004768 _____ () C:\WINDOWS\system32\HIMEM.SYS 2014-04-28 10:47 - 2014-04-28 10:47 - 00004208 _____ (Microsoft Corporation) C:\WINDOWS\system32\storage.dll 2014-04-28 10:46 - 2014-04-28 10:46 - 00528620 _____ (Igor Pavlov) C:\Users\[USRNAME]\Downloads\motherboard_bios_ga-p31-ds3l_f9.exe 2014-04-28 00:16 - 2014-04-28 00:16 - 02767360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll 2014-04-28 00:16 - 2014-04-28 00:16 - 01634304 _____ (Microsoft Corporation) C:\WINDOWS\system32\wucltux.dll 2014-04-28 00:16 - 2014-04-28 00:16 - 00307200 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUSettingsProvider.dll 2014-04-28 00:16 - 2014-04-28 00:16 - 00159744 _____ (Microsoft Corporation) C:\WINDOWS\system32\storewuauth.dll 2014-04-28 00:16 - 2014-04-28 00:16 - 00049544 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe 2014-04-28 00:16 - 2014-04-27 23:36 - 00000000 ___DC () C:\WINDOWS\Panther 2014-04-28 00:15 - 2014-04-28 00:15 - 18679216 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 12732416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 11791360 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 05833728 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 05786968 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe 2014-04-28 00:15 - 2014-04-28 00:15 - 05770752 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 03562496 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncEngine.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 02317824 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 02270208 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 02088160 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe 2014-04-28 00:15 - 2014-04-28 00:15 - 02030080 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmSvc.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 01871192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys 2014-04-28 00:15 - 2014-04-28 00:15 - 01816576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Display.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 01779800 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 01764864 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 01679704 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys 2014-04-28 00:15 - 2014-04-28 00:15 - 01679128 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 01351168 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 01326936 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys 2014-04-28 00:15 - 2014-04-28 00:15 - 01309184 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 01200296 _____ (Microsoft Corporation) C:\WINDOWS\system32\propsys.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 01131520 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 01095488 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 01092896 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 01089024 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 01037504 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel32.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 00888320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 00887296 _____ (Microsoft Corporation) C:\WINDOWS\system32\aclui.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 00863552 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 00855552 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdvidcrl.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 00839168 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFolder.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 00833536 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 00828928 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.appcore.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 00801792 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 00800256 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgent.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 00755712 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 00735232 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 00731648 _____ (Microsoft Corporation) C:\WINDOWS\system32\IKEEXT.DLL 2014-04-28 00:15 - 2014-04-28 00:15 - 00731648 _____ (Microsoft Corporation) C:\WINDOWS\system32\adtschema.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 00688640 _____ (Microsoft Corporation) C:\WINDOWS\system32\netlogon.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 00672256 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDrive.exe 2014-04-28 00:15 - 2014-04-28 00:15 - 00629760 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 00623104 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 00605184 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasapi32.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 00590336 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveTelemetry.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 00589824 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpprefcl.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 00567296 _____ (Microsoft Corporation) C:\WINDOWS\system32\nshwfp.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 00560128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys 2014-04-28 00:15 - 2014-04-28 00:15 - 00551424 _____ (Microsoft Corporation) C:\WINDOWS\system32\BFE.DLL 2014-04-28 00:15 - 2014-04-28 00:15 - 00494592 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsapi.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 00491008 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAgent.exe 2014-04-28 00:15 - 2014-04-28 00:15 - 00482416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys 2014-04-28 00:15 - 2014-04-28 00:15 - 00444928 _____ (Microsoft Corporation) C:\WINDOWS\system32\AdmTmpl.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 00406912 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 00406512 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 00402432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.Printing.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 00390488 _____ (Microsoft Corporation) C:\WINDOWS\system32\netcfgx.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 00388408 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 00387210 _____ () C:\WINDOWS\system32\ApnDatabase.xml 2014-04-28 00:15 - 2014-04-28 00:15 - 00386560 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlangpui.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 00376152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS 2014-04-28 00:15 - 2014-04-28 00:15 - 00374784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\nwifi.sys 2014-04-28 00:15 - 2014-04-28 00:15 - 00356864 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidprov.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 00355832 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfreadwrite.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 00333824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys 2014-04-28 00:15 - 2014-04-28 00:15 - 00326024 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 00321880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys 2014-04-28 00:15 - 2014-04-28 00:15 - 00313344 _____ (Microsoft Corporation) C:\WINDOWS\system32\clusapi.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 00305768 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 00300544 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanmsm.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 00295256 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Classpnp.sys 2014-04-28 00:15 - 2014-04-28 00:15 - 00286040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS 2014-04-28 00:15 - 2014-04-28 00:15 - 00283992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys 2014-04-28 00:15 - 2014-04-28 00:15 - 00280576 _____ (Microsoft Corporation) C:\WINDOWS\system32\SessEnv.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 00264192 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDEServer.exe 2014-04-28 00:15 - 2014-04-28 00:15 - 00264192 _____ (Microsoft Corporation) C:\WINDOWS\system32\FWPUCLNT.DLL 2014-04-28 00:15 - 2014-04-28 00:15 - 00262656 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationApi.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 00254976 _____ (Microsoft Corporation) C:\WINDOWS\system32\pdh.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 00251392 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSDMon.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 00241664 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcomp.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 00232960 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSDScDrv.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanapi.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 00227840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb10.sys 2014-04-28 00:15 - 2014-04-28 00:15 - 00226304 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Sensors.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 00222720 _____ (Microsoft Corporation) C:\WINDOWS\system32\spp.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 00197632 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 00194752 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe 2014-04-28 00:15 - 2014-04-28 00:15 - 00186880 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsrslvr.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 00185856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srvnet.sys 2014-04-28 00:15 - 2014-04-28 00:15 - 00184832 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 00179200 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdd.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 00174080 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 00172544 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReInfo.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 00171008 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsApi.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 00153600 _____ (Microsoft Corporation) C:\WINDOWS\system32\dafWfdProvider.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 00151040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Scanners.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 00147800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys 2014-04-28 00:15 - 2014-04-28 00:15 - 00139776 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxAllUserStore.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 00138584 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wof.sys 2014-04-28 00:15 - 2014-04-28 00:15 - 00124416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxdav.sys 2014-04-28 00:15 - 2014-04-28 00:15 - 00102400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dfsc.sys 2014-04-28 00:15 - 2014-04-28 00:15 - 00098816 _____ (Microsoft Corporation) C:\WINDOWS\system32\drvinst.exe 2014-04-28 00:15 - 2014-04-28 00:15 - 00096256 _____ (Microsoft Corporation) C:\WINDOWS\system32\umpnpmgr.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 00095744 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevPropMgr.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 00094016 _____ (Microsoft Corporation) C:\WINDOWS\system32\userenv.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidclass.sys 2014-04-28 00:15 - 2014-04-28 00:15 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\system32\davclnt.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\system32\w32tm.exe 2014-04-28 00:15 - 2014-04-28 00:15 - 00069464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wfplwfs.sys 2014-04-28 00:15 - 2014-04-28 00:15 - 00069120 _____ (Microsoft Corporation) C:\WINDOWS\system32\RMapi.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 00068608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\IPMIDrv.sys 2014-04-28 00:15 - 2014-04-28 00:15 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\system32\l2gpstore.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsgqec.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\system32\drvcfg.exe 2014-04-28 00:15 - 2014-04-28 00:15 - 00038400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpipreg.sys 2014-04-28 00:15 - 2014-04-28 00:15 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\SetNetworkLocation.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Shell.Search.UriHandler.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\sxproxy.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredentialMigrationHandler.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 00020992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidusb.sys 2014-04-28 00:15 - 2014-04-28 00:15 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanhlp.dll 2014-04-28 00:14 - 2014-04-28 00:14 - 00262144 _____ () C:\WINDOWS\system32\config\userdiff 2014-04-28 00:13 - 2014-04-28 00:13 - 00000000 ____D () C:\WINDOWS\system32\XPSViewer 2014-04-28 00:13 - 2014-04-28 00:13 - 00000000 ____D () C:\Program Files\Reference Assemblies 2014-04-28 00:13 - 2014-04-28 00:13 - 00000000 ____D () C:\Program Files\MSBuild 2014-04-28 00:13 - 2013-08-03 06:41 - 00778936 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll 2014-04-28 00:13 - 2013-08-03 06:41 - 00102608 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll 2014-04-28 00:13 - 2013-08-03 06:41 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe 2014-04-28 00:06 - 2014-04-30 08:21 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy 2014-04-28 00:06 - 2014-04-28 00:09 - 00000000 ____D () C:\Program Files\Spybot - Search & Destroy 2 2014-04-28 00:06 - 2014-04-28 00:06 - 00002149 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot-S&D Start Center.lnk 2014-04-28 00:06 - 2014-04-28 00:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2 2014-04-28 00:06 - 2013-09-20 10:49 - 00018968 _____ (Safer Networking Limited) C:\WINDOWS\system32\sdnclean.exe 2014-04-28 00:05 - 2014-04-28 00:05 - 40658208 _____ (Safer-Networking Ltd. ) C:\Users\[USRNAME]\Downloads\spybot-2.2.25.exe 2014-04-27 23:58 - 2014-04-27 23:58 - 00043152 _____ (AVAST Software) C:\WINDOWS\avastSS.scr 2014-04-27 23:58 - 2014-04-27 23:58 - 00024184 _____ () C:\WINDOWS\system32\Drivers\aswHwid.sys 2014-04-27 23:52 - 2014-04-27 23:52 - 00000000 ___RD () C:\WINDOWS\BrowserChoice 2014-04-27 23:52 - 2013-10-31 01:38 - 00202584 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdFilter.sys 2014-04-27 23:52 - 2013-10-31 01:38 - 00093016 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdNisDrv.sys 2014-04-27 23:52 - 2013-10-31 01:36 - 00030224 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdBoot.sys 2014-04-27 23:47 - 2014-04-27 23:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java 2014-04-27 23:47 - 2014-04-14 20:13 - 00094632 _____ (Oracle Corporation) C:\WINDOWS\system32\WindowsAccessBridge.dll 2014-04-27 23:47 - 2014-04-14 20:05 - 00264616 _____ (Oracle Corporation) C:\WINDOWS\system32\javaws.exe 2014-04-27 23:47 - 2014-04-14 20:05 - 00175528 _____ (Oracle Corporation) C:\WINDOWS\system32\javaw.exe 2014-04-27 23:47 - 2014-04-14 20:04 - 00175016 _____ (Oracle Corporation) C:\WINDOWS\system32\java.exe 2014-04-27 23:45 - 2014-04-27 23:47 - 00004155 _____ () C:\WINDOWS\system32\jupdate-1.7.0_55-b14.log 2014-04-27 23:44 - 2014-04-27 23:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Classic Shell 2014-04-27 23:43 - 2014-04-27 23:43 - 06869696 _____ (IvoSoft) C:\Users\[USRNAME]\Downloads\ClassicShellSetup_4_1_0-de.exe 2014-04-27 23:37 - 2014-04-27 23:37 - 00000000 ____D () C:\Users\[USRNAME]\AppData\Local\NVIDIA 2014-04-27 23:37 - 2014-04-27 23:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation 2014-04-27 23:36 - 2014-04-27 23:36 - 00001456 _____ () C:\Users\[USRNAME]\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2014-04-27 23:36 - 2014-04-27 23:36 - 00000020 ___SH () C:\Users\[USRNAME]\ntuser.ini 2014-04-27 23:34 - 2014-04-27 23:34 - 00000000 _SHDL () C:\Users\Default\Startmenü 2014-04-27 23:34 - 2014-04-27 23:34 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung 2014-04-27 23:34 - 2014-04-27 23:34 - 00000000 _SHDL () C:\Users\Default\Druckumgebung 2014-04-27 23:34 - 2014-04-27 23:34 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik 2014-04-27 23:34 - 2014-04-27 23:34 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder 2014-04-27 23:34 - 2014-04-27 23:34 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-04-27 23:34 - 2014-04-27 23:34 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf 2014-04-27 23:34 - 2014-04-27 23:34 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik 2014-04-27 23:34 - 2014-04-27 23:34 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder 2014-04-27 23:34 - 2014-04-27 23:34 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-04-27 23:34 - 2014-04-27 23:34 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf 2014-04-27 23:34 - 2014-04-27 23:34 - 00000000 _SHDL () C:\Programme 2014-04-27 23:33 - 2014-04-27 23:33 - 00021532 _____ () C:\WINDOWS\system32\emptyregdb.dat 2014-04-27 23:31 - 2014-04-27 23:31 - 00000020 ___SH () C:\Users\UpdatusUser\ntuser.ini 2014-04-27 23:27 - 2014-04-27 23:27 - 00001515 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk 2014-04-27 23:27 - 2014-04-27 23:27 - 00000000 ____D () C:\Users\Default\AppData\Local\Microsoft Help 2014-04-27 23:27 - 2014-04-27 23:27 - 00000000 ____D () C:\Users\Default User\AppData\Local\Microsoft Help 2014-04-27 23:25 - 2014-04-27 23:25 - 00000000 ____D () C:\WINDOWS\system32\config\bbimigrate 2014-04-27 23:24 - 2014-04-28 14:15 - 00000000 ____D () C:\Users\[USRNAME] 2014-04-27 23:24 - 2014-04-27 23:33 - 00032388 _____ () C:\WINDOWS\diagwrn.xml 2014-04-27 23:24 - 2014-04-27 23:33 - 00032388 _____ () C:\WINDOWS\diagerr.xml 2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\[USRNAME]\Startmenü 2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\[USRNAME]\Netzwerkumgebung 2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\[USRNAME]\Druckumgebung 2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\[USRNAME]\Documents\Eigene Musik 2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\[USRNAME]\Documents\Eigene Bilder 2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\[USRNAME]\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\[USRNAME]\AppData\Local\Verlauf 2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\UpdatusUser\Startmenü 2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\UpdatusUser\Netzwerkumgebung 2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\UpdatusUser\Druckumgebung 2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\UpdatusUser\Documents\Eigene Musik 2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\UpdatusUser\Documents\Eigene Bilder 2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\UpdatusUser\AppData\Local\Verlauf 2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 ___RD () C:\Users\[USRNAME]\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 ___RD () C:\Users\[USRNAME]\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 ___RD () C:\Users\[USRNAME]\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility 2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 ___RD () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 ___RD () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility 2014-04-27 23:24 - 2014-03-18 10:08 - 00000369 _____ () C:\Users\[USRNAME]\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk 2014-04-27 23:24 - 2014-03-18 10:08 - 00000369 _____ () C:\Users\[USRNAME]\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk 2014-04-27 23:24 - 2014-03-18 10:08 - 00000369 _____ () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk 2014-04-27 23:24 - 2014-03-18 10:08 - 00000369 _____ () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk 2014-04-27 23:24 - 2013-08-22 10:17 - 00000000 ___RD () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2014-04-27 23:24 - 2013-08-22 10:17 - 00000000 ____D () C:\Users\[USRNAME]\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance 2014-04-27 23:24 - 2013-08-22 10:17 - 00000000 ____D () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance 2014-04-27 23:19 - 2014-04-30 08:54 - 00000000 ____D () C:\ProgramData\NVIDIA 2014-04-27 23:19 - 2014-03-20 23:03 - 00053024 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll 2014-04-27 23:19 - 2014-03-04 14:34 - 04348704 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll 2014-04-27 23:19 - 2014-03-04 14:34 - 03044696 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc.dll 2014-04-27 23:19 - 2014-03-04 14:34 - 02556360 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvcr.dll 2014-04-27 23:19 - 2014-03-04 14:34 - 00663896 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe 2014-04-27 23:19 - 2014-03-04 14:34 - 00375128 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmctray.dll 2014-04-27 23:19 - 2014-03-04 14:34 - 00062752 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvshext.dll 2014-04-27 23:19 - 2014-03-04 13:32 - 00599840 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvStreaming.exe 2014-04-27 23:18 - 2014-04-30 02:07 - 01539490 _____ () C:\WINDOWS\WindowsUpdate.log 2014-04-27 23:18 - 2014-04-27 23:26 - 00000000 ____D () C:\Program Files\NVIDIA Corporation 2014-04-27 23:18 - 2014-04-27 23:19 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation 2014-04-27 23:18 - 2014-04-27 23:18 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf 2014-04-27 22:46 - 2014-04-27 23:33 - 00006674 _____ () C:\WINDOWS\comsetup.log 2014-04-27 21:26 - 2014-04-27 23:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN 2014-04-27 21:25 - 2014-04-27 23:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Foxit Reader 2014-04-27 21:25 - 2014-04-27 21:25 - 00000000 ____D () C:\Program Files\Foxit Software 2014-04-27 21:24 - 2014-04-27 21:24 - 33488656 _____ (Foxit Corporation ) C:\Users\[USRNAME]\Downloads\FoxitReader614.0217_enu_Setup.exe 2014-04-20 10:17 - 2014-04-20 10:17 - 00244928 _____ (IvoSoft) C:\WINDOWS\system32\StartMenuHelper32.dll 2014-04-14 20:07 - 2014-04-14 20:07 - 00000000 ____D () C:\Program Files\Mozilla Firefox ==================== One Month Modified Files and Folders ======= 2014-04-30 08:59 - 2014-04-30 08:59 - 00011284 _____ () C:\Users\[USRNAME]\Desktop\FRST.txt 2014-04-30 08:59 - 2014-04-30 08:59 - 00000892 _____ () C:\Users\[USRNAME]\Desktop\checkup.txt 2014-04-30 08:59 - 2014-04-28 14:18 - 00000000 ____D () C:\FRST 2014-04-30 08:57 - 2014-04-30 08:57 - 00855379 _____ () C:\Users\[USRNAME]\Desktop\SecurityCheck.exe 2014-04-30 08:55 - 2014-04-28 20:12 - 00107736 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys 2014-04-30 08:55 - 2013-08-22 09:23 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT 2014-04-30 08:54 - 2014-04-27 23:19 - 00000000 ____D () C:\ProgramData\NVIDIA 2014-04-30 08:23 - 2014-01-16 22:02 - 00000000 ____D () C:\Users\[USRNAME]\AppData\Roaming\ClassicShell 2014-04-30 08:21 - 2014-04-28 00:06 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy 2014-04-30 07:50 - 2014-01-16 23:57 - 00000884 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job 2014-04-30 07:00 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\sru 2014-04-30 05:10 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\rescache 2014-04-30 05:05 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\Microsoft.NET 2014-04-30 02:07 - 2014-04-27 23:18 - 01539490 _____ () C:\WINDOWS\WindowsUpdate.log 2014-04-30 01:55 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\AppReadiness 2014-04-29 21:49 - 2014-03-18 10:04 - 01776918 _____ () C:\WINDOWS\system32\PerfStringBackup.INI 2014-04-29 21:48 - 2014-04-29 21:48 - 02347384 _____ (ESET) C:\Users\[USRNAME]\Desktop\esetsmartinstaller_deu.exe 2014-04-29 21:48 - 2014-04-29 21:48 - 00000000 ____D () C:\Program Files\ESET 2014-04-29 21:47 - 2014-04-30 08:57 - 00000000 ____D () C:\Users\[USRNAME]\Desktop\08_Security Check 2014-04-29 21:47 - 2014-04-29 21:47 - 00000000 ____D () C:\Users\[USRNAME]\Desktop\07_ESET Online 2014-04-29 21:45 - 2013-08-22 09:23 - 00333558 _____ () C:\WINDOWS\setupact.log 2014-04-28 20:38 - 2014-04-28 20:38 - 00000000 ____D () C:\WINDOWS\ERUNT 2014-04-28 20:36 - 2014-04-28 20:36 - 00000569 _____ () C:\Users\[USRNAME]\Desktop\FRST README.txt 2014-04-28 20:35 - 2014-04-28 20:35 - 00000547 _____ () C:\Users\[USRNAME]\Desktop\JRT README.txt 2014-04-28 20:34 - 2014-04-30 08:56 - 00000000 ____D () C:\Users\[USRNAME]\Desktop\09_FRST (zum Dritten) - Kopie 2014-04-28 20:34 - 2014-04-28 20:34 - 01016261 _____ (Thisisu) C:\Users\[USRNAME]\Desktop\JRT.exe 2014-04-28 20:34 - 2014-04-28 20:34 - 00000000 ____D () C:\Users\[USRNAME]\Desktop\06_FRST (zum Zweiten) 2014-04-28 20:34 - 2014-04-28 20:34 - 00000000 ____D () C:\Users\[USRNAME]\Desktop\05_Junkware Removal Tool 2014-04-28 20:31 - 2014-03-18 01:54 - 00001462 _____ () C:\WINDOWS\PFRO.log 2014-04-28 20:30 - 2014-04-28 20:29 - 00000000 ____D () C:\AdwCleaner 2014-04-28 20:28 - 2014-04-28 20:27 - 01310283 _____ () C:\Users\[USRNAME]\Desktop\adwcleaner.exe 2014-04-28 20:27 - 2014-04-28 20:27 - 00000000 ____D () C:\Users\[USRNAME]\Desktop\04_AdvCleaner 2014-04-28 20:23 - 2013-08-22 08:13 - 00262144 ___SH () C:\WINDOWS\system32\config\BBI 2014-04-28 20:12 - 2014-04-28 20:12 - 00001078 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-04-28 20:12 - 2014-04-28 20:12 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2014-04-28 20:12 - 2014-04-28 20:11 - 00000000 ____D () C:\Program Files\ Malwarebytes Anti-Malware 2014-04-28 20:11 - 2014-04-28 20:11 - 17305616 _____ (Malwarebytes Corporation ) C:\Users\[USRNAME]\Downloads\mbam-setup-2.0.1.1004.exe 2014-04-28 20:11 - 2014-04-28 20:11 - 00000000 ____D () C:\Users\[USRNAME]\Desktop\03_MBAM 2014-04-28 20:11 - 2014-04-28 20:11 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-04-28 14:16 - 2014-04-28 14:16 - 01049600 _____ (Farbar) C:\Users\[USRNAME]\Desktop\FRST.exe 2014-04-28 14:15 - 2014-04-28 14:15 - 00000000 _____ () C:\Users\[USRNAME]\defogger_reenable 2014-04-28 14:15 - 2014-04-27 23:24 - 00000000 ____D () C:\Users\[USRNAME] 2014-04-28 10:57 - 2014-04-28 10:56 - 00017488 _____ (Windows (R) 2000 DDK provider) C:\WINDOWS\gdrv.sys 2014-04-28 10:56 - 2014-04-28 10:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GIGABYTE 2014-04-28 10:56 - 2014-04-28 10:56 - 00000000 ____D () C:\Program Files\GIGABYTE 2014-04-28 10:56 - 2014-01-17 00:40 - 00000000 ___HD () C:\Program Files\InstallShield Installation Information 2014-04-28 10:55 - 2014-04-28 10:55 - 05350367 _____ () C:\Users\[USRNAME]\Downloads\motherboard_utility_atbios.exe 2014-04-28 10:47 - 2014-04-28 10:47 - 00536576 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntvdm.exe 2014-04-28 10:47 - 2014-04-28 10:47 - 00256192 _____ (Microsoft Corporation) C:\WINDOWS\winhelp.exe 2014-04-28 10:47 - 2014-04-28 10:47 - 00221600 _____ (Microsoft Corporation) C:\WINDOWS\system32\lanman.drv 2014-04-28 10:47 - 2014-04-28 10:47 - 00177856 _____ (Microsoft Corporation) C:\WINDOWS\system32\typelib.dll 2014-04-28 10:47 - 2014-04-28 10:47 - 00169520 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole2disp.dll 2014-04-28 10:47 - 2014-04-28 10:47 - 00153008 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole2nls.dll 2014-04-28 10:47 - 2014-04-28 10:47 - 00127213 _____ () C:\WINDOWS\system32\ega.cpi 2014-04-28 10:47 - 2014-04-28 10:47 - 00108464 _____ (Microsoft Corporation) C:\WINDOWS\system32\netapi.dll 2014-04-28 10:47 - 2014-04-28 10:47 - 00092320 _____ (Microsoft Corporation) C:\WINDOWS\system32\krnl386.exe 2014-04-28 10:47 - 2014-04-28 10:47 - 00082944 _____ (Microsoft Corporation) C:\WINDOWS\system32\olecli.dll 2014-04-28 10:47 - 2014-04-28 10:47 - 00082944 _____ (Microsoft Corporation) C:\WINDOWS\system\olecli.dll 2014-04-28 10:47 - 2014-04-28 10:47 - 00069886 _____ () C:\WINDOWS\system32\edit.com 2014-04-28 10:47 - 2014-04-28 10:47 - 00068992 _____ (Microsoft Corporation) C:\WINDOWS\system32\MMSYSTEM.DLL 2014-04-28 10:47 - 2014-04-28 10:47 - 00068992 _____ (Microsoft Corporation) C:\WINDOWS\system\MMSYSTEM.DLL 2014-04-28 10:47 - 2014-04-28 10:47 - 00062976 _____ (Microsoft Corporation) C:\WINDOWS\system32\graftabl.com 2014-04-28 10:47 - 2014-04-28 10:47 - 00053600 _____ () C:\WINDOWS\system32\dosx.exe 2014-04-28 10:47 - 2014-04-28 10:47 - 00050648 _____ () C:\WINDOWS\system32\COMMAND.COM 2014-04-28 10:47 - 2014-04-28 10:47 - 00047840 _____ (Microsoft Corporation) C:\WINDOWS\system32\USER.EXE 2014-04-28 10:47 - 2014-04-28 10:47 - 00046592 _____ (Microsoft Corporation) C:\WINDOWS\system32\pmspl.dll 2014-04-28 10:47 - 2014-04-28 10:47 - 00042809 _____ () C:\WINDOWS\system32\KEY01.SYS 2014-04-28 10:47 - 2014-04-28 10:47 - 00042592 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole2.dll 2014-04-28 10:47 - 2014-04-28 10:47 - 00042537 _____ () C:\WINDOWS\system32\KEYBOARD.SYS 2014-04-28 10:47 - 2014-04-28 10:47 - 00039424 _____ (Microsoft Corporation) C:\WINDOWS\system32\DDEML.DLL 2014-04-28 10:47 - 2014-04-28 10:47 - 00039274 _____ () C:\WINDOWS\system32\mem.exe 2014-04-28 10:47 - 2014-04-28 10:47 - 00035776 _____ () C:\WINDOWS\system32\NTIO411.SYS 2014-04-28 10:47 - 2014-04-28 10:47 - 00035552 _____ () C:\WINDOWS\system32\NTIO412.SYS 2014-04-28 10:47 - 2014-04-28 10:47 - 00034688 _____ () C:\WINDOWS\system32\NTIO804.SYS 2014-04-28 10:47 - 2014-04-28 10:47 - 00034688 _____ () C:\WINDOWS\system32\NTIO404.SYS 2014-04-28 10:47 - 2014-04-28 10:47 - 00033968 _____ () C:\WINDOWS\system32\NTIO.SYS 2014-04-28 10:47 - 2014-04-28 10:47 - 00032816 _____ (Microsoft Corporation) C:\WINDOWS\system32\COMMDLG.DLL 2014-04-28 10:47 - 2014-04-28 10:47 - 00032816 _____ (Microsoft Corporation) C:\WINDOWS\system\COMMDLG.DLL 2014-04-28 10:47 - 2014-04-28 10:47 - 00029370 _____ () C:\WINDOWS\system32\NTDOS411.SYS 2014-04-28 10:47 - 2014-04-28 10:47 - 00029274 _____ () C:\WINDOWS\system32\NTDOS412.SYS 2014-04-28 10:47 - 2014-04-28 10:47 - 00029146 _____ () C:\WINDOWS\system32\NTDOS804.SYS 2014-04-28 10:47 - 2014-04-28 10:47 - 00029146 _____ () C:\WINDOWS\system32\NTDOS404.SYS 2014-04-28 10:47 - 2014-04-28 10:47 - 00028420 _____ () C:\WINDOWS\system32\bios1.rom 2014-04-28 10:47 - 2014-04-28 10:47 - 00028112 _____ (Microsoft Corporation) C:\WINDOWS\system32\DRWATSON.EXE 2014-04-28 10:47 - 2014-04-28 10:47 - 00027866 _____ () C:\WINDOWS\system32\NTDOS.SYS 2014-04-28 10:47 - 2014-04-28 10:47 - 00027792 _____ (Microsoft Corporation) C:\WINDOWS\system32\compobj.dll 2014-04-28 10:47 - 2014-04-28 10:47 - 00027200 _____ (Microsoft Corporation) C:\WINDOWS\system32\ctl3dv2.dll 2014-04-28 10:47 - 2014-04-28 10:47 - 00027097 _____ () C:\WINDOWS\system32\country.sys 2014-04-28 10:47 - 2014-04-28 10:47 - 00024576 _____ (Microsoft Corporation) C:\WINDOWS\system32\GDI.EXE 2014-04-28 10:47 - 2014-04-28 10:47 - 00024064 _____ (Microsoft Corporation) C:\WINDOWS\system32\OLESVR.DLL 2014-04-28 10:47 - 2014-04-28 10:47 - 00024064 _____ (Microsoft Corporation) C:\WINDOWS\system\OLESVR.DLL 2014-04-28 10:47 - 2014-04-28 10:47 - 00022016 _____ (Microsoft Corporation) C:\WINDOWS\system32\vdmredir.dll 2014-04-28 10:47 - 2014-04-28 10:47 - 00021232 _____ () C:\WINDOWS\system32\graphics.pro 2014-04-28 10:47 - 2014-04-28 10:47 - 00020634 _____ () C:\WINDOWS\system32\debug.exe 2014-04-28 10:47 - 2014-04-28 10:47 - 00019694 _____ () C:\WINDOWS\system32\GRAPHICS.COM 2014-04-28 10:47 - 2014-04-28 10:47 - 00018896 _____ (Microsoft Corporation) C:\WINDOWS\system32\sysedit.exe 2014-04-28 10:47 - 2014-04-28 10:47 - 00018832 _____ () C:\WINDOWS\system32\v7vga.rom 2014-04-28 10:47 - 2014-04-28 10:47 - 00014710 _____ () C:\WINDOWS\system32\KB16.COM 2014-04-28 10:47 - 2014-04-28 10:47 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntvdmd.dll 2014-04-28 10:47 - 2014-04-28 10:47 - 00013888 _____ (Microsoft Corporation) C:\WINDOWS\system32\TOOLHELP.DLL 2014-04-28 10:47 - 2014-04-28 10:47 - 00013312 _____ () C:\WINDOWS\system32\win87em.dll 2014-04-28 10:47 - 2014-04-28 10:47 - 00012704 _____ (Microsoft Corporation) C:\WINDOWS\system32\WFWNET.DRV 2014-04-28 10:47 - 2014-04-28 10:47 - 00012704 _____ (Microsoft Corporation) C:\WINDOWS\system\WFWNET.DRV 2014-04-28 10:47 - 2014-04-28 10:47 - 00012642 _____ () C:\WINDOWS\system32\edlin.exe 2014-04-28 10:47 - 2014-04-28 10:47 - 00012498 _____ () C:\WINDOWS\system32\append.exe 2014-04-28 10:47 - 2014-04-28 10:47 - 00011753 _____ () C:\WINDOWS\system32\setver.exe 2014-04-28 10:47 - 2014-04-28 10:47 - 00010790 _____ () C:\WINDOWS\system32\EDIT.HLP 2014-04-28 10:47 - 2014-04-28 10:47 - 00010544 _____ (Microsoft Corporation) C:\WINDOWS\system32\COMM.drv 2014-04-28 10:47 - 2014-04-28 10:47 - 00009936 _____ (Microsoft Corporation) C:\WINDOWS\system32\lzexpand.dll 2014-04-28 10:47 - 2014-04-28 10:47 - 00009936 _____ (Microsoft Corporation) C:\WINDOWS\system\lzexpand.dll 2014-04-28 10:47 - 2014-04-28 10:47 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\system32\WIFEMAN.DLL 2014-04-28 10:47 - 2014-04-28 10:47 - 00009029 _____ () C:\WINDOWS\system32\ANSI.SYS 2014-04-28 10:47 - 2014-04-28 10:47 - 00009008 _____ (Microsoft Corporation) C:\WINDOWS\system32\ver.dll 2014-04-28 10:47 - 2014-04-28 10:47 - 00009008 _____ (Microsoft Corporation) C:\WINDOWS\system\ver.dll 2014-04-28 10:47 - 2014-04-28 10:47 - 00008424 _____ () C:\WINDOWS\system32\exe2bin.exe 2014-04-28 10:47 - 2014-04-28 10:47 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\system32\win.com 2014-04-28 10:47 - 2014-04-28 10:47 - 00008191 _____ () C:\WINDOWS\system32\bios4.rom 2014-04-28 10:47 - 2014-04-28 10:47 - 00007052 _____ () C:\WINDOWS\system32\nlsfunc.exe 2014-04-28 10:47 - 2014-04-28 10:47 - 00005532 _____ (Microsoft Corporation) C:\WINDOWS\system\stdole.tlb 2014-04-28 10:47 - 2014-04-28 10:47 - 00005120 _____ (Microsoft Corporation) C:\WINDOWS\system32\WINNLS.DLL 2014-04-28 10:47 - 2014-04-28 10:47 - 00005120 _____ (Microsoft Corporation) C:\WINDOWS\system32\SHELL.DLL 2014-04-28 10:47 - 2014-04-28 10:47 - 00005120 _____ (Microsoft Corporation) C:\WINDOWS\system\SHELL.DLL 2014-04-28 10:47 - 2014-04-28 10:47 - 00004768 _____ () C:\WINDOWS\system32\HIMEM.SYS 2014-04-28 10:47 - 2014-04-28 10:47 - 00004208 _____ (Microsoft Corporation) C:\WINDOWS\system32\storage.dll 2014-04-28 10:47 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\System 2014-04-28 10:46 - 2014-04-28 10:46 - 00528620 _____ (Igor Pavlov) C:\Users\[USRNAME]\Downloads\motherboard_bios_ga-p31-ds3l_f9.exe 2014-04-28 03:35 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\LogFiles 2014-04-28 00:16 - 2014-04-28 00:16 - 02767360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll 2014-04-28 00:16 - 2014-04-28 00:16 - 01634304 _____ (Microsoft Corporation) C:\WINDOWS\system32\wucltux.dll 2014-04-28 00:16 - 2014-04-28 00:16 - 00307200 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUSettingsProvider.dll 2014-04-28 00:16 - 2014-04-28 00:16 - 00159744 _____ (Microsoft Corporation) C:\WINDOWS\system32\storewuauth.dll 2014-04-28 00:16 - 2014-04-28 00:16 - 00049544 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe 2014-04-28 00:16 - 2013-08-22 10:17 - 00262144 _____ () C:\WINDOWS\system32\config\BCD-Template 2014-04-28 00:16 - 2013-08-22 10:17 - 00000000 ___RD () C:\WINDOWS\ToastData 2014-04-28 00:15 - 2014-04-28 00:15 - 18679216 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 12732416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 11791360 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 05833728 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 05786968 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe 2014-04-28 00:15 - 2014-04-28 00:15 - 05770752 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 03562496 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncEngine.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 02317824 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 02270208 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 02088160 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe 2014-04-28 00:15 - 2014-04-28 00:15 - 02030080 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmSvc.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 01871192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys 2014-04-28 00:15 - 2014-04-28 00:15 - 01816576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Display.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 01779800 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 01764864 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 01679704 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys 2014-04-28 00:15 - 2014-04-28 00:15 - 01679128 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 01351168 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 01326936 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys 2014-04-28 00:15 - 2014-04-28 00:15 - 01309184 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 01200296 _____ (Microsoft Corporation) C:\WINDOWS\system32\propsys.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 01131520 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 01095488 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 01092896 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 01089024 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 01037504 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel32.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 00888320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 00887296 _____ (Microsoft Corporation) C:\WINDOWS\system32\aclui.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 00863552 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 00855552 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdvidcrl.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 00839168 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFolder.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 00833536 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 00828928 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.appcore.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 00801792 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 00800256 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgent.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 00755712 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 00735232 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 00731648 _____ (Microsoft Corporation) C:\WINDOWS\system32\IKEEXT.DLL 2014-04-28 00:15 - 2014-04-28 00:15 - 00731648 _____ (Microsoft Corporation) C:\WINDOWS\system32\adtschema.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 00688640 _____ (Microsoft Corporation) C:\WINDOWS\system32\netlogon.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 00672256 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDrive.exe 2014-04-28 00:15 - 2014-04-28 00:15 - 00629760 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 00623104 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 00605184 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasapi32.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 00590336 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveTelemetry.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 00589824 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpprefcl.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 00567296 _____ (Microsoft Corporation) C:\WINDOWS\system32\nshwfp.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 00560128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys 2014-04-28 00:15 - 2014-04-28 00:15 - 00551424 _____ (Microsoft Corporation) C:\WINDOWS\system32\BFE.DLL 2014-04-28 00:15 - 2014-04-28 00:15 - 00494592 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsapi.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 00491008 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAgent.exe 2014-04-28 00:15 - 2014-04-28 00:15 - 00482416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys 2014-04-28 00:15 - 2014-04-28 00:15 - 00444928 _____ (Microsoft Corporation) C:\WINDOWS\system32\AdmTmpl.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 00406912 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 00406512 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 00402432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.Printing.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 00390488 _____ (Microsoft Corporation) C:\WINDOWS\system32\netcfgx.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 00388408 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 00387210 _____ () C:\WINDOWS\system32\ApnDatabase.xml 2014-04-28 00:15 - 2014-04-28 00:15 - 00386560 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlangpui.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 00376152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS 2014-04-28 00:15 - 2014-04-28 00:15 - 00374784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\nwifi.sys 2014-04-28 00:15 - 2014-04-28 00:15 - 00356864 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidprov.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 00355832 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfreadwrite.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 00333824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys 2014-04-28 00:15 - 2014-04-28 00:15 - 00326024 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 00321880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys 2014-04-28 00:15 - 2014-04-28 00:15 - 00313344 _____ (Microsoft Corporation) C:\WINDOWS\system32\clusapi.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 00305768 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 00300544 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanmsm.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 00295256 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Classpnp.sys 2014-04-28 00:15 - 2014-04-28 00:15 - 00286040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS 2014-04-28 00:15 - 2014-04-28 00:15 - 00283992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys 2014-04-28 00:15 - 2014-04-28 00:15 - 00280576 _____ (Microsoft Corporation) C:\WINDOWS\system32\SessEnv.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 00264192 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDEServer.exe 2014-04-28 00:15 - 2014-04-28 00:15 - 00264192 _____ (Microsoft Corporation) C:\WINDOWS\system32\FWPUCLNT.DLL 2014-04-28 00:15 - 2014-04-28 00:15 - 00262656 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationApi.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 00254976 _____ (Microsoft Corporation) C:\WINDOWS\system32\pdh.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 00251392 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSDMon.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 00241664 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcomp.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 00232960 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSDScDrv.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanapi.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 00227840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb10.sys 2014-04-28 00:15 - 2014-04-28 00:15 - 00226304 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Sensors.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 00222720 _____ (Microsoft Corporation) C:\WINDOWS\system32\spp.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 00197632 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 00194752 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe 2014-04-28 00:15 - 2014-04-28 00:15 - 00186880 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsrslvr.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 00185856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srvnet.sys 2014-04-28 00:15 - 2014-04-28 00:15 - 00184832 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 00179200 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdd.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 00174080 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 00172544 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReInfo.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 00171008 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsApi.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 00153600 _____ (Microsoft Corporation) C:\WINDOWS\system32\dafWfdProvider.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 00151040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Scanners.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 00147800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys 2014-04-28 00:15 - 2014-04-28 00:15 - 00139776 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxAllUserStore.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 00138584 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wof.sys 2014-04-28 00:15 - 2014-04-28 00:15 - 00124416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxdav.sys 2014-04-28 00:15 - 2014-04-28 00:15 - 00102400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dfsc.sys 2014-04-28 00:15 - 2014-04-28 00:15 - 00098816 _____ (Microsoft Corporation) C:\WINDOWS\system32\drvinst.exe 2014-04-28 00:15 - 2014-04-28 00:15 - 00096256 _____ (Microsoft Corporation) C:\WINDOWS\system32\umpnpmgr.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 00095744 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevPropMgr.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 00094016 _____ (Microsoft Corporation) C:\WINDOWS\system32\userenv.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidclass.sys 2014-04-28 00:15 - 2014-04-28 00:15 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\system32\davclnt.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\system32\w32tm.exe 2014-04-28 00:15 - 2014-04-28 00:15 - 00069464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wfplwfs.sys 2014-04-28 00:15 - 2014-04-28 00:15 - 00069120 _____ (Microsoft Corporation) C:\WINDOWS\system32\RMapi.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 00068608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\IPMIDrv.sys 2014-04-28 00:15 - 2014-04-28 00:15 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\system32\l2gpstore.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsgqec.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\system32\drvcfg.exe 2014-04-28 00:15 - 2014-04-28 00:15 - 00038400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpipreg.sys 2014-04-28 00:15 - 2014-04-28 00:15 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\SetNetworkLocation.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Shell.Search.UriHandler.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\sxproxy.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredentialMigrationHandler.dll 2014-04-28 00:15 - 2014-04-28 00:15 - 00020992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidusb.sys 2014-04-28 00:15 - 2014-04-28 00:15 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanhlp.dll 2014-04-28 00:14 - 2014-04-28 00:14 - 00262144 _____ () C:\WINDOWS\system32\config\userdiff 2014-04-28 00:13 - 2014-04-28 00:13 - 00000000 ____D () C:\WINDOWS\system32\XPSViewer 2014-04-28 00:13 - 2014-04-28 00:13 - 00000000 ____D () C:\Program Files\Reference Assemblies 2014-04-28 00:13 - 2014-04-28 00:13 - 00000000 ____D () C:\Program Files\MSBuild 2014-04-28 00:09 - 2014-04-28 00:06 - 00000000 ____D () C:\Program Files\Spybot - Search & Destroy 2 2014-04-28 00:06 - 2014-04-28 00:06 - 00002149 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot-S&D Start Center.lnk 2014-04-28 00:06 - 2014-04-28 00:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2 2014-04-28 00:05 - 2014-04-28 00:05 - 40658208 _____ (Safer-Networking Ltd. ) C:\Users\[USRNAME]\Downloads\spybot-2.2.25.exe 2014-04-27 23:58 - 2014-04-27 23:58 - 00043152 _____ (AVAST Software) C:\WINDOWS\avastSS.scr 2014-04-27 23:58 - 2014-04-27 23:58 - 00024184 _____ () C:\WINDOWS\system32\Drivers\aswHwid.sys 2014-04-27 23:58 - 2014-01-16 21:55 - 00776976 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys 2014-04-27 23:58 - 2014-01-16 21:55 - 00411552 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys 2014-04-27 23:58 - 2014-01-16 21:55 - 00271264 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe 2014-04-27 23:58 - 2014-01-16 21:55 - 00180632 _____ () C:\WINDOWS\system32\Drivers\aswVmm.sys 2014-04-27 23:58 - 2014-01-16 21:55 - 00081768 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys 2014-04-27 23:58 - 2014-01-16 21:55 - 00067824 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys 2014-04-27 23:58 - 2014-01-16 21:55 - 00067776 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswstm.sys 2014-04-27 23:58 - 2014-01-16 21:55 - 00049944 _____ () C:\WINDOWS\system32\Drivers\aswRvrt.sys 2014-04-27 23:53 - 2013-08-22 10:17 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2014-04-27 23:53 - 2013-08-22 10:17 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2014-04-27 23:53 - 2013-08-22 10:17 - 00000000 ____D () C:\Program Files\Windows Defender 2014-04-27 23:52 - 2014-04-27 23:52 - 00000000 ___RD () C:\WINDOWS\BrowserChoice 2014-04-27 23:47 - 2014-04-27 23:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java 2014-04-27 23:47 - 2014-04-27 23:45 - 00004155 _____ () C:\WINDOWS\system32\jupdate-1.7.0_55-b14.log 2014-04-27 23:47 - 2014-01-17 23:15 - 00000000 ____D () C:\ProgramData\Oracle 2014-04-27 23:47 - 2014-01-17 23:15 - 00000000 ____D () C:\Program Files\Java 2014-04-27 23:44 - 2014-04-27 23:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Classic Shell 2014-04-27 23:44 - 2014-01-16 22:02 - 00000000 ____D () C:\ProgramData\ClassicShell 2014-04-27 23:44 - 2014-01-16 22:01 - 00000000 ____D () C:\Program Files\Classic Shell 2014-04-27 23:43 - 2014-04-27 23:43 - 06869696 _____ (IvoSoft) C:\Users\[USRNAME]\Downloads\ClassicShellSetup_4_1_0-de.exe 2014-04-27 23:43 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\restore 2014-04-27 23:37 - 2014-04-27 23:37 - 00000000 ____D () C:\Users\[USRNAME]\AppData\Local\NVIDIA 2014-04-27 23:37 - 2014-04-27 23:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation 2014-04-27 23:36 - 2014-04-28 00:16 - 00000000 ___DC () C:\WINDOWS\Panther 2014-04-27 23:36 - 2014-04-27 23:36 - 00001456 _____ () C:\Users\[USRNAME]\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2014-04-27 23:36 - 2014-04-27 23:36 - 00000020 ___SH () C:\Users\[USRNAME]\ntuser.ini 2014-04-27 23:34 - 2014-04-27 23:34 - 00000000 _SHDL () C:\Users\Default\Startmenü 2014-04-27 23:34 - 2014-04-27 23:34 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung 2014-04-27 23:34 - 2014-04-27 23:34 - 00000000 _SHDL () C:\Users\Default\Druckumgebung 2014-04-27 23:34 - 2014-04-27 23:34 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik 2014-04-27 23:34 - 2014-04-27 23:34 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder 2014-04-27 23:34 - 2014-04-27 23:34 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-04-27 23:34 - 2014-04-27 23:34 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf 2014-04-27 23:34 - 2014-04-27 23:34 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik 2014-04-27 23:34 - 2014-04-27 23:34 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder 2014-04-27 23:34 - 2014-04-27 23:34 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-04-27 23:34 - 2014-04-27 23:34 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf 2014-04-27 23:34 - 2014-04-27 23:34 - 00000000 _SHDL () C:\Programme 2014-04-27 23:34 - 2013-08-22 10:17 - 00000000 ____D () C:\Program Files\Windows NT 2014-04-27 23:34 - 2013-08-22 08:21 - 00000000 __RHD () C:\Users\Default 2014-04-27 23:33 - 2014-04-27 23:33 - 00021532 _____ () C:\WINDOWS\system32\emptyregdb.dat 2014-04-27 23:33 - 2014-04-27 23:24 - 00032388 _____ () C:\WINDOWS\diagwrn.xml 2014-04-27 23:33 - 2014-04-27 23:24 - 00032388 _____ () C:\WINDOWS\diagerr.xml 2014-04-27 23:33 - 2014-04-27 22:46 - 00006674 _____ () C:\WINDOWS\comsetup.log 2014-04-27 23:33 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\Registration 2014-04-27 23:32 - 2013-08-22 10:17 - 00000000 __RSD () C:\WINDOWS\Media 2014-04-27 23:31 - 2014-04-27 23:31 - 00000020 ___SH () C:\Users\UpdatusUser\ntuser.ini 2014-04-27 23:31 - 2013-08-22 10:17 - 00000000 __RHD () C:\Users\Public\Libraries 2014-04-27 23:31 - 2013-08-22 08:21 - 00000000 ___RD () C:\Users\Public 2014-04-27 23:28 - 2013-08-22 09:22 - 00474824 _____ () C:\WINDOWS\system32\FNTCACHE.DAT 2014-04-27 23:27 - 2014-04-27 23:27 - 00001515 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk 2014-04-27 23:27 - 2014-04-27 23:27 - 00000000 ____D () C:\Users\Default\AppData\Local\Microsoft Help 2014-04-27 23:27 - 2014-04-27 23:27 - 00000000 ____D () C:\Users\Default User\AppData\Local\Microsoft Help 2014-04-27 23:27 - 2014-04-27 21:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN 2014-04-27 23:27 - 2014-04-27 21:25 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Foxit Reader 2014-04-27 23:27 - 2014-03-22 23:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickPar 2014-04-27 23:27 - 2014-03-22 21:12 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ImgBurn 2014-04-27 23:27 - 2014-03-18 09:45 - 00000000 ____D () C:\WINDOWS\ShellNew 2014-04-27 23:27 - 2014-03-18 09:30 - 00000000 ____D () C:\WINDOWS\system32\WCN 2014-04-27 23:27 - 2014-03-05 21:18 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FlacSquisher 2014-04-27 23:27 - 2014-03-05 20:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mp3tag 2014-04-27 23:27 - 2014-03-05 20:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Exact Audio Copy 2014-04-27 23:27 - 2014-03-03 21:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013 2014-04-27 23:27 - 2014-02-18 23:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast 2014-04-27 23:27 - 2014-01-17 22:51 - 00000000 ____D () C:\Users\[USRNAME]\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Unlocker 2014-04-27 23:27 - 2014-01-17 19:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Speccy 2014-04-27 23:27 - 2014-01-16 23:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VLC Player 2014-04-27 23:27 - 2014-01-16 23:26 - 00000000 ____D () C:\Users\[USRNAME]\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\IrfanView 2014-04-27 23:27 - 2013-08-22 10:18 - 00004893 _____ () C:\WINDOWS\DtcInstall.log 2014-04-27 23:27 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\WinBioPlugIns 2014-04-27 23:27 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\spool 2014-04-27 23:27 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\NDF 2014-04-27 23:27 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\MUI 2014-04-27 23:27 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\IME 2014-04-27 23:27 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\de-DE 2014-04-27 23:27 - 2013-08-22 08:13 - 00008192 ___SH () C:\WINDOWS\system32\config\ELAM 2014-04-27 23:27 - 2012-07-26 06:43 - 00000000 ____D () C:\Users\Default.migrated 2014-04-27 23:26 - 2014-04-27 23:18 - 00000000 ____D () C:\Program Files\NVIDIA Corporation 2014-04-27 23:26 - 2014-03-22 23:32 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Glorylogic 2014-04-27 23:26 - 2014-03-22 21:25 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Codemasters 2014-04-27 23:26 - 2014-03-03 21:32 - 00000000 ____D () C:\WINDOWS\system32\appmgmt 2014-04-27 23:26 - 2014-01-16 21:50 - 00000000 ____D () C:\ProgramData\PRICache 2014-04-27 23:26 - 2013-08-22 10:17 - 00000000 __SHD () C:\Program Files\Windows Sidebar 2014-04-27 23:26 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\Help 2014-04-27 23:26 - 2013-08-22 10:17 - 00000000 ____D () C:\Program Files\Microsoft.NET 2014-04-27 23:26 - 2013-08-22 10:17 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared 2014-04-27 23:25 - 2014-04-27 23:25 - 00000000 ____D () C:\WINDOWS\system32\config\bbimigrate 2014-04-27 23:25 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\Recovery 2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\[USRNAME]\Startmenü 2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\[USRNAME]\Netzwerkumgebung 2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\[USRNAME]\Druckumgebung 2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\[USRNAME]\Documents\Eigene Musik 2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\[USRNAME]\Documents\Eigene Bilder 2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\[USRNAME]\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\[USRNAME]\AppData\Local\Verlauf 2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\UpdatusUser\Startmenü 2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\UpdatusUser\Netzwerkumgebung 2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\UpdatusUser\Druckumgebung 2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\UpdatusUser\Documents\Eigene Musik 2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\UpdatusUser\Documents\Eigene Bilder 2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\UpdatusUser\AppData\Local\Verlauf 2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 ___RD () C:\Users\[USRNAME]\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 ___RD () C:\Users\[USRNAME]\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 ___RD () C:\Users\[USRNAME]\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility 2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 ___RD () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 ___RD () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility 2014-04-27 23:21 - 2014-01-16 21:46 - 00000000 __SHD () C:\Recovery 2014-04-27 23:19 - 2014-04-27 23:18 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation 2014-04-27 23:18 - 2014-04-27 23:18 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf 2014-04-27 23:07 - 2014-01-16 21:50 - 02041337 _____ () C:\WINDOWS\WindowsUpdate (1).log 2014-04-27 22:51 - 2014-01-16 21:41 - 00008192 __RSH () C:\BOOTSECT.BAK 2014-04-27 22:34 - 2012-07-26 08:53 - 00000000 ____D () C:\WINDOWS\AUInstallAgent 2014-04-27 21:25 - 2014-04-27 21:25 - 00000000 ____D () C:\Program Files\Foxit Software 2014-04-27 21:24 - 2014-04-27 21:24 - 33488656 _____ (Foxit Corporation ) C:\Users\[USRNAME]\Downloads\FoxitReader614.0217_enu_Setup.exe 2014-04-27 21:24 - 2014-01-17 01:02 - 00000000 ____D () C:\Users\[USRNAME]\AppData\Roaming\Foxit Software 2014-04-23 02:24 - 2013-08-22 10:18 - 00693240 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerApp.exe 2014-04-23 02:24 - 2013-08-22 10:18 - 00105464 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerCPLApp.cpl 2014-04-20 10:17 - 2014-04-20 10:17 - 00244928 _____ (IvoSoft) C:\WINDOWS\system32\StartMenuHelper32.dll 2014-04-15 11:16 - 2014-01-16 21:58 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service 2014-04-14 20:13 - 2014-04-27 23:47 - 00094632 _____ (Oracle Corporation) C:\WINDOWS\system32\WindowsAccessBridge.dll 2014-04-14 20:07 - 2014-04-14 20:07 - 00000000 ____D () C:\Program Files\Mozilla Firefox 2014-04-14 20:05 - 2014-04-27 23:47 - 00264616 _____ (Oracle Corporation) C:\WINDOWS\system32\javaws.exe 2014-04-14 20:05 - 2014-04-27 23:47 - 00175528 _____ (Oracle Corporation) C:\WINDOWS\system32\javaw.exe 2014-04-14 20:04 - 2014-04-27 23:47 - 00175016 _____ (Oracle Corporation) C:\WINDOWS\system32\java.exe 2014-04-14 09:14 - 2014-01-16 23:32 - 00000000 ____D () C:\ProgramData\Microsoft Help 2014-04-14 09:11 - 2014-01-16 22:28 - 00000000 ____D () C:\WINDOWS\system32\MRT 2014-04-14 09:10 - 2014-01-16 22:28 - 88028728 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe 2014-04-03 09:51 - 2014-04-28 20:11 - 00073432 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamchameleon.sys 2014-04-03 09:51 - 2014-04-28 20:11 - 00051416 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys 2014-04-03 09:50 - 2014-04-28 20:11 - 00023256 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys Some content of TEMP: ==================== C:\Users\[USRNAME]\AppData\Local\Temp\Foxit Reader Updater.exe C:\Users\[USRNAME]\AppData\Local\Temp\jre-7u55-windows-i586-iftw.exe C:\Users\[USRNAME]\AppData\Local\Temp\Quarantine.exe ==================== Bamital & volsnap Check ================= C:\WINDOWS\explorer.exe [2014-04-28 00:15] - [2014-04-28 00:15] - 2088160 ____A (Microsoft Corporation) 119E091B5386379BC5AA598BE9440C75 C:\WINDOWS\system32\winlogon.exe [2014-03-18 10:08] - [2014-03-18 10:08] - 0459264 ____A (Microsoft Corporation) 70C57DC69D4A7D92D2CAC90C3AD16E6F C:\WINDOWS\system32\wininit.exe => MD5 is legit C:\WINDOWS\system32\svchost.exe => MD5 is legit C:\WINDOWS\system32\services.exe => MD5 is legit C:\WINDOWS\system32\User32.dll [2014-03-18 10:08] - [2014-03-18 10:08] - 1370696 ____A (Microsoft Corporation) 43B0EB86B10506AD564E2005A6156D30 C:\WINDOWS\system32\userinit.exe => MD5 is legit C:\WINDOWS\system32\rpcss.dll [2014-03-18 10:08] - [2014-03-18 10:08] - 0593408 ____A (Microsoft Corporation) 05C0337538BEECC04FC695808EFF201C ATTENTION ======> If the system is having audio adware rpcss.dll is patched. Google the MD5, if the MD5 is unique the file is infected. C:\WINDOWS\system32\Drivers\volsnap.sys [2014-03-18 10:08] - [2014-03-18 10:08] - 0265048 ____A (Microsoft Corporation) 085918BF459BCB835CFC535BE7138539 LastRegBack: 2014-04-27 23:17 ==================== End Of Log ============================ --- --- --- Ich würde Dir auch gerne noch ein paar kurze Fragen zu den verschiedenen Scans/Funden stellen: 1. Die Attention Warnung am Ende von FRST ist nie weg gegangen. Ist die unbedenklich? 2. Meine externe Festplatte, auf der von ESET 1ClickDownload gefunden wurde, ist im Wesentlichen das Backup meines Fileservers (DS209 NAS). Dort sind alle Arbeitsdokumente, Fotos, etc. ausgelagert. Ich nutze meine Rechner fast nur als "Terminal." Ich habe auf meinen Rechnern zwei Netzlaufwerk permanent eingebunden. Wurden die von ESET (oder den anderen Scannern vorher) mitgescannt? Muss ich die nicht eingebundenen NAS Laufwerke separat scannen? Frage einfach desegen, weil ich sicherstellen moechte, dass ich mir nicht ueber das NAS irgendwelche Probleme wieder zurückhole... 3. Ich habe zu Agent-CYP keine vernuenftigen Infos im Netz gefunden, nur, dass das Ding anscheinend wieder relativ alt ist, aber auch, dass es sich um einen Backdoor Virus handelt. Ich habe entsprechend Bedenken, dass ich mir einen Keylogger gefangen habe. Alle Passwörter ändern macht wahrscheinlich Sinn. Aber kann ich jetzt davon ausgehen keinen Keylogger (mehr) auf dem System zu haben? 4. Nach den Beschreibungen vermute(!) ich, dass die anderen Funde zwar lästig, aber sicherheitstechnisch nicht sooo relevant waren. Ist das richtig oder siehst Du das anders? Zu Deiner Frage: Probleme hatte ich mit dem Rechner eigentlich nicht. Zumindest ist mir nichts aufgefallen. War ein altes Vista System, das ich vor ca. 1 Jahr per Win 8 Upgrade Offer aktualisiert habe, und nun kuerzlich auf 8.1. Teilweise sind die Funde ja auch im "alten" System (windows.old), was die Sache aber natuerlich auch nicht besser macht... Junge, Junge, ich dachte eigentlich, dass ich schon viele Jahre relativ umsichtig agiere. Man lernt immer noch dazu... Erneut allerbesten Dank fuer Deine Hilfe und beste Gruesse, M4tt0 |
|
01.05.2014, 06:18
| #6 | ||||
| /// the machine /// TB-Ausbilder | Win 8.1: Avast meldet Iframe-inf, JS: Agent-CYP und Somoto-JZitat:
Zitat:
Zitat:
Zitat:
Windows-old Ordner würde ich komplett entsorgen, wenn Du evtl vorhandene private Daten darin gesichert hast. Das bringt SPeicherplatz. Fertig Die Reihenfolge ist hier entscheidend.
Falls Du Lob oder Kritik abgeben möchtest kannst Du das hier tun Hier noch ein paar Tipps zur Absicherung deines Systems. Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.
Anti- Viren Software
Zusätzlicher Schutz
Sicheres Browsen
Alternative Browser Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.
Performance Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC Halte dich fern von jedlichen Registry Cleanern. Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links Miekemoes Blogspot ( MVP ) Bill Castner ( MVP ) Don'ts
Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.
__________________ --> Win 8.1: Avast meldet Iframe-inf, JS: Agent-CYP und Somoto-J |
|
04.05.2014, 16:49
| #7 |
| | Win 8.1: Avast meldet Iframe-inf, JS: Agent-CYP und Somoto-J Hallo schrauber, Sorry fuer die spaete Antwort, war eine Weile off-line. Erst nochmal Danke. Ich habe beide Systeme entsprechend Deiner Tipps gesichert und die Kisten laufen absolut rund. Da ich nun MBAM nutze, habe ich Spybot deinstalliert. Hoffe das macht Sinn. Der Scan des NAS hat eine Weile gedauert. Ich habe das Synology Antivirus Essential Paket installiert und das NAS damit scannen lassen. Scheint eine Implementierung von ClamAV zu sein (vielleicht sagt Dir das was, mir nicht). Hier der Log-File Code:
ATTFilter ID Category Module Event Date
1 info scanner Report: 147147 file(s) are scanned, 0 infected file(s) found. All infected files are handled. 2014-05-04 07:08:12
2 info scanner Full Scan Completed 2014-05-04 07:08:11
3 info scanner Full Scan Started 2014-05-02 22:35:24
4 info updater Already Up to Date 2014-05-02 22:35:24
5 info updater Update Started 2014-05-02 22:33:41
6 info scanner Report: 147147 file(s) are scanned, 2 infected file(s) found. All infected files are handled. 2014-05-02 22:31:37
7 info scanner Full Scan Completed 2014-05-02 22:31:37
8 info scanner /volume1/homes/[USRNAME]/[USRNAME]/09_Install/Multimedia/[SOME PROGRAM]/[PROG].exe is moved to Quarantine. 2014-05-02 00:37:29
9 detected scanner /volume1/homes/[USRNAME]/[USRNAME]/09_Install/Multimedia/[SOME PROGRAM]/[PROG].exe : Win.Trojan.Tufik-69 FOUND
2014-05-02 00:37:28
10 info scanner /volume1/homes/[USRNAME]/[USRNAME]/20_Security/Gigabyte PC Trojaner Check/08_Security Check/SecurityCheck.exe is moved to Quarantine. 2014-05-01 20:42:21
11 detected scanner /volume1/homes/[USRNAME]/[USRNAME]/20_Security/Gigabyte PC Trojaner Check/08_Security Check/SecurityCheck.exe : Win.Trojan.Injector-11513 FOUND
2014-05-01 20:42:20
12 info scanner Full Scan Started 2014-05-01 11:17:22
13 info updater Already Up to Date 2014-05-01 11:17:22
14 info updater Update Started 2014-05-01 11:17:04
15 info scanner Report: 0 file(s) are scanned, 0 infected file(s) found. All infected files are handled. 2014-05-01 11:16:50
16 info scanner Task Terminated 2014-05-01 11:16:50
17 info scanner Full Scan Started 2014-05-01 11:15:52
18 info updater Already Up to Date 2014-05-01 11:15:51
19 info updater Update Started 2014-05-01 11:15:30
20 info updater Update Completed 2014-05-01 11:15:06
21 info updater Update Started 2014-05-01 11:04:48
22 info scanner Task Terminated 2012-10-06 23:16:27
23 info scanner Full Scan Started 2012-10-06 01:00:56
24 info updater Update Completed 2012-10-06 01:00:56
25 info updater Update Started 2012-10-06 01:00:02
26 info updater Antivirus Essential installation complete 2012-10-05 23:25:03
Beide Files wurden in Quarantäne geschoben. Ich werde die gleichen Files nun noch vom Backup loeschen. Wenn das so reicht, glaube ich war's das. OK aus Deiner Sicht, oder soll ich anders verfahren? Mit besten Grüßen, M4tt0 |
|
05.05.2014, 11:58
| #8 |
| /// the machine /// TB-Ausbilder | Win 8.1: Avast meldet Iframe-inf, JS: Agent-CYP und Somoto-J Nö, passt
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
| Themen zu Win 8.1: Avast meldet Iframe-inf, JS: Agent-CYP und Somoto-J |
| 4d36e972-e325-11ce-bfc1-08002be10318, adware, agent-cyp, antivirus, browser, canon, desktop, excel, flash player, homepage, iframe-inf, installation, lightning, monitor, mp3, msiexec.exe, onedrive, outlook 2013, prima, pup.optional.opencandy, realtek, refresh, rundll, safer networking, scan, security, services.exe, software, somoto-j, starten, svchost.exe, win32/adware.1clickdownload.am, windows.old |
Linear-Darstellung
