Zurück   Trojaner-Board > Malware entfernen > Log-Analyse und Auswertung
Windows 8.1: Bei zugeklapptem Bildschirm öffnen sich wahllos Dateien vom Desktop

Windows 8.1: Bei zugeklapptem Bildschirm öffnen sich wahllos Dateien vom Desktop


Log-Analyse und Auswertung: Windows 8.1: Bei zugeklapptem Bildschirm öffnen sich wahllos Dateien vom Desktop

Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML.

Antwort
Alt 14.05.2014, 18:23   #1
Klattsche
 
Windows 8.1: Bei zugeklapptem Bildschirm öffnen sich wahllos Dateien vom Desktop - Standard

Windows 8.1: Bei zugeklapptem Bildschirm öffnen sich wahllos Dateien vom Desktop


Hallo zusammen,

erstmal finde ich es wirklich großartig dass Ihr Eure Freizeit opfert um Leuten bei ihren Computerproblemen zu helfen, das findet man heute nicht mehr oft!
Ich hab seit ca. 3 Wochen ein neues Notebook und im Grunde auch bis dato kaum etwas darauf installiert, bis auf Programme die bereits jahrelang auf dem Altgerät problemlos liefen ohne jeweils einen "Befall" gehabt zu haben.
Nun ist mir aber aufgefallen, dass in zugeklapptem Zustand sich wahllos Verknüpfungen auf dem Desktop öffnen, seien es nun Programme oder aber auch der Explorer. Da ich mir dieses Verhalten nicht erklären kann, befürchte ich nun mir etwas eingefangen zu haben, auch wenn weder Antivir von MBAM einen Befall feststellen konnten.

Daher bitte ich euch einmal die log Dateien durch zu sehen, ob sich nicht doch irgendwo etwas versteckt hat.
Vielleicht fällt euch ja auch abseits der Software noch eine Möglichkeit ein, die dafür sorgt, dass z.B. das Touchpad im geschlossenen Zustand ein Eigenleben entwickelt oder Ähnliches.

So oder so sage ich aber schonmal VIELEN DANK für Eure Unterstützung

PS: Leider haben sich die Logs als zu umfangreich herausgestellt, daher als zip angehängt.

Alt 14.05.2014, 18:56   #2
schrauber
/// the machine
/// TB-Ausbilder
 
Windows 8.1: Bei zugeklapptem Bildschirm öffnen sich wahllos Dateien vom Desktop - Standard

Windows 8.1: Bei zugeklapptem Bildschirm öffnen sich wahllos Dateien vom Desktop


Hi,

Logs bitte immer in den Thread posten. Zur Not aufteilen und mehrere Posts nutzen.
Ich kann auf Arbeit keine Anhänge öffnen, danke.

So funktioniert es:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert mir massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu gross für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
  • Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
  • Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
  • Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
  • Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.
__________________

__________________
Alt 14.05.2014, 19:39   #3
Klattsche
 
Windows 8.1: Bei zugeklapptem Bildschirm öffnen sich wahllos Dateien vom Desktop - Standard

Windows 8.1: Bei zugeklapptem Bildschirm öffnen sich wahllos Dateien vom Desktop


Hallo Schrauber,

sry hatte das "zu groß" darauf bezogen, dass es nicht in einen Post passt. Aber logisch, ich packe die Logs gerne eben in mehrere Posts, hätte man definitiv auch selbst drauf kommen können ^^
Hier erstmal die, die Ihr standardmäßig erbittet:

Defrogger
Code:
ATTFilter
defogger_disable by jpshortstuff (23.02.10.1)
Log created at 18:21 on 14/05/2014 (****** Admin)

Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.

Checking for services/drivers...


-=E.O.F=-
FRST
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 14-05-2014
Ran by Internet (ATTENTION: The logged in user is not administrator) on LAPTOP******* on 14-05-2014 18:22:50
Running from C:\Users\Internet\Desktop
Platform: Windows 8.1 (Update 1) (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal


==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDIntelligent.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Realtek semiconductor) C:\Windows\RTFTrack.exe
() C:\Windows\SysWOW64\UMonit64.exe
(Lenovo) C:\Program Files\Lenovo\Onekey Theater\OnekeyStudio.exe
(Lenovo (Beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe
(Lenovo(beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Management\utility.exe
(Seagate) C:\Program Files (x86)\Common Files\Seagate\Schedule2\schedhlp.exe
(Seagate) Z:\Programme\Seagate DiskWizard\DiscWizard\DiscWizardMonitor.exe
(Avira Operations GmbH & Co. KG) Z:\Programme\Avira\AntiVir Desktop\avgnt.exe
() Z:\Programme\Drakonia Configurator\hid.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Dominik Reichl) Z:\Programme\KeePass Password Safe 2\KeePass.exe
(Mozilla Corporation) Z:\Programme\Mozilla Firefox\firefox.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [ETDCtrl] => C:\Program Files\Elantech\ETDCtrl.exe [2891592 2013-05-17] (ELAN Microelectronics Corp.)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13545032 2013-05-28] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1308232 2013-05-20] (Realtek Semiconductor)
HKLM\...\Run: [RtsFT] => C:\WINDOWS\RTFTrack.exe [6340312 2013-07-19] (Realtek semiconductor)
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [286704 2013-04-30] (Intel Corporation)
HKLM\...\Run: [BTMTrayAgent] => C:\Program Files (x86)\Intel\Bluetooth\btmshellex.dll [7830328 2013-05-21] (Motorola Solutions, Inc.)
HKLM\...\Run: [UMonit64] => C:\WINDOWS\SysWOW64\UMonit64.exe [40960 2013-04-09] ()
HKLM\...\Run: [OnekeyStudio] => C:\Program Files\Lenovo\Onekey Theater\OnekeyStudio.exe [4196432 2012-09-14] (Lenovo)
HKLM\...\Run: [Energy Management] => C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe [17097200 2013-12-01] (Lenovo (Beijing) Limited)
HKLM\...\Run: [EnergyUtility] => C:\Program Files (x86)\Lenovo\Energy Management\Utility.exe [193008 2013-12-01] (Lenovo(beijing) Limited)
HKLM\...\Run: [Seagate Scheduler2 Service] => C:\Program Files (x86)\Common Files\Seagate\Schedule2\schedhlp.exe [400920 2013-10-30] (Seagate)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2199840 2014-04-30] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\WINDOWS\system32\nvspcap64.dll [1225920 2014-04-30] (NVIDIA Corporation)
HKLM-x32\...\Run: [YouCam Tray] => C:\Program Files (x86)\Lenovo\YouCam\YouCamTray.exe [168464 2012-10-30] (CyberLink Corp.)
HKLM-x32\...\Run: [UpdateP2GShortCut] => C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe [217088 2012-04-18] (CyberLink Corp.)
HKLM-x32\...\Run: [RemoteControl10] => C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe [95192 2013-03-08] (CyberLink Corp.)
HKLM-x32\...\Run: [mcui_exe] => "C:\Program Files\McAfee.com\Agent\mcagent.exe" /runkey
HKLM-x32\...\Run: [DiscWizardMonitor.exe] => Z:\Programme\Seagate DiskWizard\DiscWizard\DiscWizardMonitor.exe [6421848 2013-10-30] (Seagate)
HKLM-x32\...\Run: [AcronisTibMounterMonitor] => C:\Program Files (x86)\Common Files\Acronis\TibMounter\TibMounterMonitor.exe [1105848 2013-01-10] (Acronis)
HKLM-x32\...\Run: [KeePass 2 PreLoad] => Z:\Programme\KeePass Password Safe 2\KeePass.exe [2099200 2014-04-13] (Dominik Reichl)
HKLM-x32\...\Run: [avgnt] => Z:\Programme\Avira\AntiVir Desktop\avgnt.exe [689744 2014-02-25] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [BCSSync] => Z:\Programme\Office 2010\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation)
HKLM-x32\...\Run: [GamingMouse] => Z:\Programme\Drakonia Configurator\hid.exe [248832 2013-10-29] ()
HKLM\...\RunOnce: [BrowserChoice] - C:\WINDOWS\BrowserChoice\browserchoice.exe [86816 2013-08-22] (Microsoft Corporation)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://lenovo13.msn.com/?pc=LCJB
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://lenovo13.msn.com/?pc=LCJB
HKCU\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.lenovo.com
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://www.lenovo.com
SearchScopes: HKLM - DefaultScope {9E653D28-0B9E-44B0-8A81-65B70D385763} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=LCJB
SearchScopes: HKLM - {9E653D28-0B9E-44B0-8A81-65B70D385763} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=LCJB
SearchScopes: HKLM-x32 - DefaultScope {9E653D28-0B9E-44B0-8A81-65B70D385763} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=LCJB
SearchScopes: HKLM-x32 - {9E653D28-0B9E-44B0-8A81-65B70D385763} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=LCJB
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - Z:\Programme\Office 2010\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - Z:\Programme\Office 2010\Office14\URLREDIR.DLL (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\Internet\AppData\Roaming\Mozilla\Firefox\Profiles\d68fyipr.default
FF DefaultSearchEngine: Qwant.com
FF SelectedSearchEngine: Qwant.com
FF Homepage: hxxp://www.gmx.net/#
FF Plugin: @adobe.com/FlashPlayer - C:\WINDOWS\system32\Macromed\Flash\NPSWF64_13_0_0_214.dll ()
FF Plugin: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - Z:\Programme\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin: @tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - Z:\Programme\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll ()
FF Plugin-x32: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - Z:\Programme\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 - C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)
FF Plugin-x32: @esn/npbattlelog,version=2.3.2 - C:\Program Files (x86)\Battlelog Web Plugins\2.3.2\npbattlelog.dll (EA Digital Illusions CE AB)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=3.5.29 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - Z:\Programme\Office 2010\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - Z:\Programme\Office 2010\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @nullsoft.com/winampDetector;version=1 - Z:\Programme\Winamp Detect\npwachk.dll (Nullsoft, Inc.)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - Z:\Programme\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF SearchPlugin: C:\Users\Internet\AppData\Roaming\Mozilla\Firefox\Profiles\d68fyipr.default\searchplugins\qwantcom.xml
FF Extension: Flashblock - C:\Users\Internet\AppData\Roaming\Mozilla\Firefox\Profiles\d68fyipr.default\Extensions\{3d7eb24f-2740-49df-8937-200b1cc08f8a} [2014-05-04]
FF Extension: WOT - C:\Users\Internet\AppData\Roaming\Mozilla\Firefox\Profiles\d68fyipr.default\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} [2014-05-04]
FF Extension: Ghostery - C:\Users\Internet\AppData\Roaming\Mozilla\Firefox\Profiles\d68fyipr.default\Extensions\firefox@ghostery.com.xpi [2014-05-04]
FF Extension: Adblock Plus - C:\Users\Internet\AppData\Roaming\Mozilla\Firefox\Profiles\d68fyipr.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-05-04]
FF StartMenuInternet: FIREFOX.EXE - Z:\Programme\Mozilla Firefox\firefox.exe

==================== Services (Whitelisted) =================

R2 AntiVirSchedulerService; Z:\Programme\Avira\AntiVir Desktop\sched.exe [440400 2014-02-25] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; Z:\Programme\Avira\AntiVir Desktop\avguard.exe [440400 2014-02-25] (Avira Operations GmbH & Co. KG)
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15344 2013-04-30] (Intel Corporation)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [820184 2013-02-13] (Intel(R) Corporation)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [131544 2013-05-15] (Intel Corporation)
R2 Intel(R) Wireless Bluetooth(R) 4.0 Radio Management; C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe [155448 2013-08-19] (Intel Corporation)
S3 iumsvc; C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [174368 2014-02-28] ()
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-05-15] (Intel Corporation)
R2 lmhosts; C:\Windows\system32\svchost.exe [37768 2013-08-22] (Microsoft Corporation)
S3 Microsoft SharePoint Workspace Audit Service; Z:\Programme\Office 2010\Office14\GROOVE.EXE [30814400 2013-12-19] (Microsoft Corporation)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [273136 2013-08-28] ()
R2 NlaSvc; C:\Windows\System32\svchost.exe [37768 2013-08-22] (Microsoft Corporation)
R2 nsi; C:\Windows\system32\svchost.exe [37768 2013-08-22] (Microsoft Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1617696 2014-04-30] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [21007192 2014-04-30] (NVIDIA Corporation)
R2 PnkBstrA; C:\WINDOWS\SysWOW64\PnkBstrA.exe [76888 2014-05-12] ()
R2 StarMoney 9.0 OnlineUpdate; Z:\Programme\StarMoney 9.0 S-Edition\ouservice\StarMoneyOnlineUpdate.exe [663184 2014-01-27] (Star Finanz-Software Entwicklung und Vertriebs GmbH)
R2 VeriFaceSrv; C:\Program Files (x86)\Lenovo\Lenovo VeriFace\VfConnectorService.exe [68368 2013-12-01] ()
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [348392 2013-10-31] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2013-10-31] (Microsoft Corporation)
R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3378416 2013-08-28] (Intel® Corporation)

==================== Drivers (Whitelisted) ====================

S0 ADP80XX; C:\Windows\System32\drivers\ADP80XX.SYS [782176 2013-08-22] (PMC-Sierra)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2014-02-25] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [131576 2014-02-25] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [28600 2014-02-25] (Avira Operations GmbH & Co. KG)
S3 bcmfn2; C:\Windows\System32\drivers\bcmfn2.sys [17624 2013-08-13] (Windows (R) Win 7 DDK provider)
R3 ETDSMBus; C:\Windows\system32\DRIVERS\ETDSMBus.sys [22280 2013-05-16] (ELAN Microelectronic Corp.)
S3 iaLPSSi_GPIO; C:\Windows\System32\drivers\iaLPSSi_GPIO.sys [24568 2013-07-30] (Intel Corporation)
S3 iaLPSSi_I2C; C:\Windows\System32\drivers\iaLPSSi_I2C.sys [99320 2013-07-25] (Intel Corporation)
S0 iaStorAV; C:\Windows\System32\drivers\iaStorAV.sys [651248 2013-08-10] (Intel Corporation)
R0 intelpep; C:\Windows\System32\drivers\intelpep.sys [39768 2014-03-18] (Microsoft Corporation)
S0 LSI_SAS3; C:\Windows\System32\drivers\lsi_sas3.sys [81760 2013-08-22] (LSI Corporation)
R3 NdisVirtualBus; C:\Windows\System32\drivers\NdisVirtualBus.sys [16384 2013-08-22] (Microsoft Corporation)
S3 netvsc; C:\Windows\system32\DRIVERS\netvsc63.sys [87040 2013-08-22] (Microsoft Corporation)
R3 NETwNe64; C:\Windows\system32\DRIVERS\NETwew00.sys [3345376 2013-08-22] (Intel Corporation)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [18776 2014-04-30] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [40392 2014-03-31] (NVIDIA Corporation)
S3 ReFS; C:\Windows\System32\Drivers\ReFS.sys [924504 2014-03-18] (Microsoft Corporation)
R3 rtsuvc; C:\Windows\system32\DRIVERS\rtsuvc.sys [8247640 2013-07-19] (Realtek Semiconductor Corp.)
S3 SerCx2; C:\Windows\System32\drivers\SerCx2.sys [146776 2014-03-18] (Microsoft Corporation)
S0 stornvme; C:\Windows\System32\drivers\stornvme.sys [57176 2014-03-18] (Microsoft Corporation)
R0 tib; C:\Windows\System32\DRIVERS\tib.sys [1120032 2014-05-03] (Acronis International GmbH)
S0 tib_mounter; C:\Windows\System32\DRIVERS\tib_mounter.sys [183224 2014-05-03] (Acronis)
S3 UEFI; C:\Windows\System32\drivers\UEFI.sys [26976 2013-08-22] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [124760 2013-10-31] (Microsoft Corporation)
R0 Wof; C:\Windows\System32\Drivers\Wof.sys [157016 2014-05-04] (Microsoft Corporation)
S3 wsvd; C:\Windows\system32\DRIVERS\wsvd.sys [102376 2012-06-13] ("CyberLink)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-05-14 18:22 - 2014-05-14 18:23 - 00015783 _____ () C:\Users\Internet\Desktop\FRST.txt
2014-05-14 18:22 - 2014-05-14 18:22 - 00000000 ____D () C:\FRST
2014-05-14 18:21 - 2014-05-14 18:21 - 02066944 _____ (Farbar) C:\Users\Internet\Desktop\FRST64.exe
2014-05-14 18:21 - 2014-05-14 18:21 - 00000490 _____ () C:\Users\Internet\Desktop\defogger_disable.log
2014-05-14 18:19 - 2014-05-14 18:19 - 00050477 _____ () C:\Users\Internet\Desktop\Defogger.exe
2014-05-14 17:41 - 2013-09-25 22:36 - 00015648 _____ () C:\WINDOWS\system32\Drivers\nvflash.sys
2014-05-12 22:54 - 2014-05-12 22:54 - 00000000 ____D () C:\Users\Internet\AppData\Local\PunkBuster
2014-05-12 22:51 - 2014-05-12 23:23 - 00000000 ____D () C:\Users\Internet\Documents\Battlefield 4
2014-05-12 22:50 - 2014-05-12 22:50 - 00000000 ____D () C:\Users\Internet\AppData\Local\ESN
2014-05-12 22:41 - 2014-05-13 20:02 - 00214392 _____ () C:\WINDOWS\SysWOW64\PnkBstrB.exe
2014-05-12 22:41 - 2014-05-12 23:37 - 00214392 _____ () C:\WINDOWS\SysWOW64\PnkBstrB.ex0
2014-05-12 22:41 - 2014-05-12 22:50 - 00000000 ____D () C:\Program Files (x86)\Battlelog Web Plugins
2014-05-12 22:41 - 2014-05-12 22:41 - 00076888 _____ () C:\WINDOWS\SysWOW64\PnkBstrA.exe
2014-05-12 22:41 - 2014-05-12 22:41 - 00010123 _____ () C:\WINDOWS\DirectX.log
2014-05-12 22:41 - 2014-05-12 22:41 - 00000687 _____ () C:\Users\Public\Desktop\Battlefield 4(64 bit).lnk
2014-05-12 22:41 - 2014-05-12 22:41 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battlefield 4
2014-05-12 22:41 - 2010-06-02 04:55 - 00527192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_7.dll
2014-05-12 22:41 - 2010-06-02 04:55 - 00518488 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_7.dll
2014-05-12 22:41 - 2010-06-02 04:55 - 00239960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_7.dll
2014-05-12 22:41 - 2010-06-02 04:55 - 00176984 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_7.dll
2014-05-12 22:41 - 2010-06-02 04:55 - 00077656 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_5.dll
2014-05-12 22:41 - 2010-06-02 04:55 - 00074072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_5.dll
2014-05-12 22:41 - 2010-05-26 11:41 - 02526056 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_43.dll
2014-05-12 22:41 - 2010-05-26 11:41 - 02106216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_43.dll
2014-05-12 22:41 - 2010-05-26 11:41 - 01907552 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dcsx_43.dll
2014-05-12 22:41 - 2010-05-26 11:41 - 01868128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dcsx_43.dll
2014-05-12 22:41 - 2010-02-04 10:01 - 00530776 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_6.dll
2014-05-12 22:41 - 2010-02-04 10:01 - 00528216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_6.dll
2014-05-12 22:41 - 2010-02-04 10:01 - 00238936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_6.dll
2014-05-12 22:41 - 2010-02-04 10:01 - 00176984 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_6.dll
2014-05-12 22:41 - 2010-02-04 10:01 - 00078680 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_4.dll
2014-05-12 22:41 - 2010-02-04 10:01 - 00074072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_4.dll
2014-05-12 22:41 - 2010-02-04 10:01 - 00024920 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_7.dll
2014-05-12 22:41 - 2010-02-04 10:01 - 00022360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_7.dll
2014-05-12 22:41 - 2009-09-04 17:44 - 00517960 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_5.dll
2014-05-12 22:41 - 2009-09-04 17:44 - 00515416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_5.dll
2014-05-12 22:41 - 2009-09-04 17:44 - 00238936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_5.dll
2014-05-12 22:41 - 2009-09-04 17:44 - 00176968 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_5.dll
2014-05-12 22:41 - 2009-09-04 17:44 - 00073544 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_3.dll
2014-05-12 22:41 - 2009-09-04 17:44 - 00069464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_3.dll
2014-05-12 22:41 - 2009-09-04 17:29 - 05554512 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dcsx_42.dll
2014-05-12 22:41 - 2009-09-04 17:29 - 05501792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dcsx_42.dll
2014-05-12 22:41 - 2009-09-04 17:29 - 02582888 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_42.dll
2014-05-12 22:41 - 2009-09-04 17:29 - 02475352 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_42.dll
2014-05-12 22:41 - 2009-09-04 17:29 - 01974616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_42.dll
2014-05-12 22:41 - 2009-09-04 17:29 - 00523088 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_42.dll
2014-05-12 22:41 - 2009-09-04 17:29 - 00453456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_42.dll
2014-05-12 22:41 - 2009-09-04 17:29 - 00285024 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx11_42.dll
2014-05-12 22:41 - 2009-09-04 17:29 - 00235344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx11_42.dll
2014-05-12 22:41 - 2009-03-16 14:18 - 00521560 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_4.dll
2014-05-12 22:41 - 2009-03-16 14:18 - 00517448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_4.dll
2014-05-12 22:41 - 2009-03-16 14:18 - 00235352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_4.dll
2014-05-12 22:41 - 2009-03-16 14:18 - 00174936 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_4.dll
2014-05-12 22:41 - 2009-03-16 14:18 - 00024920 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_6.dll
2014-05-12 22:41 - 2009-03-16 14:18 - 00022360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_6.dll
2014-05-12 22:41 - 2009-03-09 15:27 - 05425496 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_41.dll
2014-05-12 22:41 - 2009-03-09 15:27 - 04178264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_41.dll
2014-05-12 22:41 - 2009-03-09 15:27 - 02430312 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_41.dll
2014-05-12 22:41 - 2009-03-09 15:27 - 01846632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_41.dll
2014-05-12 22:41 - 2009-03-09 15:27 - 00520544 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_41.dll
2014-05-12 22:41 - 2009-03-09 15:27 - 00453456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_41.dll
2014-05-12 22:41 - 2008-10-27 10:04 - 00518480 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_3.dll
2014-05-12 22:41 - 2008-10-27 10:04 - 00514384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_3.dll
2014-05-12 22:41 - 2008-10-27 10:04 - 00235856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_3.dll
2014-05-12 22:41 - 2008-10-27 10:04 - 00175440 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_3.dll
2014-05-12 22:41 - 2008-10-27 10:04 - 00074576 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_2.dll
2014-05-12 22:41 - 2008-10-27 10:04 - 00070992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_2.dll
2014-05-12 22:41 - 2008-10-27 10:04 - 00025936 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_5.dll
2014-05-12 22:41 - 2008-10-27 10:04 - 00023376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_5.dll
2014-05-12 22:41 - 2008-10-15 06:22 - 05631312 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_40.dll
2014-05-12 22:41 - 2008-10-15 06:22 - 04379984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_40.dll
2014-05-12 22:41 - 2008-10-15 06:22 - 02605920 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_40.dll
2014-05-12 22:41 - 2008-10-15 06:22 - 02036576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_40.dll
2014-05-12 22:41 - 2008-10-15 06:22 - 00519000 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_40.dll
2014-05-12 22:41 - 2008-10-15 06:22 - 00452440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_40.dll
2014-05-12 22:41 - 2008-07-31 10:41 - 00238088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_2.dll
2014-05-12 22:41 - 2008-07-31 10:41 - 00177672 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_2.dll
2014-05-12 22:41 - 2008-07-31 10:41 - 00072200 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_1.dll
2014-05-12 22:41 - 2008-07-31 10:41 - 00068616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_1.dll
2014-05-12 22:41 - 2008-07-31 10:40 - 00513544 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_2.dll
2014-05-12 22:41 - 2008-07-31 10:40 - 00509448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_2.dll
2014-05-12 22:41 - 2008-07-10 11:01 - 00467984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_39.dll
2014-05-12 22:41 - 2008-07-10 11:00 - 04992520 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_39.dll
2014-05-12 22:41 - 2008-07-10 11:00 - 03851784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_39.dll
2014-05-12 22:41 - 2008-07-10 11:00 - 01942552 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_39.dll
2014-05-12 22:41 - 2008-07-10 11:00 - 01493528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_39.dll
2014-05-12 22:41 - 2008-07-10 11:00 - 00540688 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_39.dll
2014-05-12 22:41 - 2008-05-30 14:19 - 00511496 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_1.dll
2014-05-12 22:41 - 2008-05-30 14:19 - 00507400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_1.dll
2014-05-12 22:41 - 2008-05-30 14:18 - 00238088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_1.dll
2014-05-12 22:41 - 2008-05-30 14:18 - 00177672 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_1.dll
2014-05-12 22:41 - 2008-05-30 14:17 - 00068104 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_0.dll
2014-05-12 22:41 - 2008-05-30 14:17 - 00065032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_0.dll
2014-05-12 22:41 - 2008-05-30 14:17 - 00025608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_4.dll
2014-05-12 22:41 - 2008-05-30 14:16 - 00028168 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_4.dll
2014-05-12 22:41 - 2008-05-30 14:11 - 04991496 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_38.dll
2014-05-12 22:41 - 2008-05-30 14:11 - 03850760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_38.dll
2014-05-12 22:41 - 2008-05-30 14:11 - 01941528 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_38.dll
2014-05-12 22:41 - 2008-05-30 14:11 - 01491992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_38.dll
2014-05-12 22:41 - 2008-05-30 14:11 - 00540688 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_38.dll
2014-05-12 22:41 - 2008-05-30 14:11 - 00467984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_38.dll
2014-05-12 22:41 - 2008-03-05 16:04 - 00489480 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_0.dll
2014-05-12 22:41 - 2008-03-05 16:03 - 00479752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_0.dll
2014-05-12 22:41 - 2008-03-05 16:03 - 00238088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_0.dll
2014-05-12 22:41 - 2008-03-05 16:03 - 00177672 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_0.dll
2014-05-12 22:41 - 2008-03-05 16:00 - 00028168 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_3.dll
2014-05-12 22:41 - 2008-03-05 16:00 - 00025608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_3.dll
2014-05-12 22:41 - 2008-03-05 15:56 - 04910088 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_37.dll
2014-05-12 22:41 - 2008-03-05 15:56 - 03786760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_37.dll
2014-05-12 22:41 - 2008-03-05 15:56 - 01860120 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_37.dll
2014-05-12 22:41 - 2008-03-05 15:56 - 01420824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_37.dll
2014-05-12 22:41 - 2008-02-05 23:07 - 00529424 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_37.dll
2014-05-12 22:41 - 2008-02-05 23:07 - 00462864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_37.dll
2014-05-12 22:41 - 2007-10-22 03:40 - 00411656 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_10.dll
2014-05-12 22:41 - 2007-10-22 03:39 - 00267272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_10.dll
2014-05-12 22:41 - 2007-10-22 03:37 - 00021000 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_2.dll
2014-05-12 22:41 - 2007-10-22 03:37 - 00017928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_2.dll
2014-05-12 22:41 - 2007-10-12 15:14 - 05081608 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_36.dll
2014-05-12 22:41 - 2007-10-12 15:14 - 03734536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_36.dll
2014-05-12 22:41 - 2007-10-12 15:14 - 02006552 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_36.dll
2014-05-12 22:41 - 2007-10-12 15:14 - 01374232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_36.dll
2014-05-12 22:41 - 2007-10-02 09:56 - 00508264 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_36.dll
2014-05-12 22:41 - 2007-10-02 09:56 - 00444776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_36.dll
2014-05-12 22:41 - 2007-07-20 00:57 - 00411496 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_9.dll
2014-05-12 22:41 - 2007-07-20 00:57 - 00267112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_9.dll
2014-05-12 22:41 - 2007-07-19 18:14 - 05073256 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_35.dll
2014-05-12 22:41 - 2007-07-19 18:14 - 03727720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_35.dll
2014-05-12 22:41 - 2007-07-19 18:14 - 01985904 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_35.dll
2014-05-12 22:41 - 2007-07-19 18:14 - 01358192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_35.dll
2014-05-12 22:41 - 2007-07-19 18:14 - 00508264 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_35.dll
2014-05-12 22:41 - 2007-07-19 18:14 - 00444776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_35.dll
2014-05-12 22:41 - 2007-06-20 20:49 - 00409960 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_8.dll
2014-05-12 22:41 - 2007-06-20 20:46 - 00266088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_8.dll
2014-05-12 22:41 - 2007-05-16 16:45 - 04496232 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_34.dll
2014-05-12 22:41 - 2007-05-16 16:45 - 03497832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_34.dll
2014-05-12 22:41 - 2007-05-16 16:45 - 01401200 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_34.dll
2014-05-12 22:41 - 2007-05-16 16:45 - 01124720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_34.dll
2014-05-12 22:41 - 2007-05-16 16:45 - 00506728 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_34.dll
2014-05-12 22:41 - 2007-05-16 16:45 - 00443752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_34.dll
2014-05-12 22:41 - 2007-04-04 18:55 - 00403304 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_7.dll
2014-05-12 22:41 - 2007-04-04 18:55 - 00261480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_7.dll
2014-05-12 22:41 - 2007-04-04 18:54 - 00107368 _____ (Microsoft Corporation) C:\WINDOWS\system32\xinput1_3.dll
2014-05-12 22:41 - 2007-04-04 18:53 - 00081768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xinput1_3.dll
2014-05-12 22:41 - 2007-03-15 16:57 - 00506728 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_33.dll
2014-05-12 22:41 - 2007-03-15 16:57 - 00443752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_33.dll
2014-05-12 22:41 - 2007-03-12 16:42 - 04494184 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_33.dll
2014-05-12 22:41 - 2007-03-12 16:42 - 03495784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_33.dll
2014-05-12 22:41 - 2007-03-12 16:42 - 01400176 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_33.dll
2014-05-12 22:41 - 2007-03-12 16:42 - 01123696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_33.dll
2014-05-12 22:41 - 2007-03-05 12:42 - 00017688 _____ (Microsoft Corporation) C:\WINDOWS\system32\x3daudio1_1.dll
2014-05-12 22:41 - 2007-03-05 12:42 - 00015128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\x3daudio1_1.dll
2014-05-12 22:41 - 2007-01-24 15:27 - 00393576 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_6.dll
2014-05-12 22:41 - 2007-01-24 15:27 - 00255848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_6.dll
2014-05-12 22:41 - 2006-12-08 12:02 - 00251672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_5.dll
2014-05-12 22:41 - 2006-12-08 12:00 - 00390424 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_5.dll
2014-05-12 22:41 - 2006-11-29 13:06 - 04398360 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_32.dll
2014-05-12 22:41 - 2006-11-29 13:06 - 03426072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_32.dll
2014-05-12 22:41 - 2006-11-29 13:06 - 00469264 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10.dll
2014-05-12 22:41 - 2006-11-29 13:06 - 00440080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10.dll
2014-05-12 22:41 - 2006-09-28 16:05 - 03977496 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_31.dll
2014-05-12 22:41 - 2006-09-28 16:05 - 00237848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_4.dll
2014-05-12 22:41 - 2006-09-28 16:04 - 00364824 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_4.dll
2014-05-12 22:41 - 2006-07-28 09:31 - 00083736 _____ (Microsoft Corporation) C:\WINDOWS\system32\xinput1_2.dll
2014-05-12 22:41 - 2006-07-28 09:30 - 00363288 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_3.dll
2014-05-12 22:41 - 2006-07-28 09:30 - 00236824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_3.dll
2014-05-12 22:41 - 2006-07-28 09:30 - 00062744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xinput1_2.dll
2014-05-12 22:41 - 2006-05-31 07:24 - 00230168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_2.dll
2014-05-12 22:41 - 2006-05-31 07:22 - 00354072 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_2.dll
2014-05-12 22:41 - 2006-03-31 12:41 - 03927248 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_30.dll
2014-05-12 22:41 - 2006-03-31 12:40 - 02388176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_30.dll
2014-05-12 22:41 - 2006-03-31 12:40 - 00352464 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_1.dll
2014-05-12 22:41 - 2006-03-31 12:39 - 00229584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_1.dll
2014-05-12 22:41 - 2006-03-31 12:39 - 00083664 _____ (Microsoft Corporation) C:\WINDOWS\system32\xinput1_1.dll
2014-05-12 22:41 - 2006-03-31 12:39 - 00062672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xinput1_1.dll
2014-05-12 22:41 - 2006-02-03 08:43 - 03830992 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_29.dll
2014-05-12 22:41 - 2006-02-03 08:43 - 02332368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_29.dll
2014-05-12 22:41 - 2006-02-03 08:42 - 00355536 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_0.dll
2014-05-12 22:41 - 2006-02-03 08:42 - 00230096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_0.dll
2014-05-12 22:41 - 2006-02-03 08:41 - 00016592 _____ (Microsoft Corporation) C:\WINDOWS\system32\x3daudio1_0.dll
2014-05-12 22:41 - 2006-02-03 08:41 - 00014032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\x3daudio1_0.dll
2014-05-12 22:41 - 2005-12-05 18:09 - 03815120 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_28.dll
2014-05-12 22:41 - 2005-12-05 18:09 - 02323664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_28.dll
2014-05-12 22:41 - 2005-07-22 19:59 - 03807440 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_27.dll
2014-05-12 22:41 - 2005-07-22 19:59 - 02319568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_27.dll
2014-05-12 22:41 - 2005-05-26 15:34 - 03767504 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_26.dll
2014-05-12 22:41 - 2005-05-26 15:34 - 02297552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_26.dll
2014-05-12 22:41 - 2005-03-18 17:19 - 03823312 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_25.dll
2014-05-12 22:41 - 2005-03-18 17:19 - 02337488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_25.dll
2014-05-12 22:41 - 2005-02-05 19:45 - 03544272 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_24.dll
2014-05-12 22:41 - 2005-02-05 19:45 - 02222800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_24.dll
2014-05-11 23:11 - 2014-05-11 23:13 - 00119512 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2014-05-11 23:10 - 2014-05-11 23:10 - 00000764 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-05-11 23:10 - 2014-05-11 23:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-05-11 23:10 - 2014-05-11 23:10 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-05-11 23:10 - 2014-04-03 09:51 - 00088280 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2014-05-11 23:10 - 2014-04-03 09:51 - 00063192 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys
2014-05-11 23:10 - 2014-04-03 09:50 - 00025816 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys
2014-05-11 20:04 - 2014-05-11 20:04 - 00000000 ____D () C:\Users\Public\CyberLink
2014-05-11 20:04 - 2013-12-01 11:55 - 00002097 _____ () C:\Users\Internet\Desktop\OneKey Recovery.lnk
2014-05-11 20:04 - 2013-12-01 11:53 - 00001184 _____ () C:\Users\Internet\Desktop\Lenovo VeriFace.lnk
2014-05-11 20:04 - 2013-12-01 11:51 - 00002188 _____ () C:\Users\Internet\Desktop\Lenovo PowerDVD 10.lnk
2014-05-11 19:39 - 2014-05-11 19:39 - 00000000 ____D () C:\Users\Internet\AppData\Roaming\WebApp
2014-05-11 19:37 - 2014-05-11 20:04 - 00000000 ____D () C:\Users\Internet\AppData\Roaming\CyberLink
2014-05-11 19:37 - 2014-05-11 19:37 - 00000000 ____D () C:\Users\Internet\Documents\Lenovo
2014-05-11 19:37 - 2014-05-11 19:37 - 00000000 ____D () C:\Users\Internet\Documents\CyberLink
2014-05-11 19:37 - 2014-05-11 19:37 - 00000000 ____D () C:\Users\Internet\AppData\Roaming\Lenovo
2014-05-11 19:37 - 2014-05-11 19:37 - 00000000 ____D () C:\Users\Internet\AppData\Local\Cyberlink
2014-05-11 18:29 - 2014-05-12 22:23 - 00000000 ____D () C:\Users\Internet\AppData\Roaming\Origin
2014-05-11 18:29 - 2014-05-11 18:36 - 00000000 ____D () C:\Users\Internet\AppData\Local\Origin
2014-05-11 18:26 - 2014-05-14 18:17 - 00000000 ____D () C:\ProgramData\Origin
2014-05-11 18:26 - 2014-05-12 22:51 - 00000000 ____D () C:\ProgramData\Electronic Arts
2014-05-11 18:26 - 2014-05-11 18:26 - 00000659 _____ () C:\Users\Public\Desktop\Origin.lnk
2014-05-11 18:26 - 2014-05-11 18:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Origin
2014-05-11 18:07 - 2014-05-11 18:07 - 00000000 ____D () C:\Users\Internet\AppData\Local\Macromedia
2014-05-11 18:04 - 2014-05-14 17:47 - 00000884 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2014-05-08 22:45 - 2014-05-08 22:45 - 00001095 _____ () C:\Users\Public\Desktop\StarMoney 9.0 S-Edition.lnk
2014-05-08 22:45 - 2014-05-08 22:45 - 00000000 ____D () C:\ProgramData\StarMoney 9.0
2014-05-08 22:45 - 2014-05-08 22:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StarMoney 9.0 S-Edition
2014-05-08 22:45 - 2014-05-08 22:45 - 00000000 ____D () C:\Program Files (x86)\Business Objects
2014-05-06 22:12 - 2014-05-06 22:12 - 00000000 ____D () C:\Program Files (x86)\AGEIA Technologies
2014-05-06 22:11 - 2014-03-04 13:32 - 00599840 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvStreaming.exe
2014-05-06 22:09 - 2014-03-04 16:35 - 31474976 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglv64.dll
2014-05-06 22:09 - 2014-03-04 16:35 - 25255256 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcompiler.dll
2014-05-06 22:09 - 2014-03-04 16:35 - 23716640 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglv32.dll
2014-05-06 22:09 - 2014-03-04 16:35 - 17755424 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvd3dumx.dll
2014-05-06 22:09 - 2014-03-04 16:35 - 17561544 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcompiler.dll
2014-05-06 22:09 - 2014-03-04 16:35 - 15783992 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvwgf2um.dll
2014-05-06 22:09 - 2014-03-04 16:35 - 12708128 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvlddmkm.sys
2014-05-06 22:09 - 2014-03-04 16:35 - 11636176 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll
2014-05-06 22:09 - 2014-03-04 16:35 - 11589272 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvopencl.dll
2014-05-06 22:09 - 2014-03-04 16:35 - 09728064 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll
2014-05-06 22:09 - 2014-03-04 16:35 - 09690424 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvopencl.dll
2014-05-06 22:09 - 2014-03-04 16:35 - 03143456 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll
2014-05-06 22:09 - 2014-03-04 16:35 - 02958792 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll
2014-05-06 22:09 - 2014-03-04 16:35 - 02783008 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvenc.dll
2014-05-06 22:09 - 2014-03-04 16:35 - 02411976 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvenc.dll
2014-05-06 22:09 - 2014-03-04 16:35 - 01885472 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6433523.dll
2014-05-06 22:09 - 2014-03-04 16:35 - 01516488 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6433523.dll
2014-05-06 22:09 - 2014-03-04 16:35 - 00892704 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll
2014-05-06 22:09 - 2014-03-04 16:35 - 00877856 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll
2014-05-06 22:09 - 2014-03-04 16:35 - 00863064 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll
2014-05-06 22:09 - 2014-03-04 16:35 - 00846168 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll
2014-05-06 22:09 - 2014-03-04 16:35 - 00484296 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll
2014-05-06 22:09 - 2014-03-04 16:35 - 00409544 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll
2014-05-06 22:09 - 2014-03-04 16:35 - 00377688 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFROpenGL.dll
2014-05-06 22:09 - 2014-03-04 16:35 - 00333600 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFROpenGL.dll
2014-05-06 22:09 - 2013-11-28 15:38 - 00197408 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvhda64v.sys
2014-05-06 22:09 - 2013-11-28 15:38 - 00031520 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvhdap64.dll
2014-05-06 22:08 - 2014-05-06 22:08 - 00000000 ____D () C:\NVIDIA
2014-05-06 22:01 - 2014-05-06 22:01 - 00001147 _____ () C:\Users\Internet\Desktop\Sharkoon Mouse Config.lnk
2014-05-06 21:32 - 2014-05-06 21:32 - 00001378 _____ () C:\Users\Public\Desktop\GeForce Experience.lnk
2014-05-06 21:32 - 2014-04-30 20:27 - 01081112 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvspcap.dll
2014-05-06 21:32 - 2014-04-30 20:26 - 01225920 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvspcap64.dll
2014-05-06 21:32 - 2010-05-26 11:41 - 02401112 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_43.dll
2014-05-06 21:32 - 2010-05-26 11:41 - 01998168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_43.dll
2014-05-06 21:32 - 2010-05-26 11:41 - 00511328 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_43.dll
2014-05-06 21:32 - 2010-05-26 11:41 - 00470880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_43.dll
2014-05-06 21:32 - 2010-05-26 11:41 - 00276832 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx11_43.dll
2014-05-06 21:32 - 2010-05-26 11:41 - 00248672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx11_43.dll
2014-05-06 21:31 - 2014-05-12 22:44 - 00000000 ____D () C:\Users\Internet\AppData\Local\NVIDIA
2014-05-06 21:31 - 2014-05-06 21:32 - 00000000 ____D () C:\Users\Internet\AppData\Local\NVIDIA Corporation
2014-05-06 21:31 - 2014-05-06 21:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2014-05-06 21:31 - 2014-03-31 18:42 - 00040392 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvvad64v.sys
2014-05-06 21:31 - 2014-03-31 18:42 - 00037320 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvaudcap64v.dll
2014-05-06 21:31 - 2014-03-31 18:42 - 00034760 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvaudcap32v.dll
2014-05-06 21:22 - 2014-05-06 21:22 - 00000000 ____D () C:\Users\Internet\AppData\Roaming\MingGuan
2014-05-06 21:11 - 2014-05-06 21:11 - 00000000 ____D () C:\Users\Internet\Documents\My Games
2014-05-06 21:11 - 2014-05-06 21:11 - 00000000 ____D () C:\Users\Internet\AppData\Roaming\Macromedia
2014-05-06 20:54 - 2014-05-06 21:11 - 00000000 ____D () C:\Users\Internet\AppData\Local\Runic Games
2014-05-06 20:54 - 2014-05-06 20:54 - 00000841 _____ () C:\Users\Internet\Desktop\Torchlight 2.lnk
2014-05-06 20:54 - 2014-05-06 20:54 - 00000000 ____D () C:\Users\Internet\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Torchlight 2
2014-05-06 18:54 - 2014-05-06 18:54 - 00000000 ___RD () C:\WINDOWS\BrowserChoice
2014-05-06 18:53 - 2014-05-06 18:53 - 00000000 ____D () C:\Users\Default\AppData\Local\Microsoft Help
2014-05-06 18:53 - 2014-05-06 18:53 - 00000000 ____D () C:\Users\Default User\AppData\Local\Microsoft Help
2014-05-06 18:41 - 2014-05-06 18:41 - 01192533 _____ () C:\WINDOWS\unins000.exe
2014-05-06 18:41 - 2014-05-06 18:41 - 00017202 _____ () C:\WINDOWS\unins000.dat
2014-05-06 18:41 - 2014-05-06 18:41 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Drakonia Black
2014-05-05 22:11 - 2014-05-05 22:11 - 00001216 _____ () C:\Users\Internet\Desktop\Microsoft PowerPoint 2010.lnk
2014-05-05 22:11 - 2014-05-05 22:11 - 00001203 _____ () C:\Users\Internet\Desktop\Microsoft Word 2010.lnk
2014-05-05 22:09 - 2014-05-05 22:09 - 00001216 _____ () C:\Users\Internet\Desktop\Microsoft Access 2010.lnk
2014-05-05 22:09 - 2014-05-05 22:09 - 00001187 _____ () C:\Users\Internet\Desktop\Microsoft Excel 2010.lnk
2014-05-05 22:07 - 2014-05-05 22:07 - 00000000 ____D () C:\Program Files (x86)\Microsoft Office
2014-05-05 22:05 - 2014-05-05 22:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SharePoint
2014-05-05 22:05 - 2014-05-05 22:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
2014-05-05 22:04 - 2014-05-11 17:02 - 00000000 ____D () C:\ProgramData\Lexmark Universal v2 XL
2014-05-05 22:04 - 2014-05-05 22:04 - 00000000 ____D () C:\WINDOWS\PCHEALTH
2014-05-05 22:04 - 2014-05-05 22:04 - 00000000 ____D () C:\Program Files (x86)\Microsoft Synchronization Services
2014-05-05 22:04 - 2014-05-05 22:04 - 00000000 ____D () C:\Program Files (x86)\Microsoft Sync Framework
2014-05-05 22:04 - 2014-05-05 22:04 - 00000000 ____D () C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2014-05-05 22:02 - 2014-05-05 22:02 - 00000000 ____D () C:\Program Files\Microsoft Office
2014-05-05 22:02 - 2014-05-05 22:02 - 00000000 ____D () C:\Program Files (x86)\Microsoft Visual Studio 8
2014-05-05 22:02 - 2014-05-05 22:02 - 00000000 ____D () C:\Program Files (x86)\Microsoft Analysis Services
2014-05-05 22:00 - 2014-05-11 17:02 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-05-05 21:32 - 2014-05-05 21:32 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip
2014-05-05 21:16 - 2013-10-31 02:29 - 00236888 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdFilter.sys
2014-05-05 21:16 - 2013-10-31 02:29 - 00124760 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdNisDrv.sys
2014-05-05 21:16 - 2013-10-31 02:28 - 00035856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdBoot.sys
2014-05-05 21:13 - 2014-05-05 21:13 - 00084720 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avnetflt.sys
2014-05-05 00:05 - 2014-05-05 00:05 - 00000000 ____D () C:\Program Files\Lexmark ScanBack
2014-05-05 00:05 - 2014-05-05 00:05 - 00000000 ____D () C:\Program Files (x86)\Lexmark ScanBack
2014-05-05 00:01 - 2014-05-05 00:01 - 00000000 ____D () C:\Program Files\Lexmark Status Monitor Center
2014-05-05 00:00 - 2014-05-05 00:00 - 00000000 ____D () C:\Program Files\Lexmark Network TWAIN Driver
2014-05-05 00:00 - 2014-05-05 00:00 - 00000000 ____D () C:\Program Files (x86)\Lexmark Network TWAIN Driver
2014-05-05 00:00 - 2014-05-05 00:00 - 00000000 ____D () C:\Program Files (x86)\Lexmark
2014-05-04 23:59 - 2014-05-04 23:59 - 00000000 ____D () C:\ProgramData\APP
2014-05-04 23:54 - 2014-05-05 00:05 - 00076123 _____ () C:\WINDOWS\system32\LexFiles.ulf
2014-05-04 23:54 - 2014-05-05 00:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lexmark
2014-05-04 23:54 - 2014-05-04 23:54 - 00000000 ____D () C:\Program Files\Lexmark Universal v2
2014-05-04 23:54 - 2014-02-11 09:28 - 00252416 _____ ( ) C:\WINDOWS\system32\lmabtppm.dll
2014-05-04 23:54 - 2012-10-09 10:17 - 00906752 _____ ( ) C:\WINDOWS\system32\lexlog.dll
2014-05-04 23:54 - 2012-10-09 09:58 - 00446464 _____ ( ) C:\WINDOWS\SysWOW64\lexlog.dll
2014-05-04 23:52 - 2014-05-04 23:52 - 00000000 ____D () C:\ProgramData\UD1
2014-05-04 23:35 - 2014-05-04 23:35 - 00000719 _____ () C:\Users\Internet\Desktop\mp3DirectCut.lnk
2014-05-04 23:29 - 2014-05-04 23:29 - 00000659 _____ () C:\Users\Public\Desktop\Winamp.lnk
2014-05-04 23:29 - 2014-05-04 23:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Winamp
2014-05-04 23:29 - 2009-09-04 17:29 - 01892184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_42.dll
2014-05-04 23:29 - 2006-09-28 16:05 - 02414360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_31.dll
2014-05-04 23:15 - 2014-05-04 23:15 - 00000000 ____D () C:\Users\Internet\AppData\Roaming\Avira
2014-05-04 23:14 - 2014-05-04 23:14 - 00000914 _____ () C:\Users\Public\Desktop\Avira Control Center.lnk
2014-05-04 23:14 - 2014-05-04 23:14 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2014-05-04 23:14 - 2014-02-25 11:41 - 00131576 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avipbb.sys
2014-05-04 23:14 - 2014-02-25 11:41 - 00108440 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avgntflt.sys
2014-05-04 23:14 - 2014-02-25 11:41 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avkmgr.sys
2014-05-04 23:02 - 2014-05-04 23:14 - 00000000 ____D () C:\ProgramData\Avira
2014-05-04 21:48 - 2014-05-14 17:58 - 00000000 ____D () C:\Users\Internet\AppData\Roaming\KeePass
2014-05-04 21:41 - 2014-05-04 21:41 - 00000647 _____ () C:\Users\Public\Desktop\Steam.lnk
2014-05-04 21:41 - 2014-05-04 21:41 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
2014-05-04 20:47 - 2014-05-04 20:47 - 00000000 ____D () C:\Users\Internet\AppData\Roaming\Mozilla
2014-05-04 20:47 - 2014-05-04 20:47 - 00000000 ____D () C:\Users\Internet\AppData\Local\Mozilla
2014-05-04 20:45 - 2014-05-04 20:45 - 00001465 _____ () C:\Users\Internet\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-05-04 20:45 - 2014-05-04 20:45 - 00000020 ___SH () C:\Users\Internet\ntuser.ini
2014-05-04 19:35 - 2014-05-04 19:09 - 00000000 ___DC () C:\WINDOWS\Panther
2014-05-04 19:34 - 2014-05-04 19:34 - 03408896 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2014-05-04 19:34 - 2014-05-04 19:34 - 01705984 _____ (Microsoft Corporation) C:\WINDOWS\system32\wucltux.dll
2014-05-04 19:34 - 2014-05-04 19:34 - 00381952 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUSettingsProvider.dll
2014-05-04 19:34 - 2014-05-04 19:34 - 00190976 _____ (Microsoft Corporation) C:\WINDOWS\system32\storewuauth.dll
2014-05-04 19:34 - 2014-05-04 19:34 - 00054776 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2014-05-04 19:33 - 2014-05-04 19:33 - 21232792 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 18679216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 16875520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 13286400 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 12732416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 11791360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 08653824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 07425368 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2014-05-04 19:33 - 2014-05-04 19:33 - 06641152 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 05833728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Search.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 05770752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 04268544 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncEngine.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 02900992 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 02641920 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 02519384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2014-05-04 19:33 - 2014-05-04 19:33 - 02479616 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmSvc.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 02373784 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2014-05-04 19:33 - 2014-05-04 19:33 - 02331000 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 02317824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 02270208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 02141912 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 02133504 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 02088160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2014-05-04 19:33 - 2014-05-04 19:33 - 02030080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WsmSvc.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 02013016 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2014-05-04 19:33 - 2014-05-04 19:33 - 01843712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Display.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 01816576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Display.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 01779800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 01764864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 01679128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 01656832 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 01557848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2014-05-04 19:33 - 2014-05-04 19:33 - 01542768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 01527296 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 01466864 _____ (Microsoft Corporation) C:\WINDOWS\system32\propsys.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 01411584 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 01351168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 01339240 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 01306624 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 01291200 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel32.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 01230336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 01200296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\propsys.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 01129472 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFolder.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 01112536 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 01095488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 01066496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 01063424 _____ (Microsoft Corporation) C:\WINDOWS\system32\IKEEXT.DLL
2014-05-04 19:33 - 2014-05-04 19:33 - 01057280 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdvidcrl.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 01054208 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.appcore.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 01036288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kernel32.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 01023488 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 01015808 _____ (Microsoft Corporation) C:\WINDOWS\system32\aclui.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00958464 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00950784 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgent.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00939520 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00924160 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00918528 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00888320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00887296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aclui.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00872448 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDrive.exe
2014-05-04 19:33 - 2014-05-04 19:33 - 00855552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdvidcrl.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00839168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchFolder.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00836096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00834560 _____ (Microsoft Corporation) C:\WINDOWS\system32\netlogon.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00834048 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00828928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.appcore.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00827392 _____ (Microsoft Corporation) C:\WINDOWS\system32\BFE.DLL
2014-05-04 19:33 - 2014-05-04 19:33 - 00801792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00800256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReAgent.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00755712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00731648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\adtschema.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00731648 _____ (Microsoft Corporation) C:\WINDOWS\system32\adtschema.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00721408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveTelemetry.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00717312 _____ (Microsoft Corporation) C:\WINDOWS\system32\nshwfp.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00688640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netlogon.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00679424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys
2014-05-04 19:33 - 2014-05-04 19:33 - 00669696 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasapi32.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00655360 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsapi.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00629760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmCoreR.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00621568 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAgent.exe
2014-05-04 19:33 - 2014-05-04 19:33 - 00605184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasapi32.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00567296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nshwfp.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00565536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2014-05-04 19:33 - 2014-05-04 19:33 - 00542208 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.Printing.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00518552 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00512000 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidprov.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00494592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dnsapi.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00492256 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00488280 _____ (Microsoft Corporation) C:\WINDOWS\system32\netcfgx.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00467800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS
2014-05-04 19:33 - 2014-05-04 19:33 - 00467504 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00463264 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00462336 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlangpui.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00443904 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansec.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00443392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\nwifi.sys
2014-05-04 19:33 - 2014-05-04 19:33 - 00428888 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS
2014-05-04 19:33 - 2014-05-04 19:33 - 00425984 _____ (Microsoft Corporation) C:\WINDOWS\system32\clusapi.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00412672 _____ (Microsoft Corporation) C:\WINDOWS\system32\FWPUCLNT.DLL
2014-05-04 19:33 - 2014-05-04 19:33 - 00406912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00406512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00402944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
2014-05-04 19:33 - 2014-05-04 19:33 - 00402432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Graphics.Printing.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00390488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netcfgx.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00388408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00387210 _____ () C:\WINDOWS\system32\ApnDatabase.xml
2014-05-04 19:33 - 2014-05-04 19:33 - 00386560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlangpui.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00379224 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2014-05-04 19:33 - 2014-05-04 19:33 - 00376152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys
2014-05-04 19:33 - 2014-05-04 19:33 - 00370176 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanmsm.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00364640 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00360512 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfreadwrite.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00356864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlidprov.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00356848 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcomp.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00355832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfreadwrite.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00337752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Classpnp.sys
2014-05-04 19:33 - 2014-05-04 19:33 - 00334848 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDEServer.exe
2014-05-04 19:33 - 2014-05-04 19:33 - 00326024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00325632 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationApi.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00324096 _____ (Microsoft Corporation) C:\WINDOWS\system32\SessEnv.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00313344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\clusapi.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00305768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00300544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanmsm.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00299008 _____ (Microsoft Corporation) C:\WINDOWS\system32\pdh.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00298496 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSDMon.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00296960 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanapi.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00291840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Sensors.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00283648 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb10.sys
2014-05-04 19:33 - 2014-05-04 19:33 - 00280576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SessEnv.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00274944 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmWmiPl.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00271872 _____ (Microsoft Corporation) C:\WINDOWS\system32\spp.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00264192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FWPUCLNT.DLL
2014-05-04 19:33 - 2014-05-04 19:33 - 00262656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LocationApi.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00254976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pdh.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00254464 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsrslvr.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00252928 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00247296 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsApi.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00245760 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srvnet.sys
2014-05-04 19:33 - 2014-05-04 19:33 - 00244888 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2014-05-04 19:33 - 2014-05-04 19:33 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanapi.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00226304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Sensors.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00222720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\spp.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00222720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dcomp.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00220160 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00212992 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdd.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00201216 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReInfo.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00201216 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00197632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00192000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Scanners.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00186368 _____ (Microsoft Corporation) C:\WINDOWS\system32\dafWfdProvider.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00180056 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2014-05-04 19:33 - 2014-05-04 19:33 - 00172544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReInfo.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00171008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SensorsApi.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00160768 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxAllUserStore.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00157016 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wof.sys
2014-05-04 19:33 - 2014-05-04 19:33 - 00151040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Scanners.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxdav.sys
2014-05-04 19:33 - 2014-05-04 19:33 - 00139776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxAllUserStore.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00136024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wfplwfs.sys
2014-05-04 19:33 - 2014-05-04 19:33 - 00134144 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dfsc.sys
2014-05-04 19:33 - 2014-05-04 19:33 - 00115200 _____ (Microsoft Corporation) C:\WINDOWS\system32\umpnpmgr.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00115200 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevPropMgr.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00113648 _____ (Microsoft Corporation) C:\WINDOWS\system32\userenv.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidclass.sys
2014-05-04 19:33 - 2014-05-04 19:33 - 00110592 _____ (Microsoft Corporation) C:\WINDOWS\system32\drvinst.exe
2014-05-04 19:33 - 2014-05-04 19:33 - 00102912 _____ (Microsoft Corporation) C:\WINDOWS\system32\davclnt.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00098816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\drvinst.exe
2014-05-04 19:33 - 2014-05-04 19:33 - 00094016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\userenv.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00086016 _____ (Microsoft Corporation) C:\WINDOWS\system32\RMapi.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\davclnt.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\sxproxy.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00079360 _____ (Microsoft Corporation) C:\WINDOWS\system32\w32tm.exe
2014-05-04 19:33 - 2014-05-04 19:33 - 00079360 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\IPMIDrv.sys
2014-05-04 19:33 - 2014-05-04 19:33 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\w32tm.exe
2014-05-04 19:33 - 2014-05-04 19:33 - 00069120 _____ (Microsoft Corporation) C:\WINDOWS\system32\l2gpstore.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsgqec.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\l2gpstore.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00057856 _____ (Microsoft Corporation) C:\WINDOWS\system32\drvcfg.exe
2014-05-04 19:33 - 2014-05-04 19:33 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tsgqec.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpipreg.sys
2014-05-04 19:33 - 2014-05-04 19:33 - 00040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Shell.Search.UriHandler.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00040448 _____ (Microsoft Corporation) C:\WINDOWS\system32\SetNetworkLocation.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Shell.Search.UriHandler.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sxproxy.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidusb.sys
2014-05-04 19:33 - 2014-05-04 19:33 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredentialMigrationHandler.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredentialMigrationHandler.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanhlp.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanhlp.dll
2014-05-04 19:31 - 2014-05-04 19:31 - 23547904 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2014-05-04 19:31 - 2014-05-04 19:31 - 17384448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2014-05-04 19:31 - 2014-05-04 19:31 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2014-05-04 19:31 - 2014-05-04 19:31 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2014-05-04 19:29 - 2014-05-05 22:05 - 00000000 ____D () C:\Program Files (x86)\MSBuild
2014-05-04 19:29 - 2014-05-04 19:29 - 00000000 ____D () C:\WINDOWS\SysWOW64\XPSViewer
2014-05-04 19:29 - 2014-05-04 19:29 - 00000000 ____D () C:\Program Files\Reference Assemblies
2014-05-04 19:29 - 2014-05-04 19:29 - 00000000 ____D () C:\Program Files\MSBuild
2014-05-04 19:29 - 2014-05-04 19:29 - 00000000 ____D () C:\Program Files (x86)\Reference Assemblies
2014-05-04 19:28 - 2014-05-04 18:44 - 00000000 ____D () C:\Recovery
2014-05-04 19:28 - 2013-08-03 06:48 - 01166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll
2014-05-04 19:28 - 2013-08-03 06:48 - 00124112 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2014-05-04 19:28 - 2013-08-03 06:48 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe
2014-05-04 19:28 - 2013-08-03 06:41 - 00778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll
2014-05-04 19:28 - 2013-08-03 06:41 - 00102608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2014-05-04 19:28 - 2013-08-03 06:41 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe
2014-05-04 19:03 - 2014-05-04 19:03 - 00000000 _SHDL () C:\Users\Default\Vorlagen
2014-05-04 19:03 - 2014-05-04 19:03 - 00000000 _SHDL () C:\Users\Default\Startmenü
2014-05-04 19:03 - 2014-05-04 19:03 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung
2014-05-04 19:03 - 2014-05-04 19:03 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen
2014-05-04 19:03 - 2014-05-04 19:03 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien
2014-05-04 19:03 - 2014-05-04 19:03 - 00000000 _SHDL () C:\Users\Default\Druckumgebung
2014-05-04 19:03 - 2014-05-04 19:03 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik
2014-05-04 19:03 - 2014-05-04 19:03 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder
2014-05-04 19:03 - 2014-05-04 19:03 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-05-04 19:03 - 2014-05-04 19:03 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf
2014-05-04 19:03 - 2014-05-04 19:03 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten
2014-05-04 19:03 - 2014-05-04 19:03 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten
2014-05-04 19:03 - 2014-05-04 19:03 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik
2014-05-04 19:03 - 2014-05-04 19:03 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder
2014-05-04 19:03 - 2014-05-04 19:03 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-05-04 19:03 - 2014-05-04 19:03 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf
2014-05-04 19:03 - 2014-05-04 19:03 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten
2014-05-04 18:58 - 2014-05-04 18:58 - 00022960 _____ () C:\WINDOWS\system32\emptyregdb.dat
2014-05-04 18:52 - 2014-05-04 18:52 - 00000000 ____D () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Lenovo
2014-05-04 18:52 - 2014-05-04 18:52 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Lenovo
2014-05-04 18:51 - 2014-05-04 18:51 - 00001547 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2014-05-04 18:47 - 2014-05-14 18:21 - 00000000 ____D () C:\Users\******* Admin
2014-05-04 18:47 - 2014-05-06 22:16 - 00000000 ____D () C:\Users\Internet
2014-05-04 18:47 - 2014-05-04 19:03 - 00036198 _____ () C:\WINDOWS\diagwrn.xml
2014-05-04 18:47 - 2014-05-04 19:03 - 00036198 _____ () C:\WINDOWS\diagerr.xml
2014-05-04 18:47 - 2014-05-04 18:48 - 00000000 ___RD () C:\Users\Internet\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-05-04 18:47 - 2014-05-04 18:48 - 00000000 ___RD () C:\Users\Internet\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-05-04 18:47 - 2014-05-04 18:47 - 00000000 _SHDL () C:\Users\Internet\Vorlagen
2014-05-04 18:47 - 2014-05-04 18:47 - 00000000 _SHDL () C:\Users\Internet\Startmenü
2014-05-04 18:47 - 2014-05-04 18:47 - 00000000 _SHDL () C:\Users\Internet\Netzwerkumgebung
2014-05-04 18:47 - 2014-05-04 18:47 - 00000000 _SHDL () C:\Users\Internet\Lokale Einstellungen
2014-05-04 18:47 - 2014-05-04 18:47 - 00000000 _SHDL () C:\Users\Internet\Eigene Dateien
2014-05-04 18:47 - 2014-05-04 18:47 - 00000000 _SHDL () C:\Users\Internet\Druckumgebung
2014-05-04 18:47 - 2014-05-04 18:47 - 00000000 _SHDL () C:\Users\Internet\Documents\Eigene Musik
2014-05-04 18:47 - 2014-05-04 18:47 - 00000000 _SHDL () C:\Users\Internet\Documents\Eigene Bilder
2014-05-04 18:47 - 2014-05-04 18:47 - 00000000 _SHDL () C:\Users\Internet\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-05-04 18:47 - 2014-05-04 18:47 - 00000000 _SHDL () C:\Users\Internet\AppData\Local\Verlauf
2014-05-04 18:47 - 2014-05-04 18:47 - 00000000 _SHDL () C:\Users\Internet\AppData\Local\Anwendungsdaten
2014-05-04 18:47 - 2014-05-04 18:47 - 00000000 _SHDL () C:\Users\Internet\Anwendungsdaten
2014-05-04 18:47 - 2014-03-18 12:11 - 00000369 _____ () C:\Users\Internet\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk
2014-05-04 18:47 - 2014-03-18 12:11 - 00000369 _____ () C:\Users\Internet\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk
2014-05-04 18:47 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Internet\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-05-04 18:47 - 2013-08-22 17:36 - 00000000 ____D () C:\Users\Internet\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-05-04 18:40 - 2014-05-04 18:40 - 00000000 ____D () C:\WINDOWS\SysWOW64\RTCOM
2014-05-04 18:40 - 2014-05-04 18:40 - 00000000 ____D () C:\Program Files\Realtek
2014-05-04 18:38 - 2014-05-11 17:03 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-05-04 18:38 - 2014-05-06 22:12 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2014-05-04 18:38 - 2014-03-04 16:35 - 00062408 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll
2014-05-04 18:38 - 2014-03-04 16:35 - 00054216 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll
2014-05-04 18:38 - 2014-03-04 15:06 - 06714312 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll
2014-05-04 18:38 - 2014-03-04 15:06 - 03497816 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc64.dll
2014-05-04 18:38 - 2014-03-04 15:05 - 02558808 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvcr.dll
2014-05-04 18:38 - 2014-03-04 15:05 - 00922968 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe
2014-05-04 18:38 - 2014-03-04 15:05 - 00607064 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\oemdspif.dll
2014-05-04 18:38 - 2014-03-04 15:05 - 00386336 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmctray.dll
2014-05-04 18:38 - 2014-03-04 15:05 - 00064968 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvshext.dll
2014-05-04 18:37 - 2014-05-14 17:48 - 02017509 _____ () C:\WINDOWS\WindowsUpdate.log
2014-05-04 18:37 - 2014-05-06 21:32 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation
2014-05-04 18:37 - 2014-05-06 21:32 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2014-05-04 18:37 - 2014-05-04 18:40 - 00000000 ____D () C:\Program Files\Elantech
2014-05-04 18:16 - 2014-05-04 19:03 - 00006599 _____ () C:\WINDOWS\comsetup.log
2014-05-04 10:21 - 2014-05-04 10:21 - 00000000 ____D () C:\ProgramData\Intel(R) Update Manager
2014-05-04 10:15 - 2014-05-04 10:15 - 00000751 _____ () C:\Users\Internet\Desktop\KeePass 2.lnk
2014-05-03 18:25 - 2014-05-03 18:25 - 00000751 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KeePass 2.lnk
2014-05-03 18:14 - 2014-05-03 18:15 - 00000000 ____D () C:\WINDOWS\system32\MRT
__________________
Alt 14.05.2014, 19:45   #4
Klattsche
 
Windows 8.1: Bei zugeklapptem Bildschirm öffnen sich wahllos Dateien vom Desktop - Standard

Windows 8.1: Bei zugeklapptem Bildschirm öffnen sich wahllos Dateien vom Desktop


Code:
ATTFilter
2014-05-03 18:14 - 2014-03-31 03:51 - 90655440 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2014-05-03 18:07 - 2014-05-04 18:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDF-XChange PDF Viewer
2014-05-03 18:07 - 2014-05-03 18:07 - 00000843 _____ () C:\Users\Public\Desktop\PDF-Viewer.lnk
2014-05-03 17:57 - 2014-05-03 17:57 - 00000000 ____D () C:\ProgramData\Energy Management
2014-05-03 17:57 - 2014-05-03 17:57 - 00000000 ____D () C:\ProgramData\eBay
2014-05-03 17:52 - 2014-05-03 17:52 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Musik
2014-05-03 17:52 - 2014-05-03 17:52 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Bilder
2014-05-03 17:52 - 2014-05-03 17:52 - 00000000 _SHDL () C:\Users\Default.migrated\Vorlagen
2014-05-03 17:52 - 2014-05-03 17:52 - 00000000 _SHDL () C:\Users\Default.migrated\Startmenü
2014-05-03 17:52 - 2014-05-03 17:52 - 00000000 _SHDL () C:\Users\Default.migrated\Netzwerkumgebung
2014-05-03 17:52 - 2014-05-03 17:52 - 00000000 _SHDL () C:\Users\Default.migrated\Lokale Einstellungen
2014-05-03 17:52 - 2014-05-03 17:52 - 00000000 _SHDL () C:\Users\Default.migrated\Eigene Dateien
2014-05-03 17:52 - 2014-05-03 17:52 - 00000000 _SHDL () C:\Users\Default.migrated\Druckumgebung
2014-05-03 17:52 - 2014-05-03 17:52 - 00000000 _SHDL () C:\Users\Default.migrated\Documents\Eigene Musik
2014-05-03 17:52 - 2014-05-03 17:52 - 00000000 _SHDL () C:\Users\Default.migrated\Documents\Eigene Bilder
2014-05-03 17:52 - 2014-05-03 17:52 - 00000000 _SHDL () C:\Users\Default.migrated\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-05-03 17:52 - 2014-05-03 17:52 - 00000000 _SHDL () C:\Users\Default.migrated\AppData\Local\Verlauf
2014-05-03 17:52 - 2014-05-03 17:52 - 00000000 _SHDL () C:\Users\Default.migrated\AppData\Local\Anwendungsdaten
2014-05-03 17:52 - 2014-05-03 17:52 - 00000000 _SHDL () C:\Users\Default.migrated\Anwendungsdaten
2014-05-03 17:52 - 2014-05-03 17:52 - 00000000 _SHDL () C:\Programme
2014-05-03 17:52 - 2014-05-03 17:52 - 00000000 _SHDL () C:\ProgramData\Vorlagen
2014-05-03 17:52 - 2014-05-03 17:52 - 00000000 _SHDL () C:\ProgramData\Startmenü
2014-05-03 17:52 - 2014-05-03 17:52 - 00000000 _SHDL () C:\ProgramData\Microsoft\Windows\Start Menu\Programme
2014-05-03 17:52 - 2014-05-03 17:52 - 00000000 _SHDL () C:\ProgramData\Dokumente
2014-05-03 17:52 - 2014-05-03 17:52 - 00000000 _SHDL () C:\ProgramData\Anwendungsdaten
2014-05-03 17:52 - 2014-05-03 17:52 - 00000000 _SHDL () C:\Program Files\Gemeinsame Dateien
2014-05-03 17:52 - 2014-05-03 17:52 - 00000000 _SHDL () C:\Dokumente und Einstellungen
2014-05-03 17:51 - 2014-05-04 23:12 - 00000000 ____D () C:\Program Files (x86)\avira
2014-05-03 17:07 - 2014-05-03 17:07 - 00000773 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-05-03 17:07 - 2014-05-03 17:07 - 00000000 ____D () C:\ProgramData\Mozilla
2014-05-03 17:07 - 2014-05-03 17:07 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-05-03 16:49 - 2014-05-03 16:49 - 00000000 ____D () C:\ProgramData\tmp
2014-05-03 16:49 - 2014-05-03 16:49 - 00000000 ____D () C:\ProgramData\hps
2014-05-03 16:27 - 2014-05-03 16:27 - 00000355 _____ () C:\Users\Internet\Desktop\Computer.lnk
2014-05-03 16:26 - 2014-05-03 16:26 - 00000000 ____D () C:\Users\Internet\AppData\Roaming\Intel Corporation
2014-05-03 16:25 - 2014-05-11 20:04 - 00001133 _____ () C:\Users\Internet\Desktop\Cyberlink Power2Go.lnk
2014-05-03 16:25 - 2014-05-06 18:54 - 00000000 ____D () C:\Users\Internet\AppData\Local\Packages
2014-05-03 16:25 - 2014-05-04 20:45 - 00000000 ___RD () C:\Users\Internet\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-05-03 16:25 - 2014-05-04 20:45 - 00000000 ___RD () C:\Users\Internet\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-05-03 16:25 - 2014-05-04 18:48 - 00000000 ____D () C:\Users\Internet\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Lenovo
2014-05-03 16:25 - 2014-05-03 16:25 - 00000000 ____D () C:\Users\Internet\AppData\Roaming\Intel
2014-05-03 16:25 - 2014-05-03 16:25 - 00000000 ____D () C:\Users\Internet\AppData\Roaming\Adobe
2014-05-03 16:25 - 2014-05-03 16:25 - 00000000 ____D () C:\Users\Internet\AppData\Local\VirtualStore
2014-05-03 12:10 - 2014-05-04 18:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Seagate
2014-05-03 12:10 - 2014-05-03 12:11 - 00000000 ____D () C:\ProgramData\Seagate
2014-05-03 12:10 - 2014-05-03 12:10 - 01462560 _____ (Acronis International GmbH) C:\WINDOWS\system32\Drivers\tdrpman.sys
2014-05-03 12:10 - 2014-05-03 12:10 - 01120032 _____ (Acronis International GmbH) C:\WINDOWS\system32\Drivers\tib.sys
2014-05-03 12:10 - 2014-05-03 12:10 - 00233760 _____ (Acronis) C:\WINDOWS\system32\Drivers\snapman.sys
2014-05-03 12:10 - 2014-05-03 12:10 - 00183224 _____ (Acronis) C:\WINDOWS\system32\Drivers\tib_mounter.sys
2014-05-03 12:10 - 2014-05-03 12:10 - 00108832 _____ (Acronis International GmbH) C:\WINDOWS\system32\Drivers\fltsrv.sys
2014-05-03 12:10 - 2014-05-03 12:10 - 00000928 _____ () C:\Users\Public\Desktop\Seagate DiscWizard.lnk
2014-05-03 12:10 - 2014-05-03 12:10 - 00000000 ____D () C:\ProgramData\Acronis

==================== One Month Modified Files and Folders =======

2014-05-14 18:23 - 2014-05-14 18:22 - 00015783 _____ () C:\Users\Internet\Desktop\FRST.txt
2014-05-14 18:22 - 2014-05-14 18:22 - 00000000 ____D () C:\FRST
2014-05-14 18:21 - 2014-05-14 18:21 - 02066944 _____ (Farbar) C:\Users\Internet\Desktop\FRST64.exe
2014-05-14 18:21 - 2014-05-14 18:21 - 00000490 _____ () C:\Users\Internet\Desktop\defogger_disable.log
2014-05-14 18:21 - 2014-05-04 18:47 - 00000000 ____D () C:\Users\******* Admin
2014-05-14 18:19 - 2014-05-14 18:19 - 00050477 _____ () C:\Users\Internet\Desktop\Defogger.exe
2014-05-14 18:17 - 2014-05-11 18:26 - 00000000 ____D () C:\ProgramData\Origin
2014-05-14 18:00 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\sru
2014-05-14 17:58 - 2014-05-04 21:48 - 00000000 ____D () C:\Users\Internet\AppData\Roaming\KeePass
2014-05-14 17:48 - 2014-05-04 18:37 - 02017509 _____ () C:\WINDOWS\WindowsUpdate.log
2014-05-14 17:47 - 2014-05-11 18:04 - 00000884 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2014-05-14 17:45 - 2013-12-01 11:22 - 00000000 ____D () C:\ProgramData\Intel
2014-05-14 17:45 - 2013-12-01 11:08 - 00000000 ____D () C:\Program Files (x86)\Intel
2014-05-14 17:37 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\AppReadiness
2014-05-13 20:02 - 2014-05-12 22:41 - 00214392 _____ () C:\WINDOWS\SysWOW64\PnkBstrB.exe
2014-05-12 23:37 - 2014-05-12 22:41 - 00214392 _____ () C:\WINDOWS\SysWOW64\PnkBstrB.ex0
2014-05-12 23:23 - 2014-05-12 22:51 - 00000000 ____D () C:\Users\Internet\Documents\Battlefield 4
2014-05-12 22:54 - 2014-05-12 22:54 - 00000000 ____D () C:\Users\Internet\AppData\Local\PunkBuster
2014-05-12 22:51 - 2014-05-11 18:26 - 00000000 ____D () C:\ProgramData\Electronic Arts
2014-05-12 22:50 - 2014-05-12 22:50 - 00000000 ____D () C:\Users\Internet\AppData\Local\ESN
2014-05-12 22:50 - 2014-05-12 22:41 - 00000000 ____D () C:\Program Files (x86)\Battlelog Web Plugins
2014-05-12 22:44 - 2014-05-06 21:31 - 00000000 ____D () C:\Users\Internet\AppData\Local\NVIDIA
2014-05-12 22:41 - 2014-05-12 22:41 - 00076888 _____ () C:\WINDOWS\SysWOW64\PnkBstrA.exe
2014-05-12 22:41 - 2014-05-12 22:41 - 00010123 _____ () C:\WINDOWS\DirectX.log
2014-05-12 22:41 - 2014-05-12 22:41 - 00000687 _____ () C:\Users\Public\Desktop\Battlefield 4(64 bit).lnk
2014-05-12 22:41 - 2014-05-12 22:41 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battlefield 4
2014-05-12 22:41 - 2013-12-01 11:30 - 00000000 ____D () C:\ProgramData\Package Cache
2014-05-12 22:23 - 2014-05-11 18:29 - 00000000 ____D () C:\Users\Internet\AppData\Roaming\Origin
2014-05-11 23:13 - 2014-05-11 23:11 - 00119512 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2014-05-11 23:10 - 2014-05-11 23:10 - 00000764 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-05-11 23:10 - 2014-05-11 23:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-05-11 23:10 - 2014-05-11 23:10 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-05-11 20:04 - 2014-05-11 20:04 - 00000000 ____D () C:\Users\Public\CyberLink
2014-05-11 20:04 - 2014-05-11 19:37 - 00000000 ____D () C:\Users\Internet\AppData\Roaming\CyberLink
2014-05-11 20:04 - 2014-05-03 16:25 - 00001133 _____ () C:\Users\Internet\Desktop\Cyberlink Power2Go.lnk
2014-05-11 19:39 - 2014-05-11 19:39 - 00000000 ____D () C:\Users\Internet\AppData\Roaming\WebApp
2014-05-11 19:37 - 2014-05-11 19:37 - 00000000 ____D () C:\Users\Internet\Documents\Lenovo
2014-05-11 19:37 - 2014-05-11 19:37 - 00000000 ____D () C:\Users\Internet\Documents\CyberLink
2014-05-11 19:37 - 2014-05-11 19:37 - 00000000 ____D () C:\Users\Internet\AppData\Roaming\Lenovo
2014-05-11 19:37 - 2014-05-11 19:37 - 00000000 ____D () C:\Users\Internet\AppData\Local\Cyberlink
2014-05-11 19:37 - 2013-12-01 11:49 - 00000000 ____D () C:\ProgramData\Lenovo
2014-05-11 18:36 - 2014-05-11 18:29 - 00000000 ____D () C:\Users\Internet\AppData\Local\Origin
2014-05-11 18:26 - 2014-05-11 18:26 - 00000659 _____ () C:\Users\Public\Desktop\Origin.lnk
2014-05-11 18:26 - 2014-05-11 18:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Origin
2014-05-11 18:22 - 2014-03-18 12:03 - 01780340 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2014-05-11 18:22 - 2014-03-18 11:25 - 00766620 _____ () C:\WINDOWS\system32\perfh007.dat
2014-05-11 18:22 - 2014-03-18 11:25 - 00159902 _____ () C:\WINDOWS\system32\perfc007.dat
2014-05-11 18:07 - 2014-05-11 18:07 - 00000000 ____D () C:\Users\Internet\AppData\Local\Macromedia
2014-05-11 17:03 - 2014-05-04 18:38 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-05-11 17:03 - 2014-03-18 03:50 - 00208828 _____ () C:\WINDOWS\PFRO.log
2014-05-11 17:03 - 2013-08-22 16:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2014-05-11 17:03 - 2013-08-22 16:44 - 00482112 _____ () C:\WINDOWS\system32\FNTCACHE.DAT
2014-05-11 17:02 - 2014-05-05 22:04 - 00000000 ____D () C:\ProgramData\Lexmark Universal v2 XL
2014-05-11 17:02 - 2014-05-05 22:00 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-05-11 17:02 - 2013-12-01 11:53 - 00002560 _____ () C:\WINDOWS\system32\VfService.trf
2014-05-08 23:00 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\rescache
2014-05-08 22:45 - 2014-05-08 22:45 - 00001095 _____ () C:\Users\Public\Desktop\StarMoney 9.0 S-Edition.lnk
2014-05-08 22:45 - 2014-05-08 22:45 - 00000000 ____D () C:\ProgramData\StarMoney 9.0
2014-05-08 22:45 - 2014-05-08 22:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StarMoney 9.0 S-Edition
2014-05-08 22:45 - 2014-05-08 22:45 - 00000000 ____D () C:\Program Files (x86)\Business Objects
2014-05-08 22:45 - 2013-08-22 15:25 - 00017486 _____ () C:\WINDOWS\system32\Drivers\etc\services
2014-05-08 22:42 - 2013-12-01 11:19 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-05-06 22:16 - 2014-05-04 18:47 - 00000000 ____D () C:\Users\Internet
2014-05-06 22:12 - 2014-05-06 22:12 - 00000000 ____D () C:\Program Files (x86)\AGEIA Technologies
2014-05-06 22:12 - 2014-05-04 18:38 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2014-05-06 22:11 - 2013-08-22 16:46 - 00370233 _____ () C:\WINDOWS\setupact.log
2014-05-06 22:08 - 2014-05-06 22:08 - 00000000 ____D () C:\NVIDIA
2014-05-06 22:01 - 2014-05-06 22:01 - 00001147 _____ () C:\Users\Internet\Desktop\Sharkoon Mouse Config.lnk
2014-05-06 21:32 - 2014-05-06 21:32 - 00001378 _____ () C:\Users\Public\Desktop\GeForce Experience.lnk
2014-05-06 21:32 - 2014-05-06 21:31 - 00000000 ____D () C:\Users\Internet\AppData\Local\NVIDIA Corporation
2014-05-06 21:32 - 2014-05-04 18:37 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation
2014-05-06 21:32 - 2014-05-04 18:37 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2014-05-06 21:31 - 2014-05-06 21:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2014-05-06 21:22 - 2014-05-06 21:22 - 00000000 ____D () C:\Users\Internet\AppData\Roaming\MingGuan
2014-05-06 21:20 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-05-06 21:20 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-05-06 21:20 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files\Windows Defender
2014-05-06 21:20 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files (x86)\Windows Defender
2014-05-06 21:11 - 2014-05-06 21:11 - 00000000 ____D () C:\Users\Internet\Documents\My Games
2014-05-06 21:11 - 2014-05-06 21:11 - 00000000 ____D () C:\Users\Internet\AppData\Roaming\Macromedia
2014-05-06 21:11 - 2014-05-06 20:54 - 00000000 ____D () C:\Users\Internet\AppData\Local\Runic Games
2014-05-06 20:54 - 2014-05-06 20:54 - 00000841 _____ () C:\Users\Internet\Desktop\Torchlight 2.lnk
2014-05-06 20:54 - 2014-05-06 20:54 - 00000000 ____D () C:\Users\Internet\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Torchlight 2
2014-05-06 18:54 - 2014-05-06 18:54 - 00000000 ___RD () C:\WINDOWS\BrowserChoice
2014-05-06 18:54 - 2014-05-03 16:25 - 00000000 ____D () C:\Users\Internet\AppData\Local\Packages
2014-05-06 18:53 - 2014-05-06 18:53 - 00000000 ____D () C:\Users\Default\AppData\Local\Microsoft Help
2014-05-06 18:53 - 2014-05-06 18:53 - 00000000 ____D () C:\Users\Default User\AppData\Local\Microsoft Help
2014-05-06 18:41 - 2014-05-06 18:41 - 01192533 _____ () C:\WINDOWS\unins000.exe
2014-05-06 18:41 - 2014-05-06 18:41 - 00017202 _____ () C:\WINDOWS\unins000.dat
2014-05-06 18:41 - 2014-05-06 18:41 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Drakonia Black
2014-05-05 22:11 - 2014-05-05 22:11 - 00001216 _____ () C:\Users\Internet\Desktop\Microsoft PowerPoint 2010.lnk
2014-05-05 22:11 - 2014-05-05 22:11 - 00001203 _____ () C:\Users\Internet\Desktop\Microsoft Word 2010.lnk
2014-05-05 22:09 - 2014-05-05 22:09 - 00001216 _____ () C:\Users\Internet\Desktop\Microsoft Access 2010.lnk
2014-05-05 22:09 - 2014-05-05 22:09 - 00001187 _____ () C:\Users\Internet\Desktop\Microsoft Excel 2010.lnk
2014-05-05 22:07 - 2014-05-05 22:07 - 00000000 ____D () C:\Program Files (x86)\Microsoft Office
2014-05-05 22:05 - 2014-05-05 22:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SharePoint
2014-05-05 22:05 - 2014-05-05 22:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
2014-05-05 22:05 - 2014-05-04 19:29 - 00000000 ____D () C:\Program Files (x86)\MSBuild
2014-05-05 22:05 - 2014-03-18 11:40 - 00000000 ____D () C:\WINDOWS\ShellNew
2014-05-05 22:04 - 2014-05-05 22:04 - 00000000 ____D () C:\WINDOWS\PCHEALTH
2014-05-05 22:04 - 2014-05-05 22:04 - 00000000 ____D () C:\Program Files (x86)\Microsoft Synchronization Services
2014-05-05 22:04 - 2014-05-05 22:04 - 00000000 ____D () C:\Program Files (x86)\Microsoft Sync Framework
2014-05-05 22:04 - 2014-05-05 22:04 - 00000000 ____D () C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2014-05-05 22:04 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared
2014-05-05 22:02 - 2014-05-05 22:02 - 00000000 ____D () C:\Program Files\Microsoft Office
2014-05-05 22:02 - 2014-05-05 22:02 - 00000000 ____D () C:\Program Files (x86)\Microsoft Visual Studio 8
2014-05-05 22:02 - 2014-05-05 22:02 - 00000000 ____D () C:\Program Files (x86)\Microsoft Analysis Services
2014-05-05 21:32 - 2014-05-05 21:32 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip
2014-05-05 21:13 - 2014-05-05 21:13 - 00084720 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avnetflt.sys
2014-05-05 00:05 - 2014-05-05 00:05 - 00000000 ____D () C:\Program Files\Lexmark ScanBack
2014-05-05 00:05 - 2014-05-05 00:05 - 00000000 ____D () C:\Program Files (x86)\Lexmark ScanBack
2014-05-05 00:05 - 2014-05-04 23:54 - 00076123 _____ () C:\WINDOWS\system32\LexFiles.ulf
2014-05-05 00:05 - 2014-05-04 23:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lexmark
2014-05-05 00:01 - 2014-05-05 00:01 - 00000000 ____D () C:\Program Files\Lexmark Status Monitor Center
2014-05-05 00:00 - 2014-05-05 00:00 - 00000000 ____D () C:\Program Files\Lexmark Network TWAIN Driver
2014-05-05 00:00 - 2014-05-05 00:00 - 00000000 ____D () C:\Program Files (x86)\Lexmark Network TWAIN Driver
2014-05-05 00:00 - 2014-05-05 00:00 - 00000000 ____D () C:\Program Files (x86)\Lexmark
2014-05-04 23:59 - 2014-05-04 23:59 - 00000000 ____D () C:\ProgramData\APP
2014-05-04 23:54 - 2014-05-04 23:54 - 00000000 ____D () C:\Program Files\Lexmark Universal v2
2014-05-04 23:52 - 2014-05-04 23:52 - 00000000 ____D () C:\ProgramData\UD1
2014-05-04 23:35 - 2014-05-04 23:35 - 00000719 _____ () C:\Users\Internet\Desktop\mp3DirectCut.lnk
2014-05-04 23:29 - 2014-05-04 23:29 - 00000659 _____ () C:\Users\Public\Desktop\Winamp.lnk
2014-05-04 23:29 - 2014-05-04 23:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Winamp
2014-05-04 23:15 - 2014-05-04 23:15 - 00000000 ____D () C:\Users\Internet\AppData\Roaming\Avira
2014-05-04 23:14 - 2014-05-04 23:14 - 00000914 _____ () C:\Users\Public\Desktop\Avira Control Center.lnk
2014-05-04 23:14 - 2014-05-04 23:14 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2014-05-04 23:14 - 2014-05-04 23:02 - 00000000 ____D () C:\ProgramData\Avira
2014-05-04 23:12 - 2014-05-03 17:51 - 00000000 ____D () C:\Program Files (x86)\avira
2014-05-04 23:07 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\restore
2014-05-04 21:41 - 2014-05-04 21:41 - 00000647 _____ () C:\Users\Public\Desktop\Steam.lnk
2014-05-04 21:41 - 2014-05-04 21:41 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
2014-05-04 20:47 - 2014-05-04 20:47 - 00000000 ____D () C:\Users\Internet\AppData\Roaming\Mozilla
2014-05-04 20:47 - 2014-05-04 20:47 - 00000000 ____D () C:\Users\Internet\AppData\Local\Mozilla
2014-05-04 20:45 - 2014-05-04 20:45 - 00001465 _____ () C:\Users\Internet\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-05-04 20:45 - 2014-05-04 20:45 - 00000020 ___SH () C:\Users\Internet\ntuser.ini
2014-05-04 20:45 - 2014-05-03 16:25 - 00000000 ___RD () C:\Users\Internet\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-05-04 20:45 - 2014-05-03 16:25 - 00000000 ___RD () C:\Users\Internet\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-05-04 19:34 - 2014-05-04 19:34 - 03408896 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2014-05-04 19:34 - 2014-05-04 19:34 - 01705984 _____ (Microsoft Corporation) C:\WINDOWS\system32\wucltux.dll
2014-05-04 19:34 - 2014-05-04 19:34 - 00381952 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUSettingsProvider.dll
2014-05-04 19:34 - 2014-05-04 19:34 - 00190976 _____ (Microsoft Corporation) C:\WINDOWS\system32\storewuauth.dll
2014-05-04 19:34 - 2014-05-04 19:34 - 00054776 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2014-05-04 19:33 - 2014-05-04 19:33 - 21232792 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 18679216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 16875520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 13286400 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 12732416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 11791360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 08653824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 07425368 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2014-05-04 19:33 - 2014-05-04 19:33 - 06641152 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 05833728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Search.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 05770752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 04268544 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncEngine.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 02900992 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 02641920 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 02519384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2014-05-04 19:33 - 2014-05-04 19:33 - 02479616 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmSvc.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 02373784 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2014-05-04 19:33 - 2014-05-04 19:33 - 02331000 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 02317824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 02270208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 02141912 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 02133504 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 02088160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2014-05-04 19:33 - 2014-05-04 19:33 - 02030080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WsmSvc.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 02013016 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2014-05-04 19:33 - 2014-05-04 19:33 - 01843712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Display.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 01816576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Display.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 01779800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 01764864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 01679128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 01656832 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 01557848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2014-05-04 19:33 - 2014-05-04 19:33 - 01542768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 01527296 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 01466864 _____ (Microsoft Corporation) C:\WINDOWS\system32\propsys.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 01411584 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 01351168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 01339240 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 01306624 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 01291200 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel32.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 01230336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 01200296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\propsys.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 01129472 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFolder.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 01112536 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 01095488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 01066496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 01063424 _____ (Microsoft Corporation) C:\WINDOWS\system32\IKEEXT.DLL
2014-05-04 19:33 - 2014-05-04 19:33 - 01057280 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdvidcrl.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 01054208 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.appcore.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 01036288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kernel32.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 01023488 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 01015808 _____ (Microsoft Corporation) C:\WINDOWS\system32\aclui.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00958464 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00950784 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgent.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00939520 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00924160 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00918528 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00888320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00887296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aclui.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00872448 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDrive.exe
2014-05-04 19:33 - 2014-05-04 19:33 - 00855552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdvidcrl.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00839168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchFolder.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00836096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00834560 _____ (Microsoft Corporation) C:\WINDOWS\system32\netlogon.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00834048 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00828928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.appcore.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00827392 _____ (Microsoft Corporation) C:\WINDOWS\system32\BFE.DLL
2014-05-04 19:33 - 2014-05-04 19:33 - 00801792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00800256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReAgent.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00755712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00731648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\adtschema.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00731648 _____ (Microsoft Corporation) C:\WINDOWS\system32\adtschema.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00721408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveTelemetry.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00717312 _____ (Microsoft Corporation) C:\WINDOWS\system32\nshwfp.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00688640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netlogon.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00679424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys
2014-05-04 19:33 - 2014-05-04 19:33 - 00669696 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasapi32.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00655360 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsapi.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00629760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmCoreR.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00621568 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAgent.exe
2014-05-04 19:33 - 2014-05-04 19:33 - 00605184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasapi32.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00567296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nshwfp.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00565536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2014-05-04 19:33 - 2014-05-04 19:33 - 00542208 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.Printing.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00518552 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00512000 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidprov.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00494592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dnsapi.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00492256 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00488280 _____ (Microsoft Corporation) C:\WINDOWS\system32\netcfgx.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00467800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS
2014-05-04 19:33 - 2014-05-04 19:33 - 00467504 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00463264 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00462336 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlangpui.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00443904 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansec.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00443392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\nwifi.sys
2014-05-04 19:33 - 2014-05-04 19:33 - 00428888 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS
2014-05-04 19:33 - 2014-05-04 19:33 - 00425984 _____ (Microsoft Corporation) C:\WINDOWS\system32\clusapi.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00412672 _____ (Microsoft Corporation) C:\WINDOWS\system32\FWPUCLNT.DLL
2014-05-04 19:33 - 2014-05-04 19:33 - 00406912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00406512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00402944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
2014-05-04 19:33 - 2014-05-04 19:33 - 00402432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Graphics.Printing.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00390488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netcfgx.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00388408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00387210 _____ () C:\WINDOWS\system32\ApnDatabase.xml
2014-05-04 19:33 - 2014-05-04 19:33 - 00386560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlangpui.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00379224 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2014-05-04 19:33 - 2014-05-04 19:33 - 00376152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys
2014-05-04 19:33 - 2014-05-04 19:33 - 00370176 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanmsm.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00364640 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00360512 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfreadwrite.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00356864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlidprov.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00356848 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcomp.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00355832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfreadwrite.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00337752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Classpnp.sys
2014-05-04 19:33 - 2014-05-04 19:33 - 00334848 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDEServer.exe
2014-05-04 19:33 - 2014-05-04 19:33 - 00326024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00325632 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationApi.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00324096 _____ (Microsoft Corporation) C:\WINDOWS\system32\SessEnv.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00313344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\clusapi.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00305768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00300544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanmsm.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00299008 _____ (Microsoft Corporation) C:\WINDOWS\system32\pdh.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00298496 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSDMon.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00296960 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanapi.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00291840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Sensors.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00283648 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb10.sys
2014-05-04 19:33 - 2014-05-04 19:33 - 00280576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SessEnv.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00274944 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmWmiPl.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00271872 _____ (Microsoft Corporation) C:\WINDOWS\system32\spp.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00264192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FWPUCLNT.DLL
2014-05-04 19:33 - 2014-05-04 19:33 - 00262656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LocationApi.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00254976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pdh.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00254464 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsrslvr.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00252928 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00247296 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsApi.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00245760 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srvnet.sys
2014-05-04 19:33 - 2014-05-04 19:33 - 00244888 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2014-05-04 19:33 - 2014-05-04 19:33 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanapi.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00226304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Sensors.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00222720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\spp.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00222720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dcomp.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00220160 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00212992 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdd.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00201216 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReInfo.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00201216 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00197632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00192000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Scanners.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00186368 _____ (Microsoft Corporation) C:\WINDOWS\system32\dafWfdProvider.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00180056 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2014-05-04 19:33 - 2014-05-04 19:33 - 00172544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReInfo.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00171008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SensorsApi.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00160768 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxAllUserStore.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00157016 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wof.sys
2014-05-04 19:33 - 2014-05-04 19:33 - 00151040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Scanners.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxdav.sys
2014-05-04 19:33 - 2014-05-04 19:33 - 00139776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxAllUserStore.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00136024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wfplwfs.sys
2014-05-04 19:33 - 2014-05-04 19:33 - 00134144 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dfsc.sys
2014-05-04 19:33 - 2014-05-04 19:33 - 00115200 _____ (Microsoft Corporation) C:\WINDOWS\system32\umpnpmgr.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00115200 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevPropMgr.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00113648 _____ (Microsoft Corporation) C:\WINDOWS\system32\userenv.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidclass.sys
2014-05-04 19:33 - 2014-05-04 19:33 - 00110592 _____ (Microsoft Corporation) C:\WINDOWS\system32\drvinst.exe
2014-05-04 19:33 - 2014-05-04 19:33 - 00102912 _____ (Microsoft Corporation) C:\WINDOWS\system32\davclnt.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00098816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\drvinst.exe
2014-05-04 19:33 - 2014-05-04 19:33 - 00094016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\userenv.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00086016 _____ (Microsoft Corporation) C:\WINDOWS\system32\RMapi.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\davclnt.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\sxproxy.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00079360 _____ (Microsoft Corporation) C:\WINDOWS\system32\w32tm.exe
2014-05-04 19:33 - 2014-05-04 19:33 - 00079360 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\IPMIDrv.sys
2014-05-04 19:33 - 2014-05-04 19:33 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\w32tm.exe
2014-05-04 19:33 - 2014-05-04 19:33 - 00069120 _____ (Microsoft Corporation) C:\WINDOWS\system32\l2gpstore.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsgqec.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\l2gpstore.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00057856 _____ (Microsoft Corporation) C:\WINDOWS\system32\drvcfg.exe
2014-05-04 19:33 - 2014-05-04 19:33 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tsgqec.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpipreg.sys
2014-05-04 19:33 - 2014-05-04 19:33 - 00040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Shell.Search.UriHandler.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00040448 _____ (Microsoft Corporation) C:\WINDOWS\system32\SetNetworkLocation.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Shell.Search.UriHandler.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sxproxy.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidusb.sys
2014-05-04 19:33 - 2014-05-04 19:33 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredentialMigrationHandler.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredentialMigrationHandler.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanhlp.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanhlp.dll
2014-05-04 19:33 - 2013-08-22 17:36 - 00000000 ___RD () C:\WINDOWS\ToastData
2014-05-04 19:33 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\setup
2014-05-04 19:31 - 2014-05-04 19:31 - 23547904 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2014-05-04 19:31 - 2014-05-04 19:31 - 17384448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2014-05-04 19:31 - 2014-05-04 19:31 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2014-05-04 19:31 - 2014-05-04 19:31 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2014-05-04 19:29 - 2014-05-04 19:29 - 00000000 ____D () C:\WINDOWS\SysWOW64\XPSViewer
2014-05-04 19:29 - 2014-05-04 19:29 - 00000000 ____D () C:\Program Files\Reference Assemblies
2014-05-04 19:29 - 2014-05-04 19:29 - 00000000 ____D () C:\Program Files\MSBuild
2014-05-04 19:29 - 2014-05-04 19:29 - 00000000 ____D () C:\Program Files (x86)\Reference Assemblies
2014-05-04 19:14 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\NDF
2014-05-04 19:09 - 2014-05-04 19:35 - 00000000 ___DC () C:\WINDOWS\Panther
2014-05-04 19:03 - 2014-05-04 19:03 - 00000000 _SHDL () C:\Users\Default\Vorlagen
2014-05-04 19:03 - 2014-05-04 19:03 - 00000000 _SHDL () C:\Users\Default\Startmenü
2014-05-04 19:03 - 2014-05-04 19:03 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung
2014-05-04 19:03 - 2014-05-04 19:03 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen
2014-05-04 19:03 - 2014-05-04 19:03 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien
2014-05-04 19:03 - 2014-05-04 19:03 - 00000000 _SHDL () C:\Users\Default\Druckumgebung
2014-05-04 19:03 - 2014-05-04 19:03 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik
2014-05-04 19:03 - 2014-05-04 19:03 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder
2014-05-04 19:03 - 2014-05-04 19:03 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-05-04 19:03 - 2014-05-04 19:03 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf
2014-05-04 19:03 - 2014-05-04 19:03 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten
2014-05-04 19:03 - 2014-05-04 19:03 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten
2014-05-04 19:03 - 2014-05-04 19:03 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik
2014-05-04 19:03 - 2014-05-04 19:03 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder
2014-05-04 19:03 - 2014-05-04 19:03 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-05-04 19:03 - 2014-05-04 19:03 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf
2014-05-04 19:03 - 2014-05-04 19:03 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten
2014-05-04 19:03 - 2014-05-04 18:47 - 00036198 _____ () C:\WINDOWS\diagwrn.xml
2014-05-04 19:03 - 2014-05-04 18:47 - 00036198 _____ () C:\WINDOWS\diagerr.xml
2014-05-04 19:03 - 2014-05-04 18:16 - 00006599 _____ () C:\WINDOWS\comsetup.log
2014-05-04 19:03 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\Registration
2014-05-04 19:03 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files\Windows NT
2014-05-04 19:03 - 2013-08-22 15:36 - 00000000 __RHD () C:\Users\Default
2014-05-04 18:58 - 2014-05-04 18:58 - 00022960 _____ () C:\WINDOWS\system32\emptyregdb.dat
2014-05-04 18:57 - 2013-08-22 17:36 - 00000000 __RSD () C:\WINDOWS\Media
2014-05-04 18:57 - 2013-08-22 17:36 - 00000000 __RHD () C:\Users\Public\Libraries
2014-05-04 18:56 - 2013-12-01 11:22 - 01804472 _____ () C:\WINDOWS\SysWOW64\PerfStringBackup.INI
2014-05-04 18:52 - 2014-05-04 18:52 - 00000000 ____D () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Lenovo
2014-05-04 18:52 - 2014-05-04 18:52 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Lenovo
2014-05-04 18:52 - 2014-05-03 18:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDF-XChange PDF Viewer
2014-05-04 18:52 - 2013-12-01 11:55 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneKey Recovery
2014-05-04 18:52 - 2013-12-01 11:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lenovo
2014-05-04 18:52 - 2013-12-01 11:31 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel PROSet Wireless
2014-05-04 18:52 - 2013-12-01 11:22 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel
2014-05-04 18:52 - 2013-12-01 11:19 - 00000000 ____D () C:\WINDOWS\SysWOW64\Atheros_L1e
2014-05-04 18:52 - 2013-08-22 17:37 - 00004893 _____ () C:\WINDOWS\DtcInstall.log
2014-05-04 18:52 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\system32\Sysprep
2014-05-04 18:52 - 2012-07-26 07:37 - 00000000 ____D () C:\Users\Default.migrated
2014-05-04 18:51 - 2014-05-04 18:51 - 00001547 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2014-05-04 18:51 - 2014-03-18 11:25 - 00000000 ____D () C:\WINDOWS\SysWOW64\winrm
2014-05-04 18:51 - 2014-03-18 11:25 - 00000000 ____D () C:\WINDOWS\SysWOW64\WCN
2014-05-04 18:51 - 2014-03-18 11:25 - 00000000 ____D () C:\WINDOWS\SysWOW64\sysprep
2014-05-04 18:51 - 2014-03-18 11:25 - 00000000 ____D () C:\WINDOWS\SysWOW64\slmgr
2014-05-04 18:51 - 2014-03-18 11:25 - 00000000 ____D () C:\WINDOWS\SysWOW64\Printing_Admin_Scripts
2014-05-04 18:51 - 2014-03-18 11:25 - 00000000 ____D () C:\WINDOWS\system32\winrm
2014-05-04 18:51 - 2014-03-18 11:25 - 00000000 ____D () C:\WINDOWS\system32\WCN
2014-05-04 18:51 - 2014-03-18 11:25 - 00000000 ____D () C:\WINDOWS\system32\slmgr
2014-05-04 18:51 - 2014-03-18 11:25 - 00000000 ____D () C:\WINDOWS\system32\Printing_Admin_Scripts
2014-05-04 18:51 - 2013-08-22 17:43 - 00000000 ____D () C:\WINDOWS\DigitalLocker
2014-05-04 18:51 - 2013-08-22 17:36 - 00000000 ___RD () C:\WINDOWS\ImmersiveControlPanel
2014-05-04 18:51 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\WinStore
2014-05-04 18:51 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\MUI
2014-05-04 18:51 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\migwiz
2014-05-04 18:51 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\IME
2014-05-04 18:51 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\WinBioPlugIns
2014-05-04 18:51 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\SystemResetPlatform
2014-05-04 18:51 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\spool
2014-05-04 18:51 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\MUI
2014-05-04 18:51 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\IME
2014-05-04 18:51 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\IME
2014-05-04 18:51 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\Help
2014-05-04 18:51 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\SMI
2014-05-04 18:51 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\system32\oobe
2014-05-04 18:49 - 2014-05-03 12:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Seagate
2014-05-04 18:49 - 2014-03-18 11:40 - 00000000 ____D () C:\Program Files\Windows Journal
2014-05-04 18:49 - 2013-08-22 17:36 - 00000000 __SHD () C:\Program Files\Windows Sidebar
2014-05-04 18:49 - 2013-08-22 17:36 - 00000000 __SHD () C:\Program Files (x86)\Windows Sidebar
2014-05-04 18:49 - 2013-03-25 23:03 - 00000000 ____D () C:\ProgramData\PRICache
2014-05-04 18:48 - 2014-05-04 18:47 - 00000000 ___RD () C:\Users\Internet\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-05-04 18:48 - 2014-05-04 18:47 - 00000000 ___RD () C:\Users\Internet\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-05-04 18:48 - 2014-05-03 16:25 - 00000000 ____D () C:\Users\Internet\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Lenovo
2014-05-04 18:48 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\Recovery
2014-05-04 18:47 - 2014-05-04 18:47 - 00000000 _SHDL () C:\Users\Internet\Vorlagen
2014-05-04 18:47 - 2014-05-04 18:47 - 00000000 _SHDL () C:\Users\Internet\Startmenü
2014-05-04 18:47 - 2014-05-04 18:47 - 00000000 _SHDL () C:\Users\Internet\Netzwerkumgebung
2014-05-04 18:47 - 2014-05-04 18:47 - 00000000 _SHDL () C:\Users\Internet\Lokale Einstellungen
2014-05-04 18:47 - 2014-05-04 18:47 - 00000000 _SHDL () C:\Users\Internet\Eigene Dateien
2014-05-04 18:47 - 2014-05-04 18:47 - 00000000 _SHDL () C:\Users\Internet\Druckumgebung
2014-05-04 18:47 - 2014-05-04 18:47 - 00000000 _SHDL () C:\Users\Internet\Documents\Eigene Musik
2014-05-04 18:47 - 2014-05-04 18:47 - 00000000 _SHDL () C:\Users\Internet\Documents\Eigene Bilder
2014-05-04 18:47 - 2014-05-04 18:47 - 00000000 _SHDL () C:\Users\Internet\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-05-04 18:47 - 2014-05-04 18:47 - 00000000 _SHDL () C:\Users\Internet\AppData\Local\Verlauf
2014-05-04 18:47 - 2014-05-04 18:47 - 00000000 _SHDL () C:\Users\Internet\AppData\Local\Anwendungsdaten
2014-05-04 18:47 - 2014-05-04 18:47 - 00000000 _SHDL () C:\Users\Internet\Anwendungsdaten
2014-05-04 18:44 - 2014-05-04 19:28 - 00000000 ____D () C:\Recovery
2014-05-04 18:40 - 2014-05-04 18:40 - 00000000 ____D () C:\WINDOWS\SysWOW64\RTCOM
2014-05-04 18:40 - 2014-05-04 18:40 - 00000000 ____D () C:\Program Files\Realtek
2014-05-04 18:40 - 2014-05-04 18:37 - 00000000 ____D () C:\Program Files\Elantech
2014-05-04 18:40 - 2013-08-22 16:46 - 00000084 _____ () C:\WINDOWS\setuperr.log
2014-05-04 18:20 - 2013-12-01 10:50 - 02088056 _____ () C:\WINDOWS\WindowsUpdate (1).log
2014-05-04 10:29 - 2013-12-01 11:52 - 00000000 ____D () C:\Program Files\mcafee.com
2014-05-04 10:21 - 2014-05-04 10:21 - 00000000 ____D () C:\ProgramData\Intel(R) Update Manager
2014-05-04 10:17 - 2012-07-26 10:12 - 00000000 ____D () C:\WINDOWS\AUInstallAgent
2014-05-04 10:15 - 2014-05-04 10:15 - 00000751 _____ () C:\Users\Internet\Desktop\KeePass 2.lnk
2014-05-03 18:28 - 2013-12-01 11:47 - 00000000 ____D () C:\ProgramData\CyberLink
2014-05-03 18:26 - 2013-12-01 11:55 - 00000000 ____D () C:\ProgramData\Office2013
2014-05-03 18:25 - 2014-05-03 18:25 - 00000751 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KeePass 2.lnk
2014-05-03 18:15 - 2014-05-03 18:14 - 00000000 ____D () C:\WINDOWS\system32\MRT
2014-05-03 18:07 - 2014-05-03 18:07 - 00000843 _____ () C:\Users\Public\Desktop\PDF-Viewer.lnk
2014-05-03 17:57 - 2014-05-03 17:57 - 00000000 ____D () C:\ProgramData\Energy Management
2014-05-03 17:57 - 2014-05-03 17:57 - 00000000 ____D () C:\ProgramData\eBay
2014-05-03 17:57 - 2013-12-01 19:24 - 00108896 ____H () C:\WINDOWS\modules.log
2014-05-03 17:52 - 2014-05-03 17:52 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Musik
2014-05-03 17:52 - 2014-05-03 17:52 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Bilder
2014-05-03 17:52 - 2014-05-03 17:52 - 00000000 _SHDL () C:\Users\Default.migrated\Vorlagen
2014-05-03 17:52 - 2014-05-03 17:52 - 00000000 _SHDL () C:\Users\Default.migrated\Startmenü
2014-05-03 17:52 - 2014-05-03 17:52 - 00000000 _SHDL () C:\Users\Default.migrated\Netzwerkumgebung
2014-05-03 17:52 - 2014-05-03 17:52 - 00000000 _SHDL () C:\Users\Default.migrated\Lokale Einstellungen
2014-05-03 17:52 - 2014-05-03 17:52 - 00000000 _SHDL () C:\Users\Default.migrated\Eigene Dateien
2014-05-03 17:52 - 2014-05-03 17:52 - 00000000 _SHDL () C:\Users\Default.migrated\Druckumgebung
2014-05-03 17:52 - 2014-05-03 17:52 - 00000000 _SHDL () C:\Users\Default.migrated\Documents\Eigene Musik
2014-05-03 17:52 - 2014-05-03 17:52 - 00000000 _SHDL () C:\Users\Default.migrated\Documents\Eigene Bilder
2014-05-03 17:52 - 2014-05-03 17:52 - 00000000 _SHDL () C:\Users\Default.migrated\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-05-03 17:52 - 2014-05-03 17:52 - 00000000 _SHDL () C:\Users\Default.migrated\AppData\Local\Verlauf
2014-05-03 17:52 - 2014-05-03 17:52 - 00000000 _SHDL () C:\Users\Default.migrated\AppData\Local\Anwendungsdaten
2014-05-03 17:52 - 2014-05-03 17:52 - 00000000 _SHDL () C:\Users\Default.migrated\Anwendungsdaten
2014-05-03 17:52 - 2014-05-03 17:52 - 00000000 _SHDL () C:\Programme
2014-05-03 17:52 - 2014-05-03 17:52 - 00000000 _SHDL () C:\ProgramData\Vorlagen
2014-05-03 17:52 - 2014-05-03 17:52 - 00000000 _SHDL () C:\ProgramData\Startmenü
2014-05-03 17:52 - 2014-05-03 17:52 - 00000000 _SHDL () C:\ProgramData\Microsoft\Windows\Start Menu\Programme
2014-05-03 17:52 - 2014-05-03 17:52 - 00000000 _SHDL () C:\ProgramData\Dokumente
2014-05-03 17:52 - 2014-05-03 17:52 - 00000000 _SHDL () C:\ProgramData\Anwendungsdaten
2014-05-03 17:52 - 2014-05-03 17:52 - 00000000 _SHDL () C:\Program Files\Gemeinsame Dateien
2014-05-03 17:52 - 2014-05-03 17:52 - 00000000 _SHDL () C:\Dokumente und Einstellungen
2014-05-03 17:43 - 2013-12-01 11:51 - 00000000 ____D () C:\ProgramData\McAfee
2014-05-03 17:38 - 2012-07-26 10:12 - 00000000 ___HD () C:\WINDOWS\ELAMBKUP
2014-05-03 17:34 - 2013-12-01 11:41 - 00000000 ____D () C:\Program Files (x86)\Lenovo DE
2014-05-03 17:07 - 2014-05-03 17:07 - 00000773 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-05-03 17:07 - 2014-05-03 17:07 - 00000000 ____D () C:\ProgramData\Mozilla
2014-05-03 17:07 - 2014-05-03 17:07 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-05-03 16:49 - 2014-05-03 16:49 - 00000000 ____D () C:\ProgramData\tmp
2014-05-03 16:49 - 2014-05-03 16:49 - 00000000 ____D () C:\ProgramData\hps
2014-05-03 16:27 - 2014-05-03 16:27 - 00000355 _____ () C:\Users\Internet\Desktop\Computer.lnk
2014-05-03 16:26 - 2014-05-03 16:26 - 00000000 ____D () C:\Users\Internet\AppData\Roaming\Intel Corporation
2014-05-03 16:25 - 2014-05-03 16:25 - 00000000 ____D () C:\Users\Internet\AppData\Roaming\Intel
2014-05-03 16:25 - 2014-05-03 16:25 - 00000000 ____D () C:\Users\Internet\AppData\Roaming\Adobe
2014-05-03 16:25 - 2014-05-03 16:25 - 00000000 ____D () C:\Users\Internet\AppData\Local\VirtualStore
2014-05-03 12:11 - 2014-05-03 12:10 - 00000000 ____D () C:\ProgramData\Seagate
2014-05-03 12:10 - 2014-05-03 12:10 - 01462560 _____ (Acronis International GmbH) C:\WINDOWS\system32\Drivers\tdrpman.sys
2014-05-03 12:10 - 2014-05-03 12:10 - 01120032 _____ (Acronis International GmbH) C:\WINDOWS\system32\Drivers\tib.sys
2014-05-03 12:10 - 2014-05-03 12:10 - 00233760 _____ (Acronis) C:\WINDOWS\system32\Drivers\snapman.sys
2014-05-03 12:10 - 2014-05-03 12:10 - 00183224 _____ (Acronis) C:\WINDOWS\system32\Drivers\tib_mounter.sys
2014-05-03 12:10 - 2014-05-03 12:10 - 00108832 _____ (Acronis International GmbH) C:\WINDOWS\system32\Drivers\fltsrv.sys
2014-05-03 12:10 - 2014-05-03 12:10 - 00000928 _____ () C:\Users\Public\Desktop\Seagate DiscWizard.lnk
2014-05-03 12:10 - 2014-05-03 12:10 - 00000000 ____D () C:\ProgramData\Acronis
2014-04-30 20:27 - 2014-05-06 21:32 - 01081112 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvspcap.dll
2014-04-30 20:26 - 2014-05-06 21:32 - 01225920 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvspcap64.dll
2014-04-23 02:24 - 2013-08-22 17:38 - 00693240 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2014-04-23 02:24 - 2013-08-22 17:38 - 00105464 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl

Some content of TEMP:
====================
C:\Users\Internet\AppData\Local\Temp\avgnt.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit

==================== End Of Log ============================
Gmer
GMER Logfile:
Code:
ATTFilter
GMER 2.1.19357 - hxxp://www.gmer.net
Rootkit scan 2014-05-14 18:34:23
Windows 6.2.9200  x64 \Device\Harddisk0\DR0 -> \Device\00000032 ST1000LM014-1EJ164 rev.LVD3 931,51GB
Running: Gmer-19357.exe; Driver: C:\Users\THORST~1\AppData\Local\Temp\kwloauog.sys


---- User code sections - GMER 2.1 ----

.text   C:\WINDOWS\system32\WLANExt.exe[1300] C:\WINDOWS\system32\PSAPI.DLL!GetModuleBaseNameA + 506                                 00007ffc38a5169a 4 bytes [A5, 38, FC, 7F]
.text   C:\WINDOWS\system32\WLANExt.exe[1300] C:\WINDOWS\system32\PSAPI.DLL!GetModuleBaseNameA + 514                                 00007ffc38a516a2 4 bytes [A5, 38, FC, 7F]
.text   C:\WINDOWS\system32\WLANExt.exe[1300] C:\WINDOWS\system32\PSAPI.DLL!QueryWorkingSet + 118                                    00007ffc38a5181a 4 bytes [A5, 38, FC, 7F]
.text   C:\WINDOWS\system32\WLANExt.exe[1300] C:\WINDOWS\system32\PSAPI.DLL!QueryWorkingSet + 142                                    00007ffc38a51832 4 bytes [A5, 38, FC, 7F]
.text   C:\Program Files\Intel\WiFi\bin\EvtEng.exe[1824] C:\WINDOWS\system32\PSAPI.DLL!GetModuleBaseNameA + 506                      00007ffc38a5169a 4 bytes [A5, 38, FC, 7F]
.text   C:\Program Files\Intel\WiFi\bin\EvtEng.exe[1824] C:\WINDOWS\system32\PSAPI.DLL!GetModuleBaseNameA + 514                      00007ffc38a516a2 4 bytes [A5, 38, FC, 7F]
.text   C:\Program Files\Intel\WiFi\bin\EvtEng.exe[1824] C:\WINDOWS\system32\PSAPI.DLL!QueryWorkingSet + 118                         00007ffc38a5181a 4 bytes [A5, 38, FC, 7F]
.text   C:\Program Files\Intel\WiFi\bin\EvtEng.exe[1824] C:\WINDOWS\system32\PSAPI.DLL!QueryWorkingSet + 142                         00007ffc38a51832 4 bytes [A5, 38, FC, 7F]
.text   C:\Program Files\Intel\WiFi\bin\EvtEng.exe[1824] C:\WINDOWS\SYSTEM32\WSOCK32.dll!setsockopt + 194                            00007ffc2d7c1f6a 4 bytes [7C, 2D, FC, 7F]
.text   C:\Program Files\Intel\WiFi\bin\EvtEng.exe[1824] C:\WINDOWS\SYSTEM32\WSOCK32.dll!setsockopt + 218                            00007ffc2d7c1f82 4 bytes [7C, 2D, FC, 7F]
.text   C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe[1140] C:\WINDOWS\system32\PSAPI.DLL!GetModuleBaseNameA + 506  00007ffc38a5169a 4 bytes [A5, 38, FC, 7F]
.text   C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe[1140] C:\WINDOWS\system32\PSAPI.DLL!GetModuleBaseNameA + 514  00007ffc38a516a2 4 bytes [A5, 38, FC, 7F]
.text   C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe[1140] C:\WINDOWS\system32\PSAPI.DLL!QueryWorkingSet + 118     00007ffc38a5181a 4 bytes [A5, 38, FC, 7F]
.text   C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe[1140] C:\WINDOWS\system32\PSAPI.DLL!QueryWorkingSet + 142     00007ffc38a51832 4 bytes [A5, 38, FC, 7F]
.text   C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe[1040] C:\WINDOWS\system32\PSAPI.DLL!GetModuleBaseNameA + 506           00007ffc38a5169a 4 bytes [A5, 38, FC, 7F]
.text   C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe[1040] C:\WINDOWS\system32\PSAPI.DLL!GetModuleBaseNameA + 514           00007ffc38a516a2 4 bytes [A5, 38, FC, 7F]
.text   C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe[1040] C:\WINDOWS\system32\PSAPI.DLL!QueryWorkingSet + 118              00007ffc38a5181a 4 bytes [A5, 38, FC, 7F]
.text   C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe[1040] C:\WINDOWS\system32\PSAPI.DLL!QueryWorkingSet + 142              00007ffc38a51832 4 bytes [A5, 38, FC, 7F]
.text   C:\WINDOWS\system32\wbem\wmiprvse.exe[2604] C:\WINDOWS\system32\PSAPI.DLL!GetModuleBaseNameA + 506                           00007ffc38a5169a 4 bytes [A5, 38, FC, 7F]
.text   C:\WINDOWS\system32\wbem\wmiprvse.exe[2604] C:\WINDOWS\system32\PSAPI.DLL!GetModuleBaseNameA + 514                           00007ffc38a516a2 4 bytes [A5, 38, FC, 7F]
.text   C:\WINDOWS\system32\wbem\wmiprvse.exe[2604] C:\WINDOWS\system32\PSAPI.DLL!QueryWorkingSet + 118                              00007ffc38a5181a 4 bytes [A5, 38, FC, 7F]
.text   C:\WINDOWS\system32\wbem\wmiprvse.exe[2604] C:\WINDOWS\system32\PSAPI.DLL!QueryWorkingSet + 142                              00007ffc38a51832 4 bytes [A5, 38, FC, 7F]
.text   C:\WINDOWS\System32\LogonUI.exe[4952] C:\WINDOWS\system32\PSAPI.DLL!GetModuleBaseNameA + 506                                 00007ffc38a5169a 4 bytes [A5, 38, FC, 7F]
.text   C:\WINDOWS\System32\LogonUI.exe[4952] C:\WINDOWS\system32\PSAPI.DLL!GetModuleBaseNameA + 514                                 00007ffc38a516a2 4 bytes [A5, 38, FC, 7F]
.text   C:\WINDOWS\System32\LogonUI.exe[4952] C:\WINDOWS\system32\PSAPI.DLL!QueryWorkingSet + 118                                    00007ffc38a5181a 4 bytes [A5, 38, FC, 7F]
.text   C:\WINDOWS\System32\LogonUI.exe[4952] C:\WINDOWS\system32\PSAPI.DLL!QueryWorkingSet + 142                                    00007ffc38a51832 4 bytes [A5, 38, FC, 7F]
.text   C:\WINDOWS\System32\dwm.exe[1220] C:\WINDOWS\system32\PSAPI.DLL!GetModuleBaseNameA + 506                                     00007ffc38a5169a 4 bytes [A5, 38, FC, 7F]
.text   C:\WINDOWS\System32\dwm.exe[1220] C:\WINDOWS\system32\PSAPI.DLL!GetModuleBaseNameA + 514                                     00007ffc38a516a2 4 bytes [A5, 38, FC, 7F]
.text   C:\WINDOWS\System32\dwm.exe[1220] C:\WINDOWS\system32\PSAPI.DLL!QueryWorkingSet + 118                                        00007ffc38a5181a 4 bytes [A5, 38, FC, 7F]
.text   C:\WINDOWS\System32\dwm.exe[1220] C:\WINDOWS\system32\PSAPI.DLL!QueryWorkingSet + 142                                        00007ffc38a51832 4 bytes [A5, 38, FC, 7F]
.text   C:\WINDOWS\system32\nvvsvc.exe[3496] C:\WINDOWS\system32\PSAPI.DLL!GetModuleBaseNameA + 506                                  00007ffc38a5169a 4 bytes [A5, 38, FC, 7F]
.text   C:\WINDOWS\system32\nvvsvc.exe[3496] C:\WINDOWS\system32\PSAPI.DLL!GetModuleBaseNameA + 514                                  00007ffc38a516a2 4 bytes [A5, 38, FC, 7F]
.text   C:\WINDOWS\system32\nvvsvc.exe[3496] C:\WINDOWS\system32\PSAPI.DLL!QueryWorkingSet + 118                                     00007ffc38a5181a 4 bytes [A5, 38, FC, 7F]
.text   C:\WINDOWS\system32\nvvsvc.exe[3496] C:\WINDOWS\system32\PSAPI.DLL!QueryWorkingSet + 142                                     00007ffc38a51832 4 bytes [A5, 38, FC, 7F]
.text   C:\WINDOWS\Explorer.EXE[6008] C:\WINDOWS\system32\PSAPI.DLL!GetModuleBaseNameA + 506                                         00007ffc38a5169a 4 bytes [A5, 38, FC, 7F]
.text   C:\WINDOWS\Explorer.EXE[6008] C:\WINDOWS\system32\PSAPI.DLL!GetModuleBaseNameA + 514                                         00007ffc38a516a2 4 bytes [A5, 38, FC, 7F]
.text   C:\WINDOWS\Explorer.EXE[6008] C:\WINDOWS\system32\PSAPI.DLL!QueryWorkingSet + 118                                            00007ffc38a5181a 4 bytes [A5, 38, FC, 7F]
.text   C:\WINDOWS\Explorer.EXE[6008] C:\WINDOWS\system32\PSAPI.DLL!QueryWorkingSet + 142                                            00007ffc38a51832 4 bytes [A5, 38, FC, 7F]

---- Threads - GMER 2.1 ----

Thread  C:\WINDOWS\system32\csrss.exe [3424:4416]                                                                                    fffff96000905b90

---- Disk sectors - GMER 2.1 ----

Disk    \Device\Harddisk0\DR0                                                                                                        unknown MBR code

---- EOF - GMER 2.1 ----
--- --- ---


So und nun doch die Logs von Antivir und MBAM:

Antivir
Code:
ATTFilter

Avira Free Antivirus
Erstellungsdatum der Reportdatei: Montag, 12. Mai 2014  19:22


Das Programm läuft als uneingeschränkte Vollversion.
Online-Dienste stehen zur Verfügung.

Lizenznehmer   : Avira Antivirus Free
Seriennummer   : 0000149996-AVHOE-0000001
Plattform      : Windows 8.1
Windowsversion : (plain)  [6.2.9200]
Boot Modus     : Normal gebootet
Benutzername   : ******** Admin
Computername   : LAPTOP********

Versionsinformationen:
BUILD.DAT      : 14.0.3.350     56624 Bytes  25.02.2014 11:41:00
AVSCAN.EXE     : 14.0.3.332   1058384 Bytes  25.02.2014 09:41:04
AVSCANRC.DLL   : 14.0.2.180     62008 Bytes  25.02.2014 09:41:04
LUKE.DLL       : 14.0.3.336     65616 Bytes  25.02.2014 09:41:05
AVSCPLR.DLL    : 14.0.3.336    124496 Bytes  25.02.2014 09:41:04
AVREG.DLL      : 14.0.3.336    250448 Bytes  25.02.2014 09:41:04
avlode.dll     : 14.0.3.336    544848 Bytes  25.02.2014 09:41:04
avlode.rdf     : 14.0.4.14      63648 Bytes  04.05.2014 21:15:38
VBASE000.VDF   : 7.11.70.0   66736640 Bytes  04.04.2013 09:41:06
VBASE001.VDF   : 7.11.74.226  2201600 Bytes  30.04.2013 09:41:06
VBASE002.VDF   : 7.11.80.60   2751488 Bytes  28.05.2013 09:41:06
VBASE003.VDF   : 7.11.85.214  2162688 Bytes  21.06.2013 09:41:06
VBASE004.VDF   : 7.11.91.176  3903488 Bytes  23.07.2013 09:41:06
VBASE005.VDF   : 7.11.98.186  6822912 Bytes  29.08.2013 09:41:06
VBASE006.VDF   : 7.11.139.38 15708672 Bytes  27.03.2014 21:15:49
VBASE007.VDF   : 7.11.145.136  2117120 Bytes  28.04.2014 21:15:51
VBASE008.VDF   : 7.11.145.137     2048 Bytes  28.04.2014 21:15:51
VBASE009.VDF   : 7.11.145.138     2048 Bytes  28.04.2014 21:15:51
VBASE010.VDF   : 7.11.145.139     2048 Bytes  28.04.2014 21:15:51
VBASE011.VDF   : 7.11.145.140     2048 Bytes  28.04.2014 21:15:51
VBASE012.VDF   : 7.11.145.141     2048 Bytes  28.04.2014 21:15:51
VBASE013.VDF   : 7.11.146.20   166912 Bytes  29.04.2014 21:15:51
VBASE014.VDF   : 7.11.146.131   194048 Bytes  01.05.2014 21:15:51
VBASE015.VDF   : 7.11.146.243   167936 Bytes  03.05.2014 21:15:51
VBASE016.VDF   : 7.11.147.97   122368 Bytes  05.05.2014 19:13:23
VBASE017.VDF   : 7.11.147.207   169472 Bytes  06.05.2014 20:24:51
VBASE018.VDF   : 7.11.148.61   174080 Bytes  08.05.2014 20:24:51
VBASE019.VDF   : 7.11.148.149   257024 Bytes  09.05.2014 16:10:44
VBASE020.VDF   : 7.11.148.241   135168 Bytes  12.05.2014 17:21:51
VBASE021.VDF   : 7.11.148.242     2048 Bytes  12.05.2014 17:21:51
VBASE022.VDF   : 7.11.148.243     2048 Bytes  12.05.2014 17:21:51
VBASE023.VDF   : 7.11.148.244     2048 Bytes  12.05.2014 17:21:51
VBASE024.VDF   : 7.11.148.245     2048 Bytes  12.05.2014 17:21:51
VBASE025.VDF   : 7.11.148.246     2048 Bytes  12.05.2014 17:21:51
VBASE026.VDF   : 7.11.148.247     2048 Bytes  12.05.2014 17:21:51
VBASE027.VDF   : 7.11.148.248     2048 Bytes  12.05.2014 17:21:51
VBASE028.VDF   : 7.11.148.249     2048 Bytes  12.05.2014 17:21:51
VBASE029.VDF   : 7.11.148.250     2048 Bytes  12.05.2014 17:21:51
VBASE030.VDF   : 7.11.148.251     2048 Bytes  12.05.2014 17:21:51
VBASE031.VDF   : 7.11.149.44   214528 Bytes  12.05.2014 17:21:51
Engineversion  : 8.3.18.18 
AEVDF.DLL      : 8.3.0.4       118976 Bytes  04.05.2014 21:15:37
AESCRIPT.DLL   : 8.1.4.202     528584 Bytes  08.05.2014 20:24:51
AESCN.DLL      : 8.3.0.2       135360 Bytes  04.05.2014 21:15:36
AESBX.DLL      : 8.2.20.24    1409224 Bytes  08.05.2014 20:24:51
AERDL.DLL      : 8.2.0.138     704888 Bytes  25.02.2014 09:41:04
AEPACK.DLL     : 8.4.0.22      778440 Bytes  04.05.2014 21:15:36
AEOFFICE.DLL   : 8.3.0.4       205000 Bytes  04.05.2014 21:15:36
AEHEUR.DLL     : 8.1.4.1054   6697160 Bytes  08.05.2014 20:24:50
AEHELP.DLL     : 8.3.0.0       274808 Bytes  04.05.2014 21:15:34
AEGEN.DLL      : 8.1.7.26      450752 Bytes  04.05.2014 21:15:34
AEEXP.DLL      : 8.4.1.312     569544 Bytes  04.05.2014 21:15:38
AEEMU.DLL      : 8.1.3.2       393587 Bytes  25.02.2014 09:41:04
AECORE.DLL     : 8.3.0.6       241864 Bytes  04.05.2014 21:15:34
AEBB.DLL       : 8.1.1.4        53619 Bytes  25.02.2014 09:41:04
AVWINLL.DLL    : 14.0.3.252     23608 Bytes  25.02.2014 09:41:05
AVPREF.DLL     : 14.0.3.252     48696 Bytes  25.02.2014 09:41:04
AVREP.DLL      : 14.0.3.252    175672 Bytes  25.02.2014 09:41:04
AVARKT.DLL     : 14.0.3.336    256080 Bytes  25.02.2014 09:41:04
AVEVTLOG.DLL   : 14.0.3.336    165968 Bytes  25.02.2014 09:41:04
SQLITE3.DLL    : 3.7.0.1       394808 Bytes  25.02.2014 09:41:06
AVSMTP.DLL     : 14.0.3.252     60472 Bytes  25.02.2014 09:41:04
NETNT.DLL      : 14.0.3.252     13368 Bytes  25.02.2014 09:41:05
RCIMAGE.DLL    : 14.0.3.260   4979256 Bytes  25.02.2014 09:41:06
RCTEXT.DLL     : 14.0.3.282     72760 Bytes  25.02.2014 09:41:06

Konfiguration für den aktuellen Suchlauf:
Job Name..............................: Vollständige Systemprüfung
Konfigurationsdatei...................: Z:\Programme\Avira\AntiVir Desktop\sysscan.avp
Protokollierung.......................: standard
Primäre Aktion........................: Reparieren
Sekundäre Aktion......................: Löschen
Durchsuche Masterbootsektoren.........: ein
Durchsuche Bootsektoren...............: ein
Bootsektoren..........................: C:, D:, Z:, 
Durchsuche aktive Programme...........: ein
Laufende Programme erweitert..........: ein
Durchsuche Registrierung..............: ein
Suche nach Rootkits...................: ein
Integritätsprüfung von Systemdateien..: ein
Prüfe alle Dateien....................: Alle Dateien
Durchsuche Archive....................: ein
Rekursionstiefe einschränken..........: 20
Archiv Smart Extensions...............: ein
Makrovirenheuristik...................: ein
Dateiheuristik........................: erweitert
Abweichende Gefahrenkategorien........: +APPL,+JOKE,+PCK,+SPR,

Beginn des Suchlaufs: Montag, 12. Mai 2014  19:22

Der Suchlauf über die Bootsektoren wird begonnen:
Bootsektor 'HDD0(C:, D:, Z:)'
    [INFO]      Es wurde kein Virus gefunden!

Der Suchlauf nach versteckten Objekten wird begonnen.
Fehler in der ARK Library

Der Suchlauf über gestartete Prozesse wird begonnen:
Durchsuche Prozess 'svchost.exe' - '48' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '31' Modul(e) wurden durchsucht
Durchsuche Prozess 'nvvsvc.exe' - '34' Modul(e) wurden durchsucht
Durchsuche Prozess 'nvSCPAPISvr.exe' - '31' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '89' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '195' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '47' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '100' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '72' Modul(e) wurden durchsucht
Durchsuche Prozess 'WLANExt.exe' - '78' Modul(e) wurden durchsucht
Durchsuche Prozess 'conhost.exe' - '12' Modul(e) wurden durchsucht
Durchsuche Prozess 'spoolsv.exe' - '80' Modul(e) wurden durchsucht
Durchsuche Prozess 'sched.exe' - '58' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '81' Modul(e) wurden durchsucht
Durchsuche Prozess 'avguard.exe' - '102' Modul(e) wurden durchsucht
Durchsuche Prozess 'EvtEng.exe' - '60' Modul(e) wurden durchsucht
Durchsuche Prozess 'HeciServer.exe' - '26' Modul(e) wurden durchsucht
Durchsuche Prozess 'ibtrksrv.exe' - '29' Modul(e) wurden durchsucht
Durchsuche Prozess 'NvNetworkService.exe' - '47' Modul(e) wurden durchsucht
Durchsuche Prozess 'nvstreamsvc.exe' - '52' Modul(e) wurden durchsucht
Durchsuche Prozess 'RegSrvc.exe' - '37' Modul(e) wurden durchsucht
Durchsuche Prozess 'schedul2.exe' - '22' Modul(e) wurden durchsucht
Durchsuche Prozess 'StarMoneyOnlineUpdate.exe' - '47' Modul(e) wurden durchsucht
Durchsuche Prozess 'VfConnectorService.exe' - '27' Modul(e) wurden durchsucht
Durchsuche Prozess 'ZeroConfigService.exe' - '82' Modul(e) wurden durchsucht
Durchsuche Prozess 'unsecapp.exe' - '23' Modul(e) wurden durchsucht
Durchsuche Prozess 'wmiprvse.exe' - '50' Modul(e) wurden durchsucht
Durchsuche Prozess 'avshadow.exe' - '29' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '32' Modul(e) wurden durchsucht
Durchsuche Prozess 'WUDFHost.exe' - '22' Modul(e) wurden durchsucht
Durchsuche Prozess 'nvstreamsvc.exe' - '50' Modul(e) wurden durchsucht
Durchsuche Prozess 'conhost.exe' - '12' Modul(e) wurden durchsucht
Durchsuche Prozess 'SearchIndexer.exe' - '60' Modul(e) wurden durchsucht
Durchsuche Prozess 'devmonsrv.exe' - '41' Modul(e) wurden durchsucht
Durchsuche Prozess 'obexsrv.exe' - '40' Modul(e) wurden durchsucht
Durchsuche Prozess 'LogonUI.exe' - '80' Modul(e) wurden durchsucht
Durchsuche Prozess 'dwm.exe' - '17' Modul(e) wurden durchsucht
Durchsuche Prozess 'IAStorDataMgrSvc.exe' - '92' Modul(e) wurden durchsucht
Durchsuche Prozess 'IntelMeFWService.exe' - '22' Modul(e) wurden durchsucht
Durchsuche Prozess 'jhi_service.exe' - '28' Modul(e) wurden durchsucht
Durchsuche Prozess 'LMS.exe' - '59' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '37' Modul(e) wurden durchsucht
Durchsuche Prozess 'dwm.exe' - '43' Modul(e) wurden durchsucht
Durchsuche Prozess 'nvxdsync.exe' - '52' Modul(e) wurden durchsucht
Durchsuche Prozess 'nvvsvc.exe' - '49' Modul(e) wurden durchsucht
Durchsuche Prozess 'wmiprvse.exe' - '56' Modul(e) wurden durchsucht
Durchsuche Prozess 'TrustedInstaller.exe' - '22' Modul(e) wurden durchsucht
Durchsuche Prozess 'TiWorker.exe' - '47' Modul(e) wurden durchsucht
Durchsuche Prozess 'nvstreamsvc.exe' - '66' Modul(e) wurden durchsucht
Durchsuche Prozess 'conhost.exe' - '15' Modul(e) wurden durchsucht
Durchsuche Prozess 'taskhostex.exe' - '40' Modul(e) wurden durchsucht
Durchsuche Prozess 'NvBackend.exe' - '67' Modul(e) wurden durchsucht
Durchsuche Prozess 'Explorer.EXE' - '191' Modul(e) wurden durchsucht
Durchsuche Prozess 'nvtray.exe' - '52' Modul(e) wurden durchsucht
Durchsuche Prozess 'ETDCtrl.exe' - '61' Modul(e) wurden durchsucht
Durchsuche Prozess 'ETDCtrlHelper.exe' - '33' Modul(e) wurden durchsucht
Durchsuche Prozess 'ETDIntelligent.exe' - '35' Modul(e) wurden durchsucht
Durchsuche Prozess 'RAVCpl64.exe' - '44' Modul(e) wurden durchsucht
Durchsuche Prozess 'RAVBg64.exe' - '45' Modul(e) wurden durchsucht
Durchsuche Prozess 'RTFTrack.exe' - '35' Modul(e) wurden durchsucht
Durchsuche Prozess 'rundll32.exe' - '53' Modul(e) wurden durchsucht
Durchsuche Prozess 'UMonit64.exe' - '42' Modul(e) wurden durchsucht
Durchsuche Prozess 'OnekeyStudio.exe' - '49' Modul(e) wurden durchsucht
Durchsuche Prozess 'Energy Management.exe' - '40' Modul(e) wurden durchsucht
Durchsuche Prozess 'utility.exe' - '33' Modul(e) wurden durchsucht
Durchsuche Prozess 'schedhlp.exe' - '30' Modul(e) wurden durchsucht
Durchsuche Prozess 'DiscWizardMonitor.exe' - '68' Modul(e) wurden durchsucht
Durchsuche Prozess 'avgnt.exe' - '94' Modul(e) wurden durchsucht
Durchsuche Prozess 'hid.exe' - '40' Modul(e) wurden durchsucht
Durchsuche Prozess 'avcenter.exe' - '131' Modul(e) wurden durchsucht
Durchsuche Prozess 'IAStorIcon.exe' - '66' Modul(e) wurden durchsucht
Durchsuche Prozess 'SearchProtocolHost.exe' - '36' Modul(e) wurden durchsucht
Durchsuche Prozess 'SearchFilterHost.exe' - '26' Modul(e) wurden durchsucht
Durchsuche Prozess 'avscan.exe' - '111' Modul(e) wurden durchsucht
Durchsuche Prozess 'vssvc.exe' - '39' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '30' Modul(e) wurden durchsucht
Durchsuche Prozess 'wininit.exe' - '17' Modul(e) wurden durchsucht
Durchsuche Prozess 'lsass.exe' - '66' Modul(e) wurden durchsucht
Durchsuche Prozess 'WinLogon.exe' - '23' Modul(e) wurden durchsucht
Durchsuche Prozess 'WinLogon.exe' - '25' Modul(e) wurden durchsucht

Untersuchung der Systemdateien wird begonnen:
Signiert -> 'C:\WINDOWS\system32\svchost.exe'
Signiert -> 'C:\WINDOWS\system32\winlogon.exe'
Signiert -> 'C:\WINDOWS\explorer.exe'
Signiert -> 'C:\WINDOWS\system32\smss.exe'
Signiert -> 'C:\WINDOWS\system32\wininet.DLL'
Signiert -> 'C:\WINDOWS\system32\wsock32.DLL'
Signiert -> 'C:\WINDOWS\system32\ws2_32.DLL'
Signiert -> 'C:\WINDOWS\system32\services.exe'
Signiert -> 'C:\WINDOWS\system32\lsass.exe'
Signiert -> 'C:\WINDOWS\system32\csrss.exe'
Signiert -> 'C:\WINDOWS\system32\drivers\kbdclass.sys'
Signiert -> 'C:\WINDOWS\system32\spoolsv.exe'
Signiert -> 'C:\WINDOWS\system32\alg.exe'
Signiert -> 'C:\WINDOWS\system32\wuauclt.exe'
Signiert -> 'C:\WINDOWS\system32\advapi32.DLL'
Signiert -> 'C:\WINDOWS\system32\user32.DLL'
Signiert -> 'C:\WINDOWS\system32\gdi32.DLL'
Signiert -> 'C:\WINDOWS\system32\kernel32.DLL'
Signiert -> 'C:\WINDOWS\system32\ntdll.DLL'
Signiert -> 'C:\WINDOWS\system32\ntoskrnl.exe'
Signiert -> 'C:\WINDOWS\system32\drivers\beep.sys'
Signiert -> 'C:\WINDOWS\system32\ctfmon.exe'
Signiert -> 'C:\WINDOWS\system32\imm32.dll'
Signiert -> 'C:\WINDOWS\system32\dsound.dll'
Signiert -> 'C:\WINDOWS\system32\aclui.dll'
Signiert -> 'C:\WINDOWS\system32\msvcrt.dll'
Signiert -> 'C:\WINDOWS\system32\d3d9.dll'
Signiert -> 'C:\WINDOWS\system32\dnsapi.dll'
Signiert -> 'C:\WINDOWS\system32\mshtml.dll'
Signiert -> 'C:\WINDOWS\system32\regsvr32.exe'
Signiert -> 'C:\WINDOWS\system32\rundll32.exe'
Signiert -> 'C:\WINDOWS\system32\userinit.exe'
Signiert -> 'C:\WINDOWS\system32\reg.exe'
Signiert -> 'C:\WINDOWS\regedit.exe'
Die Systemdateien wurden durchsucht ('34' Dateien)

Der Suchlauf auf Verweise zu ausführbaren Dateien (Registry) wird begonnen:
Die Registry wurde durchsucht ( '6670' Dateien ).


Der Suchlauf über die ausgewählten Dateien wird begonnen:

Beginne mit der Suche in 'C:\' <Windows8_OS>
C:\swapfile.sys
  [WARNUNG]   Die Datei konnte nicht geöffnet werden!
Beginne mit der Suche in 'D:\' <LENOVO>
Beginne mit der Suche in 'Z:\' <Daten>


Ende des Suchlaufs: Montag, 12. Mai 2014  21:49
Benötigte Zeit:  2:26:15 Stunde(n)

Der Suchlauf wurde vollständig durchgeführt.

  34313 Verzeichnisse wurden überprüft
 1117606 Dateien wurden geprüft
      0 Viren bzw. unerwünschte Programme wurden gefunden
      0 Dateien wurden als verdächtig eingestuft
      0 Dateien wurden gelöscht
      0 Viren bzw. unerwünschte Programme wurden repariert
      0 Dateien wurden in die Quarantäne verschoben
      0 Dateien wurden umbenannt
      1 Dateien konnten nicht durchsucht werden
 1117605 Dateien ohne Befall
  12001 Archive wurden durchsucht
      1 Warnungen
      0 Hinweise
     88 Objekte wurden beim Rootkitscan durchsucht
      0 Versteckte Objekte wurden gefunden
MBAM
Code:
ATTFilter
 Malwarebytes Anti-Malware 
www.malwarebytes.org

Suchlauf Datum: 12.05.2014
Suchlauf-Zeit: 22:20:52
Logdatei: MBAM.txt
Administrator: Nein

Version: 2.00.1.1004
Malware Datenbank: v2014.05.12.07
Rootkit Datenbank: v2014.03.27.01
Lizenz: Kostenlos
Malware Schutz: Deaktiviert
Bösartiger Webseiten Schutz: Deaktiviert
Chameleon: Deaktiviert

Betriebssystem: Windows 8.1
CPU: x64
Dateisystem: NTFS
Benutzer: Internet

Suchlauf-Art: Benutzerdefinierter Suchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 318529
Verstrichene Zeit: 24 Min, 46 Sek

Speicher: Aktiviert
Autostart: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Aktiviert
Shuriken: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

Prozesse: 0
(No malicious items detected)

Module: 0
(No malicious items detected)

Registrierungsschlüssel: 0
(No malicious items detected)

Registrierungswerte: 0
(No malicious items detected)

Registrierungsdaten: 0
(No malicious items detected)

Ordner: 0
(No malicious items detected)

Dateien: 0
(No malicious items detected)

Physische Sektoren: 0
(No malicious items detected)


(end)

Alt 15.05.2014, 12:42   #5
schrauber
/// the machine
/// TB-Ausbilder
 
Windows 8.1: Bei zugeklapptem Bildschirm öffnen sich wahllos Dateien vom Desktop - Standard

Windows 8.1: Bei zugeklapptem Bildschirm öffnen sich wahllos Dateien vom Desktop


Addition.txt von FRST fehlt noch.

__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 15.05.2014, 18:54   #6
Klattsche
 
Windows 8.1: Bei zugeklapptem Bildschirm öffnen sich wahllos Dateien vom Desktop - Standard

Windows 8.1: Bei zugeklapptem Bildschirm öffnen sich wahllos Dateien vom Desktop


Recht hast du, sry

Addition
FRST Additions Logfile:
Code:
ATTFilter
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 14-05-2014
Ran by Internet at 2014-05-14 18:23:25
Running from C:\Users\Internet\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Avira Desktop (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avira Desktop (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

7-Zip 9.22 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0922-000001000000}) (Version: 9.22.00.0 - Igor Pavlov)
Adobe Flash Player 13 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 13.0.0.214 - Adobe Systems Incorporated)
Avira Free Antivirus (HKLM-x32\...\Avira AntiVir Desktop) (Version: 14.0.3.350 - Avira)
Battlefield 4™ (HKLM-x32\...\{ABADE36E-EC37-413B-8179-B432AD3FACE7}) (Version: 1.2.0.0 - Electronic Arts)
Battlelog Web Plugins (HKLM-x32\...\Battlelog Web Plugins) (Version: 2.3.2 - EA Digital Illusions CE AB)
Benutzerhandbuch (x32 Version: 1.0.0.15 - Lenovo) Hidden
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{5971CA1F-6BDE-498F-952C-9F2BF94070A4}) (Version:  - Microsoft)
Drakonia Black (HKLM-x32\...\{2EAD3327-2F92-455F-A675-E5CC4980B67A}}_is1) (Version:  - )
Energy Management (HKLM-x32\...\InstallShield_{D0956C11-0F60-43FE-99AD-524E833471BB}) (Version: 8.0.2.11 - Lenovo)
Energy Management (x32 Version: 8.0.2.11 - Lenovo) Hidden
ESN Sonar (HKLM-x32\...\ESN Sonar-0.70.4) (Version: 0.70.4 - ESN Social Software AB)
Genesys USB Mass Storage Device (HKLM-x32\...\{959B7F35-2819-40C5-A0CD-3C53B5FCC935}) (Version: 4.3.0.3 - Genesys Logic)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.0.0.1323 - Intel Corporation)
Intel(R) PRO/Wireless Driver (Version: 16.01.5000.0577 - Intel Corporation) Hidden
Intel(R) PROSet/Wireless Software for Bluetooth(R) Technology(patch version 3.0.1332.1) (HKLM\...\{302600C1-6BDF-4FD1-1307-148929CC1385}) (Version: 3.1.1307.0366 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.6.0.1033 - Intel Corporation)
Intel(R) Rapid Storage Technology (Version: 12.6.0.1033 - Intel Corporation) Hidden
Intel(R) Update Manager (HKLM-x32\...\{12914061-EB9B-4AE7-AC7E-0B8A607C7DF4}) (Version: 2.3.1338 - Intel Corporation)
Intel® PROSet/Wireless Software (HKLM-x32\...\{aaf3655f-6961-4be2-aa4e-6de4dc1dc8f4}) (Version: 16.1.5 - Intel Corporation)
Intel® PROSet/Wireless WiFi Software (Version: 16.01.5000.0269 - Intel Corporation) Hidden
Intel® Trusted Connect Service Client (Version: 1.27.798.1 - Intel Corporation) Hidden
KeePass Password Safe 2.26 (HKLM-x32\...\KeePassPasswordSafe2_is1) (Version: 2.26 - Dominik Reichl)
Lenovo EasyCamera (HKLM-x32\...\{E0A7ED39-8CD6-4351-93C3-69CCA00D12B4}) (Version: 6.2.9200.10240 - Realtek Semiconductor Corp.)
Lenovo Experience Improvement (HKLM\...\LenovoExperienceImprovement) (Version: 1.0.4.0 - Lenovo)
Lenovo OneKey Recovery (HKLM-x32\...\InstallShield_{46F4D124-20E5-4D12-BE52-EC177A7A4B42}) (Version: 8.0.0.1519 - CyberLink Corp.)
Lenovo OneKey Recovery (Version: 8.0.0.1519 - CyberLink Corp.) Hidden
Lenovo pointing device (HKLM\...\Elantech) (Version: 11.4.19.2 - ELAN Microelectronic Corp.)
Lenovo PowerDVD10 (HKLM-x32\...\InstallShield_{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}) (Version: 10.0.5219.52 - CyberLink Corp.)
Lenovo PowerDVD10 (x32 Version: 10.0.5219.52 - CyberLink Corp.) Hidden
Lenovo VeriFace (HKLM\...\Lenovo VeriFace) (Version: 5.0.13.5261 - Lenovo)
Lenovo YouCam (HKLM-x32\...\InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}) (Version: 4.1.3423 - CyberLink Corp.)
Lenovo YouCam (x32 Version: 4.1.3423 - CyberLink Corp.) Hidden
Lexmark ScanBack Deinstallationsprogamm (HKLM\...\Lexmark ScanBack) (Version:  - Lexmark International, Inc.)
Lexmark Statusüberwachungs-Center Deinstallationsprogamm (HKLM\...\Lexmark Status Monitor Center) (Version:  - Lexmark International, Inc.)
Lexmark TWAIN-Treiber Netzwerk Deinstallationsprogamm (HKLM\...\Lexmark Network TWAIN Driver) (Version:  - Lexmark International, Inc.)
Lexmark Universal v2 Deinstallationsprogamm (HKLM\...\Lexmark Universal v2) (Version:  - Lexmark International, Inc.)
Malwarebytes Anti-Malware Version 2.0.1.1004 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.1.1004 - Malwarebytes Corporation)
Microsoft Office Access MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Groove MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office InfoPath MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Office 64-bit Components 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Professional Plus 2010 (HKLM-x32\...\Office14.PROPLUS) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Office Professional Plus 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Publisher MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.60610 (Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.60610 (Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.60610 (x32 Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.60610 (x32 Version: 11.0.60610 - Microsoft Corporation) Hidden
Mozilla Firefox 29.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 29.0 (x86 de)) (Version: 29.0 - Mozilla)
Mozilla Firefox 29.0.1 (x86 de) (HKCU\...\Mozilla Firefox 29.0.1 (x86 de)) (Version: 29.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 29.0 - Mozilla)
NVIDIA 3D Vision Treiber 335.23 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 335.23 - NVIDIA Corporation)
NVIDIA GeForce Experience 2.0.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.0.1 - NVIDIA Corporation)
NVIDIA Grafiktreiber 335.23 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 335.23 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.30.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.30.1 - NVIDIA Corporation)
NVIDIA Install Application (Version: 2.1002.151.1095 - NVIDIA Corporation) Hidden
NVIDIA LED Visualizer 1.0 (Version: 1.0 - NVIDIA Corporation) Hidden
NVIDIA Network Service (Version: 1.0 - NVIDIA Corporation) Hidden
NVIDIA PhysX (x32 Version: 9.13.1220 - NVIDIA Corporation) Hidden
NVIDIA PhysX-Systemsoftware 9.13.1220 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.1220 - NVIDIA Corporation)
NVIDIA ShadowPlay 12.4.67 (Version: 12.4.67 - NVIDIA Corporation) Hidden
NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.13.3523 - NVIDIA Corporation) Hidden
NVIDIA Systemsteuerung 335.23 (Version: 335.23 - NVIDIA Corporation) Hidden
NVIDIA Update 12.4.67 (Version: 12.4.67 - NVIDIA Corporation) Hidden
NVIDIA Update Core (Version: 12.4.67 - NVIDIA Corporation) Hidden
NVIDIA Virtual Audio 1.2.23 (Version: 1.2.23 - NVIDIA Corporation) Hidden
Onekey Theater (HKLM-x32\...\{91CC5BAE-A098-40D3-A43B-C0DC7CE263FE}) (Version: 3.0.1.0 - Lenovo)
Origin (HKLM-x32\...\Origin) (Version: 9.4.7.2799 - Electronic Arts, Inc.)
PDF-Viewer (HKLM\...\{A278382D-4F1B-4D47-9885-8523F7261E8D}_is1) (Version: 2.5.214.2 - Tracker Software Products Ltd)
Power2Go (HKLM-x32\...\{40BF1E83-20EB-11D8-97C5-0009C5020658}) (Version: 5.6.0.9109 - CyberLink Corp.)
PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.993 - Even Balance, Inc.)
Qualcomm Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (HKLM-x32\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 2.1.0.12 - Qualcomm Atheros Communications Inc.)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6923 - Realtek Semiconductor Corp.)
Seagate DiscWizard (HKLM-x32\...\{07B7CC6B-DC59-4497-8652-C1DEF6F8267A}) (Version: 16.0.5840 - Seagate)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version:  - Microsoft)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (x32 Version:  - Microsoft) Hidden
Shared C Run-time for x64 (HKLM\...\{EF79C448-6946-4D71-8134-03407888C054}) (Version: 10.0.0 - McAfee)
SHIELD Streaming (Version: 2.1.108 - NVIDIA Corporation) Hidden
StarMoney (x32 Version: 4.0.4.16 - StarFinanz) Hidden
StarMoney 9.0 S-Edition (HKLM-x32\...\{BAC70044-6434-4412-8FBD-0977F8629F4D}) (Version: 9.0 - Star Finanz GmbH)
Steam (HKLM-x32\...\Steam) (Version:  - Valve Corporation)
Streamripper (Remove only) (HKLM-x32\...\Streamripper) (Version:  - )
SugarSync Manager (HKLM-x32\...\SugarSync) (Version: 1.9.61.90905 - SugarSync, Inc.)
Torchlight 2 (HKCU\...\{049FF5E4-EB02-4c42-8DB0-226E2F7A9E53}) (Version: 1.21.2.1 - )
Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{B4A38370-2ADB-46B0-A1B0-0C4A2F7DCA31}) (Version:  - Microsoft)
Update for Microsoft Filter Pack 2.0 (KB2837594) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{D3C85176-ACCC-4AF0-817D-1BC803303B74}) (Version:  - Microsoft)
Update for Microsoft Filter Pack 2.0 (KB2837594) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.PROPLUS_{D3C85176-ACCC-4AF0-817D-1BC803303B74}) (Version:  - Microsoft)
Update for Microsoft InfoPath 2010 (KB2817369) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{4EEA3D3E-989C-4DF4-AB0A-3042C0C12AA3}) (Version:  - Microsoft)
Update for Microsoft InfoPath 2010 (KB2817396) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{39767ECA-1731-45DB-AB5B-6BF40E151D66}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{DADF7E25-FFA4-4D02-BE84-1DAE62C18516}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.PROPLUS_{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{287A1E92-9E41-4BC1-8920-B3D0E9220800}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{9D69691D-823D-4C3E-9B12-563A3F520366}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{ECFE33A3-B8B7-439A-ADE4-59FBD29EF9B8}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.PROPLUS_{ECFE33A3-B8B7-439A-ADE4-59FBD29EF9B8}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{5AA578BB-759C-40FD-9661-A737C0884541}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2825640) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{BA610006-2C39-4419-9834-CF61AB24810A}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2863818) 32-Bit Edition (HKLM-x32\...\{90140000-001F-0407-0000-0000000FF1CE}_Office14.PROPLUS_{C70D2038-A2C4-4A99-87DE-5272BB44F0CE}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2863818) 32-Bit Edition (HKLM-x32\...\{90140000-001F-0409-0000-0000000FF1CE}_Office14.PROPLUS_{83B1B530-7D9E-4C6A-907F-E979CEE9C295}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2863818) 32-Bit Edition (HKLM-x32\...\{90140000-001F-040C-0000-0000000FF1CE}_Office14.PROPLUS_{82F87E28-B18E-46D6-A399-E2F19CF5949B}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2878225) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{EFF5EBA3-40AD-4859-85E7-3C1CF4F297EB}) (Version:  - Microsoft)
Update for Microsoft OneNote 2010 (KB2837595) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{51CCA922-A0CC-47C4-8910-6936D97CAC2E}) (Version:  - Microsoft)
Update for Microsoft OneNote 2010 (KB2837595) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.PROPLUS_{51CCA922-A0CC-47C4-8910-6936D97CAC2E}) (Version:  - Microsoft)
Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{2AB483F1-C86E-427A-83B4-23889B03512D}) (Version:  - Microsoft)
Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition (HKLM-x32\...\{90140000-001A-0407-0000-0000000FF1CE}_Office14.PROPLUS_{A0657506-69DC-44AE-8DC1-58E7C6F5B1C9}) (Version:  - Microsoft)
Update for Microsoft PowerPoint 2010 (KB2837579) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{2BA40F82-F3A4-441C-BF1A-ED4C42FF4872}) (Version:  - Microsoft)
Update for Microsoft PowerPoint 2010 (KB2837579) 32-Bit Edition (HKLM-x32\...\{90140000-0018-0407-0000-0000000FF1CE}_Office14.PROPLUS_{40EC8FB1-5202-469D-9232-C28FB1C6FC64}) (Version:  - Microsoft)
Update for Microsoft SharePoint Workspace 2010 (KB2760601) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{F9F5A080-AF38-4966-9A6B-C43DCA465035}) (Version:  - Microsoft)
Update for Microsoft SharePoint Workspace 2010 (KB2760601) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.PROPLUS_{F9F5A080-AF38-4966-9A6B-C43DCA465035}) (Version:  - Microsoft)
Update for Microsoft Visio 2010 (KB2553444) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{799005D3-9B70-4219-AFE0-BC479614CC4D}) (Version:  - Microsoft)
Update for Microsoft Visio Viewer 2010 (KB2810066) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{8C55AA83-54C2-4236-A622-78440A411DC5}) (Version:  - Microsoft)
UserGuide (HKLM-x32\...\InstallShield_{F07C2CF8-4C53-4EC3-8162-A6221E36EB88}) (Version: 1.0.0.15 - Lenovo)
Winamp (HKLM-x32\...\Winamp) (Version: 5.666  - Nullsoft, Inc)
Windows-Treiberpaket - Lenovo (ACPIVPC) System  (06/15/2012 8.1.0.1) (HKLM\...\71BC3FD63F450BA0A957AAECBDB4A000C4F2BE42) (Version: 06/15/2012 8.1.0.1 - Lenovo)
Windows-Treiberpaket - Lenovo (WUDFRd) LenovoVhid  (06/19/2012 10.13.29.733) (HKLM\...\8A223E56FB1ED4F697B54E5BF96F1EB63B512684) (Version: 06/19/2012 10.13.29.733 - Lenovo)

==================== Restore Points  =========================

Could not list Restore Points. Check "winmgmt" service or repair WMI.


==================== Hosts content: ==========================

2013-08-22 15:25 - 2013-08-22 15:25 - 00000824 ____A C:\WINDOWS\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => ?

==================== Loaded Modules (whitelisted) =============

2013-09-05 00:17 - 2013-09-05 00:17 - 04300456 _____ () C:\Program Files\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF
2013-12-01 11:35 - 2013-04-09 08:39 - 00040960 _____ () C:\Windows\SysWOW64\UMonit64.exe
2014-05-06 18:41 - 2013-10-29 14:49 - 00248832 _____ () Z:\Programme\Drakonia Configurator\hid.exe

==================== Alternate Data Streams (whitelisted) =========

AlternateDataStreams: C:\ProgramData:gs5sys
AlternateDataStreams: C:\Users\All Users:gs5sys
AlternateDataStreams: C:\Users\Internet:gs5sys
AlternateDataStreams: C:\ProgramData\Anwendungsdaten:gs5sys
AlternateDataStreams: C:\ProgramData\Application Data:gs5sys
AlternateDataStreams: C:\ProgramData\Templates:gs5sys
AlternateDataStreams: C:\ProgramData\Vorlagen:gs5sys
AlternateDataStreams: C:\Users\Internet\Anwendungsdaten:gs5sys
AlternateDataStreams: C:\Users\Internet\Cookies:gs5sys
AlternateDataStreams: C:\Users\Internet\Lokale Einstellungen:gs5sys
AlternateDataStreams: C:\Users\Internet\Vorlagen:gs5sys
AlternateDataStreams: C:\Users\Internet\Desktop\desktop.ini:gs5sys
AlternateDataStreams: C:\Users\Internet\AppData\Local:gs5sys
AlternateDataStreams: C:\Users\Internet\AppData\Roaming:gs5sys
AlternateDataStreams: C:\Users\Internet\AppData\Local\Anwendungsdaten:gs5sys
AlternateDataStreams: C:\Users\Internet\AppData\Local\Verlauf:gs5sys
AlternateDataStreams: C:\Users\Internet\Documents\desktop.ini:gs5sys
AlternateDataStreams: C:\Users\Public\Documents\desktop.ini:gs5sys

==================== Safe Mode (whitelisted) ===================


==================== EXE Association (whitelisted) =============


==================== Disabled items from MSCONFIG ==============


==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (05/12/2014 11:57:53 PM) (Source: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe) (EventID: 1) (User: )
Description: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exeCan't get user token [1008]

Error: (05/11/2014 11:59:02 PM) (Source: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe) (EventID: 1) (User: )
Description: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exeCan't get user token [1008]

Error: (05/11/2014 05:05:31 PM) (Source: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe) (EventID: 1) (User: )
Description: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exeCan't get user token [1008]

Error: (05/09/2014 00:06:49 AM) (Source: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe) (EventID: 1) (User: )
Description: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exeCan't get user token [1008]

Error: (05/06/2014 11:01:13 PM) (Source: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe) (EventID: 1) (User: )
Description: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exeCan't get user token [1008]

Error: (05/04/2014 08:45:08 PM) (Source: ESENT) (EventID: 215) (User: )
Description: WinMail (4248) WindowsMail0: Die Sicherung wurde abgebrochen, weil sie vom Client angehalten wurde, oder weil die Verbindung mit dem Client unterbrochen wurde.

Error: (05/04/2014 08:45:05 PM) (Source: ESENT) (EventID: 215) (User: )
Description: WinMail (3768) WindowsMail0: Die Sicherung wurde abgebrochen, weil sie vom Client angehalten wurde, oder weil die Verbindung mit dem Client unterbrochen wurde.

Error: (05/04/2014 07:03:11 PM) (Source: Microsoft-Windows-WMI) (EventID: 24) (User: NT-AUTORITÄT)
Description: Vom Ereignisanbieter "AVWMIEVTProv" wurde versucht, die Abfrage "select * from Event_Notification" zu registrieren, deren Zielklasse "Event_Notification" im Namespace "//./ROOT/CIMV2/Applications/Avira_AntiVir" nicht vorhanden ist. Die Abfrage wird ignoriert.

Error: (05/04/2014 07:03:11 PM) (Source: Microsoft-Windows-WMI) (EventID: 24) (User: NT-AUTORITÄT)
Description: Vom Ereignisanbieter "" wurde versucht, die Abfrage "select * from Event_Notification" zu registrieren, deren Zielklasse "Event_Notification" im Namespace "//./ROOT/CIMV2/Applications/Avira_AntiVir" nicht vorhanden ist. Die Abfrage wird ignoriert.

Error: (05/04/2014 07:03:09 PM) (Source: Microsoft-Windows-WMI) (EventID: 24) (User: NT-AUTORITÄT)
Description: Vom Ereignisanbieter "IntelWLANEventProvider" wurde versucht, die Abfrage "select * from CIntelQosEvent" zu registrieren, deren Zielklasse "CIntelQosEvent" im Namespace "//./ROOT/default" nicht vorhanden ist. Die Abfrage wird ignoriert.


System errors:
=============
Error: (05/12/2014 10:41:58 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalAktivierung{135FD325-45B7-4C30-89F8-4386961669F0}{135FD325-45B7-4C30-89F8-4386961669F0}NT-AUTORITÄTNetzwerkdienstS-1-5-20LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar

Error: (05/11/2014 05:03:29 PM) (Source: BTHUSB) (EventID: 30) (User: )
Description: Der lokale Adapter bietet keine Unterstützung für einen wichtigen Controllerstatus für energiearme Geräte. Die mindestens erforderliche unterstützte Statusmaske ist "0x1f7fffff", vorhanden ist jedoch "0x1f3fffff". Die Funktionalität für energiearme Geräte wird deaktiviert.

Error: (05/11/2014 04:16:19 PM) (Source: DCOM) (EventID: 10010) (User: Laptop********)
Description: {1B1F472E-3221-4826-97DB-2C2324D389AE}

Error: (05/11/2014 04:15:49 PM) (Source: DCOM) (EventID: 10010) (User: Laptop********)
Description: {BF6C1E47-86EC-4194-9CE5-13C15DCB2001}

Error: (05/08/2014 10:40:06 PM) (Source: DCOM) (EventID: 10010) (User: Laptop********)
Description: {1B1F472E-3221-4826-97DB-2C2324D389AE}

Error: (05/08/2014 10:39:36 PM) (Source: DCOM) (EventID: 10010) (User: Laptop********)
Description: {BF6C1E47-86EC-4194-9CE5-13C15DCB2001}

Error: (05/06/2014 09:28:00 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1069

Error: (05/06/2014 09:28:00 PM) (Source: Service Control Manager) (EventID: 7038) (User: )
Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: 
%%1326

Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).

Error: (05/06/2014 09:21:37 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1069

Error: (05/06/2014 09:21:37 PM) (Source: Service Control Manager) (EventID: 7038) (User: )
Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: 
%%1326

Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).


Microsoft Office Sessions:
=========================
Error: (05/12/2014 11:57:53 PM) (Source: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe) (EventID: 1) (User: )
Description: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exeCan't get user token [1008]

Error: (05/11/2014 11:59:02 PM) (Source: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe) (EventID: 1) (User: )
Description: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exeCan't get user token [1008]

Error: (05/11/2014 05:05:31 PM) (Source: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe) (EventID: 1) (User: )
Description: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exeCan't get user token [1008]

Error: (05/09/2014 00:06:49 AM) (Source: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe) (EventID: 1) (User: )
Description: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exeCan't get user token [1008]

Error: (05/06/2014 11:01:13 PM) (Source: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe) (EventID: 1) (User: )
Description: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exeCan't get user token [1008]

Error: (05/04/2014 08:45:08 PM) (Source: ESENT) (EventID: 215) (User: )
Description: WinMail4248WindowsMail0:

Error: (05/04/2014 08:45:05 PM) (Source: ESENT) (EventID: 215) (User: )
Description: WinMail3768WindowsMail0:

Error: (05/04/2014 07:03:11 PM) (Source: Microsoft-Windows-WMI) (EventID: 24) (User: NT-AUTORITÄT)
Description: AVWMIEVTProvselect * from Event_NotificationEvent_Notification//./ROOT/CIMV2/Applications/Avira_AntiVir

Error: (05/04/2014 07:03:11 PM) (Source: Microsoft-Windows-WMI) (EventID: 24) (User: NT-AUTORITÄT)
Description: select * from Event_NotificationEvent_Notification//./ROOT/CIMV2/Applications/Avira_AntiVir

Error: (05/04/2014 07:03:09 PM) (Source: Microsoft-Windows-WMI) (EventID: 24) (User: NT-AUTORITÄT)
Description: IntelWLANEventProviderselect * from CIntelQosEventCIntelQosEvent//./ROOT/default


CodeIntegrity Errors:
===================================
  Date: 2014-05-13 20:00:40.425
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\dsound.dll because the set of per-page image hashes could not be found on the system.

  Date: 2014-05-12 23:36:01.828
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\dsound.dll because the set of per-page image hashes could not be found on the system.

  Date: 2014-05-12 22:51:46.632
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\dsound.dll because the set of per-page image hashes could not be found on the system.

  Date: 2014-05-03 16:49:51.985
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\dsound.dll because the set of per-page image hashes could not be found on the system.

  Date: 2014-05-03 12:14:49.174
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\dsound.dll because the set of per-page image hashes could not be found on the system.


==================== Memory info =========================== 

Percentage of memory in use: 21%
Total physical RAM: 16330.27 MB
Available physical RAM: 12898.96 MB
Total Pagefile: 19274.27 MB
Available Pagefile: 15695.21 MB
Total Virtual: 131072 MB
Available Virtual: 131071.79 MB

==================== Drives ================================

Drive c: (Windows8_OS) (Fixed) (Total:447.27 GB) (Free:408.19 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive d: (LENOVO) (Fixed) (Total:25 GB) (Free:21.48 GB) NTFS
Drive e: (Transcend) (Removable) (Total:1.87 GB) (Free:1.87 GB) FAT32
Drive z: (Daten) (Fixed) (Total:444.04 GB) (Free:403.78 GB) NTFS

==================== MBR & Partition Table ==================

==================== End Of Log ============================
--- --- ---
Alt 16.05.2014, 11:49   #7
schrauber
/// the machine
/// TB-Ausbilder
 
Windows 8.1: Bei zugeklapptem Bildschirm öffnen sich wahllos Dateien vom Desktop - Standard

Windows 8.1: Bei zugeklapptem Bildschirm öffnen sich wahllos Dateien vom Desktop


Downloade Dir bitte AdwCleaner Logo Icon AdwCleaner auf deinen Desktop.
  • Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
  • Starte die AdwCleaner.exe mit einem Doppelklick.
  • Stimme den Nutzungsbedingungen zu.
  • Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
    • "Tracing" Schlüssel löschen
    • Winsock Einstellungen zurücksetzen
    • Proxy Einstellungen zurücksetzen
    • Internet Explorer Richtlinien zurücksetzen
    • Chrome Richtlinien zurücksetzen
    • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
  • Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
  • Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
  • Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

  • Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
  • Drücke eine beliebige Taste, um das Tool zu starten.
  • Je nach System kann der Scan eine Weile dauern.
  • Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
  • Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.


und ein frisches FRST log bitte.
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 16.05.2014, 23:11   #8
Klattsche
 
Windows 8.1: Bei zugeklapptem Bildschirm öffnen sich wahllos Dateien vom Desktop - Standard

Windows 8.1: Bei zugeklapptem Bildschirm öffnen sich wahllos Dateien vom Desktop


Hi schrauber,

leider hat mir eins der Programme meinen Firefox zerschossen. Er speichert keinerlei Einstellungen mehr und startet immer so als wäre es der erste Start nach der Installation. Wie krieg ich das wieder repariert?

Hier die Logs:
FRST
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 15-05-2014
Ran by Internet (ATTENTION: The logged in user is not administrator) on LAPTOP******** on 17-05-2014 00:05:17
Running from C:\Users\Internet\Desktop
Platform: Windows 8.1 (Update 1) (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDIntelligent.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Realtek semiconductor) C:\Windows\RTFTrack.exe
() C:\Windows\SysWOW64\UMonit64.exe
(Lenovo) C:\Program Files\Lenovo\Onekey Theater\OnekeyStudio.exe
(Lenovo (Beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe
(Lenovo(beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Management\utility.exe
(Seagate) C:\Program Files (x86)\Common Files\Seagate\Schedule2\schedhlp.exe
(Seagate) Z:\Programme\Seagate DiskWizard\DiscWizard\DiscWizardMonitor.exe
(Avira Operations GmbH & Co. KG) Z:\Programme\Avira\AntiVir Desktop\avgnt.exe
() Z:\Programme\Drakonia Configurator\hid.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Dominik Reichl) Z:\Programme\KeePass Password Safe 2\KeePass.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Adobe Systems Incorporated) C:\Windows\System32\Macromed\Flash\FlashUtil_ActiveX.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [ETDCtrl] => C:\Program Files\Elantech\ETDCtrl.exe [2891592 2013-05-17] (ELAN Microelectronics Corp.)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13545032 2013-05-28] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1308232 2013-05-20] (Realtek Semiconductor)
HKLM\...\Run: [RtsFT] => C:\WINDOWS\RTFTrack.exe [6340312 2013-07-19] (Realtek semiconductor)
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [286704 2013-04-30] (Intel Corporation)
HKLM\...\Run: [BTMTrayAgent] => C:\Program Files (x86)\Intel\Bluetooth\btmshellex.dll [7830328 2013-05-21] (Motorola Solutions, Inc.)
HKLM\...\Run: [UMonit64] => C:\WINDOWS\SysWOW64\UMonit64.exe [40960 2013-04-09] ()
HKLM\...\Run: [OnekeyStudio] => C:\Program Files\Lenovo\Onekey Theater\OnekeyStudio.exe [4196432 2012-09-14] (Lenovo)
HKLM\...\Run: [Energy Management] => C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe [17097200 2013-12-01] (Lenovo (Beijing) Limited)
HKLM\...\Run: [EnergyUtility] => C:\Program Files (x86)\Lenovo\Energy Management\Utility.exe [193008 2013-12-01] (Lenovo(beijing) Limited)
HKLM\...\Run: [Seagate Scheduler2 Service] => C:\Program Files (x86)\Common Files\Seagate\Schedule2\schedhlp.exe [400920 2013-10-30] (Seagate)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2199840 2014-04-30] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\WINDOWS\system32\nvspcap64.dll [1225920 2014-04-30] (NVIDIA Corporation)
HKLM-x32\...\Run: [YouCam Tray] => C:\Program Files (x86)\Lenovo\YouCam\YouCamTray.exe [168464 2012-10-30] (CyberLink Corp.)
HKLM-x32\...\Run: [UpdateP2GShortCut] => C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe [217088 2012-04-18] (CyberLink Corp.)
HKLM-x32\...\Run: [RemoteControl10] => C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe [95192 2013-03-08] (CyberLink Corp.)
HKLM-x32\...\Run: [mcui_exe] => "C:\Program Files\McAfee.com\Agent\mcagent.exe" /runkey
HKLM-x32\...\Run: [DiscWizardMonitor.exe] => Z:\Programme\Seagate DiskWizard\DiscWizard\DiscWizardMonitor.exe [6421848 2013-10-30] (Seagate)
HKLM-x32\...\Run: [AcronisTibMounterMonitor] => C:\Program Files (x86)\Common Files\Acronis\TibMounter\TibMounterMonitor.exe [1105848 2013-01-10] (Acronis)
HKLM-x32\...\Run: [KeePass 2 PreLoad] => Z:\Programme\KeePass Password Safe 2\KeePass.exe [2099200 2014-04-13] (Dominik Reichl)
HKLM-x32\...\Run: [avgnt] => Z:\Programme\Avira\AntiVir Desktop\avgnt.exe [689744 2014-02-25] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [BCSSync] => Z:\Programme\Office 2010\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation)
HKLM-x32\...\Run: [GamingMouse] => Z:\Programme\Drakonia Configurator\hid.exe [248832 2013-10-29] ()
HKLM\...\RunOnce: [BrowserChoice] - C:\WINDOWS\BrowserChoice\browserchoice.exe [86816 2013-08-22] (Microsoft Corporation)
HKLM\...\RunOnce: [*WerKernelReporting] - %SYSTEMROOT%\SYSTEM32\WerFault.exe -k -rq [461176 2014-03-18] (Microsoft Corporation)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://lenovo13.msn.com/?pc=LCJB
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://lenovo13.msn.com/?pc=LCJB
HKCU\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.lenovo.com
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://www.lenovo.com
SearchScopes: HKLM - DefaultScope {9E653D28-0B9E-44B0-8A81-65B70D385763} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=LCJB
SearchScopes: HKLM - {9E653D28-0B9E-44B0-8A81-65B70D385763} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=LCJB
SearchScopes: HKLM-x32 - {9E653D28-0B9E-44B0-8A81-65B70D385763} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=LCJB
SearchScopes: HKCU - DefaultScope {9E653D28-0B9E-44B0-8A81-65B70D385763} URL = 
SearchScopes: HKCU - {9E653D28-0B9E-44B0-8A81-65B70D385763} URL = 
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - Z:\Programme\Office 2010\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - Z:\Programme\Office 2010\Office14\URLREDIR.DLL (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\Internet\AppData\Roaming\Mozilla\Firefox\Profiles\d68fyipr.default
FF Plugin: @adobe.com/FlashPlayer - C:\WINDOWS\system32\Macromed\Flash\NPSWF64_13_0_0_214.dll ()
FF Plugin: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - Z:\Programme\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin: @tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - Z:\Programme\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll ()
FF Plugin-x32: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - Z:\Programme\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 - C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)
FF Plugin-x32: @esn/npbattlelog,version=2.3.2 - C:\Program Files (x86)\Battlelog Web Plugins\2.3.2\npbattlelog.dll (EA Digital Illusions CE AB)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=3.5.29 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - Z:\Programme\Office 2010\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - Z:\Programme\Office 2010\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @nullsoft.com/winampDetector;version=1 - Z:\Programme\Winamp Detect\npwachk.dll (Nullsoft, Inc.)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - Z:\Programme\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF SearchPlugin: C:\Users\Internet\AppData\Roaming\Mozilla\Firefox\Profiles\d68fyipr.default\searchplugins\qwantcom.xml
FF Extension: Flashblock - C:\Users\Internet\AppData\Roaming\Mozilla\Firefox\Profiles\d68fyipr.default\Extensions\{3d7eb24f-2740-49df-8937-200b1cc08f8a} [2014-05-04]
FF Extension: WOT - C:\Users\Internet\AppData\Roaming\Mozilla\Firefox\Profiles\d68fyipr.default\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} [2014-05-04]
FF Extension: Ghostery - C:\Users\Internet\AppData\Roaming\Mozilla\Firefox\Profiles\d68fyipr.default\Extensions\firefox@ghostery.com.xpi [2014-05-04]
FF Extension: Adblock Plus - C:\Users\Internet\AppData\Roaming\Mozilla\Firefox\Profiles\d68fyipr.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-05-04]
FF StartMenuInternet: FIREFOX.EXE - Z:\Programme\Mozilla\firefox.exe

==================== Services (Whitelisted) =================

R2 AntiVirSchedulerService; Z:\Programme\Avira\AntiVir Desktop\sched.exe [440400 2014-02-25] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; Z:\Programme\Avira\AntiVir Desktop\avguard.exe [440400 2014-02-25] (Avira Operations GmbH & Co. KG)
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15344 2013-04-30] (Intel Corporation)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [820184 2013-02-13] (Intel(R) Corporation)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [131544 2013-05-15] (Intel Corporation)
R2 Intel(R) Wireless Bluetooth(R) 4.0 Radio Management; C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe [155448 2013-08-19] (Intel Corporation)
S3 iumsvc; C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [174368 2014-02-28] ()
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-05-15] (Intel Corporation)
R2 lmhosts; C:\Windows\system32\svchost.exe [37768 2013-08-22] (Microsoft Corporation)
S3 Microsoft SharePoint Workspace Audit Service; Z:\Programme\Office 2010\Office14\GROOVE.EXE [30814400 2013-12-19] (Microsoft Corporation)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [273136 2013-08-28] ()
R2 NlaSvc; C:\Windows\System32\svchost.exe [37768 2013-08-22] (Microsoft Corporation)
R2 nsi; C:\Windows\system32\svchost.exe [37768 2013-08-22] (Microsoft Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1617696 2014-04-30] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [21007192 2014-04-30] (NVIDIA Corporation)
R2 PnkBstrA; C:\WINDOWS\SysWOW64\PnkBstrA.exe [66872 2014-05-14] ()
R2 StarMoney 9.0 OnlineUpdate; Z:\Programme\StarMoney 9.0 S-Edition\ouservice\StarMoneyOnlineUpdate.exe [663184 2014-01-27] (Star Finanz-Software Entwicklung und Vertriebs GmbH)
R2 VeriFaceSrv; C:\Program Files (x86)\Lenovo\Lenovo VeriFace\VfConnectorService.exe [68368 2013-12-01] ()
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347880 2014-03-24] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2014-03-24] (Microsoft Corporation)
R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3378416 2013-08-28] (Intel® Corporation)

==================== Drivers (Whitelisted) ====================

S0 ADP80XX; C:\Windows\System32\drivers\ADP80XX.SYS [782176 2013-08-22] (PMC-Sierra)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2014-02-25] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [131576 2014-02-25] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [28600 2014-02-25] (Avira Operations GmbH & Co. KG)
S3 bcmfn2; C:\Windows\System32\drivers\bcmfn2.sys [17624 2013-08-13] (Windows (R) Win 7 DDK provider)
R3 ETDSMBus; C:\Windows\system32\DRIVERS\ETDSMBus.sys [22280 2013-05-16] (ELAN Microelectronic Corp.)
S3 iaLPSSi_GPIO; C:\Windows\System32\drivers\iaLPSSi_GPIO.sys [24568 2013-07-30] (Intel Corporation)
S3 iaLPSSi_I2C; C:\Windows\System32\drivers\iaLPSSi_I2C.sys [99320 2013-07-25] (Intel Corporation)
S0 iaStorAV; C:\Windows\System32\drivers\iaStorAV.sys [651248 2013-08-10] (Intel Corporation)
R0 intelpep; C:\Windows\System32\drivers\intelpep.sys [39768 2014-03-18] (Microsoft Corporation)
S0 LSI_SAS3; C:\Windows\System32\drivers\lsi_sas3.sys [81760 2013-08-22] (LSI Corporation)
R3 NdisVirtualBus; C:\Windows\System32\drivers\NdisVirtualBus.sys [16384 2013-08-22] (Microsoft Corporation)
S3 netvsc; C:\Windows\system32\DRIVERS\netvsc63.sys [87040 2013-08-22] (Microsoft Corporation)
R3 NETwNe64; C:\Windows\system32\DRIVERS\NETwew00.sys [3345376 2013-08-22] (Intel Corporation)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [18776 2014-04-30] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [40392 2014-03-31] (NVIDIA Corporation)
S3 ReFS; C:\Windows\System32\Drivers\ReFS.sys [924504 2014-03-18] (Microsoft Corporation)
R3 rtsuvc; C:\Windows\system32\DRIVERS\rtsuvc.sys [8247640 2013-07-19] (Realtek Semiconductor Corp.)
S3 SerCx2; C:\Windows\System32\drivers\SerCx2.sys [146776 2014-03-18] (Microsoft Corporation)
S0 stornvme; C:\Windows\System32\drivers\stornvme.sys [57176 2014-03-18] (Microsoft Corporation)
R0 tib; C:\Windows\System32\DRIVERS\tib.sys [1120032 2014-05-03] (Acronis International GmbH)
S0 tib_mounter; C:\Windows\System32\DRIVERS\tib_mounter.sys [183224 2014-05-03] (Acronis)
S3 UEFI; C:\Windows\System32\drivers\UEFI.sys [26976 2013-08-22] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [123224 2014-03-24] (Microsoft Corporation)
R0 Wof; C:\Windows\System32\Drivers\Wof.sys [157016 2014-05-04] (Microsoft Corporation)
S3 wsvd; C:\Windows\system32\DRIVERS\wsvd.sys [102376 2012-06-13] ("CyberLink)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-05-17 00:05 - 2014-05-17 00:05 - 00015885 _____ () C:\Users\Internet\Desktop\FRST.txt
2014-05-17 00:04 - 2014-05-17 00:04 - 00000000 ____D () C:\Users\Internet\Desktop\FRST-OlderVersion
2014-05-16 23:58 - 2014-05-16 23:58 - 00000737 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-05-16 23:58 - 2014-05-16 23:58 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-05-16 23:56 - 2014-05-16 23:56 - 00000000 __SHD () C:\Users\Internet\AppData\Local\EmieUserList
2014-05-16 23:56 - 2014-05-16 23:56 - 00000000 __SHD () C:\Users\Internet\AppData\Local\EmieSiteList
2014-05-16 23:42 - 2014-05-16 23:43 - 00000622 _____ () C:\Users\******* Admin\Desktop\JRT.txt
2014-05-16 23:31 - 2014-05-16 23:31 - 00000000 ____D () C:\WINDOWS\ERUNT
2014-05-16 23:25 - 2014-05-16 23:26 - 00000000 ____D () C:\AdwCleaner
2014-05-16 23:20 - 2014-05-16 23:20 - 01016261 _____ (Thisisu) C:\Users\Internet\Desktop\JRT.exe
2014-05-16 23:19 - 2014-05-16 23:19 - 01325827 _____ () C:\Users\Internet\Desktop\adwcleaner_3.208.exe
2014-05-15 00:15 - 2014-05-15 00:15 - 00000136 _____ () C:\Users\Internet\Desktop\Crysis® 2.lnk
2014-05-14 20:57 - 2014-05-14 20:57 - 00669184 _____ () C:\WINDOWS\SysWOW64\pbsvc.exe
2014-05-14 20:57 - 2014-05-14 20:57 - 00000757 _____ () C:\Users\Public\Desktop\Crysis.lnk
2014-05-14 18:46 - 2014-05-14 18:46 - 00000000 ____D () C:\WINDOWS\Minidump
2014-05-14 18:45 - 2014-05-14 18:45 - 1997058588 _____ () C:\WINDOWS\MEMORY.DMP
2014-05-14 18:31 - 2014-05-14 18:31 - 00007396 _____ () C:\Users\****** Admin\Desktop\Gmer.txt
2014-05-14 18:25 - 2014-05-14 18:25 - 00380416 _____ () C:\Users\Internet\Desktop\Gmer-19357.exe
2014-05-14 18:22 - 2014-05-17 00:04 - 00000000 ____D () C:\FRST
2014-05-14 18:21 - 2014-05-17 00:04 - 02067456 _____ (Farbar) C:\Users\Internet\Desktop\FRST64.exe
2014-05-14 18:21 - 2014-05-14 18:21 - 00000000 _____ () C:\Users\****** Admin\defogger_reenable
2014-05-14 18:19 - 2014-05-14 18:19 - 00050477 _____ () C:\Users\Internet\Desktop\Defogger.exe
2014-05-14 17:41 - 2013-09-25 22:36 - 00015648 _____ () C:\WINDOWS\system32\Drivers\nvflash.sys
2014-05-14 17:32 - 2014-03-24 04:30 - 00257880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdFilter.sys
2014-05-14 17:32 - 2014-03-24 04:30 - 00123224 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdNisDrv.sys
2014-05-14 17:32 - 2014-03-24 04:27 - 00035856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdBoot.sys
2014-05-14 17:32 - 2014-03-13 09:42 - 00308224 _____ (Microsoft Corporation) C:\WINDOWS\system32\wusa.exe
2014-05-14 17:32 - 2014-03-13 08:51 - 00305152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wusa.exe
2014-05-14 17:31 - 2014-04-11 12:03 - 00555736 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.appcore.dll
2014-05-14 17:31 - 2014-04-11 12:03 - 00054776 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2014-05-14 17:31 - 2014-04-11 10:25 - 00419928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.appcore.dll
2014-05-14 17:31 - 2014-04-11 08:04 - 00056320 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups.dll
2014-05-14 17:31 - 2014-04-11 07:53 - 00079872 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSReset.exe
2014-05-14 17:31 - 2014-04-11 07:22 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wups.dll
2014-05-14 17:31 - 2014-04-11 05:54 - 00201728 _____ (Microsoft Corporation) C:\WINDOWS\system32\ubpm.dll
2014-05-14 17:31 - 2014-04-11 05:36 - 11792384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2014-05-14 17:31 - 2014-04-11 05:24 - 13288960 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2014-05-14 17:31 - 2014-04-11 05:06 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapp.exe
2014-05-14 17:31 - 2014-04-11 05:05 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2014-05-14 17:31 - 2014-04-11 05:05 - 00123904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuwebv.dll
2014-05-14 17:31 - 2014-04-11 05:02 - 00249344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2014-05-14 17:31 - 2014-04-11 05:02 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapp.exe
2014-05-14 17:31 - 2014-04-11 05:01 - 00137728 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuwebv.dll
2014-05-14 17:31 - 2014-04-11 05:00 - 00080896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wudriver.dll
2014-05-14 17:31 - 2014-04-11 04:59 - 00666624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2014-05-14 17:31 - 2014-04-11 04:57 - 00190976 _____ (Microsoft Corporation) C:\WINDOWS\system32\storewuauth.dll
2014-05-14 17:31 - 2014-04-11 04:56 - 00381440 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUSettingsProvider.dll
2014-05-14 17:31 - 2014-04-11 04:55 - 00093696 _____ (Microsoft Corporation) C:\WINDOWS\system32\wudriver.dll
2014-05-14 17:31 - 2014-04-11 04:53 - 00827392 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2014-05-14 17:31 - 2014-04-11 04:52 - 03464192 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2014-05-14 17:31 - 2014-04-11 04:46 - 01705472 _____ (Microsoft Corporation) C:\WINDOWS\system32\wucltux.dll
2014-05-14 17:31 - 2014-04-11 04:36 - 00828928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.appcore.dll
2014-05-14 17:31 - 2014-04-11 04:34 - 00754688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll
2014-05-14 17:31 - 2014-04-11 04:29 - 01054208 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.appcore.dll
2014-05-14 17:31 - 2014-04-11 04:25 - 00921088 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll
2014-05-14 17:30 - 2014-05-06 06:40 - 23544320 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2014-05-14 17:30 - 2014-05-06 05:25 - 17382912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2014-05-14 17:30 - 2014-05-06 05:00 - 00084992 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2014-05-14 17:30 - 2014-05-06 04:10 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll
2014-05-14 17:30 - 2014-04-09 00:46 - 00086688 _____ (Microsoft Corporation) C:\WINDOWS\system32\mrt_map.dll
2014-05-14 17:30 - 2014-04-09 00:46 - 00028320 _____ (Microsoft Corporation) C:\WINDOWS\system32\mrt100.dll
2014-05-14 17:30 - 2014-04-08 20:54 - 00080032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mrt_map.dll
2014-05-14 17:30 - 2014-04-08 20:54 - 00026784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mrt100.dll
2014-05-14 17:30 - 2014-03-27 11:12 - 21225584 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2014-05-14 17:30 - 2014-03-27 09:48 - 18679728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2014-05-12 22:54 - 2014-05-12 22:54 - 00000000 ____D () C:\Users\Internet\AppData\Local\PunkBuster
2014-05-12 22:51 - 2014-05-12 23:23 - 00000000 ____D () C:\Users\Internet\Documents\Battlefield 4
2014-05-12 22:50 - 2014-05-12 22:50 - 00000000 ____D () C:\Users\Internet\AppData\Local\ESN
2014-05-12 22:41 - 2014-05-15 00:11 - 00028116 _____ () C:\WINDOWS\DirectX.log
2014-05-12 22:41 - 2014-05-14 20:57 - 00103736 _____ () C:\WINDOWS\SysWOW64\PnkBstrB.exe
2014-05-12 22:41 - 2014-05-14 20:57 - 00066872 _____ () C:\WINDOWS\SysWOW64\PnkBstrA.exe
2014-05-12 22:41 - 2014-05-14 18:45 - 00000000 ____D () C:\Program Files (x86)\Battlelog Web Plugins
2014-05-12 22:41 - 2014-05-12 23:37 - 00214392 _____ () C:\WINDOWS\SysWOW64\PnkBstrB.ex0
2014-05-12 22:41 - 2014-05-12 22:41 - 00000687 _____ () C:\Users\Public\Desktop\Battlefield 4(64 bit).lnk
2014-05-12 22:41 - 2014-05-12 22:41 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battlefield 4
2014-05-12 22:41 - 2010-06-02 04:55 - 00527192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_7.dll
2014-05-12 22:41 - 2010-06-02 04:55 - 00518488 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_7.dll
2014-05-12 22:41 - 2010-06-02 04:55 - 00239960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_7.dll
2014-05-12 22:41 - 2010-06-02 04:55 - 00176984 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_7.dll
2014-05-12 22:41 - 2010-06-02 04:55 - 00077656 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_5.dll
2014-05-12 22:41 - 2010-06-02 04:55 - 00074072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_5.dll
2014-05-12 22:41 - 2010-05-26 11:41 - 02526056 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_43.dll
2014-05-12 22:41 - 2010-05-26 11:41 - 02106216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_43.dll
2014-05-12 22:41 - 2010-05-26 11:41 - 01907552 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dcsx_43.dll
2014-05-12 22:41 - 2010-05-26 11:41 - 01868128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dcsx_43.dll
2014-05-12 22:41 - 2010-02-04 10:01 - 00530776 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_6.dll
2014-05-12 22:41 - 2010-02-04 10:01 - 00528216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_6.dll
2014-05-12 22:41 - 2010-02-04 10:01 - 00238936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_6.dll
2014-05-12 22:41 - 2010-02-04 10:01 - 00176984 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_6.dll
2014-05-12 22:41 - 2010-02-04 10:01 - 00078680 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_4.dll
2014-05-12 22:41 - 2010-02-04 10:01 - 00074072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_4.dll
2014-05-12 22:41 - 2010-02-04 10:01 - 00024920 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_7.dll
2014-05-12 22:41 - 2010-02-04 10:01 - 00022360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_7.dll
2014-05-12 22:41 - 2009-09-04 17:44 - 00517960 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_5.dll
2014-05-12 22:41 - 2009-09-04 17:44 - 00515416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_5.dll
2014-05-12 22:41 - 2009-09-04 17:44 - 00238936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_5.dll
2014-05-12 22:41 - 2009-09-04 17:44 - 00176968 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_5.dll
2014-05-12 22:41 - 2009-09-04 17:44 - 00073544 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_3.dll
2014-05-12 22:41 - 2009-09-04 17:44 - 00069464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_3.dll
2014-05-12 22:41 - 2009-09-04 17:29 - 05554512 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dcsx_42.dll
2014-05-12 22:41 - 2009-09-04 17:29 - 05501792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dcsx_42.dll
2014-05-12 22:41 - 2009-09-04 17:29 - 02582888 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_42.dll
2014-05-12 22:41 - 2009-09-04 17:29 - 02475352 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_42.dll
2014-05-12 22:41 - 2009-09-04 17:29 - 01974616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_42.dll
2014-05-12 22:41 - 2009-09-04 17:29 - 00523088 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_42.dll
2014-05-12 22:41 - 2009-09-04 17:29 - 00453456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_42.dll
2014-05-12 22:41 - 2009-09-04 17:29 - 00285024 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx11_42.dll
2014-05-12 22:41 - 2009-09-04 17:29 - 00235344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx11_42.dll
2014-05-12 22:41 - 2009-03-16 14:18 - 00521560 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_4.dll
2014-05-12 22:41 - 2009-03-16 14:18 - 00517448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_4.dll
2014-05-12 22:41 - 2009-03-16 14:18 - 00235352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_4.dll
2014-05-12 22:41 - 2009-03-16 14:18 - 00174936 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_4.dll
2014-05-12 22:41 - 2009-03-16 14:18 - 00024920 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_6.dll
2014-05-12 22:41 - 2009-03-16 14:18 - 00022360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_6.dll
2014-05-12 22:41 - 2009-03-09 15:27 - 05425496 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_41.dll
2014-05-12 22:41 - 2009-03-09 15:27 - 04178264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_41.dll
2014-05-12 22:41 - 2009-03-09 15:27 - 02430312 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_41.dll
2014-05-12 22:41 - 2009-03-09 15:27 - 01846632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_41.dll
2014-05-12 22:41 - 2009-03-09 15:27 - 00520544 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_41.dll
2014-05-12 22:41 - 2009-03-09 15:27 - 00453456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_41.dll
2014-05-12 22:41 - 2008-10-27 10:04 - 00518480 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_3.dll
2014-05-12 22:41 - 2008-10-27 10:04 - 00514384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_3.dll
2014-05-12 22:41 - 2008-10-27 10:04 - 00235856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_3.dll
2014-05-12 22:41 - 2008-10-27 10:04 - 00175440 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_3.dll
2014-05-12 22:41 - 2008-10-27 10:04 - 00074576 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_2.dll
2014-05-12 22:41 - 2008-10-27 10:04 - 00070992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_2.dll
2014-05-12 22:41 - 2008-10-27 10:04 - 00025936 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_5.dll
2014-05-12 22:41 - 2008-10-27 10:04 - 00023376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_5.dll
2014-05-12 22:41 - 2008-10-15 06:22 - 05631312 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_40.dll
2014-05-12 22:41 - 2008-10-15 06:22 - 04379984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_40.dll
2014-05-12 22:41 - 2008-10-15 06:22 - 02605920 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_40.dll
2014-05-12 22:41 - 2008-10-15 06:22 - 02036576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_40.dll
2014-05-12 22:41 - 2008-10-15 06:22 - 00519000 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_40.dll
2014-05-12 22:41 - 2008-10-15 06:22 - 00452440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_40.dll
2014-05-12 22:41 - 2008-07-31 10:41 - 00238088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_2.dll
2014-05-12 22:41 - 2008-07-31 10:41 - 00177672 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_2.dll
2014-05-12 22:41 - 2008-07-31 10:41 - 00072200 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_1.dll
2014-05-12 22:41 - 2008-07-31 10:41 - 00068616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_1.dll
2014-05-12 22:41 - 2008-07-31 10:40 - 00513544 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_2.dll
2014-05-12 22:41 - 2008-07-31 10:40 - 00509448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_2.dll
2014-05-12 22:41 - 2008-07-10 11:01 - 00467984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_39.dll
2014-05-12 22:41 - 2008-07-10 11:00 - 04992520 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_39.dll
2014-05-12 22:41 - 2008-07-10 11:00 - 03851784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_39.dll
2014-05-12 22:41 - 2008-07-10 11:00 - 01942552 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_39.dll
2014-05-12 22:41 - 2008-07-10 11:00 - 01493528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_39.dll
2014-05-12 22:41 - 2008-07-10 11:00 - 00540688 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_39.dll
2014-05-12 22:41 - 2008-05-30 14:19 - 00511496 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_1.dll
2014-05-12 22:41 - 2008-05-30 14:19 - 00507400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_1.dll
2014-05-12 22:41 - 2008-05-30 14:18 - 00238088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_1.dll
2014-05-12 22:41 - 2008-05-30 14:18 - 00177672 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_1.dll
2014-05-12 22:41 - 2008-05-30 14:17 - 00068104 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_0.dll
2014-05-12 22:41 - 2008-05-30 14:17 - 00065032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_0.dll
2014-05-12 22:41 - 2008-05-30 14:17 - 00025608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_4.dll
2014-05-12 22:41 - 2008-05-30 14:16 - 00028168 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_4.dll
2014-05-12 22:41 - 2008-05-30 14:11 - 04991496 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_38.dll
2014-05-12 22:41 - 2008-05-30 14:11 - 03850760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_38.dll
2014-05-12 22:41 - 2008-05-30 14:11 - 01941528 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_38.dll
2014-05-12 22:41 - 2008-05-30 14:11 - 01491992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_38.dll
2014-05-12 22:41 - 2008-05-30 14:11 - 00540688 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_38.dll
2014-05-12 22:41 - 2008-05-30 14:11 - 00467984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_38.dll
2014-05-12 22:41 - 2008-03-05 16:04 - 00489480 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_0.dll
2014-05-12 22:41 - 2008-03-05 16:03 - 00479752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_0.dll
2014-05-12 22:41 - 2008-03-05 16:03 - 00238088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_0.dll
2014-05-12 22:41 - 2008-03-05 16:03 - 00177672 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_0.dll
2014-05-12 22:41 - 2008-03-05 16:00 - 00028168 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_3.dll
2014-05-12 22:41 - 2008-03-05 16:00 - 00025608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_3.dll
2014-05-12 22:41 - 2008-03-05 15:56 - 04910088 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_37.dll
2014-05-12 22:41 - 2008-03-05 15:56 - 03786760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_37.dll
2014-05-12 22:41 - 2008-03-05 15:56 - 01860120 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_37.dll
2014-05-12 22:41 - 2008-03-05 15:56 - 01420824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_37.dll
2014-05-12 22:41 - 2008-02-05 23:07 - 00529424 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_37.dll
2014-05-12 22:41 - 2008-02-05 23:07 - 00462864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_37.dll
2014-05-12 22:41 - 2007-10-22 03:40 - 00411656 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_10.dll
2014-05-12 22:41 - 2007-10-22 03:39 - 00267272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_10.dll
2014-05-12 22:41 - 2007-10-22 03:37 - 00021000 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_2.dll
2014-05-12 22:41 - 2007-10-22 03:37 - 00017928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_2.dll
2014-05-12 22:41 - 2007-10-12 15:14 - 05081608 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_36.dll
2014-05-12 22:41 - 2007-10-12 15:14 - 03734536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_36.dll
2014-05-12 22:41 - 2007-10-12 15:14 - 02006552 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_36.dll
2014-05-12 22:41 - 2007-10-12 15:14 - 01374232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_36.dll
2014-05-12 22:41 - 2007-10-02 09:56 - 00508264 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_36.dll
2014-05-12 22:41 - 2007-10-02 09:56 - 00444776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_36.dll
2014-05-12 22:41 - 2007-07-20 00:57 - 00411496 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_9.dll
2014-05-12 22:41 - 2007-07-20 00:57 - 00267112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_9.dll
2014-05-12 22:41 - 2007-07-19 18:14 - 05073256 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_35.dll
2014-05-12 22:41 - 2007-07-19 18:14 - 03727720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_35.dll
2014-05-12 22:41 - 2007-07-19 18:14 - 01985904 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_35.dll
2014-05-12 22:41 - 2007-07-19 18:14 - 01358192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_35.dll
2014-05-12 22:41 - 2007-07-19 18:14 - 00508264 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_35.dll
2014-05-12 22:41 - 2007-07-19 18:14 - 00444776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_35.dll
2014-05-12 22:41 - 2007-06-20 20:49 - 00409960 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_8.dll
2014-05-12 22:41 - 2007-06-20 20:46 - 00266088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_8.dll
2014-05-12 22:41 - 2007-05-16 16:45 - 04496232 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_34.dll
2014-05-12 22:41 - 2007-05-16 16:45 - 03497832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_34.dll
2014-05-12 22:41 - 2007-05-16 16:45 - 01401200 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_34.dll
2014-05-12 22:41 - 2007-05-16 16:45 - 01124720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_34.dll
2014-05-12 22:41 - 2007-05-16 16:45 - 00506728 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_34.dll
2014-05-12 22:41 - 2007-05-16 16:45 - 00443752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_34.dll
2014-05-12 22:41 - 2007-04-04 18:55 - 00403304 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_7.dll
2014-05-12 22:41 - 2007-04-04 18:55 - 00261480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_7.dll
2014-05-12 22:41 - 2007-04-04 18:54 - 00107368 _____ (Microsoft Corporation) C:\WINDOWS\system32\xinput1_3.dll
2014-05-12 22:41 - 2007-04-04 18:53 - 00081768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xinput1_3.dll
2014-05-12 22:41 - 2007-03-15 16:57 - 00506728 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_33.dll
2014-05-12 22:41 - 2007-03-15 16:57 - 00443752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_33.dll
2014-05-12 22:41 - 2007-03-12 16:42 - 04494184 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_33.dll
2014-05-12 22:41 - 2007-03-12 16:42 - 03495784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_33.dll
2014-05-12 22:41 - 2007-03-12 16:42 - 01400176 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_33.dll
2014-05-12 22:41 - 2007-03-12 16:42 - 01123696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_33.dll
2014-05-12 22:41 - 2007-03-05 12:42 - 00017688 _____ (Microsoft Corporation) C:\WINDOWS\system32\x3daudio1_1.dll
2014-05-12 22:41 - 2007-03-05 12:42 - 00015128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\x3daudio1_1.dll
2014-05-12 22:41 - 2007-01-24 15:27 - 00393576 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_6.dll
2014-05-12 22:41 - 2007-01-24 15:27 - 00255848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_6.dll
2014-05-12 22:41 - 2006-12-08 12:02 - 00251672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_5.dll
2014-05-12 22:41 - 2006-12-08 12:00 - 00390424 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_5.dll
2014-05-12 22:41 - 2006-11-29 13:06 - 04398360 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_32.dll
2014-05-12 22:41 - 2006-11-29 13:06 - 03426072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_32.dll
2014-05-12 22:41 - 2006-11-29 13:06 - 00469264 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10.dll
2014-05-12 22:41 - 2006-11-29 13:06 - 00440080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10.dll
2014-05-12 22:41 - 2006-09-28 16:05 - 03977496 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_31.dll
2014-05-12 22:41 - 2006-09-28 16:05 - 00237848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_4.dll
2014-05-12 22:41 - 2006-09-28 16:04 - 00364824 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_4.dll
2014-05-12 22:41 - 2006-07-28 09:31 - 00083736 _____ (Microsoft Corporation) C:\WINDOWS\system32\xinput1_2.dll
2014-05-12 22:41 - 2006-07-28 09:30 - 00363288 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_3.dll
2014-05-12 22:41 - 2006-07-28 09:30 - 00236824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_3.dll
2014-05-12 22:41 - 2006-07-28 09:30 - 00062744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xinput1_2.dll
2014-05-12 22:41 - 2006-05-31 07:24 - 00230168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_2.dll
2014-05-12 22:41 - 2006-05-31 07:22 - 00354072 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_2.dll
2014-05-12 22:41 - 2006-03-31 12:41 - 03927248 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_30.dll
2014-05-12 22:41 - 2006-03-31 12:40 - 02388176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_30.dll
2014-05-12 22:41 - 2006-03-31 12:40 - 00352464 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_1.dll
2014-05-12 22:41 - 2006-03-31 12:39 - 00229584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_1.dll
2014-05-12 22:41 - 2006-03-31 12:39 - 00083664 _____ (Microsoft Corporation) C:\WINDOWS\system32\xinput1_1.dll
2014-05-12 22:41 - 2006-03-31 12:39 - 00062672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xinput1_1.dll
2014-05-12 22:41 - 2006-02-03 08:43 - 03830992 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_29.dll
2014-05-12 22:41 - 2006-02-03 08:43 - 02332368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_29.dll
2014-05-12 22:41 - 2006-02-03 08:42 - 00355536 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_0.dll
2014-05-12 22:41 - 2006-02-03 08:42 - 00230096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_0.dll
2014-05-12 22:41 - 2006-02-03 08:41 - 00016592 _____ (Microsoft Corporation) C:\WINDOWS\system32\x3daudio1_0.dll
2014-05-12 22:41 - 2006-02-03 08:41 - 00014032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\x3daudio1_0.dll
2014-05-12 22:41 - 2005-12-05 18:09 - 03815120 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_28.dll
2014-05-12 22:41 - 2005-12-05 18:09 - 02323664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_28.dll
2014-05-12 22:41 - 2005-07-22 19:59 - 03807440 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_27.dll
2014-05-12 22:41 - 2005-07-22 19:59 - 02319568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_27.dll
2014-05-12 22:41 - 2005-05-26 15:34 - 03767504 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_26.dll
2014-05-12 22:41 - 2005-05-26 15:34 - 02297552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_26.dll
2014-05-12 22:41 - 2005-03-18 17:19 - 03823312 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_25.dll
2014-05-12 22:41 - 2005-03-18 17:19 - 02337488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_25.dll
2014-05-12 22:41 - 2005-02-05 19:45 - 03544272 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_24.dll
2014-05-12 22:41 - 2005-02-05 19:45 - 02222800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_24.dll
2014-05-11 23:11 - 2014-05-11 23:13 - 00119512 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2014-05-11 23:10 - 2014-05-11 23:10 - 00000764 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-05-11 23:10 - 2014-05-11 23:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-05-11 23:10 - 2014-05-11 23:10 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-05-11 23:10 - 2014-04-03 09:51 - 00088280 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2014-05-11 23:10 - 2014-04-03 09:51 - 00063192 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys
2014-05-11 23:10 - 2014-04-03 09:50 - 00025816 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys
2014-05-11 20:04 - 2014-05-11 20:04 - 00000000 ____D () C:\Users\Public\CyberLink
2014-05-11 20:04 - 2013-12-01 11:55 - 00002097 _____ () C:\Users\Internet\Desktop\OneKey Recovery.lnk
2014-05-11 20:04 - 2013-12-01 11:51 - 00002188 _____ () C:\Users\Internet\Desktop\Lenovo PowerDVD 10.lnk
2014-05-11 19:39 - 2014-05-11 19:39 - 00000000 ____D () C:\Users\Internet\AppData\Roaming\WebApp
2014-05-11 19:37 - 2014-05-11 20:04 - 00000000 ____D () C:\Users\Internet\AppData\Roaming\CyberLink
2014-05-11 19:37 - 2014-05-11 19:37 - 00000000 ____D () C:\Users\Internet\Documents\Lenovo
2014-05-11 19:37 - 2014-05-11 19:37 - 00000000 ____D () C:\Users\Internet\Documents\CyberLink
2014-05-11 19:37 - 2014-05-11 19:37 - 00000000 ____D () C:\Users\Internet\AppData\Roaming\Lenovo
2014-05-11 19:37 - 2014-05-11 19:37 - 00000000 ____D () C:\Users\Internet\AppData\Local\Cyberlink
2014-05-11 18:29 - 2014-05-12 22:23 - 00000000 ____D () C:\Users\Internet\AppData\Roaming\Origin
2014-05-11 18:29 - 2014-05-11 18:36 - 00000000 ____D () C:\Users\Internet\AppData\Local\Origin
2014-05-11 18:26 - 2014-05-15 21:15 - 00000000 ____D () C:\ProgramData\Origin
2014-05-11 18:26 - 2014-05-12 22:51 - 00000000 ____D () C:\ProgramData\Electronic Arts
2014-05-11 18:26 - 2014-05-11 18:26 - 00000659 _____ () C:\Users\Public\Desktop\Origin.lnk
2014-05-11 18:26 - 2014-05-11 18:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Origin
2014-05-11 18:07 - 2014-05-11 18:07 - 00000000 ____D () C:\Users\Internet\AppData\Local\Macromedia
2014-05-11 18:04 - 2014-05-16 23:47 - 00000884 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2014-05-08 22:45 - 2014-05-08 22:45 - 00001095 _____ () C:\Users\Public\Desktop\StarMoney 9.0 S-Edition.lnk
2014-05-08 22:45 - 2014-05-08 22:45 - 00000000 ____D () C:\ProgramData\StarMoney 9.0
2014-05-08 22:45 - 2014-05-08 22:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StarMoney 9.0 S-Edition
2014-05-08 22:45 - 2014-05-08 22:45 - 00000000 ____D () C:\Program Files (x86)\Business Objects
2014-05-06 22:12 - 2014-05-06 22:12 - 00000000 ____D () C:\Program Files (x86)\AGEIA Technologies
2014-05-06 22:11 - 2014-03-04 13:32 - 00599840 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvStreaming.exe
2014-05-06 22:09 - 2014-03-04 16:35 - 31474976 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglv64.dll
2014-05-06 22:09 - 2014-03-04 16:35 - 25255256 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcompiler.dll
2014-05-06 22:09 - 2014-03-04 16:35 - 23716640 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglv32.dll
2014-05-06 22:09 - 2014-03-04 16:35 - 17755424 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvd3dumx.dll
2014-05-06 22:09 - 2014-03-04 16:35 - 17561544 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcompiler.dll
2014-05-06 22:09 - 2014-03-04 16:35 - 15783992 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvwgf2um.dll
2014-05-06 22:09 - 2014-03-04 16:35 - 12708128 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvlddmkm.sys
2014-05-06 22:09 - 2014-03-04 16:35 - 11636176 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll
2014-05-06 22:09 - 2014-03-04 16:35 - 11589272 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvopencl.dll
2014-05-06 22:09 - 2014-03-04 16:35 - 09728064 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll
2014-05-06 22:09 - 2014-03-04 16:35 - 09690424 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvopencl.dll
2014-05-06 22:09 - 2014-03-04 16:35 - 03143456 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll
2014-05-06 22:09 - 2014-03-04 16:35 - 02958792 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll
2014-05-06 22:09 - 2014-03-04 16:35 - 02783008 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvenc.dll
2014-05-06 22:09 - 2014-03-04 16:35 - 02411976 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvenc.dll
2014-05-06 22:09 - 2014-03-04 16:35 - 01885472 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6433523.dll
2014-05-06 22:09 - 2014-03-04 16:35 - 01516488 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6433523.dll
2014-05-06 22:09 - 2014-03-04 16:35 - 00892704 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll
2014-05-06 22:09 - 2014-03-04 16:35 - 00877856 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll
2014-05-06 22:09 - 2014-03-04 16:35 - 00863064 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll
2014-05-06 22:09 - 2014-03-04 16:35 - 00846168 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll
2014-05-06 22:09 - 2014-03-04 16:35 - 00484296 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll
2014-05-06 22:09 - 2014-03-04 16:35 - 00409544 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll
2014-05-06 22:09 - 2014-03-04 16:35 - 00377688 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFROpenGL.dll
2014-05-06 22:09 - 2014-03-04 16:35 - 00333600 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFROpenGL.dll
2014-05-06 22:09 - 2013-11-28 15:38 - 00197408 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvhda64v.sys
2014-05-06 22:09 - 2013-11-28 15:38 - 00031520 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvhdap64.dll
2014-05-06 22:08 - 2014-05-06 22:08 - 00000000 ____D () C:\NVIDIA
2014-05-06 22:06 - 2014-05-06 22:06 - 00000000 ____D () C:\Users\****** Admin\Documents\My Games
2014-05-06 22:01 - 2014-05-06 22:01 - 00001147 _____ () C:\Users\Internet\Desktop\Sharkoon Mouse Config.lnk
2014-05-06 21:35 - 2014-05-06 21:35 - 00000000 ____D () C:\Users\****** Admin\AppData\Local\Nvidia Corporation
2014-05-06 21:32 - 2014-05-06 21:32 - 00001378 _____ () C:\Users\Public\Desktop\GeForce Experience.lnk
2014-05-06 21:32 - 2014-04-30 20:27 - 01081112 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvspcap.dll
2014-05-06 21:32 - 2014-04-30 20:26 - 01225920 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvspcap64.dll
2014-05-06 21:32 - 2010-05-26 11:41 - 02401112 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_43.dll
2014-05-06 21:32 - 2010-05-26 11:41 - 01998168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_43.dll
2014-05-06 21:32 - 2010-05-26 11:41 - 00511328 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_43.dll
2014-05-06 21:32 - 2010-05-26 11:41 - 00470880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_43.dll
2014-05-06 21:32 - 2010-05-26 11:41 - 00276832 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx11_43.dll
2014-05-06 21:32 - 2010-05-26 11:41 - 00248672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx11_43.dll
2014-05-06 21:31 - 2014-05-12 22:44 - 00000000 ____D () C:\Users\Internet\AppData\Local\NVIDIA
2014-05-06 21:31 - 2014-05-06 21:32 - 00000000 ____D () C:\Users\Internet\AppData\Local\NVIDIA Corporation
2014-05-06 21:31 - 2014-05-06 21:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2014-05-06 21:31 - 2014-03-31 18:42 - 00040392 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvvad64v.sys
2014-05-06 21:31 - 2014-03-31 18:42 - 00037320 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvaudcap64v.dll
2014-05-06 21:31 - 2014-03-31 18:42 - 00034760 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvaudcap32v.dll
2014-05-06 21:22 - 2014-05-06 21:22 - 00000000 ____D () C:\Users\Internet\AppData\Roaming\MingGuan
2014-05-06 21:11 - 2014-05-14 22:09 - 00000000 ____D () C:\Users\Internet\Documents\My Games
2014-05-06 21:11 - 2014-05-06 21:11 - 00000000 ____D () C:\Users\Internet\AppData\Roaming\Macromedia
2014-05-06 20:54 - 2014-05-06 21:11 - 00000000 ____D () C:\Users\Internet\AppData\Local\Runic Games
2014-05-06 20:54 - 2014-05-06 20:54 - 00000841 _____ () C:\Users\Internet\Desktop\Torchlight 2.lnk
2014-05-06 20:54 - 2014-05-06 20:54 - 00000000 ____D () C:\Users\Internet\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Torchlight 2
2014-05-06 18:54 - 2014-05-06 18:54 - 00000000 ___RD () C:\WINDOWS\BrowserChoice
2014-05-06 18:53 - 2014-05-06 18:53 - 00000000 ____D () C:\Users\Default\AppData\Local\Microsoft Help
2014-05-06 18:53 - 2014-05-06 18:53 - 00000000 ____D () C:\Users\Default User\AppData\Local\Microsoft Help
2014-05-06 18:41 - 2014-05-06 18:41 - 01192533 _____ () C:\WINDOWS\unins000.exe
2014-05-06 18:41 - 2014-05-06 18:41 - 00017202 _____ () C:\WINDOWS\unins000.dat
2014-05-06 18:41 - 2014-05-06 18:41 - 00000000 ____D () C:\Users\****** Admin\AppData\Roaming\MingGuan
2014-05-06 18:41 - 2014-05-06 18:41 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Drakonia Black
2014-05-05 22:11 - 2014-05-05 22:11 - 00001216 _____ () C:\Users\Internet\Desktop\Microsoft PowerPoint 2010.lnk
2014-05-05 22:11 - 2014-05-05 22:11 - 00001203 _____ () C:\Users\Internet\Desktop\Microsoft Word 2010.lnk
2014-05-05 22:09 - 2014-05-05 22:09 - 00001216 _____ () C:\Users\Internet\Desktop\Microsoft Access 2010.lnk
2014-05-05 22:09 - 2014-05-05 22:09 - 00001187 _____ () C:\Users\Internet\Desktop\Microsoft Excel 2010.lnk
2014-05-05 22:07 - 2014-05-05 22:07 - 00000000 ____D () C:\Program Files (x86)\Microsoft Office
2014-05-05 22:05 - 2014-05-05 22:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SharePoint
2014-05-05 22:05 - 2014-05-05 22:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
2014-05-05 22:04 - 2014-05-11 17:02 - 00000000 ____D () C:\ProgramData\Lexmark Universal v2 XL
2014-05-05 22:04 - 2014-05-05 22:04 - 00000000 ____D () C:\WINDOWS\PCHEALTH
2014-05-05 22:04 - 2014-05-05 22:04 - 00000000 ____D () C:\Program Files (x86)\Microsoft Synchronization Services
2014-05-05 22:04 - 2014-05-05 22:04 - 00000000 ____D () C:\Program Files (x86)\Microsoft Sync Framework
2014-05-05 22:04 - 2014-05-05 22:04 - 00000000 ____D () C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2014-05-05 22:02 - 2014-05-05 22:02 - 00000000 ____D () C:\Program Files\Microsoft Office
2014-05-05 22:02 - 2014-05-05 22:02 - 00000000 ____D () C:\Program Files (x86)\Microsoft Visual Studio 8
2014-05-05 22:02 - 2014-05-05 22:02 - 00000000 ____D () C:\Program Files (x86)\Microsoft Analysis Services
2014-05-05 22:00 - 2014-05-14 18:39 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-05-05 22:00 - 2014-05-05 22:00 - 00000000 ____D () C:\Users\****** Admin\AppData\Local\Microsoft Help
2014-05-05 21:32 - 2014-05-05 21:32 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip
2014-05-05 21:13 - 2014-05-05 21:13 - 00084720 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avnetflt.sys
2014-05-05 00:05 - 2014-05-05 00:05 - 00000000 ____D () C:\Program Files\Lexmark ScanBack
2014-05-05 00:05 - 2014-05-05 00:05 - 00000000 ____D () C:\Program Files (x86)\Lexmark ScanBack
2014-05-05 00:01 - 2014-05-05 00:01 - 00000000 ____D () C:\Program Files\Lexmark Status Monitor Center
2014-05-05 00:00 - 2014-05-05 00:00 - 00000000 ____D () C:\Program Files\Lexmark Network TWAIN Driver
2014-05-05 00:00 - 2014-05-05 00:00 - 00000000 ____D () C:\Program Files (x86)\Lexmark Network TWAIN Driver
2014-05-05 00:00 - 2014-05-05 00:00 - 00000000 ____D () C:\Program Files (x86)\Lexmark
2014-05-04 23:59 - 2014-05-04 23:59 - 00000000 ____D () C:\ProgramData\APP
2014-05-04 23:54 - 2014-05-05 00:05 - 00076123 _____ () C:\WINDOWS\system32\LexFiles.ulf
2014-05-04 23:54 - 2014-05-05 00:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lexmark
2014-05-04 23:54 - 2014-05-04 23:54 - 00000000 ____D () C:\Program Files\Lexmark Universal v2
2014-05-04 23:54 - 2014-02-11 09:28 - 00252416 _____ ( ) C:\WINDOWS\system32\lmabtppm.dll
2014-05-04 23:54 - 2012-10-09 10:17 - 00906752 _____ ( ) C:\WINDOWS\system32\lexlog.dll
2014-05-04 23:54 - 2012-10-09 09:58 - 00446464 _____ ( ) C:\WINDOWS\SysWOW64\lexlog.dll
2014-05-04 23:52 - 2014-05-04 23:52 - 00000000 ____D () C:\ProgramData\UD1
2014-05-04 23:35 - 2014-05-04 23:35 - 00000719 _____ () C:\Users\Internet\Desktop\mp3DirectCut.lnk
2014-05-04 23:29 - 2014-05-04 23:29 - 00000659 _____ () C:\Users\Public\Desktop\Winamp.lnk
2014-05-04 23:29 - 2014-05-04 23:29 - 00000000 ____D () C:\Users\****** Admin\AppData\Roaming\Winamp
2014-05-04 23:29 - 2014-05-04 23:29 - 00000000 ____D () C:\Users\****** Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Winamp Erkennungs-Plug-in
2014-05-04 23:29 - 2014-05-04 23:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Winamp
2014-05-04 23:29 - 2009-09-04 17:29 - 01892184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_42.dll
2014-05-04 23:29 - 2006-09-28 16:05 - 02414360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_31.dll
2014-05-04 23:15 - 2014-05-04 23:15 - 00000000 ____D () C:\Users\****** Admin\AppData\Roaming\Avira
2014-05-04 23:15 - 2014-05-04 23:15 - 00000000 ____D () C:\Users\Internet\AppData\Roaming\Avira
2014-05-04 23:14 - 2014-05-04 23:14 - 00000914 _____ () C:\Users\Public\Desktop\Avira Control Center.lnk
2014-05-04 23:14 - 2014-05-04 23:14 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2014-05-04 23:14 - 2014-02-25 11:41 - 00131576 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avipbb.sys
2014-05-04 23:14 - 2014-02-25 11:41 - 00108440 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avgntflt.sys
2014-05-04 23:14 - 2014-02-25 11:41 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avkmgr.sys
2014-05-04 23:02 - 2014-05-04 23:14 - 00000000 ____D () C:\ProgramData\Avira
2014-05-04 21:48 - 2014-05-16 23:22 - 00000000 ____D () C:\Users\Internet\AppData\Roaming\KeePass
2014-05-04 21:41 - 2014-05-04 21:41 - 00000647 _____ () C:\Users\Public\Desktop\Steam.lnk
2014-05-04 21:41 - 2014-05-04 21:41 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
2014-05-04 20:47 - 2014-05-04 20:47 - 00000000 ____D ()

Alt 16.05.2014, 23:14   #9
Klattsche
 
Windows 8.1: Bei zugeklapptem Bildschirm öffnen sich wahllos Dateien vom Desktop - Standard

Windows 8.1: Bei zugeklapptem Bildschirm öffnen sich wahllos Dateien vom Desktop


Code:
ATTFilter
C:\Users\Internet\AppData\Roaming\Mozilla
2014-05-04 20:47 - 2014-05-04 20:47 - 00000000 ____D () C:\Users\Internet\AppData\Local\Mozilla
2014-05-04 20:45 - 2014-05-04 20:45 - 00001465 _____ () C:\Users\Internet\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-05-04 20:45 - 2014-05-04 20:45 - 00000020 ___SH () C:\Users\Internet\ntuser.ini
2014-05-04 19:35 - 2014-05-04 19:09 - 00000000 ___DC () C:\WINDOWS\Panther
2014-05-04 19:33 - 2014-05-04 19:33 - 16875520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 12732416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 08653824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 07425368 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2014-05-04 19:33 - 2014-05-04 19:33 - 06641152 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 05833728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Search.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 05770752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 04268544 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncEngine.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 02900992 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 02641920 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 02519384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2014-05-04 19:33 - 2014-05-04 19:33 - 02479616 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmSvc.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 02373784 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2014-05-04 19:33 - 2014-05-04 19:33 - 02331000 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 02317824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 02270208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 02141912 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 02133504 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 02088160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2014-05-04 19:33 - 2014-05-04 19:33 - 02030080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WsmSvc.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 02013016 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2014-05-04 19:33 - 2014-05-04 19:33 - 01843712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Display.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 01816576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Display.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 01779800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 01764864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 01679128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 01656832 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 01557848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2014-05-04 19:33 - 2014-05-04 19:33 - 01542768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 01527296 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 01466864 _____ (Microsoft Corporation) C:\WINDOWS\system32\propsys.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 01411584 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 01351168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 01339240 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 01306624 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 01291200 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel32.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 01230336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 01200296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\propsys.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 01129472 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFolder.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 01112536 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 01095488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 01066496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 01063424 _____ (Microsoft Corporation) C:\WINDOWS\system32\IKEEXT.DLL
2014-05-04 19:33 - 2014-05-04 19:33 - 01057280 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdvidcrl.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 01036288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kernel32.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 01023488 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 01015808 _____ (Microsoft Corporation) C:\WINDOWS\system32\aclui.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00958464 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00950784 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgent.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00939520 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00924160 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00918528 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00888320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00887296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aclui.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00872448 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDrive.exe
2014-05-04 19:33 - 2014-05-04 19:33 - 00855552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdvidcrl.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00839168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchFolder.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00836096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00834560 _____ (Microsoft Corporation) C:\WINDOWS\system32\netlogon.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00834048 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00827392 _____ (Microsoft Corporation) C:\WINDOWS\system32\BFE.DLL
2014-05-04 19:33 - 2014-05-04 19:33 - 00801792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00800256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReAgent.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00755712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00731648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\adtschema.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00731648 _____ (Microsoft Corporation) C:\WINDOWS\system32\adtschema.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00721408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveTelemetry.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00717312 _____ (Microsoft Corporation) C:\WINDOWS\system32\nshwfp.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00688640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netlogon.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00679424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys
2014-05-04 19:33 - 2014-05-04 19:33 - 00669696 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasapi32.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00655360 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsapi.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00629760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmCoreR.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00621568 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAgent.exe
2014-05-04 19:33 - 2014-05-04 19:33 - 00605184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasapi32.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00567296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nshwfp.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00565536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2014-05-04 19:33 - 2014-05-04 19:33 - 00542208 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.Printing.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00518552 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00512000 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidprov.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00494592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dnsapi.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00492256 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00488280 _____ (Microsoft Corporation) C:\WINDOWS\system32\netcfgx.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00467800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS
2014-05-04 19:33 - 2014-05-04 19:33 - 00467504 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00463264 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00462336 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlangpui.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00443904 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansec.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00443392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\nwifi.sys
2014-05-04 19:33 - 2014-05-04 19:33 - 00428888 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS
2014-05-04 19:33 - 2014-05-04 19:33 - 00425984 _____ (Microsoft Corporation) C:\WINDOWS\system32\clusapi.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00412672 _____ (Microsoft Corporation) C:\WINDOWS\system32\FWPUCLNT.DLL
2014-05-04 19:33 - 2014-05-04 19:33 - 00406912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00406512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00402944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
2014-05-04 19:33 - 2014-05-04 19:33 - 00402432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Graphics.Printing.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00390488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netcfgx.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00388408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00387210 _____ () C:\WINDOWS\system32\ApnDatabase.xml
2014-05-04 19:33 - 2014-05-04 19:33 - 00386560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlangpui.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00379224 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2014-05-04 19:33 - 2014-05-04 19:33 - 00376152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys
2014-05-04 19:33 - 2014-05-04 19:33 - 00370176 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanmsm.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00364640 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00360512 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfreadwrite.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00356864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlidprov.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00356848 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcomp.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00355832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfreadwrite.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00337752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Classpnp.sys
2014-05-04 19:33 - 2014-05-04 19:33 - 00334848 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDEServer.exe
2014-05-04 19:33 - 2014-05-04 19:33 - 00326024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00325632 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationApi.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00324096 _____ (Microsoft Corporation) C:\WINDOWS\system32\SessEnv.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00313344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\clusapi.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00305768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00300544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanmsm.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00299008 _____ (Microsoft Corporation) C:\WINDOWS\system32\pdh.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00298496 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSDMon.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00296960 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanapi.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00291840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Sensors.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00283648 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb10.sys
2014-05-04 19:33 - 2014-05-04 19:33 - 00280576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SessEnv.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00274944 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmWmiPl.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00271872 _____ (Microsoft Corporation) C:\WINDOWS\system32\spp.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00264192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FWPUCLNT.DLL
2014-05-04 19:33 - 2014-05-04 19:33 - 00262656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LocationApi.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00254976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pdh.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00254464 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsrslvr.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00252928 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00247296 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsApi.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00245760 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srvnet.sys
2014-05-04 19:33 - 2014-05-04 19:33 - 00244888 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2014-05-04 19:33 - 2014-05-04 19:33 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanapi.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00226304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Sensors.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00222720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\spp.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00222720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dcomp.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00220160 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00212992 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdd.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00201216 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReInfo.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00201216 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00197632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00192000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Scanners.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00186368 _____ (Microsoft Corporation) C:\WINDOWS\system32\dafWfdProvider.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00180056 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2014-05-04 19:33 - 2014-05-04 19:33 - 00172544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReInfo.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00171008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SensorsApi.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00160768 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxAllUserStore.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00157016 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wof.sys
2014-05-04 19:33 - 2014-05-04 19:33 - 00151040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Scanners.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxdav.sys
2014-05-04 19:33 - 2014-05-04 19:33 - 00139776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxAllUserStore.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00136024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wfplwfs.sys
2014-05-04 19:33 - 2014-05-04 19:33 - 00134144 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dfsc.sys
2014-05-04 19:33 - 2014-05-04 19:33 - 00115200 _____ (Microsoft Corporation) C:\WINDOWS\system32\umpnpmgr.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00115200 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevPropMgr.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00113648 _____ (Microsoft Corporation) C:\WINDOWS\system32\userenv.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidclass.sys
2014-05-04 19:33 - 2014-05-04 19:33 - 00110592 _____ (Microsoft Corporation) C:\WINDOWS\system32\drvinst.exe
2014-05-04 19:33 - 2014-05-04 19:33 - 00102912 _____ (Microsoft Corporation) C:\WINDOWS\system32\davclnt.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00098816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\drvinst.exe
2014-05-04 19:33 - 2014-05-04 19:33 - 00094016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\userenv.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00086016 _____ (Microsoft Corporation) C:\WINDOWS\system32\RMapi.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\davclnt.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\sxproxy.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00079360 _____ (Microsoft Corporation) C:\WINDOWS\system32\w32tm.exe
2014-05-04 19:33 - 2014-05-04 19:33 - 00079360 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\IPMIDrv.sys
2014-05-04 19:33 - 2014-05-04 19:33 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\w32tm.exe
2014-05-04 19:33 - 2014-05-04 19:33 - 00069120 _____ (Microsoft Corporation) C:\WINDOWS\system32\l2gpstore.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsgqec.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\l2gpstore.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00057856 _____ (Microsoft Corporation) C:\WINDOWS\system32\drvcfg.exe
2014-05-04 19:33 - 2014-05-04 19:33 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tsgqec.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpipreg.sys
2014-05-04 19:33 - 2014-05-04 19:33 - 00040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Shell.Search.UriHandler.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00040448 _____ (Microsoft Corporation) C:\WINDOWS\system32\SetNetworkLocation.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Shell.Search.UriHandler.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sxproxy.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidusb.sys
2014-05-04 19:33 - 2014-05-04 19:33 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredentialMigrationHandler.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredentialMigrationHandler.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanhlp.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanhlp.dll
2014-05-04 19:31 - 2014-05-04 19:31 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2014-05-04 19:31 - 2014-05-04 19:31 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2014-05-04 19:29 - 2014-05-05 22:05 - 00000000 ____D () C:\Program Files (x86)\MSBuild
2014-05-04 19:29 - 2014-05-04 19:29 - 00000000 ____D () C:\WINDOWS\SysWOW64\XPSViewer
2014-05-04 19:29 - 2014-05-04 19:29 - 00000000 ____D () C:\Program Files\Reference Assemblies
2014-05-04 19:29 - 2014-05-04 19:29 - 00000000 ____D () C:\Program Files\MSBuild
2014-05-04 19:29 - 2014-05-04 19:29 - 00000000 ____D () C:\Program Files (x86)\Reference Assemblies
2014-05-04 19:28 - 2014-05-04 18:44 - 00000000 ____D () C:\Recovery
2014-05-04 19:28 - 2013-08-03 06:48 - 01166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll
2014-05-04 19:28 - 2013-08-03 06:48 - 00124112 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2014-05-04 19:28 - 2013-08-03 06:48 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe
2014-05-04 19:28 - 2013-08-03 06:41 - 00778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll
2014-05-04 19:28 - 2013-08-03 06:41 - 00102608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2014-05-04 19:28 - 2013-08-03 06:41 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe
2014-05-04 19:09 - 2014-05-04 19:09 - 00001465 _____ () C:\Users\****** Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-05-04 19:09 - 2014-05-04 19:09 - 00000020 ___SH () C:\Users\****** Admin\ntuser.ini
2014-05-04 19:03 - 2014-05-04 19:03 - 00000000 _SHDL () C:\Users\Default\Vorlagen
2014-05-04 19:03 - 2014-05-04 19:03 - 00000000 _SHDL () C:\Users\Default\Startmenü
2014-05-04 19:03 - 2014-05-04 19:03 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung
2014-05-04 19:03 - 2014-05-04 19:03 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen
2014-05-04 19:03 - 2014-05-04 19:03 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien
2014-05-04 19:03 - 2014-05-04 19:03 - 00000000 _SHDL () C:\Users\Default\Druckumgebung
2014-05-04 19:03 - 2014-05-04 19:03 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik
2014-05-04 19:03 - 2014-05-04 19:03 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder
2014-05-04 19:03 - 2014-05-04 19:03 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-05-04 19:03 - 2014-05-04 19:03 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf
2014-05-04 19:03 - 2014-05-04 19:03 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten
2014-05-04 19:03 - 2014-05-04 19:03 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten
2014-05-04 19:03 - 2014-05-04 19:03 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik
2014-05-04 19:03 - 2014-05-04 19:03 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder
2014-05-04 19:03 - 2014-05-04 19:03 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-05-04 19:03 - 2014-05-04 19:03 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf
2014-05-04 19:03 - 2014-05-04 19:03 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten
2014-05-04 18:58 - 2014-05-04 18:58 - 00022960 _____ () C:\WINDOWS\system32\emptyregdb.dat
2014-05-04 18:52 - 2014-05-04 18:52 - 00000000 ____D () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Lenovo
2014-05-04 18:52 - 2014-05-04 18:52 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Lenovo
2014-05-04 18:51 - 2014-05-04 18:51 - 00001547 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2014-05-04 18:47 - 2014-05-15 23:04 - 00000000 ____D () C:\Users\Internet
2014-05-04 18:47 - 2014-05-14 18:21 - 00000000 ____D () C:\Users\****** Admin
2014-05-04 18:47 - 2014-05-04 19:03 - 00036198 _____ () C:\WINDOWS\diagwrn.xml
2014-05-04 18:47 - 2014-05-04 19:03 - 00036198 _____ () C:\WINDOWS\diagerr.xml
2014-05-04 18:47 - 2014-05-04 18:48 - 00000000 ___RD () C:\Users\****** Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-05-04 18:47 - 2014-05-04 18:48 - 00000000 ___RD () C:\Users\****** Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-05-04 18:47 - 2014-05-04 18:48 - 00000000 ___RD () C:\Users\Internet\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-05-04 18:47 - 2014-05-04 18:48 - 00000000 ___RD () C:\Users\Internet\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-05-04 18:47 - 2014-05-04 18:47 - 00000000 _SHDL () C:\Users\****** Admin\Vorlagen
2014-05-04 18:47 - 2014-05-04 18:47 - 00000000 _SHDL () C:\Users\****** Admin\Startmenü
2014-05-04 18:47 - 2014-05-04 18:47 - 00000000 _SHDL () C:\Users\****** Admin\Netzwerkumgebung
2014-05-04 18:47 - 2014-05-04 18:47 - 00000000 _SHDL () C:\Users\****** Admin\Lokale Einstellungen
2014-05-04 18:47 - 2014-05-04 18:47 - 00000000 _SHDL () C:\Users\****** Admin\Eigene Dateien
2014-05-04 18:47 - 2014-05-04 18:47 - 00000000 _SHDL () C:\Users\****** Admin\Druckumgebung
2014-05-04 18:47 - 2014-05-04 18:47 - 00000000 _SHDL () C:\Users\****** Admin\Documents\Eigene Musik
2014-05-04 18:47 - 2014-05-04 18:47 - 00000000 _SHDL () C:\Users\****** Admin\Documents\Eigene Bilder
2014-05-04 18:47 - 2014-05-04 18:47 - 00000000 _SHDL () C:\Users\****** Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-05-04 18:47 - 2014-05-04 18:47 - 00000000 _SHDL () C:\Users\****** Admin\AppData\Local\Verlauf
2014-05-04 18:47 - 2014-05-04 18:47 - 00000000 _SHDL () C:\Users\****** Admin\AppData\Local\Anwendungsdaten
2014-05-04 18:47 - 2014-05-04 18:47 - 00000000 _SHDL () C:\Users\****** Admin\Anwendungsdaten
2014-05-04 18:47 - 2014-05-04 18:47 - 00000000 _SHDL () C:\Users\Internet\Vorlagen
2014-05-04 18:47 - 2014-05-04 18:47 - 00000000 _SHDL () C:\Users\Internet\Startmenü
2014-05-04 18:47 - 2014-05-04 18:47 - 00000000 _SHDL () C:\Users\Internet\Netzwerkumgebung
2014-05-04 18:47 - 2014-05-04 18:47 - 00000000 _SHDL () C:\Users\Internet\Lokale Einstellungen
2014-05-04 18:47 - 2014-05-04 18:47 - 00000000 _SHDL () C:\Users\Internet\Eigene Dateien
2014-05-04 18:47 - 2014-05-04 18:47 - 00000000 _SHDL () C:\Users\Internet\Druckumgebung
2014-05-04 18:47 - 2014-05-04 18:47 - 00000000 _SHDL () C:\Users\Internet\Documents\Eigene Musik
2014-05-04 18:47 - 2014-05-04 18:47 - 00000000 _SHDL () C:\Users\Internet\Documents\Eigene Bilder
2014-05-04 18:47 - 2014-05-04 18:47 - 00000000 _SHDL () C:\Users\Internet\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-05-04 18:47 - 2014-05-04 18:47 - 00000000 _SHDL () C:\Users\Internet\AppData\Local\Verlauf
2014-05-04 18:47 - 2014-05-04 18:47 - 00000000 _SHDL () C:\Users\Internet\AppData\Local\Anwendungsdaten
2014-05-04 18:47 - 2014-05-04 18:47 - 00000000 _SHDL () C:\Users\Internet\Anwendungsdaten
2014-05-04 18:47 - 2014-03-18 12:11 - 00000369 _____ () C:\Users\****** Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk
2014-05-04 18:47 - 2014-03-18 12:11 - 00000369 _____ () C:\Users\****** Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk
2014-05-04 18:47 - 2014-03-18 12:11 - 00000369 _____ () C:\Users\Internet\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk
2014-05-04 18:47 - 2014-03-18 12:11 - 00000369 _____ () C:\Users\Internet\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk
2014-05-04 18:47 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\****** Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-05-04 18:47 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Internet\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-05-04 18:47 - 2013-08-22 17:36 - 00000000 ____D () C:\Users\****** Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-05-04 18:47 - 2013-08-22 17:36 - 00000000 ____D () C:\Users\Internet\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-05-04 18:40 - 2014-05-04 18:40 - 00000000 ____D () C:\WINDOWS\SysWOW64\RTCOM
2014-05-04 18:40 - 2014-05-04 18:40 - 00000000 ____D () C:\Program Files\Realtek
2014-05-04 18:38 - 2014-05-16 23:44 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-05-04 18:38 - 2014-05-06 22:12 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2014-05-04 18:38 - 2014-03-04 16:35 - 00062408 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll
2014-05-04 18:38 - 2014-03-04 16:35 - 00054216 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll
2014-05-04 18:38 - 2014-03-04 15:06 - 06714312 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll
2014-05-04 18:38 - 2014-03-04 15:06 - 03497816 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc64.dll
2014-05-04 18:38 - 2014-03-04 15:05 - 02558808 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvcr.dll
2014-05-04 18:38 - 2014-03-04 15:05 - 00922968 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe
2014-05-04 18:38 - 2014-03-04 15:05 - 00607064 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\oemdspif.dll
2014-05-04 18:38 - 2014-03-04 15:05 - 00386336 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmctray.dll
2014-05-04 18:38 - 2014-03-04 15:05 - 00064968 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvshext.dll
2014-05-04 18:37 - 2014-05-16 23:35 - 01322394 _____ () C:\WINDOWS\WindowsUpdate.log
2014-05-04 18:37 - 2014-05-06 21:32 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation
2014-05-04 18:37 - 2014-05-06 21:32 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2014-05-04 18:37 - 2014-05-04 18:40 - 00000000 ____D () C:\Program Files\Elantech
2014-05-04 18:16 - 2014-05-04 19:03 - 00006599 _____ () C:\WINDOWS\comsetup.log
2014-05-04 11:34 - 2014-05-06 21:32 - 00000000 ____D () C:\Users\****** Admin\AppData\Local\NVIDIA
2014-05-04 10:21 - 2014-05-04 10:21 - 00000000 ____D () C:\ProgramData\Intel(R) Update Manager
2014-05-04 10:15 - 2014-05-04 10:15 - 00000751 _____ () C:\Users\Internet\Desktop\KeePass 2.lnk
2014-05-03 18:37 - 2014-05-03 18:37 - 00000000 ____D () C:\Users\****** Admin\AppData\Roaming\Macromedia
2014-05-03 18:25 - 2014-05-03 18:25 - 00000751 _____ () C:\Users\****** Admin\Desktop\KeePass 2.lnk
2014-05-03 18:25 - 2014-05-03 18:25 - 00000751 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KeePass 2.lnk
2014-05-03 18:21 - 2014-05-03 18:21 - 00000000 _____ () C:\Users\****** Admin\agent.log
2014-05-03 18:14 - 2014-05-14 18:37 - 93223848 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2014-05-03 18:14 - 2014-05-14 18:37 - 00000000 ____D () C:\WINDOWS\system32\MRT
2014-05-03 18:07 - 2014-05-04 18:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDF-XChange PDF Viewer
2014-05-03 18:07 - 2014-05-03 18:07 - 00000843 _____ () C:\Users\Public\Desktop\PDF-Viewer.lnk
2014-05-03 17:58 - 2014-05-03 17:58 - 00000000 ____D () C:\Users\****** Admin\AppData\Roaming\Intel Corporation
2014-05-03 17:57 - 2014-05-16 23:32 - 00000000 ___RD () C:\Users\****** Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-05-03 17:57 - 2014-05-16 23:32 - 00000000 ___RD () C:\Users\****** Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-05-03 17:57 - 2014-05-03 17:57 - 00000000 ____D () C:\Users\****** Admin\AppData\Roaming\Adobe
2014-05-03 17:57 - 2014-05-03 17:57 - 00000000 ____D () C:\ProgramData\Energy Management
2014-05-03 17:57 - 2014-05-03 17:57 - 00000000 ____D () C:\ProgramData\eBay
2014-05-03 17:56 - 2014-05-04 19:12 - 00000000 ____D () C:\Users\****** Admin\AppData\Local\Packages
2014-05-03 17:56 - 2014-05-04 18:48 - 00000000 ____D () C:\Users\****** Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Lenovo
2014-05-03 17:56 - 2014-05-03 17:57 - 00001133 _____ () C:\Users\****** Admin\Desktop\Cyberlink Power2Go.lnk
2014-05-03 17:56 - 2014-05-03 17:56 - 00000000 ____D () C:\Users\****** Admin\AppData\Roaming\Intel
2014-05-03 17:56 - 2014-05-03 17:56 - 00000000 ____D () C:\Users\****** Admin\AppData\Local\VirtualStore
2014-05-03 17:52 - 2014-05-03 17:52 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Musik
2014-05-03 17:52 - 2014-05-03 17:52 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Bilder
2014-05-03 17:52 - 2014-05-03 17:52 - 00000000 _SHDL () C:\Users\Default.migrated\Vorlagen
2014-05-03 17:52 - 2014-05-03 17:52 - 00000000 _SHDL () C:\Users\Default.migrated\Startmenü
2014-05-03 17:52 - 2014-05-03 17:52 - 00000000 _SHDL () C:\Users\Default.migrated\Netzwerkumgebung
2014-05-03 17:52 - 2014-05-03 17:52 - 00000000 _SHDL () C:\Users\Default.migrated\Lokale Einstellungen
2014-05-03 17:52 - 2014-05-03 17:52 - 00000000 _SHDL () C:\Users\Default.migrated\Eigene Dateien
2014-05-03 17:52 - 2014-05-03 17:52 - 00000000 _SHDL () C:\Users\Default.migrated\Druckumgebung
2014-05-03 17:52 - 2014-05-03 17:52 - 00000000 _SHDL () C:\Users\Default.migrated\Documents\Eigene Musik
2014-05-03 17:52 - 2014-05-03 17:52 - 00000000 _SHDL () C:\Users\Default.migrated\Documents\Eigene Bilder
2014-05-03 17:52 - 2014-05-03 17:52 - 00000000 _SHDL () C:\Users\Default.migrated\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-05-03 17:52 - 2014-05-03 17:52 - 00000000 _SHDL () C:\Users\Default.migrated\AppData\Local\Verlauf
2014-05-03 17:52 - 2014-05-03 17:52 - 00000000 _SHDL () C:\Users\Default.migrated\AppData\Local\Anwendungsdaten
2014-05-03 17:52 - 2014-05-03 17:52 - 00000000 _SHDL () C:\Users\Default.migrated\Anwendungsdaten
2014-05-03 17:52 - 2014-05-03 17:52 - 00000000 _SHDL () C:\Programme
2014-05-03 17:52 - 2014-05-03 17:52 - 00000000 _SHDL () C:\ProgramData\Vorlagen
2014-05-03 17:52 - 2014-05-03 17:52 - 00000000 _SHDL () C:\ProgramData\Startmenü
2014-05-03 17:52 - 2014-05-03 17:52 - 00000000 _SHDL () C:\ProgramData\Microsoft\Windows\Start Menu\Programme
2014-05-03 17:52 - 2014-05-03 17:52 - 00000000 _SHDL () C:\ProgramData\Dokumente
2014-05-03 17:52 - 2014-05-03 17:52 - 00000000 _SHDL () C:\ProgramData\Anwendungsdaten
2014-05-03 17:52 - 2014-05-03 17:52 - 00000000 _SHDL () C:\Program Files\Gemeinsame Dateien
2014-05-03 17:52 - 2014-05-03 17:52 - 00000000 _SHDL () C:\Dokumente und Einstellungen
2014-05-03 17:51 - 2014-05-04 23:12 - 00000000 ____D () C:\Program Files (x86)\avira
2014-05-03 17:07 - 2014-05-03 17:07 - 00000000 ____D () C:\Users\****** Admin\AppData\Roaming\Mozilla
2014-05-03 17:07 - 2014-05-03 17:07 - 00000000 ____D () C:\Users\****** Admin\AppData\Local\Mozilla
2014-05-03 17:07 - 2014-05-03 17:07 - 00000000 ____D () C:\ProgramData\Mozilla
2014-05-03 16:49 - 2014-05-03 16:49 - 00000000 ____D () C:\ProgramData\tmp
2014-05-03 16:49 - 2014-05-03 16:49 - 00000000 ____D () C:\ProgramData\hps
2014-05-03 16:27 - 2014-05-03 16:27 - 00000355 _____ () C:\Users\Internet\Desktop\Computer.lnk
2014-05-03 16:26 - 2014-05-03 16:26 - 00000000 ____D () C:\Users\Internet\AppData\Roaming\Intel Corporation
2014-05-03 16:25 - 2014-05-14 18:47 - 00000000 ___RD () C:\Users\Internet\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-05-03 16:25 - 2014-05-14 18:47 - 00000000 ___RD () C:\Users\Internet\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-05-03 16:25 - 2014-05-11 20:04 - 00001133 _____ () C:\Users\Internet\Desktop\Cyberlink Power2Go.lnk
2014-05-03 16:25 - 2014-05-06 18:54 - 00000000 ____D () C:\Users\Internet\AppData\Local\Packages
2014-05-03 16:25 - 2014-05-04 18:48 - 00000000 ____D () C:\Users\Internet\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Lenovo
2014-05-03 16:25 - 2014-05-03 16:25 - 00000000 ____D () C:\Users\Internet\AppData\Roaming\Intel
2014-05-03 16:25 - 2014-05-03 16:25 - 00000000 ____D () C:\Users\Internet\AppData\Roaming\Adobe
2014-05-03 16:25 - 2014-05-03 16:25 - 00000000 ____D () C:\Users\Internet\AppData\Local\VirtualStore
2014-05-03 12:20 - 2014-05-03 12:20 - 00000000 ____D () C:\Users\****** Admin\AppData\Roaming\Nitro
2014-05-03 12:16 - 2014-05-03 12:16 - 00000000 ____D () C:\Users\****** Admin\Documents\Avatar
2014-05-03 12:14 - 2014-05-03 16:49 - 00000000 ____D () C:\Users\****** Admin\Documents\Youcam
2014-05-03 12:14 - 2014-05-03 12:14 - 00000000 ____D () C:\Users\****** Admin\AppData\Roaming\CyberLink
2014-05-03 12:14 - 2014-05-03 12:14 - 00000000 ____D () C:\Users\****** Admin\AppData\Local\CyberLink
2014-05-03 12:11 - 2014-05-03 12:11 - 00000000 ____D () C:\Users\****** Admin\AppData\Roaming\Seagate
2014-05-03 12:10 - 2014-05-04 18:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Seagate
2014-05-03 12:10 - 2014-05-03 12:11 - 00000000 ____D () C:\ProgramData\Seagate
2014-05-03 12:10 - 2014-05-03 12:10 - 01462560 _____ (Acronis International GmbH) C:\WINDOWS\system32\Drivers\tdrpman.sys
2014-05-03 12:10 - 2014-05-03 12:10 - 01120032 _____ (Acronis International GmbH) C:\WINDOWS\system32\Drivers\tib.sys
2014-05-03 12:10 - 2014-05-03 12:10 - 00233760 _____ (Acronis) C:\WINDOWS\system32\Drivers\snapman.sys
2014-05-03 12:10 - 2014-05-03 12:10 - 00183224 _____ (Acronis) C:\WINDOWS\system32\Drivers\tib_mounter.sys
2014-05-03 12:10 - 2014-05-03 12:10 - 00108832 _____ (Acronis International GmbH) C:\WINDOWS\system32\Drivers\fltsrv.sys
2014-05-03 12:10 - 2014-05-03 12:10 - 00000928 _____ () C:\Users\Public\Desktop\Seagate DiscWizard.lnk
2014-05-03 12:10 - 2014-05-03 12:10 - 00000000 ____D () C:\ProgramData\Acronis
2014-05-03 12:01 - 2014-05-03 12:01 - 00000355 _____ () C:\Users\****** Admin\Desktop\Computer.lnk

==================== One Month Modified Files and Folders =======

2014-05-17 00:05 - 2014-05-17 00:05 - 00015885 _____ () C:\Users\Internet\Desktop\FRST.txt
2014-05-17 00:05 - 2014-05-14 18:22 - 00000000 ____D () C:\FRST
2014-05-17 00:04 - 2014-05-17 00:04 - 00000000 ____D () C:\Users\Internet\Desktop\FRST-OlderVersion
2014-05-17 00:04 - 2014-05-14 18:21 - 02067456 _____ (Farbar) C:\Users\Internet\Desktop\FRST64.exe
2014-05-17 00:00 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\sru
2014-05-16 23:58 - 2014-05-16 23:58 - 00000737 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-05-16 23:58 - 2014-05-16 23:58 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-05-16 23:56 - 2014-05-16 23:56 - 00000000 __SHD () C:\Users\Internet\AppData\Local\EmieUserList
2014-05-16 23:56 - 2014-05-16 23:56 - 00000000 __SHD () C:\Users\Internet\AppData\Local\EmieSiteList
2014-05-16 23:48 - 2014-03-18 12:03 - 01780340 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2014-05-16 23:48 - 2014-03-18 11:25 - 00766620 _____ () C:\WINDOWS\system32\perfh007.dat
2014-05-16 23:48 - 2014-03-18 11:25 - 00159902 _____ () C:\WINDOWS\system32\perfc007.dat
2014-05-16 23:47 - 2014-05-11 18:04 - 00000884 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2014-05-16 23:44 - 2014-05-04 18:38 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-05-16 23:44 - 2013-08-22 16:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2014-05-16 23:43 - 2014-05-16 23:42 - 00000622 _____ () C:\Users\****** Admin\Desktop\JRT.txt
2014-05-16 23:43 - 2013-12-01 11:53 - 00002560 _____ () C:\WINDOWS\system32\VfService.trf
2014-05-16 23:35 - 2014-05-04 18:37 - 01322394 _____ () C:\WINDOWS\WindowsUpdate.log
2014-05-16 23:32 - 2014-05-03 17:57 - 00000000 ___RD () C:\Users\****** Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-05-16 23:32 - 2014-05-03 17:57 - 00000000 ___RD () C:\Users\****** Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-05-16 23:31 - 2014-05-16 23:31 - 00000000 ____D () C:\WINDOWS\ERUNT
2014-05-16 23:26 - 2014-05-16 23:25 - 00000000 ____D () C:\AdwCleaner
2014-05-16 23:26 - 2014-03-18 03:50 - 00209970 _____ () C:\WINDOWS\PFRO.log
2014-05-16 23:25 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\AppReadiness
2014-05-16 23:22 - 2014-05-04 21:48 - 00000000 ____D () C:\Users\Internet\AppData\Roaming\KeePass
2014-05-16 23:20 - 2014-05-16 23:20 - 01016261 _____ (Thisisu) C:\Users\Internet\Desktop\JRT.exe
2014-05-16 23:19 - 2014-05-16 23:19 - 01325827 _____ () C:\Users\Internet\Desktop\adwcleaner_3.208.exe
2014-05-15 23:04 - 2014-05-04 18:47 - 00000000 ____D () C:\Users\Internet
2014-05-15 21:17 - 2012-07-26 10:12 - 00000000 ____D () C:\WINDOWS\LiveKernelReports
2014-05-15 21:15 - 2014-05-11 18:26 - 00000000 ____D () C:\ProgramData\Origin
2014-05-15 00:15 - 2014-05-15 00:15 - 00000136 _____ () C:\Users\Internet\Desktop\Crysis® 2.lnk
2014-05-15 00:11 - 2014-05-12 22:41 - 00028116 _____ () C:\WINDOWS\DirectX.log
2014-05-14 22:09 - 2014-05-06 21:11 - 00000000 ____D () C:\Users\Internet\Documents\My Games
2014-05-14 20:57 - 2014-05-14 20:57 - 00669184 _____ () C:\WINDOWS\SysWOW64\pbsvc.exe
2014-05-14 20:57 - 2014-05-14 20:57 - 00000757 _____ () C:\Users\Public\Desktop\Crysis.lnk
2014-05-14 20:57 - 2014-05-12 22:41 - 00103736 _____ () C:\WINDOWS\SysWOW64\PnkBstrB.exe
2014-05-14 20:57 - 2014-05-12 22:41 - 00066872 _____ () C:\WINDOWS\SysWOW64\PnkBstrA.exe
2014-05-14 18:47 - 2014-05-03 16:25 - 00000000 ___RD () C:\Users\Internet\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-05-14 18:47 - 2014-05-03 16:25 - 00000000 ___RD () C:\Users\Internet\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-05-14 18:46 - 2014-05-14 18:46 - 00000000 ____D () C:\WINDOWS\Minidump
2014-05-14 18:45 - 2014-05-14 18:45 - 1997058588 _____ () C:\WINDOWS\MEMORY.DMP
2014-05-14 18:45 - 2014-05-12 22:41 - 00000000 ____D () C:\Program Files (x86)\Battlelog Web Plugins
2014-05-14 18:39 - 2014-05-05 22:00 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-05-14 18:39 - 2013-08-22 17:36 - 00000000 ___RD () C:\WINDOWS\ToastData
2014-05-14 18:39 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-05-14 18:39 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-05-14 18:39 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\WinStore
2014-05-14 18:39 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\SecureBootUpdates
2014-05-14 18:39 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files\Windows Defender
2014-05-14 18:39 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files (x86)\Windows Defender
2014-05-14 18:37 - 2014-05-03 18:14 - 93223848 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2014-05-14 18:37 - 2014-05-03 18:14 - 00000000 ____D () C:\WINDOWS\system32\MRT
2014-05-14 18:31 - 2014-05-14 18:31 - 00007396 _____ () C:\Users\****** Admin\Desktop\Gmer.txt
2014-05-14 18:25 - 2014-05-14 18:25 - 00380416 _____ () C:\Users\Internet\Desktop\Gmer-19357.exe
2014-05-14 18:21 - 2014-05-14 18:21 - 00000000 _____ () C:\Users\****** Admin\defogger_reenable
2014-05-14 18:21 - 2014-05-04 18:47 - 00000000 ____D () C:\Users\****** Admin
2014-05-14 18:19 - 2014-05-14 18:19 - 00050477 _____ () C:\Users\Internet\Desktop\Defogger.exe
2014-05-14 17:45 - 2013-12-01 11:22 - 00000000 ____D () C:\ProgramData\Intel
2014-05-14 17:45 - 2013-12-01 11:08 - 00000000 ____D () C:\Program Files (x86)\Intel
2014-05-12 23:37 - 2014-05-12 22:41 - 00214392 _____ () C:\WINDOWS\SysWOW64\PnkBstrB.ex0
2014-05-12 23:23 - 2014-05-12 22:51 - 00000000 ____D () C:\Users\Internet\Documents\Battlefield 4
2014-05-12 22:54 - 2014-05-12 22:54 - 00000000 ____D () C:\Users\Internet\AppData\Local\PunkBuster
2014-05-12 22:51 - 2014-05-11 18:26 - 00000000 ____D () C:\ProgramData\Electronic Arts
2014-05-12 22:50 - 2014-05-12 22:50 - 00000000 ____D () C:\Users\Internet\AppData\Local\ESN
2014-05-12 22:44 - 2014-05-06 21:31 - 00000000 ____D () C:\Users\Internet\AppData\Local\NVIDIA
2014-05-12 22:41 - 2014-05-12 22:41 - 00000687 _____ () C:\Users\Public\Desktop\Battlefield 4(64 bit).lnk
2014-05-12 22:41 - 2014-05-12 22:41 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battlefield 4
2014-05-12 22:41 - 2013-12-01 11:30 - 00000000 ____D () C:\ProgramData\Package Cache
2014-05-12 22:23 - 2014-05-11 18:29 - 00000000 ____D () C:\Users\Internet\AppData\Roaming\Origin
2014-05-11 23:13 - 2014-05-11 23:11 - 00119512 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2014-05-11 23:10 - 2014-05-11 23:10 - 00000764 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-05-11 23:10 - 2014-05-11 23:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-05-11 23:10 - 2014-05-11 23:10 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-05-11 20:04 - 2014-05-11 20:04 - 00000000 ____D () C:\Users\Public\CyberLink
2014-05-11 20:04 - 2014-05-11 19:37 - 00000000 ____D () C:\Users\Internet\AppData\Roaming\CyberLink
2014-05-11 20:04 - 2014-05-03 16:25 - 00001133 _____ () C:\Users\Internet\Desktop\Cyberlink Power2Go.lnk
2014-05-11 19:39 - 2014-05-11 19:39 - 00000000 ____D () C:\Users\Internet\AppData\Roaming\WebApp
2014-05-11 19:37 - 2014-05-11 19:37 - 00000000 ____D () C:\Users\Internet\Documents\Lenovo
2014-05-11 19:37 - 2014-05-11 19:37 - 00000000 ____D () C:\Users\Internet\Documents\CyberLink
2014-05-11 19:37 - 2014-05-11 19:37 - 00000000 ____D () C:\Users\Internet\AppData\Roaming\Lenovo
2014-05-11 19:37 - 2014-05-11 19:37 - 00000000 ____D () C:\Users\Internet\AppData\Local\Cyberlink
2014-05-11 19:37 - 2013-12-01 11:49 - 00000000 ____D () C:\ProgramData\Lenovo
2014-05-11 18:36 - 2014-05-11 18:29 - 00000000 ____D () C:\Users\Internet\AppData\Local\Origin
2014-05-11 18:26 - 2014-05-11 18:26 - 00000659 _____ () C:\Users\Public\Desktop\Origin.lnk
2014-05-11 18:26 - 2014-05-11 18:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Origin
2014-05-11 18:07 - 2014-05-11 18:07 - 00000000 ____D () C:\Users\Internet\AppData\Local\Macromedia
2014-05-11 17:03 - 2013-08-22 16:44 - 00482112 _____ () C:\WINDOWS\system32\FNTCACHE.DAT
2014-05-11 17:02 - 2014-05-05 22:04 - 00000000 ____D () C:\ProgramData\Lexmark Universal v2 XL
2014-05-08 23:00 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\rescache
2014-05-08 22:45 - 2014-05-08 22:45 - 00001095 _____ () C:\Users\Public\Desktop\StarMoney 9.0 S-Edition.lnk
2014-05-08 22:45 - 2014-05-08 22:45 - 00000000 ____D () C:\ProgramData\StarMoney 9.0
2014-05-08 22:45 - 2014-05-08 22:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StarMoney 9.0 S-Edition
2014-05-08 22:45 - 2014-05-08 22:45 - 00000000 ____D () C:\Program Files (x86)\Business Objects
2014-05-08 22:45 - 2013-08-22 15:25 - 00017486 _____ () C:\WINDOWS\system32\Drivers\etc\services
2014-05-08 22:42 - 2013-12-01 11:19 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-05-06 22:12 - 2014-05-06 22:12 - 00000000 ____D () C:\Program Files (x86)\AGEIA Technologies
2014-05-06 22:12 - 2014-05-04 18:38 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2014-05-06 22:11 - 2013-08-22 16:46 - 00370233 _____ () C:\WINDOWS\setupact.log
2014-05-06 22:08 - 2014-05-06 22:08 - 00000000 ____D () C:\NVIDIA
2014-05-06 22:06 - 2014-05-06 22:06 - 00000000 ____D () C:\Users\****** Admin\Documents\My Games
2014-05-06 22:01 - 2014-05-06 22:01 - 00001147 _____ () C:\Users\Internet\Desktop\Sharkoon Mouse Config.lnk
2014-05-06 21:35 - 2014-05-06 21:35 - 00000000 ____D () C:\Users\****** Admin\AppData\Local\Nvidia Corporation
2014-05-06 21:32 - 2014-05-06 21:32 - 00001378 _____ () C:\Users\Public\Desktop\GeForce Experience.lnk
2014-05-06 21:32 - 2014-05-06 21:31 - 00000000 ____D () C:\Users\Internet\AppData\Local\NVIDIA Corporation
2014-05-06 21:32 - 2014-05-04 18:37 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation
2014-05-06 21:32 - 2014-05-04 18:37 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2014-05-06 21:32 - 2014-05-04 11:34 - 00000000 ____D () C:\Users\****** Admin\AppData\Local\NVIDIA
2014-05-06 21:31 - 2014-05-06 21:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2014-05-06 21:22 - 2014-05-06 21:22 - 00000000 ____D () C:\Users\Internet\AppData\Roaming\MingGuan
2014-05-06 21:11 - 2014-05-06 21:11 - 00000000 ____D () C:\Users\Internet\AppData\Roaming\Macromedia
2014-05-06 21:11 - 2014-05-06 20:54 - 00000000 ____D () C:\Users\Internet\AppData\Local\Runic Games
2014-05-06 20:54 - 2014-05-06 20:54 - 00000841 _____ () C:\Users\Internet\Desktop\Torchlight 2.lnk
2014-05-06 20:54 - 2014-05-06 20:54 - 00000000 ____D () C:\Users\Internet\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Torchlight 2
2014-05-06 18:54 - 2014-05-06 18:54 - 00000000 ___RD () C:\WINDOWS\BrowserChoice
2014-05-06 18:54 - 2014-05-03 16:25 - 00000000 ____D () C:\Users\Internet\AppData\Local\Packages
2014-05-06 18:53 - 2014-05-06 18:53 - 00000000 ____D () C:\Users\Default\AppData\Local\Microsoft Help
2014-05-06 18:53 - 2014-05-06 18:53 - 00000000 ____D () C:\Users\Default User\AppData\Local\Microsoft Help
2014-05-06 18:41 - 2014-05-06 18:41 - 01192533 _____ () C:\WINDOWS\unins000.exe
2014-05-06 18:41 - 2014-05-06 18:41 - 00017202 _____ () C:\WINDOWS\unins000.dat
2014-05-06 18:41 - 2014-05-06 18:41 - 00000000 ____D () C:\Users\****** Admin\AppData\Roaming\MingGuan
2014-05-06 18:41 - 2014-05-06 18:41 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Drakonia Black
2014-05-06 06:40 - 2014-05-14 17:30 - 23544320 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2014-05-06 05:25 - 2014-05-14 17:30 - 17382912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2014-05-06 05:00 - 2014-05-14 17:30 - 00084992 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2014-05-06 04:10 - 2014-05-14 17:30 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll
2014-05-05 22:11 - 2014-05-05 22:11 - 00001216 _____ () C:\Users\Internet\Desktop\Microsoft PowerPoint 2010.lnk
2014-05-05 22:11 - 2014-05-05 22:11 - 00001203 _____ () C:\Users\Internet\Desktop\Microsoft Word 2010.lnk
2014-05-05 22:09 - 2014-05-05 22:09 - 00001216 _____ () C:\Users\Internet\Desktop\Microsoft Access 2010.lnk
2014-05-05 22:09 - 2014-05-05 22:09 - 00001187 _____ () C:\Users\Internet\Desktop\Microsoft Excel 2010.lnk
2014-05-05 22:07 - 2014-05-05 22:07 - 00000000 ____D () C:\Program Files (x86)\Microsoft Office
2014-05-05 22:05 - 2014-05-05 22:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SharePoint
2014-05-05 22:05 - 2014-05-05 22:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
2014-05-05 22:05 - 2014-05-04 19:29 - 00000000 ____D () C:\Program Files (x86)\MSBuild
2014-05-05 22:05 - 2014-03-18 11:40 - 00000000 ____D () C:\WINDOWS\ShellNew
2014-05-05 22:04 - 2014-05-05 22:04 - 00000000 ____D () C:\WINDOWS\PCHEALTH
2014-05-05 22:04 - 2014-05-05 22:04 - 00000000 ____D () C:\Program Files (x86)\Microsoft Synchronization Services
2014-05-05 22:04 - 2014-05-05 22:04 - 00000000 ____D () C:\Program Files (x86)\Microsoft Sync Framework
2014-05-05 22:04 - 2014-05-05 22:04 - 00000000 ____D () C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2014-05-05 22:04 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared
2014-05-05 22:02 - 2014-05-05 22:02 - 00000000 ____D () C:\Program Files\Microsoft Office
2014-05-05 22:02 - 2014-05-05 22:02 - 00000000 ____D () C:\Program Files (x86)\Microsoft Visual Studio 8
2014-05-05 22:02 - 2014-05-05 22:02 - 00000000 ____D () C:\Program Files (x86)\Microsoft Analysis Services
2014-05-05 22:00 - 2014-05-05 22:00 - 00000000 ____D () C:\Users\****** Admin\AppData\Local\Microsoft Help
2014-05-05 21:32 - 2014-05-05 21:32 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip
2014-05-05 21:13 - 2014-05-05 21:13 - 00084720 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avnetflt.sys
2014-05-05 00:05 - 2014-05-05 00:05 - 00000000 ____D () C:\Program Files\Lexmark ScanBack
2014-05-05 00:05 - 2014-05-05 00:05 - 00000000 ____D () C:\Program Files (x86)\Lexmark ScanBack
2014-05-05 00:05 - 2014-05-04 23:54 - 00076123 _____ () C:\WINDOWS\system32\LexFiles.ulf
2014-05-05 00:05 - 2014-05-04 23:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lexmark
2014-05-05 00:01 - 2014-05-05 00:01 - 00000000 ____D () C:\Program Files\Lexmark Status Monitor Center
2014-05-05 00:00 - 2014-05-05 00:00 - 00000000 ____D () C:\Program Files\Lexmark Network TWAIN Driver
2014-05-05 00:00 - 2014-05-05 00:00 - 00000000 ____D () C:\Program Files (x86)\Lexmark Network TWAIN Driver
2014-05-05 00:00 - 2014-05-05 00:00 - 00000000 ____D () C:\Program Files (x86)\Lexmark
2014-05-04 23:59 - 2014-05-04 23:59 - 00000000 ____D () C:\ProgramData\APP
2014-05-04 23:54 - 2014-05-04 23:54 - 00000000 ____D () C:\Program Files\Lexmark Universal v2
2014-05-04 23:52 - 2014-05-04 23:52 - 00000000 ____D () C:\ProgramData\UD1
2014-05-04 23:35 - 2014-05-04 23:35 - 00000719 _____ () C:\Users\Internet\Desktop\mp3DirectCut.lnk
2014-05-04 23:29 - 2014-05-04 23:29 - 00000659 _____ () C:\Users\Public\Desktop\Winamp.lnk
2014-05-04 23:29 - 2014-05-04 23:29 - 00000000 ____D () C:\Users\****** Admin\AppData\Roaming\Winamp
2014-05-04 23:29 - 2014-05-04 23:29 - 00000000 ____D () C:\Users\****** Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Winamp Erkennungs-Plug-in
2014-05-04 23:29 - 2014-05-04 23:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Winamp
2014-05-04 23:15 - 2014-05-04 23:15 - 00000000 ____D () C:\Users\****** Admin\AppData\Roaming\Avira
2014-05-04 23:15 - 2014-05-04 23:15 - 00000000 ____D () C:\Users\Internet\AppData\Roaming\Avira
2014-05-04 23:14 - 2014-05-04 23:14 - 00000914 _____ () C:\Users\Public\Desktop\Avira Control Center.lnk
2014-05-04 23:14 - 2014-05-04 23:14 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2014-05-04 23:14 - 2014-05-04 23:02 - 00000000 ____D () C:\ProgramData\Avira
2014-05-04 23:12 - 2014-05-03 17:51 - 00000000 ____D () C:\Program Files (x86)\avira
2014-05-04 23:07 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\restore
2014-05-04 21:41 - 2014-05-04 21:41 - 00000647 _____ () C:\Users\Public\Desktop\Steam.lnk
2014-05-04 21:41 - 2014-05-04 21:41 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
2014-05-04 20:47 - 2014-05-04 20:47 - 00000000 ____D () C:\Users\Internet\AppData\Roaming\Mozilla
2014-05-04 20:47 - 2014-05-04 20:47 - 00000000 ____D () C:\Users\Internet\AppData\Local\Mozilla
2014-05-04 20:45 - 2014-05-04 20:45 - 00001465 _____ () C:\Users\Internet\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-05-04 20:45 - 2014-05-04 20:45 - 00000020 ___SH () C:\Users\Internet\ntuser.ini
2014-05-04 19:33 - 2014-05-04 19:33 - 16875520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 12732416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 08653824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 07425368 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2014-05-04 19:33 - 2014-05-04 19:33 - 06641152 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 05833728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Search.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 05770752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 04268544 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncEngine.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 02900992 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 02641920 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 02519384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2014-05-04 19:33 - 2014-05-04 19:33 - 02479616 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmSvc.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 02373784 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2014-05-04 19:33 - 2014-05-04 19:33 - 02331000 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 02317824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 02270208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 02141912 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 02133504 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 02088160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2014-05-04 19:33 - 2014-05-04 19:33 - 02030080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WsmSvc.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 02013016 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2014-05-04 19:33 - 2014-05-04 19:33 - 01843712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Display.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 01816576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Display.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 01779800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 01764864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 01679128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 01656832 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 01557848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2014-05-04 19:33 - 2014-05-04 19:33 - 01542768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 01527296 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 01466864 _____ (Microsoft Corporation) C:\WINDOWS\system32\propsys.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 01411584 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 01351168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 01339240 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 01306624 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 01291200 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel32.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 01230336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 01200296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\propsys.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 01129472 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFolder.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 01112536 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 01095488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 01066496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 01063424 _____ (Microsoft Corporation) C:\WINDOWS\system32\IKEEXT.DLL
2014-05-04 19:33 - 2014-05-04 19:33 - 01057280 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdvidcrl.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 01036288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kernel32.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 01023488 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 01015808 _____ (Microsoft Corporation) C:\WINDOWS\system32\aclui.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00958464 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00950784 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgent.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00939520 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00924160 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00918528 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00888320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00887296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aclui.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00872448 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDrive.exe
2014-05-04 19:33 - 2014-05-04 19:33 - 00855552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdvidcrl.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00839168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchFolder.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00836096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00834560 _____ (Microsoft Corporation) C:\WINDOWS\system32\netlogon.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00834048 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00827392 _____ (Microsoft Corporation) C:\WINDOWS\system32\BFE.DLL
2014-05-04 19:33 - 2014-05-04 19:33 - 00801792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00800256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReAgent.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00755712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00731648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\adtschema.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00731648 _____ (Microsoft Corporation) C:\WINDOWS\system32\adtschema.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00721408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveTelemetry.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00717312 _____ (Microsoft Corporation) C:\WINDOWS\system32\nshwfp.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00688640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netlogon.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00679424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys
2014-05-04 19:33 - 2014-05-04 19:33 - 00669696 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasapi32.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00655360 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsapi.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00629760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmCoreR.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00621568 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAgent.exe
2014-05-04 19:33 - 2014-05-04 19:33 - 00605184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasapi32.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00567296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nshwfp.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00565536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2014-05-04 19:33 - 2014-05-04 19:33 - 00542208 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.Printing.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00518552 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00512000 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidprov.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00494592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dnsapi.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00492256 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00488280 _____ (Microsoft Corporation) C:\WINDOWS\system32\netcfgx.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00467800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS
2014-05-04 19:33 - 2014-05-04 19:33 - 00467504 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00463264 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00462336 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlangpui.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00443904 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansec.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00443392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\nwifi.sys
2014-05-04 19:33 - 2014-05-04 19:33 - 00428888 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS
2014-05-04 19:33 - 2014-05-04 19:33 - 00425984 _____ (Microsoft Corporation) C:\WINDOWS\system32\clusapi.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00412672 _____ (Microsoft Corporation) C:\WINDOWS\system32\FWPUCLNT.DLL
2014-05-04 19:33 - 2014-05-04 19:33 - 00406912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00406512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00402944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
2014-05-04 19:33 - 2014-05-04 19:33 - 00402432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Graphics.Printing.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00390488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netcfgx.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00388408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00387210 _____ () C:\WINDOWS\system32\ApnDatabase.xml
2014-05-04 19:33 - 2014-05-04 19:33 - 00386560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlangpui.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00379224 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2014-05-04 19:33 - 2014-05-04 19:33 - 00376152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys
2014-05-04 19:33 - 2014-05-04 19:33 - 00370176 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanmsm.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00364640 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00360512 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfreadwrite.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00356864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlidprov.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00356848 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcomp.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00355832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfreadwrite.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00337752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Classpnp.sys
2014-05-04 19:33 - 2014-05-04 19:33 - 00334848 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDEServer.exe
2014-05-04 19:33 - 2014-05-04 19:33 - 00326024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00325632 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationApi.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00324096 _____ (Microsoft Corporation) C:\WINDOWS\system32\SessEnv.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00313344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\clusapi.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00305768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00300544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanmsm.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00299008 _____ (Microsoft Corporation) C:\WINDOWS\system32\pdh.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00298496 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSDMon.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00296960 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanapi.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00291840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Sensors.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00283648 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb10.sys
2014-05-04 19:33 - 2014-05-04 19:33 - 00280576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SessEnv.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00274944 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmWmiPl.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00271872 _____ (Microsoft Corporation) C:\WINDOWS\system32\spp.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00264192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FWPUCLNT.DLL
2014-05-04 19:33 - 2014-05-04 19:33 - 00262656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LocationApi.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00254976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pdh.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00254464 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsrslvr.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00252928 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00247296 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsApi.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00245760 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srvnet.sys
2014-05-04 19:33 - 2014-05-04 19:33 - 00244888 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2014-05-04 19:33 - 2014-05-04 19:33 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanapi.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00226304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Sensors.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00222720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\spp.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00222720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dcomp.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00220160 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00212992 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdd.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00201216 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReInfo.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00201216 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00197632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00192000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Scanners.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00186368 _____ (Microsoft Corporation) C:\WINDOWS\system32\dafWfdProvider.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00180056 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2014-05-04 19:33 - 2014-05-04 19:33 - 00172544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReInfo.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00171008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SensorsApi.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00160768 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxAllUserStore.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00157016 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wof.sys
2014-05-04 19:33 - 2014-05-04 19:33 - 00151040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Scanners.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxdav.sys
2014-05-04 19:33 - 2014-05-04 19:33 - 00139776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxAllUserStore.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00136024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wfplwfs.sys
2014-05-04 19:33 - 2014-05-04 19:33 - 00134144 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dfsc.sys
2014-05-04 19:33 - 2014-05-04 19:33 - 00115200 _____ (Microsoft Corporation) C:\WINDOWS\system32\umpnpmgr.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00115200 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevPropMgr.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00113648 _____ (Microsoft Corporation) C:\WINDOWS\system32\userenv.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidclass.sys
2014-05-04 19:33 - 2014-05-04 19:33 - 00110592 _____ (Microsoft Corporation) C:\WINDOWS\system32\drvinst.exe
2014-05-04 19:33 - 2014-05-04 19:33 - 00102912 _____ (Microsoft Corporation) C:\WINDOWS\system32\davclnt.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00098816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\drvinst.exe
2014-05-04 19:33 - 2014-05-04 19:33 - 00094016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\userenv.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00086016 _____ (Microsoft Corporation) C:\WINDOWS\system32\RMapi.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\davclnt.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\sxproxy.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00079360 _____ (Microsoft Corporation) C:\WINDOWS\system32\w32tm.exe
2014-05-04 19:33 - 2014-05-04 19:33 - 00079360 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\IPMIDrv.sys
2014-05-04 19:33 - 2014-05-04 19:33 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\w32tm.exe
2014-05-04 19:33 - 2014-05-04 19:33 - 00069120 _____ (Microsoft Corporation) C:\WINDOWS\system32\l2gpstore.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsgqec.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\l2gpstore.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00057856 _____ (Microsoft Corporation) C:\WINDOWS\system32\drvcfg.exe
2014-05-04 19:33 - 2014-05-04 19:33 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tsgqec.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpipreg.sys
2014-05-04 19:33 - 2014-05-04 19:33 - 00040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Shell.Search.UriHandler.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00040448 _____ (Microsoft Corporation) C:\WINDOWS\system32\SetNetworkLocation.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Shell.Search.UriHandler.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sxproxy.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidusb.sys
2014-05-04 19:33 - 2014-05-04 19:33 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredentialMigrationHandler.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredentialMigrationHandler.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanhlp.dll
2014-05-04 19:33 - 2014-05-04 19:33 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanhlp.dll
2014-05-04 19:33 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\setup
2014-05-04 19:31 - 2014-05-04 19:31 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2014-05-04 19:31 - 2014-05-04 19:31 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2014-05-04 19:29 - 2014-05-04 19:29 - 00000000 ____D () C:\WINDOWS\SysWOW64\XPSViewer
2014-05-04 19:29 - 2014-05-04 19:29 - 00000000 ____D () C:\Program Files\Reference Assemblies
2014-05-04 19:29 - 2014-05-04 19:29 - 00000000 ____D () C:\Program Files\MSBuild
2014-05-04 19:29 - 2014-05-04 19:29 - 00000000 ____D () C:\Program Files (x86)\Reference Assemblies
2014-05-04 19:14 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\NDF
2014-05-04 19:12 - 2014-05-03 17:56 - 00000000 ____D () C:\Users\****** Admin\AppData\Local\Packages
2014-05-04 19:09 - 2014-05-04 19:35 - 00000000 ___DC () C:\WINDOWS\Panther
2014-05-04 19:09 - 2014-05-04 19:09 - 00001465 _____ () C:\Users\****** Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-05-04 19:09 - 2014-05-04 19:09 - 00000020 ___SH () C:\Users\****** Admin\ntuser.ini
2014-05-04 19:03 - 2014-05-04 19:03 - 00000000 _SHDL () C:\Users\Default\Vorlagen
2014-05-04 19:03 - 2014-05-04 19:03 - 00000000 _SHDL () C:\Users\Default\Startmenü
2014-05-04 19:03 - 2014-05-04 19:03 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung
2014-05-04 19:03 - 2014-05-04 19:03 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen
2014-05-04 19:03 - 2014-05-04 19:03 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien
2014-05-04 19:03 - 2014-05-04 19:03 - 00000000 _SHDL () C:\Users\Default\Druckumgebung
2014-05-04 19:03 - 2014-05-04 19:03 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik
2014-05-04 19:03 - 2014-05-04 19:03 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder
2014-05-04 19:03 - 2014-05-04 19:03 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-05-04 19:03 - 2014-05-04 19:03 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf
2014-05-04 19:03 - 2014-05-04 19:03 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten
2014-05-04 19:03 - 2014-05-04 19:03 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten
2014-05-04 19:03 - 2014-05-04 19:03 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik
2014-05-04 19:03 - 2014-05-04 19:03 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder
2014-05-04 19:03 - 2014-05-04 19:03 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-05-04 19:03 - 2014-05-04 19:03 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf
2014-05-04 19:03 - 2014-05-04 19:03 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten
2014-05-04 19:03 - 2014-05-04 18:47 - 00036198 _____ () C:\WINDOWS\diagwrn.xml
2014-05-04 19:03 - 2014-05-04 18:47 - 00036198 _____ () C:\WINDOWS\diagerr.xml
2014-05-04 19:03 - 2014-05-04 18:16 - 00006599 _____ () C:\WINDOWS\comsetup.log
2014-05-04 19:03 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\Registration
2014-05-04 19:03 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files\Windows NT
2014-05-04 19:03 - 2013-08-22 15:36 - 00000000 __RHD () C:\Users\Default
2014-05-04 18:58 - 2014-05-04 18:58 - 00022960 _____ () C:\WINDOWS\system32\emptyregdb.dat
2014-05-04 18:57 - 2013-08-22 17:36 - 00000000 __RSD () C:\WINDOWS\Media
2014-05-04 18:57 - 2013-08-22 17:36 - 00000000 __RHD () C:\Users\Public\Libraries
2014-05-04 18:56 - 2013-12-01 11:22 - 01804472 _____ () C:\WINDOWS\SysWOW64\PerfStringBackup.INI
2014-05-04 18:52 - 2014-05-04 18:52 - 00000000 ____D () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Lenovo
2014-05-04 18:52 - 2014-05-04 18:52 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Lenovo
2014-05-04 18:52 - 2014-05-03 18:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDF-XChange PDF Viewer
2014-05-04 18:52 - 2013-12-01 11:55 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneKey Recovery
2014-05-04 18:52 - 2013-12-01 11:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lenovo
2014-05-04 18:52 - 2013-12-01 11:31 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel PROSet Wireless
2014-05-04 18:52 - 2013-12-01 11:22 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel
2014-05-04 18:52 - 2013-12-01 11:19 - 00000000 ____D () C:\WINDOWS\SysWOW64\Atheros_L1e
2014-05-04 18:52 - 2013-08-22 17:37 - 00004893 _____ () C:\WINDOWS\DtcInstall.log
2014-05-04 18:52 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\system32\Sysprep
2014-05-04 18:52 - 2012-07-26 07:37 - 00000000 ____D () C:\Users\Default.migrated
2014-05-04 18:51 - 2014-05-04 18:51 - 00001547 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2014-05-04 18:51 - 2014-03-18 11:25 - 00000000 ____D () C:\WINDOWS\SysWOW64\winrm
2014-05-04 18:51 - 2014-03-18 11:25 - 00000000 ____D () C:\WINDOWS\SysWOW64\WCN
2014-05-04 18:51 - 2014-03-18 11:25 - 00000000 ____D () C:\WINDOWS\SysWOW64\sysprep
2014-05-04 18:51 - 2014-03-18 11:25 - 00000000 ____D () C:\WINDOWS\SysWOW64\slmgr
2014-05-04 18:51 - 2014-03-18 11:25 - 00000000 ____D () C:\WINDOWS\SysWOW64\Printing_Admin_Scripts
2014-05-04 18:51 - 2014-03-18 11:25 - 00000000 ____D () C:\WINDOWS\system32\winrm
2014-05-04 18:51 - 2014-03-18 11:25 - 00000000 ____D () C:\WINDOWS\system32\WCN
2014-05-04 18:51 - 2014-03-18 11:25 - 00000000 ____D () C:\WINDOWS\system32\slmgr
2014-05-04 18:51 - 2014-03-18 11:25 - 00000000 ____D () C:\WINDOWS\system32\Printing_Admin_Scripts
2014-05-04 18:51 - 2013-08-22 17:43 - 00000000 ____D () C:\WINDOWS\DigitalLocker
2014-05-04 18:51 - 2013-08-22 17:36 - 00000000 ___RD () C:\WINDOWS\ImmersiveControlPanel
2014-05-04 18:51 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\MUI
2014-05-04 18:51 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\migwiz
2014-05-04 18:51 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\IME
2014-05-04 18:51 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\WinBioPlugIns
2014-05-04 18:51 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\SystemResetPlatform
2014-05-04 18:51 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\spool
2014-05-04 18:51 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\MUI
2014-05-04 18:51 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\IME
2014-05-04 18:51 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\IME
2014-05-04 18:51 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\Help
2014-05-04 18:51 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\SMI
2014-05-04 18:51 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\system32\oobe
2014-05-04 18:49 - 2014-05-03 12:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Seagate
2014-05-04 18:49 - 2014-03-18 11:40 - 00000000 ____D () C:\Program Files\Windows Journal
2014-05-04 18:49 - 2013-08-22 17:36 - 00000000 __SHD () C:\Program Files\Windows Sidebar
2014-05-04 18:49 - 2013-08-22 17:36 - 00000000 __SHD () C:\Program Files (x86)\Windows Sidebar
2014-05-04 18:49 - 2013-03-25 23:03 - 00000000 ____D () C:\ProgramData\PRICache
2014-05-04 18:48 - 2014-05-04 18:47 - 00000000 ___RD () C:\Users\****** Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-05-04 18:48 - 2014-05-04 18:47 - 00000000 ___RD () C:\Users\****** Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-05-04 18:48 - 2014-05-04 18:47 - 00000000 ___RD () C:\Users\Internet\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-05-04 18:48 - 2014-05-04 18:47 - 00000000 ___RD () C:\Users\Internet\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-05-04 18:48 - 2014-05-03 17:56 - 00000000 ____D () C:\Users\****** Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Lenovo
2014-05-04 18:48 - 2014-05-03 16:25 - 00000000 ____D () C:\Users\Internet\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Lenovo
2014-05-04 18:48 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\Recovery
2014-05-04 18:47 - 2014-05-04 18:47 - 00000000 _SHDL () C:\Users\****** Admin\Vorlagen
2014-05-04 18:47 - 2014-05-04 18:47 - 00000000 _SHDL () C:\Users\****** Admin\Startmenü
2014-05-04 18:47 - 2014-05-04 18:47 - 00000000 _SHDL () C:\Users\****** Admin\Netzwerkumgebung
2014-05-04 18:47 - 2014-05-04 18:47 - 00000000 _SHDL () C:\Users\****** Admin\Lokale Einstellungen
2014-05-04 18:47 - 2014-05-04 18:47 - 00000000 _SHDL () C:\Users\****** Admin\Eigene Dateien
2014-05-04 18:47 - 2014-05-04 18:47 - 00000000 _SHDL () C:\Users\****** Admin\Druckumgebung
2014-05-04 18:47 - 2014-05-04 18:47 - 00000000 _SHDL () C:\Users\****** Admin\Documents\Eigene Musik
2014-05-04 18:47 - 2014-05-04 18:47 - 00000000 _SHDL () C:\Users\****** Admin\Documents\Eigene Bilder
2014-05-04 18:47 - 2014-05-04 18:47 - 00000000 _SHDL () C:\Users\****** Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-05-04 18:47 - 2014-05-04 18:47 - 00000000 _SHDL () C:\Users\****** Admin\AppData\Local\Verlauf
2014-05-04 18:47 - 2014-05-04 18:47 - 00000000 _SHDL () C:\Users\****** Admin\AppData\Local\Anwendungsdaten
2014-05-04 18:47 - 2014-05-04 18:47 - 00000000 _SHDL () C:\Users\****** Admin\Anwendungsdaten
2014-05-04 18:47 - 2014-05-04 18:47 - 00000000 _SHDL () C:\Users\Internet\Vorlagen
2014-05-04 18:47 - 2014-05-04 18:47 - 00000000 _SHDL () C:\Users\Internet\Startmenü
2014-05-04 18:47 - 2014-05-04 18:47 - 00000000 _SHDL () C:\Users\Internet\Netzwerkumgebung
2014-05-04 18:47 - 2014-05-04 18:47 - 00000000 _SHDL () C:\Users\Internet\Lokale Einstellungen
2014-05-04 18:47 - 2014-05-04 18:47 - 00000000 _SHDL () C:\Users\Internet\Eigene Dateien
2014-05-04 18:47 - 2014-05-04 18:47 - 00000000 _SHDL () C:\Users\Internet\Druckumgebung
2014-05-04 18:47 - 2014-05-04 18:47 - 00000000 _SHDL () C:\Users\Internet\Documents\Eigene Musik
2014-05-04 18:47 - 2014-05-04 18:47 - 00000000 _SHDL () C:\Users\Internet\Documents\Eigene Bilder
2014-05-04 18:47 - 2014-05-04 18:47 - 00000000 _SHDL () C:\Users\Internet\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-05-04 18:47 - 2014-05-04 18:47 - 00000000 _SHDL () C:\Users\Internet\AppData\Local\Verlauf
2014-05-04 18:47 - 2014-05-04 18:47 - 00000000 _SHDL () C:\Users\Internet\AppData\Local\Anwendungsdaten
2014-05-04 18:47 - 2014-05-04 18:47 - 00000000 _SHDL () C:\Users\Internet\Anwendungsdaten
2014-05-04 18:44 - 2014-05-04 19:28 - 00000000 ____D () C:\Recovery
2014-05-04 18:40 - 2014-05-04 18:40 - 00000000 ____D () C:\WINDOWS\SysWOW64\RTCOM
2014-05-04 18:40 - 2014-05-04 18:40 - 00000000 ____D () C:\Program Files\Realtek
2014-05-04 18:40 - 2014-05-04 18:37 - 00000000 ____D () C:\Program Files\Elantech
2014-05-04 18:40 - 2013-08-22 16:46 - 00000084 _____ () C:\WINDOWS\setuperr.log
2014-05-04 18:20 - 2013-12-01 10:50 - 02088056 _____ () C:\WINDOWS\WindowsUpdate (1).log
2014-05-04 10:29 - 2013-12-01 11:52 - 00000000 ____D () C:\Program Files\mcafee.com
2014-05-04 10:21 - 2014-05-04 10:21 - 00000000 ____D () C:\ProgramData\Intel(R) Update Manager
2014-05-04 10:17 - 2012-07-26 10:12 - 00000000 ____D () C:\WINDOWS\AUInstallAgent
2014-05-04 10:15 - 2014-05-04 10:15 - 00000751 _____ () C:\Users\Internet\Desktop\KeePass 2.lnk
2014-05-03 18:37 - 2014-05-03 18:37 - 00000000 ____D () C:\Users\****** Admin\AppData\Roaming\Macromedia
2014-05-03 18:28 - 2013-12-01 11:47 - 00000000 ____D () C:\ProgramData\CyberLink
2014-05-03 18:26 - 2013-12-01 11:55 - 00000000 ____D () C:\ProgramData\Office2013
2014-05-03 18:25 - 2014-05-03 18:25 - 00000751 _____ () C:\Users\****** Admin\Desktop\KeePass 2.lnk
2014-05-03 18:25 - 2014-05-03 18:25 - 00000751 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KeePass 2.lnk
2014-05-03 18:21 - 2014-05-03 18:21 - 00000000 _____ () C:\Users\****** Admin\agent.log
2014-05-03 18:07 - 2014-05-03 18:07 - 00000843 _____ () C:\Users\Public\Desktop\PDF-Viewer.lnk
2014-05-03 17:58 - 2014-05-03 17:58 - 00000000 ____D () C:\Users\****** Admin\AppData\Roaming\Intel Corporation
2014-05-03 17:57 - 2014-05-03 17:57 - 00000000 ____D () C:\Users\****** Admin\AppData\Roaming\Adobe
2014-05-03 17:57 - 2014-05-03 17:57 - 00000000 ____D () C:\ProgramData\Energy Management
2014-05-03 17:57 - 2014-05-03 17:57 - 00000000 ____D () C:\ProgramData\eBay
2014-05-03 17:57 - 2014-05-03 17:56 - 00001133 _____ () C:\Users\****** Admin\Desktop\Cyberlink Power2Go.lnk
2014-05-03 17:57 - 2013-12-01 19:24 - 00108896 ____H () C:\WINDOWS\modules.log
2014-05-03 17:56 - 2014-05-03 17:56 - 00000000 ____D () C:\Users\****** Admin\AppData\Roaming\Intel
2014-05-03 17:56 - 2014-05-03 17:56 - 00000000 ____D () C:\Users\****** Admin\AppData\Local\VirtualStore
2014-05-03 17:52 - 2014-05-03 17:52 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Musik
2014-05-03 17:52 - 2014-05-03 17:52 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Bilder
2014-05-03 17:52 - 2014-05-03 17:52 - 00000000 _SHDL () C:\Users\Default.migrated\Vorlagen
2014-05-03 17:52 - 2014-05-03 17:52 - 00000000 _SHDL () C:\Users\Default.migrated\Startmenü
2014-05-03 17:52 - 2014-05-03 17:52 - 00000000 _SHDL () C:\Users\Default.migrated\Netzwerkumgebung
2014-05-03 17:52 - 2014-05-03 17:52 - 00000000 _SHDL () C:\Users\Default.migrated\Lokale Einstellungen
2014-05-03 17:52 - 2014-05-03 17:52 - 00000000 _SHDL () C:\Users\Default.migrated\Eigene Dateien
2014-05-03 17:52 - 2014-05-03 17:52 - 00000000 _SHDL () C:\Users\Default.migrated\Druckumgebung
2014-05-03 17:52 - 2014-05-03 17:52 - 00000000 _SHDL () C:\Users\Default.migrated\Documents\Eigene Musik
2014-05-03 17:52 - 2014-05-03 17:52 - 00000000 _SHDL () C:\Users\Default.migrated\Documents\Eigene Bilder
2014-05-03 17:52 - 2014-05-03 17:52 - 00000000 _SHDL () C:\Users\Default.migrated\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-05-03 17:52 - 2014-05-03 17:52 - 00000000 _SHDL () C:\Users\Default.migrated\AppData\Local\Verlauf
2014-05-03 17:52 - 2014-05-03 17:52 - 00000000 _SHDL () C:\Users\Default.migrated\AppData\Local\Anwendungsdaten
2014-05-03 17:52 - 2014-05-03 17:52 - 00000000 _SHDL () C:\Users\Default.migrated\Anwendungsdaten
2014-05-03 17:52 - 2014-05-03 17:52 - 00000000 _SHDL () C:\Programme
2014-05-03 17:52 - 2014-05-03 17:52 - 00000000 _SHDL () C:\ProgramData\Vorlagen
2014-05-03 17:52 - 2014-05-03 17:52 - 00000000 _SHDL () C:\ProgramData\Startmenü
2014-05-03 17:52 - 2014-05-03 17:52 - 00000000 _SHDL () C:\ProgramData\Microsoft\Windows\Start Menu\Programme
2014-05-03 17:52 - 2014-05-03 17:52 - 00000000 _SHDL () C:\ProgramData\Dokumente
2014-05-03 17:52 - 2014-05-03 17:52 - 00000000 _SHDL () C:\ProgramData\Anwendungsdaten
2014-05-03 17:52 - 2014-05-03 17:52 - 00000000 _SHDL () C:\Program Files\Gemeinsame Dateien
2014-05-03 17:52 - 2014-05-03 17:52 - 00000000 _SHDL () C:\Dokumente und Einstellungen
2014-05-03 17:43 - 2013-12-01 11:51 - 00000000 ____D () C:\ProgramData\McAfee
2014-05-03 17:38 - 2012-07-26 10:12 - 00000000 ___HD () C:\WINDOWS\ELAMBKUP
2014-05-03 17:34 - 2013-12-01 11:41 - 00000000 ____D () C:\Program Files (x86)\Lenovo DE
2014-05-03 17:07 - 2014-05-03 17:07 - 00000000 ____D () C:\Users\****** Admin\AppData\Roaming\Mozilla
2014-05-03 17:07 - 2014-05-03 17:07 - 00000000 ____D () C:\Users\****** Admin\AppData\Local\Mozilla
2014-05-03 17:07 - 2014-05-03 17:07 - 00000000 ____D () C:\ProgramData\Mozilla
2014-05-03 16:49 - 2014-05-03 16:49 - 00000000 ____D () C:\ProgramData\tmp
2014-05-03 16:49 - 2014-05-03 16:49 - 00000000 ____D () C:\ProgramData\hps
2014-05-03 16:49 - 2014-05-03 12:14 - 00000000 ____D () C:\Users\****** Admin\Documents\Youcam
2014-05-03 16:27 - 2014-05-03 16:27 - 00000355 _____ () C:\Users\Internet\Desktop\Computer.lnk
2014-05-03 16:26 - 2014-05-03 16:26 - 00000000 ____D () C:\Users\Internet\AppData\Roaming\Intel Corporation
2014-05-03 16:25 - 2014-05-03 16:25 - 00000000 ____D () C:\Users\Internet\AppData\Roaming\Intel
2014-05-03 16:25 - 2014-05-03 16:25 - 00000000 ____D () C:\Users\Internet\AppData\Roaming\Adobe
2014-05-03 16:25 - 2014-05-03 16:25 - 00000000 ____D () C:\Users\Internet\AppData\Local\VirtualStore
2014-05-03 12:20 - 2014-05-03 12:20 - 00000000 ____D () C:\Users\****** Admin\AppData\Roaming\Nitro
2014-05-03 12:16 - 2014-05-03 12:16 - 00000000 ____D () C:\Users\****** Admin\Documents\Avatar
2014-05-03 12:14 - 2014-05-03 12:14 - 00000000 ____D () C:\Users\****** Admin\AppData\Roaming\CyberLink
2014-05-03 12:14 - 2014-05-03 12:14 - 00000000 ____D () C:\Users\****** Admin\AppData\Local\CyberLink
2014-05-03 12:11 - 2014-05-03 12:11 - 00000000 ____D () C:\Users\****** Admin\AppData\Roaming\Seagate
2014-05-03 12:11 - 2014-05-03 12:10 - 00000000 ____D () C:\ProgramData\Seagate
2014-05-03 12:10 - 2014-05-03 12:10 - 01462560 _____ (Acronis International GmbH) C:\WINDOWS\system32\Drivers\tdrpman.sys
2014-05-03 12:10 - 2014-05-03 12:10 - 01120032 _____ (Acronis International GmbH) C:\WINDOWS\system32\Drivers\tib.sys
2014-05-03 12:10 - 2014-05-03 12:10 - 00233760 _____ (Acronis) C:\WINDOWS\system32\Drivers\snapman.sys
2014-05-03 12:10 - 2014-05-03 12:10 - 00183224 _____ (Acronis) C:\WINDOWS\system32\Drivers\tib_mounter.sys
2014-05-03 12:10 - 2014-05-03 12:10 - 00108832 _____ (Acronis International GmbH) C:\WINDOWS\system32\Drivers\fltsrv.sys
2014-05-03 12:10 - 2014-05-03 12:10 - 00000928 _____ () C:\Users\Public\Desktop\Seagate DiscWizard.lnk
2014-05-03 12:10 - 2014-05-03 12:10 - 00000000 ____D () C:\ProgramData\Acronis
2014-05-03 12:01 - 2014-05-03 12:01 - 00000355 _____ () C:\Users\****** Admin\Desktop\Computer.lnk
2014-05-01 22:30 - 2013-08-22 17:38 - 00693240 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2014-05-01 22:30 - 2013-08-22 17:38 - 00105464 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2014-04-30 20:27 - 2014-05-06 21:32 - 01081112 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvspcap.dll
2014-04-30 20:26 - 2014-05-06 21:32 - 01225920 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvspcap64.dll
Some content of TEMP:
====================
C:\Users\Internet\AppData\Local\Temp\avgnt.exe
C:\Users\****** Admin\AppData\Local\Temp\avgnt.exe
C:\Users\****** Admin\AppData\Local\Temp\nvSCPAPI.dll
C:\Users\****** Admin\AppData\Local\Temp\nvSCPAPI64.dll
C:\Users\****** Admin\AppData\Local\Temp\nvStInst.exe
C:\Users\****** Admin\AppData\Local\Temp\Quarantine.exe
C:\Users\****** Admin\AppData\Local\Temp\sonarinst.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit

==================== End Of Log ============================
AdwCleaner
AdwCleaner Logfile:
Code:
ATTFilter
# AdwCleaner v3.208 - Bericht erstellt am 16/05/2014 um 23:26:11
# Aktualisiert 11/05/2014 von Xplode
# Betriebssystem : Windows 8.1  (64 bits)
# Benutzername : ******* Admin - LAPTOP*******
# Gestartet von : C:\Users\Internet\Desktop\adwcleaner_3.208.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****


***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5}
Schlüssel Gelöscht : HKCU\Software\Ciuvo

***** [ Browser ] *****

-\\ Internet Explorer v11.0.9600.17037


-\\ Mozilla Firefox v29.0 (de)

[ Datei : C:\Users\Internet\AppData\Roaming\Mozilla\Firefox\Profiles\d68fyipr.default\prefs.js ]


[ Datei : C:\Users\Thorsten Admin\AppData\Roaming\Mozilla\Firefox\Profiles\qe7h5unx.default\prefs.js ]


*************************

AdwCleaner[R0].txt - [1095 octets] - [16/05/2014 23:25:40]
AdwCleaner[S0].txt - [971 octets] - [16/05/2014 23:26:11]

########## EOF - \AdwCleaner\AdwCleaner[S0].txt - [1030 octets] ##########
--- --- ---


JRT
Code:
ATTFilter
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.4 (04.06.2014:1)
OS: Windows 8.1 x64
Ran by ******* Admin on 16.05.2014 at 23:39:44,15
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys



~~~ Files



~~~ Folders



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 16.05.2014 at 23:42:07,48
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Alt 17.05.2014, 20:02   #10
schrauber
/// the machine
/// TB-Ausbilder
 
Windows 8.1: Bei zugeklapptem Bildschirm öffnen sich wahllos Dateien vom Desktop - Standard

Windows 8.1: Bei zugeklapptem Bildschirm öffnen sich wahllos Dateien vom Desktop



ESET Online Scanner

  • Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
  • Lade und starte Eset Online Scanner
  • Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
  • Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
  • Klicke auf Starten.
  • Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
  • Klicke am Ende des Suchlaufs auf Fertig stellen.
  • Schließe das Fenster von ESET.
  • Explorer öffnen.
  • C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
  • Logfile hier posten.
  • Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
  • Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset


Downloade Dir bitte SecurityCheck und:

  • Speichere es auf dem Desktop.
  • Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
  • Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.
Poste den Inhalt bitte hier.

und ein frisches FRST log bitte. Noch Probleme?
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 18.05.2014, 16:21   #11
Klattsche
 
Windows 8.1: Bei zugeklapptem Bildschirm öffnen sich wahllos Dateien vom Desktop - Standard

Windows 8.1: Bei zugeklapptem Bildschirm öffnen sich wahllos Dateien vom Desktop


Eines der Programme hat meinen Firefox zerschossen, er startet immer so als ob es der erste Start nach der Installation wäre und speichert keinerlei Einstellungen mehr, als ob direkt nach schließen des Browsers immer ein Werksreset gemacht wird.
Wie krieg ich das wieder repariert?

Hier die Logs

Code:
ATTFilter
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.4 (04.06.2014:1)
OS: Windows 8.1 x64
Ran by ******* Admin on 16.05.2014 at 23:39:44,15
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys



~~~ Files



~~~ Folders



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 16.05.2014 at 23:42:07,48
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
AdwCleaner Logfile:
Code:
ATTFilter
# AdwCleaner v3.208 - Bericht erstellt am 16/05/2014 um 23:26:11
# Aktualisiert 11/05/2014 von Xplode
# Betriebssystem : Windows 8.1  (64 bits)
# Benutzername : ******* Admin - LAPTOP*******
# Gestartet von : C:\Users\Internet\Desktop\adwcleaner_3.208.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****


***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5}
Schlüssel Gelöscht : HKCU\Software\Ciuvo

***** [ Browser ] *****

-\\ Internet Explorer v11.0.9600.17037


-\\ Mozilla Firefox v29.0 (de)

[ Datei : C:\Users\Internet\AppData\Roaming\Mozilla\Firefox\Profiles\d68fyipr.default\prefs.js ]


[ Datei : C:\Users\Thorsten Admin\AppData\Roaming\Mozilla\Firefox\Profiles\qe7h5unx.default\prefs.js ]


*************************

AdwCleaner[R0].txt - [1095 octets] - [16/05/2014 23:25:40]
AdwCleaner[S0].txt - [971 octets] - [16/05/2014 23:26:11]

########## EOF - \AdwCleaner\AdwCleaner[S0].txt - [1030 octets] ##########
--- --- ---


Hi vergiss, den letzten Beitrag aus irgendeinem Grund hatte der Internet Explorer die alte Seite von gestern geladen und ich habe es zu spät gemerkt und quasi nochmal auf deinen Vorpost geantwortet -.-

Allgemein spinnen jetzt irgendwie alle Browser rum, der Firefox macht immer noch die gleichen Faxen wie zuvor beschrieben und der Internet Explorer spinnt plötzlich auch rum.

Ist nicht persönlich gemeint aber bis jetzt hats das Ganze irgendwie nur noch schlimmer gemacht.....

Ich danke dir für deine Mühe aber ich muss mit dem Ding arbeiten und das wird grade immer weniger möglich. Werde den Rechner jetzt einmal neu aufsetzen und gut ist.

Wie gesagt trotzdem vielen Dank, Thread kann geschlossen werden.

Alt 19.05.2014, 09:57   #12
schrauber
/// the machine
/// TB-Ausbilder
 
Windows 8.1: Bei zugeklapptem Bildschirm öffnen sich wahllos Dateien vom Desktop - Standard

Windows 8.1: Bei zugeklapptem Bildschirm öffnen sich wahllos Dateien vom Desktop


Wenn man sich Adware installiert passiert das halt, entfernt man die wieder bliebt ein zerbröselter Browser zurück. Wobei das in ca 2 Sekunden behoben ist, einfach mal den Browser zurücksetzen....
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Antwort

Themen zu Windows 8.1: Bei zugeklapptem Bildschirm öffnen sich wahllos Dateien vom Desktop
antivir, befall, bildschirm, dateien, desktop, eingefangen, gen, hallo zusammen, installiert, leben, leute, log, mbam, neues, nicht mehr, notebook, opfer, problemlos, programme, software, touchpad, verhalten, wickel, windows, wirklich, öffnen


« Kaspersky Fund HEUR:AdWare.Script.Generic | Windows 7: Webseiten werden auf Werbung umgeleitet »


Ähnliche Themen: Windows 8.1: Bei zugeklapptem Bildschirm öffnen sich wahllos Dateien vom Desktop


  1. PDF Dateien lassen sich nicht mehr öffnen
    Log-Analyse und Auswertung - 08.05.2015 (1)
  2. Avira Desktop lässt sich nicht öffnen/aktivieren
    Antiviren-, Firewall- und andere Schutzprogramme - 09.10.2014 (11)
  3. Windows 7 Pro: Programme Öffnen sich wahllos
    Log-Analyse und Auswertung - 10.08.2014 (13)
  4. Nach dem installieren eines Programmes, habe ich auf einmal schwarzen Bildschirm bekommen und Desktop Dateien teilweise weg!
    Diskussionsforum - 24.05.2014 (37)
  5. [Probem] Windows XP: Nach dem "Willkommen"-Screen weißer Bildschirm - Taskmanager lässt sich NICHT öffnen
    Plagegeister aller Art und deren Bekämpfung - 21.07.2013 (31)
  6. Windows XP SP3 - Bildschirm weiß, Maus vorhanden, Desktop zeigt sich kurz wenn man ausschaltet
    Log-Analyse und Auswertung - 29.05.2013 (5)
  7. grauer Bildschirm ohne Meldung als ob sich ein graues Fenster auf den Desktop gelegt hat
    Plagegeister aller Art und deren Bekämpfung - 08.02.2013 (15)
  8. exe Dateien lassen sich nicht mehr öffnen
    Log-Analyse und Auswertung - 20.01.2012 (0)
  9. exe Dateien öffnen sich nicht
    Alles rund um Windows - 06.12.2011 (29)
  10. Desktop schwarz, kein Zugriff mehr auf Dateien, Programme lassen sich nur durch Befehle öffnen..
    Log-Analyse und Auswertung - 20.10.2011 (23)
  11. Bildschirm bleibt schwarz, undone. exe funktioniert nicht bei desktop Dateien, kazy.mekml1
    Plagegeister aller Art und deren Bekämpfung - 28.04.2011 (8)
  12. Virus ? Tastatur spinnt, Dateien öffnen sich etc.
    Plagegeister aller Art und deren Bekämpfung - 01.05.2009 (1)
  13. ständig öffnen sich dateien beim hochfahren
    Log-Analyse und Auswertung - 12.06.2008 (7)
  14. winmap dateien wollen sich öffnen
    Plagegeister aller Art und deren Bekämpfung - 14.03.2007 (5)
  15. Dateien lassen sich nicht öffnen
    Log-Analyse und Auswertung - 01.09.2006 (3)
  16. Desktop Icons und Taskleiste verschwinden sobald ich Dateien öffnen will
    Plagegeister aller Art und deren Bekämpfung - 28.06.2006 (1)
  17. Internet Explorer-Verknüpfungen lassen sich vom Desktop nicht mehr öffnen
    Plagegeister aller Art und deren Bekämpfung - 24.09.2004 (2)
Anleitungen und Tipps

- Für alle Hilfesuchenden! Was beachten?

- Anleitung: MyStartSearch.com entfernen

- Anleitung: WebSearches löschen

- Hilfe: iStartSurf entfernen – so gehts!

- Anleitung: Omiga Plus richtig entfernen

- Browser Viren entfernen


Zum Thema Windows 8.1: Bei zugeklapptem Bildschirm öffnen sich wahllos Dateien vom Desktop - Hallo zusammen, erstmal finde ich es wirklich großartig dass Ihr Eure Freizeit opfert um Leuten bei ihren Computerproblemen zu helfen, das findet man heute nicht mehr oft! Ich hab seit - Windows 8.1: Bei zugeklapptem Bildschirm öffnen sich wahllos Dateien vom Desktop...
Archiv
Du betrachtest: Windows 8.1: Bei zugeklapptem Bildschirm öffnen sich wahllos Dateien vom Desktop auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130