|
Log-Analyse und Auswertung: Windows 8.1: Trojaner - Hinweis durch Online-BankingWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
03.06.2014, 18:00 | #1 |
| Windows 8.1: Trojaner - Hinweis durch Online-Banking Hallo! Nachdem ich nach der Anmeldung beim Online-Banking auf eine Seite weitergeleitet wurde, auf der nach einer PIN/TAN gefragt wurde (ich habe die Seite daraufhin geschlossen), habe ich mich mit der Bank in der Verbindung gesetzt, die mir mitteilte, dass ihnen diese Betrügermasche bereits bekannt und mein Laptop wohl durch Trojaner infiziert wäre. Avira hat mir nichts gemeldet, aber dennoch hab ich in meiner Panik, da ich blöderweise keine Recovery-CD besitze, das Notebook (Samsung Modell NP350V5C-S0CDE) auf Werkseinstellungen zurückgesetzt. Mittlerweile ist mir klar, dass das Problem wohl dadurch nicht behoben wurde und daher wende ich mich nun an euch. Vielen Dank im Voraus! Code:
ATTFilter Search results from Spybot - Search & Destroy 03.06.2014 17:05:05 Scan took 00:18:31. 37 items found. Macromedia.FlashPlayer.Cookies: [SBI $6AA61750] Text file (File, nothing done) C:\Users\Verena\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\G39T8C6N\cf.prod.hlpstr.de\analytics.sol Properties.size=257 Properties.md5=BA946E36C2C3BF420A1E0777C0D608C5 Properties.filedate=1401720456 Properties.filedatetext=2014-06-02 16:47:36 Macromedia.FlashPlayer.Cookies: [SBI $5555F3D7] Text file (File, nothing done) C:\Users\Verena\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\G39T8C6N\cf.prod.hlpstr.de\swf\flowplayer.commercial-3.2.7.swf\org.flowplayer.sol Properties.size=67 Properties.md5=8FF6ABB3420E073F59AAF6A4149E77FA Properties.filedate=1401692372 Properties.filedatetext=2014-06-02 08:59:32 DoubleClick: [SBI $4E2AF2AC] Tracking cookie (Google Chrome: Default) (Browser: Cookie, nothing done) MediaPlex: [SBI $4E2AF2AC] Tracking cookie (Google Chrome: Default) (Browser: Cookie, nothing done) MediaPlex: [SBI $4E2AF2AC] Tracking cookie (Google Chrome: Default) (Browser: Cookie, nothing done) MediaPlex: [SBI $4E2AF2AC] Tracking cookie (Google Chrome: Default) (Browser: Cookie, nothing done) Tradedoubler: [SBI $4E2AF2AC] Tracking cookie (Google Chrome: Default) (Browser: Cookie, nothing done) Tradedoubler: [SBI $4E2AF2AC] Tracking cookie (Google Chrome: Default) (Browser: Cookie, nothing done) Tradedoubler: [SBI $4E2AF2AC] Tracking cookie (Google Chrome: Default) (Browser: Cookie, nothing done) CasaleMedia: [SBI $4E2AF2AC] Tracking cookie (Google Chrome: Default) (Browser: Cookie, nothing done) BurstMedia: [SBI $4E2AF2AC] Tracking cookie (Google Chrome: Default) (Browser: Cookie, nothing done) BurstMedia: [SBI $4E2AF2AC] Tracking cookie (Google Chrome: Default) (Browser: Cookie, nothing done) CasaleMedia: [SBI $4E2AF2AC] Tracking cookie (Google Chrome: Default) (Browser: Cookie, nothing done) CasaleMedia: [SBI $4E2AF2AC] Tracking cookie (Google Chrome: Default) (Browser: Cookie, nothing done) CasaleMedia: [SBI $4E2AF2AC] Tracking cookie (Google Chrome: Default) (Browser: Cookie, nothing done) CasaleMedia: [SBI $4E2AF2AC] Tracking cookie (Google Chrome: Default) (Browser: Cookie, nothing done) BurstMedia: [SBI $4E2AF2AC] Tracking cookie (Google Chrome: Default) (Browser: Cookie, nothing done) DoubleClick: [SBI $4E2AF2AC] Tracking cookie (Google Chrome: Default) (Browser: Cookie, nothing done) MediaPlex: [SBI $4E2AF2AC] Tracking cookie (Google Chrome: Default) (Browser: Cookie, nothing done) Internet Explorer: [SBI $1E8157BE] Typed URL list (Registry Key, nothing done) HKEY_USERS\S-1-5-21-2678595623-4148133582-4009595467-1001\Software\Microsoft\Internet Explorer\TypedURLs Internet Explorer: [SBI $0BC7B918] User agent (Registry Change, nothing done) HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent Internet Explorer: [SBI $0BC7B918] User agent (Registry Change, nothing done) HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent Internet Explorer: [SBI $0BC7B918] User agent (Registry Change, nothing done) HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent Internet Explorer: [SBI $0BC7B918] User agent (Registry Change, nothing done) HKEY_USERS\S-1-5-21-2678595623-4148133582-4009595467-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent Internet Explorer: [SBI $0BC7B918] User agent (Registry Change, nothing done) HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent MS Media Player: [SBI $5C51E349] Client ID (Registry Change, nothing done) HKEY_USERS\S-1-5-21-2678595623-4148133582-4009595467-1001\Software\Microsoft\MediaPlayer\Player\Settings\Client ID MS Paint: [SBI $07867C39] Recent file list (Registry Key, nothing done) HKEY_USERS\S-1-5-21-2678595623-4148133582-4009595467-1001\Software\Microsoft\Windows\CurrentVersion\Applets\Paint\Recent File List Windows: [SBI $1E4E2003] Drivers installation paths (Registry Change, nothing done) HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Setup\Installation Sources Windows: [SBI $1E4E2003] Drivers installation paths (Registry Change, nothing done) HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Setup\Installation Sources Windows Explorer: [SBI $D20DA0AD] Recent file global history (Registry Key, nothing done) HKEY_USERS\S-1-5-21-2678595623-4148133582-4009595467-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\RecentDocs Windows Media SDK: [SBI $37AAEDE6] Computer name (Registry Change, nothing done) HKEY_USERS\S-1-5-21-2678595623-4148133582-4009595467-1001\Software\Microsoft\Windows Media\WMSDK\General\ComputerName Windows Media SDK: [SBI $CAA58B6E] Unique ID (Registry Change, nothing done) HKEY_USERS\S-1-5-21-2678595623-4148133582-4009595467-1001\Software\Microsoft\Windows Media\WMSDK\General\UniqueID Windows Media SDK: [SBI $BACCD0DA] Volume serial number (Registry Value, nothing done) HKEY_USERS\S-1-5-21-2678595623-4148133582-4009595467-1001\Software\Microsoft\Windows Media\WMSDK\General\VolumeSerialNumber Cookie: [SBI $49804B54] Browser: Cookie (1) (Browser: Cookie, nothing done) Cache: [SBI $49804B54] Browser: Cache (49) (Browser: Cache, nothing done) Verlauf: [SBI $49804B54] Browser: History (56) (Browser: History, nothing done) Cookie: [SBI $49804B54] Browser: Cookie (690) (Browser: Cookie, nothing done) --- Spybot - Search & Destroy version: 2.3.39.131 DLL (build: 20140425) --- 2014-04-25 blindman.exe (2.3.39.151) 2014-04-25 explorer.exe (2.3.39.181) 2014-04-25 SDBootCD.exe (2.3.39.109) 2014-04-25 SDCleaner.exe (2.3.39.110) 2014-04-25 SDDelFile.exe (2.3.39.94) 2013-06-18 SDDisableProxy.exe 2014-04-25 SDFiles.exe (2.3.39.135) 2013-03-20 SDFileScanHelper.exe (2.1.16.1) 2014-04-25 SDFSSvc.exe (2.3.39.217) 2014-04-25 SDHelp.exe (2.3.39.1) 2014-04-25 SDHookHelper.exe (2.3.39.2) 2014-04-25 SDHookInst32.exe (2.3.39.2) 2014-04-25 SDHookInst64.exe (2.3.39.2) 2014-04-25 SDImmunize.exe (2.3.39.130) 2014-04-25 SDLogReport.exe (2.3.39.107) 2014-04-25 SDOnAccess.exe (2.3.39.11) 2014-04-25 SDPESetup.exe (2.3.39.3) 2014-04-25 SDPEStart.exe (2.3.39.86) 2014-04-25 SDPhoneScan.exe (2.3.39.28) 2014-04-25 SDPRE.exe (2.3.39.22) 2014-04-25 SDPrepPos.exe (2.3.39.15) 2014-04-25 SDQuarantine.exe (2.3.39.103) 2014-04-25 SDRootAlyzer.exe (2.3.39.116) 2014-04-25 SDSBIEdit.exe (2.3.39.39) 2014-04-25 SDScan.exe (2.3.39.181) 2014-04-25 SDScript.exe (2.3.39.54) 2014-04-25 SDSettings.exe (2.3.39.139) 2014-04-25 SDShell.exe (2.3.39.2) 2014-04-25 SDShred.exe (2.3.39.108) 2014-04-25 SDSysRepair.exe (2.3.39.102) 2014-04-25 SDTools.exe (2.3.39.157) 2014-04-25 SDTray.exe (2.3.39.129) 2014-04-25 SDUpdate.exe (2.3.39.94) 2014-04-25 SDUpdSvc.exe (2.3.39.77) 2014-04-25 SDWelcome.exe (2.3.39.130) 2014-04-25 SDWSCSvc.exe (2.3.39.2) 2014-05-20 spybotsd2-install-bdcore-update.exe (2.3.39.0) 2013-06-19 spybotsd2-translation-frx.exe 2014-06-02 unins000.exe (51.1052.0.0) 1999-12-02 xcacls.exe 2012-08-23 borlndmm.dll (10.0.2288.42451) 2012-09-05 DelZip190.dll (1.9.0.107) 2012-09-10 libeay32.dll (1.0.0.4) 2012-09-10 libssl32.dll (1.0.0.4) 2014-04-25 NotificationSpreader.dll 2014-04-25 SDAdvancedCheckLibrary.dll (2.3.39.98) 2014-04-25 SDAV.dll 2014-04-25 SDECon32.dll (2.3.39.114) 2014-04-25 SDECon64.dll (2.3.39.113) 2014-04-25 SDEvents.dll (2.3.39.2) 2014-04-25 SDFileScanLibrary.dll (2.3.39.14) 2014-04-25 SDHook32.dll (2.3.39.2) 2014-04-25 SDHook64.dll (2.3.39.2) 2014-04-25 SDImmunizeLibrary.dll (2.3.39.2) 2014-04-25 SDLicense.dll (2.3.39.0) 2014-04-25 SDLists.dll (2.3.39.4) 2014-04-25 SDResources.dll (2.3.39.7) 2014-04-25 SDScanLibrary.dll (2.3.39.131) 2014-04-25 SDTasks.dll (2.3.39.15) 2013-12-19 SDWinLogon.dll (2.3.37.0) 2012-08-23 sqlite3.dll 2012-09-10 ssleay32.dll (1.0.0.4) 2014-04-25 Tools.dll (2.3.39.36) 2014-03-05 Includes\Adware-000.sbi (*) 2014-01-08 Includes\Adware-001.sbi (*) 2014-05-27 Includes\Adware-C.sbi (*) 2014-01-13 Includes\Adware.sbi (*) 2014-01-13 Includes\AdwareC.sbi (*) 2010-08-13 Includes\Cookies.sbi (*) 2014-01-08 Includes\Dialer-000.sbi (*) 2014-01-08 Includes\Dialer-001.sbi (*) 2014-01-08 Includes\Dialer-C.sbi (*) 2014-01-13 Includes\Dialer.sbi (*) 2014-01-13 Includes\DialerC.sbi (*) 2014-01-09 Includes\Fraud-000.sbi (*) 2014-01-09 Includes\Fraud-001.sbi (*) 2014-03-31 Includes\Fraud-002.sbi (*) 2014-01-09 Includes\Fraud-003.sbi (*) 2012-11-14 Includes\HeavyDuty.sbi (*) 2014-01-08 Includes\Hijackers-000.sbi (*) 2014-01-08 Includes\Hijackers-001.sbi (*) 2014-01-08 Includes\Hijackers-C.sbi (*) 2014-01-13 Includes\Hijackers.sbi (*) 2014-01-13 Includes\HijackersC.sbi (*) 2014-01-08 Includes\iPhone-000.sbi (*) 2014-01-08 Includes\iPhone.sbi (*) 2014-01-08 Includes\Keyloggers-000.sbi (*) 2014-03-19 Includes\Keyloggers-C.sbi (*) 2014-01-13 Includes\Keyloggers.sbi (*) 2014-01-13 Includes\KeyloggersC.sbi (*) 2014-01-09 Includes\Malware-001.sbi (*) 2014-01-09 Includes\Malware-002.sbi (*) 2014-02-05 Includes\Malware-003.sbi (*) 2014-01-28 Includes\Malware-004.sbi (*) 2014-04-15 Includes\Malware-005.sbi (*) 2014-02-26 Includes\Malware-006.sbi (*) 2014-01-09 Includes\Malware-007.sbi (*) 2014-04-30 Includes\Malware-C.sbi (*) 2014-01-13 Includes\Malware.sbi (*) 2013-12-23 Includes\MalwareC.sbi (*) 2014-01-15 Includes\PUPS-000.sbi (*) 2014-01-15 Includes\PUPS-001.sbi (*) 2014-01-15 Includes\PUPS-002.sbi (*) 2014-05-27 Includes\PUPS-C.sbi (*) 2012-11-14 Includes\PUPS.sbi (*) 2014-01-07 Includes\PUPSC.sbi (*) 2014-01-08 Includes\Security-000.sbi (*) 2014-01-08 Includes\Security-C.sbi (*) 2014-01-21 Includes\Security.sbi (*) 2014-01-21 Includes\SecurityC.sbi (*) 2014-01-08 Includes\Spyware-000.sbi (*) 2014-01-08 Includes\Spyware-001.sbi (*) 2014-01-08 Includes\Spyware-C.sbi (*) 2014-01-21 Includes\Spyware.sbi (*) 2014-01-21 Includes\SpywareC.sbi (*) 2011-06-07 Includes\Tracks.sbi (*) 2012-11-19 Includes\Tracks.uti (*) 2014-01-15 Includes\Trojans-000.sbi (*) 2014-01-15 Includes\Trojans-001.sbi (*) 2014-01-15 Includes\Trojans-002.sbi (*) 2014-01-15 Includes\Trojans-003.sbi (*) 2014-01-15 Includes\Trojans-004.sbi (*) 2014-03-19 Includes\Trojans-005.sbi (*) 2014-01-15 Includes\Trojans-006.sbi (*) 2014-01-15 Includes\Trojans-007.sbi (*) 2014-01-15 Includes\Trojans-008.sbi (*) 2014-01-15 Includes\Trojans-009.sbi (*) 2014-05-27 Includes\Trojans-C.sbi (*) 2014-01-15 Includes\Trojans-OG-000.sbi (*) 2014-01-15 Includes\Trojans-TD-000.sbi (*) 2014-01-15 Includes\Trojans-VM-000.sbi (*) 2014-01-15 Includes\Trojans-VM-001.sbi (*) 2014-01-15 Includes\Trojans-VM-002.sbi (*) 2014-01-15 Includes\Trojans-VM-003.sbi (*) 2014-01-15 Includes\Trojans-VM-004.sbi (*) 2014-01-15 Includes\Trojans-VM-005.sbi (*) 2014-01-15 Includes\Trojans-VM-006.sbi (*) 2014-01-15 Includes\Trojans-VM-007.sbi (*) 2014-01-15 Includes\Trojans-VM-008.sbi (*) 2014-01-15 Includes\Trojans-VM-009.sbi (*) 2014-01-15 Includes\Trojans-VM-010.sbi (*) 2014-01-15 Includes\Trojans-VM-011.sbi (*) 2014-01-15 Includes\Trojans-VM-012.sbi (*) 2014-01-15 Includes\Trojans-VM-013.sbi (*) 2014-01-15 Includes\Trojans-VM-014.sbi (*) 2014-01-15 Includes\Trojans-VM-015.sbi (*) 2014-01-15 Includes\Trojans-VM-016.sbi (*) 2014-01-15 Includes\Trojans-VM-017.sbi (*) 2014-01-15 Includes\Trojans-VM-018.sbi (*) 2014-01-15 Includes\Trojans-VM-019.sbi (*) 2014-01-15 Includes\Trojans-VM-020.sbi (*) 2014-01-15 Includes\Trojans-VM-021.sbi (*) 2014-01-15 Includes\Trojans-VM-022.sbi (*) 2014-01-15 Includes\Trojans-VM-023.sbi (*) 2014-01-15 Includes\Trojans-VM-024.sbi (*) 2014-01-15 Includes\Trojans-ZB-000.sbi (*) 2014-01-15 Includes\Trojans-ZL-000.sbi (*) 2014-01-09 Includes\Trojans.sbi (*) 2014-01-16 Includes\TrojansC-01.sbi (*) 2014-01-16 Includes\TrojansC-02.sbi (*) 2014-01-16 Includes\TrojansC-03.sbi (*) 2014-01-16 Includes\TrojansC-04.sbi (*) 2014-01-16 Includes\TrojansC-05.sbi (*) 2014-01-09 Includes\TrojansC.sbi (*) |
03.06.2014, 18:02 | #2 |
/// the machine /// TB-Ausbilder | Windows 8.1: Trojaner - Hinweis durch Online-Banking hi,
__________________warum sollte das Problem durch Zurücksetzen nicht erledigt sein (wenn denn jemals was auf dem Gerät war)?? Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit (Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
__________________ |
03.06.2014, 18:06 | #3 |
| Windows 8.1: Trojaner - Hinweis durch Online-BankingCode:
ATTFilter defogger_disable by jpshortstuff (23.02.10.1) Log created at 11:24 on 03/06/2014 (Verena) Checking for autostart values... HKCU\~\Run values retrieved. HKLM\~\Run values retrieved. Checking for services/drivers... -=E.O.F=- Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 02-06-2014 Ran by Verena (administrator) on VERENA on 03-06-2014 11:27:18 Running from C:\Users\Verena\Downloads Platform: Windows 8 (X64) OS Language: German Standard Internet Explorer Version 10 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (AMD) C:\Windows\System32\atiesrxx.exe (AMD) C:\Windows\System32\atieclxx.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (Samsung Electronics CO., LTD.) C:\Program Files (x86)\Samsung\Settings\CmdServer\EasyLauncher.exe (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe () C:\Program Files (x86)\Samsung\Settings\CmdServer\EasySettingsCmdServer.exe (Samsung Electronics CO., LTD.) C:\Program Files (x86)\Samsung\Settings\sSettings.exe (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe (Atheros Communications) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe () C:\Program Files (x86)\Bluetooth Suite\ActivateDesktop.exe (Intel Corporation) C:\Windows\System32\igfxtray.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe (Samsung Electronics CO., LTD.) C:\Program Files\Samsung\S Agent\CommonAgent.exe (Intel Corporation) C:\Windows\System32\igfxext.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (Microsoft Corporation) C:\Windows\System32\dasHost.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Samsung Electronics CO., LTD.) C:\ProgramData\Samsung\SW Update Service\SWMAgent.exe (Samsung Electronics CO., LTD.) C:\Program Files\Samsung\Support Center\GuaranaAgent.exe () C:\Users\Verena\Downloads\Defogger.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13191824 2012-08-10] (Realtek Semiconductor) HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2917688 2012-10-16] (Synaptics Incorporated) HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [183376 2014-05-14] (Avira Operations GmbH & Co. KG) HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [737872 2014-05-09] (Avira Operations GmbH & Co. KG) HKLM-x32\...\Run: [SDTray] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [4101584 2014-04-25] (Safer-Networking Ltd.) HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642216 2012-08-06] (Advanced Micro Devices, Inc.) HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [285240 2012-09-01] (Intel Corporation) Winlogon\Notify\igfxcui: C:\WINDOWS\system32\igfxdev.dll (Intel Corporation) Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X] HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [133760 2014-01-07] ( (Atheros Communications)) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://samsung13.msn.com HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://samsung13.msn.com SearchScopes: HKLM - DefaultScope {4C6B4EEC-05FF-4DA8-9174-CB11AA2F4B6C} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MASMJS SearchScopes: HKLM - {4C6B4EEC-05FF-4DA8-9174-CB11AA2F4B6C} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MASMJS SearchScopes: HKLM-x32 - DefaultScope {4C6B4EEC-05FF-4DA8-9174-CB11AA2F4B6C} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MASMJS SearchScopes: HKLM-x32 - {4C6B4EEC-05FF-4DA8-9174-CB11AA2F4B6C} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MASMJS SearchScopes: HKCU - DefaultScope {4C6B4EEC-05FF-4DA8-9174-CB11AA2F4B6C} URL = SearchScopes: HKCU - {4C6B4EEC-05FF-4DA8-9174-CB11AA2F4B6C} URL = Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 FireFox: ======== FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.) Chrome: ======= CHR Extension: (Google Docs) - C:\Users\Verena\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-06-02] CHR Extension: (Google Drive) - C:\Users\Verena\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-06-02] CHR Extension: (YouTube) - C:\Users\Verena\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-06-02] CHR Extension: (Google-Suche) - C:\Users\Verena\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-06-02] CHR Extension: (Google Wallet) - C:\Users\Verena\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-06-02] CHR Extension: (Google Mail) - C:\Users\Verena\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-06-02] ==================== Services (Whitelisted) ================= R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [430160 2014-05-09] (Avira Operations GmbH & Co. KG) R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [430160 2014-05-09] (Avira Operations GmbH & Co. KG) S2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [123984 2014-05-14] (Avira Operations GmbH & Co. KG) R2 Easy Launcher; C:\Program Files (x86)\Samsung\Settings\CmdServer\EasyLauncher.exe [1593152 2014-01-29] (Samsung Electronics CO., LTD.) R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1738200 2014-04-25] (Safer-Networking Ltd.) R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [2081752 2014-04-25] (Safer-Networking Ltd.) R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2014-04-25] (Safer-Networking Ltd.) R2 SWUpdateService; C:\ProgramData\Samsung\SW Update Service\SWMAgent.exe [3018800 2013-10-21] (Samsung Electronics CO., LTD.) S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [16056 2014-03-29] (Microsoft Corporation) ==================== Drivers (Whitelisted) ==================== R0 amdkmpfd; C:\Windows\System32\drivers\amdkmpfd.sys [35496 2012-07-09] (Advanced Micro Devices, Inc.) R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [112080 2014-05-09] (Avira Operations GmbH & Co. KG) R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [130584 2014-05-09] (Avira Operations GmbH & Co. KG) R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [28600 2014-05-09] (Avira Operations GmbH & Co. KG) S3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [202752 2012-07-26] (Microsoft Corporation) ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-06-03 11:27 - 2014-06-03 11:27 - 00009787 _____ () C:\Users\Verena\Downloads\FRST.txt 2014-06-03 11:27 - 2014-06-03 11:27 - 00000000 ____D () C:\FRST 2014-06-03 11:26 - 2014-06-03 11:26 - 02068992 _____ (Farbar) C:\Users\Verena\Downloads\FRST64.exe 2014-06-03 11:24 - 2014-06-03 11:24 - 00050477 _____ () C:\Users\Verena\Downloads\Defogger.exe 2014-06-03 11:24 - 2014-06-03 11:24 - 00000474 _____ () C:\Users\Verena\Desktop\defogger_disable.log 2014-06-03 11:24 - 2014-06-03 11:24 - 00000000 _____ () C:\Users\Verena\defogger_reenable 2014-06-03 11:07 - 2014-06-03 11:07 - 00018944 ___SH () C:\Users\Verena\Desktop\Thumbs.db 2014-06-03 10:53 - 2014-06-03 10:53 - 00001206 _____ () C:\Users\Verena\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\S Agent.lnk 2014-06-03 10:52 - 2014-06-03 10:52 - 00000000 ____D () C:\Users\Verena\AppData\Roaming\ATI 2014-06-03 10:52 - 2014-06-03 10:52 - 00000000 ____D () C:\Users\Verena\AppData\Local\ATI 2014-06-03 10:52 - 2014-06-03 10:52 - 00000000 ____D () C:\ProgramData\ATI 2014-06-03 10:51 - 2014-06-03 10:51 - 00000000 ____D () C:\Users\Verena\AppData\Roaming\Intel Corporation 2014-06-03 10:50 - 2014-06-03 10:50 - 01774862 _____ () C:\WINDOWS\SysWOW64\PerfStringBackup.INI 2014-06-03 10:50 - 2014-06-03 10:50 - 00000000 ____D () C:\Users\Verena\AppData\Roaming\Synaptics 2014-06-03 10:50 - 2014-06-03 10:50 - 00000000 ____D () C:\Users\Verena\AppData\Roaming\Atheros 2014-06-03 10:50 - 2014-06-03 10:50 - 00000000 ____D () C:\ProgramData\Synaptics 2014-06-03 10:50 - 2014-06-03 10:50 - 00000000 ____D () C:\ProgramData\Intel 2014-06-03 10:50 - 2014-06-03 10:50 - 00000000 ____D () C:\ProgramData\Atheros 2014-06-03 10:46 - 2014-06-03 10:46 - 00281248 _____ () C:\WINDOWS\system32\FNTCACHE.DAT 2014-06-03 10:45 - 2014-06-03 10:45 - 00000000 ____D () C:\Users\Verena\AppData\Local\Samsung 2014-06-03 10:41 - 2014-06-03 10:41 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BT Program 2014-06-03 10:41 - 2014-06-03 10:41 - 00000000 ____D () C:\Program Files\Common Files\QCA_Bluetooth 2014-06-03 10:41 - 2014-06-03 10:41 - 00000000 ____D () C:\Program Files (x86)\Bluetooth Suite 2014-06-03 10:36 - 2014-06-03 10:36 - 00003434 _____ () C:\WINDOWS\System32\Tasks\Settings 2014-06-03 10:36 - 2014-06-03 10:36 - 00002038 _____ () C:\Users\Public\Desktop\Settings.lnk 2014-06-03 10:32 - 2014-06-03 10:32 - 00002050 _____ () C:\Users\Public\Desktop\Support Center.lnk 2014-06-03 10:23 - 2014-06-03 11:15 - 00000000 ____D () C:\ProgramData\Norton 2014-06-03 10:19 - 2014-06-03 10:19 - 00000000 ____D () C:\ProgramData\ColorMode 2014-06-03 10:18 - 2014-06-03 11:20 - 00000000 ____D () C:\ProgramData\WinClon 2014-06-03 10:18 - 2014-06-03 10:18 - 00003126 _____ () C:\WINDOWS\System32\Tasks\advRecovery 2014-06-03 10:18 - 2014-06-03 10:18 - 00001513 _____ () C:\Users\Public\Desktop\Recovery.lnk 2014-06-03 10:18 - 2012-08-02 16:41 - 00008072 _____ (Windows (R) Win 7 DDK provider) C:\WINDOWS\SysWOW64\wmof64.dll 2014-06-03 10:18 - 2012-08-02 16:36 - 00024968 _____ (Samsung Electronics Co. Ltd.) C:\WINDOWS\SysWOW64\wsabi.dll 2014-06-03 10:16 - 2014-06-03 10:16 - 00005552 _____ () C:\WINDOWS\DPINST.LOG 2014-06-03 10:16 - 2014-06-03 10:16 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_Kernel_SynTP_01009.Wdf 2014-06-03 10:16 - 2014-06-03 10:16 - 00000000 ____D () C:\Program Files\Synaptics 2014-06-03 10:15 - 2014-06-03 10:16 - 00001478 _____ () C:\WINDOWS\Synaptics.log 2014-06-03 10:15 - 2014-06-03 10:15 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel 2014-06-03 10:15 - 2014-06-03 10:15 - 00000000 ____D () C:\WINDOWS\SysWOW64\sda 2014-06-03 10:15 - 2014-06-03 10:15 - 00000000 ____D () C:\Users\Verena\AppData\Roaming\InstallShield 2014-06-03 10:15 - 2012-09-01 18:01 - 00647736 _____ (Intel Corporation) C:\WINDOWS\system32\Drivers\iaStorA.sys 2014-06-03 10:15 - 2012-06-15 07:50 - 09888912 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\SysWOW64\RtsUVStoricon.dll 2014-06-03 10:15 - 2012-06-15 07:50 - 00315536 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\Drivers\RtsUVStor.sys 2014-06-03 10:14 - 2014-06-03 10:15 - 00000203 _____ () C:\setup.log 2014-06-03 10:14 - 2012-09-21 18:29 - 00080062 ____N () C:\WINDOWS\system32\athw8x.cat 2014-06-03 10:14 - 2012-09-19 00:15 - 03653632 ____N (Qualcomm Atheros Communications, Inc.) C:\WINDOWS\system32\athw8x.sys 2014-06-03 10:14 - 2012-09-19 00:15 - 03653632 _____ (Qualcomm Atheros Communications, Inc.) C:\WINDOWS\system32\Drivers\athw8x.sys 2014-06-03 10:14 - 2012-07-31 00:04 - 00690832 _____ (Realtek ) C:\WINDOWS\system32\Drivers\Rt630x64.sys 2014-06-03 10:14 - 2012-07-31 00:04 - 00074344 _____ (Realtek Semiconductor Corporation) C:\WINDOWS\system32\RtNicProp64.dll 2014-06-03 10:13 - 2014-06-03 10:15 - 00000000 ____D () C:\Program Files (x86)\Realtek 2014-06-03 10:13 - 2014-06-03 10:13 - 00000000 ___HD () C:\Program Files (x86)\Temp 2014-06-03 10:13 - 2014-06-03 10:13 - 00000000 ____D () C:\WINDOWS\SysWOW64\RTCOM 2014-06-03 10:13 - 2014-06-03 10:13 - 00000000 ____D () C:\WINDOWS\system32\SRSLabs 2014-06-03 10:13 - 2014-06-03 10:13 - 00000000 ____D () C:\Program Files\Realtek 2014-06-03 10:13 - 2012-08-10 12:06 - 04102928 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\Drivers\RTKVHD64.sys 2014-06-03 10:13 - 2012-08-10 10:43 - 00330541 _____ () C:\WINDOWS\system32\Drivers\RTAIODAT.DAT 2014-06-03 10:13 - 2012-08-10 05:58 - 05892608 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RCoRes64.dat 2014-06-03 10:13 - 2012-08-06 09:44 - 01561744 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RTSnMg64.cpl 2014-06-03 10:13 - 2012-08-06 05:49 - 02743440 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtPgEx64.dll 2014-06-03 10:13 - 2012-08-03 12:18 - 01706640 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\RtlExUpd.dll 2014-06-03 10:13 - 2012-08-01 12:29 - 00109200 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RCoInstII64.dll 2014-06-03 10:13 - 2012-07-24 11:30 - 00606336 _____ (Sony Corporation) C:\WINDOWS\system32\SFSS_APO.dll 2014-06-03 10:13 - 2012-07-20 08:41 - 00880784 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkApi64.dll 2014-06-03 10:13 - 2012-07-19 10:52 - 07598456 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioRealtek64.dll 2014-06-03 10:13 - 2012-07-19 10:52 - 02028920 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioEQ64.dll 2014-06-03 10:13 - 2012-07-19 10:51 - 02080120 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\WavesGUILib64.dll 2014-06-03 10:13 - 2012-07-19 10:51 - 00834936 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPOShell64.dll 2014-06-03 10:13 - 2012-07-16 08:16 - 03643024 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkAPO64.dll 2014-06-03 10:13 - 2012-07-15 15:13 - 00394616 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxVolumeSDAPO.dll 2014-06-03 10:13 - 2012-07-15 15:13 - 00394616 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPO30.dll 2014-06-03 10:13 - 2012-07-02 09:39 - 01264272 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RTCOM64.dll 2014-06-03 10:13 - 2012-06-20 11:26 - 00110592 _____ (Real Sound Lab SIA) C:\WINDOWS\system32\CONEQMSAPOGUILibrary.dll 2014-06-03 10:13 - 2012-06-15 05:20 - 07163784 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EEP64A.dll 2014-06-03 10:13 - 2012-06-15 05:20 - 00433544 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EED64A.dll 2014-06-03 10:13 - 2012-06-15 05:20 - 00141192 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EEL64A.dll 2014-06-03 10:13 - 2012-06-15 05:20 - 00123784 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EEA64A.dll 2014-06-03 10:13 - 2012-06-15 05:20 - 00074632 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EEG64A.dll 2014-06-03 10:13 - 2012-04-10 08:40 - 02533952 _____ (Fortemedia Corporation) C:\WINDOWS\system32\FMAPO64.dll 2014-06-03 10:13 - 2012-03-08 05:47 - 00202336 _____ (Andrea Electronics Corporation) C:\WINDOWS\system32\AERTAC64.dll 2014-06-03 10:13 - 2012-03-08 05:47 - 00108640 _____ (Andrea Electronics Corporation) C:\WINDOWS\system32\AERTAR64.dll 2014-06-03 10:13 - 2011-12-20 09:32 - 00331880 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtlCPAPI64.dll 2014-06-03 10:13 - 2011-11-22 10:28 - 00014952 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkCoLDR64.dll 2014-06-03 10:13 - 2011-09-02 08:21 - 00221024 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SFNHK64.dll 2014-06-03 10:13 - 2011-09-02 08:21 - 00081248 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SFCOM64.dll 2014-06-03 10:13 - 2011-09-02 08:21 - 00078688 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SFAPO64.dll 2014-06-03 10:13 - 2011-08-23 11:00 - 00603984 _____ (Knowles Acoustics ) C:\WINDOWS\system32\KAAPORT64.dll 2014-06-03 10:13 - 2011-05-31 03:42 - 01756264 _____ (DTS) C:\WINDOWS\system32\DTSS2SpeakerDLL64.dll 2014-06-03 10:13 - 2011-05-31 03:42 - 01568360 _____ (DTS) C:\WINDOWS\system32\DTSS2HeadphoneDLL64.dll 2014-06-03 10:13 - 2011-05-31 03:42 - 01486952 _____ (DTS) C:\WINDOWS\system32\DTSBoostDLL64.dll 2014-06-03 10:13 - 2011-05-31 03:42 - 00728680 _____ (DTS) C:\WINDOWS\system32\DTSBassEnhancementDLL64.dll 2014-06-03 10:13 - 2011-05-31 03:42 - 00712296 _____ (DTS) C:\WINDOWS\system32\DTSSymmetryDLL64.dll 2014-06-03 10:13 - 2011-05-31 03:42 - 00693352 _____ (DTS) C:\WINDOWS\system32\DTSVoiceClarityDLL64.dll 2014-06-03 10:13 - 2011-05-31 03:42 - 00491112 _____ (DTS) C:\WINDOWS\system32\DTSNeoPCDLL64.dll 2014-06-03 10:13 - 2011-05-31 03:42 - 00432744 _____ (DTS) C:\WINDOWS\system32\DTSLimiterDLL64.dll 2014-06-03 10:13 - 2011-05-31 03:42 - 00428648 _____ (DTS) C:\WINDOWS\system32\DTSGainCompensatorDLL64.dll 2014-06-03 10:13 - 2011-05-31 03:42 - 00242792 _____ (DTS) C:\WINDOWS\system32\DTSLFXAPO64.dll 2014-06-03 10:13 - 2011-05-31 03:42 - 00242792 _____ (DTS) C:\WINDOWS\system32\DTSGFXAPO64.dll 2014-06-03 10:13 - 2011-05-31 03:42 - 00241768 _____ (DTS) C:\WINDOWS\system32\DTSGFXAPONS64.dll 2014-06-03 10:13 - 2010-11-08 01:31 - 00375128 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEEP64A.dll 2014-06-03 10:13 - 2010-11-08 01:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RP3DHT64.dll 2014-06-03 10:13 - 2010-11-08 01:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RP3DAA64.dll 2014-06-03 10:13 - 2010-11-08 01:31 - 00204120 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEED64A.dll 2014-06-03 10:13 - 2010-11-08 01:31 - 00101208 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEEL64A.dll 2014-06-03 10:13 - 2010-11-08 01:31 - 00078680 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEEG64A.dll 2014-06-03 10:13 - 2010-11-03 12:30 - 00149608 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkCfg64.dll 2014-06-03 10:13 - 2010-09-27 03:34 - 00318808 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPO20.dll 2014-06-03 10:13 - 2010-07-22 10:48 - 00074064 _____ (Virage Logic Corporation / Sonic Focus) C:\WINDOWS\SysWOW64\SFCOM.dll 2014-06-03 10:13 - 2009-11-24 03:55 - 00518896 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSTSX64.dll 2014-06-03 10:13 - 2009-11-24 03:55 - 00211184 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSTSH64.dll 2014-06-03 10:13 - 2009-11-24 03:55 - 00198896 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSHP64.dll 2014-06-03 10:13 - 2009-11-24 03:55 - 00155888 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSWOW64.dll 2014-06-03 10:12 - 2014-06-03 10:12 - 00000000 ____D () C:\Program Files (x86)\AMD APP 2014-06-03 10:12 - 2014-06-03 10:12 - 00000000 _____ () C:\WINDOWS\ativpsrm.bin 2014-06-03 10:12 - 2011-09-12 18:05 - 00003917 _____ () C:\WINDOWS\SysWOW64\atipblup.dat 2014-06-03 10:12 - 2011-09-12 18:05 - 00003917 _____ () C:\WINDOWS\system32\atipblup.dat 2014-06-03 10:10 - 2014-06-03 10:10 - 00000000 ____D () C:\Program Files\Common Files\ATI Technologies 2014-06-03 10:09 - 2014-06-03 10:12 - 00000000 ____D () C:\Program Files (x86)\ATI Technologies 2014-06-03 10:09 - 2014-06-03 10:09 - 00000000 ____D () C:\Program Files\ATI 2014-06-03 10:08 - 2012-09-17 16:24 - 27664896 _____ (Intel Corporation) C:\WINDOWS\system32\igdrcl64.dll 2014-06-03 10:08 - 2012-09-17 16:24 - 27643904 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdrcl32.dll 2014-06-03 10:08 - 2012-09-17 16:24 - 27435520 _____ (Intel Corporation) C:\WINDOWS\system32\igdfcl64.dll 2014-06-03 10:08 - 2012-09-17 16:24 - 12604928 _____ (Intel Corporation) C:\WINDOWS\system32\igdumd64.dll 2014-06-03 10:08 - 2012-09-17 16:24 - 11040256 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdumd32.dll 2014-06-03 10:08 - 2012-09-17 16:24 - 09007616 _____ (Intel Corporation) C:\WINDOWS\system32\igfxress.dll 2014-06-03 10:08 - 2012-09-17 16:24 - 05338848 _____ (Intel Corporation) C:\WINDOWS\system32\Drivers\igdpmd64.sys 2014-06-03 10:08 - 2012-09-17 16:24 - 05338848 _____ (Intel Corporation) C:\WINDOWS\system32\Drivers\igdkmd64.sys 2014-06-03 10:08 - 2012-09-17 16:24 - 04571136 _____ (Intel Corporation) C:\WINDOWS\system32\igfxcmjit64.dll 2014-06-03 10:08 - 2012-09-17 16:24 - 03776512 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igfxcmjit32.dll 2014-06-03 10:08 - 2012-09-17 16:24 - 01981696 _____ () C:\WINDOWS\system32\iglhxa64.cpa 2014-06-03 10:08 - 2012-09-17 16:24 - 00604160 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igfxcmrt32.dll 2014-06-03 10:08 - 2012-09-17 16:24 - 00598780 _____ () C:\WINDOWS\SysWOW64\igvpkrng700.bin 2014-06-03 10:08 - 2012-09-17 16:24 - 00598780 _____ () C:\WINDOWS\system32\igvpkrng700.bin 2014-06-03 10:08 - 2012-09-17 16:24 - 00524800 _____ (Intel Corporation) C:\WINDOWS\system32\iglhsip64.dll 2014-06-03 10:08 - 2012-09-17 16:24 - 00519680 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\iglhsip32.dll 2014-06-03 10:08 - 2012-09-17 16:24 - 00509984 _____ (Intel Corporation) C:\WINDOWS\system32\igfxsrvc.exe 2014-06-03 10:08 - 2012-09-17 16:24 - 00501760 _____ (Intel Corporation) C:\WINDOWS\system32\igfxcmrt64.dll 2014-06-03 10:08 - 2012-09-17 16:24 - 00482304 _____ (Intel Corporation) C:\WINDOWS\system32\igfx11cmrt64.dll 2014-06-03 10:08 - 2012-09-17 16:24 - 00448512 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igfx11cmrt32.dll 2014-06-03 10:08 - 2012-09-17 16:24 - 00441888 _____ (Intel Corporation) C:\WINDOWS\system32\igfxpers.exe 2014-06-03 10:08 - 2012-09-17 16:24 - 00441856 _____ (Intel Corporation) C:\WINDOWS\system32\igfxdev.dll 2014-06-03 10:08 - 2012-09-17 16:24 - 00440320 _____ (Intel Corporation) C:\WINDOWS\system32\igfxrell.lrc 2014-06-03 10:08 - 2012-09-17 16:24 - 00439808 _____ (Intel Corporation) C:\WINDOWS\system32\igfxrfra.lrc 2014-06-03 10:08 - 2012-09-17 16:24 - 00439808 _____ (Intel Corporation) C:\WINDOWS\system32\igfxresn.lrc 2014-06-03 10:08 - 2012-09-17 16:24 - 00439296 _____ (Intel Corporation) C:\WINDOWS\system32\igfxrrus.lrc 2014-06-03 10:08 - 2012-09-17 16:24 - 00439296 _____ (Intel Corporation) C:\WINDOWS\system32\igfxrrom.lrc 2014-06-03 10:08 - 2012-09-17 16:24 - 00438784 _____ (Intel Corporation) C:\WINDOWS\system32\igfxrsky.lrc 2014-06-03 10:08 - 2012-09-17 16:24 - 00438784 _____ (Intel Corporation) C:\WINDOWS\system32\igfxrptg.lrc 2014-06-03 10:08 - 2012-09-17 16:24 - 00438784 _____ (Intel Corporation) C:\WINDOWS\system32\igfxrplk.lrc 2014-06-03 10:08 - 2012-09-17 16:24 - 00438784 _____ (Intel Corporation) C:\WINDOWS\system32\igfxrnld.lrc 2014-06-03 10:08 - 2012-09-17 16:24 - 00438784 _____ (Intel Corporation) C:\WINDOWS\system32\igfxrita.lrc 2014-06-03 10:08 - 2012-09-17 16:24 - 00438784 _____ (Intel Corporation) C:\WINDOWS\system32\igfxrhrv.lrc 2014-06-03 10:08 - 2012-09-17 16:24 - 00438784 _____ (Intel Corporation) C:\WINDOWS\system32\igfxrdeu.lrc 2014-06-03 10:08 - 2012-09-17 16:24 - 00438272 _____ (Intel Corporation) C:\WINDOWS\system32\igfxrhun.lrc 2014-06-03 10:08 - 2012-09-17 16:24 - 00438272 _____ (Intel Corporation) C:\WINDOWS\system32\igfxrfin.lrc 2014-06-03 10:08 - 2012-09-17 16:24 - 00438272 _____ (Intel Corporation) C:\WINDOWS\system32\igfxrcsy.lrc 2014-06-03 10:08 - 2012-09-17 16:24 - 00437760 _____ (Intel Corporation) C:\WINDOWS\system32\igfxrtrk.lrc 2014-06-03 10:08 - 2012-09-17 16:24 - 00437760 _____ (Intel Corporation) C:\WINDOWS\system32\igfxrsve.lrc 2014-06-03 10:08 - 2012-09-17 16:24 - 00437760 _____ (Intel Corporation) C:\WINDOWS\system32\igfxrslv.lrc 2014-06-03 10:08 - 2012-09-17 16:24 - 00437760 _____ (Intel Corporation) C:\WINDOWS\system32\igfxrptb.lrc 2014-06-03 10:08 - 2012-09-17 16:24 - 00437760 _____ (Intel Corporation) C:\WINDOWS\system32\igfxrnor.lrc 2014-06-03 10:08 - 2012-09-17 16:24 - 00437248 _____ (Intel Corporation) C:\WINDOWS\system32\igfxrtha.lrc 2014-06-03 10:08 - 2012-09-17 16:24 - 00437248 _____ (Intel Corporation) C:\WINDOWS\system32\igfxrdan.lrc 2014-06-03 10:08 - 2012-09-17 16:24 - 00435712 _____ (Intel Corporation) C:\WINDOWS\system32\igfxrheb.lrc 2014-06-03 10:08 - 2012-09-17 16:24 - 00435712 _____ (Intel Corporation) C:\WINDOWS\system32\igfxrara.lrc 2014-06-03 10:08 - 2012-09-17 16:24 - 00432128 _____ (Intel Corporation) C:\WINDOWS\system32\igfxrjpn.lrc 2014-06-03 10:08 - 2012-09-17 16:24 - 00431104 _____ (Intel Corporation) C:\WINDOWS\system32\igfxrkor.lrc 2014-06-03 10:08 - 2012-09-17 16:24 - 00429056 _____ (Intel Corporation) C:\WINDOWS\system32\igfxrcht.lrc 2014-06-03 10:08 - 2012-09-17 16:24 - 00428544 _____ (Intel Corporation) C:\WINDOWS\system32\igfxrchs.lrc 2014-06-03 10:08 - 2012-09-17 16:24 - 00410624 _____ (Intel Corporation) C:\WINDOWS\system32\igfxTMM.dll 2014-06-03 10:08 - 2012-09-17 16:24 - 00386048 _____ (Intel Corporation) C:\WINDOWS\system32\igfxpph.dll 2014-06-03 10:08 - 2012-09-17 16:24 - 00330240 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igfxdv32.dll 2014-06-03 10:08 - 2012-09-17 16:24 - 00286208 _____ (Intel Corporation) C:\WINDOWS\system32\igfxrenu.lrc 2014-06-03 10:08 - 2012-09-17 16:24 - 00277024 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\IntelCpHeciSvc.exe 2014-06-03 10:08 - 2012-09-17 16:24 - 00252448 _____ (Intel Corporation) C:\WINDOWS\system32\igfxext.exe 2014-06-03 10:08 - 2012-09-17 16:24 - 00241664 _____ (Intel Corporation) C:\WINDOWS\system32\IntelOpenCL64.dll 2014-06-03 10:08 - 2012-09-17 16:24 - 00216064 _____ (Intel Corporation) C:\WINDOWS\system32\iglhcp64.dll 2014-06-03 10:08 - 2012-09-17 16:24 - 00195584 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\IntelOpenCL32.dll 2014-06-03 10:08 - 2012-09-17 16:24 - 00180224 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\iglhcp32.dll 2014-06-03 10:08 - 2012-09-17 16:24 - 00171040 _____ (Intel Corporation) C:\WINDOWS\system32\igfxtray.exe 2014-06-03 10:08 - 2012-09-17 16:24 - 00142336 _____ (Intel Corporation) C:\WINDOWS\system32\igfxdo.dll 2014-06-03 10:08 - 2012-09-17 16:24 - 00126976 _____ (Intel Corporation) C:\WINDOWS\system32\igfxcpl.cpl 2014-06-03 10:08 - 2012-09-17 16:24 - 00063488 _____ (Intel Corporation) C:\WINDOWS\system32\igfxsrvc.dll 2014-06-03 10:08 - 2012-09-17 16:24 - 00059425 _____ () C:\WINDOWS\system32\iglhxo64.vp 2014-06-03 10:08 - 2012-09-17 16:24 - 00059398 _____ () C:\WINDOWS\system32\iglhxg64.vp 2014-06-03 10:08 - 2012-09-17 16:24 - 00059230 _____ () C:\WINDOWS\system32\iglhxc64.vp 2014-06-03 10:08 - 2012-09-17 16:24 - 00059104 _____ () C:\WINDOWS\system32\iglhxc64_dev.vp 2014-06-03 10:08 - 2012-09-17 16:24 - 00058796 _____ () C:\WINDOWS\system32\iglhxg64_dev.vp 2014-06-03 10:08 - 2012-09-17 16:24 - 00058109 _____ () C:\WINDOWS\system32\iglhxo64_dev.vp 2014-06-03 10:08 - 2012-09-17 16:24 - 00056832 _____ (Khronos Group) C:\WINDOWS\system32\Intel_OpenCL_ICD64.dll 2014-06-03 10:08 - 2012-09-17 16:24 - 00056320 _____ (Khronos Group) C:\WINDOWS\SysWOW64\Intel_OpenCL_ICD32.dll 2014-06-03 10:08 - 2012-09-17 16:24 - 00028672 _____ (Intel Corporation) C:\WINDOWS\system32\igfxexps.dll 2014-06-03 10:08 - 2012-09-17 16:24 - 00025088 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igfxexps32.dll 2014-06-03 10:08 - 2012-09-17 16:24 - 00017014 _____ () C:\WINDOWS\system32\iglhxs64.vp 2014-06-03 10:08 - 2012-09-17 16:24 - 00009728 _____ ( ) C:\WINDOWS\system32\IGFXDEVLib.dll 2014-06-03 10:08 - 2012-09-17 16:24 - 00001074 _____ () C:\WINDOWS\system32\iglhxa64.vp 2014-06-03 10:08 - 2012-09-17 16:23 - 21816320 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdfcl32.dll 2014-06-03 10:08 - 2012-09-17 16:23 - 12836864 _____ (Intel Corporation) C:\WINDOWS\system32\igd10umd64.dll 2014-06-03 10:08 - 2012-09-17 16:23 - 11593728 _____ (Intel Corporation) C:\WINDOWS\system32\ig7icd64.dll 2014-06-03 10:08 - 2012-09-17 16:23 - 11158528 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igd10umd32.dll 2014-06-03 10:08 - 2012-09-17 16:23 - 08577536 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\ig7icd32.dll 2014-06-03 10:08 - 2012-09-17 16:23 - 05903392 _____ (Intel Corporation) C:\WINDOWS\system32\GfxUI.exe 2014-06-03 10:08 - 2012-09-17 16:23 - 03582976 _____ (Intel Corporation) C:\WINDOWS\system32\igdbcl64.dll 2014-06-03 10:08 - 2012-09-17 16:23 - 02899968 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdbcl32.dll 2014-06-03 10:08 - 2012-09-17 16:23 - 00755048 _____ () C:\WINDOWS\SysWOW64\igcodeckrng700.bin 2014-06-03 10:08 - 2012-09-17 16:23 - 00755048 _____ () C:\WINDOWS\system32\igcodeckrng700.bin 2014-06-03 10:08 - 2012-09-17 16:23 - 00399392 _____ (Intel Corporation) C:\WINDOWS\system32\hkcmd.exe 2014-06-03 10:08 - 2012-09-17 16:23 - 00223233 _____ () C:\WINDOWS\system32\Gfxres.th-TH.resources 2014-06-03 10:08 - 2012-09-17 16:23 - 00209727 _____ () C:\WINDOWS\system32\Gfxres.el-GR.resources 2014-06-03 10:08 - 2012-09-17 16:23 - 00193862 _____ () C:\WINDOWS\system32\Gfxres.ru-RU.resources 2014-06-03 10:08 - 2012-09-17 16:23 - 00185376 _____ (Intel Corporation) C:\WINDOWS\system32\difx64.exe 2014-06-03 10:08 - 2012-09-17 16:23 - 00173568 _____ (Intel Corporation) C:\WINDOWS\system32\gfxSrvc.dll 2014-06-03 10:08 - 2012-09-17 16:23 - 00165865 _____ () C:\WINDOWS\system32\Gfxres.ar-SA.resources 2014-06-03 10:08 - 2012-09-17 16:23 - 00163120 _____ () C:\WINDOWS\system32\Gfxres.ja-JP.resources 2014-06-03 10:08 - 2012-09-17 16:23 - 00158727 _____ () C:\WINDOWS\system32\Gfxres.he-IL.resources 2014-06-03 10:08 - 2012-09-17 16:23 - 00149390 _____ () C:\WINDOWS\system32\Gfxres.it-IT.resources 2014-06-03 10:08 - 2012-09-17 16:23 - 00147759 _____ () C:\WINDOWS\system32\Gfxres.ko-KR.resources 2014-06-03 10:08 - 2012-09-17 16:23 - 00147101 _____ () C:\WINDOWS\system32\Gfxres.de-DE.resources 2014-06-03 10:08 - 2012-09-17 16:23 - 00147010 _____ () C:\WINDOWS\system32\Gfxres.es-ES.resources 2014-06-03 10:08 - 2012-09-17 16:23 - 00145715 _____ () C:\WINDOWS\system32\Gfxres.ro-RO.resources 2014-06-03 10:08 - 2012-09-17 16:23 - 00145211 _____ () C:\WINDOWS\system32\Gfxres.fr-FR.resources 2014-06-03 10:08 - 2012-09-17 16:23 - 00144378 _____ () C:\WINDOWS\system32\Gfxres.tr-TR.resources 2014-06-03 10:08 - 2012-09-17 16:23 - 00143976 _____ () C:\WINDOWS\system32\Gfxres.pt-BR.resources 2014-06-03 10:08 - 2012-09-17 16:23 - 00143730 _____ () C:\WINDOWS\system32\Gfxres.nl-NL.resources 2014-06-03 10:08 - 2012-09-17 16:23 - 00143657 _____ () C:\WINDOWS\system32\Gfxres.hu-HU.resources 2014-06-03 10:08 - 2012-09-17 16:23 - 00142990 _____ () C:\WINDOWS\system32\Gfxres.pt-PT.resources 2014-06-03 10:08 - 2012-09-17 16:23 - 00142617 _____ () C:\WINDOWS\system32\Gfxres.sv-SE.resources 2014-06-03 10:08 - 2012-09-17 16:23 - 00142423 _____ () C:\WINDOWS\system32\Gfxres.pl-PL.resources 2014-06-03 10:08 - 2012-09-17 16:23 - 00142008 _____ () C:\WINDOWS\system32\Gfxres.cs-CZ.resources 2014-06-03 10:08 - 2012-09-17 16:23 - 00141739 _____ () C:\WINDOWS\system32\Gfxres.fi-FI.resources 2014-06-03 10:08 - 2012-09-17 16:23 - 00141574 _____ () C:\WINDOWS\system32\Gfxres.sk-SK.resources 2014-06-03 10:08 - 2012-09-17 16:23 - 00140779 _____ () C:\WINDOWS\system32\Gfxres.hr-HR.resources 2014-06-03 10:08 - 2012-09-17 16:23 - 00137621 _____ () C:\WINDOWS\system32\Gfxres.sl-SI.resources 2014-06-03 10:08 - 2012-09-17 16:23 - 00137534 _____ () C:\WINDOWS\system32\Gfxres.nb-NO.resources 2014-06-03 10:08 - 2012-09-17 16:23 - 00136873 _____ () C:\WINDOWS\system32\Gfxres.da-DK.resources 2014-06-03 10:08 - 2012-09-17 16:23 - 00132360 _____ () C:\WINDOWS\system32\Gfxres.en-US.resources 2014-06-03 10:08 - 2012-09-17 16:23 - 00126035 _____ () C:\WINDOWS\system32\Gfxres.zh-TW.resources 2014-06-03 10:08 - 2012-09-17 16:23 - 00124403 _____ () C:\WINDOWS\system32\Gfxres.zh-CN.resources 2014-06-03 10:08 - 2012-09-17 16:23 - 00110592 _____ (Intel Corporation) C:\WINDOWS\system32\hccutils.dll 2014-06-03 10:08 - 2012-09-17 16:23 - 00080384 _____ () C:\WINDOWS\system32\igdde64.dll 2014-06-03 10:08 - 2012-09-17 16:23 - 00064512 _____ () C:\WINDOWS\SysWOW64\igdde32.dll 2014-06-03 10:08 - 2012-08-02 03:00 - 05538984 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atiumdag.dll 2014-06-03 10:08 - 2012-08-02 02:54 - 10280960 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\Drivers\atikmdag.sys 2014-06-03 10:08 - 2012-08-02 02:46 - 24934912 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atio6axx.dll 2014-06-03 10:08 - 2012-08-02 02:17 - 20546560 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\atioglxx.dll 2014-06-03 10:08 - 2012-08-02 01:13 - 00268728 _____ () C:\WINDOWS\SysWOW64\atiapfxx.blb 2014-06-03 10:08 - 2012-08-02 01:13 - 00268728 _____ () C:\WINDOWS\system32\atiapfxx.blb 2014-06-03 10:08 - 2012-08-02 01:12 - 00163840 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atiapfxx.exe 2014-06-03 10:08 - 2012-08-02 01:11 - 00927232 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\aticfx32.dll 2014-06-03 10:08 - 2012-08-02 01:10 - 01111040 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\aticfx64.dll 2014-06-03 10:08 - 2012-08-02 01:06 - 00534528 _____ (AMD) C:\WINDOWS\system32\atieclxx.exe 2014-06-03 10:08 - 2012-08-02 01:06 - 00442368 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atidemgy.dll 2014-06-03 10:08 - 2012-08-02 01:06 - 00239616 _____ (AMD) C:\WINDOWS\system32\atiesrxx.exe 2014-06-03 10:08 - 2012-08-02 01:04 - 00120320 _____ (AMD) C:\WINDOWS\system32\atitmm64.dll 2014-06-03 10:08 - 2012-08-02 01:04 - 00059392 _____ (ATI Technologies, Inc.) C:\WINDOWS\system32\atiedu64.dll 2014-06-03 10:08 - 2012-08-02 01:04 - 00043520 _____ (ATI Technologies, Inc.) C:\WINDOWS\SysWOW64\ati2edxx.dll 2014-06-03 10:08 - 2012-08-02 01:04 - 00021504 _____ (AMD) C:\WINDOWS\system32\atimuixx.dll 2014-06-03 10:08 - 2012-08-02 01:03 - 06430208 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atidxx32.dll 2014-06-03 10:08 - 2012-08-02 00:55 - 04266496 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atiumd6a.dll 2014-06-03 10:08 - 2012-08-02 00:53 - 03150560 _____ () C:\WINDOWS\system32\atiumd6a.cap 2014-06-03 10:08 - 2012-08-02 00:53 - 00204952 _____ () C:\WINDOWS\SysWOW64\ativvsvl.dat 2014-06-03 10:08 - 2012-08-02 00:53 - 00204952 _____ () C:\WINDOWS\system32\ativvsvl.dat 2014-06-03 10:08 - 2012-08-02 00:53 - 00157144 _____ () C:\WINDOWS\SysWOW64\ativvsva.dat 2014-06-03 10:08 - 2012-08-02 00:53 - 00157144 _____ () C:\WINDOWS\system32\ativvsva.dat 2014-06-03 10:08 - 2012-08-02 00:47 - 07052288 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atidxx64.dll 2014-06-03 10:08 - 2012-08-02 00:47 - 04751872 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atiumdva.dll 2014-06-03 10:08 - 2012-08-02 00:46 - 03187136 _____ () C:\WINDOWS\SysWOW64\atiumdva.cap 2014-06-03 10:08 - 2012-08-02 00:28 - 00056832 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atimpc32.dll 2014-06-03 10:08 - 2012-08-02 00:28 - 00056832 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdpcom32.dll 2014-06-03 10:08 - 2012-08-02 00:28 - 00056320 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atimpc64.dll 2014-06-03 10:08 - 2012-08-02 00:28 - 00056320 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdpcom64.dll 2014-06-03 10:08 - 2012-08-02 00:20 - 06676480 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atiumd64.dll 2014-06-03 10:08 - 2012-08-02 00:17 - 00070144 _____ (AMD) C:\WINDOWS\system32\coinst_8.982.6.dll 2014-06-03 10:08 - 2012-08-02 00:10 - 00540160 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atiadlxx.dll 2014-06-03 10:08 - 2012-08-02 00:10 - 00368640 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\atiadlxy.dll 2014-06-03 10:08 - 2012-08-02 00:09 - 00368640 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\Drivers\atikmpag.sys 2014-06-03 10:08 - 2012-08-02 00:09 - 00041984 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atig6txx.dll 2014-06-03 10:08 - 2012-08-02 00:09 - 00033280 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atigktxx.dll 2014-06-03 10:08 - 2012-08-02 00:09 - 00017920 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atig6pxx.dll 2014-06-03 10:08 - 2012-08-02 00:09 - 00014848 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atiglpxx.dll 2014-06-03 10:08 - 2012-08-02 00:08 - 00129536 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atiuxp64.dll 2014-06-03 10:08 - 2012-08-02 00:08 - 00109568 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atiuxpag.dll 2014-06-03 10:08 - 2012-08-02 00:08 - 00103936 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atiu9p64.dll 2014-06-03 10:08 - 2012-08-02 00:08 - 00083456 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atiu9pag.dll 2014-06-03 10:08 - 2012-08-02 00:07 - 00053248 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\Drivers\ati2erec.dll 2014-06-03 10:08 - 2012-08-01 23:22 - 16034304 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\system32\aticaldd64.dll 2014-06-03 10:08 - 2012-08-01 23:22 - 00051200 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\system32\aticalrt64.dll 2014-06-03 10:08 - 2012-08-01 23:22 - 00046080 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\SysWOW64\aticalrt.dll 2014-06-03 10:08 - 2012-08-01 23:22 - 00044544 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\system32\aticalcl64.dll 2014-06-03 10:08 - 2012-08-01 23:22 - 00044032 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\SysWOW64\aticalcl.dll 2014-06-03 10:08 - 2012-08-01 23:18 - 13605888 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\SysWOW64\aticaldd.dll 2014-06-03 10:08 - 2012-07-16 05:33 - 00038557 _____ () C:\WINDOWS\atiogl.xml 2014-06-03 10:08 - 2012-07-09 20:19 - 00035496 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\Drivers\amdkmpfd.sys 2014-06-03 10:08 - 2012-04-12 15:30 - 00637743 _____ () C:\WINDOWS\system32\atiicdxx.dat 2014-06-03 10:08 - 2011-09-12 18:06 - 00003917 _____ () C:\WINDOWS\SysWOW64\atipblag.dat 2014-06-03 10:08 - 2011-09-12 18:06 - 00003917 _____ () C:\WINDOWS\system32\atipblag.dat 2014-06-03 10:08 - 2009-05-11 17:35 - 00118784 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atibtmon.exe 2014-06-03 10:01 - 2012-07-04 04:55 - 00053248 _____ (Windows XP Bundled build C-Centric Single User) C:\WINDOWS\SysWOW64\CSVer.dll 2014-06-03 10:00 - 2014-06-03 10:41 - 00000000 ____D () C:\Users\Verena\AppData\Local\CrashDumps 2014-06-03 10:00 - 2013-02-21 16:59 - 02063240 _____ (Samsung Electronics) C:\ProgramData\MakeMarkerFile.exe 2014-06-03 10:00 - 2013-01-12 23:51 - 00003004 _____ () C:\ProgramData\MakeMarkerFile.xml 2014-06-03 09:59 - 2014-06-03 11:08 - 00007986 _____ () C:\Users\Verena\Downloads\hijackthis.log 2014-06-03 09:55 - 2014-06-03 09:55 - 00001956 _____ () C:\Users\Public\Desktop\SW Update.lnk 2014-06-03 09:54 - 2014-06-03 10:32 - 00000000 ____D () C:\ProgramData\Samsung 2014-06-03 09:33 - 2014-06-03 09:33 - 00084720 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avnetflt.sys 2014-06-03 00:53 - 2014-04-19 11:39 - 00628024 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationUI.exe 2014-06-03 00:53 - 2014-04-19 10:45 - 00693760 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll 2014-06-03 00:53 - 2014-04-19 10:45 - 00163840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll 2014-06-03 00:53 - 2014-04-19 08:57 - 00566784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll 2014-06-03 00:53 - 2014-04-19 08:57 - 00124928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll 2014-06-03 00:47 - 2014-05-01 22:37 - 00694240 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe 2014-06-03 00:47 - 2014-05-01 22:37 - 00078296 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl 2014-06-03 00:40 - 2014-06-03 09:30 - 00000000 ___RD () C:\WINDOWS\BrowserChoice 2014-06-02 22:43 - 2014-06-02 22:43 - 00002263 _____ () C:\Users\Public\Desktop\Google Chrome.lnk 2014-06-02 22:43 - 2014-06-02 22:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome 2014-06-02 22:42 - 2014-06-03 11:17 - 00001120 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job 2014-06-02 22:42 - 2014-06-03 09:47 - 00001124 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job 2014-06-02 22:42 - 2014-06-02 22:43 - 00000000 ____D () C:\Users\Verena\AppData\Local\Google 2014-06-02 22:42 - 2014-06-02 22:43 - 00000000 ____D () C:\Program Files (x86)\Google 2014-06-02 22:42 - 2014-06-02 22:42 - 00004096 _____ () C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA 2014-06-02 22:42 - 2014-06-02 22:42 - 00003860 _____ () C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore 2014-06-02 22:41 - 2014-06-02 22:42 - 00000000 ____D () C:\Users\Verena\AppData\Local\Deployment 2014-06-02 22:41 - 2014-06-02 22:41 - 00000000 ____D () C:\Users\Verena\AppData\Local\Apps\2.0 2014-06-02 22:31 - 2014-06-02 22:31 - 00000117 _____ () C:\WINDOWS\system32\netcfg-46234.txt 2014-06-02 22:29 - 2014-06-02 22:29 - 00000117 _____ () C:\WINDOWS\system32\netcfg-201890.txt 2014-06-02 22:14 - 2014-06-02 22:14 - 00000117 _____ () C:\WINDOWS\system32\netcfg-9373062.txt 2014-06-02 22:14 - 2014-06-02 22:14 - 00000117 _____ () C:\WINDOWS\system32\netcfg-9372734.txt 2014-06-02 20:53 - 2014-06-03 01:11 - 00000000 ____D () C:\WINDOWS\rescache 2014-06-02 20:23 - 2014-02-04 01:56 - 00332632 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storport.sys 2014-06-02 20:23 - 2014-02-04 01:56 - 00278872 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msiscsi.sys 2014-06-02 20:23 - 2014-01-31 02:48 - 00485888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSDApi.dll 2014-06-02 20:23 - 2014-01-31 02:48 - 00143872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.dll 2014-06-02 20:23 - 2014-01-31 02:06 - 00599040 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSDApi.dll 2014-06-02 20:23 - 2014-01-27 05:42 - 02232664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys 2014-06-02 20:23 - 2014-01-27 05:39 - 01939288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys 2014-06-02 20:23 - 2014-01-27 01:17 - 00386722 _____ () C:\WINDOWS\system32\ApnDatabase.xml 2014-06-02 20:23 - 2014-01-16 01:42 - 00118784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dfsc.sys 2014-06-02 20:23 - 2014-01-11 08:48 - 05979648 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll 2014-06-02 20:23 - 2014-01-11 07:06 - 05092352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll 2014-06-02 20:23 - 2014-01-03 01:35 - 00365568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsGdiConverter.dll 2014-06-02 20:23 - 2014-01-03 01:32 - 00523264 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsGdiConverter.dll 2014-06-02 20:23 - 2013-06-17 00:41 - 00997632 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys 2014-06-02 20:23 - 2013-06-01 13:34 - 02391280 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe 2014-06-02 20:23 - 2013-06-01 13:26 - 00327936 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\volsnap.sys 2014-06-02 20:23 - 2013-06-01 12:24 - 02106176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe 2014-06-02 20:23 - 2013-06-01 11:25 - 00067584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\samlib.dll 2014-06-02 20:23 - 2013-06-01 11:24 - 01453568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll 2014-06-02 20:23 - 2013-06-01 11:24 - 00850944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfasfsrcsnk.dll 2014-06-02 20:23 - 2013-06-01 11:24 - 00493056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mscms.dll 2014-06-02 20:23 - 2013-06-01 11:23 - 01842176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll 2014-06-02 20:23 - 2013-06-01 11:23 - 00680960 _____ (Microsoft Corporation) C:\WINDOWS\system32\vds.exe 2014-06-02 20:23 - 2013-06-01 11:22 - 00190976 _____ (Microsoft Corporation) C:\WINDOWS\system32\vdsutil.dll 2014-06-02 20:23 - 2013-06-01 11:22 - 00080896 _____ (Microsoft Corporation) C:\WINDOWS\system32\MbaeParserTask.exe 2014-06-02 20:23 - 2013-06-01 11:21 - 00729600 _____ (Microsoft Corporation) C:\WINDOWS\system32\samsrv.dll 2014-06-02 20:23 - 2013-06-01 11:21 - 00106496 _____ (Microsoft Corporation) C:\WINDOWS\system32\samlib.dll 2014-06-02 20:23 - 2013-06-01 11:20 - 02219520 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll 2014-06-02 20:23 - 2013-06-01 11:20 - 01527808 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll 2014-06-02 20:23 - 2013-06-01 11:20 - 01048576 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfasfsrcsnk.dll 2014-06-02 20:23 - 2013-06-01 11:20 - 00583168 _____ (Microsoft Corporation) C:\WINDOWS\system32\mscms.dll 2014-06-02 20:23 - 2013-06-01 11:19 - 00785408 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll 2014-06-02 20:23 - 2013-06-01 11:19 - 00207872 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceSetupManager.dll 2014-06-02 20:23 - 2013-06-01 05:08 - 00037632 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BthAvrcpTg.sys 2014-06-02 20:23 - 2013-05-25 00:09 - 01403296 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi 2014-06-02 20:23 - 2013-05-25 00:09 - 01271584 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe 2014-06-02 20:23 - 2013-05-25 00:09 - 01217352 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi 2014-06-02 20:23 - 2013-05-25 00:09 - 01093904 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe 2014-06-02 20:19 - 2012-09-20 11:08 - 00027280 _____ (Microsoft Corporation) C:\WINDOWS\system32\avrt.dll 2014-06-02 20:19 - 2012-09-20 10:40 - 00389360 _____ (Microsoft Corporation) C:\WINDOWS\system32\MMDevAPI.dll 2014-06-02 20:19 - 2012-09-20 10:31 - 00425192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\acpi.sys 2014-06-02 20:19 - 2012-09-20 09:55 - 03265256 _____ (Broadcom Corporation) C:\WINDOWS\system32\Drivers\evbda.sys 2014-06-02 20:19 - 2012-09-20 09:55 - 00533224 _____ (Broadcom Corporation) C:\WINDOWS\system32\Drivers\bxvbda.sys 2014-06-02 20:19 - 2012-09-20 08:47 - 00307192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MMDevAPI.dll 2014-06-02 20:19 - 2012-09-20 08:33 - 03964416 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinSAT.exe 2014-06-02 20:19 - 2012-09-20 08:33 - 02397184 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcMon.exe 2014-06-02 20:19 - 2012-09-20 08:33 - 01513984 _____ (Microsoft Corporation) C:\WINDOWS\system32\vssapi.dll 2014-06-02 20:19 - 2012-09-20 08:33 - 01342464 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll 2014-06-02 20:19 - 2012-09-20 08:33 - 01304064 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Streaming.dll 2014-06-02 20:19 - 2012-09-20 08:33 - 00866304 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinTypes.dll 2014-06-02 20:19 - 2012-09-20 08:33 - 00757248 _____ (Microsoft Corporation) C:\WINDOWS\system32\uDWM.dll 2014-06-02 20:19 - 2012-09-20 08:33 - 00699392 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.dll 2014-06-02 20:19 - 2012-09-20 08:33 - 00627712 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpksetup.exe 2014-06-02 20:19 - 2012-09-20 08:33 - 00588800 _____ (Microsoft Corporation) C:\WINDOWS\system32\webio.dll 2014-06-02 20:19 - 2012-09-20 08:33 - 00573440 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinSATAPI.dll 2014-06-02 20:19 - 2012-09-20 08:33 - 00545280 _____ (Microsoft Corporation) C:\WINDOWS\system32\taskeng.exe 2014-06-02 20:19 - 2012-09-20 08:33 - 00541184 _____ (Microsoft Corporation) C:\WINDOWS\system32\VAN.dll 2014-06-02 20:19 - 2012-09-20 08:33 - 00420352 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe 2014-06-02 20:19 - 2012-09-20 08:33 - 00410624 _____ (Microsoft Corporation) C:\WINDOWS\system32\services.exe 2014-06-02 20:19 - 2012-09-20 08:33 - 00344064 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidcredprov.dll 2014-06-02 20:19 - 2012-09-20 08:33 - 00249344 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnprv.dll 2014-06-02 20:19 - 2012-09-20 08:33 - 00194048 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsrv.dll 2014-06-02 20:19 - 2012-09-20 08:33 - 00117760 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwm.exe 2014-06-02 20:19 - 2012-09-20 08:33 - 00107008 _____ (Microsoft Corporation) C:\WINDOWS\system32\umpnpmgr.dll 2014-06-02 20:19 - 2012-09-20 08:33 - 00101888 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe 2014-06-02 20:19 - 2012-09-20 08:33 - 00092672 _____ (Microsoft Corporation) C:\WINDOWS\system32\drvinst.exe 2014-06-02 20:19 - 2012-09-20 08:33 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpremove.exe 2014-06-02 20:19 - 2012-09-20 08:33 - 00090624 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmTasks.dll 2014-06-02 20:19 - 2012-09-20 08:33 - 00089600 _____ (Microsoft Corporation) C:\WINDOWS\system32\umpo.dll 2014-06-02 20:19 - 2012-09-20 08:33 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\system32\vsstrace.dll 2014-06-02 20:19 - 2012-09-20 08:33 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\system32\svchost.exe 2014-06-02 20:19 - 2012-09-20 08:33 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdbinst.exe 2014-06-02 20:19 - 2012-09-20 08:32 - 01739264 _____ (Microsoft Corporation) C:\WINDOWS\system32\RacEngn.dll 2014-06-02 20:19 - 2012-09-20 08:32 - 01400832 _____ (Microsoft Corporation) C:\WINDOWS\system32\propsys.dll 2014-06-02 20:19 - 2012-09-20 08:32 - 01019392 _____ (Microsoft Corporation) C:\WINDOWS\system32\MsSpellCheckingFacility.dll 2014-06-02 20:19 - 2012-09-20 08:32 - 00762368 _____ (Microsoft Corporation) C:\WINDOWS\system32\provcore.dll 2014-06-02 20:19 - 2012-09-20 08:32 - 00256512 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvproc.dll 2014-06-02 20:19 - 2012-09-20 08:32 - 00228352 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProximityService.dll 2014-06-02 20:19 - 2012-09-20 08:32 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\system32\perfos.dll 2014-06-02 20:19 - 2012-09-20 08:32 - 00112128 _____ (Microsoft Corporation) C:\WINDOWS\system32\PackageStateRoaming.dll 2014-06-02 20:19 - 2012-09-20 08:32 - 00076288 _____ (Microsoft Corporation) C:\WINDOWS\system32\RpcEpMap.dll 2014-06-02 20:19 - 2012-09-20 08:32 - 00065536 _____ (Microsoft Corporation) C:\WINDOWS\system32\setbcdlocale.dll 2014-06-02 20:19 - 2012-09-20 08:32 - 00044544 _____ (Microsoft Corporation) C:\WINDOWS\system32\perfctrs.dll 2014-06-02 20:19 - 2012-09-20 08:32 - 00037888 _____ (Microsoft Corporation) C:\WINDOWS\system32\perfproc.dll 2014-06-02 20:19 - 2012-09-20 08:32 - 00034816 _____ (Microsoft Corporation) C:\WINDOWS\system32\perfdisk.dll 2014-06-02 20:19 - 2012-09-20 08:32 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\perfnet.dll 2014-06-02 20:19 - 2012-09-20 08:31 - 00755200 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll 2014-06-02 20:19 - 2012-09-20 08:31 - 00617984 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsrcsnk.dll 2014-06-02 20:19 - 2012-09-20 08:31 - 00604672 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsapi.dll 2014-06-02 20:19 - 2012-09-20 08:31 - 00459776 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll 2014-06-02 20:19 - 2012-09-20 08:31 - 00437760 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfh264enc.dll 2014-06-02 20:19 - 2012-09-20 08:31 - 00355328 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll 2014-06-02 20:19 - 2012-09-20 08:31 - 00240640 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapibase.dll 2014-06-02 20:19 - 2012-09-20 08:31 - 00236544 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFPlay.dll 2014-06-02 20:19 - 2012-09-20 08:31 - 00210432 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsrslvr.dll 2014-06-02 20:19 - 2012-09-20 08:31 - 00155136 _____ (Microsoft Corporation) C:\WINDOWS\system32\IPHLPAPI.DLL 2014-06-02 20:19 - 2012-09-20 08:31 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevPropMgr.dll 2014-06-02 20:19 - 2012-09-20 08:31 - 00080896 _____ (Microsoft Corporation) C:\WINDOWS\system32\mmcss.dll 2014-06-02 20:19 - 2012-09-20 08:30 - 02016256 _____ (Microsoft Corporation) C:\WINDOWS\system32\batmeter.dll 2014-06-02 20:19 - 2012-09-20 08:30 - 01743872 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll 2014-06-02 20:19 - 2012-09-20 08:30 - 00751104 _____ (Microsoft Corporation) C:\WINDOWS\system32\appwiz.cpl 2014-06-02 20:19 - 2012-09-20 08:30 - 00634880 _____ (Microsoft Corporation) C:\WINDOWS\system32\apphelp.dll 2014-06-02 20:19 - 2012-09-20 08:30 - 00190976 _____ (Microsoft Corporation) C:\WINDOWS\system32\aelupsvc.dll 2014-06-02 20:19 - 2012-09-20 08:30 - 00180736 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcdsrv.dll 2014-06-02 20:19 - 2012-09-20 08:30 - 00156672 _____ (Microsoft Corporation) C:\WINDOWS\system32\DAFWSD.dll 2014-06-02 20:19 - 2012-09-20 08:13 - 00103936 _____ (Microsoft Corporation) C:\WINDOWS\system32\microsoft-windows-kernel-power-events.dll 2014-06-02 20:19 - 2012-09-20 08:13 - 00023656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\avrt.dll 2014-06-02 20:19 - 2012-09-20 08:09 - 00022528 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ws2ifsl.sys 2014-06-02 20:19 - 2012-09-20 07:55 - 00995328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Streaming.dll 2014-06-02 20:19 - 2012-09-20 07:55 - 00465920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinTypes.dll 2014-06-02 20:19 - 2012-09-20 07:55 - 00417280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webio.dll 2014-06-02 20:19 - 2012-09-20 07:55 - 00333824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe 2014-06-02 20:19 - 2012-09-20 07:55 - 00303616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinSATAPI.dll 2014-06-02 20:19 - 2012-09-20 07:55 - 00263168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlidcredprov.dll 2014-06-02 20:19 - 2012-09-20 07:55 - 00239616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\taskeng.exe 2014-06-02 20:19 - 2012-09-20 07:55 - 00080896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe 2014-06-02 20:19 - 2012-09-20 07:55 - 00080384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\drvinst.exe 2014-06-02 20:19 - 2012-09-20 07:55 - 00023040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\svchost.exe 2014-06-02 20:19 - 2012-09-20 07:55 - 00021504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sdbinst.exe 2014-06-02 20:19 - 2012-09-20 07:54 - 01369600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RacEngn.dll 2014-06-02 20:19 - 2012-09-20 07:54 - 01196032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vssapi.dll 2014-06-02 20:19 - 2012-09-20 07:54 - 01137152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\propsys.dll 2014-06-02 20:19 - 2012-09-20 07:54 - 00709632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MsSpellCheckingFacility.dll 2014-06-02 20:19 - 2012-09-20 07:54 - 00533504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\provcore.dll 2014-06-02 20:19 - 2012-09-20 07:54 - 00509952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.dll 2014-06-02 20:19 - 2012-09-20 07:54 - 00480768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VAN.dll 2014-06-02 20:19 - 2012-09-20 07:54 - 00449024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsrcsnk.dll 2014-06-02 20:19 - 2012-09-20 07:54 - 00413184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfh264enc.dll 2014-06-02 20:19 - 2012-09-20 07:54 - 00270336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll 2014-06-02 20:19 - 2012-09-20 07:54 - 00214528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvproc.dll 2014-06-02 20:19 - 2012-09-20 07:54 - 00180224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFPlay.dll 2014-06-02 20:19 - 2012-09-20 07:54 - 00089088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PackageStateRoaming.dll 2014-06-02 20:19 - 2012-09-20 07:54 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vsstrace.dll 2014-06-02 20:19 - 2012-09-20 07:54 - 00039424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\perfctrs.dll 2014-06-02 20:19 - 2012-09-20 07:54 - 00034816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\perfproc.dll 2014-06-02 20:19 - 2012-09-20 07:54 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\perfos.dll 2014-06-02 20:19 - 2012-09-20 07:54 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\perfdisk.dll 2014-06-02 20:19 - 2012-09-20 07:54 - 00021504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\perfnet.dll 2014-06-02 20:19 - 2012-09-20 07:53 - 02007040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\batmeter.dll 2014-06-02 20:19 - 2012-09-20 07:53 - 01247232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll 2014-06-02 20:19 - 2012-09-20 07:53 - 00675840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\apphelp.dll 2014-06-02 20:19 - 2012-09-20 07:53 - 00670208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\appwiz.cpl 2014-06-02 20:19 - 2012-09-20 07:53 - 00461824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dnsapi.dll 2014-06-02 20:19 - 2012-09-20 07:53 - 00366080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll 2014-06-02 20:19 - 2012-09-20 07:53 - 00119808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\IPHLPAPI.DLL 2014-06-02 20:18 - 2012-09-27 09:17 - 00076288 _____ (Microsoft Corporation) C:\WINDOWS\system32\newdev.exe 2014-06-02 20:18 - 2012-09-27 09:17 - 00075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\ndadmin.exe 2014-06-02 20:18 - 2012-09-27 09:15 - 00301568 _____ (Microsoft Corporation) C:\WINDOWS\system32\newdev.dll 2014-06-02 20:18 - 2012-09-27 08:35 - 00074240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\newdev.exe 2014-06-02 20:18 - 2012-09-27 08:35 - 00073728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ndadmin.exe 2014-06-02 20:18 - 2012-09-27 08:34 - 00275968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\newdev.dll 2014-06-02 20:18 - 2012-09-20 08:32 - 00013824 _____ (Microsoft Corporation) C:\WINDOWS\system32\MUILanguageCleanup.dll 2014-06-02 20:18 - 2012-09-20 08:32 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\system32\shimeng.dll 2014-06-02 20:18 - 2012-09-20 08:31 - 00037888 _____ (Microsoft Corporation) C:\WINDOWS\system32\LangCleanupSysprepAction.dll 2014-06-02 20:18 - 2012-09-20 08:31 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\eventcls.dll 2014-06-02 20:18 - 2012-09-20 08:31 - 00008704 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpksetupproxyserv.dll 2014-06-02 20:18 - 2012-09-20 08:08 - 00071168 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hdaudbus.sys 2014-06-02 20:18 - 2012-09-20 07:54 - 00005632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shimeng.dll 2014-06-02 20:18 - 2012-09-20 07:53 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eventcls.dll 2014-06-02 20:18 - 2012-09-20 06:10 - 01126912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll 2014-06-02 20:13 - 2013-10-09 03:33 - 00059416 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe 2014-06-02 20:13 - 2013-10-09 00:30 - 00628736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll 2014-06-02 20:13 - 2013-10-09 00:30 - 00126976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuwebv.dll 2014-06-02 20:13 - 2013-10-09 00:30 - 00084992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wudriver.dll 2014-06-02 20:13 - 2013-10-09 00:30 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapp.exe 2014-06-02 20:13 - 2013-10-09 00:28 - 00040448 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapp.exe 2014-06-02 20:13 - 2013-10-09 00:27 - 03279872 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll 2014-06-02 20:13 - 2013-10-09 00:27 - 01622016 _____ (Microsoft Corporation) C:\WINDOWS\system32\wucltux.dll 2014-06-02 20:13 - 2013-10-09 00:27 - 00773120 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll 2014-06-02 20:13 - 2013-10-09 00:27 - 00252928 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUSettingsProvider.dll 2014-06-02 20:13 - 2013-10-09 00:27 - 00175104 _____ (Microsoft Corporation) C:\WINDOWS\system32\storewuauth.dll 2014-06-02 20:13 - 2013-10-09 00:27 - 00142848 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuwebv.dll 2014-06-02 20:13 - 2013-10-09 00:27 - 00099328 _____ (Microsoft Corporation) C:\WINDOWS\system32\wudriver.dll 2014-06-02 20:13 - 2013-10-05 08:10 - 00285016 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spaceport.sys 2014-06-02 20:13 - 2013-10-02 04:50 - 00447320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS 2014-06-02 20:13 - 2013-09-28 07:48 - 00778752 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll 2014-06-02 20:13 - 2013-09-28 05:58 - 00551424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll 2014-06-02 20:13 - 2013-09-19 09:32 - 01455448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys 2014-06-02 20:13 - 2013-08-30 07:19 - 00626688 _____ (Microsoft Corporation) C:\WINDOWS\system32\resutils.dll 2014-06-02 20:13 - 2013-08-30 07:18 - 00374784 _____ (Microsoft Corporation) C:\WINDOWS\system32\clusapi.dll 2014-06-02 20:13 - 2013-08-30 01:48 - 00488960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\resutils.dll 2014-06-02 20:13 - 2013-08-30 01:47 - 00302080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\clusapi.dll 2014-06-02 20:11 - 2013-09-14 00:36 - 00247296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ubpm.dll 2014-06-02 20:11 - 2013-09-14 00:33 - 00328192 _____ (Microsoft Corporation) C:\WINDOWS\system32\ubpm.dll 2014-06-02 20:11 - 2013-08-30 07:43 - 00061784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\crashdmp.sys 2014-06-02 20:11 - 2013-08-30 07:20 - 01173504 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCore.dll 2014-06-02 20:11 - 2013-08-30 01:48 - 00914432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAutomationCore.dll 2014-06-02 20:11 - 2013-08-21 08:39 - 00465240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fvevol.sys 2014-06-02 20:11 - 2013-08-10 08:30 - 00151896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tpm.sys 2014-06-02 20:11 - 2013-07-25 01:10 - 10799104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll 2014-06-02 20:11 - 2013-07-25 01:07 - 13661696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll 2014-06-02 20:11 - 2012-09-20 08:48 - 00062488 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpfve.sys 2014-06-02 20:10 - 2013-07-09 10:04 - 00120144 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msgpioclx.sys 2014-06-02 20:10 - 2013-07-09 08:18 - 00439488 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFault.exe 2014-06-02 20:10 - 2013-07-09 06:25 - 00385768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFault.exe 2014-06-02 20:10 - 2013-07-09 05:57 - 00245760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LocationApi.dll 2014-06-02 20:10 - 2013-07-09 00:46 - 00543744 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanmm.dll 2014-06-02 20:10 - 2013-07-09 00:46 - 00414208 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanconn.dll 2014-06-02 20:10 - 2013-07-09 00:46 - 00370688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Wwanadvui.dll 2014-06-02 20:10 - 2013-07-09 00:45 - 00312832 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationApi.dll 2014-06-02 20:10 - 2013-07-06 02:16 - 01025024 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll 2014-06-02 20:10 - 2013-07-03 02:23 - 00391168 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.BackgroundTransfer.dll 2014-06-02 20:10 - 2013-07-03 02:22 - 02839552 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll 2014-06-02 20:10 - 2013-07-03 02:11 - 00268800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.BackgroundTransfer.dll 2014-06-02 20:10 - 2013-07-03 02:10 - 02273792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll 2014-06-02 20:10 - 2013-07-01 00:30 - 00067072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\openfiles.exe 2014-06-02 20:10 - 2013-07-01 00:29 - 00077312 _____ (Microsoft Corporation) C:\WINDOWS\system32\openfiles.exe 2014-06-02 20:10 - 2013-06-29 08:15 - 00195416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdbus.sys 2014-06-02 20:10 - 2013-06-29 08:15 - 00125784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpsd.sys 2014-06-02 20:10 - 2013-06-29 07:43 - 00327512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Classpnp.sys 2014-06-02 20:10 - 2013-06-26 05:01 - 00321536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\udfs.sys 2014-06-02 20:10 - 2013-06-26 04:59 - 00341504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\HdAudio.sys 2014-06-02 20:10 - 2013-06-25 00:54 - 00447488 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll 2014-06-02 20:10 - 2013-06-25 00:54 - 00263680 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmsvc.dll 2014-06-02 20:10 - 2013-06-25 00:54 - 00074240 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmcsp.dll 2014-06-02 20:10 - 2013-06-19 07:36 - 00183808 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmmbase.dll 2014-06-02 20:10 - 2013-06-19 07:36 - 00115712 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmm.dll 2014-06-02 20:10 - 2013-06-19 00:38 - 00160256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmmbase.dll 2014-06-02 20:10 - 2013-06-19 00:38 - 00125440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmm.dll 2014-06-02 20:10 - 2013-06-12 01:43 - 00154112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinSCard.dll 2014-06-02 20:10 - 2013-06-12 01:26 - 00230912 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinSCard.dll 2014-06-02 20:10 - 2013-06-06 10:03 - 00119040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBSTOR.SYS 2014-06-02 20:09 - 2012-10-02 09:34 - 00068608 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanprotdim.dll 2014-06-02 20:03 - 2012-10-24 06:54 - 00396008 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll 2014-06-02 20:03 - 2012-10-17 06:32 - 01172992 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetsrc.dll 2014-06-02 20:03 - 2012-10-17 06:32 - 00677888 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetcore.dll 2014-06-02 20:03 - 2012-10-17 06:32 - 00673280 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll 2014-06-02 20:03 - 2012-10-17 05:57 - 00929792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetsrc.dll 2014-06-02 20:03 - 2012-10-17 05:57 - 00568832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetcore.dll 2014-06-02 20:03 - 2012-10-17 05:57 - 00513024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll 2014-06-02 20:03 - 2012-10-12 08:13 - 00109568 _____ (Microsoft Corporation) C:\WINDOWS\system32\dskquota.dll 2014-06-02 20:03 - 2012-10-12 07:39 - 00082944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dskquota.dll 2014-06-02 20:03 - 2012-10-11 09:47 - 00793200 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll 2014-06-02 20:03 - 2012-10-11 09:23 - 00441576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netio.sys 2014-06-02 20:03 - 2012-10-11 07:46 - 01395712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Immersive.dll 2014-06-02 20:03 - 2012-10-11 07:46 - 00154112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Storage.Compression.dll 2014-06-02 20:03 - 2012-10-11 07:45 - 00579584 _____ (Microsoft Corporation) C:\WINDOWS\system32\StructuredQuery.dll 2014-06-02 20:03 - 2012-10-11 07:43 - 00244224 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcore6.dll 2014-06-02 20:03 - 2012-10-11 07:43 - 00190976 _____ (Microsoft Corporation) C:\WINDOWS\system32\bdesvc.dll 2014-06-02 20:03 - 2012-10-11 07:42 - 00612416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll 2014-06-02 20:03 - 2012-10-11 07:07 - 01226752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Immersive.dll 2014-06-02 20:03 - 2012-10-11 07:07 - 00414720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StructuredQuery.dll 2014-06-02 20:03 - 2012-10-11 02:45 - 00478424 _____ () C:\WINDOWS\SysWOW64\locale.nls 2014-06-02 20:03 - 2012-10-11 02:44 - 00478424 _____ () C:\WINDOWS\system32\locale.nls 2014-06-02 20:02 - 2012-10-11 09:25 - 00056552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdstor.sys 2014-06-02 20:02 - 2012-10-11 09:13 - 00033512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\battc.sys 2014-06-02 20:02 - 2012-10-11 07:46 - 00049664 _____ (Microsoft Corporation) C:\WINDOWS\system32\BdeUISrv.exe 2014-06-02 20:02 - 2012-10-11 07:45 - 00505344 _____ (Microsoft Corporation) C:\WINDOWS\system32\SpaceControl.dll 2014-06-02 20:02 - 2012-10-11 07:45 - 00055808 _____ (Microsoft Corporation) C:\WINDOWS\system32\PCPKsp.dll 2014-06-02 20:02 - 2012-10-11 07:44 - 00355328 _____ (Microsoft Corporation) C:\WINDOWS\system32\mswsock.dll 2014-06-02 20:02 - 2012-10-11 07:44 - 00264704 _____ (Microsoft Corporation) C:\WINDOWS\system32\ListSvc.dll 2014-06-02 20:02 - 2012-10-11 07:44 - 00259584 _____ (Microsoft Corporation) C:\WINDOWS\system32\input.dll 2014-06-02 20:02 - 2012-10-11 07:43 - 01280000 _____ (Microsoft Corporation) C:\WINDOWS\system32\FntCache.dll 2014-06-02 20:02 - 2012-10-11 07:43 - 00331776 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcore.dll 2014-06-02 20:02 - 2012-10-11 07:43 - 00118784 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxSip.dll 2014-06-02 20:02 - 2012-10-11 07:43 - 00081920 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcsvc.dll 2014-06-02 20:02 - 2012-10-11 07:43 - 00062976 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcsvc6.dll 2014-06-02 20:02 - 2012-10-11 07:23 - 00034816 _____ (Microsoft Corporation) C:\WINDOWS\system32\microsoft-windows-pdc.dll 2014-06-02 20:02 - 2012-10-11 07:23 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\kbdhebl3.dll 2014-06-02 20:02 - 2012-10-11 07:07 - 00116224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Storage.Compression.dll 2014-06-02 20:02 - 2012-10-11 07:07 - 00047616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PCPKsp.dll 2014-06-02 20:02 - 2012-10-11 07:06 - 00289280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mswsock.dll 2014-06-02 20:02 - 2012-10-11 07:06 - 00270336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcore.dll 2014-06-02 20:02 - 2012-10-11 07:06 - 00219648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\input.dll 2014-06-02 20:02 - 2012-10-11 07:06 - 00204800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcore6.dll 2014-06-02 20:02 - 2012-10-11 07:06 - 00060416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcsvc.dll 2014-06-02 20:02 - 2012-10-11 07:06 - 00051712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcsvc6.dll 2014-06-02 20:02 - 2012-10-11 07:05 - 00099840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxSip.dll 2014-06-02 20:02 - 2012-10-11 06:42 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kbdhebl3.dll 2014-06-02 19:56 - 2013-10-31 07:56 - 00915968 _____ (Microsoft Corporation) C:\WINDOWS\system32\MPSSVC.dll 2014-06-02 19:56 - 2013-10-31 07:56 - 00758784 _____ (Microsoft Corporation) C:\WINDOWS\system32\FirewallAPI.dll 2014-06-02 19:56 - 2013-10-31 06:01 - 00550400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FirewallAPI.dll 2014-06-02 19:56 - 2013-10-31 05:42 - 00074752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mpsdrv.sys 2014-06-02 19:56 - 2013-10-13 22:49 - 00100696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\disk.sys 2014-06-02 19:56 - 2013-08-27 07:21 - 00227840 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebClnt.dll 2014-06-02 19:56 - 2013-08-27 07:19 - 00104448 _____ (Microsoft Corporation) C:\WINDOWS\system32\davclnt.dll 2014-06-02 19:56 - 2013-08-27 00:29 - 00199168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WebClnt.dll 2014-06-02 19:56 - 2013-08-27 00:28 - 00086016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\davclnt.dll 2014-06-02 19:56 - 2012-10-11 07:46 - 00024576 _____ (Microsoft Corporation) C:\WINDOWS\system32\wfapigp.dll 2014-06-02 19:56 - 2012-10-11 07:44 - 00105984 _____ (Microsoft Corporation) C:\WINDOWS\system32\icfupgd.dll 2014-06-02 19:56 - 2012-10-11 07:07 - 00019968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wfapigp.dll 2014-06-02 19:52 - 2012-11-27 08:39 - 01122768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Taskmgr.exe 2014-06-02 19:52 - 2012-11-27 06:49 - 01027152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Taskmgr.exe 2014-06-02 19:52 - 2012-11-27 06:20 - 01217536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\storagewmi.dll 2014-06-02 19:52 - 2012-11-27 06:20 - 01123840 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstsc.exe 2014-06-02 19:52 - 2012-11-27 06:20 - 01048064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstsc.exe 2014-06-02 19:52 - 2012-11-27 06:20 - 00798208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WebcamUi.dll 2014-06-02 19:52 - 2012-11-27 06:20 - 00560128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserLanguagesCpl.dll 2014-06-02 19:52 - 2012-11-27 06:20 - 00179200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wpnapps.dll 2014-06-02 19:52 - 2012-11-27 06:20 - 00046592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vds_ps.dll 2014-06-02 19:52 - 2012-11-27 06:19 - 03245568 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll 2014-06-02 19:52 - 2012-11-27 06:19 - 01536512 _____ (Microsoft Corporation) C:\WINDOWS\system32\storagewmi.dll 2014-06-02 19:52 - 2012-11-27 06:19 - 00955904 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebcamUi.dll 2014-06-02 19:52 - 2012-11-27 06:19 - 00631808 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserLanguagesCpl.dll 2014-06-02 19:52 - 2012-11-27 06:19 - 00244736 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnapps.dll 2014-06-02 19:52 - 2012-10-12 10:08 - 00027880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdpvideominiport.sys 2014-06-02 19:52 - 2012-10-12 08:14 - 00036352 _____ (Microsoft Corporation) C:\WINDOWS\system32\rfxvmt.dll 2014-06-02 19:52 - 2012-10-12 07:50 - 00235520 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll 2014-06-02 19:52 - 2012-09-11 07:28 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\vdsldr.exe 2014-06-02 19:52 - 2012-09-11 07:27 - 00120832 _____ (Microsoft Corporation) C:\WINDOWS\system32\vds_ps.dll 2014-06-02 19:48 - 2013-08-10 07:21 - 00448512 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSync.dll 2014-06-02 19:48 - 2013-08-10 07:21 - 00128512 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncInfo.dll 2014-06-02 19:48 - 2013-08-10 05:58 - 00356352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSync.dll 2014-06-02 19:48 - 2013-08-03 08:40 - 01374208 _____ (Microsoft Corporation) C:\WINDOWS\system32\wdc.dll 2014-06-02 19:48 - 2013-08-03 08:40 - 00566784 _____ (Microsoft Corporation) C:\WINDOWS\system32\wvc.dll 2014-06-02 19:48 - 2013-08-03 08:40 - 00462336 _____ (Microsoft Corporation) C:\WINDOWS\system32\sysmon.ocx 2014-06-02 19:48 - 2013-08-03 07:14 - 00399360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sysmon.ocx 2014-06-02 19:48 - 2013-08-03 07:13 - 01245696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wdc.dll 2014-06-02 19:48 - 2013-08-03 07:13 - 00437248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wvc.dll 2014-06-02 19:48 - 2013-08-02 08:28 - 00222208 _____ (Microsoft Corporation) C:\WINDOWS\system32\shdocvw.dll 2014-06-02 19:48 - 2013-08-02 07:08 - 00199168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shdocvw.dll 2014-06-02 19:48 - 2013-07-25 01:10 - 00158208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mbsmsapi.dll 2014-06-02 19:48 - 2013-07-25 01:06 - 00225280 _____ (Microsoft Corporation) C:\WINDOWS\system32\mbsmsapi.dll 2014-06-02 19:48 - 2013-04-10 01:17 - 01125888 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll 2014-06-02 19:48 - 2013-04-10 00:29 - 00893952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll 2014-06-02 19:48 - 2012-11-20 07:24 - 01164800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Display.dll 2014-06-02 19:48 - 2012-11-20 07:17 - 01184256 _____ (Microsoft Corporation) C:\WINDOWS\system32\Display.dll 2014-06-02 19:48 - 2012-11-20 07:02 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDKURD.DLL 2014-06-02 19:48 - 2012-11-20 06:59 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDKURD.DLL 2014-06-02 19:48 - 2012-11-06 09:33 - 01566432 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll 2014-06-02 19:48 - 2012-11-06 06:48 - 01150160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll 2014-06-02 19:48 - 2012-11-06 06:20 - 00883712 _____ (Microsoft Corporation) C:\WINDOWS\HelpPane.exe 2014-06-02 19:48 - 2012-11-06 06:20 - 00516608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winhttp.dll 2014-06-02 19:48 - 2012-11-06 06:20 - 00386560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanmsm.dll 2014-06-02 19:48 - 2012-11-06 06:20 - 00375296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlansec.dll 2014-06-02 19:48 - 2012-11-06 06:20 - 00314880 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpclip.exe 2014-06-02 19:48 - 2012-11-06 06:20 - 00202240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanapi.dll 2014-06-02 19:48 - 2012-11-06 06:20 - 00093696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WcnApi.dll 2014-06-02 19:48 - 2012-11-06 06:20 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wfdprov.dll 2014-06-02 19:48 - 2012-11-06 06:19 - 08552448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\glcndFilter.dll 2014-06-02 19:48 - 2012-11-06 06:19 - 01386496 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll 2014-06-02 19:48 - 2012-11-06 06:19 - 00710656 _____ (Microsoft Corporation) C:\WINDOWS\system32\winhttp.dll 2014-06-02 19:48 - 2012-11-06 06:19 - 00470016 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanmsm.dll 2014-06-02 19:48 - 2012-11-06 06:19 - 00466944 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcncsvc.dll 2014-06-02 19:48 - 2012-11-06 06:19 - 00446464 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansec.dll 2014-06-02 19:48 - 2012-11-06 06:19 - 00273408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanapi.dll 2014-06-02 19:48 - 2012-11-06 06:19 - 00126976 _____ (Microsoft Corporation) C:\WINDOWS\system32\WcnApi.dll 2014-06-02 19:48 - 2012-11-06 06:19 - 00126464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFCaptureEngine.dll 2014-06-02 19:48 - 2012-11-06 06:19 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\system32\wfdprov.dll 2014-06-02 19:48 - 2012-11-06 06:19 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\system32\WcnEapPeerProxy.dll 2014-06-02 19:48 - 2012-11-06 06:19 - 00026624 _____ (Microsoft Corporation) C:\WINDOWS\system32\WcnEapAuthProxy.dll 2014-06-02 19:48 - 2012-11-06 06:18 - 11459584 _____ (Microsoft Corporation) C:\WINDOWS\system32\glcndFilter.dll 2014-06-02 19:48 - 2012-11-06 06:18 - 00189440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bthprops.cpl 2014-06-02 19:48 - 2012-11-06 06:18 - 00172032 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFCaptureEngine.dll 2014-06-02 19:48 - 2012-11-06 06:18 - 00102400 _____ (Microsoft Corporation) C:\WINDOWS\system32\fdWCN.dll 2014-06-02 19:48 - 2012-11-06 06:18 - 00084992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fdWCN.dll 2014-06-02 19:48 - 2012-11-06 06:17 - 00212992 _____ (Microsoft Corporation) C:\WINDOWS\system32\bthprops.cpl 2014-06-02 19:48 - 2012-11-06 06:17 - 00110080 _____ (Microsoft Corporation) C:\WINDOWS\system32\dafWCN.dll 2014-06-02 19:47 - 2012-11-06 06:00 - 00016384 _____ (Microsoft Corporation) C:\WINDOWS\system32\iscsilog.dll 2014-06-02 19:47 - 2012-11-06 05:58 - 00009728 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanhlp.dll 2014-06-02 19:47 - 2012-11-06 05:56 - 00009728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanhlp.dll 2014-06-02 19:47 - 2012-11-06 05:55 - 00090624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\amdk8.sys 2014-06-02 19:47 - 2012-11-06 05:55 - 00089088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\intelppm.sys 2014-06-02 19:47 - 2012-11-06 05:55 - 00088064 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\amdppm.sys 2014-06-02 19:47 - 2012-11-06 05:55 - 00087552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\processr.sys 2014-06-02 19:47 - 2012-11-06 05:55 - 00022528 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fxppm.sys 2014-06-02 19:42 - 2014-03-01 11:47 - 01258496 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel32.dll 2014-06-02 19:42 - 2014-03-01 11:47 - 01120768 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpedit.dll 2014-06-02 19:42 - 2014-03-01 10:07 - 01075200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gpedit.dll 2014-06-02 19:42 - 2014-03-01 08:59 - 00974848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kernel32.dll 2014-06-02 19:42 - 2014-02-27 01:18 - 00621568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys 2014-06-02 19:42 - 2014-02-27 01:18 - 00370688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys 2014-06-02 19:42 - 2014-02-27 01:18 - 00247808 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srvnet.sys 2014-06-02 19:42 - 2014-02-27 01:18 - 00215040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys 2014-06-02 19:42 - 2014-02-15 06:15 - 00078336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\IPMIDrv.sys 2014-06-02 19:42 - 2013-11-26 01:17 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidclass.sys |
04.06.2014, 08:17 | #4 |
| Windows 8.1: Trojaner - Hinweis durch Online-Banking zweite Teil: Code:
ATTFilter 2014-06-02 19:38 - 2014-06-02 19:38 - 00000117 _____ () C:\WINDOWS\system32\netcfg-34812.txt 2014-06-02 19:36 - 2014-06-02 19:36 - 00000117 _____ () C:\WINDOWS\system32\netcfg-78578.txt 2014-06-02 19:36 - 2014-06-02 19:36 - 00000117 _____ () C:\WINDOWS\system32\netcfg-35906.txt 2014-06-02 19:34 - 2014-06-02 19:34 - 00000117 _____ () C:\WINDOWS\system32\netcfg-1102546.txt 2014-06-02 19:17 - 2014-06-02 19:17 - 00000136 _____ () C:\WINDOWS\system32\netcfg-108093.txt 2014-06-02 19:17 - 2014-06-02 19:17 - 00000135 _____ () C:\WINDOWS\system32\netcfg-105359.txt 2014-06-02 19:17 - 2014-06-02 19:17 - 00000134 _____ () C:\WINDOWS\system32\netcfg-107953.txt 2014-06-02 19:17 - 2014-06-02 19:17 - 00000134 _____ () C:\WINDOWS\system32\netcfg-107734.txt 2014-06-02 19:17 - 2014-06-02 19:17 - 00000129 _____ () C:\WINDOWS\system32\netcfg-104984.txt 2014-06-02 19:17 - 2014-06-02 19:17 - 00000128 _____ () C:\WINDOWS\system32\netcfg-114890.txt 2014-06-02 19:17 - 2014-06-02 19:17 - 00000128 _____ () C:\WINDOWS\system32\netcfg-105484.txt 2014-06-02 19:17 - 2014-06-02 19:17 - 00000127 _____ () C:\WINDOWS\system32\netcfg-105718.txt 2014-06-02 19:17 - 2014-06-02 19:17 - 00000126 _____ () C:\WINDOWS\system32\netcfg-105609.txt 2014-06-02 19:16 - 2014-06-02 19:16 - 00000117 _____ () C:\WINDOWS\system32\netcfg-36906.txt 2014-06-02 19:14 - 2014-06-02 19:14 - 00000117 _____ () C:\WINDOWS\system32\netcfg-1131796.txt 2014-06-02 18:58 - 2014-06-02 18:58 - 00000136 _____ () C:\WINDOWS\system32\netcfg-140296.txt 2014-06-02 18:58 - 2014-06-02 18:58 - 00000135 _____ () C:\WINDOWS\system32\netcfg-137859.txt 2014-06-02 18:58 - 2014-06-02 18:58 - 00000134 _____ () C:\WINDOWS\system32\netcfg-140171.txt 2014-06-02 18:58 - 2014-06-02 18:58 - 00000134 _____ () C:\WINDOWS\system32\netcfg-139984.txt 2014-06-02 18:58 - 2014-06-02 18:58 - 00000129 _____ () C:\WINDOWS\system32\netcfg-137687.txt 2014-06-02 18:58 - 2014-06-02 18:58 - 00000128 _____ () C:\WINDOWS\system32\netcfg-146437.txt 2014-06-02 18:58 - 2014-06-02 18:58 - 00000128 _____ () C:\WINDOWS\system32\netcfg-137968.txt 2014-06-02 18:58 - 2014-06-02 18:58 - 00000127 _____ () C:\WINDOWS\system32\netcfg-138203.txt 2014-06-02 18:58 - 2014-06-02 18:58 - 00000126 _____ () C:\WINDOWS\system32\netcfg-138078.txt 2014-06-02 18:56 - 2014-06-02 18:56 - 00000117 _____ () C:\WINDOWS\system32\netcfg-55468.txt 2014-06-02 18:54 - 2014-06-02 18:54 - 00000117 _____ () C:\WINDOWS\system32\netcfg-2673609.txt 2014-06-02 17:10 - 2014-06-02 17:10 - 00000000 ____D () C:\WINDOWS\system32\MRT 2014-06-02 17:10 - 2014-05-04 17:12 - 93223848 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe 2014-06-02 16:46 - 2013-04-09 07:20 - 00306952 _____ (Microsoft Corporation) C:\WINDOWS\system32\kd_02_10ec.dll 2014-06-02 16:46 - 2013-04-09 07:17 - 01829408 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll 2014-06-02 16:46 - 2013-04-09 06:52 - 00816128 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchIndexer.exe 2014-06-02 16:46 - 2013-04-09 06:51 - 14267904 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmp.dll 2014-06-02 16:46 - 2013-04-09 06:51 - 03552768 _____ (Microsoft Corporation) C:\WINDOWS\system32\tquery.dll 2014-06-02 16:46 - 2013-04-09 06:50 - 02107904 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssrch.dll 2014-06-02 16:46 - 2013-04-09 06:49 - 01444864 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSAudDecMFT.dll 2014-06-02 16:46 - 2013-04-08 23:52 - 11878912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmp.dll 2014-06-02 16:46 - 2013-04-08 23:51 - 02767360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tquery.dll 2014-06-02 16:46 - 2013-04-08 23:51 - 01593344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssrch.dll 2014-06-02 16:46 - 2013-04-08 23:51 - 01113600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSAudDecMFT.dll 2014-06-02 16:45 - 2013-04-09 07:33 - 00489576 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll 2014-06-02 16:45 - 2013-04-09 07:33 - 00446792 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll 2014-06-02 16:45 - 2013-04-09 07:33 - 00253544 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe 2014-06-02 16:45 - 2013-04-09 07:20 - 00086280 _____ (Microsoft Corporation) C:\WINDOWS\system32\kdnet.dll 2014-06-02 16:45 - 2013-04-09 07:18 - 00077960 _____ (Microsoft Corporation) C:\WINDOWS\system32\kdvm.dll 2014-06-02 16:45 - 2013-04-09 06:52 - 00804352 _____ (Microsoft Corporation) C:\WINDOWS\system32\RecoveryDrive.exe 2014-06-02 16:45 - 2013-04-09 06:52 - 00373760 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchProtocolHost.exe 2014-06-02 16:45 - 2013-04-09 06:52 - 00197120 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFilterHost.exe 2014-06-02 16:45 - 2013-04-09 06:52 - 00126464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Robocopy.exe 2014-06-02 16:45 - 2013-04-09 06:51 - 00595456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.dll 2014-06-02 16:45 - 2013-04-09 06:51 - 00456704 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpncore.dll 2014-06-02 16:45 - 2013-04-09 06:51 - 00367616 _____ (Microsoft Corporation) C:\WINDOWS\system32\conhost.exe 2014-06-02 16:45 - 2013-04-09 06:51 - 00099840 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscsvc.dll 2014-06-02 16:45 - 2013-04-09 06:50 - 00745984 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssvp.dll 2014-06-02 16:45 - 2013-04-09 06:50 - 00435200 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssph.dll 2014-06-02 16:45 - 2013-04-09 06:50 - 00414720 _____ (Microsoft Corporation) C:\WINDOWS\system32\GenuineCenter.dll 2014-06-02 16:45 - 2013-04-09 06:50 - 00096256 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssprxy.dll 2014-06-02 16:45 - 2013-04-09 06:50 - 00065024 _____ (Microsoft Corporation) C:\WINDOWS\system32\msscntrs.dll 2014-06-02 16:45 - 2013-04-09 06:50 - 00013824 _____ (Microsoft Corporation) C:\WINDOWS\system32\msshooks.dll 2014-06-02 16:45 - 2013-04-09 06:49 - 00468992 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll 2014-06-02 16:45 - 2013-04-09 06:49 - 00281088 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfreadwrite.dll 2014-06-02 16:45 - 2013-04-09 06:49 - 00231936 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhengine.dll 2014-06-02 16:45 - 2013-04-09 06:49 - 00210432 _____ (Microsoft Corporation) C:\WINDOWS\system32\iuilp.dll 2014-06-02 16:45 - 2013-04-09 06:49 - 00196096 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmvdsitf.dll 2014-06-02 16:45 - 2013-04-09 06:49 - 00172544 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmredir.dll 2014-06-02 16:45 - 2013-04-09 06:49 - 00050176 _____ (Microsoft Corporation) C:\WINDOWS\system32\fmifs.dll 2014-06-02 16:45 - 2013-04-09 06:48 - 00169472 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll 2014-06-02 16:45 - 2013-04-09 04:34 - 00095744 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidbth.sys 2014-06-02 16:45 - 2013-04-09 04:33 - 00060416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndproxy.sys 2014-06-02 16:45 - 2013-04-09 04:32 - 00805376 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\PEAuth.sys 2014-06-02 16:45 - 2013-04-09 04:31 - 00083456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wanarp.sys 2014-06-02 16:45 - 2013-04-09 01:44 - 00123880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscapi.dll 2014-06-02 16:45 - 2013-04-09 01:39 - 01408896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll 2014-06-02 16:45 - 2013-04-09 01:37 - 00426024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll 2014-06-02 16:45 - 2013-04-09 01:37 - 00324368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll 2014-06-02 16:45 - 2013-04-08 23:52 - 00670208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchIndexer.exe 2014-06-02 16:45 - 2013-04-08 23:52 - 00302592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchProtocolHost.exe 2014-06-02 16:45 - 2013-04-08 23:52 - 00171008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchFilterHost.exe 2014-06-02 16:45 - 2013-04-08 23:52 - 00106496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Robocopy.exe 2014-06-02 16:45 - 2013-04-08 23:51 - 00659456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssvp.dll 2014-06-02 16:45 - 2013-04-08 23:51 - 00411136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.dll 2014-06-02 16:45 - 2013-04-08 23:51 - 00403968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssph.dll 2014-06-02 16:45 - 2013-04-08 23:51 - 00361984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll 2014-06-02 16:45 - 2013-04-08 23:51 - 00214528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfreadwrite.dll 2014-06-02 16:45 - 2013-04-08 23:51 - 00186880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssphtb.dll 2014-06-02 16:45 - 2013-04-08 23:51 - 00155648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmvdsitf.dll 2014-06-02 16:45 - 2013-04-08 23:51 - 00041984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fmifs.dll 2014-06-02 16:45 - 2013-04-08 23:51 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssprxy.dll 2014-06-02 16:45 - 2013-04-08 23:51 - 00010752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msshooks.dll 2014-06-02 16:45 - 2013-04-05 01:30 - 00503080 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll 2014-06-02 16:45 - 2013-03-16 00:05 - 00298456 _____ (Microsoft Corporation) C:\WINDOWS\system32\rsaenh.dll 2014-06-02 16:45 - 2013-03-16 00:05 - 00252928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rsaenh.dll 2014-06-02 16:45 - 2013-02-02 10:40 - 00155136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsRasterService.dll 2014-06-02 16:45 - 2013-02-02 10:23 - 00228352 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsRasterService.dll 2014-06-02 16:45 - 2013-01-10 03:40 - 00303848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys 2014-06-02 16:45 - 2012-11-06 09:33 - 00522640 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll 2014-06-02 16:45 - 2012-11-06 07:00 - 00463768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll 2014-06-02 16:45 - 2012-11-06 06:18 - 00267264 _____ (Microsoft Corporation) C:\WINDOWS\system32\EncDump.dll 2014-06-02 16:45 - 2012-10-11 07:44 - 00246272 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssphtb.dll 2014-06-02 16:45 - 2012-10-11 07:44 - 00102400 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssitlb.dll 2014-06-02 16:45 - 2012-10-11 07:06 - 00094208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssitlb.dll 2014-06-02 16:45 - 2012-10-11 07:06 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msscntrs.dll 2014-06-02 16:45 - 2012-09-20 08:33 - 00142848 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhmanagew.exe 2014-06-02 16:45 - 2012-09-20 08:33 - 00060928 _____ (Microsoft Corporation) C:\WINDOWS\system32\ndptsp.tsp 2014-06-02 16:45 - 2012-09-20 08:33 - 00047104 _____ (Microsoft Corporation) C:\WINDOWS\system32\kmddsp.tsp 2014-06-02 16:45 - 2012-09-20 08:32 - 00121856 _____ (Microsoft Corporation) C:\WINDOWS\system32\rascfg.dll 2014-06-02 16:45 - 2012-09-20 08:32 - 00075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasdiag.dll 2014-06-02 16:45 - 2012-09-20 08:32 - 00041984 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasmxs.dll 2014-06-02 16:45 - 2012-09-20 08:32 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasser.dll 2014-06-02 16:45 - 2012-09-20 08:32 - 00009728 _____ (Microsoft Corporation) C:\WINDOWS\system32\spwmp.dll 2014-06-02 16:45 - 2012-09-20 08:32 - 00006144 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdxm.ocx 2014-06-02 16:45 - 2012-09-20 08:32 - 00006144 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxmasf.dll 2014-06-02 16:45 - 2012-09-20 08:31 - 00315392 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhcfg.dll 2014-06-02 16:45 - 2012-09-20 08:31 - 00280576 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhcat.dll 2014-06-02 16:45 - 2012-09-20 08:31 - 00137728 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhshl.dll 2014-06-02 16:45 - 2012-09-20 08:31 - 00116736 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhsvc.dll 2014-06-02 16:45 - 2012-09-20 08:31 - 00080896 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhsrchapi.dll 2014-06-02 16:45 - 2012-09-20 08:31 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhevents.dll 2014-06-02 16:45 - 2012-09-20 08:31 - 00067584 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhsrchph.dll 2014-06-02 16:45 - 2012-09-20 08:31 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhlisten.dll 2014-06-02 16:45 - 2012-09-20 08:31 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhautoplay.dll 2014-06-02 16:45 - 2012-09-20 08:31 - 00053760 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhcleanup.dll 2014-06-02 16:45 - 2012-09-20 08:31 - 00038400 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhtask.dll 2014-06-02 16:45 - 2012-09-20 08:31 - 00020480 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhsvcctl.dll 2014-06-02 16:45 - 2012-09-20 08:12 - 09374208 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmploc.DLL 2014-06-02 16:45 - 2012-09-20 08:09 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndistapi.sys 2014-06-02 16:45 - 2012-09-20 07:55 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ndptsp.tsp 2014-06-02 16:45 - 2012-09-20 07:55 - 00038912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kmddsp.tsp 2014-06-02 16:45 - 2012-09-20 07:54 - 00108544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rascfg.dll 2014-06-02 16:45 - 2012-09-20 07:54 - 00059392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasdiag.dll 2014-06-02 16:45 - 2012-09-20 07:54 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasmxs.dll 2014-06-02 16:45 - 2012-09-20 07:54 - 00022016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasser.dll 2014-06-02 16:45 - 2012-09-20 07:54 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\spwmp.dll 2014-06-02 16:45 - 2012-09-20 07:54 - 00004608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdxm.ocx 2014-06-02 16:45 - 2012-09-20 07:54 - 00004608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxmasf.dll 2014-06-02 16:45 - 2012-09-20 07:32 - 09374208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmploc.DLL 2014-06-02 16:44 - 2013-05-15 04:25 - 00888320 _____ (Microsoft Corporation) C:\WINDOWS\system32\autochk.exe 2014-06-02 16:44 - 2013-05-15 04:25 - 00542208 _____ (Microsoft Corporation) C:\WINDOWS\system32\untfs.dll 2014-06-02 16:44 - 2013-05-15 04:24 - 00793088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\autochk.exe 2014-06-02 16:44 - 2013-05-15 04:24 - 00482816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\untfs.dll 2014-06-02 16:44 - 2013-05-04 09:58 - 00120736 _____ (Microsoft Corporation) C:\WINDOWS\system32\AuthHost.exe 2014-06-02 16:44 - 2013-05-04 08:59 - 01483776 _____ (Microsoft Corporation) C:\WINDOWS\system32\VSSVC.exe 2014-06-02 16:44 - 2013-05-04 08:59 - 00812544 _____ (Microsoft Corporation) C:\WINDOWS\system32\Magnify.exe 2014-06-02 16:44 - 2013-05-04 08:58 - 01332736 _____ (Microsoft Corporation) C:\WINDOWS\system32\sysmain.dll 2014-06-02 16:44 - 2013-05-04 08:58 - 00470528 _____ (Microsoft Corporation) C:\WINDOWS\system32\netprofmsvc.dll 2014-06-02 16:44 - 2013-05-04 08:58 - 00330240 _____ (Microsoft Corporation) C:\WINDOWS\system32\stobject.dll 2014-06-02 16:44 - 2013-05-04 08:58 - 00169984 _____ (Microsoft Corporation) C:\WINDOWS\system32\netplwiz.dll 2014-06-02 16:44 - 2013-05-04 08:58 - 00151552 _____ (Microsoft Corporation) C:\WINDOWS\system32\netprofm.dll 2014-06-02 16:44 - 2013-05-04 08:58 - 00093696 _____ (Microsoft Corporation) C:\WINDOWS\system32\psmsrv.dll 2014-06-02 16:44 - 2013-05-04 08:57 - 01131520 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll 2014-06-02 16:44 - 2013-05-04 08:57 - 00708096 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll 2014-06-02 16:44 - 2013-05-04 08:57 - 00560640 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll 2014-06-02 16:44 - 2013-05-04 08:57 - 00501760 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevicePairing.dll 2014-06-02 16:44 - 2013-05-04 08:57 - 00389120 _____ (Microsoft Corporation) C:\WINDOWS\system32\BCP47Langs.dll 2014-06-02 16:44 - 2013-05-04 08:57 - 00179712 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll 2014-06-02 16:44 - 2013-05-04 08:57 - 00122368 _____ (Microsoft Corporation) C:\WINDOWS\system32\biwinrt.dll 2014-06-02 16:44 - 2013-05-04 08:57 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\muifontsetup.dll 2014-06-02 16:44 - 2013-05-04 08:56 - 00419840 _____ (Microsoft Corporation) C:\WINDOWS\system32\intl.cpl 2014-06-02 16:44 - 2013-05-04 06:58 - 00758784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Magnify.exe 2014-06-02 16:44 - 2013-05-04 06:57 - 00303616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\stobject.dll 2014-06-02 16:44 - 2013-05-04 06:57 - 00151040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netplwiz.dll 2014-06-02 16:44 - 2013-05-04 06:57 - 00115712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netprofm.dll 2014-06-02 16:44 - 2013-05-04 06:57 - 00018432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\npmproxy.dll 2014-06-02 16:44 - 2013-05-04 06:57 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\muifontsetup.dll 2014-06-02 16:44 - 2013-05-04 06:56 - 00449536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DevicePairing.dll 2014-06-02 16:44 - 2013-05-04 06:56 - 00411136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll 2014-06-02 16:44 - 2013-05-04 06:56 - 00309760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BCP47Langs.dll 2014-06-02 16:44 - 2013-05-04 06:56 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\biwinrt.dll 2014-06-02 16:44 - 2013-05-04 06:55 - 00389632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\intl.cpl 2014-06-02 16:44 - 2013-05-04 06:51 - 00014848 _____ (Microsoft) C:\WINDOWS\system32\rars.rs 2014-06-02 16:44 - 2013-05-04 06:48 - 00027648 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidusb.sys 2014-06-02 16:44 - 2013-05-04 06:47 - 00427520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdbss.sys 2014-06-02 16:44 - 2013-05-04 06:10 - 00014848 _____ (Microsoft) C:\WINDOWS\SysWOW64\rars.rs 2014-06-02 16:44 - 2013-03-02 11:59 - 00411880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS 2014-06-02 16:44 - 2013-03-02 10:23 - 00893952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmde.dll 2014-06-02 16:44 - 2013-03-02 10:22 - 00357888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netcfgx.dll 2014-06-02 16:44 - 2013-03-02 04:45 - 01149952 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll 2014-06-02 16:44 - 2013-03-02 04:45 - 01101824 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpmde.dll 2014-06-02 16:44 - 2013-03-02 04:45 - 00951808 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Globalization.dll 2014-06-02 16:44 - 2013-03-02 04:45 - 00645120 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.OnlineId.dll 2014-06-02 16:44 - 2013-03-02 04:45 - 00180224 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemEventsBrokerServer.dll 2014-06-02 16:44 - 2013-03-02 04:45 - 00171008 _____ (Microsoft Corporation) C:\WINDOWS\system32\TimeBrokerServer.dll 2014-06-02 16:44 - 2013-03-02 04:45 - 00103936 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpdbusenum.dll 2014-06-02 16:44 - 2013-03-02 04:45 - 00077824 _____ (Microsoft Corporation) C:\WINDOWS\system32\taskhost.exe 2014-06-02 16:44 - 2013-03-02 04:45 - 00072192 _____ (Microsoft Corporation) C:\WINDOWS\system32\taskhostex.exe 2014-06-02 16:44 - 2013-03-02 04:44 - 00703488 _____ (Microsoft Corporation) C:\WINDOWS\system32\drvstore.dll 2014-06-02 16:44 - 2013-03-01 06:55 - 01175040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthport.sys 2014-06-02 16:44 - 2013-02-02 10:39 - 00015872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nlmproxy.dll 2014-06-02 16:44 - 2013-02-02 10:39 - 00012288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nlmsprep.dll 2014-06-02 16:43 - 2013-03-02 12:57 - 00077544 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storahci.sys 2014-06-02 16:43 - 2013-03-02 12:39 - 00495336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vhdmp.sys 2014-06-02 16:43 - 2013-03-02 10:23 - 00601088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Globalization.dll 2014-06-02 16:43 - 2013-03-02 10:23 - 00504320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Authentication.OnlineId.dll 2014-06-02 16:43 - 2013-03-02 10:23 - 00100864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncInfo.dll 2014-06-02 16:43 - 2013-03-02 10:21 - 00550912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\drvstore.dll 2014-06-02 16:43 - 2013-03-02 10:21 - 00145408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\powercfg.cpl 2014-06-02 16:43 - 2013-03-02 10:21 - 00036352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DevDispItemProvider.dll 2014-06-02 16:43 - 2013-03-02 04:45 - 00245248 _____ (Microsoft Corporation) C:\WINDOWS\system32\usbmon.dll 2014-06-02 16:43 - 2013-03-02 04:45 - 00240640 _____ (Microsoft Corporation) C:\WINDOWS\system32\fsquirt.exe 2014-06-02 16:43 - 2013-03-02 04:45 - 00071168 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSDPrintProxy.DLL 2014-06-02 16:43 - 2013-03-02 04:44 - 00455168 _____ (Microsoft Corporation) C:\WINDOWS\system32\netcfgx.dll 2014-06-02 16:43 - 2013-03-02 04:44 - 00150016 _____ (Microsoft Corporation) C:\WINDOWS\system32\discan.dll 2014-06-02 16:43 - 2013-03-02 04:44 - 00117248 _____ (Microsoft Corporation) C:\WINDOWS\system32\NdisImPlatform.dll 2014-06-02 16:43 - 2013-03-02 04:44 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevDispItemProvider.dll 2014-06-02 16:43 - 2013-03-02 04:43 - 00156160 _____ (Microsoft Corporation) C:\WINDOWS\system32\powercfg.cpl 2014-06-02 16:43 - 2013-03-02 04:15 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mouhid.sys 2014-06-02 16:43 - 2013-03-01 06:56 - 00156672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rfcomm.sys 2014-06-02 16:43 - 2013-03-01 06:56 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\monitor.sys 2014-06-02 16:43 - 2013-01-09 05:59 - 00074752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BTHUSB.SYS 2014-06-02 16:43 - 2013-01-09 05:58 - 00051712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthenum.sys 2014-06-02 16:43 - 2012-11-06 06:20 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaext.dll 2014-06-02 16:43 - 2012-11-06 06:00 - 00099328 _____ (Microsoft Corporation) C:\WINDOWS\system32\wushareduxresources.dll 2014-06-02 16:42 - 2012-08-31 02:52 - 00017888 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcr100_clr0400.dll 2014-06-02 16:41 - 2012-08-31 02:53 - 00017888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcr100_clr0400.dll 2014-06-02 16:40 - 2013-01-10 03:53 - 00028904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msgpiowin32.sys 2014-06-02 16:40 - 2013-01-10 03:29 - 00091880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\partmgr.sys 2014-06-02 16:40 - 2013-01-10 01:26 - 01752064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\setupapi.dll 2014-06-02 16:40 - 2013-01-10 01:26 - 01611776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mmc.exe 2014-06-02 16:40 - 2013-01-10 01:26 - 00436736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MP4SDECD.DLL 2014-06-02 16:40 - 2013-01-10 01:26 - 00261120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll 2014-06-02 16:40 - 2013-01-10 01:26 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wiaacmgr.exe 2014-06-02 16:40 - 2013-01-10 01:23 - 02094592 _____ (Microsoft Corporation) C:\WINDOWS\system32\mmc.exe 2014-06-02 16:40 - 2013-01-10 01:23 - 01964544 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidsvc.dll 2014-06-02 16:40 - 2013-01-10 01:23 - 01886208 _____ (Microsoft Corporation) C:\WINDOWS\system32\setupapi.dll 2014-06-02 16:40 - 2013-01-10 01:23 - 00406016 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll 2014-06-02 16:40 - 2013-01-10 01:23 - 00256000 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSDMon.dll 2014-06-02 16:40 - 2013-01-10 01:23 - 00095232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wiaacmgr.exe 2014-06-02 16:40 - 2013-01-10 01:22 - 00894464 _____ (Microsoft Corporation) C:\WINDOWS\system32\iphlpsvc.dll 2014-06-02 16:40 - 2013-01-10 01:22 - 00666112 _____ (Microsoft Corporation) C:\WINDOWS\system32\MP4SDECD.DLL 2014-06-02 16:40 - 2013-01-10 01:22 - 00159232 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetpp.dll 2014-06-02 16:40 - 2012-11-02 07:19 - 00171520 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncbservice.dll 2014-06-02 16:40 - 2012-11-02 07:18 - 00107520 _____ (Microsoft Corporation) C:\WINDOWS\system32\httpprxm.dll 2014-06-02 16:40 - 2012-11-02 07:18 - 00062464 _____ (Microsoft Corporation) C:\WINDOWS\system32\adhsvc.dll 2014-06-02 16:40 - 2012-11-02 07:18 - 00022528 _____ (Microsoft Corporation) C:\WINDOWS\system32\adhapi.dll 2014-06-02 16:40 - 2012-11-02 07:18 - 00017920 _____ (Microsoft Corporation) C:\WINDOWS\system32\httpprxp.dll 2014-06-02 16:40 - 2012-11-02 07:18 - 00015872 _____ (Microsoft Corporation) C:\WINDOWS\system32\keepaliveprovider.dll 2014-06-02 16:39 - 2014-03-07 02:48 - 01766400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll 2014-06-02 16:39 - 2014-03-07 02:48 - 01140736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll 2014-06-02 16:39 - 2014-03-07 02:47 - 13760512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll 2014-06-02 16:39 - 2014-03-07 02:47 - 02877952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll 2014-06-02 16:39 - 2014-03-07 02:47 - 02049536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll 2014-06-02 16:39 - 2014-03-07 02:47 - 00690688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll 2014-06-02 16:39 - 2014-03-07 02:47 - 00493056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll 2014-06-02 16:39 - 2014-03-07 02:47 - 00163840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrating.dll 2014-06-02 16:39 - 2014-03-07 02:08 - 15404544 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll 2014-06-02 16:39 - 2014-03-07 02:08 - 03959808 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll 2014-06-02 16:39 - 2014-03-07 02:08 - 02648576 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll 2014-06-02 16:39 - 2014-03-07 02:08 - 02240000 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll 2014-06-02 16:39 - 2014-03-07 02:08 - 01365504 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll 2014-06-02 16:39 - 2014-03-07 02:08 - 00915968 _____ (Microsoft Corporation) C:\WINDOWS\system32\uxtheme.dll 2014-06-02 16:39 - 2014-03-07 02:08 - 00855552 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll 2014-06-02 16:39 - 2014-03-07 02:08 - 00603136 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll 2014-06-02 16:39 - 2014-03-07 02:08 - 00051712 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe 2014-06-02 16:39 - 2013-07-06 00:02 - 00099328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbcir.sys 2014-06-02 16:39 - 2013-07-06 00:01 - 00210560 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbvideo.sys 2014-06-02 16:39 - 2013-06-22 07:45 - 00785624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Wdf01000.sys 2014-06-02 16:39 - 2013-06-22 07:45 - 00054488 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdfLdr.sys 2014-06-02 16:39 - 2013-05-24 01:02 - 01314816 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcrt4.dll 2014-06-02 16:39 - 2013-05-24 00:25 - 00694272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpcrt4.dll 2014-06-02 16:39 - 2013-05-16 00:37 - 00044032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UXInit.dll 2014-06-02 16:39 - 2013-05-16 00:35 - 00053760 _____ (Microsoft Corporation) C:\WINDOWS\system32\UXInit.dll 2014-06-02 16:39 - 2013-02-21 12:29 - 00109056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesysprep.dll 2014-06-02 16:39 - 2013-02-21 12:29 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesetup.dll 2014-06-02 16:39 - 2013-02-21 12:29 - 00039424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll 2014-06-02 16:39 - 2013-02-21 12:29 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iernonce.dll 2014-06-02 16:39 - 2013-02-21 12:14 - 00136704 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesysprep.dll 2014-06-02 16:39 - 2013-02-21 12:14 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll 2014-06-02 16:39 - 2013-02-19 11:53 - 00534528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\uxtheme.dll 2014-06-02 16:39 - 2012-11-08 06:20 - 00067072 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll 2014-06-02 16:39 - 2012-11-08 06:20 - 00039936 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll 2014-06-02 16:38 - 2013-10-19 07:45 - 00062976 _____ (Microsoft Corporation) C:\WINDOWS\system32\imagehlp.dll 2014-06-02 16:38 - 2013-10-19 06:04 - 00059392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\imagehlp.dll 2014-06-02 16:38 - 2013-07-06 02:15 - 00652288 _____ (Microsoft Corporation) C:\WINDOWS\system32\comctl32.dll 2014-06-02 16:38 - 2013-07-04 04:13 - 00541696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comctl32.dll 2014-06-02 16:38 - 2013-07-02 00:14 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbprint.sys 2014-06-02 16:38 - 2013-06-29 05:08 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidparse.sys 2014-06-02 16:37 - 2014-06-02 16:37 - 00000000 _____ () C:\Recovery.txt 2014-06-02 16:37 - 2014-03-28 10:23 - 19759104 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll 2014-06-02 16:37 - 2014-03-28 08:18 - 17562112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll 2014-06-02 16:37 - 2014-02-08 06:34 - 04036608 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys 2014-06-02 16:37 - 2013-12-09 02:45 - 00523776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll 2014-06-02 16:37 - 2013-12-09 01:59 - 00600064 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll 2014-06-02 16:37 - 2013-10-03 01:25 - 01300992 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll 2014-06-02 16:37 - 2013-10-02 00:22 - 01022976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll 2014-06-02 16:37 - 2013-08-16 07:41 - 00058200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dam.sys 2014-06-02 16:37 - 2013-08-16 07:39 - 02371728 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSService.dll 2014-06-02 16:37 - 2013-08-16 07:22 - 04917760 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppsvc.exe 2014-06-02 16:37 - 2013-08-16 07:21 - 01164288 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll 2014-06-02 16:37 - 2013-08-16 07:21 - 00368640 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppwinob.dll 2014-06-02 16:37 - 2013-08-16 07:21 - 00204800 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSClient.dll 2014-06-02 16:37 - 2013-08-16 07:21 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll 2014-06-02 16:37 - 2013-08-16 07:21 - 00183808 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSSync.dll 2014-06-02 16:37 - 2013-08-16 07:21 - 00120320 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppc.dll 2014-06-02 16:37 - 2013-08-16 07:21 - 00081408 _____ (Microsoft Corporation) C:\WINDOWS\system32\setupcln.dll 2014-06-02 16:37 - 2013-08-16 07:21 - 00049664 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups.dll 2014-06-02 16:37 - 2013-08-16 07:21 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll 2014-06-02 16:37 - 2013-08-16 07:20 - 00105984 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinSetupUI.dll 2014-06-02 16:37 - 2013-08-16 00:43 - 00167424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSClient.dll 2014-06-02 16:37 - 2013-08-16 00:43 - 00159232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSSync.dll 2014-06-02 16:37 - 2013-08-16 00:43 - 00083968 _____ () C:\WINDOWS\SysWOW64\OEMLicense.dll 2014-06-02 16:37 - 2013-08-16 00:43 - 00020992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wups.dll 2014-06-02 16:37 - 2013-08-16 00:42 - 00091648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sppc.dll 2014-06-02 16:37 - 2013-08-16 00:42 - 00076800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\setupcln.dll 2014-06-02 16:37 - 2013-04-24 01:13 - 01013248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certutil.exe 2014-06-02 16:37 - 2013-04-24 01:12 - 00109056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptnet.dll 2014-06-02 16:37 - 2013-04-24 00:56 - 01255936 _____ (Microsoft Corporation) C:\WINDOWS\system32\certutil.exe 2014-06-02 16:37 - 2013-04-24 00:55 - 00141312 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptnet.dll 2014-06-02 16:37 - 2012-11-26 06:21 - 00071168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncryptsslp.dll 2014-06-02 16:37 - 2012-11-26 06:20 - 00086016 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncryptsslp.dll 2014-06-02 16:37 - 2012-10-10 09:04 - 00094208 _____ (Microsoft Corporation) C:\WINDOWS\system32\synceng.dll 2014-06-02 16:37 - 2012-10-10 08:31 - 00072192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\synceng.dll 2014-06-02 16:37 - 2012-09-20 08:33 - 00110592 _____ () C:\WINDOWS\system32\OEMLicense.dll 2014-06-02 16:36 - 2014-03-28 21:19 - 00035856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdBoot.sys 2014-06-02 16:36 - 2014-03-24 00:11 - 00269592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdFilter.sys 2014-06-02 16:36 - 2013-12-05 01:43 - 01845248 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3.dll 2014-06-02 16:36 - 2013-12-05 01:37 - 01419264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3.dll 2014-06-02 16:36 - 2013-10-10 13:53 - 00096600 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wfplwfs.sys 2014-06-02 16:36 - 2013-10-10 11:21 - 01160192 _____ (Microsoft Corporation) C:\WINDOWS\system32\IKEEXT.DLL 2014-06-02 16:36 - 2013-10-10 11:20 - 00723968 _____ (Microsoft Corporation) C:\WINDOWS\system32\BFE.DLL 2014-06-02 16:36 - 2013-10-02 01:37 - 01569280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\crypt32.dll 2014-06-02 16:36 - 2013-10-02 01:26 - 01890816 _____ (Microsoft Corporation) C:\WINDOWS\system32\crypt32.dll 2014-06-02 16:36 - 2013-09-04 05:11 - 00576512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\afd.sys 2014-06-02 16:36 - 2013-06-10 21:16 - 00888832 _____ (Microsoft Corporation) C:\WINDOWS\system32\nshwfp.dll 2014-06-02 16:36 - 2013-06-10 21:15 - 00381952 _____ (Microsoft Corporation) C:\WINDOWS\system32\FWPUCLNT.DLL 2014-06-02 16:36 - 2013-06-10 21:10 - 00702464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nshwfp.dll 2014-06-02 16:36 - 2013-06-10 21:10 - 00245248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FWPUCLNT.DLL 2014-06-02 16:36 - 2012-10-06 06:53 - 02893824 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll 2014-06-02 16:36 - 2012-10-06 06:15 - 02400256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2vdec.dll 2014-06-02 16:35 - 2014-01-13 01:30 - 02238976 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10warp.dll 2014-06-02 16:35 - 2014-01-13 01:30 - 02032640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10warp.dll 2014-06-02 16:35 - 2013-11-20 02:15 - 03842560 _____ (Microsoft Corporation) C:\WINDOWS\system32\d2d1.dll 2014-06-02 16:35 - 2013-11-20 01:57 - 03288576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll 2014-06-02 16:35 - 2013-07-20 00:13 - 00124112 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll 2014-06-02 16:35 - 2013-07-20 00:13 - 00102608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll 2014-06-02 16:35 - 2013-07-02 03:41 - 00337752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBXHCI.SYS 2014-06-02 16:35 - 2013-07-02 03:41 - 00213336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\UCX01000.SYS 2014-06-02 16:35 - 2013-07-01 03:42 - 00623448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbhub.sys 2014-06-02 16:35 - 2013-07-01 03:42 - 00498008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbport.sys 2014-06-02 16:35 - 2013-07-01 03:42 - 00079192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbehci.sys 2014-06-02 16:35 - 2013-07-01 03:42 - 00021848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbd.sys 2014-06-02 16:35 - 2013-06-29 05:07 - 00032256 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbuhci.sys 2014-06-02 16:35 - 2013-06-29 05:06 - 00120832 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbccgp.sys 2014-06-02 16:35 - 2013-05-04 08:59 - 02842112 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMVDECOD.DLL 2014-06-02 16:35 - 2013-05-04 06:57 - 02620928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMVDECOD.DLL 2014-06-02 16:35 - 2013-04-12 00:30 - 01421312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWrite.dll 2014-06-02 16:35 - 2013-04-12 00:22 - 01838080 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWrite.dll 2014-06-02 16:35 - 2012-10-24 05:25 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcalua.exe 2014-06-02 16:35 - 2012-10-24 05:24 - 00405504 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcasvc.dll 2014-06-02 16:35 - 2012-10-24 05:24 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcadm.dll 2014-06-02 16:35 - 2012-10-24 05:05 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcaevts.dll 2014-06-02 16:34 - 2014-05-06 07:14 - 19274752 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll 2014-06-02 16:34 - 2014-05-06 07:14 - 00097280 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll 2014-06-02 16:34 - 2014-05-06 05:48 - 14367232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll 2014-06-02 16:34 - 2014-05-06 05:48 - 00080384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll 2014-06-02 16:34 - 2014-05-06 05:37 - 02706432 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb 2014-06-02 16:34 - 2014-05-06 05:26 - 02706432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb 2014-06-02 16:34 - 2013-07-13 08:18 - 00337408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wintrust.dll 2014-06-02 16:34 - 2013-07-13 08:16 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptsvc.dll 2014-06-02 16:34 - 2013-07-13 08:15 - 00124416 _____ (Microsoft Corporation) C:\WINDOWS\system32\apprepapi.dll 2014-06-02 16:34 - 2013-07-13 08:15 - 00098304 _____ (Microsoft Corporation) C:\WINDOWS\system32\apprepsync.dll 2014-06-02 16:34 - 2013-07-13 06:24 - 00261120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wintrust.dll 2014-06-02 16:34 - 2013-07-13 06:23 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\apprepapi.dll 2014-06-02 16:34 - 2013-07-13 06:23 - 00074240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\apprepsync.dll 2014-06-02 16:34 - 2013-05-27 01:17 - 00035328 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll 2014-06-02 16:34 - 2013-05-27 00:59 - 00046080 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll 2014-06-02 16:34 - 2013-05-25 05:15 - 00362496 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll 2014-06-02 16:34 - 2013-05-25 04:32 - 00300032 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll 2014-06-02 16:34 - 2013-04-27 07:20 - 00733184 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll 2014-06-02 16:34 - 2013-02-12 02:17 - 00020992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usb8023.sys 2014-06-02 16:34 - 2013-02-02 10:40 - 00410624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlroamextension.dll 2014-06-02 16:34 - 2013-02-02 10:40 - 00370688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWanAPI.dll 2014-06-02 16:34 - 2013-02-02 10:40 - 00197632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.Connectivity.dll 2014-06-02 16:34 - 2013-02-02 10:40 - 00080896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tasklist.exe 2014-06-02 16:34 - 2013-02-02 10:40 - 00079360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\taskkill.exe 2014-06-02 16:34 - 2013-02-02 10:39 - 00055296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nlaapi.dll 2014-06-02 16:34 - 2013-02-02 10:38 - 00567808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\duser.dll 2014-06-02 16:34 - 2013-02-02 10:24 - 00107520 _____ (Microsoft Corporation) C:\WINDOWS\system32\taskkill.exe 2014-06-02 16:34 - 2013-02-02 10:24 - 00102400 _____ (Microsoft Corporation) C:\WINDOWS\system32\tasklist.exe 2014-06-02 16:34 - 2013-02-02 10:23 - 00611840 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpd_ci.dll 2014-06-02 16:34 - 2013-02-02 10:23 - 00543232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlroamextension.dll 2014-06-02 16:34 - 2013-02-02 10:23 - 00475136 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWanAPI.dll 2014-06-02 16:34 - 2013-02-02 10:23 - 00293376 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.Connectivity.dll 2014-06-02 16:34 - 2013-02-02 10:23 - 00087552 _____ (Microsoft Corporation) C:\WINDOWS\system32\wersvc.dll 2014-06-02 16:34 - 2013-02-02 10:21 - 00385024 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncsi.dll 2014-06-02 16:34 - 2013-02-02 10:20 - 00729600 _____ (Microsoft Corporation) C:\WINDOWS\system32\duser.dll 2014-06-02 16:34 - 2013-02-02 10:20 - 00260096 _____ (Microsoft Corporation) C:\WINDOWS\system32\hotspotauth.dll 2014-06-02 16:34 - 2013-02-02 09:25 - 00297984 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ks.sys 2014-06-02 16:34 - 2013-02-02 07:41 - 01437184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll 2014-06-02 16:34 - 2013-02-02 07:31 - 01690624 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll 2014-06-02 16:34 - 2012-11-27 05:57 - 00018432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BtaMPM.sys 2014-06-02 16:34 - 2012-11-27 05:55 - 00029952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BthhfHid.sys 2014-06-02 16:34 - 2012-11-20 06:56 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbohci.sys 2014-06-02 16:34 - 2012-11-20 06:54 - 00039936 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidi2c.sys 2014-06-02 16:34 - 2012-11-08 06:24 - 00075776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontsub.dll 2014-06-02 16:34 - 2012-11-08 06:24 - 00010752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dciman32.dll 2014-06-02 16:34 - 2012-11-08 06:20 - 00096256 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontsub.dll 2014-06-02 16:34 - 2012-11-08 06:20 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\dciman32.dll 2014-06-02 16:34 - 2012-11-08 06:02 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpk.dll 2014-06-02 16:34 - 2012-11-08 06:01 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\lpk.dll 2014-06-02 16:34 - 2012-11-03 07:26 - 00034816 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnsvr.exe 2014-06-02 16:34 - 2012-11-03 07:26 - 00032256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnsvr.exe 2014-06-02 16:34 - 2012-11-03 07:24 - 00463872 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnet.dll 2014-06-02 16:34 - 2012-11-03 07:24 - 00375808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnet.dll 2014-06-02 16:34 - 2012-11-03 07:24 - 00067584 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnathlp.dll 2014-06-02 16:34 - 2012-11-03 07:24 - 00058880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnathlp.dll 2014-06-02 16:34 - 2012-11-03 07:24 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnhupnp.dll 2014-06-02 16:34 - 2012-11-03 07:24 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnhpast.dll 2014-06-02 16:34 - 2012-11-03 07:24 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnhupnp.dll 2014-06-02 16:34 - 2012-11-03 07:24 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnhpast.dll 2014-06-02 16:34 - 2012-11-03 07:04 - 00004096 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnlobby.dll 2014-06-02 16:34 - 2012-11-03 07:04 - 00003584 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnaddr.dll 2014-06-02 16:34 - 2012-11-03 07:00 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnlobby.dll 2014-06-02 16:34 - 2012-11-03 07:00 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnaddr.dll 2014-06-02 16:34 - 2012-09-20 08:32 - 00356352 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlasvc.dll 2014-06-02 16:34 - 2012-09-20 08:32 - 00072192 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlaapi.dll 2014-06-02 16:33 - 2014-04-12 11:27 - 00172888 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys 2014-06-02 16:33 - 2014-04-12 11:10 - 00578048 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe 2014-06-02 16:33 - 2014-04-12 11:09 - 01043968 _____ (Microsoft Corporation) C:\WINDOWS\system32\usercpl.dll 2014-06-02 16:33 - 2014-04-12 11:09 - 00588288 _____ (Microsoft Corporation) C:\WINDOWS\system32\SHCore.dll 2014-06-02 16:33 - 2014-04-12 11:09 - 00208896 _____ (Microsoft Corporation) C:\WINDOWS\system32\wdigest.dll 2014-06-02 16:33 - 2014-04-12 11:09 - 00094720 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSpkg.dll 2014-06-02 16:33 - 2014-04-12 11:08 - 01281536 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll 2014-06-02 16:33 - 2014-04-12 11:08 - 00827904 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll 2014-06-02 16:33 - 2014-04-12 11:08 - 00439808 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsm.dll 2014-06-02 16:33 - 2014-04-12 11:08 - 00318464 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll 2014-06-02 16:33 - 2014-04-12 11:07 - 00020480 _____ (Microsoft Corporation) C:\WINDOWS\system32\credssp.dll 2014-06-02 16:33 - 2014-04-12 09:23 - 00961536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\usercpl.dll 2014-06-02 16:33 - 2014-04-12 09:23 - 00452608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SHCore.dll 2014-06-02 16:33 - 2014-04-12 09:23 - 00273920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll 2014-06-02 16:33 - 2014-04-12 09:23 - 00178688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wdigest.dll 2014-06-02 16:33 - 2014-04-12 09:23 - 00076800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TSpkg.dll 2014-06-02 16:33 - 2014-04-12 09:22 - 00666624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll 2014-06-02 16:33 - 2014-04-12 09:22 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\credssp.dll 2014-06-02 16:33 - 2014-04-12 08:58 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\system32\workerdd.dll 2014-06-02 16:33 - 2014-03-28 10:23 - 01287168 _____ (Microsoft Corporation) C:\WINDOWS\system32\schedsvc.dll 2014-06-02 16:33 - 2014-03-11 05:32 - 06987096 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe 2014-06-02 16:33 - 2014-03-11 05:25 - 00100184 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecdd.sys 2014-06-02 16:33 - 2014-03-11 02:41 - 00559104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\objsel.dll 2014-06-02 16:33 - 2014-03-11 02:41 - 00323072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll 2014-06-02 16:33 - 2014-03-11 02:41 - 00038400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dimsroam.dll 2014-06-02 16:33 - 2014-03-11 02:39 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsass.exe 2014-06-02 16:33 - 2014-03-11 02:38 - 00982016 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll 2014-06-02 16:33 - 2014-03-11 02:38 - 00684032 _____ (Microsoft Corporation) C:\WINDOWS\system32\objsel.dll 2014-06-02 16:33 - 2014-03-11 02:38 - 00419328 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll 2014-06-02 16:33 - 2014-03-11 02:38 - 00179712 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpapisrv.dll 2014-06-02 16:33 - 2014-03-11 02:38 - 00164864 _____ (Microsoft Corporation) C:\WINDOWS\system32\sspicli.dll 2014-06-02 16:33 - 2014-03-11 02:38 - 00045056 _____ (Microsoft Corporation) C:\WINDOWS\system32\dimsroam.dll 2014-06-02 16:33 - 2014-03-11 02:38 - 00027648 _____ (Microsoft Corporation) C:\WINDOWS\system32\sspisrv.dll 2014-06-02 16:33 - 2014-03-10 05:05 - 00668160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll 2014-06-02 16:33 - 2014-03-10 03:27 - 00099840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sspicli.dll 2014-06-02 16:33 - 2014-03-04 01:07 - 00570216 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys 2014-06-02 16:33 - 2013-12-05 01:43 - 00583680 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdrm.dll 2014-06-02 16:33 - 2013-12-05 01:37 - 00451072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdrm.dll 2014-06-02 16:33 - 2013-11-23 08:43 - 00420864 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMPhoto.dll 2014-06-02 16:33 - 2013-11-23 07:05 - 00368640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMPhoto.dll 2014-06-02 16:33 - 2013-10-10 11:32 - 00115712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cscript.exe 2014-06-02 16:33 - 2013-10-10 11:30 - 00162304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scrobj.dll 2014-06-02 16:33 - 2013-10-10 11:30 - 00156160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scrrun.dll 2014-06-02 16:33 - 2013-10-10 11:24 - 00143872 _____ (Microsoft Corporation) C:\WINDOWS\system32\wshom.ocx 2014-06-02 16:33 - 2013-10-10 11:23 - 00146944 _____ (Microsoft Corporation) C:\WINDOWS\system32\cscript.exe 2014-06-02 16:33 - 2013-10-10 11:22 - 00222720 _____ (Microsoft Corporation) C:\WINDOWS\system32\scrobj.dll 2014-06-02 16:33 - 2013-10-10 11:22 - 00194048 _____ (Microsoft Corporation) C:\WINDOWS\system32\scrrun.dll 2014-06-02 16:33 - 2013-08-23 09:22 - 02062848 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll 2014-06-02 16:33 - 2013-08-23 03:44 - 01711616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll 2014-06-02 16:33 - 2013-03-22 05:49 - 02382336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\esent.dll 2014-06-02 16:33 - 2013-03-22 00:47 - 02851840 _____ (Microsoft Corporation) C:\WINDOWS\system32\esent.dll 2014-06-02 16:33 - 2013-03-15 02:17 - 00861184 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\http.sys 2014-06-02 16:33 - 2013-03-06 09:10 - 00112872 _____ (Microsoft Corporation) C:\WINDOWS\system32\consent.exe 2014-06-02 16:33 - 2013-03-06 08:29 - 00070144 _____ (Microsoft Corporation) C:\WINDOWS\system32\appinfo.dll 2014-06-02 16:33 - 2013-03-02 10:23 - 00375808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReAgent.dll 2014-06-02 16:33 - 2013-03-02 04:44 - 01011200 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll 2014-06-02 16:33 - 2012-12-15 06:55 - 00443392 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgent.dll 2014-06-02 16:33 - 2012-11-03 07:26 - 00132096 _____ (Microsoft Corporation) C:\WINDOWS\system32\sysreset.exe 2014-06-02 16:33 - 2012-11-03 07:25 - 00945152 _____ (Microsoft Corporation) C:\WINDOWS\system32\resetengmig.dll 2014-06-02 16:33 - 2012-10-24 05:25 - 00026624 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgentc.exe 2014-06-02 16:33 - 2012-10-24 04:48 - 00024064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReAgentc.exe 2014-06-02 16:23 - 2013-08-07 07:15 - 00144896 _____ (Microsoft Corporation) C:\WINDOWS\system32\tssdisai.dll 2014-06-02 16:22 - 2012-11-10 06:23 - 00148480 _____ (Microsoft Corporation) C:\WINDOWS\system32\poqexec.exe 2014-06-02 16:22 - 2012-11-10 06:23 - 00132608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\poqexec.exe 2014-06-02 16:22 - 2012-11-10 06:22 - 00126976 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDWebAI.dll 2014-06-02 16:22 - 2012-11-10 06:22 - 00122880 _____ (Microsoft Corporation) C:\WINDOWS\system32\VmHostAI.dll 2014-06-02 16:22 - 2012-11-10 06:20 - 00135680 _____ (Microsoft Corporation) C:\WINDOWS\system32\appserverai.dll 2014-06-02 16:20 - 2012-11-01 06:41 - 01802240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6.dll 2014-06-02 16:20 - 2012-11-01 06:40 - 02361344 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll 2014-06-02 16:20 - 2012-11-01 06:21 - 00002048 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6r.dll 2014-06-02 16:20 - 2012-11-01 06:21 - 00002048 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3r.dll 2014-06-02 16:20 - 2012-11-01 06:20 - 00002048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6r.dll 2014-06-02 16:20 - 2012-11-01 06:20 - 00002048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3r.dll 2014-06-02 16:16 - 2014-02-06 01:41 - 00595968 _____ (Microsoft Corporation) C:\WINDOWS\system32\qedit.dll 2014-06-02 16:16 - 2014-02-06 01:37 - 00496640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qedit.dll 2014-06-02 16:14 - 2013-09-28 05:35 - 00288768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\portcls.sys 2014-06-02 16:14 - 2012-10-11 09:02 - 01636672 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMALFXGFXDSP.dll 2014-06-02 16:14 - 2012-10-11 07:45 - 00370176 _____ (Microsoft Corporation) C:\WINDOWS\system32\SysFxUI.dll 2014-06-02 16:14 - 2012-10-11 07:19 - 00005632 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\drmkaud.sys 2014-06-02 16:14 - 2012-10-11 07:18 - 00111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\drmk.sys 2014-06-02 16:13 - 2013-04-03 01:37 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptdlg.dll 2014-06-02 16:13 - 2013-04-03 01:12 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptdlg.dll 2014-06-02 09:04 - 2013-10-02 01:37 - 02035712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll 2014-06-02 09:04 - 2013-10-02 01:26 - 02304512 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll 2014-06-02 09:04 - 2013-08-02 08:28 - 10116608 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll 2014-06-02 09:04 - 2013-08-02 07:08 - 08858112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll 2014-06-02 09:04 - 2013-03-02 12:39 - 00069864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pdc.sys 2014-06-02 09:04 - 2013-03-02 04:43 - 02146304 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll 2014-06-02 09:04 - 2013-02-07 03:33 - 00754176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll 2014-06-02 09:03 - 2014-01-31 02:48 - 01339392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WindowsCodecs.dll 2014-06-02 09:03 - 2014-01-31 02:06 - 01628160 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecs.dll 2014-06-02 09:02 - 2014-06-02 22:53 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy 2014-06-02 09:02 - 2014-06-02 09:05 - 00000000 ____D () C:\Program Files (x86)\Spybot - Search & Destroy 2 2014-06-02 09:02 - 2014-06-02 09:02 - 00001423 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot-S&D Start Center.lnk 2014-06-02 09:02 - 2014-06-02 09:02 - 00001411 _____ () C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk 2014-06-02 09:02 - 2014-06-02 09:02 - 00000000 ____D () C:\WINDOWS\System32\Tasks\Safer-Networking 2014-06-02 09:02 - 2014-06-02 09:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2 2014-06-02 09:02 - 2013-09-20 10:49 - 00021040 _____ (Safer Networking Limited) C:\WINDOWS\system32\sdnclean64.exe 2014-06-02 09:00 - 2014-06-02 09:01 - 46392680 _____ (Safer-Networking Ltd. ) C:\Users\Verena\Downloads\spybot-2.3.exe 2014-06-02 08:59 - 2014-06-02 08:59 - 00000000 ____D () C:\Users\Verena\AppData\Roaming\Avira 2014-06-02 08:55 - 2014-05-09 11:16 - 00130584 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avipbb.sys 2014-06-02 08:55 - 2014-05-09 11:16 - 00112080 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avgntflt.sys 2014-06-02 08:55 - 2014-05-09 11:16 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avkmgr.sys 2014-06-02 08:55 - 2013-11-01 07:38 - 00312320 _____ (Microsoft Corporation) C:\WINDOWS\system32\msieftp.dll 2014-06-02 08:55 - 2013-11-01 05:49 - 00273408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msieftp.dll 2014-06-02 08:55 - 2012-12-13 06:00 - 00002048 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzres.dll 2014-06-02 08:55 - 2012-12-13 05:59 - 00002048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tzres.dll 2014-06-02 08:54 - 2014-06-03 11:22 - 00003598 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2678595623-4148133582-4009595467-1001 2014-06-02 08:52 - 2014-06-03 10:15 - 00000000 ____D () C:\Program Files (x86)\Intel 2014-06-02 08:52 - 2014-06-02 08:55 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira 2014-06-02 08:52 - 2014-06-02 08:55 - 00000000 ____D () C:\ProgramData\Avira 2014-06-02 08:52 - 2014-06-02 08:55 - 00000000 ____D () C:\Program Files (x86)\Avira 2014-06-02 08:52 - 2014-06-02 08:52 - 00001155 _____ () C:\Users\Public\Desktop\Avira.lnk 2014-06-02 08:52 - 2014-06-02 08:52 - 00000000 ____D () C:\ProgramData\Package Cache 2014-06-02 08:52 - 2014-06-02 08:52 - 00000000 ____D () C:\Program Files\Intel 2014-06-02 08:52 - 2014-06-02 08:52 - 00000000 ____D () C:\Intel 2014-06-02 08:52 - 2014-01-25 02:23 - 00064000 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.DLL 2014-06-02 08:52 - 2014-01-25 02:23 - 00060416 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.DLL 2014-06-02 08:51 - 2014-06-02 08:51 - 04536336 _____ (Avira Operations GmbH & Co. KG) C:\Users\Verena\Downloads\avira_de_av___ws.exe 2014-06-02 08:50 - 2014-06-02 08:50 - 00000000 ____D () C:\Users\Verena\AppData\Roaming\Macromedia 2014-06-02 08:46 - 2014-06-03 09:57 - 00000000 ____D () C:\Users\Verena\AppData\Local\VirtualStore 2014-06-02 08:46 - 2014-06-03 09:31 - 00000000 ___RD () C:\Users\Verena\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2014-06-02 08:46 - 2014-06-03 09:31 - 00000000 ___RD () C:\Users\Verena\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools 2014-06-02 08:46 - 2014-06-02 08:46 - 00001454 _____ () C:\Users\Verena\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2014-06-02 08:46 - 2014-06-02 08:46 - 00000000 ____D () C:\WINDOWS\System32\Tasks\WPD 2014-06-02 08:46 - 2014-06-02 08:46 - 00000000 ____D () C:\Users\Verena\AppData\Roaming\Adobe 2014-06-02 08:45 - 2014-06-03 11:27 - 00000000 ____D () C:\Users\Verena\AppData\Local\Temp 2014-06-02 08:45 - 2014-06-03 11:24 - 00000000 ____D () C:\Users\Verena 2014-06-02 08:45 - 2014-06-03 09:30 - 00000000 ____D () C:\Users\Verena\AppData\Local\Packages 2014-06-02 08:45 - 2014-06-02 08:45 - 00000020 ___SH () C:\Users\Verena\ntuser.ini 2014-06-02 08:45 - 2014-06-02 08:45 - 00000000 _SHDL () C:\Users\Verena\Vorlagen 2014-06-02 08:45 - 2014-06-02 08:45 - 00000000 _SHDL () C:\Users\Verena\Startmenü 2014-06-02 08:45 - 2014-06-02 08:45 - 00000000 _SHDL () C:\Users\Verena\Netzwerkumgebung 2014-06-02 08:45 - 2014-06-02 08:45 - 00000000 _SHDL () C:\Users\Verena\Lokale Einstellungen 2014-06-02 08:45 - 2014-06-02 08:45 - 00000000 _SHDL () C:\Users\Verena\Eigene Dateien 2014-06-02 08:45 - 2014-06-02 08:45 - 00000000 _SHDL () C:\Users\Verena\Druckumgebung 2014-06-02 08:45 - 2014-06-02 08:45 - 00000000 _SHDL () C:\Users\Verena\Documents\Eigene Musik 2014-06-02 08:45 - 2014-06-02 08:45 - 00000000 _SHDL () C:\Users\Verena\Documents\Eigene Bilder 2014-06-02 08:45 - 2014-06-02 08:45 - 00000000 _SHDL () C:\Users\Verena\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-06-02 08:45 - 2014-06-02 08:45 - 00000000 _SHDL () C:\Users\Verena\AppData\Local\Verlauf 2014-06-02 08:45 - 2014-06-02 08:45 - 00000000 _SHDL () C:\Users\Verena\AppData\Local\Anwendungsdaten 2014-06-02 08:45 - 2014-06-02 08:45 - 00000000 _SHDL () C:\Users\Verena\Anwendungsdaten 2014-06-02 08:45 - 2012-07-26 10:13 - 00000000 ___RD () C:\Users\Verena\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2014-06-02 08:45 - 2012-07-26 10:13 - 00000000 ___RD () C:\Users\Verena\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2014-06-02 08:45 - 2012-07-26 10:13 - 00000000 ___RD () C:\Users\Verena\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility 2014-06-02 08:45 - 2012-07-26 10:13 - 00000000 ____D () C:\Users\Verena\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance 2014-06-02 08:42 - 2014-06-02 08:42 - 00001135 _____ () C:\WINDOWS\system32\netcfg-278890.txt 2014-06-02 08:42 - 2014-06-02 08:42 - 00000117 _____ () C:\WINDOWS\system32\netcfg-284171.txt 2014-06-02 08:42 - 2014-06-02 08:42 - 00000117 _____ () C:\WINDOWS\system32\netcfg-284140.txt 2014-06-02 08:42 - 2014-06-02 08:42 - 00000117 _____ () C:\WINDOWS\system32\netcfg-283796.txt 2014-06-02 08:42 - 2014-06-02 08:42 - 00000117 _____ () C:\WINDOWS\system32\netcfg-282484.txt ==================== One Month Modified Files and Folders ======= 2014-06-03 11:27 - 2014-06-03 11:27 - 00009787 _____ () C:\Users\Verena\Downloads\FRST.txt 2014-06-03 11:27 - 2014-06-03 11:27 - 00000000 ____D () C:\FRST 2014-06-03 11:27 - 2014-06-02 08:45 - 00000000 ____D () C:\Users\Verena\AppData\Local\Temp 2014-06-03 11:26 - 2014-06-03 11:26 - 02068992 _____ (Farbar) C:\Users\Verena\Downloads\FRST64.exe 2014-06-03 11:24 - 2014-06-03 11:24 - 00050477 _____ () C:\Users\Verena\Downloads\Defogger.exe 2014-06-03 11:24 - 2014-06-03 11:24 - 00000474 _____ () C:\Users\Verena\Desktop\defogger_disable.log 2014-06-03 11:24 - 2014-06-03 11:24 - 00000000 _____ () C:\Users\Verena\defogger_reenable 2014-06-03 11:24 - 2014-06-02 08:45 - 00000000 ____D () C:\Users\Verena 2014-06-03 11:22 - 2014-06-02 08:54 - 00003598 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2678595623-4148133582-4009595467-1001 2014-06-03 11:20 - 2014-06-03 10:18 - 00000000 ____D () C:\ProgramData\WinClon 2014-06-03 11:19 - 2012-07-26 09:21 - 00026319 _____ () C:\WINDOWS\setupact.log 2014-06-03 11:17 - 2014-06-02 22:42 - 00001120 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job 2014-06-03 11:16 - 2012-07-26 09:22 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT 2014-06-03 11:15 - 2014-06-03 10:23 - 00000000 ____D () C:\ProgramData\Norton 2014-06-03 11:15 - 2012-08-05 23:07 - 00726918 _____ () C:\WINDOWS\PFRO.log 2014-06-03 11:15 - 2012-07-26 07:26 - 00262144 ___SH () C:\WINDOWS\system32\config\BBI 2014-06-03 11:12 - 2012-07-26 10:12 - 00000000 ___HD () C:\WINDOWS\ELAMBKUP 2014-06-03 11:12 - 2012-07-26 07:26 - 00262144 ___SH () C:\WINDOWS\system32\config\ELAM 2014-06-03 11:09 - 2012-09-18 12:12 - 01476744 _____ () C:\WINDOWS\WindowsUpdate.log 2014-06-03 11:08 - 2014-06-03 09:59 - 00007986 _____ () C:\Users\Verena\Downloads\hijackthis.log 2014-06-03 11:07 - 2014-06-03 11:07 - 00018944 ___SH () C:\Users\Verena\Desktop\Thumbs.db 2014-06-03 11:00 - 2012-07-26 10:12 - 00000000 ____D () C:\WINDOWS\system32\sru 2014-06-03 10:54 - 2012-09-19 03:58 - 00754172 _____ () C:\WINDOWS\system32\perfh007.dat 2014-06-03 10:54 - 2012-09-19 03:58 - 00156362 _____ () C:\WINDOWS\system32\perfc007.dat 2014-06-03 10:54 - 2012-07-26 09:28 - 01748838 _____ () C:\WINDOWS\system32\PerfStringBackup.INI 2014-06-03 10:53 - 2014-06-03 10:53 - 00001206 _____ () C:\Users\Verena\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\S Agent.lnk 2014-06-03 10:52 - 2014-06-03 10:52 - 00000000 ____D () C:\Users\Verena\AppData\Roaming\ATI 2014-06-03 10:52 - 2014-06-03 10:52 - 00000000 ____D () C:\Users\Verena\AppData\Local\ATI 2014-06-03 10:52 - 2014-06-03 10:52 - 00000000 ____D () C:\ProgramData\ATI 2014-06-03 10:51 - 2014-06-03 10:51 - 00000000 ____D () C:\Users\Verena\AppData\Roaming\Intel Corporation 2014-06-03 10:50 - 2014-06-03 10:50 - 01774862 _____ () C:\WINDOWS\SysWOW64\PerfStringBackup.INI 2014-06-03 10:50 - 2014-06-03 10:50 - 00000000 ____D () C:\Users\Verena\AppData\Roaming\Synaptics 2014-06-03 10:50 - 2014-06-03 10:50 - 00000000 ____D () C:\Users\Verena\AppData\Roaming\Atheros 2014-06-03 10:50 - 2014-06-03 10:50 - 00000000 ____D () C:\ProgramData\Synaptics 2014-06-03 10:50 - 2014-06-03 10:50 - 00000000 ____D () C:\ProgramData\Intel 2014-06-03 10:50 - 2014-06-03 10:50 - 00000000 ____D () C:\ProgramData\Atheros 2014-06-03 10:46 - 2014-06-03 10:46 - 00281248 _____ () C:\WINDOWS\system32\FNTCACHE.DAT 2014-06-03 10:45 - 2014-06-03 10:45 - 00000000 ____D () C:\Users\Verena\AppData\Local\Samsung 2014-06-03 10:45 - 2012-07-26 10:12 - 00000000 ____D () C:\WINDOWS\WinStore 2014-06-03 10:41 - 2014-06-03 10:41 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BT Program 2014-06-03 10:41 - 2014-06-03 10:41 - 00000000 ____D () C:\Program Files\Common Files\QCA_Bluetooth 2014-06-03 10:41 - 2014-06-03 10:41 - 00000000 ____D () C:\Program Files (x86)\Bluetooth Suite 2014-06-03 10:41 - 2014-06-03 10:00 - 00000000 ____D () C:\Users\Verena\AppData\Local\CrashDumps 2014-06-03 10:36 - 2014-06-03 10:36 - 00003434 _____ () C:\WINDOWS\System32\Tasks\Settings 2014-06-03 10:36 - 2014-06-03 10:36 - 00002038 _____ () C:\Users\Public\Desktop\Settings.lnk 2014-06-03 10:36 - 2012-09-18 12:12 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung 2014-06-03 10:36 - 2012-09-18 12:12 - 00000000 ____D () C:\Program Files (x86)\Samsung 2014-06-03 10:32 - 2014-06-03 10:32 - 00002050 _____ () C:\Users\Public\Desktop\Support Center.lnk 2014-06-03 10:32 - 2014-06-03 09:54 - 00000000 ____D () C:\ProgramData\Samsung 2014-06-03 10:32 - 2012-09-18 12:12 - 00000000 ____D () C:\Program Files\Samsung 2014-06-03 10:19 - 2014-06-03 10:19 - 00000000 ____D () C:\ProgramData\ColorMode 2014-06-03 10:18 - 2014-06-03 10:18 - 00003126 _____ () C:\WINDOWS\System32\Tasks\advRecovery 2014-06-03 10:18 - 2014-06-03 10:18 - 00001513 _____ () C:\Users\Public\Desktop\Recovery.lnk 2014-06-03 10:18 - 2012-09-18 12:11 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information 2014-06-03 10:16 - 2014-06-03 10:16 - 00005552 _____ () C:\WINDOWS\DPINST.LOG 2014-06-03 10:16 - 2014-06-03 10:16 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_Kernel_SynTP_01009.Wdf 2014-06-03 10:16 - 2014-06-03 10:16 - 00000000 ____D () C:\Program Files\Synaptics 2014-06-03 10:16 - 2014-06-03 10:15 - 00001478 _____ () C:\WINDOWS\Synaptics.log 2014-06-03 10:15 - 2014-06-03 10:15 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel 2014-06-03 10:15 - 2014-06-03 10:15 - 00000000 ____D () C:\WINDOWS\SysWOW64\sda 2014-06-03 10:15 - 2014-06-03 10:15 - 00000000 ____D () C:\Users\Verena\AppData\Roaming\InstallShield 2014-06-03 10:15 - 2014-06-03 10:14 - 00000203 _____ () C:\setup.log 2014-06-03 10:15 - 2014-06-03 10:13 - 00000000 ____D () C:\Program Files (x86)\Realtek 2014-06-03 10:15 - 2014-06-02 08:52 - 00000000 ____D () C:\Program Files (x86)\Intel 2014-06-03 10:15 - 2012-09-18 12:11 - 00000000 ____D () C:\Program Files (x86)\Qualcomm Atheros 2014-06-03 10:13 - 2014-06-03 10:13 - 00000000 ___HD () C:\Program Files (x86)\Temp 2014-06-03 10:13 - 2014-06-03 10:13 - 00000000 ____D () C:\WINDOWS\SysWOW64\RTCOM 2014-06-03 10:13 - 2014-06-03 10:13 - 00000000 ____D () C:\WINDOWS\system32\SRSLabs 2014-06-03 10:13 - 2014-06-03 10:13 - 00000000 ____D () C:\Program Files\Realtek 2014-06-03 10:12 - 2014-06-03 10:12 - 00000000 ____D () C:\Program Files (x86)\AMD APP 2014-06-03 10:12 - 2014-06-03 10:12 - 00000000 _____ () C:\WINDOWS\ativpsrm.bin 2014-06-03 10:12 - 2014-06-03 10:09 - 00000000 ____D () C:\Program Files (x86)\ATI Technologies 2014-06-03 10:10 - 2014-06-03 10:10 - 00000000 ____D () C:\Program Files\Common Files\ATI Technologies 2014-06-03 10:09 - 2014-06-03 10:09 - 00000000 ____D () C:\Program Files\ATI 2014-06-03 10:08 - 2012-07-26 10:12 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared 2014-06-03 09:57 - 2014-06-02 08:46 - 00000000 ____D () C:\Users\Verena\AppData\Local\VirtualStore 2014-06-03 09:55 - 2014-06-03 09:55 - 00001956 _____ () C:\Users\Public\Desktop\SW Update.lnk 2014-06-03 09:47 - 2014-06-02 22:42 - 00001124 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job 2014-06-03 09:34 - 2012-07-26 09:59 - 00000000 ____D () C:\WINDOWS\CbsTemp 2014-06-03 09:33 - 2014-06-03 09:33 - 00084720 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avnetflt.sys 2014-06-03 09:31 - 2014-06-02 08:46 - 00000000 ___RD () C:\Users\Verena\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2014-06-03 09:31 - 2014-06-02 08:46 - 00000000 ___RD () C:\Users\Verena\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools 2014-06-03 09:30 - 2014-06-03 00:40 - 00000000 ___RD () C:\WINDOWS\BrowserChoice 2014-06-03 09:30 - 2014-06-02 08:45 - 00000000 ____D () C:\Users\Verena\AppData\Local\Packages 2014-06-03 09:30 - 2012-08-05 23:11 - 00000000 ____D () C:\ProgramData\PRICache 2014-06-03 01:11 - 2014-06-02 20:53 - 00000000 ____D () C:\WINDOWS\rescache 2014-06-03 00:41 - 2012-07-26 10:12 - 00000000 ___RD () C:\WINDOWS\ToastData 2014-06-03 00:41 - 2012-07-26 10:12 - 00000000 ____D () C:\WINDOWS\PolicyDefinitions 2014-06-03 00:40 - 2012-07-26 10:12 - 00000000 ___RD () C:\WINDOWS\ImmersiveControlPanel 2014-06-03 00:40 - 2012-07-26 10:12 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2014-06-03 00:40 - 2012-07-26 10:12 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2014-06-03 00:40 - 2012-07-26 10:12 - 00000000 ____D () C:\Program Files\Windows Defender 2014-06-03 00:40 - 2012-07-26 10:12 - 00000000 ____D () C:\Program Files (x86)\Windows Defender 2014-06-03 00:40 - 2012-07-26 09:52 - 00000000 ____D () C:\Program Files\Windows Journal 2014-06-03 00:40 - 2012-07-26 07:38 - 00000000 ____D () C:\WINDOWS\system32\oobe 2014-06-03 00:39 - 2012-07-26 10:12 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories 2014-06-03 00:39 - 2012-07-26 10:12 - 00000000 ____D () C:\WINDOWS\system32\SecureBootUpdates 2014-06-03 00:38 - 2012-07-26 10:12 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility 2014-06-03 00:38 - 2012-07-26 10:12 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility 2014-06-03 00:38 - 2012-07-26 10:12 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools 2014-06-03 00:38 - 2012-07-26 10:12 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools 2014-06-03 00:38 - 2012-07-26 10:12 - 00000000 ____D () C:\Program Files\Windows Photo Viewer 2014-06-03 00:38 - 2012-07-26 10:12 - 00000000 ____D () C:\Program Files (x86)\Windows Photo Viewer 2014-06-03 00:38 - 2012-07-26 07:38 - 00000000 ____D () C:\WINDOWS\SysWOW64\Dism 2014-06-03 00:38 - 2012-07-26 07:38 - 00000000 ____D () C:\WINDOWS\system32\Dism 2014-06-02 22:53 - 2014-06-02 09:02 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy 2014-06-02 22:43 - 2014-06-02 22:43 - 00002263 _____ () C:\Users\Public\Desktop\Google Chrome.lnk 2014-06-02 22:43 - 2014-06-02 22:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome 2014-06-02 22:43 - 2014-06-02 22:42 - 00000000 ____D () C:\Users\Verena\AppData\Local\Google 2014-06-02 22:43 - 2014-06-02 22:42 - 00000000 ____D () C:\Program Files (x86)\Google 2014-06-02 22:42 - 2014-06-02 22:42 - 00004096 _____ () C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA 2014-06-02 22:42 - 2014-06-02 22:42 - 00003860 _____ () C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore 2014-06-02 22:42 - 2014-06-02 22:41 - 00000000 ____D () C:\Users\Verena\AppData\Local\Deployment 2014-06-02 22:41 - 2014-06-02 22:41 - 00000000 ____D () C:\Users\Verena\AppData\Local\Apps\2.0 2014-06-02 22:31 - 2014-06-02 22:31 - 00000117 _____ () C:\WINDOWS\system32\netcfg-46234.txt 2014-06-02 22:29 - 2014-06-02 22:29 - 00000117 _____ () C:\WINDOWS\system32\netcfg-201890.txt 2014-06-02 22:14 - 2014-06-02 22:14 - 00000117 _____ () C:\WINDOWS\system32\netcfg-9373062.txt 2014-06-02 22:14 - 2014-06-02 22:14 - 00000117 _____ () C:\WINDOWS\system32\netcfg-9372734.txt 2014-06-02 20:51 - 2012-09-19 03:50 - 00000000 ____D () C:\WINDOWS\SysWOW64\XPSViewer 2014-06-02 20:51 - 2012-07-26 10:12 - 00000000 ____D () C:\WINDOWS\SysWOW64\MUI 2014-06-02 20:51 - 2012-07-26 09:51 - 00000000 ____D () C:\WINDOWS\SysWOW64\winrm 2014-06-02 20:51 - 2012-07-26 09:51 - 00000000 ____D () C:\WINDOWS\SysWOW64\WCN 2014-06-02 20:51 - 2012-07-26 09:51 - 00000000 ____D () C:\WINDOWS\SysWOW64\sysprep 2014-06-02 20:51 - 2012-07-26 09:51 - 00000000 ____D () C:\WINDOWS\SysWOW64\slmgr 2014-06-02 20:51 - 2012-07-26 09:51 - 00000000 ____D () C:\WINDOWS\SysWOW64\Printing_Admin_Scripts 2014-06-02 20:51 - 2012-07-26 09:51 - 00000000 ____D () C:\WINDOWS\system32\winrm 2014-06-02 20:51 - 2012-07-26 07:37 - 00000000 ____D () C:\WINDOWS\servicing 2014-06-02 20:49 - 2012-07-26 09:51 - 00000000 ____D () C:\WINDOWS\system32\WCN 2014-06-02 20:49 - 2012-07-26 09:51 - 00000000 ____D () C:\WINDOWS\system32\slmgr 2014-06-02 20:49 - 2012-07-26 09:51 - 00000000 ____D () C:\WINDOWS\system32\Printing_Admin_Scripts 2014-06-02 20:49 - 2012-07-26 07:38 - 00000000 ____D () C:\WINDOWS\system32\Sysprep 2014-06-02 20:45 - 2012-07-26 10:12 - 00000000 ____D () C:\WINDOWS\SysWOW64\migwiz 2014-06-02 20:45 - 2012-07-26 10:12 - 00000000 ____D () C:\WINDOWS\SysWOW64\Com 2014-06-02 20:45 - 2012-07-26 10:12 - 00000000 ____D () C:\WINDOWS\system32\migwiz 2014-06-02 20:45 - 2012-07-26 07:38 - 00000000 ____D () C:\WINDOWS\SysWOW64\oobe 2014-06-02 20:43 - 2012-07-26 10:12 - 00000000 ____D () C:\WINDOWS\system32\SystemResetPlatform 2014-06-02 20:43 - 2012-07-26 10:12 - 00000000 ____D () C:\WINDOWS\system32\Com 2014-06-02 20:39 - 2012-07-26 10:12 - 00000000 ____D () C:\WINDOWS\SysWOW64\en-GB 2014-06-02 20:39 - 2012-07-26 10:12 - 00000000 ____D () C:\WINDOWS\system32\en-GB 2014-06-02 20:39 - 2012-07-26 10:12 - 00000000 ____D () C:\Program Files\Common Files\System 2014-06-02 20:37 - 2012-07-26 10:12 - 00000000 ____D () C:\WINDOWS\system32\MUI 2014-06-02 19:38 - 2014-06-02 19:38 - 00000117 _____ () C:\WINDOWS\system32\netcfg-34812.txt 2014-06-02 19:36 - 2014-06-02 19:36 - 00000117 _____ () C:\WINDOWS\system32\netcfg-78578.txt 2014-06-02 19:36 - 2014-06-02 19:36 - 00000117 _____ () C:\WINDOWS\system32\netcfg-35906.txt 2014-06-02 19:34 - 2014-06-02 19:34 - 00000117 _____ () C:\WINDOWS\system32\netcfg-1102546.txt 2014-06-02 19:17 - 2014-06-02 19:17 - 00000136 _____ () C:\WINDOWS\system32\netcfg-108093.txt 2014-06-02 19:17 - 2014-06-02 19:17 - 00000135 _____ () C:\WINDOWS\system32\netcfg-105359.txt 2014-06-02 19:17 - 2014-06-02 19:17 - 00000134 _____ () C:\WINDOWS\system32\netcfg-107953.txt 2014-06-02 19:17 - 2014-06-02 19:17 - 00000134 _____ () C:\WINDOWS\system32\netcfg-107734.txt 2014-06-02 19:17 - 2014-06-02 19:17 - 00000129 _____ () C:\WINDOWS\system32\netcfg-104984.txt 2014-06-02 19:17 - 2014-06-02 19:17 - 00000128 _____ () C:\WINDOWS\system32\netcfg-114890.txt 2014-06-02 19:17 - 2014-06-02 19:17 - 00000128 _____ () C:\WINDOWS\system32\netcfg-105484.txt 2014-06-02 19:17 - 2014-06-02 19:17 - 00000127 _____ () C:\WINDOWS\system32\netcfg-105718.txt 2014-06-02 19:17 - 2014-06-02 19:17 - 00000126 _____ () C:\WINDOWS\system32\netcfg-105609.txt 2014-06-02 19:16 - 2014-06-02 19:16 - 00000117 _____ () C:\WINDOWS\system32\netcfg-36906.txt 2014-06-02 19:14 - 2014-06-02 19:14 - 00000117 _____ () C:\WINDOWS\system32\netcfg-1131796.txt 2014-06-02 18:58 - 2014-06-02 18:58 - 00000136 _____ () C:\WINDOWS\system32\netcfg-140296.txt 2014-06-02 18:58 - 2014-06-02 18:58 - 00000135 _____ () C:\WINDOWS\system32\netcfg-137859.txt 2014-06-02 18:58 - 2014-06-02 18:58 - 00000134 _____ () C:\WINDOWS\system32\netcfg-140171.txt 2014-06-02 18:58 - 2014-06-02 18:58 - 00000134 _____ () C:\WINDOWS\system32\netcfg-139984.txt 2014-06-02 18:58 - 2014-06-02 18:58 - 00000129 _____ () C:\WINDOWS\system32\netcfg-137687.txt 2014-06-02 18:58 - 2014-06-02 18:58 - 00000128 _____ () C:\WINDOWS\system32\netcfg-146437.txt 2014-06-02 18:58 - 2014-06-02 18:58 - 00000128 _____ () C:\WINDOWS\system32\netcfg-137968.txt 2014-06-02 18:58 - 2014-06-02 18:58 - 00000127 _____ () C:\WINDOWS\system32\netcfg-138203.txt 2014-06-02 18:58 - 2014-06-02 18:58 - 00000126 _____ () C:\WINDOWS\system32\netcfg-138078.txt 2014-06-02 18:56 - 2014-06-02 18:56 - 00000117 _____ () C:\WINDOWS\system32\netcfg-55468.txt 2014-06-02 18:54 - 2014-06-02 18:54 - 00000117 _____ () C:\WINDOWS\system32\netcfg-2673609.txt 2014-06-02 17:10 - 2014-06-02 17:10 - 00000000 ____D () C:\WINDOWS\system32\MRT 2014-06-02 16:51 - 2012-07-26 10:12 - 00000000 ____D () C:\WINDOWS\AUInstallAgent 2014-06-02 16:37 - 2014-06-02 16:37 - 00000000 _____ () C:\Recovery.txt 2014-06-02 16:36 - 2012-07-26 10:13 - 00262144 _____ () C:\WINDOWS\system32\config\BCD-Template 2014-06-02 09:05 - 2014-06-02 09:02 - 00000000 ____D () C:\Program Files (x86)\Spybot - Search & Destroy 2 2014-06-02 09:02 - 2014-06-02 09:02 - 00001423 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot-S&D Start Center.lnk 2014-06-02 09:02 - 2014-06-02 09:02 - 00001411 _____ () C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk 2014-06-02 09:02 - 2014-06-02 09:02 - 00000000 ____D () C:\WINDOWS\System32\Tasks\Safer-Networking 2014-06-02 09:02 - 2014-06-02 09:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2 2014-06-02 09:01 - 2014-06-02 09:00 - 46392680 _____ (Safer-Networking Ltd. ) C:\Users\Verena\Downloads\spybot-2.3.exe 2014-06-02 08:59 - 2014-06-02 08:59 - 00000000 ____D () C:\Users\Verena\AppData\Roaming\Avira 2014-06-02 08:55 - 2014-06-02 08:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira 2014-06-02 08:55 - 2014-06-02 08:52 - 00000000 ____D () C:\ProgramData\Avira 2014-06-02 08:55 - 2014-06-02 08:52 - 00000000 ____D () C:\Program Files (x86)\Avira 2014-06-02 08:52 - 2014-06-02 08:52 - 00001155 _____ () C:\Users\Public\Desktop\Avira.lnk 2014-06-02 08:52 - 2014-06-02 08:52 - 00000000 ____D () C:\ProgramData\Package Cache 2014-06-02 08:52 - 2014-06-02 08:52 - 00000000 ____D () C:\Program Files\Intel 2014-06-02 08:52 - 2014-06-02 08:52 - 00000000 ____D () C:\Intel 2014-06-02 08:51 - 2014-06-02 08:51 - 04536336 _____ (Avira Operations GmbH & Co. KG) C:\Users\Verena\Downloads\avira_de_av___ws.exe 2014-06-02 08:50 - 2014-06-02 08:50 - 00000000 ____D () C:\Users\Verena\AppData\Roaming\Macromedia 2014-06-02 08:46 - 2014-06-02 08:46 - 00001454 _____ () C:\Users\Verena\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2014-06-02 08:46 - 2014-06-02 08:46 - 00000000 ____D () C:\WINDOWS\System32\Tasks\WPD 2014-06-02 08:46 - 2014-06-02 08:46 - 00000000 ____D () C:\Users\Verena\AppData\Roaming\Adobe 2014-06-02 08:45 - 2014-06-02 08:45 - 00000020 ___SH () C:\Users\Verena\ntuser.ini 2014-06-02 08:45 - 2014-06-02 08:45 - 00000000 _SHDL () C:\Users\Verena\Vorlagen 2014-06-02 08:45 - 2014-06-02 08:45 - 00000000 _SHDL () C:\Users\Verena\Startmenü 2014-06-02 08:45 - 2014-06-02 08:45 - 00000000 _SHDL () C:\Users\Verena\Netzwerkumgebung 2014-06-02 08:45 - 2014-06-02 08:45 - 00000000 _SHDL () C:\Users\Verena\Lokale Einstellungen 2014-06-02 08:45 - 2014-06-02 08:45 - 00000000 _SHDL () C:\Users\Verena\Eigene Dateien 2014-06-02 08:45 - 2014-06-02 08:45 - 00000000 _SHDL () C:\Users\Verena\Druckumgebung 2014-06-02 08:45 - 2014-06-02 08:45 - 00000000 _SHDL () C:\Users\Verena\Documents\Eigene Musik 2014-06-02 08:45 - 2014-06-02 08:45 - 00000000 _SHDL () C:\Users\Verena\Documents\Eigene Bilder 2014-06-02 08:45 - 2014-06-02 08:45 - 00000000 _SHDL () C:\Users\Verena\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-06-02 08:45 - 2014-06-02 08:45 - 00000000 _SHDL () C:\Users\Verena\AppData\Local\Verlauf 2014-06-02 08:45 - 2014-06-02 08:45 - 00000000 _SHDL () C:\Users\Verena\AppData\Local\Anwendungsdaten 2014-06-02 08:45 - 2014-06-02 08:45 - 00000000 _SHDL () C:\Users\Verena\Anwendungsdaten 2014-06-02 08:42 - 2014-06-02 08:42 - 00001135 _____ () C:\WINDOWS\system32\netcfg-278890.txt 2014-06-02 08:42 - 2014-06-02 08:42 - 00000117 _____ () C:\WINDOWS\system32\netcfg-284171.txt 2014-06-02 08:42 - 2014-06-02 08:42 - 00000117 _____ () C:\WINDOWS\system32\netcfg-284140.txt 2014-06-02 08:42 - 2014-06-02 08:42 - 00000117 _____ () C:\WINDOWS\system32\netcfg-283796.txt 2014-06-02 08:42 - 2014-06-02 08:42 - 00000117 _____ () C:\WINDOWS\system32\netcfg-282484.txt 2014-05-09 11:16 - 2014-06-02 08:55 - 00130584 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avipbb.sys 2014-05-09 11:16 - 2014-06-02 08:55 - 00112080 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avgntflt.sys 2014-05-09 11:16 - 2014-06-02 08:55 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avkmgr.sys 2014-05-06 07:14 - 2014-06-02 16:34 - 19274752 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll 2014-05-06 07:14 - 2014-06-02 16:34 - 00097280 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll 2014-05-06 05:48 - 2014-06-02 16:34 - 14367232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll 2014-05-06 05:48 - 2014-06-02 16:34 - 00080384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll 2014-05-06 05:37 - 2014-06-02 16:34 - 02706432 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb 2014-05-06 05:26 - 2014-06-02 16:34 - 02706432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb 2014-05-04 17:12 - 2014-06-02 17:10 - 93223848 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe Files to move or delete: ==================== C:\ProgramData\MakeMarkerFile.exe Some content of TEMP: ==================== C:\Users\Verena\AppData\Local\Temp\avgnt.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe [2014-06-02 16:33] - [2014-04-12 11:10] - 0578048 ____A (Microsoft Corporation) 75DD70A14145499C9F7D903CF9A8C91B C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\rpcss.dll => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2012-08-05 23:07 ==================== End Of Log ============================ Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 02-06-2014 Ran by Verena at 2014-06-03 11:28:07 Running from C:\Users\Verena\Downloads Boot Mode: Normal ========================================================== ==================== Security Center ======================== AV: Avira Desktop (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859} AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: Avira Desktop (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: Spybot - Search and Destroy (Enabled - Up to date) {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0} ==================== Installed Programs ====================== AMD APP SDK Runtime (Version: 10.0.938.2 - Advanced Micro Devices Inc.) Hidden AMD Catalyst Install Manager (HKLM\...\{D1FE6D8B-E5EE-5205-3E53-CDA000257D99}) (Version: 8.0.881.0 - Advanced Micro Devices, Inc.) Avira (HKLM-x32\...\{68e29fba-92b1-4f6f-a604-1d8679da3a9f}) (Version: 1.1.13.24161 - Avira Operations GmbH & Co. KG) Avira (x32 Version: 1.1.13.24161 - Avira Operations GmbH & Co. KG) Hidden Avira Free Antivirus (HKLM-x32\...\Avira AntiVir Desktop) (Version: 14.0.4.642 - Avira) Catalyst Control Center - Branding (x32 Version: 1.00.0000 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center (x32 Version: 2012.0806.1156.19437 - Ihr Firmenname) Hidden Catalyst Control Center Graphics Previews Common (x32 Version: 2012.0806.1156.19437 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center InstallProxy (x32 Version: 2012.0806.1156.19437 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Localization All (x32 Version: 2012.0806.1156.19437 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Profiles Mobile (x32 Version: 2012.0806.1156.19437 - Advanced Micro Devices, Inc.) Hidden CCC Help Chinese Standard (x32 Version: 2012.0806.1155.19437 - Advanced Micro Devices, Inc.) Hidden CCC Help Chinese Traditional (x32 Version: 2012.0806.1155.19437 - Advanced Micro Devices, Inc.) Hidden CCC Help Czech (x32 Version: 2012.0806.1155.19437 - Advanced Micro Devices, Inc.) Hidden CCC Help Danish (x32 Version: 2012.0806.1155.19437 - Advanced Micro Devices, Inc.) Hidden CCC Help Dutch (x32 Version: 2012.0806.1155.19437 - Advanced Micro Devices, Inc.) Hidden CCC Help English (x32 Version: 2012.0806.1155.19437 - Advanced Micro Devices, Inc.) Hidden CCC Help Finnish (x32 Version: 2012.0806.1155.19437 - Advanced Micro Devices, Inc.) Hidden CCC Help French (x32 Version: 2012.0806.1155.19437 - Advanced Micro Devices, Inc.) Hidden CCC Help German (x32 Version: 2012.0806.1155.19437 - Advanced Micro Devices, Inc.) Hidden CCC Help Greek (x32 Version: 2012.0806.1155.19437 - Advanced Micro Devices, Inc.) Hidden CCC Help Hungarian (x32 Version: 2012.0806.1155.19437 - Advanced Micro Devices, Inc.) Hidden CCC Help Italian (x32 Version: 2012.0806.1155.19437 - Advanced Micro Devices, Inc.) Hidden CCC Help Japanese (x32 Version: 2012.0806.1155.19437 - Advanced Micro Devices, Inc.) Hidden CCC Help Korean (x32 Version: 2012.0806.1155.19437 - Advanced Micro Devices, Inc.) Hidden CCC Help Norwegian (x32 Version: 2012.0806.1155.19437 - Advanced Micro Devices, Inc.) Hidden CCC Help Polish (x32 Version: 2012.0806.1155.19437 - Advanced Micro Devices, Inc.) Hidden CCC Help Portuguese (x32 Version: 2012.0806.1155.19437 - Advanced Micro Devices, Inc.) Hidden CCC Help Russian (x32 Version: 2012.0806.1155.19437 - Advanced Micro Devices, Inc.) Hidden CCC Help Spanish (x32 Version: 2012.0806.1155.19437 - Advanced Micro Devices, Inc.) Hidden CCC Help Swedish (x32 Version: 2012.0806.1155.19437 - Advanced Micro Devices, Inc.) Hidden CCC Help Thai (x32 Version: 2012.0806.1155.19437 - Advanced Micro Devices, Inc.) Hidden CCC Help Turkish (x32 Version: 2012.0806.1155.19437 - Advanced Micro Devices, Inc.) Hidden ccc-utility64 (Version: 2012.0806.1156.19437 - Advanced Micro Devices, Inc.) Hidden Google Chrome (HKLM-x32\...\Google Chrome) (Version: 35.0.1916.114 - Google Inc.) Google Update Helper (x32 Version: 1.3.24.7 - Google Inc.) Hidden Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1008 - Intel Corporation) Intel(R) Display Audio Driver (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 6.14.00.3097 - Intel Corporation) Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 11.6.0.1030 - Intel Corporation) Microsoft App Update for microsoft.windowscommunicationsapps_17.0.1119.516_x64__8wekyb3d8bbwe (x64) (Version: 1.0.0.0 - Microsoft Corporation) Hidden Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319 (HKLM\...\{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319 (HKLM-x32\...\{196BB40D-1578-3D01-B289-BEFC77A11A1E}) (Version: 10.0.30319 - Microsoft Corporation) PX Profile Update (x32 Version: 1.00.1. - AMD) Hidden Qualcomm Atheros Bluetooth Suite (64) (HKLM\...\{A84A4FB1-D703-48DB-89E0-68B6499D2801}) (Version: 8.0.1.314 - Qualcomm Atheros Communications) Qualcomm Atheros Client Installation Program (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 10.0 - Qualcomm Atheros) Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.3.730.2012 - Realtek) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6702 - Realtek Semiconductor Corp.) Realtek USB 2.0 Card Reader (HKLM-x32\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.1.8400.39030 - Realtek Semiconductor Corp.) Recovery (HKLM-x32\...\{145DE957-0679-4A2A-BB5C-1D3E9808FAB2}) (Version: 6.0.7.2 - Samsung Electronics CO., LTD.) S Agent (Version: 1.1.47 - Samsung Electronics CO., LTD.) Hidden Settings (HKLM-x32\...\{8CB5C357-12E5-41B1-A024-D57D4E6F32D9}) (Version: 2.0.1 - Samsung Electronics CO., LTD.) Spybot - Search & Destroy (HKLM-x32\...\{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1) (Version: 2.3.39 - Safer-Networking Ltd.) Support Center (HKLM\...\{AB0DEFBB-1A16-47B5-86D2-39F0A2B24AE4}) (Version: 2.1.1210 - Samsung Electronics CO., LTD.) Support Center FAQ (x32 Version: 1.0.14 - Samsung Electronics CO., LTD.) Hidden SW Update (HKLM-x32\...\{DA06101F-FD76-4BF0-88BD-B26A197005E3}) (Version: 2.1.21 - Samsung Electronics CO., LTD.) Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 16.2.14.2 - Synaptics Incorporated) ==================== Restore Points ========================= 02-06-2014 14:50:25 Windows Update ==================== Hosts content: ========================== 2012-07-26 07:26 - 2012-07-26 07:26 - 00000824 ____A C:\WINDOWS\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= Task: {1AAFF332-5C62-4558-9991-DAA649C4C9C5} - System32\Tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask => Rundll32.exe sysmain.dll,PfSvWsSwapAssessmentTask Task: {23A5D8BE-9196-40EB-BD89-794398B2B073} - System32\Tasks\Microsoft\Windows\WS\WSRefreshBannedAppsListTask => Rundll32.exe WSClient.dll,RefreshBannedAppsList Task: {4177A352-DFCB-4F4B-B52B-CAC7F705131E} - System32\Tasks\Microsoft\Windows\Setup\Pre-staged GDR Notification => C:\Windows\system32\NotificationUI.exe [2014-04-19] (Microsoft Corporation) Task: {70607345-A7E3-4379-944C-08FD11B5E0D3} - System32\Tasks\Settings => C:\Program Files (x86)\Samsung\Settings\sSettings.exe [2014-01-29] (Samsung Electronics CO., LTD.) Task: {70E01ADD-DB4F-4E92-8369-6A1C2D00A5AC} - System32\Tasks\Microsoft\WINRE\WinRE-Repair => C:\windows\System32\reagentc.exe [2012-10-24] (Microsoft Corporation) Task: {74BA27EE-2B71-4C19-87D6-6D9E717C8F67} - System32\Tasks\advRecovery => C:\Program Files\Samsung\Recovery\WCScheduler.exe [2012-10-15] (SEC) Task: {844156D0-373A-4DC3-8702-0FC74FC06F55} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDImmunize.exe Task: {9DCAE56A-934A-4476-8952-E3B213C0E1F2} - System32\Tasks\SAgent => C:\Program Files\Samsung\S Agent\CommonAgent.exe [2014-03-19] (Samsung Electronics CO., LTD.) Task: {A72208BF-7A49-4FB8-B684-252375F3443A} - System32\Tasks\Microsoft\Windows\WS\License Validation => Rundll32.exe WSClient.dll,WSpTLR licensing Task: {C6A88F2D-53D2-4805-9D69-443738A1847C} - System32\Tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState => Rundll32.exe Windows.Storage.ApplicationData.dll,CleanupTemporaryState Task: {CCA14E14-B044-422F-8BAF-D6209D544843} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe Task: {D99C5146-5BE6-4A0F-B130-654653457DA2} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-06-02] (Google Inc.) Task: {E3F78E40-93B7-4C14-B8B6-A96283909E58} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDScan.exe Task: {E9CDFE9C-4481-4533-8D15-A040A9E758F4} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-06-02] (Google Inc.) Task: {EBF06DEC-4228-4813-AC0C-62821AE4E330} - System32\Tasks\Microsoft\Windows\Application Experience\StartupAppTask => Rundll32.exe Startupscan.dll,SusRunTask Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe ==================== Loaded Modules (whitelisted) ============= 2014-01-29 13:20 - 2014-01-29 13:20 - 00084800 _____ () C:\Program Files (x86)\Samsung\Settings\CmdServer\EasySettingsCmdServer.exe 2014-01-07 01:29 - 2014-01-07 01:29 - 00011264 _____ () C:\Program Files (x86)\Bluetooth Suite\Modules\ActivateDesktopDebugger\ActivateDesktopDebugger.dll 2014-01-07 01:26 - 2014-01-07 01:26 - 00086016 _____ () C:\Program Files (x86)\Bluetooth Suite\Modules\Map\MAP.dll 2014-01-07 01:32 - 2014-01-07 01:32 - 00012928 _____ () C:\Program Files (x86)\Bluetooth Suite\ActivateDesktop.exe 2014-01-25 02:22 - 2014-01-25 02:22 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll 2014-03-19 11:41 - 2014-03-19 11:41 - 00088624 _____ () C:\Program Files\Samsung\S Agent\ToastX64.dll 2012-08-06 11:54 - 2012-08-06 11:54 - 00369664 _____ () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll 2014-06-03 11:24 - 2014-06-03 11:24 - 00050477 _____ () C:\Users\Verena\Downloads\Defogger.exe 2014-06-02 09:02 - 2014-04-25 14:11 - 00109400 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlThirdParty150.bpl 2014-06-02 09:02 - 2014-04-25 14:11 - 00167768 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlFileFormats150.bpl 2014-06-02 09:02 - 2014-04-25 14:11 - 00416600 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\DEC150.bpl 2014-06-02 09:02 - 2012-08-23 10:38 - 00574840 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\sqlite3.dll 2014-06-02 09:02 - 2012-04-03 17:06 - 00565640 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\av\BDSmartDB.dll 2014-01-29 13:20 - 2014-01-29 13:20 - 00027968 _____ () C:\Program Files (x86)\Samsung\Settings\CmdServer\EasySettingsCmdWrapper.dll 2014-01-29 13:20 - 2014-01-29 13:20 - 01141056 _____ () C:\Program Files (x86)\Samsung\Settings\CmdServer\EasySettingsCmd.dll 2014-01-29 13:20 - 2014-01-29 13:20 - 00109888 _____ () C:\Program Files (x86)\Samsung\Settings\CmdServer\EasySettingsBase.dll 2014-01-29 13:20 - 2014-01-29 13:20 - 00056440 _____ () C:\Program Files (x86)\Samsung\Settings\CmdServer\HookDllPS2.dll 2014-01-29 13:20 - 2014-01-29 13:20 - 00211064 _____ () C:\Program Files (x86)\Samsung\Settings\CmdServer\WinCRT.dll 2014-01-29 13:20 - 2014-01-29 13:20 - 00025920 _____ () C:\Program Files (x86)\Samsung\Settings\EasySettingsAPI.dll 2014-01-29 13:20 - 2014-01-29 13:20 - 00109888 _____ () C:\Program Files (x86)\Samsung\Settings\EasySettingsBase.dll 2014-01-29 13:20 - 2014-01-29 13:20 - 00059712 _____ () C:\Program Files (x86)\Samsung\Settings\EasyMovieEnhancer.dll 2014-01-29 13:20 - 2014-01-29 13:20 - 00102720 _____ () C:\Program Files (x86)\Samsung\Settings\EasySettingsCmdClient.dll 2014-05-14 14:27 - 2014-05-14 14:27 - 00137296 _____ () C:\Program Files (x86)\Avira\My Avira\Avira.OE.NativeCore.dll 2014-06-02 08:55 - 2014-05-14 14:27 - 00049744 _____ () C:\Users\Verena\AppData\Local\Temp\avgnt.exe\Avira.OE.ExtApi.dll 2014-06-02 22:43 - 2014-05-14 01:40 - 00716616 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.114\libglesv2.dll 2014-06-02 22:43 - 2014-05-14 01:40 - 00126280 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.114\libegl.dll 2014-06-02 22:43 - 2014-05-14 01:40 - 04217672 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.114\pdf.dll 2014-06-02 22:43 - 2014-05-14 01:40 - 00414536 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.114\ppGoogleNaClPluginChrome.dll 2014-06-02 22:43 - 2014-05-14 01:40 - 01732424 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.114\ffmpegsumo.dll 2014-06-02 22:43 - 2014-05-14 01:40 - 13695816 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.114\PepperFlash\pepflashplayer.dll 2014-06-03 10:15 - 2014-06-03 10:15 - 00017920 _____ () C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\PSIClient\b7497ee745bead9869f53a314470edeb\PSIClient.ni.dll ==================== Alternate Data Streams (whitelisted) ========= ==================== Safe Mode (whitelisted) =================== ==================== EXE Association (whitelisted) ============= ==================== Disabled items from MSCONFIG ============== ==================== Faulty Device Manager Devices ============= Name: Description: Class Guid: Manufacturer: Service: Problem: : The drivers for this device are not installed. (Code 28) Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard. Name: Description: Class Guid: Manufacturer: Service: Problem: : The drivers for this device are not installed. (Code 28) Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard. ==================== Event log errors: ========================= Application errors: ================== Error: (06/03/2014 10:50:36 AM) (Source: Perflib) (EventID: 1023) (User: ) Description: rdyboost4 Error: (06/03/2014 10:41:52 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: MsiExec.exe, Version: 5.0.9200.16384, Zeitstempel: 0x5010a60b Name des fehlerhaften Moduls: MSVCR100.dll, Version: 10.0.40219.1, Zeitstempel: 0x4d5f0c22 Ausnahmecode: 0xc0000005 Fehleroffset: 0x00013157 ID des fehlerhaften Prozesses: 0xb88 Startzeit der fehlerhaften Anwendung: 0xMsiExec.exe0 Pfad der fehlerhaften Anwendung: MsiExec.exe1 Pfad des fehlerhaften Moduls: MsiExec.exe2 Berichtskennung: MsiExec.exe3 Vollständiger Name des fehlerhaften Pakets: MsiExec.exe4 Anwendungs-ID, die relativ zum fehlerhaften Paket ist: MsiExec.exe5 Error: (06/03/2014 10:36:49 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: igfxsrvc.exe, Version: 8.15.10.3412, Zeitstempel: 0x52e048ae Name des fehlerhaften Moduls: igfxsrvc.exe, Version: 8.15.10.3412, Zeitstempel: 0x52e048ae Ausnahmecode: 0xc0000005 Fehleroffset: 0x0000000000021882 ID des fehlerhaften Prozesses: 0xb8c Startzeit der fehlerhaften Anwendung: 0xigfxsrvc.exe0 Pfad der fehlerhaften Anwendung: igfxsrvc.exe1 Pfad des fehlerhaften Moduls: igfxsrvc.exe2 Berichtskennung: igfxsrvc.exe3 Vollständiger Name des fehlerhaften Pakets: igfxsrvc.exe4 Anwendungs-ID, die relativ zum fehlerhaften Paket ist: igfxsrvc.exe5 Error: (06/03/2014 10:36:49 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: igfxsrvc.exe, Version: 8.15.10.3412, Zeitstempel: 0x52e048ae Name des fehlerhaften Moduls: igfxsrvc.exe, Version: 8.15.10.3412, Zeitstempel: 0x52e048ae Ausnahmecode: 0xc0000005 Fehleroffset: 0x0000000000021882 ID des fehlerhaften Prozesses: 0x2e8 Startzeit der fehlerhaften Anwendung: 0xigfxsrvc.exe0 Pfad der fehlerhaften Anwendung: igfxsrvc.exe1 Pfad des fehlerhaften Moduls: igfxsrvc.exe2 Berichtskennung: igfxsrvc.exe3 Vollständiger Name des fehlerhaften Pakets: igfxsrvc.exe4 Anwendungs-ID, die relativ zum fehlerhaften Paket ist: igfxsrvc.exe5 Error: (06/03/2014 10:36:49 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: igfxsrvc.exe, Version: 8.15.10.3412, Zeitstempel: 0x52e048ae Name des fehlerhaften Moduls: igfxsrvc.exe, Version: 8.15.10.3412, Zeitstempel: 0x52e048ae Ausnahmecode: 0xc0000005 Fehleroffset: 0x0000000000021882 ID des fehlerhaften Prozesses: 0xed0 Startzeit der fehlerhaften Anwendung: 0xigfxsrvc.exe0 Pfad der fehlerhaften Anwendung: igfxsrvc.exe1 Pfad des fehlerhaften Moduls: igfxsrvc.exe2 Berichtskennung: igfxsrvc.exe3 Vollständiger Name des fehlerhaften Pakets: igfxsrvc.exe4 Anwendungs-ID, die relativ zum fehlerhaften Paket ist: igfxsrvc.exe5 Error: (06/03/2014 10:36:48 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: igfxsrvc.exe, Version: 8.15.10.3412, Zeitstempel: 0x52e048ae Name des fehlerhaften Moduls: igfxsrvc.exe, Version: 8.15.10.3412, Zeitstempel: 0x52e048ae Ausnahmecode: 0xc0000005 Fehleroffset: 0x0000000000021882 ID des fehlerhaften Prozesses: 0x15bc Startzeit der fehlerhaften Anwendung: 0xigfxsrvc.exe0 Pfad der fehlerhaften Anwendung: igfxsrvc.exe1 Pfad des fehlerhaften Moduls: igfxsrvc.exe2 Berichtskennung: igfxsrvc.exe3 Vollständiger Name des fehlerhaften Pakets: igfxsrvc.exe4 Anwendungs-ID, die relativ zum fehlerhaften Paket ist: igfxsrvc.exe5 Error: (06/03/2014 10:36:48 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: igfxsrvc.exe, Version: 8.15.10.3412, Zeitstempel: 0x52e048ae Name des fehlerhaften Moduls: igfxsrvc.exe, Version: 8.15.10.3412, Zeitstempel: 0x52e048ae Ausnahmecode: 0xc0000005 Fehleroffset: 0x0000000000021882 ID des fehlerhaften Prozesses: 0x1674 Startzeit der fehlerhaften Anwendung: 0xigfxsrvc.exe0 Pfad der fehlerhaften Anwendung: igfxsrvc.exe1 Pfad des fehlerhaften Moduls: igfxsrvc.exe2 Berichtskennung: igfxsrvc.exe3 Vollständiger Name des fehlerhaften Pakets: igfxsrvc.exe4 Anwendungs-ID, die relativ zum fehlerhaften Paket ist: igfxsrvc.exe5 Error: (06/03/2014 10:36:48 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: igfxsrvc.exe, Version: 8.15.10.3412, Zeitstempel: 0x52e048ae Name des fehlerhaften Moduls: igfxsrvc.exe, Version: 8.15.10.3412, Zeitstempel: 0x52e048ae Ausnahmecode: 0xc0000005 Fehleroffset: 0x0000000000021882 ID des fehlerhaften Prozesses: 0x700 Startzeit der fehlerhaften Anwendung: 0xigfxsrvc.exe0 Pfad der fehlerhaften Anwendung: igfxsrvc.exe1 Pfad des fehlerhaften Moduls: igfxsrvc.exe2 Berichtskennung: igfxsrvc.exe3 Vollständiger Name des fehlerhaften Pakets: igfxsrvc.exe4 Anwendungs-ID, die relativ zum fehlerhaften Paket ist: igfxsrvc.exe5 Error: (06/03/2014 10:36:48 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: igfxsrvc.exe, Version: 8.15.10.3412, Zeitstempel: 0x52e048ae Name des fehlerhaften Moduls: igfxsrvc.exe, Version: 8.15.10.3412, Zeitstempel: 0x52e048ae Ausnahmecode: 0xc0000005 Fehleroffset: 0x0000000000021882 ID des fehlerhaften Prozesses: 0xef0 Startzeit der fehlerhaften Anwendung: 0xigfxsrvc.exe0 Pfad der fehlerhaften Anwendung: igfxsrvc.exe1 Pfad des fehlerhaften Moduls: igfxsrvc.exe2 Berichtskennung: igfxsrvc.exe3 Vollständiger Name des fehlerhaften Pakets: igfxsrvc.exe4 Anwendungs-ID, die relativ zum fehlerhaften Paket ist: igfxsrvc.exe5 Error: (06/03/2014 10:36:48 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: igfxsrvc.exe, Version: 8.15.10.3412, Zeitstempel: 0x52e048ae Name des fehlerhaften Moduls: igfxsrvc.exe, Version: 8.15.10.3412, Zeitstempel: 0x52e048ae Ausnahmecode: 0xc0000005 Fehleroffset: 0x0000000000021882 ID des fehlerhaften Prozesses: 0xcb0 Startzeit der fehlerhaften Anwendung: 0xigfxsrvc.exe0 Pfad der fehlerhaften Anwendung: igfxsrvc.exe1 Pfad des fehlerhaften Moduls: igfxsrvc.exe2 Berichtskennung: igfxsrvc.exe3 Vollständiger Name des fehlerhaften Pakets: igfxsrvc.exe4 Anwendungs-ID, die relativ zum fehlerhaften Paket ist: igfxsrvc.exe5 System errors: ============= Error: (06/03/2014 11:17:39 AM) (Source: Service Control Manager) (EventID: 7009) (User: ) Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Avira Service Host erreicht. Error: (06/03/2014 10:36:37 AM) (Source: Service Control Manager) (EventID: 7030) (User: ) Description: Der Dienst "Easy Launcher" ist als interaktiver Dienst gekennzeichnet. Das System wurde jedoch so konfiguriert, dass interaktive Dienste nicht möglich sind. Der Dienst wird möglicherweise nicht richtig funktionieren. Error: (06/03/2014 10:27:40 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT) Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070005 fehlgeschlagen: Qualcomm Atheros Communications - Bluetooth Controller - Qualcomm Atheros AR3012 Bluetooth 4.0 + HS Error: (06/03/2014 10:27:38 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT) Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070005 fehlgeschlagen: Qualcomm Atheros Communications - Bluetooth Controller - Qualcomm Atheros AR3012 Bluetooth 4.0 + HS Error: (06/03/2014 10:06:17 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT) Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070003 fehlgeschlagen: Qualcomm Atheros Communications - Bluetooth Controller - Qualcomm Atheros AR3012 Bluetooth 4.0 + HS Error: (06/03/2014 09:55:15 AM) (Source: Service Control Manager) (EventID: 7030) (User: ) Description: Der Dienst "SW Update Service" ist als interaktiver Dienst gekennzeichnet. Das System wurde jedoch so konfiguriert, dass interaktive Dienste nicht möglich sind. Der Dienst wird möglicherweise nicht richtig funktionieren. Error: (06/03/2014 09:31:35 AM) (Source: DCOM) (EventID: 10001) (User: VERENA) Description: "C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.0.1119.516_x64__8wekyb3d8bbwe\LiveComm.exe" -ServerName:Microsoft.WindowsLive.Platform.Server31Microsoft.WindowsLive.Mail.AppXj3e9v0xw9sf8t58nqr15tqqb2yq4zsfg.mcaNicht verfügbarNicht verfügbar Error: (06/03/2014 09:31:35 AM) (Source: DCOM) (EventID: 10001) (User: VERENA) Description: "C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.0.1119.516_x64__8wekyb3d8bbwe\LiveComm.exe" -ServerName:Microsoft.WindowsLive.Platform.Server31Microsoft.WindowsLive.Mail.AppXj3e9v0xw9sf8t58nqr15tqqb2yq4zsfg.mcaNicht verfügbarNicht verfügbar Error: (06/03/2014 09:31:35 AM) (Source: DCOM) (EventID: 10001) (User: VERENA) Description: "C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.0.1119.516_x64__8wekyb3d8bbwe\LiveComm.exe" -ServerName:Microsoft.WindowsLive.Platform.Server31Microsoft.WindowsLive.Mail.AppXj3e9v0xw9sf8t58nqr15tqqb2yq4zsfg.mcaNicht verfügbarNicht verfügbar Error: (06/03/2014 09:29:24 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT) Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070005 fehlgeschlagen: Qualcomm Atheros Communications - Bluetooth Controller - Qualcomm Atheros AR3012 Bluetooth 4.0 + HS Microsoft Office Sessions: ========================= Error: (06/03/2014 10:50:36 AM) (Source: Perflib) (EventID: 1023) (User: ) Description: rdyboost4 Error: (06/03/2014 10:41:52 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: MsiExec.exe5.0.9200.163845010a60bMSVCR100.dll10.0.40219.14d5f0c22c000000500013157b8801cf7f078f4d0a59C:\Windows\syswow64\MsiExec.exeC:\Windows\SYSTEM32\MSVCR100.dlle875b5c0-eafa-11e3-be74-50b7c3555292 Error: (06/03/2014 10:36:49 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: igfxsrvc.exe8.15.10.341252e048aeigfxsrvc.exe8.15.10.341252e048aec00000050000000000021882b8c01cf7f06f64e4727C:\WINDOWS\system32\igfxsrvc.exeC:\WINDOWS\system32\igfxsrvc.exe33fb328c-eafa-11e3-be74-50b7c3555292 Error: (06/03/2014 10:36:49 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: igfxsrvc.exe8.15.10.341252e048aeigfxsrvc.exe8.15.10.341252e048aec000000500000000000218822e801cf7f06f61ccac7C:\WINDOWS\system32\igfxsrvc.exeC:\WINDOWS\system32\igfxsrvc.exe33c9cfd8-eafa-11e3-be74-50b7c3555292 Error: (06/03/2014 10:36:49 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: igfxsrvc.exe8.15.10.341252e048aeigfxsrvc.exe8.15.10.341252e048aec00000050000000000021882ed001cf7f06f5f32afeC:\WINDOWS\system32\igfxsrvc.exeC:\WINDOWS\system32\igfxsrvc.exe33a013fb-eafa-11e3-be74-50b7c3555292 Error: (06/03/2014 10:36:48 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: igfxsrvc.exe8.15.10.341252e048aeigfxsrvc.exe8.15.10.341252e048aec0000005000000000002188215bc01cf7f06f5df561fC:\WINDOWS\system32\igfxsrvc.exeC:\WINDOWS\system32\igfxsrvc.exe338c664f-eafa-11e3-be74-50b7c3555292 Error: (06/03/2014 10:36:48 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: igfxsrvc.exe8.15.10.341252e048aeigfxsrvc.exe8.15.10.341252e048aec00000050000000000021882167401cf7f06f5cba69aC:\WINDOWS\system32\igfxsrvc.exeC:\WINDOWS\system32\igfxsrvc.exe3378326c-eafa-11e3-be74-50b7c3555292 Error: (06/03/2014 10:36:48 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: igfxsrvc.exe8.15.10.341252e048aeigfxsrvc.exe8.15.10.341252e048aec0000005000000000002188270001cf7f06f5b8938bC:\WINDOWS\system32\igfxsrvc.exeC:\WINDOWS\system32\igfxsrvc.exe33651f66-eafa-11e3-be74-50b7c3555292 Error: (06/03/2014 10:36:48 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: igfxsrvc.exe8.15.10.341252e048aeigfxsrvc.exe8.15.10.341252e048aec00000050000000000021882ef001cf7f06f5a31e1dC:\WINDOWS\system32\igfxsrvc.exeC:\WINDOWS\system32\igfxsrvc.exe33520c57-eafa-11e3-be74-50b7c3555292 Error: (06/03/2014 10:36:48 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: igfxsrvc.exe8.15.10.341252e048aeigfxsrvc.exe8.15.10.341252e048aec00000050000000000021882cb001cf7f06f5900afcC:\WINDOWS\system32\igfxsrvc.exeC:\WINDOWS\system32\igfxsrvc.exe333c96e9-eafa-11e3-be74-50b7c3555292 ==================== Memory info =========================== Percentage of memory in use: 25% Total physical RAM: 8083.55 MB Available physical RAM: 5988.01 MB Total Pagefile: 12691.55 MB Available Pagefile: 10135.22 MB Total Virtual: 8192 MB Available Virtual: 8191.79 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:673.4 GB) (Free:631.19 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (Size: 699 GB) (Disk ID: 4F494D44) Partition: GPT Partition Type. ==================== End Of Log ============================ Ich hoffe, mit diesen Daten kann man nun was anfangen. Ich wäre sehr dankbar, wenn du mir sagen könntest, ob durch das Zurücksetzen nun soweit alles sauber ist, oder ob ich noch weitere Schritte unternehmen muss. |
05.06.2014, 09:03 | #5 |
/// the machine /// TB-Ausbilder | Windows 8.1: Trojaner - Hinweis durch Online-Banking Logs sind sauber
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
05.06.2014, 09:15 | #6 |
| Windows 8.1: Trojaner - Hinweis durch Online-Banking Vielen lieben Dank! |
05.06.2014, 19:32 | #7 |
/// the machine /// TB-Ausbilder | Windows 8.1: Trojaner - Hinweis durch Online-Banking Gern Geschehen
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
Themen zu Windows 8.1: Trojaner - Hinweis durch Online-Banking |
agent, bli, browser, computer, dll, e-banking, explorer, explorer.exe, file, flash player, google, helper.exe, infiziert, installation, laptop, microsoft, notebook, problem, registry, registry key, seite, setup, software, spybot, tracking cookie, trojaner, verbindung, werkseinstellungen, windows |