|
Log-Analyse und Auswertung: Regsvr32 Fehler beim jedem Windows-StartWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
15.06.2014, 06:45 | #1 |
| Regsvr32 Fehler beim jedem Windows-Start Hallo, dieses Problem habe ich inzwischen schon mehrmals in eurem Forum gefunden. Trotzdem ist es wohl besser, ich mache dafür einen extra Post auf. Bei jedem Neustart von Windows bekomme ich diese Fehlermeldung: Fehler beim Laden des Moduls: C:\ProgrammData\"" Zuvor hieß die Meldung: Fehler beim Laden des Moduls: C:\ProgrammData\OlinqUxrab.dat Die Datei OlinqUxrab.dat habe ich gelöscht. Nun kommt eben diese Fehlermeldung ohne Angabe des Dateinamens. Zeitgleich fingen auch die Probleme mit dem Internet Explorer an. Er friert mehrmals täglich ein und muss neu gestartet werden. FRST64.exe habe ich schon mal ausgeführt. Vielen Dank vorab schon für Eure Hilfe! |
15.06.2014, 07:17 | #2 |
/// the machine /// TB-Ausbilder | Regsvr32 Fehler beim jedem Windows-Start Hi,
__________________Logs bitte immer in den Thread posten. Zur Not aufteilen und mehrere Posts nutzen. Ich kann auf Arbeit keine Anhänge öffnen, danke. So funktioniert es: Posten in CODE-Tags Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert mir massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu gross für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
__________________ |
15.06.2014, 07:33 | #3 |
| Regsvr32 Fehler beim jedem Windows-Start Okay, hier nun die Logfiles direkt:
__________________FRST.txt Teil 1: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 12-06-2014 02 Ran by sabine (administrator) on SANI_LENOVO on 15-06-2014 07:23:32 Running from C:\Users\sabine\Software Platform: Windows 8.1 (X64) OS Language: German Standard Internet Explorer Version 11 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (Lenovo.) C:\Windows\System32\ibmpmsvc.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Microsoft Corporation) C:\Windows\System32\wlanext.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (Conexant Systems Inc.) C:\Windows\System32\CxAudMsg64.exe (Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe (Microsoft Corporation) C:\Windows\System32\dasHost.exe (Condusiv Technologies) C:\Program Files\Condusiv Technologies\ExpressCache\ExpressCache.exe (Lenovo) C:\Program Files (x86)\Lenovo\RapidBoot HDD Accelerator\FBService.exe (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe (LENOVO INCORPORATED.) C:\Program Files\Lenovo\SystemAgent\SystemAgentService.exe (Lenovo Group Limited) C:\Program Files\Lenovo\VIRTSCRL\lvvsst.exe (Nitro PDF Software) C:\Program Files\Common Files\Nitro\Pro\8.0\NitroPDFDriverService8x64.exe (Nalpeiron Ltd.) C:\Windows\SysWOW64\NLSSRV32.EXE (Lenovo) C:\Program Files (x86)\ThinkPad\Utilities\PWMDBSVC.exe (Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe (Samsung Electronics Co., Ltd.) C:\Windows\System32\spool\drivers\x64\3\NetFaxServer64.exe (Validity Sensors, Inc.) C:\Program Files\Lenovo Fingerprint Reader\ValBioService.exe (Validity Sensors, Inc.) C:\Windows\System32\valWBFPolicyService.exe (Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe (Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\micmute.exe (Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\tphkload.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe (Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe (Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe (Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe (Intel(R) Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe (LENOVO INCORPORATED.) C:\Program Files\Lenovo\QuickSnipService\QuickSnipService.exe (Lenovo Group Limited) C:\Program Files\Lenovo\SettingsDependency\SettingsService.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Lenovo) C:\Program Files\Lenovo\Lenovo Mobile Hotspot\LnvHotSpotSvc.exe () C:\Program Files (x86)\Lenovo\LocationAware\loctaskmgr.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Lenovo) C:\Program Files\Lenovo\QuickSnipService\QuickSnipInput.exe (Lenovo Group Limited) C:\Program Files\Lenovo\VIRTSCRL\virtscrl.exe (Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe (Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\tpnumlkd.exe (Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe (Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\tposd.exe (Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\shtctky.exe (Validity Sensors, Inc.) C:\Program Files\Lenovo Fingerprint Reader\SwipeMonitor.exe () C:\Program Files (x86)\Lenovo\LocationAware\lpdagent.exe (Intel Corporation) C:\Windows\System32\igfxtray.exe (Intel Corporation) C:\Windows\System32\igfxsrvc.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe (Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\extapsup.exe (Conexant Systems, Inc.) C:\Program Files\CONEXANT\cAudioFilterAgent\CAudioFilterAgent64.exe () C:\Program Files\CONEXANT\ForteConfig\fmapp.exe (Lenovo.) C:\Windows\System32\TpShocks.exe (Lenovo) C:\Program Files\Lenovo\Lenovo Mobile Hotspot\MobileHotspotclient.exe (Lenovo Corporation) C:\Program Files\Lenovo\Communications Utility\TpKnrres.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPLpr.exe (Vimicro) C:\Program Files (x86)\USB Camera\VM331STI.EXE (Lenovo) C:\Program Files (x86)\Lenovo\RapidBoot HDD Accelerator\FBConsole.exe () C:\Windows\Samsung\PanelMgr\SSMMgr.exe () C:\Windows\Samsung\PanelMgr\caller64.exe () C:\Windows\twain_32\Samsung\CLX3180\Scan2Pc.exe (Haufe-Lexware GmbH & Co. KG) C:\Program Files (x86)\Common Files\Lexware\Update Manager\LxUpdateManager.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe (Intel Corporation) C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe (CyberLink) C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe (Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [LenovoOptMouseUpdate] => C:\Program Files\Lenovo\HOTKEY\extapsup.exe [250976 2012-09-01] (Lenovo Group Limited) HKLM\...\Run: [BTMTrayAgent] => C:\Program Files (x86)\Intel\Bluetooth\btmshellex.dll [11733888 2012-12-03] (Motorola Solutions, Inc.) HKLM\...\Run: [SmartAudio] => C:\Program Files\CONEXANT\SAII\SACpl.exe [1647616 2012-06-13] (Conexant Systems, Inc.) HKLM\...\Run: [cAudioFilterAgent] => C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe [887968 2012-06-14] (Conexant Systems, Inc.) HKLM\...\Run: [ForteConfig] => C:\Program Files\Conexant\ForteConfig\fmapp.exe [49056 2010-10-26] () HKLM\...\Run: [TpShocks] => C:\WINDOWS\system32\TpShocks.exe [382248 2013-02-12] (Lenovo.) HKLM\...\Run: [LnvMobHotspotClient] => C:\Program Files\Lenovo\Lenovo Mobile Hotspot\MobileHotspotclient.exe [937976 2013-04-11] (Lenovo) HKLM\...\Run: [LENOVO.TPKNRRES] => C:\Program Files\Lenovo\Communications Utility\TPKNRRES.exe [594936 2013-04-15] (Lenovo Corporation) HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2809072 2014-02-24] (Synaptics Incorporated) HKLM-x32\...\Run: [331BigDog] => C:\Program Files (x86)\USB Camera\VM331STI.EXE [548864 2013-03-12] (Vimicro) HKLM-x32\...\Run: [IMSS] => C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe [133440 2012-07-19] (Intel Corporation) HKLM-x32\...\Run: [Fastboot] => C:\Program Files (x86)\Lenovo\RapidBoot HDD Accelerator\FBConsole.exe [738032 2013-08-08] (Lenovo) HKLM-x32\...\Run: [Download Protect] => C:\ProgramData\dlprotect.exe HKLM-x32\...\Run: [Samsung PanelMgr] => C:\Windows\Samsung\PanelMgr\SSMMgr.exe [618496 2010-06-07] () HKLM-x32\...\Run: [CLX3180_Scan2Pc] => C:\WINDOWS\Twain_32\Samsung\CLX3180\Scan2pc.exe [1990144 2011-04-29] () HKLM-x32\...\Run: [3180 Scan2PC] => C:\Windows\twain_32\Samsung\CLX3180\Scan2Pc.exe [1990144 2011-04-29] () HKLM-x32\...\Run: [LexwareInfoService] => C:\Program Files (x86)\Common Files\Lexware\Update Manager\LxUpdateManager.exe [189808 2011-07-31] (Haufe-Lexware GmbH & Co. KG) HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [737872 2014-06-11] (Avira Operations GmbH & Co. KG) HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated) Winlogon\Notify\igfxcui: C:\WINDOWS\system32\igfxdev.dll (Intel Corporation) HKU\S-1-5-21-1240990677-1578086025-3834589401-1001\...\RunOnce: [WAB Migrate] - C:\Program Files\Windows Mail\wab.exe [516608 2013-08-22] (Microsoft Corporation) HKU\S-1-5-21-1240990677-1578086025-3834589401-1002\...\Run: [OlinqUxrab] => regsvr32.exe " HKU\S-1-5-21-1240990677-1578086025-3834589401-1002\...\Run: [BrowserChoice] => C:\Windows\BrowserChoice\browserchoice.exe [86816 2013-08-22] (Microsoft Corporation) AppInit_DLLs: C:\WINDOWS\system32\nvinitx.dll => C:\WINDOWS\system32\nvinitx.dll [184048 2013-10-31] (NVIDIA Corporation) AppInit_DLLs-x32: C:\WINDOWS\SysWOW64\nvinit.dll => C:\WINDOWS\SysWOW64\nvinit.dll [156256 2013-10-31] (NVIDIA Corporation) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma Loader.lnk ShortcutTarget: Adobe Gamma Loader.lnk -> C:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.spiegel.de/ SearchScopes: HKLM - DefaultScope {533E4EE6-5ED5-4722-AF78-1A567593404A} URL = hxxp://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=dnldstr&cd=2XzuyEtN2Y1L1QzuyCtByC0CyCyC0C0CtByDtB0Dzz0C0CyEtN0D0Tzu0SyBtDyCtN1L2XzutBtFtBtFtCyEtFtCtAyBzytN1L1CzutCyD1B1P1R&cr=1192424154&ir= SearchScopes: HKLM - {533E4EE6-5ED5-4722-AF78-1A567593404A} URL = hxxp://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=dnldstr&cd=2XzuyEtN2Y1L1QzuyCtByC0CyCyC0C0CtByDtB0Dzz0C0CyEtN0D0Tzu0SyBtDyCtN1L2XzutBtFtBtFtCyEtFtCtAyBzytN1L1CzutCyD1B1P1R&cr=1192424154&ir= SearchScopes: HKLM-x32 - DefaultScope value is missing. SearchScopes: HKLM-x32 - {533E4EE6-5ED5-4722-AF78-1A567593404A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MALCJS SearchScopes: HKCU - DefaultScope {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = hxxp://www.trovi.com/Results.aspx?gd=&ctid=CT3323900&octid=EB_ORIGINAL_CTID&ISID=MC741C913-8C46-40BD-93EF-25595B1CE0AD&SearchSource=58&CUI=&UM=5&UP=SP2D21743C-58E9-4403-9DCD-795D1DBF9467&q={searchTerms}&SSPV= SearchScopes: HKCU - {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = hxxp://www.trovi.com/Results.aspx?gd=&ctid=CT3323900&octid=EB_ORIGINAL_CTID&ISID=MC741C913-8C46-40BD-93EF-25595B1CE0AD&SearchSource=58&CUI=&UM=5&UP=SP2D21743C-58E9-4403-9DCD-795D1DBF9467&q={searchTerms}&SSPV= SearchScopes: HKCU - {533E4EE6-5ED5-4722-AF78-1A567593404A} URL = BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll No File Tcpip\Parameters: [DhcpNameServer] 192.168.178.1 FireFox: ======== FF ProfilePath: C:\Users\sabine\AppData\Roaming\Mozilla\Firefox\Profiles\3o5axu3s.default FF Homepage: https://www.google.de/ FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation) FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin-x32: @nitropdf.com/NitroPDF - C:\Program Files (x86)\Nitro\Pro 8\npnitromozilla.dll (Nitro PDF) FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin HKCU: intel.com/AppUp - C:\Program Files (x86)\Intel\IntelAppStore\bin\npAppUp.dll (Intel) FF Plugin HKCU: intel.com/AppUpx64 - C:\Program Files (x86)\Intel\IntelAppStore\bin\npAppUp_x64.dll (Intel) FF user.js: detected! => C:\Users\sabine\AppData\Roaming\Mozilla\Firefox\Profiles\3o5axu3s.default\user.js FF SearchPlugin: C:\Users\sabine\AppData\Roaming\Mozilla\Firefox\Profiles\3o5axu3s.default\searchplugins\trovi-search.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml ==================== Services (Whitelisted) ================= R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [430160 2014-06-11] (Avira Operations GmbH & Co. KG) R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [430160 2014-06-11] (Avira Operations GmbH & Co. KG) R2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1039952 2014-06-11] (Avira Operations GmbH & Co. KG) S3 AVControlCenter; C:\Program Files\Lenovo\Communications Utility\AVControlCenter32.exe [148472 2013-04-15] (Lenovo Corporation) R2 ExpressCache; C:\Program Files\Condusiv Technologies\ExpressCache\ExpressCache.exe [107944 2013-01-08] (Condusiv Technologies) R2 FastbootService; C:\Program Files (x86)\Lenovo\RapidBoot HDD Accelerator\FBService.exe [140016 2013-08-08] (Lenovo) R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [129856 2012-07-19] (Intel Corporation) S3 intelsba; C:\Program Files\Intel\Intel(R) Small Business Advantage\Service\Intel.SmallBusinessAdvantage.WindowsService.exe [48832 2013-04-10] (Intel Corporation) R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-07-19] (Intel Corporation) R2 Lenovo QuickSnip Service; C:\Program Files\lenovo\QuickSnipService\QuickSnipService.exe [219976 2013-06-05] (LENOVO INCORPORATED.) R2 Lenovo Settings Service; C:\Program Files\Lenovo\SettingsDependency\SettingsService.exe [1628664 2013-02-06] (Lenovo Group Limited) R2 Lenovo System Agent Service; C:\Program Files\lenovo\SystemAgent\SystemAgentService.exe [562504 2013-06-05] (LENOVO INCORPORATED.) S3 LENOVO.TVTVCAM; C:\Program Files\Lenovo\Communications Utility\vcamsvc.exe [681464 2013-04-15] (Lenovo Corporation) R2 Lenovo.VIRTSCRLSVC; C:\Program Files\LENOVO\VIRTSCRL\lvvsst.exe [136288 2012-08-10] (Lenovo Group Limited) R2 LnvHotSpotSvc; C:\Program Files\Lenovo\Lenovo Mobile Hotspot\LnvHotSpotSvc.exe [465912 2013-04-11] (Lenovo) R2 LocationTaskManager; C:\Program Files (x86)\Lenovo\LocationAware\loctaskmgr.exe [463352 2013-04-19] () S3 LSCWinService; C:\Program Files\Lenovo\Lenovo Solution Center\App\LSCWinService.exe [1663880 2014-05-06] () S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [273136 2013-08-28] () R2 NitroDriverReadSpool8; C:\Program Files\Common Files\Nitro\Pro\8.0\NitroPDFDriverService8x64.exe [230408 2013-03-25] (Nitro PDF Software) R2 Samsung Network Fax Server; C:\WINDOWS\system32\spool\drivers\x64\3\NetFaxServer64.exe [229888 2011-04-28] (Samsung Electronics Co., Ltd.) [File not signed] S3 SUService; C:\Program Files (x86)\Lenovo\System Update\SUService.exe [24120 2014-02-21] () R2 ValBioService; C:\Program Files\Lenovo Fingerprint Reader\ValBioService.exe [22872 2013-10-28] (Validity Sensors, Inc.) R2 valWBFPolicyService; C:\Windows\System32\valWBFPolicyService.exe [40848 2013-10-28] (Validity Sensors, Inc.) S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347880 2014-05-31] (Microsoft Corporation) S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2014-05-31] (Microsoft Corporation) R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3378416 2013-08-28] (Intel® Corporation) ==================== Drivers (Whitelisted) ==================== S0 ADP80XX; C:\Windows\System32\drivers\ADP80XX.SYS [782176 2013-08-22] (PMC-Sierra) R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [112080 2014-06-11] (Avira Operations GmbH & Co. KG) R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [130584 2014-06-11] (Avira Operations GmbH & Co. KG) R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [28600 2013-12-09] (Avira Operations GmbH & Co. KG) U4 avnetflt; C:\Windows\system32\DRIVERS\avnetflt.sys [84720 2013-12-09] (Avira Operations GmbH & Co. KG) S3 bcmfn2; C:\Windows\System32\drivers\bcmfn2.sys [17624 2013-08-13] (Windows (R) Win 7 DDK provider) R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [226304 2014-03-18] (Microsoft Corporation) R3 btmhsf; C:\Windows\system32\DRIVERS\btmhsf.sys [1342848 2012-12-03] (Motorola Solutions, Inc.) S2 DgiVecp; C:\WINDOWS\system32\Drivers\DgiVecp.sys [53816 2009-07-13] (Samsung Electronics Co., Ltd.) R1 excfs; C:\Windows\System32\DRIVERS\excfs.sys [26024 2013-01-08] (Condusiv Technologies) R0 excsd; C:\Windows\System32\DRIVERS\excsd.sys [112552 2013-01-08] (Condusiv Technologies) S3 Fastboot; C:\Windows\System32\DRIVERS\fastboot.sys [66288 2013-08-08] (Windows (R) Win 7 DDK provider) S3 iaLPSSi_GPIO; C:\Windows\System32\drivers\iaLPSSi_GPIO.sys [24568 2013-07-30] (Intel Corporation) S3 iaLPSSi_I2C; C:\Windows\System32\drivers\iaLPSSi_I2C.sys [99320 2013-07-25] (Intel Corporation) S0 iaStorAV; C:\Windows\System32\drivers\iaStorAV.sys [651248 2013-08-10] (Intel Corporation) R0 intelpep; C:\Windows\System32\drivers\intelpep.sys [39768 2014-03-18] (Microsoft Corporation) S0 LSI_SAS3; C:\Windows\System32\drivers\lsi_sas3.sys [81760 2013-08-22] (LSI Corporation) R3 NdisVirtualBus; C:\Windows\System32\drivers\NdisVirtualBus.sys [16384 2013-08-22] (Microsoft Corporation) S3 netvsc; C:\Windows\system32\DRIVERS\netvsc63.sys [87040 2013-08-22] (Microsoft Corporation) R3 NETwNe64; C:\Windows\system32\DRIVERS\Netwew00.sys [3345376 2013-10-08] (Intel Corporation) S3 ReFS; C:\Windows\System32\Drivers\ReFS.sys [924504 2014-03-18] (Microsoft Corporation) R3 RSP2STOR; C:\Windows\system32\DRIVERS\RtsP2Stor.sys [288840 2013-05-16] (Realtek Semiconductor Corp.) S3 SerCx2; C:\Windows\System32\drivers\SerCx2.sys [146776 2014-03-18] (Microsoft Corporation) R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [31472 2014-02-24] (Synaptics Incorporated) S0 stornvme; C:\Windows\System32\drivers\stornvme.sys [57176 2014-03-18] (Microsoft Corporation) S3 SWIX64; C:\Program Files (x86)\Lenovo\System Update\tvsuhd64.sys [33856 2012-09-12] (Lenovo Group Limited) S3 UEFI; C:\Windows\System32\drivers\UEFI.sys [26976 2013-08-22] (Microsoft Corporation) R3 usb3Hub; C:\Windows\System32\drivers\usb3Hub.sys [47072 2012-11-29] (Windows (R) Win 7 DDK provider) R3 vm331avs; C:\Windows\System32\Drivers\vm331avs.sys [1045248 2013-03-01] (Vimicro Corporation) S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [123224 2014-05-31] (Microsoft Corporation) R0 Wof; C:\Windows\System32\Drivers\Wof.sys [157016 2014-05-31] (Microsoft Corporation) R3 XHCIPort; C:\Windows\System32\drivers\XHCIPort.sys [188896 2012-11-29] (Windows (R) Win 7 DDK provider) ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-06-15 07:23 - 2014-06-15 07:23 - 00000000 ____D () C:\FRST 2014-06-15 07:14 - 2014-06-15 07:14 - 00000000 ___SH () C:\DkHyperbootSync 2014-06-14 21:35 - 2014-06-14 21:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bluetooth Devices 2014-06-11 21:11 - 2014-06-12 04:10 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird 2014-06-11 20:22 - 2014-05-30 12:21 - 23414784 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll 2014-06-11 20:22 - 2014-05-30 11:45 - 02768384 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll 2014-06-11 20:22 - 2014-05-30 11:28 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll 2014-06-11 20:22 - 2014-05-30 11:20 - 00752640 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll 2014-06-11 20:22 - 2014-05-30 11:18 - 17271296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll 2014-06-11 20:22 - 2014-05-30 11:08 - 05782528 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll 2014-06-11 20:22 - 2014-05-30 11:06 - 00452096 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtmsft.dll 2014-06-11 20:22 - 2014-05-30 10:46 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll 2014-06-11 20:22 - 2014-05-30 10:44 - 00295424 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll 2014-06-11 20:22 - 2014-05-30 10:43 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesetup.dll 2014-06-11 20:22 - 2014-05-30 10:38 - 02179072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll 2014-06-11 20:22 - 2014-05-30 10:35 - 00608768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe 2014-06-11 20:22 - 2014-05-30 10:29 - 00631808 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll 2014-06-11 20:22 - 2014-05-30 10:27 - 00592896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll 2014-06-11 20:22 - 2014-05-30 10:23 - 02040832 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl 2014-06-11 20:22 - 2014-05-30 10:16 - 00368128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtmsft.dll 2014-06-11 20:22 - 2014-05-30 10:04 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll 2014-06-11 20:22 - 2014-05-30 10:02 - 00242688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll 2014-06-11 20:22 - 2014-05-30 09:56 - 04244992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll 2014-06-11 20:22 - 2014-05-30 09:56 - 02266112 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll 2014-06-11 20:22 - 2014-05-30 09:54 - 00526336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll 2014-06-11 20:22 - 2014-05-30 09:49 - 01964544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl 2014-06-11 20:22 - 2014-05-30 09:43 - 13522944 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll 2014-06-11 20:22 - 2014-05-30 09:40 - 11725312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll 2014-06-11 20:22 - 2014-05-30 09:30 - 01398272 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll 2014-06-11 20:22 - 2014-05-30 09:21 - 01790976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll 2014-06-11 20:22 - 2014-05-30 09:15 - 01143296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll 2014-06-11 20:22 - 2014-05-30 09:13 - 00846336 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll 2014-06-11 20:22 - 2014-05-30 09:13 - 00704512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll 2014-06-11 20:22 - 2014-02-06 13:30 - 00004096 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollectorres.dll 2014-06-11 20:22 - 2014-02-06 13:07 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll 2014-06-11 20:22 - 2014-02-06 13:06 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwproxystub.dll 2014-06-11 20:22 - 2014-02-06 12:56 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll 2014-06-11 20:22 - 2014-02-06 12:49 - 00139264 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieUnatt.exe 2014-06-11 20:22 - 2014-02-06 12:48 - 00111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollector.exe 2014-06-11 20:22 - 2014-02-06 12:17 - 00195584 _____ (Microsoft Corporation) C:\WINDOWS\system32\msrating.dll 2014-06-11 20:22 - 2014-02-06 12:00 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieetwproxystub.dll 2014-06-11 20:22 - 2014-02-06 11:52 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll 2014-06-11 20:22 - 2014-02-06 11:52 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iernonce.dll 2014-06-11 20:22 - 2014-02-06 11:47 - 00112128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieUnatt.exe 2014-06-11 20:22 - 2014-02-06 11:25 - 00164864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrating.dll 2014-06-11 20:14 - 2014-05-01 15:31 - 03048904 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcMon.exe 2014-06-11 20:14 - 2014-05-01 15:31 - 00055328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wpcfltr.sys 2014-06-11 20:14 - 2014-05-01 09:14 - 03118080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Wpc.dll 2014-06-11 20:14 - 2014-05-01 09:05 - 02861056 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebSync.dll 2014-06-11 20:14 - 2014-05-01 08:51 - 02344448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Wpc.dll 2014-06-11 20:14 - 2014-05-01 07:24 - 02834944 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpccpl.dll 2014-06-11 20:13 - 2014-05-10 05:46 - 02151424 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3.dll 2014-06-11 20:13 - 2014-05-10 05:22 - 01312256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3.dll 2014-06-11 20:13 - 2014-05-05 06:02 - 03360256 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll 2014-06-11 20:13 - 2014-05-03 09:14 - 00079872 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSReset.exe 2014-06-11 20:13 - 2014-05-03 06:21 - 00249344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll 2014-06-11 20:13 - 2014-05-03 06:07 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll 2014-06-11 20:13 - 2014-05-03 05:41 - 00921088 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll 2014-06-11 20:13 - 2014-05-03 05:38 - 00754688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll 2014-06-11 20:13 - 2014-04-30 06:43 - 01975296 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWrite.dll 2014-06-11 20:13 - 2014-04-30 06:26 - 01345536 _____ (Microsoft Corporation) C:\WINDOWS\system32\FntCache.dll 2014-06-11 20:13 - 2014-04-30 05:47 - 01509888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWrite.dll 2014-06-11 20:13 - 2014-04-03 09:59 - 02518872 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys 2014-06-11 20:13 - 2014-04-03 09:59 - 00428888 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS 2014-06-11 20:12 - 2014-05-19 08:31 - 00057856 _____ (Microsoft Corporation) C:\WINDOWS\system32\drvcfg.exe 2014-06-11 20:12 - 2014-05-19 08:21 - 00110592 _____ (Microsoft Corporation) C:\WINDOWS\system32\drvinst.exe 2014-06-11 20:12 - 2014-05-19 07:23 - 00098816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\drvinst.exe 2014-06-11 20:12 - 2014-05-09 01:06 - 00295424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ks.sys 2014-06-11 20:12 - 2014-04-30 13:16 - 01336648 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll 2014-06-11 20:12 - 2014-04-30 05:51 - 01064448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll 2014-06-01 13:23 - 2014-06-01 13:23 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MyPhoneExplorer 2014-06-01 12:31 - 2013-08-22 08:57 - 00002143 ___RS () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Browser Choice.lnk 2014-05-31 22:48 - 2014-05-31 22:48 - 00000000 ___RD () C:\WINDOWS\BrowserChoice 2014-05-31 22:47 - 2014-05-31 22:47 - 00000000 ____D () C:\WINDOWS\PCHEALTH 2014-05-31 22:47 - 2014-05-31 22:47 - 00000000 ____D () C:\Users\Default\AppData\Local\Microsoft Help 2014-05-31 22:47 - 2014-05-31 22:47 - 00000000 ____D () C:\Users\Default User\AppData\Local\Microsoft Help 2014-05-31 20:59 - 2014-06-15 06:55 - 00003946 _____ () C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{02C6F728-BF56-436A-A768-4B9C5F40F7D4} 2014-05-31 20:58 - 2014-05-31 20:58 - 00000000 __SHD () C:\Users\sabine\AppData\Local\EmieUserList 2014-05-31 20:58 - 2014-05-31 20:58 - 00000000 __SHD () C:\Users\sabine\AppData\Local\EmieSiteList 2014-05-31 20:57 - 2014-05-31 20:57 - 00000000 __SHD () C:\Recovery 2014-05-31 20:57 - 2014-05-31 20:49 - 00000000 ___DC () C:\WINDOWS\Panther 2014-05-31 20:56 - 2014-05-31 20:56 - 00308224 _____ (Microsoft Corporation) C:\WINDOWS\system32\wusa.exe 2014-05-31 20:56 - 2014-05-31 20:56 - 00305152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wusa.exe 2014-05-31 20:55 - 2014-05-31 20:55 - 02900992 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 02641920 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 02479616 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmSvc.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 02373784 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe 2014-05-31 20:55 - 2014-05-31 20:55 - 02331000 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 02317824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 02270208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 02141912 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 02133504 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 02088160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe 2014-05-31 20:55 - 2014-05-31 20:55 - 02030080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WsmSvc.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 02013016 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys 2014-05-31 20:55 - 2014-05-31 20:55 - 01843712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Display.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 01816576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Display.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 01779800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 01764864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 01679128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 01656832 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 01557848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys 2014-05-31 20:55 - 2014-05-31 20:55 - 01542768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 01351168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 01306624 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 01291200 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel32.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 01112536 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 01095488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 01063424 _____ (Microsoft Corporation) C:\WINDOWS\system32\IKEEXT.DLL 2014-05-31 20:55 - 2014-05-31 20:55 - 01036288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kernel32.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 01015808 _____ (Microsoft Corporation) C:\WINDOWS\system32\aclui.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00950784 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgent.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00939520 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00924160 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00887296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aclui.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00836096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00834560 _____ (Microsoft Corporation) C:\WINDOWS\system32\netlogon.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00827392 _____ (Microsoft Corporation) C:\WINDOWS\system32\BFE.DLL 2014-05-31 20:55 - 2014-05-31 20:55 - 00800256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReAgent.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00755712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00717312 _____ (Microsoft Corporation) C:\WINDOWS\system32\nshwfp.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00688640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netlogon.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00669696 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasapi32.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00655360 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsapi.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00621568 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAgent.exe 2014-05-31 20:55 - 2014-05-31 20:55 - 00605184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasapi32.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00567296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nshwfp.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00542208 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.Printing.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00518552 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00512000 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidprov.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00494592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dnsapi.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00488280 _____ (Microsoft Corporation) C:\WINDOWS\system32\netcfgx.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00467800 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS 2014-05-31 20:55 - 2014-05-31 20:55 - 00462336 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlangpui.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00412672 _____ (Microsoft Corporation) C:\WINDOWS\system32\FWPUCLNT.DLL 2014-05-31 20:55 - 2014-05-31 20:55 - 00406912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00402432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Graphics.Printing.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00390488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netcfgx.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00387210 _____ () C:\WINDOWS\system32\ApnDatabase.xml 2014-05-31 20:55 - 2014-05-31 20:55 - 00386560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlangpui.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00379224 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys 2014-05-31 20:55 - 2014-05-31 20:55 - 00376152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys 2014-05-31 20:55 - 2014-05-31 20:55 - 00360512 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfreadwrite.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00356864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlidprov.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00356848 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcomp.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00355832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfreadwrite.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00325632 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationApi.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00324096 _____ (Microsoft Corporation) C:\WINDOWS\system32\SessEnv.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00299008 _____ (Microsoft Corporation) C:\WINDOWS\system32\pdh.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00298496 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSDMon.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00291840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Sensors.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00283648 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb10.sys 2014-05-31 20:55 - 2014-05-31 20:55 - 00280576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SessEnv.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00274944 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmWmiPl.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00271872 _____ (Microsoft Corporation) C:\WINDOWS\system32\spp.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00264192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FWPUCLNT.DLL 2014-05-31 20:55 - 2014-05-31 20:55 - 00262656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LocationApi.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00254976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pdh.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00254464 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsrslvr.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00252928 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00247296 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsApi.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00226304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Sensors.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00222720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\spp.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00222720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dcomp.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00220160 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00212992 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdd.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00201216 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReInfo.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00197632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00192000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Scanners.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00186368 _____ (Microsoft Corporation) C:\WINDOWS\system32\dafWfdProvider.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00172544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReInfo.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00171008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SensorsApi.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00160768 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxAllUserStore.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00157016 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wof.sys 2014-05-31 20:55 - 2014-05-31 20:55 - 00151040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Scanners.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxdav.sys 2014-05-31 20:55 - 2014-05-31 20:55 - 00139776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxAllUserStore.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00136024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wfplwfs.sys 2014-05-31 20:55 - 2014-05-31 20:55 - 00134144 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dfsc.sys 2014-05-31 20:55 - 2014-05-31 20:55 - 00115200 _____ (Microsoft Corporation) C:\WINDOWS\system32\umpnpmgr.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00115200 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevPropMgr.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00113648 _____ (Microsoft Corporation) C:\WINDOWS\system32\userenv.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00111616 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidclass.sys 2014-05-31 20:55 - 2014-05-31 20:55 - 00102912 _____ (Microsoft Corporation) C:\WINDOWS\system32\davclnt.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00094016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\userenv.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00086016 _____ (Microsoft Corporation) C:\WINDOWS\system32\RMapi.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\davclnt.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\sxproxy.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00079360 _____ (Microsoft Corporation) C:\WINDOWS\system32\w32tm.exe 2014-05-31 20:55 - 2014-05-31 20:55 - 00079360 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\IPMIDrv.sys 2014-05-31 20:55 - 2014-05-31 20:55 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\w32tm.exe 2014-05-31 20:55 - 2014-05-31 20:55 - 00069120 _____ (Microsoft Corporation) C:\WINDOWS\system32\l2gpstore.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\l2gpstore.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpipreg.sys 2014-05-31 20:55 - 2014-05-31 20:55 - 00040448 _____ (Microsoft Corporation) C:\WINDOWS\system32\SetNetworkLocation.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sxproxy.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00033280 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidusb.sys 2014-05-31 20:55 - 2014-05-31 20:55 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredentialMigrationHandler.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredentialMigrationHandler.dll 2014-05-31 20:54 - 2014-05-31 20:54 - 03464192 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll 2014-05-31 20:54 - 2014-05-31 20:54 - 01705472 _____ (Microsoft Corporation) C:\WINDOWS\system32\wucltux.dll 2014-05-31 20:54 - 2014-05-31 20:54 - 01054208 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.appcore.dll 2014-05-31 20:54 - 2014-05-31 20:54 - 00828928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.appcore.dll 2014-05-31 20:54 - 2014-05-31 20:54 - 00827392 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll 2014-05-31 20:54 - 2014-05-31 20:54 - 00666624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll 2014-05-31 20:54 - 2014-05-31 20:54 - 00555736 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.appcore.dll 2014-05-31 20:54 - 2014-05-31 20:54 - 00419928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.appcore.dll 2014-05-31 20:54 - 2014-05-31 20:54 - 00381440 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUSettingsProvider.dll 2014-05-31 20:54 - 2014-05-31 20:54 - 00201728 _____ (Microsoft Corporation) C:\WINDOWS\system32\ubpm.dll 2014-05-31 20:54 - 2014-05-31 20:54 - 00190976 _____ (Microsoft Corporation) C:\WINDOWS\system32\storewuauth.dll 2014-05-31 20:54 - 2014-05-31 20:54 - 00137728 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuwebv.dll 2014-05-31 20:54 - 2014-05-31 20:54 - 00123904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuwebv.dll 2014-05-31 20:54 - 2014-05-31 20:54 - 00093696 _____ (Microsoft Corporation) C:\WINDOWS\system32\wudriver.dll 2014-05-31 20:54 - 2014-05-31 20:54 - 00086688 _____ (Microsoft Corporation) C:\WINDOWS\system32\mrt_map.dll 2014-05-31 20:54 - 2014-05-31 20:54 - 00080896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wudriver.dll 2014-05-31 20:54 - 2014-05-31 20:54 - 00080032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mrt_map.dll 2014-05-31 20:54 - 2014-05-31 20:54 - 00056320 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups.dll 2014-05-31 20:54 - 2014-05-31 20:54 - 00054776 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe 2014-05-31 20:54 - 2014-05-31 20:54 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapp.exe 2014-05-31 20:54 - 2014-05-31 20:54 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapp.exe 2014-05-31 20:54 - 2014-05-31 20:54 - 00028320 _____ (Microsoft Corporation) C:\WINDOWS\system32\mrt100.dll 2014-05-31 20:54 - 2014-05-31 20:54 - 00026784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mrt100.dll 2014-05-31 20:54 - 2014-05-31 20:54 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wups.dll 2014-05-31 20:53 - 2014-05-31 20:53 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb 2014-05-31 20:53 - 2014-05-31 20:53 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb 2014-05-31 20:53 - 2014-05-31 20:53 - 00257880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdFilter.sys 2014-05-31 20:53 - 2014-05-31 20:53 - 00123224 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdNisDrv.sys 2014-05-31 20:53 - 2014-05-31 20:53 - 00035856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdBoot.sys 2014-05-31 20:52 - 2014-05-31 20:52 - 21268952 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 18755672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 16872448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 13287936 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 12711424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 11792384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 08652800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 07425368 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe 2014-05-31 20:52 - 2014-05-31 20:52 - 07173120 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 06645248 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 05833216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Search.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 05774848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 05104640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 04269056 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncEngine.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 04190720 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys 2014-05-31 20:52 - 2014-05-31 20:52 - 02688000 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 02144984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 02140888 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 02124840 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d9.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 02100736 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlowUI.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 01797896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d9.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 01584128 _____ (Microsoft Corporation) C:\WINDOWS\system32\workfolderssvc.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 01527296 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 01466856 _____ (Microsoft Corporation) C:\WINDOWS\system32\propsys.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 01436160 _____ (Microsoft Corporation) C:\WINDOWS\system32\VSSVC.exe 2014-05-31 20:52 - 2014-05-31 20:52 - 01411584 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 01403856 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 01379064 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpmde.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 01308160 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpsvc.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 01287168 _____ (Microsoft Corporation) C:\WINDOWS\system32\mispace.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 01230336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 01222656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Streaming.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 01209616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmde.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 01200288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\propsys.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 01200128 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthport.sys 2014-05-31 20:52 - 2014-05-31 20:52 - 01126912 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFolder.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 01057280 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdvidcrl.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 01029120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mispace.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 01025024 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00982016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Streaming.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00955904 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00918528 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00888320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00881616 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00872448 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDrive.exe 2014-05-31 20:52 - 2014-05-31 20:52 - 00855552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdvidcrl.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00836608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchFolder.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00834048 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00805376 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00765408 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00761856 _____ (Microsoft Corporation) C:\WINDOWS\system32\WorkfoldersControl.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00731648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\adtschema.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00731648 _____ (Microsoft Corporation) C:\WINDOWS\system32\adtschema.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00721408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveTelemetry.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00718336 _____ (Microsoft Corporation) C:\WINDOWS\system32\swprv.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00707048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00677376 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys 2014-05-31 20:52 - 2014-05-31 20:52 - 00669856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00629760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmCoreR.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00609448 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00589656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fvevol.sys 2014-05-31 20:52 - 2014-05-31 20:52 - 00565536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys 2014-05-31 20:52 - 2014-05-31 20:52 - 00563200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\afd.sys 2014-05-31 20:52 - 2014-05-31 20:52 - 00518544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00491744 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00491520 _____ (Microsoft Corporation) C:\WINDOWS\system32\GeofenceMonitorService.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00486912 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv 2014-05-31 20:52 - 2014-05-31 20:52 - 00467968 _____ (Microsoft Corporation) C:\WINDOWS\system32\srcore.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00467496 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00463256 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00462336 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsGdiConverter.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00449536 _____ (Microsoft Corporation) C:\WINDOWS\system32\defragsvc.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00443904 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansec.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00443904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\nwifi.sys 2014-05-31 20:52 - 2014-05-31 20:52 - 00426496 _____ (Microsoft Corporation) C:\WINDOWS\system32\clusapi.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00407016 _____ (Microsoft Corporation) C:\WINDOWS\system32\services.exe 2014-05-31 20:52 - 2014-05-31 20:52 - 00406504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00402432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys 2014-05-31 20:52 - 2014-05-31 20:52 - 00387896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00384856 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spaceport.sys 2014-05-31 20:52 - 2014-05-31 20:52 - 00372568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storport.sys 2014-05-31 20:52 - 2014-05-31 20:52 - 00370176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv 2014-05-31 20:52 - 2014-05-31 20:52 - 00370176 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanmsm.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00364640 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00360792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fltMgr.sys 2014-05-31 20:52 - 2014-05-31 20:52 - 00357376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GeofenceMonitorService.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00337408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsGdiConverter.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00337240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Classpnp.sys 2014-05-31 20:52 - 2014-05-31 20:52 - 00335872 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDEServer.exe 2014-05-31 20:52 - 2014-05-31 20:52 - 00326024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00324888 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFCaptureEngine.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00323072 _____ (Microsoft Corporation) C:\WINDOWS\system32\srvsvc.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00313344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\clusapi.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00310616 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\volsnap.sys 2014-05-31 20:52 - 2014-05-31 20:52 - 00307304 _____ (Microsoft Corporation) C:\WINDOWS\system32\wintrust.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00305768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00300544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanmsm.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00296960 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanapi.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00285144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFCaptureEngine.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00281600 _____ (Microsoft Corporation) C:\WINDOWS\system32\resutils.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00275800 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msiscsi.sys 2014-05-31 20:52 - 2014-05-31 20:52 - 00271872 _____ (Microsoft Corporation) C:\WINDOWS\system32\rstrui.exe 2014-05-31 20:52 - 2014-05-31 20:52 - 00263424 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlows.exe 2014-05-31 20:52 - 2014-05-31 20:52 - 00250368 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpencom.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00246272 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srvnet.sys 2014-05-31 20:52 - 2014-05-31 20:52 - 00244880 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe 2014-05-31 20:52 - 2014-05-31 20:52 - 00233912 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00230808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wintrust.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanapi.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00219136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\resutils.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00209920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpencom.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00206848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys 2014-05-31 20:52 - 2014-05-31 20:52 - 00201920 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVideoDSP.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00201216 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00191488 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpchttp.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00186880 _____ (Microsoft Corporation) C:\WINDOWS\system32\WorkFoldersShell.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00180056 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys 2014-05-31 20:52 - 2014-05-31 20:52 - 00178184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVideoDSP.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00144384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpchttp.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00143872 _____ (Microsoft Corporation) C:\WINDOWS\system32\BootMenuUX.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00135168 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscsvc.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00130144 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpapi.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00125496 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmapi.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00111528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gpapi.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00098584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmapi.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00077312 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hdaudbus.sys 2014-05-31 20:52 - 2014-05-31 20:52 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\system32\srclient.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsgqec.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\srclient.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00055296 _____ (Microsoft Corporation) C:\WINDOWS\system32\energyprov.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tsgqec.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00047616 _____ (Microsoft Corporation) C:\WINDOWS\system32\tlscsp.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00046592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tlscsp.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Shell.Search.UriHandler.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Shell.Search.UriHandler.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00032600 _____ (Microsoft Corporation) C:\WINDOWS\system32\ploptin.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00028408 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfpmp.exe 2014-05-31 20:52 - 2014-05-31 20:52 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d8thk.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanhlp.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanhlp.dll 2014-05-31 20:51 - 2014-05-31 20:51 - 00262144 _____ () C:\WINDOWS\system32\config\userdiff 2014-05-31 20:49 - 2014-05-31 20:49 - 00001465 _____ () C:\Users\sabine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2014-05-31 20:48 - 2014-05-31 20:48 - 00000020 ___SH () C:\Users\sabine\ntuser.ini 2014-05-31 20:48 - 2014-05-31 20:48 - 00000000 ____D () C:\WINDOWS\SysWOW64\XPSViewer 2014-05-31 20:48 - 2014-05-31 20:48 - 00000000 ____D () C:\Program Files\Reference Assemblies 2014-05-31 20:48 - 2014-05-31 20:48 - 00000000 ____D () C:\Program Files\MSBuild 2014-05-31 20:48 - 2014-05-31 20:48 - 00000000 ____D () C:\Program Files (x86)\Reference Assemblies 2014-05-31 20:48 - 2014-05-31 20:48 - 00000000 ____D () C:\Program Files (x86)\MSBuild 2014-05-31 20:48 - 2013-08-03 06:48 - 01166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll 2014-05-31 20:48 - 2013-08-03 06:48 - 00124112 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll 2014-05-31 20:48 - 2013-08-03 06:48 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe 2014-05-31 20:48 - 2013-08-03 06:41 - 00778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll 2014-05-31 20:48 - 2013-08-03 06:41 - 00102608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll 2014-05-31 20:48 - 2013-08-03 06:41 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe 2014-05-31 20:29 - 2014-05-31 20:29 - 00000000 _SHDL () C:\Users\Default\Vorlagen 2014-05-31 20:29 - 2014-05-31 20:29 - 00000000 _SHDL () C:\Users\Default\Startmenü 2014-05-31 20:29 - 2014-05-31 20:29 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung 2014-05-31 20:29 - 2014-05-31 20:29 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen 2014-05-31 20:29 - 2014-05-31 20:29 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien 2014-05-31 20:29 - 2014-05-31 20:29 - 00000000 _SHDL () C:\Users\Default\Druckumgebung 2014-05-31 20:29 - 2014-05-31 20:29 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik 2014-05-31 20:29 - 2014-05-31 20:29 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder 2014-05-31 20:29 - 2014-05-31 20:29 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-05-31 20:29 - 2014-05-31 20:29 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf 2014-05-31 20:29 - 2014-05-31 20:29 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten 2014-05-31 20:29 - 2014-05-31 20:29 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten 2014-05-31 20:29 - 2014-05-31 20:29 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik 2014-05-31 20:29 - 2014-05-31 20:29 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder 2014-05-31 20:29 - 2014-05-31 20:29 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-05-31 20:29 - 2014-05-31 20:29 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf 2014-05-31 20:29 - 2014-05-31 20:29 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten 2014-05-31 20:28 - 2014-05-31 20:28 - 00022960 _____ () C:\WINDOWS\system32\emptyregdb.dat 2014-05-31 20:24 - 2014-05-31 20:24 - 00000020 ___SH () C:\Users\UpdatusUser\ntuser.ini 2014-05-31 20:15 - 2014-05-31 20:15 - 00001547 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk 2014-05-31 20:15 - 2014-05-31 20:15 - 00000000 ____D () C:\Users\Default\AppData\Roaming\Macromedia 2014-05-31 20:15 - 2014-05-31 20:15 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\Macromedia 2014-05-31 20:10 - 2014-05-31 20:10 - 00000000 ____D () C:\WINDOWS\system32\config\bbimigrate 2014-05-31 20:08 - 2014-06-15 07:23 - 00000000 ____D () C:\Users\sabine\AppData\Local\Temp 2014-05-31 20:08 - 2014-06-13 19:48 - 00000000 ____D () C:\Users\UpdatusUser\AppData\Local\Temp 2014-05-31 20:08 - 2014-05-31 20:48 - 00000000 ____D () C:\Users\sabine 2014-05-31 20:08 - 2014-05-31 20:10 - 00000000 ___RD () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2014-05-31 20:08 - 2014-05-31 20:10 - 00000000 ___RD () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility 2014-05-31 20:08 - 2014-05-31 20:10 - 00000000 ___RD () C:\Users\sabine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2014-05-31 20:08 - 2014-05-31 20:10 - 00000000 ___RD () C:\Users\sabine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility 2014-05-31 20:08 - 2014-05-31 20:08 - 00000000 _SHDL () C:\Users\UpdatusUser\Vorlagen 2014-05-31 20:08 - 2014-05-31 20:08 - 00000000 _SHDL () C:\Users\UpdatusUser\Startmenü 2014-05-31 20:08 - 2014-05-31 20:08 - 00000000 _SHDL () C:\Users\UpdatusUser\Netzwerkumgebung 2014-05-31 20:08 - 2014-05-31 20:08 - 00000000 _SHDL () C:\Users\UpdatusUser\Lokale Einstellungen 2014-05-31 20:08 - 2014-05-31 20:08 - 00000000 _SHDL () C:\Users\UpdatusUser\Eigene Dateien 2014-05-31 20:08 - 2014-05-31 20:08 - 00000000 _SHDL () C:\Users\UpdatusUser\Druckumgebung 2014-05-31 20:08 - 2014-05-31 20:08 - 00000000 _SHDL () C:\Users\UpdatusUser\Documents\Eigene Musik 2014-05-31 20:08 - 2014-05-31 20:08 - 00000000 _SHDL () C:\Users\UpdatusUser\Documents\Eigene Bilder 2014-05-31 20:08 - 2014-05-31 20:08 - 00000000 _SHDL () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-05-31 20:08 - 2014-05-31 20:08 - 00000000 _SHDL () C:\Users\UpdatusUser\AppData\Local\Verlauf 2014-05-31 20:08 - 2014-05-31 20:08 - 00000000 _SHDL () C:\Users\UpdatusUser\AppData\Local\Anwendungsdaten 2014-05-31 20:08 - 2014-05-31 20:08 - 00000000 _SHDL () C:\Users\UpdatusUser\Anwendungsdaten 2014-05-31 20:08 - 2014-05-31 20:08 - 00000000 _SHDL () C:\Users\sabine\Vorlagen 2014-05-31 20:08 - 2014-05-31 20:08 - 00000000 _SHDL () C:\Users\sabine\Startmenü 2014-05-31 20:08 - 2014-05-31 20:08 - 00000000 _SHDL () C:\Users\sabine\Netzwerkumgebung 2014-05-31 20:08 - 2014-05-31 20:08 - 00000000 _SHDL () C:\Users\sabine\Lokale Einstellungen 2014-05-31 20:08 - 2014-05-31 20:08 - 00000000 _SHDL () C:\Users\sabine\Eigene Dateien 2014-05-31 20:08 - 2014-05-31 20:08 - 00000000 _SHDL () C:\Users\sabine\Druckumgebung 2014-05-31 20:08 - 2014-05-31 20:08 - 00000000 _SHDL () C:\Users\sabine\Documents\Eigene Musik 2014-05-31 20:08 - 2014-05-31 20:08 - 00000000 _SHDL () C:\Users\sabine\Documents\Eigene Bilder 2014-05-31 20:08 - 2014-05-31 20:08 - 00000000 _SHDL () C:\Users\sabine\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-05-31 20:08 - 2014-05-31 20:08 - 00000000 _SHDL () C:\Users\sabine\AppData\Local\Verlauf 2014-05-31 20:08 - 2014-05-31 20:08 - 00000000 _SHDL () C:\Users\sabine\AppData\Local\Anwendungsdaten 2014-05-31 20:08 - 2014-05-31 20:08 - 00000000 _SHDL () C:\Users\sabine\Anwendungsdaten 2014-05-31 20:08 - 2014-03-18 12:11 - 00000369 _____ () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk 2014-05-31 20:08 - 2014-03-18 12:11 - 00000369 _____ () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk 2014-05-31 20:08 - 2014-03-18 12:11 - 00000369 _____ () C:\Users\sabine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk 2014-05-31 20:08 - 2014-03-18 12:11 - 00000369 _____ () C:\Users\sabine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk 2014-05-31 20:08 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2014-05-31 20:08 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\sabine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2014-05-31 20:08 - 2013-08-22 17:36 - 00000000 ____D () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance 2014-05-31 20:08 - 2013-08-22 17:36 - 00000000 ____D () C:\Users\sabine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance 2014-05-31 20:07 - 2014-05-31 20:28 - 00032388 _____ () C:\WINDOWS\diagwrn.xml 2014-05-31 20:07 - 2014-05-31 20:28 - 00032388 _____ () C:\WINDOWS\diagerr.xml 2014-05-31 20:02 - 2014-05-31 20:02 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_Kernel_iBtFltCoex_01009.Wdf 2014-05-31 20:02 - 2014-05-31 20:02 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_Kernel_dc3d_01011.Wdf 2014-05-31 20:02 - 2014-05-31 20:02 - 00000000 ____D () C:\Program Files (x86)\USB Camera 2014-05-31 20:01 - 2014-05-31 20:18 - 00000000 ____D () C:\WINDOWS\SysWOW64\NV 2014-05-31 20:01 - 2014-05-31 20:18 - 00000000 ____D () C:\WINDOWS\system32\NV 2014-05-31 20:01 - 2014-05-31 20:13 - 00000000 ____D () C:\ProgramData\NVIDIA 2014-05-31 20:01 - 2014-05-31 20:13 - 00000000 ____D () C:\Program Files\CONEXANT 2014-05-31 20:01 - 2014-05-31 20:13 - 00000000 ____D () C:\Program Files (x86)\Intel 2014-05-31 20:01 - 2014-05-31 20:01 - 00000264 _____ () C:\WINDOWS\Tasks\Synaptics TouchPad Enhancements.job 2014-05-31 20:01 - 2014-05-31 20:01 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_Kernel_SynTP_01011.Wdf 2014-05-31 20:01 - 2014-05-31 20:01 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_Kernel_Smb_driver_Intel_01011.Wdf 2014-05-31 20:01 - 2014-05-31 20:01 - 00000000 ____D () C:\Program Files\Synaptics 2014-05-31 20:01 - 2014-01-25 02:23 - 00064000 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.DLL 2014-05-31 20:01 - 2014-01-25 02:23 - 00060416 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.DLL 2014-05-31 20:00 - 2014-06-15 07:05 - 01261314 _____ () C:\WINDOWS\WindowsUpdate.log 2014-05-31 20:00 - 2014-05-31 20:13 - 00000000 ____D () C:\Program Files\NVIDIA Corporation 2014-05-31 20:00 - 2014-05-31 20:13 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation 2014-05-31 20:00 - 2014-05-31 20:00 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation 2014-05-31 20:00 - 2013-10-29 01:39 - 06610720 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll 2014-05-31 20:00 - 2013-10-29 01:39 - 03477280 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc64.dll 2014-05-31 20:00 - 2013-10-29 01:38 - 02559776 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvcr.dll 2014-05-31 20:00 - 2013-10-29 01:38 - 01042720 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshext.dll 2014-05-31 20:00 - 2013-10-29 01:38 - 00920864 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe 2014-05-31 20:00 - 2013-10-29 01:38 - 00580384 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\oemdspif.dll 2014-05-31 20:00 - 2013-10-29 01:38 - 00219424 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmctray.dll 2014-05-31 20:00 - 2013-10-29 01:38 - 00067072 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshextr.dll 2014-05-31 20:00 - 2013-10-29 01:38 - 00063776 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvshext.dll 2014-05-31 20:00 - 2013-10-25 13:44 - 03435888 _____ () C:\WINDOWS\system32\nvcoproc.bin 2014-05-31 19:20 - 2014-05-31 20:28 - 00006611 _____ () C:\WINDOWS\comsetup.log 2014-05-31 13:14 - 2014-06-01 12:41 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2014-05-31 08:07 - 2014-06-11 20:37 - 00000000 ____D () C:\Program Files\003 2014-05-30 16:46 - 2014-05-30 16:46 - 00000000 ___SD () C:\Users\sabine\Documents\Meine Datenquellen 2014-05-27 20:57 - 2014-05-27 20:59 - 00000000 ____D () C:\Program Files\RrFilter 2014-05-27 20:56 - 2014-05-30 07:17 - 00000000 ____D () C:\Program Files (x86)\VideoLAN 2014-05-27 20:55 - 2014-06-11 20:37 - 00000000 ____D () C:\Program Files\002 2014-05-27 20:54 - 2014-05-31 08:18 - 00000000 ____D () C:\Users\sabine\AppData\Roaming\Systweak 2014-05-27 20:54 - 2013-12-13 17:53 - 00019544 _____ (System Speedup) C:\WINDOWS\system32\roboot64.exe |
15.06.2014, 07:34 | #4 |
| Regsvr32 Fehler beim jedem Windows-Start FRST.txt Teil 2: Code:
ATTFilter ==================== One Month Modified Files and Folders ======= 2014-06-15 07:23 - 2014-06-15 07:23 - 00000000 ____D () C:\FRST 2014-06-15 07:23 - 2014-05-31 20:08 - 00000000 ____D () C:\Users\sabine\AppData\Local\Temp 2014-06-15 07:23 - 2013-12-06 16:56 - 00000000 ____D () C:\Users\sabine\Software 2014-06-15 07:14 - 2014-06-15 07:14 - 00000000 ___SH () C:\DkHyperbootSync 2014-06-15 07:05 - 2014-05-31 20:00 - 01261314 _____ () C:\WINDOWS\WindowsUpdate.log 2014-06-15 07:03 - 2013-10-12 15:28 - 00003600 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1240990677-1578086025-3834589401-1002 2014-06-15 07:02 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\sru 2014-06-15 07:02 - 2013-08-22 16:46 - 00337478 _____ () C:\WINDOWS\setupact.log 2014-06-15 06:55 - 2014-05-31 20:59 - 00003946 _____ () C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{02C6F728-BF56-436A-A768-4B9C5F40F7D4} 2014-06-15 06:52 - 2013-10-11 18:04 - 00000377 _____ () C:\Users\sabine\AppData\Local\RegisteredPackageInformation.xml 2014-06-14 21:40 - 2014-03-18 12:03 - 01776918 _____ () C:\WINDOWS\system32\PerfStringBackup.INI 2014-06-14 21:40 - 2014-03-18 11:25 - 00765582 _____ () C:\WINDOWS\system32\perfh007.dat 2014-06-14 21:40 - 2014-03-18 11:25 - 00159366 _____ () C:\WINDOWS\system32\perfc007.dat 2014-06-14 21:37 - 2013-10-11 18:04 - 00000000 ____D () C:\Users\sabine\AppData\Roaming\Nitro PDF 2014-06-14 21:35 - 2014-06-14 21:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bluetooth Devices 2014-06-14 21:35 - 2013-08-22 16:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT 2014-06-14 21:34 - 2013-12-06 17:22 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service 2014-06-14 19:35 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\AppReadiness 2014-06-14 17:55 - 2013-12-12 21:46 - 00000000 ____D () C:\Users\sabine\Haus Reichshofstraße 2014-06-13 19:48 - 2014-05-31 20:08 - 00000000 ____D () C:\Users\UpdatusUser\AppData\Local\Temp 2014-06-12 07:02 - 2013-12-12 21:46 - 00000000 ____D () C:\Users\sabine\Dies&Das 2014-06-12 04:10 - 2014-06-11 21:11 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird 2014-06-11 21:09 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\rescache 2014-06-11 20:51 - 2013-08-22 15:25 - 00262144 ___SH () C:\WINDOWS\system32\config\BBI 2014-06-11 20:50 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\WinStore 2014-06-11 20:37 - 2014-05-31 08:07 - 00000000 ____D () C:\Program Files\003 2014-06-11 20:37 - 2014-05-27 20:55 - 00000000 ____D () C:\Program Files\002 2014-06-11 20:25 - 2013-12-16 16:59 - 00000000 ____D () C:\ProgramData\Microsoft Help 2014-06-11 20:25 - 2012-07-26 09:59 - 00000000 ____D () C:\WINDOWS\CbsTemp 2014-06-11 20:24 - 2013-12-06 17:59 - 00000000 ____D () C:\WINDOWS\system32\MRT 2014-06-11 20:23 - 2013-12-06 17:59 - 95414520 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe 2014-06-11 20:23 - 2013-08-22 17:36 - 00000000 ___RD () C:\WINDOWS\ToastData 2014-06-11 20:23 - 2013-08-22 15:25 - 00262144 ___SH () C:\WINDOWS\system32\config\ELAM 2014-06-11 19:49 - 2013-12-13 19:09 - 00130584 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avipbb.sys 2014-06-11 19:49 - 2013-12-13 19:09 - 00112080 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avgntflt.sys 2014-06-01 14:16 - 2013-12-13 20:19 - 00000000 ____D () C:\Users\sabine\AppData\Roaming\MyPhoneExplorer 2014-06-01 13:23 - 2014-06-01 13:23 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MyPhoneExplorer 2014-06-01 13:23 - 2013-12-13 20:19 - 00002084 _____ () C:\Users\Public\Desktop\MyPhoneExplorer.lnk 2014-06-01 13:23 - 2013-12-13 20:19 - 00000000 ____D () C:\Program Files (x86)\MyPhoneExplorer 2014-06-01 12:41 - 2014-05-31 13:14 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2014-06-01 12:41 - 2013-12-06 17:22 - 00001186 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk 2014-06-01 12:41 - 2013-12-06 17:22 - 00001174 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk 2014-06-01 12:31 - 2013-12-06 18:28 - 00003558 _____ () C:\WINDOWS\System32\Tasks\CreateChoiceProcessTask 2014-06-01 12:29 - 2014-03-18 03:50 - 00019664 _____ () C:\WINDOWS\PFRO.log 2014-06-01 12:29 - 2013-08-22 16:44 - 00430280 _____ () C:\WINDOWS\system32\FNTCACHE.DAT 2014-06-01 06:58 - 2012-07-26 07:26 - 00000235 _____ () C:\WINDOWS\win.ini 2014-05-31 22:48 - 2014-05-31 22:48 - 00000000 ___RD () C:\WINDOWS\BrowserChoice 2014-05-31 22:48 - 2013-10-11 18:03 - 00000000 ____D () C:\Users\sabine\AppData\Local\Packages 2014-05-31 22:47 - 2014-05-31 22:47 - 00000000 ____D () C:\WINDOWS\PCHEALTH 2014-05-31 22:47 - 2014-05-31 22:47 - 00000000 ____D () C:\Users\Default\AppData\Local\Microsoft Help 2014-05-31 22:47 - 2014-05-31 22:47 - 00000000 ____D () C:\Users\Default User\AppData\Local\Microsoft Help 2014-05-31 22:47 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared 2014-05-31 21:10 - 2014-04-06 20:06 - 00000000 ____D () C:\Users\sabine\AppData\Roaming\LSC 2014-05-31 21:09 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\restore 2014-05-31 21:09 - 2013-08-08 15:53 - 00000000 ____D () C:\WINDOWS\System32\Tasks\Lenovo 2014-05-31 21:09 - 2013-08-08 15:53 - 00000000 ____D () C:\WINDOWS\Downloaded Installations 2014-05-31 21:09 - 2013-08-08 15:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lenovo ThinkVantage Tools 2014-05-31 21:09 - 2013-08-08 15:33 - 00000000 ____D () C:\Program Files\Lenovo 2014-05-31 20:58 - 2014-05-31 20:58 - 00000000 __SHD () C:\Users\sabine\AppData\Local\EmieUserList 2014-05-31 20:58 - 2014-05-31 20:58 - 00000000 __SHD () C:\Users\sabine\AppData\Local\EmieSiteList 2014-05-31 20:57 - 2014-05-31 20:57 - 00000000 __SHD () C:\Recovery 2014-05-31 20:56 - 2014-05-31 20:56 - 00308224 _____ (Microsoft Corporation) C:\WINDOWS\system32\wusa.exe 2014-05-31 20:56 - 2014-05-31 20:56 - 00305152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wusa.exe 2014-05-31 20:56 - 2013-08-22 17:36 - 00262144 _____ () C:\WINDOWS\system32\config\BCD-Template 2014-05-31 20:56 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\setup 2014-05-31 20:55 - 2014-05-31 20:55 - 02900992 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 02641920 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 02479616 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmSvc.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 02373784 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe 2014-05-31 20:55 - 2014-05-31 20:55 - 02331000 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 02317824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 02270208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 02141912 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 02133504 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 02088160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe 2014-05-31 20:55 - 2014-05-31 20:55 - 02030080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WsmSvc.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 02013016 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys 2014-05-31 20:55 - 2014-05-31 20:55 - 01843712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Display.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 01816576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Display.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 01779800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 01764864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 01679128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 01656832 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 01557848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys 2014-05-31 20:55 - 2014-05-31 20:55 - 01542768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 01351168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 01306624 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 01291200 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel32.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 01112536 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 01095488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 01063424 _____ (Microsoft Corporation) C:\WINDOWS\system32\IKEEXT.DLL 2014-05-31 20:55 - 2014-05-31 20:55 - 01036288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kernel32.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 01015808 _____ (Microsoft Corporation) C:\WINDOWS\system32\aclui.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00950784 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgent.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00939520 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00924160 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00887296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aclui.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00836096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00834560 _____ (Microsoft Corporation) C:\WINDOWS\system32\netlogon.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00827392 _____ (Microsoft Corporation) C:\WINDOWS\system32\BFE.DLL 2014-05-31 20:55 - 2014-05-31 20:55 - 00800256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReAgent.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00755712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00717312 _____ (Microsoft Corporation) C:\WINDOWS\system32\nshwfp.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00688640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netlogon.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00669696 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasapi32.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00655360 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsapi.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00621568 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAgent.exe 2014-05-31 20:55 - 2014-05-31 20:55 - 00605184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasapi32.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00567296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nshwfp.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00542208 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.Printing.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00518552 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00512000 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidprov.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00494592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dnsapi.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00488280 _____ (Microsoft Corporation) C:\WINDOWS\system32\netcfgx.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00467800 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS 2014-05-31 20:55 - 2014-05-31 20:55 - 00462336 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlangpui.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00412672 _____ (Microsoft Corporation) C:\WINDOWS\system32\FWPUCLNT.DLL 2014-05-31 20:55 - 2014-05-31 20:55 - 00406912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00402432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Graphics.Printing.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00390488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netcfgx.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00387210 _____ () C:\WINDOWS\system32\ApnDatabase.xml 2014-05-31 20:55 - 2014-05-31 20:55 - 00386560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlangpui.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00379224 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys 2014-05-31 20:55 - 2014-05-31 20:55 - 00376152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys 2014-05-31 20:55 - 2014-05-31 20:55 - 00360512 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfreadwrite.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00356864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlidprov.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00356848 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcomp.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00355832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfreadwrite.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00325632 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationApi.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00324096 _____ (Microsoft Corporation) C:\WINDOWS\system32\SessEnv.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00299008 _____ (Microsoft Corporation) C:\WINDOWS\system32\pdh.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00298496 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSDMon.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00291840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Sensors.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00283648 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb10.sys 2014-05-31 20:55 - 2014-05-31 20:55 - 00280576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SessEnv.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00274944 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmWmiPl.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00271872 _____ (Microsoft Corporation) C:\WINDOWS\system32\spp.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00264192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FWPUCLNT.DLL 2014-05-31 20:55 - 2014-05-31 20:55 - 00262656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LocationApi.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00254976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pdh.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00254464 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsrslvr.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00252928 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00247296 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsApi.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00226304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Sensors.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00222720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\spp.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00222720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dcomp.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00220160 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00212992 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdd.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00201216 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReInfo.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00197632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00192000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Scanners.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00186368 _____ (Microsoft Corporation) C:\WINDOWS\system32\dafWfdProvider.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00172544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReInfo.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00171008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SensorsApi.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00160768 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxAllUserStore.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00157016 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wof.sys 2014-05-31 20:55 - 2014-05-31 20:55 - 00151040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Scanners.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxdav.sys 2014-05-31 20:55 - 2014-05-31 20:55 - 00139776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxAllUserStore.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00136024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wfplwfs.sys 2014-05-31 20:55 - 2014-05-31 20:55 - 00134144 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dfsc.sys 2014-05-31 20:55 - 2014-05-31 20:55 - 00115200 _____ (Microsoft Corporation) C:\WINDOWS\system32\umpnpmgr.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00115200 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevPropMgr.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00113648 _____ (Microsoft Corporation) C:\WINDOWS\system32\userenv.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00111616 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidclass.sys 2014-05-31 20:55 - 2014-05-31 20:55 - 00102912 _____ (Microsoft Corporation) C:\WINDOWS\system32\davclnt.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00094016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\userenv.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00086016 _____ (Microsoft Corporation) C:\WINDOWS\system32\RMapi.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\davclnt.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\sxproxy.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00079360 _____ (Microsoft Corporation) C:\WINDOWS\system32\w32tm.exe 2014-05-31 20:55 - 2014-05-31 20:55 - 00079360 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\IPMIDrv.sys 2014-05-31 20:55 - 2014-05-31 20:55 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\w32tm.exe 2014-05-31 20:55 - 2014-05-31 20:55 - 00069120 _____ (Microsoft Corporation) C:\WINDOWS\system32\l2gpstore.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\l2gpstore.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpipreg.sys 2014-05-31 20:55 - 2014-05-31 20:55 - 00040448 _____ (Microsoft Corporation) C:\WINDOWS\system32\SetNetworkLocation.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sxproxy.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00033280 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidusb.sys 2014-05-31 20:55 - 2014-05-31 20:55 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredentialMigrationHandler.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredentialMigrationHandler.dll 2014-05-31 20:54 - 2014-05-31 20:54 - 03464192 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll 2014-05-31 20:54 - 2014-05-31 20:54 - 01705472 _____ (Microsoft Corporation) C:\WINDOWS\system32\wucltux.dll 2014-05-31 20:54 - 2014-05-31 20:54 - 01054208 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.appcore.dll 2014-05-31 20:54 - 2014-05-31 20:54 - 00828928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.appcore.dll 2014-05-31 20:54 - 2014-05-31 20:54 - 00827392 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll 2014-05-31 20:54 - 2014-05-31 20:54 - 00666624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll 2014-05-31 20:54 - 2014-05-31 20:54 - 00555736 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.appcore.dll 2014-05-31 20:54 - 2014-05-31 20:54 - 00419928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.appcore.dll 2014-05-31 20:54 - 2014-05-31 20:54 - 00381440 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUSettingsProvider.dll 2014-05-31 20:54 - 2014-05-31 20:54 - 00201728 _____ (Microsoft Corporation) C:\WINDOWS\system32\ubpm.dll 2014-05-31 20:54 - 2014-05-31 20:54 - 00190976 _____ (Microsoft Corporation) C:\WINDOWS\system32\storewuauth.dll 2014-05-31 20:54 - 2014-05-31 20:54 - 00137728 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuwebv.dll 2014-05-31 20:54 - 2014-05-31 20:54 - 00123904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuwebv.dll 2014-05-31 20:54 - 2014-05-31 20:54 - 00093696 _____ (Microsoft Corporation) C:\WINDOWS\system32\wudriver.dll 2014-05-31 20:54 - 2014-05-31 20:54 - 00086688 _____ (Microsoft Corporation) C:\WINDOWS\system32\mrt_map.dll 2014-05-31 20:54 - 2014-05-31 20:54 - 00080896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wudriver.dll 2014-05-31 20:54 - 2014-05-31 20:54 - 00080032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mrt_map.dll 2014-05-31 20:54 - 2014-05-31 20:54 - 00056320 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups.dll 2014-05-31 20:54 - 2014-05-31 20:54 - 00054776 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe 2014-05-31 20:54 - 2014-05-31 20:54 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapp.exe 2014-05-31 20:54 - 2014-05-31 20:54 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapp.exe 2014-05-31 20:54 - 2014-05-31 20:54 - 00028320 _____ (Microsoft Corporation) C:\WINDOWS\system32\mrt100.dll 2014-05-31 20:54 - 2014-05-31 20:54 - 00026784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mrt100.dll 2014-05-31 20:54 - 2014-05-31 20:54 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wups.dll 2014-05-31 20:54 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\SecureBootUpdates 2014-05-31 20:53 - 2014-05-31 20:53 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb 2014-05-31 20:53 - 2014-05-31 20:53 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb 2014-05-31 20:53 - 2014-05-31 20:53 - 00257880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdFilter.sys 2014-05-31 20:53 - 2014-05-31 20:53 - 00123224 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdNisDrv.sys 2014-05-31 20:53 - 2014-05-31 20:53 - 00035856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdBoot.sys 2014-05-31 20:53 - 2013-08-22 17:36 - 00000000 ___RD () C:\WINDOWS\ImmersiveControlPanel 2014-05-31 20:53 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2014-05-31 20:53 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2014-05-31 20:53 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files\Windows Defender 2014-05-31 20:53 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files (x86)\Windows Defender 2014-05-31 20:52 - 2014-05-31 20:52 - 21268952 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 18755672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 16872448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 13287936 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 12711424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 11792384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 08652800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 07425368 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe 2014-05-31 20:52 - 2014-05-31 20:52 - 07173120 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 06645248 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 05833216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Search.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 05774848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 05104640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 04269056 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncEngine.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 04190720 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys 2014-05-31 20:52 - 2014-05-31 20:52 - 02688000 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 02144984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 02140888 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 02124840 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d9.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 02100736 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlowUI.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 01797896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d9.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 01584128 _____ (Microsoft Corporation) C:\WINDOWS\system32\workfolderssvc.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 01527296 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 01466856 _____ (Microsoft Corporation) C:\WINDOWS\system32\propsys.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 01436160 _____ (Microsoft Corporation) C:\WINDOWS\system32\VSSVC.exe 2014-05-31 20:52 - 2014-05-31 20:52 - 01411584 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 01403856 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 01379064 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpmde.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 01308160 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpsvc.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 01287168 _____ (Microsoft Corporation) C:\WINDOWS\system32\mispace.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 01230336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 01222656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Streaming.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 01209616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmde.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 01200288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\propsys.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 01200128 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthport.sys 2014-05-31 20:52 - 2014-05-31 20:52 - 01126912 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFolder.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 01057280 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdvidcrl.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 01029120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mispace.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 01025024 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00982016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Streaming.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00955904 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00918528 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00888320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00881616 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00872448 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDrive.exe 2014-05-31 20:52 - 2014-05-31 20:52 - 00855552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdvidcrl.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00836608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchFolder.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00834048 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00805376 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00765408 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00761856 _____ (Microsoft Corporation) C:\WINDOWS\system32\WorkfoldersControl.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00731648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\adtschema.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00731648 _____ (Microsoft Corporation) C:\WINDOWS\system32\adtschema.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00721408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveTelemetry.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00718336 _____ (Microsoft Corporation) C:\WINDOWS\system32\swprv.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00707048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00677376 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys 2014-05-31 20:52 - 2014-05-31 20:52 - 00669856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00629760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmCoreR.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00609448 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00589656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fvevol.sys 2014-05-31 20:52 - 2014-05-31 20:52 - 00565536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys 2014-05-31 20:52 - 2014-05-31 20:52 - 00563200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\afd.sys 2014-05-31 20:52 - 2014-05-31 20:52 - 00518544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00491744 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00491520 _____ (Microsoft Corporation) C:\WINDOWS\system32\GeofenceMonitorService.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00486912 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv 2014-05-31 20:52 - 2014-05-31 20:52 - 00467968 _____ (Microsoft Corporation) C:\WINDOWS\system32\srcore.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00467496 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00463256 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00462336 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsGdiConverter.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00449536 _____ (Microsoft Corporation) C:\WINDOWS\system32\defragsvc.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00443904 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansec.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00443904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\nwifi.sys 2014-05-31 20:52 - 2014-05-31 20:52 - 00426496 _____ (Microsoft Corporation) C:\WINDOWS\system32\clusapi.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00407016 _____ (Microsoft Corporation) C:\WINDOWS\system32\services.exe 2014-05-31 20:52 - 2014-05-31 20:52 - 00406504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00402432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys 2014-05-31 20:52 - 2014-05-31 20:52 - 00387896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00384856 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spaceport.sys 2014-05-31 20:52 - 2014-05-31 20:52 - 00372568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storport.sys 2014-05-31 20:52 - 2014-05-31 20:52 - 00370176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv 2014-05-31 20:52 - 2014-05-31 20:52 - 00370176 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanmsm.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00364640 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00360792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fltMgr.sys 2014-05-31 20:52 - 2014-05-31 20:52 - 00357376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GeofenceMonitorService.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00337408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsGdiConverter.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00337240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Classpnp.sys 2014-05-31 20:52 - 2014-05-31 20:52 - 00335872 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDEServer.exe 2014-05-31 20:52 - 2014-05-31 20:52 - 00326024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00324888 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFCaptureEngine.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00323072 _____ (Microsoft Corporation) C:\WINDOWS\system32\srvsvc.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00313344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\clusapi.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00310616 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\volsnap.sys 2014-05-31 20:52 - 2014-05-31 20:52 - 00307304 _____ (Microsoft Corporation) C:\WINDOWS\system32\wintrust.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00305768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00300544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanmsm.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00296960 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanapi.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00285144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFCaptureEngine.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00281600 _____ (Microsoft Corporation) C:\WINDOWS\system32\resutils.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00275800 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msiscsi.sys 2014-05-31 20:52 - 2014-05-31 20:52 - 00271872 _____ (Microsoft Corporation) C:\WINDOWS\system32\rstrui.exe 2014-05-31 20:52 - 2014-05-31 20:52 - 00263424 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlows.exe 2014-05-31 20:52 - 2014-05-31 20:52 - 00250368 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpencom.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00246272 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srvnet.sys 2014-05-31 20:52 - 2014-05-31 20:52 - 00244880 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe 2014-05-31 20:52 - 2014-05-31 20:52 - 00233912 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00230808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wintrust.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanapi.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00219136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\resutils.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00209920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpencom.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00206848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys 2014-05-31 20:52 - 2014-05-31 20:52 - 00201920 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVideoDSP.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00201216 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00191488 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpchttp.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00186880 _____ (Microsoft Corporation) C:\WINDOWS\system32\WorkFoldersShell.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00180056 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys 2014-05-31 20:52 - 2014-05-31 20:52 - 00178184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVideoDSP.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00144384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpchttp.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00143872 _____ (Microsoft Corporation) C:\WINDOWS\system32\BootMenuUX.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00135168 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscsvc.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00130144 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpapi.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00125496 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmapi.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00111528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gpapi.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00098584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmapi.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00077312 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hdaudbus.sys 2014-05-31 20:52 - 2014-05-31 20:52 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\system32\srclient.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsgqec.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\srclient.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00055296 _____ (Microsoft Corporation) C:\WINDOWS\system32\energyprov.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tsgqec.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00047616 _____ (Microsoft Corporation) C:\WINDOWS\system32\tlscsp.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00046592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tlscsp.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Shell.Search.UriHandler.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Shell.Search.UriHandler.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00032600 _____ (Microsoft Corporation) C:\WINDOWS\system32\ploptin.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00028408 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfpmp.exe 2014-05-31 20:52 - 2014-05-31 20:52 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d8thk.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanhlp.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanhlp.dll 2014-05-31 20:51 - 2014-05-31 20:51 - 00262144 _____ () C:\WINDOWS\system32\config\userdiff 2014-05-31 20:50 - 2013-10-11 18:08 - 00000000 ___RD () C:\Users\sabine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2014-05-31 20:50 - 2013-10-11 18:08 - 00000000 ___RD () C:\Users\sabine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools 2014-05-31 20:49 - 2014-05-31 20:57 - 00000000 ___DC () C:\WINDOWS\Panther 2014-05-31 20:49 - 2014-05-31 20:49 - 00001465 _____ () C:\Users\sabine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2014-05-31 20:48 - 2014-05-31 20:48 - 00000020 ___SH () C:\Users\sabine\ntuser.ini 2014-05-31 20:48 - 2014-05-31 20:48 - 00000000 ____D () C:\WINDOWS\SysWOW64\XPSViewer 2014-05-31 20:48 - 2014-05-31 20:48 - 00000000 ____D () C:\Program Files\Reference Assemblies 2014-05-31 20:48 - 2014-05-31 20:48 - 00000000 ____D () C:\Program Files\MSBuild 2014-05-31 20:48 - 2014-05-31 20:48 - 00000000 ____D () C:\Program Files (x86)\Reference Assemblies 2014-05-31 20:48 - 2014-05-31 20:48 - 00000000 ____D () C:\Program Files (x86)\MSBuild 2014-05-31 20:48 - 2014-05-31 20:08 - 00000000 ____D () C:\Users\sabine 2014-05-31 20:48 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\MUI 2014-05-31 20:48 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\MUI 2014-05-31 20:29 - 2014-05-31 20:29 - 00000000 _SHDL () C:\Users\Default\Vorlagen 2014-05-31 20:29 - 2014-05-31 20:29 - 00000000 _SHDL () C:\Users\Default\Startmenü 2014-05-31 20:29 - 2014-05-31 20:29 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung 2014-05-31 20:29 - 2014-05-31 20:29 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen 2014-05-31 20:29 - 2014-05-31 20:29 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien 2014-05-31 20:29 - 2014-05-31 20:29 - 00000000 _SHDL () C:\Users\Default\Druckumgebung 2014-05-31 20:29 - 2014-05-31 20:29 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik 2014-05-31 20:29 - 2014-05-31 20:29 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder 2014-05-31 20:29 - 2014-05-31 20:29 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-05-31 20:29 - 2014-05-31 20:29 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf 2014-05-31 20:29 - 2014-05-31 20:29 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten 2014-05-31 20:29 - 2014-05-31 20:29 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten 2014-05-31 20:29 - 2014-05-31 20:29 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik 2014-05-31 20:29 - 2014-05-31 20:29 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder 2014-05-31 20:29 - 2014-05-31 20:29 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-05-31 20:29 - 2014-05-31 20:29 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf 2014-05-31 20:29 - 2014-05-31 20:29 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten 2014-05-31 20:29 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\Registration 2014-05-31 20:29 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files\Windows NT 2014-05-31 20:29 - 2013-08-22 15:36 - 00000000 __RHD () C:\Users\Default 2014-05-31 20:28 - 2014-05-31 20:28 - 00022960 _____ () C:\WINDOWS\system32\emptyregdb.dat 2014-05-31 20:28 - 2014-05-31 20:07 - 00032388 _____ () C:\WINDOWS\diagwrn.xml 2014-05-31 20:28 - 2014-05-31 20:07 - 00032388 _____ () C:\WINDOWS\diagerr.xml 2014-05-31 20:28 - 2014-05-31 19:20 - 00006611 _____ () C:\WINDOWS\comsetup.log 2014-05-31 20:26 - 2013-08-22 17:36 - 00000000 __RSD () C:\WINDOWS\Media 2014-05-31 20:26 - 2013-08-22 17:36 - 00000000 __RHD () C:\Users\Public\Libraries 2014-05-31 20:24 - 2014-05-31 20:24 - 00000020 ___SH () C:\Users\UpdatusUser\ntuser.ini 2014-05-31 20:18 - 2014-05-31 20:01 - 00000000 ____D () C:\WINDOWS\SysWOW64\NV 2014-05-31 20:18 - 2014-05-31 20:01 - 00000000 ____D () C:\WINDOWS\system32\NV 2014-05-31 20:17 - 2014-04-18 14:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Telefon CD 2005 2014-05-31 20:17 - 2014-03-18 11:40 - 00000000 ____D () C:\WINDOWS\ShellNew 2014-05-31 20:17 - 2014-01-21 19:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ElsterFormular 2014-05-31 20:17 - 2013-12-30 18:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Personal Backup 2014-05-31 20:17 - 2013-12-16 17:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2014-05-31 20:17 - 2013-12-13 19:01 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft-Maus- und Tastatur-Center 2014-05-31 20:17 - 2013-12-13 18:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lexware 2014-05-31 20:17 - 2013-12-13 18:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IrfanView 2014-05-31 20:17 - 2013-12-06 18:02 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel PROSet Wireless 2014-05-31 20:17 - 2013-12-06 16:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fingerprint Reader 2014-05-31 20:17 - 2013-08-22 17:36 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StartUp 2014-05-31 20:17 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\WinBioDatabase 2014-05-31 20:17 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\system32\Sysprep 2014-05-31 20:17 - 2013-08-08 16:00 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel AppUp(R) center 2014-05-31 20:17 - 2013-08-08 15:56 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerDVD Create 2014-05-31 20:17 - 2013-08-08 15:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lenovo 2014-05-31 20:17 - 2013-08-08 15:42 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dolby 2014-05-31 20:17 - 2013-08-08 15:28 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel 2014-05-31 20:15 - 2014-05-31 20:15 - 00001547 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk 2014-05-31 20:15 - 2014-05-31 20:15 - 00000000 ____D () C:\Users\Default\AppData\Roaming\Macromedia 2014-05-31 20:15 - 2014-05-31 20:15 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\Macromedia 2014-05-31 20:15 - 2014-03-18 11:25 - 00000000 ____D () C:\WINDOWS\SysWOW64\WCN 2014-05-31 20:15 - 2014-03-18 11:25 - 00000000 ____D () C:\WINDOWS\SysWOW64\sysprep 2014-05-31 20:15 - 2014-03-18 11:25 - 00000000 ____D () C:\WINDOWS\system32\WCN 2014-05-31 20:15 - 2013-08-22 17:37 - 00004893 _____ () C:\WINDOWS\DtcInstall.log 2014-05-31 20:15 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\migwiz 2014-05-31 20:15 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\IME 2014-05-31 20:15 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\WinBioPlugIns 2014-05-31 20:15 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\spool 2014-05-31 20:15 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\NDF 2014-05-31 20:15 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\IME 2014-05-31 20:15 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\SMI 2014-05-31 20:15 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\system32\oobe 2014-05-31 20:15 - 2013-08-08 16:07 - 00000000 ____D () C:\WINDOWS\SysWOW64\sda 2014-05-31 20:15 - 2012-07-26 07:37 - 00000000 ____D () C:\Users\Default.migrated 2014-05-31 20:13 - 2014-05-31 20:01 - 00000000 ____D () C:\ProgramData\NVIDIA 2014-05-31 20:13 - 2014-05-31 20:01 - 00000000 ____D () C:\Program Files\CONEXANT 2014-05-31 20:13 - 2014-05-31 20:01 - 00000000 ____D () C:\Program Files (x86)\Intel 2014-05-31 20:13 - 2014-05-31 20:00 - 00000000 ____D () C:\Program Files\NVIDIA Corporation 2014-05-31 20:13 - 2014-05-31 20:00 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation 2014-05-31 20:13 - 2013-12-13 19:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira 2014-05-31 20:13 - 2013-12-13 18:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\I.R.I.S. Anwendungen 2014-05-31 20:13 - 2013-12-13 18:25 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung Printers 2014-05-31 20:13 - 2013-08-22 17:43 - 00000000 ____D () C:\WINDOWS\DigitalLocker 2014-05-31 20:13 - 2013-08-22 17:36 - 00000000 __SHD () C:\Program Files\Windows Sidebar 2014-05-31 20:13 - 2013-08-22 17:36 - 00000000 __SHD () C:\Program Files (x86)\Windows Sidebar 2014-05-31 20:13 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\IME 2014-05-31 20:13 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\Help 2014-05-31 20:13 - 2013-08-08 16:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel Corporation 2014-05-31 20:13 - 2013-03-25 23:03 - 00000000 ____D () C:\ProgramData\PRICache 2014-05-31 20:10 - 2014-05-31 20:10 - 00000000 ____D () C:\WINDOWS\system32\config\bbimigrate 2014-05-31 20:10 - 2014-05-31 20:08 - 00000000 ___RD () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2014-05-31 20:10 - 2014-05-31 20:08 - 00000000 ___RD () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility 2014-05-31 20:10 - 2014-05-31 20:08 - 00000000 ___RD () C:\Users\sabine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2014-05-31 20:10 - 2014-05-31 20:08 - 00000000 ___RD () C:\Users\sabine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility 2014-05-31 20:10 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\Recovery 2014-05-31 20:08 - 2014-05-31 20:08 - 00000000 _SHDL () C:\Users\UpdatusUser\Vorlagen 2014-05-31 20:08 - 2014-05-31 20:08 - 00000000 _SHDL () C:\Users\UpdatusUser\Startmenü 2014-05-31 20:08 - 2014-05-31 20:08 - 00000000 _SHDL () C:\Users\UpdatusUser\Netzwerkumgebung 2014-05-31 20:08 - 2014-05-31 20:08 - 00000000 _SHDL () C:\Users\UpdatusUser\Lokale Einstellungen 2014-05-31 20:08 - 2014-05-31 20:08 - 00000000 _SHDL () C:\Users\UpdatusUser\Eigene Dateien 2014-05-31 20:08 - 2014-05-31 20:08 - 00000000 _SHDL () C:\Users\UpdatusUser\Druckumgebung 2014-05-31 20:08 - 2014-05-31 20:08 - 00000000 _SHDL () C:\Users\UpdatusUser\Documents\Eigene Musik 2014-05-31 20:08 - 2014-05-31 20:08 - 00000000 _SHDL () C:\Users\UpdatusUser\Documents\Eigene Bilder 2014-05-31 20:08 - 2014-05-31 20:08 - 00000000 _SHDL () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-05-31 20:08 - 2014-05-31 20:08 - 00000000 _SHDL () C:\Users\UpdatusUser\AppData\Local\Verlauf 2014-05-31 20:08 - 2014-05-31 20:08 - 00000000 _SHDL () C:\Users\UpdatusUser\AppData\Local\Anwendungsdaten 2014-05-31 20:08 - 2014-05-31 20:08 - 00000000 _SHDL () C:\Users\UpdatusUser\Anwendungsdaten 2014-05-31 20:08 - 2014-05-31 20:08 - 00000000 _SHDL () C:\Users\sabine\Vorlagen 2014-05-31 20:08 - 2014-05-31 20:08 - 00000000 _SHDL () C:\Users\sabine\Startmenü 2014-05-31 20:08 - 2014-05-31 20:08 - 00000000 _SHDL () C:\Users\sabine\Netzwerkumgebung 2014-05-31 20:08 - 2014-05-31 20:08 - 00000000 _SHDL () C:\Users\sabine\Lokale Einstellungen 2014-05-31 20:08 - 2014-05-31 20:08 - 00000000 _SHDL () C:\Users\sabine\Eigene Dateien 2014-05-31 20:08 - 2014-05-31 20:08 - 00000000 _SHDL () C:\Users\sabine\Druckumgebung 2014-05-31 20:08 - 2014-05-31 20:08 - 00000000 _SHDL () C:\Users\sabine\Documents\Eigene Musik 2014-05-31 20:08 - 2014-05-31 20:08 - 00000000 _SHDL () C:\Users\sabine\Documents\Eigene Bilder 2014-05-31 20:08 - 2014-05-31 20:08 - 00000000 _SHDL () C:\Users\sabine\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-05-31 20:08 - 2014-05-31 20:08 - 00000000 _SHDL () C:\Users\sabine\AppData\Local\Verlauf 2014-05-31 20:08 - 2014-05-31 20:08 - 00000000 _SHDL () C:\Users\sabine\AppData\Local\Anwendungsdaten 2014-05-31 20:08 - 2014-05-31 20:08 - 00000000 _SHDL () C:\Users\sabine\Anwendungsdaten 2014-05-31 20:02 - 2014-05-31 20:02 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_Kernel_iBtFltCoex_01009.Wdf 2014-05-31 20:02 - 2014-05-31 20:02 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_Kernel_dc3d_01011.Wdf 2014-05-31 20:02 - 2014-05-31 20:02 - 00000000 ____D () C:\Program Files (x86)\USB Camera 2014-05-31 20:02 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\System 2014-05-31 20:02 - 2013-08-22 16:46 - 00000756 _____ () C:\WINDOWS\setuperr.log 2014-05-31 20:01 - 2014-05-31 20:01 - 00000264 _____ () C:\WINDOWS\Tasks\Synaptics TouchPad Enhancements.job 2014-05-31 20:01 - 2014-05-31 20:01 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_Kernel_SynTP_01011.Wdf 2014-05-31 20:01 - 2014-05-31 20:01 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_Kernel_Smb_driver_Intel_01011.Wdf 2014-05-31 20:01 - 2014-05-31 20:01 - 00000000 ____D () C:\Program Files\Synaptics 2014-05-31 20:00 - 2014-05-31 20:00 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation 2014-05-31 20:00 - 2013-12-28 17:32 - 00000000 ____D () C:\Temp 2014-05-31 19:40 - 2013-08-08 15:22 - 01675681 _____ () C:\WINDOWS\WindowsUpdate (1).log 2014-05-31 17:45 - 2012-07-26 10:12 - 00000000 ____D () C:\WINDOWS\AUInstallAgent 2014-05-31 09:06 - 2013-12-12 21:46 - 00000000 ____D () C:\Users\sabine\Backup 2014-05-31 08:18 - 2014-05-27 20:54 - 00000000 ____D () C:\Users\sabine\AppData\Roaming\Systweak 2014-05-31 07:13 - 2013-08-22 17:38 - 00703992 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe 2014-05-31 07:13 - 2013-08-22 17:38 - 00105464 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl 2014-05-30 19:13 - 2013-12-13 18:25 - 00000000 ____D () C:\Users\sabine\AppData\Local\CrashDumps 2014-05-30 16:46 - 2014-05-30 16:46 - 00000000 ___SD () C:\Users\sabine\Documents\Meine Datenquellen 2014-05-30 12:21 - 2014-06-11 20:22 - 23414784 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll 2014-05-30 11:45 - 2014-06-11 20:22 - 02768384 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll 2014-05-30 11:28 - 2014-06-11 20:22 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll 2014-05-30 11:20 - 2014-06-11 20:22 - 00752640 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll 2014-05-30 11:18 - 2014-06-11 20:22 - 17271296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll 2014-05-30 11:08 - 2014-06-11 20:22 - 05782528 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll 2014-05-30 11:06 - 2014-06-11 20:22 - 00452096 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtmsft.dll 2014-05-30 10:46 - 2014-06-11 20:22 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll 2014-05-30 10:44 - 2014-06-11 20:22 - 00295424 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll 2014-05-30 10:43 - 2014-06-11 20:22 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesetup.dll 2014-05-30 10:38 - 2014-06-11 20:22 - 02179072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll 2014-05-30 10:35 - 2014-06-11 20:22 - 00608768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe 2014-05-30 10:29 - 2014-06-11 20:22 - 00631808 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll 2014-05-30 10:27 - 2014-06-11 20:22 - 00592896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll 2014-05-30 10:23 - 2014-06-11 20:22 - 02040832 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl 2014-05-30 10:16 - 2014-06-11 20:22 - 00368128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtmsft.dll 2014-05-30 10:04 - 2014-06-11 20:22 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll 2014-05-30 10:02 - 2014-06-11 20:22 - 00242688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll 2014-05-30 09:56 - 2014-06-11 20:22 - 04244992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll 2014-05-30 09:56 - 2014-06-11 20:22 - 02266112 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll 2014-05-30 09:54 - 2014-06-11 20:22 - 00526336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll 2014-05-30 09:49 - 2014-06-11 20:22 - 01964544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl 2014-05-30 09:43 - 2014-06-11 20:22 - 13522944 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll 2014-05-30 09:40 - 2014-06-11 20:22 - 11725312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll 2014-05-30 09:30 - 2014-06-11 20:22 - 01398272 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll 2014-05-30 09:21 - 2014-06-11 20:22 - 01790976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll 2014-05-30 09:15 - 2014-06-11 20:22 - 01143296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll 2014-05-30 09:13 - 2014-06-11 20:22 - 00846336 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll 2014-05-30 09:13 - 2014-06-11 20:22 - 00704512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll 2014-05-30 07:17 - 2014-05-27 20:56 - 00000000 ____D () C:\Program Files (x86)\VideoLAN 2014-05-29 08:47 - 2013-12-14 16:12 - 00134656 ___SH () C:\Users\sabine\Desktop\Thumbs.db 2014-05-28 19:02 - 2013-12-12 21:47 - 00000000 ____D () C:\Users\sabine\Schriftverkehr und Text 2014-05-27 20:59 - 2014-05-27 20:57 - 00000000 ____D () C:\Program Files\RrFilter 2014-05-27 07:31 - 2014-04-18 14:56 - 00000000 ____D () C:\Users\sabine\Documents\TVG 2014-05-27 07:31 - 2014-04-18 14:56 - 00000000 ____D () C:\Users\sabine\Documents\Telefon CD 2005 2014-05-26 13:30 - 2014-03-26 20:11 - 00000000 ____D () C:\Users\sabine\Scan 2014-05-26 13:30 - 2014-01-19 13:04 - 00052736 ___SH () C:\Users\sabine\Thumbs.db 2014-05-23 06:48 - 2013-12-08 12:20 - 1794608475 _____ () C:\WINDOWS\MEMORY.DMP 2014-05-22 07:15 - 2013-08-08 15:54 - 839495680 ___SH () C:\WINDOWS\lenovo_fastboot.img 2014-05-19 08:31 - 2014-06-11 20:12 - 00057856 _____ (Microsoft Corporation) C:\WINDOWS\system32\drvcfg.exe 2014-05-19 08:21 - 2014-06-11 20:12 - 00110592 _____ (Microsoft Corporation) C:\WINDOWS\system32\drvinst.exe 2014-05-19 07:23 - 2014-06-11 20:12 - 00098816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\drvinst.exe 2014-05-16 06:55 - 2013-12-15 16:34 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk Some content of TEMP: ==================== C:\Users\sabine\AppData\Local\Temp\avgnt.exe C:\Users\sabine\AppData\Local\Temp\MouseKeyboardCenterx64_1031.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => File is digitally signed C:\Windows\System32\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\System32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\System32\services.exe => File is digitally signed C:\Windows\System32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\System32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\System32\rpcss.dll => File is digitally signed C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2014-06-15 07:03 ==================== End Of Log ============================ Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 12-06-2014 02 Ran by sabine at 2014-06-15 07:24:21 Running from C:\Users\sabine\Software Boot Mode: Normal ========================================================== ==================== Security Center ======================== AV: Avira Desktop (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859} AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: Avira Desktop (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ==================== Installed Programs ====================== PowerDVD Create 10 (x32 Version: 10.0.1.2704 - CyberLink Corp.) Hidden Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 13.0.0.111 - Adobe Systems Incorporated) Adobe AIR (x32 Version: 13.0.0.111 - Adobe Systems Incorporated) Hidden Adobe Photoshop Elements 2.0 (HKLM-x32\...\Adobe Photoshop Elements 2.0) (Version: 2.0 - Adobe Systems, Inc.) Adobe Reader XI (11.0.07) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.07 - Adobe Systems Incorporated) Anzeige am Bildschirm (HKLM\...\OnScreenDisplay) (Version: 7.11.20 - ) Avira Free Antivirus (HKLM-x32\...\Avira AntiVir Desktop) (Version: 14.0.4.642 - Avira) Conexant HD Audio (HKLM\...\CNXT_AUDIO_HDA) (Version: 8.54.48.0 - Conexant) CyberLink Power2Go 7 (x32 Version: 7.0.0.3901a - CyberLink Corp.) Hidden CyberLink PowerDVD 10 (HKLM-x32\...\InstallShield_{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}) (Version: 10.0.5119.52 - CyberLink Corp.) CyberLink PowerDVD 10 (x32 Version: 10.0.5119.52 - CyberLink Corp.) Hidden CyberLink PowerProducer 5.5 (x32 Version: 5.5.3.5114 - CyberLink Corp.) Hidden Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{CA75CBF9-B078-47CB-ABA3-74EFD4FC9A43}) (Version: - Microsoft) ElsterFormular (HKLM-x32\...\ElsterFormular) (Version: 15.0.13587 - Landesfinanzdirektion Thüringen) ExpressCache (HKLM\...\{C123584F-9C84-45E8-AE5F-522328BB79A0}) (Version: 1.0.100.0 - Condusiv Technologies) FreeFileSync 6.1 (HKLM-x32\...\FreeFileSync) (Version: 6.1 - Zenju) Intel AppUp(R) center (HKLM-x32\...\Intel AppUp(R) center 41900) (Version: 3.8.0.41900.72 - Intel) Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1008 - Intel Corporation) Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.1.0.1281 - Intel Corporation) Intel(R) PRO/Wireless Driver (Version: 16.01.5000.0577 - Intel Corporation) Hidden Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3412 - Intel Corporation) Intel(R) PROSet/Wireless for Bluetooth(R) + High Speed (Version: 15.6.1.0536 - Intel Corporation) Hidden Intel(R) PROSet/Wireless Software for Bluetooth(R) Technology (HKLM\...\{DA2600C1-6BDF-4FD1-1212-148929CC1385}) (Version: 2.6.1212.0302 - Intel Corporation) Intel(R) SDK for OpenCL - CPU Only Runtime Package (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: 2.0.0.37149 - Intel Corporation) Intel(R) Update Manager (x32 Version: 1.0.0.36888 - Intel Corporation) Hidden Intel(R) WiDi (HKLM\...\{23D486D4-FBE0-40F3-A245-E4D56D094764}) (Version: 3.5.41.0 - Intel Corporation) Intel® PROSet/Wireless Software (HKLM-x32\...\{c9967fbd-e3c3-4ed0-992a-5b33260f2944}) (Version: 16.1.5 - Intel Corporation) Intel® PROSet/Wireless Software (HKLM-x32\...\{fad118b4-798f-4755-9e67-a622eec95b62}) (Version: 15.6.1 - Intel Corporation) Intel® PROSet/Wireless WiFi Software (Version: 16.01.5000.0269 - Intel Corporation) Hidden Intel® Trusted Connect Service Client (Version: 1.24.738.1 - Intel Corporation) Hidden IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: 4.36 - Irfan Skiljan) Lenovo Auto Scroll Utility (HKLM\...\LenovoAutoScrollUtility) (Version: 2.01 - ) Lenovo Dependency Package (HKLM-x32\...\Lenovo Dependency Package_is1) (Version: 1.5.37.0 - Lenovo Group Limited) Lenovo Fingerprint Manager (HKLM\...\{26821A01-AE55-4B1A-807A-6EF888C4ACC2}) (Version: 4.5.240.0 - Validity Sensors, Inc.) Lenovo Fingerprint Manager (HKLM\...\{F7AB2C19-6A27-4C75-A92A-8CC7C59E5FA2}) (Version: 4.5.240.0 - ) Lenovo Patch Utility (HKLM-x32\...\{AD32F5E9-6BDD-480A-8B7B-95571D04691C}) (Version: 1.3.1.1 - Lenovo Group Limited) Lenovo Patch Utility 64 bit (HKLM\...\{ABE4638D-D208-4061-9F26-E3E11E3A1E0C}) (Version: 1.3.1.1 - Lenovo Group Limited) Lenovo Power Management Driver (HKLM\...\Power Management Driver) (Version: 1.66.00.22 - ) Lenovo Settings - Camera Audio (HKLM\...\{88C6A6D9-324C-46E8-BA87-563D14021442}_is1) (Version: 4.0.97.0 - Lenovo Corporation) Lenovo Settings Dependency Package (HKLM\...\{3694BA2E-BE31-4B7E-886B-A0B559E69D4D}_is1) (Version: 1.1.1.11 - Lenovo Group Limited) Lenovo Settings Mobile Hotspot (HKLM\...\{42603F7D-B08D-436B-B0D8-3E2DEF1AFD41}_is1) (Version: 1.1.0.57 - Lenovo) Lenovo Solution Center (HKLM\...\{2F45A217-E9C7-4984-B0AC-5BE31FF4712B}) (Version: 2.4.003.00 - Lenovo Group Limited) Lenovo Solutions for Small Business (HKLM-x32\...\{6A6D86CD-B004-46b7-8951-7BB75A776F8C}) (Version: 2.0.32.7350 - Intel(R) Corporation) Lenovo Solutions for Small Business Customizations (HKLM-x32\...\{AFD7B869-3B70-40C7-8983-769256BA3BD2}) (Version: 2.0.0004.00 - Lenovo Group Limited) Lenovo System Update (HKLM-x32\...\{25C64847-B900-48AD-A164-1B4F9B774650}) (Version: 5.05.0009 - Lenovo) Lenovo User Guide (HKLM-x32\...\{13F59938-C595-479C-B479-F171AB9AF64F}) (Version: 1.0.0012.00 - Lenovo Group Limited) Lenovo Warranty Information (HKLM-x32\...\{FD4EC278-C1B1-4496-99ED-C0BE1B0AA521}) (Version: 1.0.0011.00 - Lenovo) Lexware buchhalter 2013 (HKLM-x32\...\{6AB4E5CD-0062-48E8-96A3-E5B4486DFCB3}) (Version: 18.04.00.0021 - Haufe-Lexware GmbH Co.KG) Lexware Elster (HKLM-x32\...\{1C227C2E-2295-4820-87B1-4B13E98E6C66}) (Version: 13.15.00.0074 - Haufe-Lexware GmbH & Co.KG) Lexware Info Service (HKLM-x32\...\{8AE7E507-BC49-4DF0-A236-26878691AB53}) (Version: 2.90.00.0009 - Haufe-Lexware GmbH & Co.KG) Lexware Sepa Check (x32 Version: 1.00.00.0003 - Haufe-Lexware GmbH & Co.KG) Hidden Microsoft Office (HKLM-x32\...\{90150000-0138-0409-0000-0000000FF1CE}) (Version: 15.0.4454.1510 - Microsoft Corporation) Microsoft Office Access MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Excel MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Home and Business 2010 (HKLM-x32\...\Office14.SingleImage) (Version: 14.0.7015.1000 - Microsoft Corporation) Microsoft Office Office 64-bit Components 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office OneNote MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Outlook MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office PowerPoint MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (English) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (French) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (Italian) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Proofing (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Publisher MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Shared 64-bit MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Shared MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Single Image 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Word MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{3C3D696B-0DB7-3C6D-A356-3DB8CE541918}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft-Maus- und Tastatur-Center (HKLM\...\Microsoft Mouse and Keyboard Center) (Version: 2.2.173.0 - Microsoft Corporation) Microsoft-Maus- und Tastatur-Center (Version: 2.2.173.0 - Microsoft Corporation) Hidden Mozilla Firefox 29.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 29.0.1 (x86 de)) (Version: 29.0.1 - Mozilla) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla) Mozilla Thunderbird 24.6.0 (x86 de) (HKLM-x32\...\Mozilla Thunderbird 24.6.0 (x86 de)) (Version: 24.6.0 - Mozilla) MyPhoneExplorer (HKLM-x32\...\MPE) (Version: 1.8.5 - F.J. Wechselberger) Nitro Pro 8 (HKLM\...\{35E1FF5F-E8E1-4DE2-B3EC-BBE296B27336}) (Version: 8.5.2.10 - Nitro) NVIDIA Grafiktreiber 327.62 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 327.62 - NVIDIA Corporation) NVIDIA Install Application (Version: 2.1002.141.953 - NVIDIA Corporation) Hidden NVIDIA Optimus 1.14.17 (Version: 1.14.17 - NVIDIA Corporation) Hidden NVIDIA PhysX (x32 Version: 9.13.0725 - NVIDIA Corporation) Hidden NVIDIA PhysX-Systemsoftware 9.13.0725 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.0725 - NVIDIA Corporation) NVIDIA Systemsteuerung 327.62 (Version: 327.62 - NVIDIA Corporation) Hidden NVIDIA Update 1.14.17 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 1.14.17 - NVIDIA Corporation) NVIDIA Update Components (Version: 1.14.17 - NVIDIA Corporation) Hidden Personal Backup 5.5 (HKLM-x32\...\Personal Backup 5_is1) (Version: 5.3 - J. Rathlev) PowerDVD Create (HKLM-x32\...\InstallShield_{DE485075-8CD3-4A1E-9ABC-6412EBA44872}) (Version: 10.0 - CyberLink Corp.) RapidBoot HDD Accelerator (HKLM-x32\...\Fastboot) (Version: 2.1.1.0 - Lenovo) Readiris Pro 10 (HKLM-x32\...\{14D08502-FEE4-40E5-90D3-8A967A1D8BA2}) (Version: - ) Realtek Card Reader (HKLM-x32\...\{F0A8BF4A-972F-41E0-9800-1EFE3BF28266}) (Version: 6.2.9200.29064 - Realtek Semiconductor Corp.) Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.3.730.2012 - Realtek) Samsung Network PC Fax (HKLM-x32\...\Samsung Network PC Fax) (Version: 1.05.22.00 - Samsung Electronics Co., Ltd.) Samsung Scan Assistant (HKLM-x32\...\Samsung Scan Assistant) (Version: 1.04.20.00 - Samsung Electronics Co., Ltd.) Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version: - Microsoft) Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (x32 Version: - Microsoft) Hidden SmarThru 4 (HKLM-x32\...\{90F1943D-EA4A-4460-B59F-30023F3BA69A}) (Version: - Samsung Electronics Co., Ltd.) SugarSync Manager (HKLM-x32\...\SugarSync) (Version: 1.9.80.99066 - SugarSync, Inc.) Telefon CD 2005 (HKLM-x32\...\{517547A2-FF90-434F-9A56-319C8C81DE88}) (Version: - ) ThinkPad UltraNav Driver (HKLM\...\SynTPDeinstKey) (Version: 18.0.7.34 - Synaptics Incorporated) ThinkVantage System für aktiven Festplattenschutz (HKLM\...\{46A84694-59EC-48F0-964C-7E76E9F8A2ED}) (Version: 1.77.0.11 - Lenovo) Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{B4A38370-2ADB-46B0-A1B0-0C4A2F7DCA31}) (Version: - Microsoft) Update for Microsoft Filter Pack 2.0 (KB2878281) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{302A8FE3-EBF5-486C-A431-16A1CD914443}) (Version: - Microsoft) Update for Microsoft Filter Pack 2.0 (KB2878281) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{302A8FE3-EBF5-486C-A431-16A1CD914443}) (Version: - Microsoft) Update for Microsoft InfoPath 2010 (KB2817369) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{4EEA3D3E-989C-4DF4-AB0A-3042C0C12AA3}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DADF7E25-FFA4-4D02-BE84-1DAE62C18516}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{287A1E92-9E41-4BC1-8920-B3D0E9220800}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{9D69691D-823D-4C3E-9B12-563A3F520366}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{ECFE33A3-B8B7-439A-ADE4-59FBD29EF9B8}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{ECFE33A3-B8B7-439A-ADE4-59FBD29EF9B8}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{5AA578BB-759C-40FD-9661-A737C0884541}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2825635) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{F1A20C69-9FE5-40FD-9CD5-84EABC2EF64A}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2878225) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{EFF5EBA3-40AD-4859-85E7-3C1CF4F297EB}) (Version: - Microsoft) Update for Microsoft OneNote 2010 (KB2837595) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{51CCA922-A0CC-47C4-8910-6936D97CAC2E}) (Version: - Microsoft) Update for Microsoft OneNote 2010 (KB2837595) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{51CCA922-A0CC-47C4-8910-6936D97CAC2E}) (Version: - Microsoft) Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition (HKLM-x32\...\{90140000-001A-0407-0000-0000000FF1CE}_Office14.SingleImage_{A0657506-69DC-44AE-8DC1-58E7C6F5B1C9}) (Version: - Microsoft) Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{2AB483F1-C86E-427A-83B4-23889B03512D}) (Version: - Microsoft) Update for Microsoft PowerPoint 2010 (KB2837579) 32-Bit Edition (HKLM-x32\...\{90140000-0018-0407-0000-0000000FF1CE}_Office14.SingleImage_{40EC8FB1-5202-469D-9232-C28FB1C6FC64}) (Version: - Microsoft) Update for Microsoft PowerPoint 2010 (KB2837579) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{2BA40F82-F3A4-441C-BF1A-ED4C42FF4872}) (Version: - Microsoft) Update for Microsoft SharePoint Workspace 2010 (KB2760601) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{F9F5A080-AF38-4966-9A6B-C43DCA465035}) (Version: - Microsoft) Update for Microsoft Visio 2010 (KB2880526) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{7B29D8B8-6A87-496C-A65E-B935E740448A}) (Version: - Microsoft) Update for Microsoft Visio Viewer 2010 (KB2837587) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{38CF30E4-3348-4BD1-A859-B630C355A56F}) (Version: - Microsoft) Update for Microsoft Word 2010 (KB2880529) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{B9B89E01-5B6B-4F73-BC34-B2C0D8ACB4CD}) (Version: - Microsoft) Wartung Samsung CLX-3180 Series (HKLM-x32\...\Samsung CLX-3180 Series) (Version: - Samsung Electronics Co., Ltd.) WaveEditor (x32 Version: 1.0.1.4514 - CyberLink Corp.) Hidden Windows-Treiberpaket - Intel Corporation (iaStorA) HDC (09/01/2012 11.6.0.1030) (HKLM\...\C5447D3383070620C3892FF393F522D6225CBA13) (Version: 09/01/2012 11.6.0.1030 - Intel Corporation) Windows-Treiberpaket - Lenovo 1.66.00.22 (11/30/2012 1.66.00.22) (HKLM\...\16E722986C4293F5D6BF43595DFFD631398D5F21) (Version: 11/30/2012 1.66.00.22 - Lenovo) ==================== Restore Points ========================= 31-05-2014 19:09:21 Installed Lenovo Solution Center. 11-06-2014 18:22:47 Windows Update ==================== Hosts content: ========================== 2013-08-22 15:25 - 2013-08-22 15:25 - 00000824 ____A C:\WINDOWS\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= Task: {00B55FDA-0E51-409E-82D6-2014370367ED} - System32\Tasks\StartPowerDVDService => C:\PROGRAM FILES (x86)\Cyberlink\PowerDVD10\PDVD10Serv.exe [2013-03-19] (CyberLink Corp.) Task: {05293577-D647-4185-B859-C94839A0B2E3} - System32\Tasks\Microsoft\Windows\SettingSync\NetworkStateChangeTask Task: {0B545118-B563-42FC-8D07-B78F602FCF34} - System32\Tasks\Microsoft\Windows\WS\WSRefreshBannedAppsListTask => Rundll32.exe WSClient.dll,RefreshBannedAppsList Task: {12306BE8-EC80-467F-A4DD-6EF5B6A73C06} - System32\Tasks\Microsoft_Hardware_Launch_mousekeyboardcenter_exe => c:\Program Files\Microsoft Mouse and Keyboard Center\mousekeyboardcenter.exe [2013-05-13] (Microsoft) Task: {1DE0CA86-2FC0-42EE-B3E5-675AE49C6571} - System32\Tasks\Microsoft\Windows\DiskFootprint\Diagnostics Task: {2085BF56-520D-4951-B7C0-DF34AF90CC6A} - System32\Tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask => Rundll32.exe sysmain.dll,PfSvWsSwapAssessmentTask Task: {2559CBD2-D54B-411A-84C9-E2A689E2115A} - System32\Tasks\Microsoft\Windows\DiskCleanup\SilentCleanup => C:\Windows\system32\cleanmgr.exe [2014-03-18] (Microsoft Corporation) Task: {2C9C0C6C-2A74-46F2-858A-4389D253EAD0} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCachePrepopulate Task: {352E6CA0-7314-4DF4-89C4-682368D80D57} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join => C:\Windows\System32\AutoWorkplace.exe [2013-08-22] (Microsoft Corporation) Task: {3A20B066-E47D-42AF-BD26-D557F38FAE72} - System32\Tasks\Intel\Intel Service Manager => C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe [2013-03-25] (Intel Corporation) Task: {3B6D8A73-F20B-4C93-B8FB-56A154F172D2} - System32\Tasks\Microsoft\Windows\Time Zone\SynchronizeTimeZone => C:\Windows\system32\tzsync.exe [2013-08-22] (Microsoft Corporation) Task: {49754026-21E1-41FC-94FD-727AFE414FE7} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCacheRebalance Task: {497DC659-7550-4F41-BDC3-5009703F04F1} - System32\Tasks\Lenovo\LSC\LSCHardwareScanPostpone => C:\Program Files\Lenovo\Lenovo Solution Center\LSC.exe [2014-05-06] () Task: {5470E3D0-F95F-4F8D-B702-9E30D0E95808} - System32\Tasks\Microsoft_Hardware_Launch_ipoint_exe => c:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2013-05-13] (Microsoft Corporation) Task: {6AA91E8C-DDBD-4979-8464-4062F7681A19} - System32\Tasks\Microsoft\Windows\Plug and Play\Plug and Play Cleanup Task: {6DFCB649-0769-4F83-BB10-F60F235F6D3D} - System32\Tasks\Microsoft\Windows\SkyDrive\Idle Sync Maintenance Task Task: {6FE4A4C4-D6E4-4E1A-8C0E-5FFCF0B88823} - System32\Tasks\CLMLSvc => C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe [2013-03-06] (CyberLink) Task: {72983A0D-8496-4C65-BB93-D90C13489A4C} - System32\Tasks\Lenovo\LenovoUserguidesCopy => C:\Program Files\lenovo\SystemAgent\UserguidesCopy.exe [2013-06-05] () Task: {73B1B253-CE67-4501-AE1A-377DD1D68B65} - System32\Tasks\Microsoft\Windows\Application Experience\StartupAppTask => Rundll32.exe Startupscan.dll,SusRunTask Task: {77F1D869-6E65-4079-A2A0-E2023408EF97} - System32\Tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState => Rundll32.exe Windows.Storage.ApplicationData.dll,CleanupTemporaryState Task: {7BB1EC61-3140-48A7-9245-3DD56ECC42BA} - System32\Tasks\Microsoft\Windows\WOF\WIM-Hash-Management Task: {872D0E53-FD2E-41E3-B431-698AF82882CE} - System32\Tasks\Microsoft\Windows\SkyDrive\Routine Maintenance Task Task: {89452830-B105-44A7-A6B1-01AFDDE22E6D} - System32\Tasks\TVT\LenovoWERMonitor => C:\Program Files (x86)\Common Files\lenovo\SUP\sup_wermonitor.exe [2014-01-21] (Microsoft) Task: {8CC813C9-712A-41EF-9512-B233444FC669} - System32\Tasks\Microsoft\Windows\AppxDeploymentClient\Pre-staged app cleanup => Rundll32.exe %windir%\system32\AppxDeploymentClient.dll,AppxPreStageCleanupRunTask Task: {951DADA4-48CD-4F1E-BDA9-A9CC8C1E964F} - System32\Tasks\Microsoft\Windows\WindowsUpdate\Scheduled Start With Network => Sc.exe start wuauserv Task: {9862001D-141D-4C81-8A49-704232CE48F3} - System32\Tasks\Intel(R) Small Business Advantage\Notifier => C:\Program Files\Intel\Intel(R) Small Business Advantage\UI\SBA_Notifier.exe [2013-04-10] (Intel Corporation) Task: {98FFE612-DCD4-43BE-97D3-781B037EF6BF} - System32\Tasks\Lenovo\Lenovo Customer Feedback Program 64 => C:\Program Files (x86)\Lenovo\Customer Feedback Program\Lenovo.TVT.CustomerFeedback.Agent.exe [2014-02-13] (Lenovo) Task: {9A8F4E56-053D-443A-AA9C-869E0D6E3492} - System32\Tasks\Lenovo\Lenovo Solution Center Launcher => C:\Program Files\lenovo\lenovo solution center\App\LSCService.exe [2014-05-06] (Lenovo) Task: {9D94A398-2AA9-46F0-882F-C277DDA1BC2D} - System32\Tasks\Microsoft_Hardware_Launch_itype_exe => c:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2013-05-13] (Microsoft Corporation) Task: {9FF4C139-5234-410C-B7FA-23EE2FD2AB53} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Maintenance Work Task: {A68D45A8-DAB3-4A92-A0C2-5B041CA0A004} - System32\Tasks\TVT\TVSUUpdateTask => C:\Program Files (x86)\Lenovo\System Update\tvsuShim.exe [2014-02-21] () Task: {C2960336-A6CE-499E-9A7A-82E67E274EC9} - System32\Tasks\Lenovo\Lenovo Customer Feedback Program => C:\Program Files\Lenovo\Customer Feedback Program\Lenovo.TVT.CustomerFeedback.Agent.exe [2014-05-06] (Lenovo) Task: {CA85B010-9A31-40D2-B3A7-C1524C4BEAD3} - System32\Tasks\Lenovo\LSC\LSCHardwareScan => C:\Program Files\Lenovo\Lenovo Solution Center\LSC.exe [2014-05-06] () Task: {CFD7C21A-808B-487B-A6EC-8A10E44E8360} - System32\Tasks\Microsoft\Windows\SettingSync\BackupTask Task: {D21DCE24-9FB6-4D62-BF19-90B3AF1576CA} - System32\Tasks\Lenovo\LenovoDependencyVersionTask => C:\Program Files\lenovo\SystemAgent\DependencyVersion.exe [2013-06-05] () Task: {D4F1838F-B2D1-4B45-AEF2-FB800DF0E0ED} - System32\Tasks\Microsoft\Windows\WOF\WIM-Hash-Validation Task: {D782E04A-61E1-4CCB-B8C3-2A11D5169D91} - \UpdaterEX No Task File <==== ATTENTION Task: {D88FEC9E-A82A-46F9-87E2-B6B97B301C1A} - System32\Tasks\Microsoft\Windows\WS\License Validation => Rundll32.exe WSClient.dll,WSpTLR licensing Task: {D8B7D73C-96CC-4387-8573-2F21CA0A261C} - System32\Tasks\Microsoft_MKC_Logon_Task_ipoint.exe => c:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2013-05-13] (Microsoft Corporation) Task: {DA3173E0-898B-4E6A-ACDD-5FCC0219825A} - System32\Tasks\Lenovo\LSC\LSCTaskService => C:\Program Files\Lenovo\Lenovo Solution Center\App\LSCTaskService.exe [2014-05-06] () Task: {DA46820F-FF8A-4B5E-A6B2-B12185DCFFFB} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Logon Synchronization Task: {E504A9A6-97F1-4D7C-AE7A-3274FBF7661C} - System32\Tasks\Microsoft_MKC_Logon_Task_itype.exe => c:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2013-05-13] (Microsoft Corporation) Task: {E6D378FA-E068-4BCB-80DE-56D43A249507} - System32\Tasks\Microsoft\Windows\RecoveryEnvironment\VerifyWinRE Task: {EF88EB0A-2140-4DFB-853F-A3C5115B19A3} - System32\Tasks\Microsoft\Windows\Shell\FamilySafetyUpload Task: {EFF2A577-7877-4332-8A89-E33EAE58B36D} - System32\Tasks\Lenovo\LenovoMachineInformation => C:\Program Files\lenovo\SystemAgent\MachineInformation.exe [2013-06-05] () Task: {F64C7278-28DA-43E3-A12D-B0CE387FBB6B} - System32\Tasks\Dolby Selector => C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe [2012-08-31] (Dolby Laboratories Inc.) Task: {F9242792-D1D3-4727-B054-1FCA31CDA6DB} - System32\Tasks\Microsoft\Windows\PLA\LSC Memory => Rundll32.exe C:\WINDOWS\system32\pla.dll,PlaHost "LSC Memory" "$(Arg0)" Task: {FA181103-5B86-4A25-98F0-6109977B816B} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2014-06-11] (Microsoft Corporation) Task: {FEE6AE02-70DF-41B6-AC9D-DA224B3FEF23} - System32\Tasks\Lenovo\LenovoWarrantyChinaTask => C:\Program Files\lenovo\SystemAgent\ChinaWarrantyService.exe [2013-06-05] () Task: C:\WINDOWS\Tasks\Synaptics TouchPad Enhancements.job => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe ==================== Loaded Modules (whitelisted) ============= 2013-08-08 16:04 - 2013-04-18 07:32 - 00115712 ____N () C:\Program Files (x86)\ThinkPad\Utilities\GR\PWMRT64V.DLL 2013-08-22 09:19 - 2013-08-22 08:54 - 00112640 _____ () C:\WINDOWS\system32\WinMetadata\Windows.Networking.winmd 2013-08-22 09:19 - 2013-08-22 08:54 - 00030208 _____ () C:\WINDOWS\system32\WinMetadata\Windows.Foundation.winmd 2013-04-19 11:50 - 2013-04-19 11:50 - 00463352 _____ () C:\Program Files (x86)\Lenovo\LocationAware\loctaskmgr.exe 2013-12-06 17:00 - 2013-10-31 16:13 - 00013088 _____ () C:\Program Files\NVIDIA Corporation\CoProcManager\detoured.dll 2013-04-19 11:50 - 2013-04-19 11:50 - 00014328 _____ () C:\Program Files (x86)\Lenovo\LocationAware\lpdagent.exe 2014-01-25 02:22 - 2014-01-25 02:22 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll 2013-08-08 15:43 - 2010-10-26 06:40 - 00049056 _____ () C:\Program Files\CONEXANT\ForteConfig\fmapp.exe 2013-12-13 18:25 - 2010-06-07 12:17 - 00618496 _____ () C:\Windows\Samsung\PanelMgr\SSMMgr.exe 2013-12-13 18:25 - 2009-09-29 11:47 - 00306688 _____ () C:\Windows\Samsung\PanelMgr\caller64.exe 2013-12-13 18:25 - 2011-04-29 09:58 - 01990144 _____ () C:\Windows\twain_32\Samsung\CLX3180\Scan2Pc.exe 2013-08-08 15:54 - 2013-08-08 15:54 - 00033520 ____N () C:\Program Files (x86)\Lenovo\RapidBoot HDD Accelerator\FBServiceps.dll 2014-06-11 21:07 - 2014-06-11 21:07 - 00797696 _____ () C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Windows.Networking\66db718389f1cd2503053c09b3de857f\Windows.Networking.ni.dll 2014-06-11 21:07 - 2014-06-11 21:07 - 00228864 _____ () C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Windows.Foundation\cf021988965369c551bb0987fe019862\Windows.Foundation.ni.dll 2013-08-08 15:29 - 2012-07-18 20:55 - 01198912 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll 2013-12-13 18:25 - 2009-10-31 15:42 - 01384520 _____ () C:\Windows\twain_32\Samsung\CLX3180\ssole.dll 2013-08-08 16:00 - 2013-03-25 23:08 - 00016896 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\featureController.dll 2013-08-08 16:00 - 2013-03-25 23:08 - 00062976 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\osEvents.dll 2013-08-08 16:00 - 2013-03-25 23:08 - 00322048 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\log4cplus.dll 2013-08-08 16:00 - 2013-03-25 23:08 - 00400384 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\sqlite3.dll 2013-08-08 16:00 - 2013-03-25 23:08 - 00195584 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\libgsoap.dll 2013-08-08 16:00 - 2013-03-25 23:08 - 00020480 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\eventsSender.dll 2013-08-08 16:00 - 2013-03-25 23:08 - 00062464 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\zlib1.dll 2013-08-08 16:00 - 2013-03-25 23:08 - 00446976 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\deviceProfile.dll 2013-08-08 16:00 - 2013-03-25 23:08 - 00064512 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\serviceManagerStarter.dll 2013-03-06 21:49 - 2013-03-06 21:49 - 00626240 _____ () C:\Program Files (x86)\CyberLink\Power2Go\CLMediaLibrary.dll 2013-03-06 21:52 - 2013-03-06 21:52 - 00015424 _____ () C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvcPS.dll 2014-06-11 21:11 - 2014-06-11 21:11 - 03022960 _____ () C:\Program Files (x86)\Mozilla Thunderbird\mozjs.dll 2014-06-11 21:11 - 2014-06-11 21:11 - 00158832 _____ () C:\Program Files (x86)\Mozilla Thunderbird\NSLDAP32V60.dll 2014-06-11 21:11 - 2014-06-11 21:11 - 00023152 _____ () C:\Program Files (x86)\Mozilla Thunderbird\NSLDAPPR32V60.dll ==================== Alternate Data Streams (whitelisted) ========= AlternateDataStreams: C:\WINDOWS\system32\Drivers\btmhsf.sys:Microsoft_Appcompat_ReinstallUpgrade AlternateDataStreams: C:\ProgramData\Temp:373E1720 ==================== Safe Mode (whitelisted) =================== ==================== EXE Association (whitelisted) ============= ==================== MSCONFIG/TASK MANAGER disabled items ========= HKCU\...\StartupApproved\Run: => "BrowserChoice" ==================== Faulty Device Manager Devices ============= Name: IWD Bus Enumerator Description: IWD Bus Enumerator Class Guid: {4d36e97d-e325-11ce-bfc1-08002be10318} Manufacturer: (Standard system devices) Service: iwdbus Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31) Resolution: Update the driver ==================== Event log errors: ========================= Application errors: ================== Error: (06/14/2014 09:32:41 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: Programm iexplore.exe, Version 11.0.9600.17126 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen. Prozess-ID: 600 Startzeit: 01cf880723c2c16c Endzeit: 15 Anwendungspfad: C:\Program Files\Internet Explorer\iexplore.exe Berichts-ID: a4c84ed6-f3fa-11e3-beac-606c66cc2530 Vollständiger Name des fehlerhaften Pakets: Anwendungs-ID, die relativ zum fehlerhaften Paket ist: Error: (06/14/2014 09:25:04 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: Programm iexplore.exe, Version 11.0.9600.17126 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen. Prozess-ID: 2cbc Startzeit: 01cf880643b57854 Endzeit: 15 Anwendungspfad: C:\Program Files\Internet Explorer\iexplore.exe Berichts-ID: 9485bf2b-f3f9-11e3-beac-606c66cc2530 Vollständiger Name des fehlerhaften Pakets: Anwendungs-ID, die relativ zum fehlerhaften Paket ist: Error: (06/14/2014 09:24:23 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: Programm iexplore.exe, Version 11.0.9600.17126 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen. Prozess-ID: 2d08 Startzeit: 01cf880636d192be Endzeit: 15 Anwendungspfad: C:\Program Files\Internet Explorer\iexplore.exe Berichts-ID: 7c4c2dc7-f3f9-11e3-beac-606c66cc2530 Vollständiger Name des fehlerhaften Pakets: Anwendungs-ID, die relativ zum fehlerhaften Paket ist: Error: (06/14/2014 09:24:13 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: Programm iexplore.exe, Version 11.0.9600.17126 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen. Prozess-ID: 22c0 Startzeit: 01cf88062c8b3680 Endzeit: 46 Anwendungspfad: C:\Program Files\Internet Explorer\iexplore.exe Berichts-ID: 7621c187-f3f9-11e3-beac-606c66cc2530 Vollständiger Name des fehlerhaften Pakets: Anwendungs-ID, die relativ zum fehlerhaften Paket ist: Error: (06/12/2014 09:21:30 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: iexplore.exe, Version: 11.0.9600.17126, Zeitstempel: 0x53882d40 Name des fehlerhaften Moduls: MSHTML.dll, Version: 11.0.9600.17126, Zeitstempel: 0x53885a99 Ausnahmecode: 0xc0000005 Fehleroffset: 0x00000000001d8de2 ID des fehlerhaften Prozesses: 0x18a4 Startzeit der fehlerhaften Anwendung: 0xiexplore.exe0 Pfad der fehlerhaften Anwendung: iexplore.exe1 Pfad des fehlerhaften Moduls: iexplore.exe2 Berichtskennung: iexplore.exe3 Vollständiger Name des fehlerhaften Pakets: iexplore.exe4 Anwendungs-ID, die relativ zum fehlerhaften Paket ist: iexplore.exe5 Error: (06/02/2014 08:08:51 AM) (Source: Application Hang) (EventID: 1002) (User: ) Description: Programm pcee4.exe, Version 7.2.8000.17 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen. Prozess-ID: 241c Startzeit: 01cf7e2417bf2015 Endzeit: 31 Anwendungspfad: C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe Berichts-ID: 556794e5-ea1c-11e3-beaa-606c66cc2530 Vollständiger Name des fehlerhaften Pakets: Anwendungs-ID, die relativ zum fehlerhaften Paket ist: Error: (06/01/2014 09:50:27 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: MCCDView.exe, Version: 0.1.0.1, Zeitstempel: 0x4f9aa1a2 Name des fehlerhaften Moduls: MCCDView.exe, Version: 0.1.0.1, Zeitstempel: 0x4f9aa1a2 Ausnahmecode: 0xc000041d Fehleroffset: 0x00154734 ID des fehlerhaften Prozesses: 0x21c0 Startzeit der fehlerhaften Anwendung: 0xMCCDView.exe0 Pfad der fehlerhaften Anwendung: MCCDView.exe1 Pfad des fehlerhaften Moduls: MCCDView.exe2 Berichtskennung: MCCDView.exe3 Vollständiger Name des fehlerhaften Pakets: MCCDView.exe4 Anwendungs-ID, die relativ zum fehlerhaften Paket ist: MCCDView.exe5 Error: (06/01/2014 09:50:24 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: MCCDView.exe, Version: 0.1.0.1, Zeitstempel: 0x4f9aa1a2 Name des fehlerhaften Moduls: MCCDView.exe, Version: 0.1.0.1, Zeitstempel: 0x4f9aa1a2 Ausnahmecode: 0xc0000005 Fehleroffset: 0x00154734 ID des fehlerhaften Prozesses: 0x21c0 Startzeit der fehlerhaften Anwendung: 0xMCCDView.exe0 Pfad der fehlerhaften Anwendung: MCCDView.exe1 Pfad des fehlerhaften Moduls: MCCDView.exe2 Berichtskennung: MCCDView.exe3 Vollständiger Name des fehlerhaften Pakets: MCCDView.exe4 Anwendungs-ID, die relativ zum fehlerhaften Paket ist: MCCDView.exe5 Error: (06/01/2014 07:54:50 PM) (Source: MsiInstaller) (EventID: 10005) (User: SANI_LENOVO) Description: Produkt: Microsoft Fix it 50195 -- Dieses Microsoft-Fix it ist nicht für Ihr Betriebssystem oder Ihre Version der Anwendung vorgesehen. Error: (06/01/2014 01:20:21 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: iexplore.exe, Version: 11.0.9600.17037, Zeitstempel: 0x5312c26d Name des fehlerhaften Moduls: ntdll.dll, Version: 6.3.9600.17031, Zeitstempel: 0x530895af Ausnahmecode: 0xc0000374 Fehleroffset: 0x00000000000f8c9c ID des fehlerhaften Prozesses: 0x1564 Startzeit der fehlerhaften Anwendung: 0xiexplore.exe0 Pfad der fehlerhaften Anwendung: iexplore.exe1 Pfad des fehlerhaften Moduls: iexplore.exe2 Berichtskennung: iexplore.exe3 Vollständiger Name des fehlerhaften Pakets: iexplore.exe4 Anwendungs-ID, die relativ zum fehlerhaften Paket ist: iexplore.exe5 System errors: ============= Error: (06/15/2014 07:04:15 AM) (Source: DCOM) (EventID: 10010) (User: SANI_LENOVO) Description: {1B1F472E-3221-4826-97DB-2C2324D389AE} Error: (06/15/2014 07:03:40 AM) (Source: DCOM) (EventID: 10010) (User: SANI_LENOVO) Description: {BF6C1E47-86EC-4194-9CE5-13C15DCB2001} Error: (06/14/2014 09:35:10 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Der Dienst "DgiVecp" wurde aufgrund folgenden Fehlers nicht gestartet: %%20 Error: (06/14/2014 09:22:28 AM) (Source: Schannel) (EventID: 4120) (User: NT-AUTORITÄT) Description: Es wurde eine schwerwiegende Warnung generiert und an den Remoteendpunkt gesendet. Dies kann dazu führen, dass die Verbindung beendet wird. Die schwerwiegende Warnung hat folgenden für das TLS-Protokoll definierten Code: 40. Der Windows-SChannel-Fehlerstatus lautet: 252. Error: (06/14/2014 09:22:28 AM) (Source: Schannel) (EventID: 4120) (User: NT-AUTORITÄT) Description: Es wurde eine schwerwiegende Warnung generiert und an den Remoteendpunkt gesendet. Dies kann dazu führen, dass die Verbindung beendet wird. Die schwerwiegende Warnung hat folgenden für das TLS-Protokoll definierten Code: 40. Der Windows-SChannel-Fehlerstatus lautet: 252. Error: (06/14/2014 07:57:02 AM) (Source: DCOM) (EventID: 10010) (User: SANI_LENOVO) Description: {1B1F472E-3221-4826-97DB-2C2324D389AE} Error: (06/14/2014 07:56:32 AM) (Source: DCOM) (EventID: 10010) (User: SANI_LENOVO) Description: {BF6C1E47-86EC-4194-9CE5-13C15DCB2001} Error: (06/13/2014 10:37:51 PM) (Source: Schannel) (EventID: 4120) (User: NT-AUTORITÄT) Description: Es wurde eine schwerwiegende Warnung generiert und an den Remoteendpunkt gesendet. Dies kann dazu führen, dass die Verbindung beendet wird. Die schwerwiegende Warnung hat folgenden für das TLS-Protokoll definierten Code: 40. Der Windows-SChannel-Fehlerstatus lautet: 252. Error: (06/13/2014 10:37:51 PM) (Source: Schannel) (EventID: 4120) (User: NT-AUTORITÄT) Description: Es wurde eine schwerwiegende Warnung generiert und an den Remoteendpunkt gesendet. Dies kann dazu führen, dass die Verbindung beendet wird. Die schwerwiegende Warnung hat folgenden für das TLS-Protokoll definierten Code: 40. Der Windows-SChannel-Fehlerstatus lautet: 252. Error: (06/13/2014 08:49:17 PM) (Source: Schannel) (EventID: 4120) (User: NT-AUTORITÄT) Description: Es wurde eine schwerwiegende Warnung generiert und an den Remoteendpunkt gesendet. Dies kann dazu führen, dass die Verbindung beendet wird. Die schwerwiegende Warnung hat folgenden für das TLS-Protokoll definierten Code: 40. Der Windows-SChannel-Fehlerstatus lautet: 252. Microsoft Office Sessions: ========================= Error: (06/14/2014 09:32:41 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: iexplore.exe11.0.9600.1712660001cf880723c2c16c15C:\Program Files\Internet Explorer\iexplore.exea4c84ed6-f3fa-11e3-beac-606c66cc2530 Error: (06/14/2014 09:25:04 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: iexplore.exe11.0.9600.171262cbc01cf880643b5785415C:\Program Files\Internet Explorer\iexplore.exe9485bf2b-f3f9-11e3-beac-606c66cc2530 Error: (06/14/2014 09:24:23 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: iexplore.exe11.0.9600.171262d0801cf880636d192be15C:\Program Files\Internet Explorer\iexplore.exe7c4c2dc7-f3f9-11e3-beac-606c66cc2530 Error: (06/14/2014 09:24:13 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: iexplore.exe11.0.9600.1712622c001cf88062c8b368046C:\Program Files\Internet Explorer\iexplore.exe7621c187-f3f9-11e3-beac-606c66cc2530 Error: (06/12/2014 09:21:30 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: iexplore.exe11.0.9600.1712653882d40MSHTML.dll11.0.9600.1712653885a99c000000500000000001d8de218a401cf85fc2960fd16C:\Program Files\Internet Explorer\iexplore.exeC:\WINDOWS\SYSTEM32\MSHTML.dllc12644ba-f266-11e3-beac-606c66cc2530 Error: (06/02/2014 08:08:51 AM) (Source: Application Hang) (EventID: 1002) (User: ) Description: pcee4.exe7.2.8000.17241c01cf7e2417bf201531C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe556794e5-ea1c-11e3-beaa-606c66cc2530 Error: (06/01/2014 09:50:27 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: MCCDView.exe0.1.0.14f9aa1a2MCCDView.exe0.1.0.14f9aa1a2c000041d0015473421c001cf7dd25d1a231dD:\cdviewer\MCCDView.exeD:\cdviewer\MCCDView.exefa207c6b-e9c5-11e3-beaa-606c66cc2530 Error: (06/01/2014 09:50:24 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: MCCDView.exe0.1.0.14f9aa1a2MCCDView.exe0.1.0.14f9aa1a2c00000050015473421c001cf7dd25d1a231dD:\cdviewer\MCCDView.exeD:\cdviewer\MCCDView.exef870eda7-e9c5-11e3-beaa-606c66cc2530 Error: (06/01/2014 07:54:50 PM) (Source: MsiInstaller) (EventID: 10005) (User: SANI_LENOVO) Description: Produkt: Microsoft Fix it 50195 -- Dieses Microsoft-Fix it ist nicht für Ihr Betriebssystem oder Ihre Version der Anwendung vorgesehen.(NULL)(NULL)(NULL)(NULL)(NULL) Error: (06/01/2014 01:20:21 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: iexplore.exe11.0.9600.170375312c26dntdll.dll6.3.9600.17031530895afc000037400000000000f8c9c156401cf7d8acc03ab4bC:\Program Files\Internet Explorer\iexplore.exeC:\WINDOWS\SYSTEM32\ntdll.dllb7b453d5-e97e-11e3-bea9-606c66cc2530 CodeIntegrity Errors: =================================== Date: 2014-03-15 19:48:48.653 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\Drivers\ae98c70.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2014-02-20 07:37:40.435 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\Drivers\31cf472.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2014-02-18 20:53:52.122 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\Drivers\31cf472.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. ==================== Memory info =========================== Percentage of memory in use: 39% Total physical RAM: 8009.49 MB Available physical RAM: 4855.96 MB Total Pagefile: 16201.49 MB Available Pagefile: 12805.58 MB Total Virtual: 131072 MB Available Virtual: 131071.8 MB ==================== Drives ================================ Drive c: (Windows8_OS) (Fixed) (Total:916.64 GB) (Free:750.69 GB) NTFS ==>[System with boot components (obtained from reading drive)] ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (Size: 932 GB) (Disk ID: 3F277BC4) Partition: GPT Partition Type. ======================================================== Disk: 1 (Size: 22 GB) (Disk ID: 3F277583) Partition: GPT Partition Type. ==================== End Of Log ============================ |
15.06.2014, 19:10 | #5 |
/// the machine /// TB-Ausbilder | Regsvr32 Fehler beim jedem Windows-Start Downloade Dir bitte Malwarebytes Anti-Malware
Downloade Dir bitte AdwCleaner auf deinen Desktop.
Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
und ein frisches FRST log bitte.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
16.06.2014, 06:41 | #6 |
| Regsvr32 Fehler beim jedem Windows-Start mbam.txt: Code:
ATTFilter Malwarebytes Anti-Malware www.malwarebytes.org Suchlauf Datum: 16.06.2014 Suchlauf-Zeit: 07:04:00 Logdatei: mbam.txt Administrator: Ja Version: 2.00.2.1012 Malware Datenbank: v2014.06.16.01 Rootkit Datenbank: v2014.06.02.01 Lizenz: Testversion Malware Schutz: Aktiviert Bösartiger Webseiten Schutz: Aktiviert Self-protection: Deaktiviert Betriebssystem: Windows 8.1 CPU: x64 Dateisystem: NTFS Benutzer: sabine Suchlauf-Art: Bedrohungs-Suchlauf Ergebnis: Abgeschlossen Durchsuchte Objekte: 340671 Verstrichene Zeit: 12 Min, 12 Sek Speicher: Aktiviert Autostart: Aktiviert Dateisystem: Aktiviert Archive: Aktiviert Rootkits: Deaktiviert Heuristics: Aktiviert PUP: Aktiviert PUM: Aktiviert Prozesse: 0 (No malicious items detected) Module: 0 (No malicious items detected) Registrierungsschlüssel: 5 PUP.Optional.RRSavings.A, HKLM\SOFTWARE\rrsavings, In Quarantäne, [7ca5dc9db7c46accff5b09a58e74d729], PUP.Optional.SupraSavings.A, HKLM\SOFTWARE\suprasavings, In Quarantäne, [7ea35a1f324989ad94d3ddd60bf77789], PUP.Optional.RRSavings.A, HKU\S-1-5-21-1240990677-1578086025-3834589401-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\Rr Savings, Löschen bei Neustart, [41e0d8a148335adc3030c3eb6b9723dd], PUP.Optional.SupraSavings.A, HKU\S-1-5-21-1240990677-1578086025-3834589401-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\suprasavings, Löschen bei Neustart, [30f1a7d2bcbf78bea7c2fab962a060a0], PUP.Optional.SearchProtect.A, HKU\S-1-5-21-1240990677-1578086025-3834589401-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\SEARCHPROTECTINT, Löschen bei Neustart, [24fd95e4a0dba294c122d2eead55c13f], Registrierungswerte: 1 PUP.Optional.SearchProtect.A, HKU\S-1-5-21-1240990677-1578086025-3834589401-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\SEARCHPROTECTINT|Install, 1, Löschen bei Neustart, [24fd95e4a0dba294c122d2eead55c13f] Registrierungsdaten: 0 (No malicious items detected) Ordner: 2 PUP.Optional.RRSavings.A, C:\Program Files\RrFilter, In Quarantäne, [f22f7affa6d5063007e38e068f73e719], PUP.Optional.RRSavings.A, C:\Program Files\RrFilter\SSL, In Quarantäne, [f22f7affa6d5063007e38e068f73e719], Dateien: 3 PUP.Optional.AdPeak.A, C:\Temp\t.msi, In Quarantäne, [90916910106b86b0dd53ff6acc389f61], PUP.Optional.Trovi.A, C:\Users\sabine\AppData\Roaming\Mozilla\Firefox\Profiles\3o5axu3s.default\searchplugins\trovi-search.xml, In Quarantäne, [1e032b4e3744989e5973b8f09969f60a], PUP.Optional.PCPerformer.A, C:\Windows\System32\roboot64.exe, In Quarantäne, [fa275f1a85f6d264afdabdfeab5740c0], Physische Sektoren: 0 (No malicious items detected) (end) Code:
ATTFilter # AdwCleaner v3.212 - Bericht erstellt am 16/06/2014 um 07:24:34 # Aktualisiert 05/06/2014 von Xplode # Betriebssystem : Windows 8.1 (64 bits) # Benutzername : sabine - SANI_LENOVO # Gestartet von : C:\Users\sabine\Software\adwcleaner_3.212.exe # Option : Löschen ***** [ Dienste ] ***** ***** [ Dateien / Ordner ] ***** Ordner Gelöscht : C:\Program Files\002 Ordner Gelöscht : C:\Program Files\003 Ordner Gelöscht : C:\Users\sabine\AppData\Roaming\Systweak Datei Gelöscht : C:\Users\sabine\daemonprocess.txt Datei Gelöscht : C:\Users\sabine\AppData\Roaming\Mozilla\Firefox\Profiles\3o5axu3s.default\user.js ***** [ Verknüpfungen ] ***** ***** [ Registrierungsdatenbank ] ***** Schlüssel Gelöscht : HKCU\Software\5dc0adf9b12bf099 Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{3408AC0D-510E-4808-8F7B-6B70B1F88534} Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3614D305-2DBB-4991-9297-750DD60FFC73} Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{3408AC0D-510E-4808-8F7B-6B70B1F88534} Schlüssel Gelöscht : HKCU\Software\systweak Schlüssel Gelöscht : HKLM\Software\systweak Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\LevelQualityWatcher ***** [ Browser ] ***** -\\ Internet Explorer v11.0.9600.17126 -\\ Mozilla Firefox v29.0.1 (de) [ Datei : C:\Users\sabine\AppData\Roaming\Mozilla\Firefox\Profiles\3o5axu3s.default\prefs.js ] ************************* AdwCleaner[R0].txt - [4046 octets] - [21/01/2014 22:15:27] AdwCleaner[R1].txt - [2112 octets] - [16/06/2014 07:23:58] AdwCleaner[S0].txt - [3489 octets] - [21/01/2014 22:16:18] AdwCleaner[S1].txt - [1852 octets] - [16/06/2014 07:24:34] ########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [1912 octets] ########## Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Junkware Removal Tool (JRT) by Thisisu Version: 6.1.4 (04.06.2014:1) OS: Windows 8.1 x64 Ran by sabine on 16.06.2014 at 7:31:34,26 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~ Services ~~~ Registry Values ~~~ Registry Keys ~~~ Files ~~~ Folders Successfully deleted: [Empty Folder] C:\Users\sabine\appdata\local\{85CDB9D5-761C-F3BE-F2CB-9CC6D14F28E5} ~~~ Event Viewer Logs were cleared ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Scan was completed on 16.06.2014 at 7:35:02,75 End of JRT log ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 15-06-2014 Ran by sabine (administrator) on SANI_LENOVO on 16-06-2014 07:36:06 Running from C:\Users\sabine\Software Platform: Windows 8.1 (X64) OS Language: German Standard Internet Explorer Version 11 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (Lenovo.) C:\Windows\System32\ibmpmsvc.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Microsoft Corporation) C:\Windows\System32\wlanext.exe (Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe (Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (Conexant Systems Inc.) C:\Windows\System32\CxAudMsg64.exe (Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe (Microsoft Corporation) C:\Windows\System32\dasHost.exe (Condusiv Technologies) C:\Program Files\Condusiv Technologies\ExpressCache\ExpressCache.exe (Lenovo) C:\Program Files (x86)\Lenovo\RapidBoot HDD Accelerator\FBService.exe (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe (LENOVO INCORPORATED.) C:\Program Files\Lenovo\SystemAgent\SystemAgentService.exe (Lenovo Group Limited) C:\Program Files\Lenovo\VIRTSCRL\lvvsst.exe (Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe (Lenovo Group Limited) C:\Program Files\Lenovo\VIRTSCRL\virtscrl.exe (Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe (Nitro PDF Software) C:\Program Files\Common Files\Nitro\Pro\8.0\NitroPDFDriverService8x64.exe (Nalpeiron Ltd.) C:\Windows\SysWOW64\NLSSRV32.EXE (Lenovo) C:\Program Files (x86)\ThinkPad\Utilities\PWMDBSVC.exe (Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe (Samsung Electronics Co., Ltd.) C:\Windows\System32\spool\drivers\x64\3\NetFaxServer64.exe (Validity Sensors, Inc.) C:\Program Files\Lenovo Fingerprint Reader\ValBioService.exe (Validity Sensors, Inc.) C:\Windows\System32\valWBFPolicyService.exe (Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe (Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\micmute.exe (Validity Sensors, Inc.) C:\Program Files\Lenovo Fingerprint Reader\SwipeMonitor.exe (Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\tphkload.exe (Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exe (Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\tpnumlkd.exe (Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\tposd.exe (Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\shtctky.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe (Intel Corporation) C:\Windows\System32\igfxtray.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (Intel Corporation) C:\Windows\System32\igfxsrvc.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe (Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\extapsup.exe (Conexant Systems, Inc.) C:\Program Files\CONEXANT\cAudioFilterAgent\CAudioFilterAgent64.exe (Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe () C:\Program Files\CONEXANT\ForteConfig\fmapp.exe (Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe (Lenovo.) C:\Windows\System32\TpShocks.exe (Lenovo) C:\Program Files\Lenovo\Lenovo Mobile Hotspot\MobileHotspotclient.exe (Lenovo Corporation) C:\Program Files\Lenovo\Communications Utility\TpKnrres.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPLpr.exe (Vimicro) C:\Program Files (x86)\USB Camera\VM331STI.EXE (Lenovo) C:\Program Files (x86)\Lenovo\RapidBoot HDD Accelerator\FBConsole.exe () C:\Windows\Samsung\PanelMgr\SSMMgr.exe () C:\Windows\Samsung\PanelMgr\caller64.exe () C:\Windows\twain_32\Samsung\CLX3180\Scan2Pc.exe (Intel Corporation) C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe (CyberLink) C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe (Haufe-Lexware GmbH & Co. KG) C:\Program Files (x86)\Common Files\Lexware\Update Manager\LxUpdateManager.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe (Intel(R) Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe (LENOVO INCORPORATED.) C:\Program Files\Lenovo\QuickSnipService\QuickSnipService.exe (Lenovo Group Limited) C:\Program Files\Lenovo\SettingsDependency\SettingsService.exe (Lenovo) C:\Program Files\Lenovo\QuickSnipService\QuickSnipInput.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Lenovo) C:\Program Files\Lenovo\Lenovo Mobile Hotspot\LnvHotSpotSvc.exe () C:\Program Files (x86)\Lenovo\LocationAware\loctaskmgr.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe () C:\Program Files (x86)\Lenovo\LocationAware\lpdagent.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [LenovoOptMouseUpdate] => C:\Program Files\Lenovo\HOTKEY\extapsup.exe [250976 2012-09-01] (Lenovo Group Limited) HKLM\...\Run: [BTMTrayAgent] => C:\Program Files (x86)\Intel\Bluetooth\btmshellex.dll [11733888 2012-12-03] (Motorola Solutions, Inc.) HKLM\...\Run: [SmartAudio] => C:\Program Files\CONEXANT\SAII\SACpl.exe [1647616 2012-06-13] (Conexant Systems, Inc.) HKLM\...\Run: [cAudioFilterAgent] => C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe [887968 2012-06-14] (Conexant Systems, Inc.) HKLM\...\Run: [ForteConfig] => C:\Program Files\Conexant\ForteConfig\fmapp.exe [49056 2010-10-26] () HKLM\...\Run: [TpShocks] => C:\WINDOWS\system32\TpShocks.exe [382248 2013-02-12] (Lenovo.) HKLM\...\Run: [LnvMobHotspotClient] => C:\Program Files\Lenovo\Lenovo Mobile Hotspot\MobileHotspotclient.exe [937976 2013-04-11] (Lenovo) HKLM\...\Run: [LENOVO.TPKNRRES] => C:\Program Files\Lenovo\Communications Utility\TPKNRRES.exe [594936 2013-04-15] (Lenovo Corporation) HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2809072 2014-02-24] (Synaptics Incorporated) HKLM-x32\...\Run: [331BigDog] => C:\Program Files (x86)\USB Camera\VM331STI.EXE [548864 2013-03-12] (Vimicro) HKLM-x32\...\Run: [IMSS] => C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe [133440 2012-07-19] (Intel Corporation) HKLM-x32\...\Run: [Fastboot] => C:\Program Files (x86)\Lenovo\RapidBoot HDD Accelerator\FBConsole.exe [738032 2013-08-08] (Lenovo) HKLM-x32\...\Run: [Download Protect] => C:\ProgramData\dlprotect.exe HKLM-x32\...\Run: [Samsung PanelMgr] => C:\Windows\Samsung\PanelMgr\SSMMgr.exe [618496 2010-06-07] () HKLM-x32\...\Run: [CLX3180_Scan2Pc] => C:\WINDOWS\Twain_32\Samsung\CLX3180\Scan2pc.exe [1990144 2011-04-29] () HKLM-x32\...\Run: [3180 Scan2PC] => C:\Windows\twain_32\Samsung\CLX3180\Scan2Pc.exe [1990144 2011-04-29] () HKLM-x32\...\Run: [LexwareInfoService] => C:\Program Files (x86)\Common Files\Lexware\Update Manager\LxUpdateManager.exe [189808 2011-07-31] (Haufe-Lexware GmbH & Co. KG) HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [737872 2014-06-11] (Avira Operations GmbH & Co. KG) HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated) Winlogon\Notify\igfxcui: C:\WINDOWS\system32\igfxdev.dll (Intel Corporation) HKU\S-1-5-21-1240990677-1578086025-3834589401-1001\...\RunOnce: [WAB Migrate] - C:\Program Files\Windows Mail\wab.exe [516608 2013-08-22] (Microsoft Corporation) HKU\S-1-5-21-1240990677-1578086025-3834589401-1002\...\Run: [OlinqUxrab] => regsvr32.exe " HKU\S-1-5-21-1240990677-1578086025-3834589401-1002\...\Run: [BrowserChoice] => C:\Windows\BrowserChoice\browserchoice.exe [86816 2013-08-22] (Microsoft Corporation) AppInit_DLLs: C:\WINDOWS\system32\nvinitx.dll => C:\WINDOWS\system32\nvinitx.dll [184048 2013-10-31] (NVIDIA Corporation) AppInit_DLLs-x32: C:\WINDOWS\SysWOW64\nvinit.dll => C:\WINDOWS\SysWOW64\nvinit.dll [156256 2013-10-31] (NVIDIA Corporation) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma Loader.lnk ShortcutTarget: Adobe Gamma Loader.lnk -> C:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.spiegel.de/ SearchScopes: HKLM - DefaultScope {533E4EE6-5ED5-4722-AF78-1A567593404A} URL = hxxp://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=dnldstr&cd=2XzuyEtN2Y1L1QzuyCtByC0CyCyC0C0CtByDtB0Dzz0C0CyEtN0D0Tzu0SyBtDyCtN1L2XzutBtFtBtFtCyEtFtCtAyBzytN1L1CzutCyD1B1P1R&cr=1192424154&ir= SearchScopes: HKLM - {533E4EE6-5ED5-4722-AF78-1A567593404A} URL = hxxp://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=dnldstr&cd=2XzuyEtN2Y1L1QzuyCtByC0CyCyC0C0CtByDtB0Dzz0C0CyEtN0D0Tzu0SyBtDyCtN1L2XzutBtFtBtFtCyEtFtCtAyBzytN1L1CzutCyD1B1P1R&cr=1192424154&ir= SearchScopes: HKLM-x32 - DefaultScope value is missing. SearchScopes: HKLM-x32 - {533E4EE6-5ED5-4722-AF78-1A567593404A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MALCJS SearchScopes: HKCU - DefaultScope {533E4EE6-5ED5-4722-AF78-1A567593404A} URL = SearchScopes: HKCU - {533E4EE6-5ED5-4722-AF78-1A567593404A} URL = BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll No File Tcpip\Parameters: [DhcpNameServer] 192.168.178.1 FireFox: ======== FF ProfilePath: C:\Users\sabine\AppData\Roaming\Mozilla\Firefox\Profiles\3o5axu3s.default FF Homepage: https://www.google.de/ FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation) FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin-x32: @nitropdf.com/NitroPDF - C:\Program Files (x86)\Nitro\Pro 8\npnitromozilla.dll (Nitro PDF) FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin HKCU: intel.com/AppUp - C:\Program Files (x86)\Intel\IntelAppStore\bin\npAppUp.dll (Intel) FF Plugin HKCU: intel.com/AppUpx64 - C:\Program Files (x86)\Intel\IntelAppStore\bin\npAppUp_x64.dll (Intel) FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml ==================== Services (Whitelisted) ================= R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [430160 2014-06-11] (Avira Operations GmbH & Co. KG) R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [430160 2014-06-11] (Avira Operations GmbH & Co. KG) R2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1039952 2014-06-11] (Avira Operations GmbH & Co. KG) S3 AVControlCenter; C:\Program Files\Lenovo\Communications Utility\AVControlCenter32.exe [148472 2013-04-15] (Lenovo Corporation) R2 ExpressCache; C:\Program Files\Condusiv Technologies\ExpressCache\ExpressCache.exe [107944 2013-01-08] (Condusiv Technologies) R2 FastbootService; C:\Program Files (x86)\Lenovo\RapidBoot HDD Accelerator\FBService.exe [140016 2013-08-08] (Lenovo) R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [129856 2012-07-19] (Intel Corporation) S3 intelsba; C:\Program Files\Intel\Intel(R) Small Business Advantage\Service\Intel.SmallBusinessAdvantage.WindowsService.exe [48832 2013-04-10] (Intel Corporation) R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-07-19] (Intel Corporation) R2 Lenovo QuickSnip Service; C:\Program Files\lenovo\QuickSnipService\QuickSnipService.exe [219976 2013-06-05] (LENOVO INCORPORATED.) R2 Lenovo Settings Service; C:\Program Files\Lenovo\SettingsDependency\SettingsService.exe [1628664 2013-02-06] (Lenovo Group Limited) R2 Lenovo System Agent Service; C:\Program Files\lenovo\SystemAgent\SystemAgentService.exe [562504 2013-06-05] (LENOVO INCORPORATED.) S3 LENOVO.TVTVCAM; C:\Program Files\Lenovo\Communications Utility\vcamsvc.exe [681464 2013-04-15] (Lenovo Corporation) R2 Lenovo.VIRTSCRLSVC; C:\Program Files\LENOVO\VIRTSCRL\lvvsst.exe [136288 2012-08-10] (Lenovo Group Limited) R2 LnvHotSpotSvc; C:\Program Files\Lenovo\Lenovo Mobile Hotspot\LnvHotSpotSvc.exe [465912 2013-04-11] (Lenovo) R2 LocationTaskManager; C:\Program Files (x86)\Lenovo\LocationAware\loctaskmgr.exe [463352 2013-04-19] () S3 LSCWinService; C:\Program Files\Lenovo\Lenovo Solution Center\App\LSCWinService.exe [1663880 2014-05-06] () R2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1809720 2014-05-12] (Malwarebytes Corporation) R2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [860472 2014-05-12] (Malwarebytes Corporation) S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [273136 2013-08-28] () R2 NitroDriverReadSpool8; C:\Program Files\Common Files\Nitro\Pro\8.0\NitroPDFDriverService8x64.exe [230408 2013-03-25] (Nitro PDF Software) R2 Samsung Network Fax Server; C:\WINDOWS\system32\spool\drivers\x64\3\NetFaxServer64.exe [229888 2011-04-28] (Samsung Electronics Co., Ltd.) [File not signed] S3 SUService; C:\Program Files (x86)\Lenovo\System Update\SUService.exe [24120 2014-02-21] () R2 ValBioService; C:\Program Files\Lenovo Fingerprint Reader\ValBioService.exe [22872 2013-10-28] (Validity Sensors, Inc.) R2 valWBFPolicyService; C:\Windows\System32\valWBFPolicyService.exe [40848 2013-10-28] (Validity Sensors, Inc.) S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347880 2014-05-31] (Microsoft Corporation) S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2014-05-31] (Microsoft Corporation) R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3378416 2013-08-28] (Intel® Corporation) ==================== Drivers (Whitelisted) ==================== S0 ADP80XX; C:\Windows\System32\drivers\ADP80XX.SYS [782176 2013-08-22] (PMC-Sierra) R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [112080 2014-06-11] (Avira Operations GmbH & Co. KG) R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [130584 2014-06-11] (Avira Operations GmbH & Co. KG) R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [28600 2013-12-09] (Avira Operations GmbH & Co. KG) U4 avnetflt; C:\Windows\system32\DRIVERS\avnetflt.sys [84720 2013-12-09] (Avira Operations GmbH & Co. KG) S3 bcmfn2; C:\Windows\System32\drivers\bcmfn2.sys [17624 2013-08-13] (Windows (R) Win 7 DDK provider) R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [226304 2014-03-18] (Microsoft Corporation) R3 btmhsf; C:\Windows\system32\DRIVERS\btmhsf.sys [1342848 2012-12-03] (Motorola Solutions, Inc.) S2 DgiVecp; C:\WINDOWS\system32\Drivers\DgiVecp.sys [53816 2009-07-13] (Samsung Electronics Co., Ltd.) R1 excfs; C:\Windows\System32\DRIVERS\excfs.sys [26024 2013-01-08] (Condusiv Technologies) R0 excsd; C:\Windows\System32\DRIVERS\excsd.sys [112552 2013-01-08] (Condusiv Technologies) S3 Fastboot; C:\Windows\System32\DRIVERS\fastboot.sys [66288 2013-08-08] (Windows (R) Win 7 DDK provider) S3 iaLPSSi_GPIO; C:\Windows\System32\drivers\iaLPSSi_GPIO.sys [24568 2013-07-30] (Intel Corporation) S3 iaLPSSi_I2C; C:\Windows\System32\drivers\iaLPSSi_I2C.sys [99320 2013-07-25] (Intel Corporation) S0 iaStorAV; C:\Windows\System32\drivers\iaStorAV.sys [651248 2013-08-10] (Intel Corporation) R0 intelpep; C:\Windows\System32\drivers\intelpep.sys [39768 2014-03-18] (Microsoft Corporation) S0 LSI_SAS3; C:\Windows\System32\drivers\lsi_sas3.sys [81760 2013-08-22] (LSI Corporation) R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25816 2014-05-12] (Malwarebytes Corporation) R3 MBAMSwissArmy; C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [122584 2014-06-16] (Malwarebytes Corporation) R3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [64216 2014-05-12] (Malwarebytes Corporation) R3 NdisVirtualBus; C:\Windows\System32\drivers\NdisVirtualBus.sys [16384 2013-08-22] (Microsoft Corporation) S3 netvsc; C:\Windows\system32\DRIVERS\netvsc63.sys [87040 2013-08-22] (Microsoft Corporation) R3 NETwNe64; C:\Windows\system32\DRIVERS\Netwew00.sys [3345376 2013-10-08] (Intel Corporation) S3 ReFS; C:\Windows\System32\Drivers\ReFS.sys [924504 2014-03-18] (Microsoft Corporation) R3 RSP2STOR; C:\Windows\system32\DRIVERS\RtsP2Stor.sys [288840 2013-05-16] (Realtek Semiconductor Corp.) S3 SerCx2; C:\Windows\System32\drivers\SerCx2.sys [146776 2014-03-18] (Microsoft Corporation) R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [31472 2014-02-24] (Synaptics Incorporated) S0 stornvme; C:\Windows\System32\drivers\stornvme.sys [57176 2014-03-18] (Microsoft Corporation) S3 SWIX64; C:\Program Files (x86)\Lenovo\System Update\tvsuhd64.sys [33856 2012-09-12] (Lenovo Group Limited) S3 UEFI; C:\Windows\System32\drivers\UEFI.sys [26976 2013-08-22] (Microsoft Corporation) R3 usb3Hub; C:\Windows\System32\drivers\usb3Hub.sys [47072 2012-11-29] (Windows (R) Win 7 DDK provider) R3 vm331avs; C:\Windows\System32\Drivers\vm331avs.sys [1045248 2013-03-01] (Vimicro Corporation) S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [123224 2014-05-31] (Microsoft Corporation) R0 Wof; C:\Windows\System32\Drivers\Wof.sys [157016 2014-05-31] (Microsoft Corporation) R3 XHCIPort; C:\Windows\System32\drivers\XHCIPort.sys [188896 2012-11-29] (Windows (R) Win 7 DDK provider) ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-06-16 07:35 - 2014-06-16 07:35 - 00000724 _____ () C:\Users\sabine\Desktop\JRT.txt 2014-06-16 07:29 - 2014-06-16 07:29 - 00000000 ____D () C:\WINDOWS\ERUNT 2014-06-16 07:27 - 2014-06-16 07:27 - 01016261 _____ (Thisisu) C:\Users\sabine\Desktop\JRT.exe 2014-06-16 07:25 - 2014-06-16 07:25 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bluetooth Devices 2014-06-16 07:22 - 2014-06-16 07:22 - 00002708 _____ () C:\Users\sabine\Desktop\mbam.txt 2014-06-16 07:02 - 2014-06-16 07:25 - 00122584 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys 2014-06-16 07:02 - 2014-06-16 07:02 - 00001129 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-06-16 07:02 - 2014-06-16 07:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2014-06-16 07:02 - 2014-06-16 07:02 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 2014-06-16 07:02 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamchameleon.sys 2014-06-16 07:02 - 2014-05-12 07:26 - 00064216 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys 2014-06-16 07:02 - 2014-05-12 07:25 - 00025816 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys 2014-06-16 06:36 - 2014-06-16 06:36 - 00000000 ____D () C:\Users\sabine\AppData\Roaming\Nico Mak Computing 2014-06-15 07:23 - 2014-06-16 07:36 - 00000000 ____D () C:\FRST 2014-06-11 21:11 - 2014-06-12 04:10 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird 2014-06-11 20:22 - 2014-05-30 12:21 - 23414784 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll 2014-06-11 20:22 - 2014-05-30 11:45 - 02768384 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll 2014-06-11 20:22 - 2014-05-30 11:28 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll 2014-06-11 20:22 - 2014-05-30 11:20 - 00752640 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll 2014-06-11 20:22 - 2014-05-30 11:18 - 17271296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll 2014-06-11 20:22 - 2014-05-30 11:08 - 05782528 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll 2014-06-11 20:22 - 2014-05-30 11:06 - 00452096 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtmsft.dll 2014-06-11 20:22 - 2014-05-30 10:46 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll 2014-06-11 20:22 - 2014-05-30 10:44 - 00295424 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll 2014-06-11 20:22 - 2014-05-30 10:43 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesetup.dll 2014-06-11 20:22 - 2014-05-30 10:38 - 02179072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll 2014-06-11 20:22 - 2014-05-30 10:35 - 00608768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe 2014-06-11 20:22 - 2014-05-30 10:29 - 00631808 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll 2014-06-11 20:22 - 2014-05-30 10:27 - 00592896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll 2014-06-11 20:22 - 2014-05-30 10:23 - 02040832 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl 2014-06-11 20:22 - 2014-05-30 10:16 - 00368128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtmsft.dll 2014-06-11 20:22 - 2014-05-30 10:04 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll 2014-06-11 20:22 - 2014-05-30 10:02 - 00242688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll 2014-06-11 20:22 - 2014-05-30 09:56 - 04244992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll 2014-06-11 20:22 - 2014-05-30 09:56 - 02266112 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll 2014-06-11 20:22 - 2014-05-30 09:54 - 00526336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll 2014-06-11 20:22 - 2014-05-30 09:49 - 01964544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl 2014-06-11 20:22 - 2014-05-30 09:43 - 13522944 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll 2014-06-11 20:22 - 2014-05-30 09:40 - 11725312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll 2014-06-11 20:22 - 2014-05-30 09:30 - 01398272 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll 2014-06-11 20:22 - 2014-05-30 09:21 - 01790976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll 2014-06-11 20:22 - 2014-05-30 09:15 - 01143296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll 2014-06-11 20:22 - 2014-05-30 09:13 - 00846336 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll 2014-06-11 20:22 - 2014-05-30 09:13 - 00704512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll 2014-06-11 20:22 - 2014-02-06 13:30 - 00004096 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollectorres.dll 2014-06-11 20:22 - 2014-02-06 13:07 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll 2014-06-11 20:22 - 2014-02-06 13:06 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwproxystub.dll 2014-06-11 20:22 - 2014-02-06 12:56 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll 2014-06-11 20:22 - 2014-02-06 12:49 - 00139264 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieUnatt.exe 2014-06-11 20:22 - 2014-02-06 12:48 - 00111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollector.exe 2014-06-11 20:22 - 2014-02-06 12:17 - 00195584 _____ (Microsoft Corporation) C:\WINDOWS\system32\msrating.dll 2014-06-11 20:22 - 2014-02-06 12:00 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieetwproxystub.dll 2014-06-11 20:22 - 2014-02-06 11:52 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll 2014-06-11 20:22 - 2014-02-06 11:52 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iernonce.dll 2014-06-11 20:22 - 2014-02-06 11:47 - 00112128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieUnatt.exe 2014-06-11 20:22 - 2014-02-06 11:25 - 00164864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrating.dll 2014-06-11 20:14 - 2014-05-01 15:31 - 03048904 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcMon.exe 2014-06-11 20:14 - 2014-05-01 15:31 - 00055328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wpcfltr.sys 2014-06-11 20:14 - 2014-05-01 09:14 - 03118080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Wpc.dll 2014-06-11 20:14 - 2014-05-01 09:05 - 02861056 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebSync.dll 2014-06-11 20:14 - 2014-05-01 08:51 - 02344448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Wpc.dll 2014-06-11 20:14 - 2014-05-01 07:24 - 02834944 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpccpl.dll 2014-06-11 20:13 - 2014-05-10 05:46 - 02151424 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3.dll 2014-06-11 20:13 - 2014-05-10 05:22 - 01312256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3.dll 2014-06-11 20:13 - 2014-05-05 06:02 - 03360256 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll 2014-06-11 20:13 - 2014-05-03 09:14 - 00079872 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSReset.exe 2014-06-11 20:13 - 2014-05-03 06:21 - 00249344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll 2014-06-11 20:13 - 2014-05-03 06:07 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll 2014-06-11 20:13 - 2014-05-03 05:41 - 00921088 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll 2014-06-11 20:13 - 2014-05-03 05:38 - 00754688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll 2014-06-11 20:13 - 2014-04-30 06:43 - 01975296 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWrite.dll 2014-06-11 20:13 - 2014-04-30 06:26 - 01345536 _____ (Microsoft Corporation) C:\WINDOWS\system32\FntCache.dll 2014-06-11 20:13 - 2014-04-30 05:47 - 01509888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWrite.dll 2014-06-11 20:13 - 2014-04-03 09:59 - 02518872 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys 2014-06-11 20:13 - 2014-04-03 09:59 - 00428888 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS 2014-06-11 20:12 - 2014-05-19 08:31 - 00057856 _____ (Microsoft Corporation) C:\WINDOWS\system32\drvcfg.exe 2014-06-11 20:12 - 2014-05-19 08:21 - 00110592 _____ (Microsoft Corporation) C:\WINDOWS\system32\drvinst.exe 2014-06-11 20:12 - 2014-05-19 07:23 - 00098816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\drvinst.exe 2014-06-11 20:12 - 2014-05-09 01:06 - 00295424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ks.sys 2014-06-11 20:12 - 2014-04-30 13:16 - 01336648 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll 2014-06-11 20:12 - 2014-04-30 05:51 - 01064448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll 2014-06-01 13:23 - 2014-06-01 13:23 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MyPhoneExplorer 2014-06-01 12:31 - 2013-08-22 08:57 - 00002143 ___RS () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Browser Choice.lnk 2014-05-31 22:48 - 2014-05-31 22:48 - 00000000 ___RD () C:\WINDOWS\BrowserChoice 2014-05-31 22:47 - 2014-05-31 22:47 - 00000000 ____D () C:\WINDOWS\PCHEALTH 2014-05-31 22:47 - 2014-05-31 22:47 - 00000000 ____D () C:\Users\Default\AppData\Local\Microsoft Help 2014-05-31 22:47 - 2014-05-31 22:47 - 00000000 ____D () C:\Users\Default User\AppData\Local\Microsoft Help 2014-05-31 20:59 - 2014-06-16 06:31 - 00003946 _____ () C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{02C6F728-BF56-436A-A768-4B9C5F40F7D4} 2014-05-31 20:58 - 2014-05-31 20:58 - 00000000 __SHD () C:\Users\sabine\AppData\Local\EmieUserList 2014-05-31 20:58 - 2014-05-31 20:58 - 00000000 __SHD () C:\Users\sabine\AppData\Local\EmieSiteList 2014-05-31 20:57 - 2014-05-31 20:57 - 00000000 __SHD () C:\Recovery 2014-05-31 20:57 - 2014-05-31 20:49 - 00000000 ___DC () C:\WINDOWS\Panther 2014-05-31 20:56 - 2014-05-31 20:56 - 00308224 _____ (Microsoft Corporation) C:\WINDOWS\system32\wusa.exe 2014-05-31 20:56 - 2014-05-31 20:56 - 00305152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wusa.exe 2014-05-31 20:55 - 2014-05-31 20:55 - 02900992 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 02641920 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 02479616 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmSvc.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 02373784 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe 2014-05-31 20:55 - 2014-05-31 20:55 - 02331000 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 02317824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 02270208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 02141912 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 02133504 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 02088160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe 2014-05-31 20:55 - 2014-05-31 20:55 - 02030080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WsmSvc.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 02013016 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys 2014-05-31 20:55 - 2014-05-31 20:55 - 01843712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Display.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 01816576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Display.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 01779800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 01764864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 01679128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 01656832 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 01557848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys 2014-05-31 20:55 - 2014-05-31 20:55 - 01542768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 01351168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 01306624 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 01291200 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel32.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 01112536 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 01095488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 01063424 _____ (Microsoft Corporation) C:\WINDOWS\system32\IKEEXT.DLL 2014-05-31 20:55 - 2014-05-31 20:55 - 01036288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kernel32.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 01015808 _____ (Microsoft Corporation) C:\WINDOWS\system32\aclui.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00950784 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgent.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00939520 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00924160 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00887296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aclui.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00836096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00834560 _____ (Microsoft Corporation) C:\WINDOWS\system32\netlogon.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00827392 _____ (Microsoft Corporation) C:\WINDOWS\system32\BFE.DLL 2014-05-31 20:55 - 2014-05-31 20:55 - 00800256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReAgent.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00755712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00717312 _____ (Microsoft Corporation) C:\WINDOWS\system32\nshwfp.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00688640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netlogon.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00669696 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasapi32.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00655360 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsapi.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00621568 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAgent.exe 2014-05-31 20:55 - 2014-05-31 20:55 - 00605184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasapi32.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00567296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nshwfp.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00542208 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.Printing.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00518552 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00512000 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidprov.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00494592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dnsapi.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00488280 _____ (Microsoft Corporation) C:\WINDOWS\system32\netcfgx.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00467800 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS 2014-05-31 20:55 - 2014-05-31 20:55 - 00462336 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlangpui.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00412672 _____ (Microsoft Corporation) C:\WINDOWS\system32\FWPUCLNT.DLL 2014-05-31 20:55 - 2014-05-31 20:55 - 00406912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00402432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Graphics.Printing.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00390488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netcfgx.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00387210 _____ () C:\WINDOWS\system32\ApnDatabase.xml 2014-05-31 20:55 - 2014-05-31 20:55 - 00386560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlangpui.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00379224 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys 2014-05-31 20:55 - 2014-05-31 20:55 - 00376152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys 2014-05-31 20:55 - 2014-05-31 20:55 - 00360512 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfreadwrite.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00356864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlidprov.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00356848 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcomp.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00355832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfreadwrite.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00325632 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationApi.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00324096 _____ (Microsoft Corporation) C:\WINDOWS\system32\SessEnv.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00299008 _____ (Microsoft Corporation) C:\WINDOWS\system32\pdh.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00298496 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSDMon.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00291840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Sensors.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00283648 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb10.sys 2014-05-31 20:55 - 2014-05-31 20:55 - 00280576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SessEnv.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00274944 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmWmiPl.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00271872 _____ (Microsoft Corporation) C:\WINDOWS\system32\spp.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00264192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FWPUCLNT.DLL 2014-05-31 20:55 - 2014-05-31 20:55 - 00262656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LocationApi.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00254976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pdh.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00254464 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsrslvr.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00252928 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00247296 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsApi.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00226304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Sensors.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00222720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\spp.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00222720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dcomp.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00220160 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00212992 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdd.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00201216 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReInfo.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00197632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00192000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Scanners.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00186368 _____ (Microsoft Corporation) C:\WINDOWS\system32\dafWfdProvider.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00172544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReInfo.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00171008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SensorsApi.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00160768 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxAllUserStore.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00157016 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wof.sys 2014-05-31 20:55 - 2014-05-31 20:55 - 00151040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Scanners.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxdav.sys 2014-05-31 20:55 - 2014-05-31 20:55 - 00139776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxAllUserStore.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00136024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wfplwfs.sys 2014-05-31 20:55 - 2014-05-31 20:55 - 00134144 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dfsc.sys 2014-05-31 20:55 - 2014-05-31 20:55 - 00115200 _____ (Microsoft Corporation) C:\WINDOWS\system32\umpnpmgr.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00115200 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevPropMgr.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00113648 _____ (Microsoft Corporation) C:\WINDOWS\system32\userenv.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00111616 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidclass.sys 2014-05-31 20:55 - 2014-05-31 20:55 - 00102912 _____ (Microsoft Corporation) C:\WINDOWS\system32\davclnt.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00094016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\userenv.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00086016 _____ (Microsoft Corporation) C:\WINDOWS\system32\RMapi.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\davclnt.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\sxproxy.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00079360 _____ (Microsoft Corporation) C:\WINDOWS\system32\w32tm.exe 2014-05-31 20:55 - 2014-05-31 20:55 - 00079360 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\IPMIDrv.sys 2014-05-31 20:55 - 2014-05-31 20:55 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\w32tm.exe 2014-05-31 20:55 - 2014-05-31 20:55 - 00069120 _____ (Microsoft Corporation) C:\WINDOWS\system32\l2gpstore.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\l2gpstore.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpipreg.sys 2014-05-31 20:55 - 2014-05-31 20:55 - 00040448 _____ (Microsoft Corporation) C:\WINDOWS\system32\SetNetworkLocation.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sxproxy.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00033280 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidusb.sys 2014-05-31 20:55 - 2014-05-31 20:55 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredentialMigrationHandler.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredentialMigrationHandler.dll 2014-05-31 20:54 - 2014-05-31 20:54 - 03464192 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll 2014-05-31 20:54 - 2014-05-31 20:54 - 01705472 _____ (Microsoft Corporation) C:\WINDOWS\system32\wucltux.dll 2014-05-31 20:54 - 2014-05-31 20:54 - 01054208 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.appcore.dll 2014-05-31 20:54 - 2014-05-31 20:54 - 00828928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.appcore.dll 2014-05-31 20:54 - 2014-05-31 20:54 - 00827392 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll 2014-05-31 20:54 - 2014-05-31 20:54 - 00666624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll 2014-05-31 20:54 - 2014-05-31 20:54 - 00555736 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.appcore.dll 2014-05-31 20:54 - 2014-05-31 20:54 - 00419928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.appcore.dll 2014-05-31 20:54 - 2014-05-31 20:54 - 00381440 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUSettingsProvider.dll 2014-05-31 20:54 - 2014-05-31 20:54 - 00201728 _____ (Microsoft Corporation) C:\WINDOWS\system32\ubpm.dll 2014-05-31 20:54 - 2014-05-31 20:54 - 00190976 _____ (Microsoft Corporation) C:\WINDOWS\system32\storewuauth.dll 2014-05-31 20:54 - 2014-05-31 20:54 - 00137728 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuwebv.dll 2014-05-31 20:54 - 2014-05-31 20:54 - 00123904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuwebv.dll 2014-05-31 20:54 - 2014-05-31 20:54 - 00093696 _____ (Microsoft Corporation) C:\WINDOWS\system32\wudriver.dll 2014-05-31 20:54 - 2014-05-31 20:54 - 00086688 _____ (Microsoft Corporation) C:\WINDOWS\system32\mrt_map.dll 2014-05-31 20:54 - 2014-05-31 20:54 - 00080896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wudriver.dll 2014-05-31 20:54 - 2014-05-31 20:54 - 00080032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mrt_map.dll 2014-05-31 20:54 - 2014-05-31 20:54 - 00056320 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups.dll 2014-05-31 20:54 - 2014-05-31 20:54 - 00054776 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe 2014-05-31 20:54 - 2014-05-31 20:54 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapp.exe 2014-05-31 20:54 - 2014-05-31 20:54 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapp.exe 2014-05-31 20:54 - 2014-05-31 20:54 - 00028320 _____ (Microsoft Corporation) C:\WINDOWS\system32\mrt100.dll 2014-05-31 20:54 - 2014-05-31 20:54 - 00026784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mrt100.dll 2014-05-31 20:54 - 2014-05-31 20:54 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wups.dll 2014-05-31 20:53 - 2014-05-31 20:53 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb 2014-05-31 20:53 - 2014-05-31 20:53 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb 2014-05-31 20:53 - 2014-05-31 20:53 - 00257880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdFilter.sys 2014-05-31 20:53 - 2014-05-31 20:53 - 00123224 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdNisDrv.sys 2014-05-31 20:53 - 2014-05-31 20:53 - 00035856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdBoot.sys 2014-05-31 20:52 - 2014-05-31 20:52 - 21268952 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 18755672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 16872448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 13287936 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 12711424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 11792384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 08652800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 07425368 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe 2014-05-31 20:52 - 2014-05-31 20:52 - 07173120 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 06645248 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 05833216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Search.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 05774848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 05104640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 04269056 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncEngine.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 04190720 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys 2014-05-31 20:52 - 2014-05-31 20:52 - 02688000 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 02144984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 02140888 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 02124840 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d9.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 02100736 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlowUI.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 01797896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d9.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 01584128 _____ (Microsoft Corporation) C:\WINDOWS\system32\workfolderssvc.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 01527296 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 01466856 _____ (Microsoft Corporation) C:\WINDOWS\system32\propsys.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 01436160 _____ (Microsoft Corporation) C:\WINDOWS\system32\VSSVC.exe 2014-05-31 20:52 - 2014-05-31 20:52 - 01411584 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 01403856 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 01379064 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpmde.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 01308160 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpsvc.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 01287168 _____ (Microsoft Corporation) C:\WINDOWS\system32\mispace.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 01230336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 01222656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Streaming.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 01209616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmde.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 01200288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\propsys.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 01200128 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthport.sys 2014-05-31 20:52 - 2014-05-31 20:52 - 01126912 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFolder.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 01057280 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdvidcrl.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 01029120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mispace.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 01025024 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00982016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Streaming.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00955904 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00918528 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00888320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00881616 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00872448 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDrive.exe 2014-05-31 20:52 - 2014-05-31 20:52 - 00855552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdvidcrl.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00836608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchFolder.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00834048 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00805376 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00765408 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00761856 _____ (Microsoft Corporation) C:\WINDOWS\system32\WorkfoldersControl.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00731648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\adtschema.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00731648 _____ (Microsoft Corporation) C:\WINDOWS\system32\adtschema.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00721408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveTelemetry.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00718336 _____ (Microsoft Corporation) C:\WINDOWS\system32\swprv.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00707048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00677376 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys 2014-05-31 20:52 - 2014-05-31 20:52 - 00669856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00629760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmCoreR.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00609448 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00589656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fvevol.sys 2014-05-31 20:52 - 2014-05-31 20:52 - 00565536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys 2014-05-31 20:52 - 2014-05-31 20:52 - 00563200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\afd.sys 2014-05-31 20:52 - 2014-05-31 20:52 - 00518544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00491744 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00491520 _____ (Microsoft Corporation) C:\WINDOWS\system32\GeofenceMonitorService.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00486912 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv 2014-05-31 20:52 - 2014-05-31 20:52 - 00467968 _____ (Microsoft Corporation) C:\WINDOWS\system32\srcore.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00467496 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00463256 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00462336 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsGdiConverter.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00449536 _____ (Microsoft Corporation) C:\WINDOWS\system32\defragsvc.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00443904 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansec.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00443904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\nwifi.sys 2014-05-31 20:52 - 2014-05-31 20:52 - 00426496 _____ (Microsoft Corporation) C:\WINDOWS\system32\clusapi.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00407016 _____ (Microsoft Corporation) C:\WINDOWS\system32\services.exe 2014-05-31 20:52 - 2014-05-31 20:52 - 00406504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00402432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys 2014-05-31 20:52 - 2014-05-31 20:52 - 00387896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00384856 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spaceport.sys 2014-05-31 20:52 - 2014-05-31 20:52 - 00372568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storport.sys 2014-05-31 20:52 - 2014-05-31 20:52 - 00370176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv 2014-05-31 20:52 - 2014-05-31 20:52 - 00370176 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanmsm.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00364640 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00360792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fltMgr.sys 2014-05-31 20:52 - 2014-05-31 20:52 - 00357376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GeofenceMonitorService.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00337408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsGdiConverter.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00337240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Classpnp.sys 2014-05-31 20:52 - 2014-05-31 20:52 - 00335872 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDEServer.exe 2014-05-31 20:52 - 2014-05-31 20:52 - 00326024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00324888 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFCaptureEngine.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00323072 _____ (Microsoft Corporation) C:\WINDOWS\system32\srvsvc.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00313344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\clusapi.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00310616 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\volsnap.sys 2014-05-31 20:52 - 2014-05-31 20:52 - 00307304 _____ (Microsoft Corporation) C:\WINDOWS\system32\wintrust.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00305768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00300544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanmsm.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00296960 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanapi.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00285144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFCaptureEngine.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00281600 _____ (Microsoft Corporation) C:\WINDOWS\system32\resutils.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00275800 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msiscsi.sys 2014-05-31 20:52 - 2014-05-31 20:52 - 00271872 _____ (Microsoft Corporation) C:\WINDOWS\system32\rstrui.exe 2014-05-31 20:52 - 2014-05-31 20:52 - 00263424 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlows.exe 2014-05-31 20:52 - 2014-05-31 20:52 - 00250368 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpencom.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00246272 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srvnet.sys 2014-05-31 20:52 - 2014-05-31 20:52 - 00244880 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe 2014-05-31 20:52 - 2014-05-31 20:52 - 00233912 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00230808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wintrust.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanapi.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00219136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\resutils.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00209920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpencom.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00206848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys 2014-05-31 20:52 - 2014-05-31 20:52 - 00201920 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVideoDSP.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00201216 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00191488 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpchttp.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00186880 _____ (Microsoft Corporation) C:\WINDOWS\system32\WorkFoldersShell.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00180056 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys 2014-05-31 20:52 - 2014-05-31 20:52 - 00178184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVideoDSP.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00144384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpchttp.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00143872 _____ (Microsoft Corporation) C:\WINDOWS\system32\BootMenuUX.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00135168 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscsvc.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00130144 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpapi.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00125496 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmapi.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00111528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gpapi.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00098584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmapi.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00077312 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hdaudbus.sys 2014-05-31 20:52 - 2014-05-31 20:52 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\system32\srclient.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsgqec.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\srclient.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00055296 _____ (Microsoft Corporation) C:\WINDOWS\system32\energyprov.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tsgqec.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00047616 _____ (Microsoft Corporation) C:\WINDOWS\system32\tlscsp.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00046592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tlscsp.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Shell.Search.UriHandler.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Shell.Search.UriHandler.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00032600 _____ (Microsoft Corporation) C:\WINDOWS\system32\ploptin.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00028408 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfpmp.exe 2014-05-31 20:52 - 2014-05-31 20:52 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d8thk.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanhlp.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanhlp.dll 2014-05-31 20:51 - 2014-05-31 20:51 - 00262144 _____ () C:\WINDOWS\system32\config\userdiff 2014-05-31 20:49 - 2014-05-31 20:49 - 00001465 _____ () C:\Users\sabine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2014-05-31 20:48 - 2014-05-31 20:48 - 00000020 ___SH () C:\Users\sabine\ntuser.ini 2014-05-31 20:48 - 2014-05-31 20:48 - 00000000 ____D () C:\WINDOWS\SysWOW64\XPSViewer 2014-05-31 20:48 - 2014-05-31 20:48 - 00000000 ____D () C:\Program Files\Reference Assemblies 2014-05-31 20:48 - 2014-05-31 20:48 - 00000000 ____D () C:\Program Files\MSBuild 2014-05-31 20:48 - 2014-05-31 20:48 - 00000000 ____D () C:\Program Files (x86)\Reference Assemblies 2014-05-31 20:48 - 2014-05-31 20:48 - 00000000 ____D () C:\Program Files (x86)\MSBuild 2014-05-31 20:48 - 2013-08-03 06:48 - 01166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll 2014-05-31 20:48 - 2013-08-03 06:48 - 00124112 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll 2014-05-31 20:48 - 2013-08-03 06:48 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe 2014-05-31 20:48 - 2013-08-03 06:41 - 00778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll 2014-05-31 20:48 - 2013-08-03 06:41 - 00102608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll 2014-05-31 20:48 - 2013-08-03 06:41 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe 2014-05-31 20:29 - 2014-05-31 20:29 - 00000000 _SHDL () C:\Users\Default\Vorlagen 2014-05-31 20:29 - 2014-05-31 20:29 - 00000000 _SHDL () C:\Users\Default\Startmenü 2014-05-31 20:29 - 2014-05-31 20:29 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung 2014-05-31 20:29 - 2014-05-31 20:29 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen 2014-05-31 20:29 - 2014-05-31 20:29 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien 2014-05-31 20:29 - 2014-05-31 20:29 - 00000000 _SHDL () C:\Users\Default\Druckumgebung 2014-05-31 20:29 - 2014-05-31 20:29 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik 2014-05-31 20:29 - 2014-05-31 20:29 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder 2014-05-31 20:29 - 2014-05-31 20:29 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-05-31 20:29 - 2014-05-31 20:29 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf 2014-05-31 20:29 - 2014-05-31 20:29 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten 2014-05-31 20:29 - 2014-05-31 20:29 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten 2014-05-31 20:29 - 2014-05-31 20:29 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik 2014-05-31 20:29 - 2014-05-31 20:29 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder 2014-05-31 20:29 - 2014-05-31 20:29 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-05-31 20:29 - 2014-05-31 20:29 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf 2014-05-31 20:29 - 2014-05-31 20:29 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten 2014-05-31 20:28 - 2014-05-31 20:28 - 00022960 _____ () C:\WINDOWS\system32\emptyregdb.dat 2014-05-31 20:24 - 2014-05-31 20:24 - 00000020 ___SH () C:\Users\UpdatusUser\ntuser.ini 2014-05-31 20:15 - 2014-05-31 20:15 - 00001547 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk 2014-05-31 20:15 - 2014-05-31 20:15 - 00000000 ____D () C:\Users\Default\AppData\Roaming\Macromedia 2014-05-31 20:15 - 2014-05-31 20:15 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\Macromedia 2014-05-31 20:10 - 2014-05-31 20:10 - 00000000 ____D () C:\WINDOWS\system32\config\bbimigrate 2014-05-31 20:08 - 2014-06-16 07:36 - 00000000 ____D () C:\Users\sabine\AppData\Local\Temp 2014-05-31 20:08 - 2014-06-16 07:24 - 00000000 ____D () C:\Users\sabine 2014-05-31 20:08 - 2014-06-13 19:48 - 00000000 ____D () C:\Users\UpdatusUser\AppData\Local\Temp 2014-05-31 20:08 - 2014-05-31 20:10 - 00000000 ___RD () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2014-05-31 20:08 - 2014-05-31 20:10 - 00000000 ___RD () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility 2014-05-31 20:08 - 2014-05-31 20:10 - 00000000 ___RD () C:\Users\sabine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2014-05-31 20:08 - 2014-05-31 20:10 - 00000000 ___RD () C:\Users\sabine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility 2014-05-31 20:08 - 2014-05-31 20:08 - 00000000 _SHDL () C:\Users\UpdatusUser\Vorlagen 2014-05-31 20:08 - 2014-05-31 20:08 - 00000000 _SHDL () C:\Users\UpdatusUser\Startmenü 2014-05-31 20:08 - 2014-05-31 20:08 - 00000000 _SHDL () C:\Users\UpdatusUser\Netzwerkumgebung 2014-05-31 20:08 - 2014-05-31 20:08 - 00000000 _SHDL () C:\Users\UpdatusUser\Lokale Einstellungen 2014-05-31 20:08 - 2014-05-31 20:08 - 00000000 _SHDL () C:\Users\UpdatusUser\Eigene Dateien 2014-05-31 20:08 - 2014-05-31 20:08 - 00000000 _SHDL () C:\Users\UpdatusUser\Druckumgebung 2014-05-31 20:08 - 2014-05-31 20:08 - 00000000 _SHDL () C:\Users\UpdatusUser\Documents\Eigene Musik 2014-05-31 20:08 - 2014-05-31 20:08 - 00000000 _SHDL () C:\Users\UpdatusUser\Documents\Eigene Bilder 2014-05-31 20:08 - 2014-05-31 20:08 - 00000000 _SHDL () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-05-31 20:08 - 2014-05-31 20:08 - 00000000 _SHDL () C:\Users\UpdatusUser\AppData\Local\Verlauf 2014-05-31 20:08 - 2014-05-31 20:08 - 00000000 _SHDL () C:\Users\UpdatusUser\AppData\Local\Anwendungsdaten 2014-05-31 20:08 - 2014-05-31 20:08 - 00000000 _SHDL () C:\Users\UpdatusUser\Anwendungsdaten 2014-05-31 20:08 - 2014-05-31 20:08 - 00000000 _SHDL () C:\Users\sabine\Vorlagen 2014-05-31 20:08 - 2014-05-31 20:08 - 00000000 _SHDL () C:\Users\sabine\Startmenü 2014-05-31 20:08 - 2014-05-31 20:08 - 00000000 _SHDL () C:\Users\sabine\Netzwerkumgebung 2014-05-31 20:08 - 2014-05-31 20:08 - 00000000 _SHDL () C:\Users\sabine\Lokale Einstellungen 2014-05-31 20:08 - 2014-05-31 20:08 - 00000000 _SHDL () C:\Users\sabine\Eigene Dateien 2014-05-31 20:08 - 2014-05-31 20:08 - 00000000 _SHDL () C:\Users\sabine\Druckumgebung 2014-05-31 20:08 - 2014-05-31 20:08 - 00000000 _SHDL () C:\Users\sabine\Documents\Eigene Musik 2014-05-31 20:08 - 2014-05-31 20:08 - 00000000 _SHDL () C:\Users\sabine\Documents\Eigene Bilder 2014-05-31 20:08 - 2014-05-31 20:08 - 00000000 _SHDL () C:\Users\sabine\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-05-31 20:08 - 2014-05-31 20:08 - 00000000 _SHDL () C:\Users\sabine\AppData\Local\Verlauf 2014-05-31 20:08 - 2014-05-31 20:08 - 00000000 _SHDL () C:\Users\sabine\AppData\Local\Anwendungsdaten 2014-05-31 20:08 - 2014-05-31 20:08 - 00000000 _SHDL () C:\Users\sabine\Anwendungsdaten 2014-05-31 20:08 - 2014-03-18 12:11 - 00000369 _____ () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk 2014-05-31 20:08 - 2014-03-18 12:11 - 00000369 _____ () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk 2014-05-31 20:08 - 2014-03-18 12:11 - 00000369 _____ () C:\Users\sabine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk 2014-05-31 20:08 - 2014-03-18 12:11 - 00000369 _____ () C:\Users\sabine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk 2014-05-31 20:08 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2014-05-31 20:08 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\sabine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2014-05-31 20:08 - 2013-08-22 17:36 - 00000000 ____D () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance 2014-05-31 20:08 - 2013-08-22 17:36 - 00000000 ____D () C:\Users\sabine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance 2014-05-31 20:07 - 2014-05-31 20:28 - 00032388 _____ () C:\WINDOWS\diagwrn.xml 2014-05-31 20:07 - 2014-05-31 20:28 - 00032388 _____ () C:\WINDOWS\diagerr.xml 2014-05-31 20:02 - 2014-05-31 20:02 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_Kernel_iBtFltCoex_01009.Wdf 2014-05-31 20:02 - 2014-05-31 20:02 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_Kernel_dc3d_01011.Wdf 2014-05-31 20:02 - 2014-05-31 20:02 - 00000000 ____D () C:\Program Files (x86)\USB Camera 2014-05-31 20:01 - 2014-05-31 20:18 - 00000000 ____D () C:\WINDOWS\SysWOW64\NV 2014-05-31 20:01 - 2014-05-31 20:18 - 00000000 ____D () C:\WINDOWS\system32\NV 2014-05-31 20:01 - 2014-05-31 20:13 - 00000000 ____D () C:\ProgramData\NVIDIA 2014-05-31 20:01 - 2014-05-31 20:13 - 00000000 ____D () C:\Program Files\CONEXANT 2014-05-31 20:01 - 2014-05-31 20:13 - 00000000 ____D () C:\Program Files (x86)\Intel 2014-05-31 20:01 - 2014-05-31 20:01 - 00000264 _____ () C:\WINDOWS\Tasks\Synaptics TouchPad Enhancements.job 2014-05-31 20:01 - 2014-05-31 20:01 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_Kernel_SynTP_01011.Wdf 2014-05-31 20:01 - 2014-05-31 20:01 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_Kernel_Smb_driver_Intel_01011.Wdf 2014-05-31 20:01 - 2014-05-31 20:01 - 00000000 ____D () C:\Program Files\Synaptics 2014-05-31 20:01 - 2014-01-25 02:23 - 00064000 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.DLL 2014-05-31 20:01 - 2014-01-25 02:23 - 00060416 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.DLL 2014-05-31 20:00 - 2014-06-16 07:24 - 01330840 _____ () C:\WINDOWS\WindowsUpdate.log 2014-05-31 20:00 - 2014-05-31 20:13 - 00000000 ____D () C:\Program Files\NVIDIA Corporation 2014-05-31 20:00 - 2014-05-31 20:13 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation 2014-05-31 20:00 - 2014-05-31 20:00 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation 2014-05-31 20:00 - 2013-10-29 01:39 - 06610720 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll 2014-05-31 20:00 - 2013-10-29 01:39 - 03477280 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc64.dll 2014-05-31 20:00 - 2013-10-29 01:38 - 02559776 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvcr.dll 2014-05-31 20:00 - 2013-10-29 01:38 - 01042720 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshext.dll 2014-05-31 20:00 - 2013-10-29 01:38 - 00920864 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe 2014-05-31 20:00 - 2013-10-29 01:38 - 00580384 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\oemdspif.dll 2014-05-31 20:00 - 2013-10-29 01:38 - 00219424 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmctray.dll 2014-05-31 20:00 - 2013-10-29 01:38 - 00067072 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshextr.dll 2014-05-31 20:00 - 2013-10-29 01:38 - 00063776 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvshext.dll 2014-05-31 20:00 - 2013-10-25 13:44 - 03435888 _____ () C:\WINDOWS\system32\nvcoproc.bin 2014-05-31 19:20 - 2014-05-31 20:28 - 00006611 _____ () C:\WINDOWS\comsetup.log 2014-05-31 13:14 - 2014-06-01 12:41 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2014-05-30 16:46 - 2014-05-30 16:46 - 00000000 ___SD () C:\Users\sabine\Documents\Meine Datenquellen 2014-05-27 20:56 - 2014-05-30 07:17 - 00000000 ____D () C:\Program Files (x86)\VideoLAN |
16.06.2014, 06:42 | #7 |
| Regsvr32 Fehler beim jedem Windows-StartCode:
ATTFilter ==================== One Month Modified Files and Folders ======= 2014-06-16 07:36 - 2014-06-15 07:23 - 00000000 ____D () C:\FRST 2014-06-16 07:36 - 2014-05-31 20:08 - 00000000 ____D () C:\Users\sabine\AppData\Local\Temp 2014-06-16 07:36 - 2013-12-06 16:56 - 00000000 ____D () C:\Users\sabine\Software 2014-06-16 07:35 - 2014-06-16 07:35 - 00000724 _____ () C:\Users\sabine\Desktop\JRT.txt 2014-06-16 07:35 - 2013-08-22 16:46 - 00337925 _____ () C:\WINDOWS\setupact.log 2014-06-16 07:31 - 2014-03-18 12:03 - 01776918 _____ () C:\WINDOWS\system32\PerfStringBackup.INI 2014-06-16 07:31 - 2014-03-18 11:25 - 00765582 _____ () C:\WINDOWS\system32\perfh007.dat 2014-06-16 07:31 - 2014-03-18 11:25 - 00159366 _____ () C:\WINDOWS\system32\perfc007.dat 2014-06-16 07:30 - 2013-10-12 15:28 - 00003598 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1240990677-1578086025-3834589401-1002 2014-06-16 07:29 - 2014-06-16 07:29 - 00000000 ____D () C:\WINDOWS\ERUNT 2014-06-16 07:28 - 2013-10-11 18:04 - 00000000 ____D () C:\Users\sabine\AppData\Roaming\Nitro PDF 2014-06-16 07:27 - 2014-06-16 07:27 - 01016261 _____ (Thisisu) C:\Users\sabine\Desktop\JRT.exe 2014-06-16 07:25 - 2014-06-16 07:25 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bluetooth Devices 2014-06-16 07:25 - 2014-06-16 07:02 - 00122584 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys 2014-06-16 07:25 - 2014-03-18 03:50 - 00021418 _____ () C:\WINDOWS\PFRO.log 2014-06-16 07:25 - 2013-10-11 18:04 - 00000377 _____ () C:\Users\sabine\AppData\Local\RegisteredPackageInformation.xml 2014-06-16 07:25 - 2013-08-22 16:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT 2014-06-16 07:24 - 2014-05-31 20:08 - 00000000 ____D () C:\Users\sabine 2014-06-16 07:24 - 2014-05-31 20:00 - 01330840 _____ () C:\WINDOWS\WindowsUpdate.log 2014-06-16 07:24 - 2014-01-21 22:15 - 00000000 ____D () C:\AdwCleaner 2014-06-16 07:22 - 2014-06-16 07:22 - 00002708 _____ () C:\Users\sabine\Desktop\mbam.txt 2014-06-16 07:18 - 2013-12-28 17:32 - 00000000 ____D () C:\Temp 2014-06-16 07:18 - 2013-08-22 16:45 - 00000000 ____D () C:\WINDOWS\Setup 2014-06-16 07:15 - 2014-06-16 06:36 - 00000000 ____D () C:\Users\sabine\AppData\Roaming\Nico Mak Computing 2014-06-16 07:02 - 2014-06-16 07:02 - 00001129 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-06-16 07:02 - 2014-06-16 07:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2014-06-16 07:02 - 2014-06-16 07:02 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 2014-06-16 07:02 - 2014-01-21 22:01 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-06-16 07:02 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\sru 2014-06-16 06:31 - 2014-05-31 20:59 - 00003946 _____ () C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{02C6F728-BF56-436A-A768-4B9C5F40F7D4} 2014-06-14 21:34 - 2013-12-06 17:22 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service 2014-06-14 19:35 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\AppReadiness 2014-06-14 17:55 - 2013-12-12 21:46 - 00000000 ____D () C:\Users\sabine\Haus Reichshofstraße 2014-06-13 19:48 - 2014-05-31 20:08 - 00000000 ____D () C:\Users\UpdatusUser\AppData\Local\Temp 2014-06-12 07:02 - 2013-12-12 21:46 - 00000000 ____D () C:\Users\sabine\Dies&Das 2014-06-12 04:10 - 2014-06-11 21:11 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird 2014-06-11 21:09 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\rescache 2014-06-11 20:51 - 2013-08-22 15:25 - 00262144 ___SH () C:\WINDOWS\system32\config\BBI 2014-06-11 20:50 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\WinStore 2014-06-11 20:25 - 2013-12-16 16:59 - 00000000 ____D () C:\ProgramData\Microsoft Help 2014-06-11 20:25 - 2012-07-26 09:59 - 00000000 ____D () C:\WINDOWS\CbsTemp 2014-06-11 20:24 - 2013-12-06 17:59 - 00000000 ____D () C:\WINDOWS\system32\MRT 2014-06-11 20:23 - 2013-12-06 17:59 - 95414520 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe 2014-06-11 20:23 - 2013-08-22 17:36 - 00000000 ___RD () C:\WINDOWS\ToastData 2014-06-11 20:23 - 2013-08-22 15:25 - 00262144 ___SH () C:\WINDOWS\system32\config\ELAM 2014-06-11 19:49 - 2013-12-13 19:09 - 00130584 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avipbb.sys 2014-06-11 19:49 - 2013-12-13 19:09 - 00112080 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avgntflt.sys 2014-06-01 14:16 - 2013-12-13 20:19 - 00000000 ____D () C:\Users\sabine\AppData\Roaming\MyPhoneExplorer 2014-06-01 13:23 - 2014-06-01 13:23 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MyPhoneExplorer 2014-06-01 13:23 - 2013-12-13 20:19 - 00002084 _____ () C:\Users\Public\Desktop\MyPhoneExplorer.lnk 2014-06-01 13:23 - 2013-12-13 20:19 - 00000000 ____D () C:\Program Files (x86)\MyPhoneExplorer 2014-06-01 12:41 - 2014-05-31 13:14 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2014-06-01 12:41 - 2013-12-06 17:22 - 00001186 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk 2014-06-01 12:41 - 2013-12-06 17:22 - 00001174 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk 2014-06-01 12:31 - 2013-12-06 18:28 - 00003558 _____ () C:\WINDOWS\System32\Tasks\CreateChoiceProcessTask 2014-06-01 12:29 - 2013-08-22 16:44 - 00430280 _____ () C:\WINDOWS\system32\FNTCACHE.DAT 2014-06-01 06:58 - 2012-07-26 07:26 - 00000235 _____ () C:\WINDOWS\win.ini 2014-05-31 22:48 - 2014-05-31 22:48 - 00000000 ___RD () C:\WINDOWS\BrowserChoice 2014-05-31 22:48 - 2013-10-11 18:03 - 00000000 ____D () C:\Users\sabine\AppData\Local\Packages 2014-05-31 22:47 - 2014-05-31 22:47 - 00000000 ____D () C:\WINDOWS\PCHEALTH 2014-05-31 22:47 - 2014-05-31 22:47 - 00000000 ____D () C:\Users\Default\AppData\Local\Microsoft Help 2014-05-31 22:47 - 2014-05-31 22:47 - 00000000 ____D () C:\Users\Default User\AppData\Local\Microsoft Help 2014-05-31 22:47 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared 2014-05-31 21:10 - 2014-04-06 20:06 - 00000000 ____D () C:\Users\sabine\AppData\Roaming\LSC 2014-05-31 21:09 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\restore 2014-05-31 21:09 - 2013-08-08 15:53 - 00000000 ____D () C:\WINDOWS\System32\Tasks\Lenovo 2014-05-31 21:09 - 2013-08-08 15:53 - 00000000 ____D () C:\WINDOWS\Downloaded Installations 2014-05-31 21:09 - 2013-08-08 15:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lenovo ThinkVantage Tools 2014-05-31 21:09 - 2013-08-08 15:33 - 00000000 ____D () C:\Program Files\Lenovo 2014-05-31 20:58 - 2014-05-31 20:58 - 00000000 __SHD () C:\Users\sabine\AppData\Local\EmieUserList 2014-05-31 20:58 - 2014-05-31 20:58 - 00000000 __SHD () C:\Users\sabine\AppData\Local\EmieSiteList 2014-05-31 20:57 - 2014-05-31 20:57 - 00000000 __SHD () C:\Recovery 2014-05-31 20:56 - 2014-05-31 20:56 - 00308224 _____ (Microsoft Corporation) C:\WINDOWS\system32\wusa.exe 2014-05-31 20:56 - 2014-05-31 20:56 - 00305152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wusa.exe 2014-05-31 20:56 - 2013-08-22 17:36 - 00262144 _____ () C:\WINDOWS\system32\config\BCD-Template 2014-05-31 20:56 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\setup 2014-05-31 20:55 - 2014-05-31 20:55 - 02900992 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 02641920 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 02479616 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmSvc.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 02373784 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe 2014-05-31 20:55 - 2014-05-31 20:55 - 02331000 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 02317824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 02270208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 02141912 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 02133504 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 02088160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe 2014-05-31 20:55 - 2014-05-31 20:55 - 02030080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WsmSvc.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 02013016 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys 2014-05-31 20:55 - 2014-05-31 20:55 - 01843712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Display.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 01816576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Display.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 01779800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 01764864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 01679128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 01656832 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 01557848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys 2014-05-31 20:55 - 2014-05-31 20:55 - 01542768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 01351168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 01306624 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 01291200 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel32.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 01112536 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 01095488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 01063424 _____ (Microsoft Corporation) C:\WINDOWS\system32\IKEEXT.DLL 2014-05-31 20:55 - 2014-05-31 20:55 - 01036288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kernel32.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 01015808 _____ (Microsoft Corporation) C:\WINDOWS\system32\aclui.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00950784 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgent.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00939520 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00924160 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00887296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aclui.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00836096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00834560 _____ (Microsoft Corporation) C:\WINDOWS\system32\netlogon.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00827392 _____ (Microsoft Corporation) C:\WINDOWS\system32\BFE.DLL 2014-05-31 20:55 - 2014-05-31 20:55 - 00800256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReAgent.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00755712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00717312 _____ (Microsoft Corporation) C:\WINDOWS\system32\nshwfp.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00688640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netlogon.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00669696 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasapi32.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00655360 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsapi.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00621568 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAgent.exe 2014-05-31 20:55 - 2014-05-31 20:55 - 00605184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasapi32.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00567296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nshwfp.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00542208 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.Printing.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00518552 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00512000 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidprov.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00494592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dnsapi.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00488280 _____ (Microsoft Corporation) C:\WINDOWS\system32\netcfgx.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00467800 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS 2014-05-31 20:55 - 2014-05-31 20:55 - 00462336 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlangpui.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00412672 _____ (Microsoft Corporation) C:\WINDOWS\system32\FWPUCLNT.DLL 2014-05-31 20:55 - 2014-05-31 20:55 - 00406912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00402432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Graphics.Printing.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00390488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netcfgx.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00387210 _____ () C:\WINDOWS\system32\ApnDatabase.xml 2014-05-31 20:55 - 2014-05-31 20:55 - 00386560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlangpui.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00379224 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys 2014-05-31 20:55 - 2014-05-31 20:55 - 00376152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys 2014-05-31 20:55 - 2014-05-31 20:55 - 00360512 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfreadwrite.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00356864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlidprov.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00356848 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcomp.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00355832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfreadwrite.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00325632 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationApi.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00324096 _____ (Microsoft Corporation) C:\WINDOWS\system32\SessEnv.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00299008 _____ (Microsoft Corporation) C:\WINDOWS\system32\pdh.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00298496 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSDMon.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00291840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Sensors.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00283648 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb10.sys 2014-05-31 20:55 - 2014-05-31 20:55 - 00280576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SessEnv.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00274944 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmWmiPl.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00271872 _____ (Microsoft Corporation) C:\WINDOWS\system32\spp.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00264192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FWPUCLNT.DLL 2014-05-31 20:55 - 2014-05-31 20:55 - 00262656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LocationApi.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00254976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pdh.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00254464 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsrslvr.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00252928 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00247296 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsApi.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00226304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Sensors.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00222720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\spp.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00222720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dcomp.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00220160 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00212992 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdd.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00201216 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReInfo.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00197632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00192000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Scanners.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00186368 _____ (Microsoft Corporation) C:\WINDOWS\system32\dafWfdProvider.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00172544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReInfo.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00171008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SensorsApi.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00160768 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxAllUserStore.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00157016 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wof.sys 2014-05-31 20:55 - 2014-05-31 20:55 - 00151040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Scanners.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxdav.sys 2014-05-31 20:55 - 2014-05-31 20:55 - 00139776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxAllUserStore.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00136024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wfplwfs.sys 2014-05-31 20:55 - 2014-05-31 20:55 - 00134144 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dfsc.sys 2014-05-31 20:55 - 2014-05-31 20:55 - 00115200 _____ (Microsoft Corporation) C:\WINDOWS\system32\umpnpmgr.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00115200 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevPropMgr.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00113648 _____ (Microsoft Corporation) C:\WINDOWS\system32\userenv.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00111616 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidclass.sys 2014-05-31 20:55 - 2014-05-31 20:55 - 00102912 _____ (Microsoft Corporation) C:\WINDOWS\system32\davclnt.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00094016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\userenv.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00086016 _____ (Microsoft Corporation) C:\WINDOWS\system32\RMapi.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\davclnt.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\sxproxy.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00079360 _____ (Microsoft Corporation) C:\WINDOWS\system32\w32tm.exe 2014-05-31 20:55 - 2014-05-31 20:55 - 00079360 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\IPMIDrv.sys 2014-05-31 20:55 - 2014-05-31 20:55 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\w32tm.exe 2014-05-31 20:55 - 2014-05-31 20:55 - 00069120 _____ (Microsoft Corporation) C:\WINDOWS\system32\l2gpstore.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\l2gpstore.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpipreg.sys 2014-05-31 20:55 - 2014-05-31 20:55 - 00040448 _____ (Microsoft Corporation) C:\WINDOWS\system32\SetNetworkLocation.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sxproxy.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00033280 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidusb.sys 2014-05-31 20:55 - 2014-05-31 20:55 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredentialMigrationHandler.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredentialMigrationHandler.dll 2014-05-31 20:54 - 2014-05-31 20:54 - 03464192 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll 2014-05-31 20:54 - 2014-05-31 20:54 - 01705472 _____ (Microsoft Corporation) C:\WINDOWS\system32\wucltux.dll 2014-05-31 20:54 - 2014-05-31 20:54 - 01054208 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.appcore.dll 2014-05-31 20:54 - 2014-05-31 20:54 - 00828928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.appcore.dll 2014-05-31 20:54 - 2014-05-31 20:54 - 00827392 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll 2014-05-31 20:54 - 2014-05-31 20:54 - 00666624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll 2014-05-31 20:54 - 2014-05-31 20:54 - 00555736 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.appcore.dll 2014-05-31 20:54 - 2014-05-31 20:54 - 00419928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.appcore.dll 2014-05-31 20:54 - 2014-05-31 20:54 - 00381440 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUSettingsProvider.dll 2014-05-31 20:54 - 2014-05-31 20:54 - 00201728 _____ (Microsoft Corporation) C:\WINDOWS\system32\ubpm.dll 2014-05-31 20:54 - 2014-05-31 20:54 - 00190976 _____ (Microsoft Corporation) C:\WINDOWS\system32\storewuauth.dll 2014-05-31 20:54 - 2014-05-31 20:54 - 00137728 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuwebv.dll 2014-05-31 20:54 - 2014-05-31 20:54 - 00123904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuwebv.dll 2014-05-31 20:54 - 2014-05-31 20:54 - 00093696 _____ (Microsoft Corporation) C:\WINDOWS\system32\wudriver.dll 2014-05-31 20:54 - 2014-05-31 20:54 - 00086688 _____ (Microsoft Corporation) C:\WINDOWS\system32\mrt_map.dll 2014-05-31 20:54 - 2014-05-31 20:54 - 00080896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wudriver.dll 2014-05-31 20:54 - 2014-05-31 20:54 - 00080032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mrt_map.dll 2014-05-31 20:54 - 2014-05-31 20:54 - 00056320 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups.dll 2014-05-31 20:54 - 2014-05-31 20:54 - 00054776 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe 2014-05-31 20:54 - 2014-05-31 20:54 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapp.exe 2014-05-31 20:54 - 2014-05-31 20:54 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapp.exe 2014-05-31 20:54 - 2014-05-31 20:54 - 00028320 _____ (Microsoft Corporation) C:\WINDOWS\system32\mrt100.dll 2014-05-31 20:54 - 2014-05-31 20:54 - 00026784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mrt100.dll 2014-05-31 20:54 - 2014-05-31 20:54 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wups.dll 2014-05-31 20:54 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\SecureBootUpdates 2014-05-31 20:53 - 2014-05-31 20:53 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb 2014-05-31 20:53 - 2014-05-31 20:53 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb 2014-05-31 20:53 - 2014-05-31 20:53 - 00257880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdFilter.sys 2014-05-31 20:53 - 2014-05-31 20:53 - 00123224 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdNisDrv.sys 2014-05-31 20:53 - 2014-05-31 20:53 - 00035856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdBoot.sys 2014-05-31 20:53 - 2013-08-22 17:36 - 00000000 ___RD () C:\WINDOWS\ImmersiveControlPanel 2014-05-31 20:53 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2014-05-31 20:53 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2014-05-31 20:53 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files\Windows Defender 2014-05-31 20:53 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files (x86)\Windows Defender 2014-05-31 20:52 - 2014-05-31 20:52 - 21268952 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 18755672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 16872448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 13287936 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 12711424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 11792384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 08652800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 07425368 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe 2014-05-31 20:52 - 2014-05-31 20:52 - 07173120 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 06645248 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 05833216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Search.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 05774848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 05104640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 04269056 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncEngine.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 04190720 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys 2014-05-31 20:52 - 2014-05-31 20:52 - 02688000 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 02144984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 02140888 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 02124840 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d9.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 02100736 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlowUI.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 01797896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d9.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 01584128 _____ (Microsoft Corporation) C:\WINDOWS\system32\workfolderssvc.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 01527296 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 01466856 _____ (Microsoft Corporation) C:\WINDOWS\system32\propsys.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 01436160 _____ (Microsoft Corporation) C:\WINDOWS\system32\VSSVC.exe 2014-05-31 20:52 - 2014-05-31 20:52 - 01411584 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 01403856 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 01379064 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpmde.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 01308160 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpsvc.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 01287168 _____ (Microsoft Corporation) C:\WINDOWS\system32\mispace.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 01230336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 01222656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Streaming.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 01209616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmde.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 01200288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\propsys.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 01200128 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthport.sys 2014-05-31 20:52 - 2014-05-31 20:52 - 01126912 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFolder.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 01057280 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdvidcrl.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 01029120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mispace.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 01025024 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00982016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Streaming.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00955904 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00918528 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00888320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00881616 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00872448 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDrive.exe 2014-05-31 20:52 - 2014-05-31 20:52 - 00855552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdvidcrl.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00836608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchFolder.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00834048 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00805376 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00765408 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00761856 _____ (Microsoft Corporation) C:\WINDOWS\system32\WorkfoldersControl.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00731648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\adtschema.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00731648 _____ (Microsoft Corporation) C:\WINDOWS\system32\adtschema.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00721408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveTelemetry.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00718336 _____ (Microsoft Corporation) C:\WINDOWS\system32\swprv.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00707048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00677376 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys 2014-05-31 20:52 - 2014-05-31 20:52 - 00669856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00629760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmCoreR.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00609448 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00589656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fvevol.sys 2014-05-31 20:52 - 2014-05-31 20:52 - 00565536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys 2014-05-31 20:52 - 2014-05-31 20:52 - 00563200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\afd.sys 2014-05-31 20:52 - 2014-05-31 20:52 - 00518544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00491744 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00491520 _____ (Microsoft Corporation) C:\WINDOWS\system32\GeofenceMonitorService.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00486912 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv 2014-05-31 20:52 - 2014-05-31 20:52 - 00467968 _____ (Microsoft Corporation) C:\WINDOWS\system32\srcore.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00467496 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00463256 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00462336 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsGdiConverter.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00449536 _____ (Microsoft Corporation) C:\WINDOWS\system32\defragsvc.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00443904 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansec.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00443904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\nwifi.sys 2014-05-31 20:52 - 2014-05-31 20:52 - 00426496 _____ (Microsoft Corporation) C:\WINDOWS\system32\clusapi.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00407016 _____ (Microsoft Corporation) C:\WINDOWS\system32\services.exe 2014-05-31 20:52 - 2014-05-31 20:52 - 00406504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00402432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys 2014-05-31 20:52 - 2014-05-31 20:52 - 00387896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00384856 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spaceport.sys 2014-05-31 20:52 - 2014-05-31 20:52 - 00372568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storport.sys 2014-05-31 20:52 - 2014-05-31 20:52 - 00370176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv 2014-05-31 20:52 - 2014-05-31 20:52 - 00370176 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanmsm.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00364640 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00360792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fltMgr.sys 2014-05-31 20:52 - 2014-05-31 20:52 - 00357376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GeofenceMonitorService.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00337408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsGdiConverter.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00337240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Classpnp.sys 2014-05-31 20:52 - 2014-05-31 20:52 - 00335872 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDEServer.exe 2014-05-31 20:52 - 2014-05-31 20:52 - 00326024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00324888 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFCaptureEngine.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00323072 _____ (Microsoft Corporation) C:\WINDOWS\system32\srvsvc.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00313344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\clusapi.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00310616 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\volsnap.sys 2014-05-31 20:52 - 2014-05-31 20:52 - 00307304 _____ (Microsoft Corporation) C:\WINDOWS\system32\wintrust.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00305768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00300544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanmsm.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00296960 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanapi.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00285144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFCaptureEngine.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00281600 _____ (Microsoft Corporation) C:\WINDOWS\system32\resutils.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00275800 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msiscsi.sys 2014-05-31 20:52 - 2014-05-31 20:52 - 00271872 _____ (Microsoft Corporation) C:\WINDOWS\system32\rstrui.exe 2014-05-31 20:52 - 2014-05-31 20:52 - 00263424 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlows.exe 2014-05-31 20:52 - 2014-05-31 20:52 - 00250368 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpencom.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00246272 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srvnet.sys 2014-05-31 20:52 - 2014-05-31 20:52 - 00244880 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe 2014-05-31 20:52 - 2014-05-31 20:52 - 00233912 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00230808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wintrust.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanapi.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00219136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\resutils.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00209920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpencom.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00206848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys 2014-05-31 20:52 - 2014-05-31 20:52 - 00201920 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVideoDSP.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00201216 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00191488 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpchttp.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00186880 _____ (Microsoft Corporation) C:\WINDOWS\system32\WorkFoldersShell.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00180056 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys 2014-05-31 20:52 - 2014-05-31 20:52 - 00178184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVideoDSP.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00144384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpchttp.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00143872 _____ (Microsoft Corporation) C:\WINDOWS\system32\BootMenuUX.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00135168 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscsvc.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00130144 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpapi.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00125496 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmapi.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00111528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gpapi.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00098584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmapi.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00077312 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hdaudbus.sys 2014-05-31 20:52 - 2014-05-31 20:52 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\system32\srclient.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsgqec.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\srclient.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00055296 _____ (Microsoft Corporation) C:\WINDOWS\system32\energyprov.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tsgqec.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00047616 _____ (Microsoft Corporation) C:\WINDOWS\system32\tlscsp.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00046592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tlscsp.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Shell.Search.UriHandler.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Shell.Search.UriHandler.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00032600 _____ (Microsoft Corporation) C:\WINDOWS\system32\ploptin.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00028408 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfpmp.exe 2014-05-31 20:52 - 2014-05-31 20:52 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d8thk.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanhlp.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanhlp.dll 2014-05-31 20:51 - 2014-05-31 20:51 - 00262144 _____ () C:\WINDOWS\system32\config\userdiff 2014-05-31 20:50 - 2013-10-11 18:08 - 00000000 ___RD () C:\Users\sabine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2014-05-31 20:50 - 2013-10-11 18:08 - 00000000 ___RD () C:\Users\sabine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools 2014-05-31 20:49 - 2014-05-31 20:57 - 00000000 ___DC () C:\WINDOWS\Panther 2014-05-31 20:49 - 2014-05-31 20:49 - 00001465 _____ () C:\Users\sabine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2014-05-31 20:48 - 2014-05-31 20:48 - 00000020 ___SH () C:\Users\sabine\ntuser.ini 2014-05-31 20:48 - 2014-05-31 20:48 - 00000000 ____D () C:\WINDOWS\SysWOW64\XPSViewer 2014-05-31 20:48 - 2014-05-31 20:48 - 00000000 ____D () C:\Program Files\Reference Assemblies 2014-05-31 20:48 - 2014-05-31 20:48 - 00000000 ____D () C:\Program Files\MSBuild 2014-05-31 20:48 - 2014-05-31 20:48 - 00000000 ____D () C:\Program Files (x86)\Reference Assemblies 2014-05-31 20:48 - 2014-05-31 20:48 - 00000000 ____D () C:\Program Files (x86)\MSBuild 2014-05-31 20:48 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\MUI 2014-05-31 20:48 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\MUI 2014-05-31 20:29 - 2014-05-31 20:29 - 00000000 _SHDL () C:\Users\Default\Vorlagen 2014-05-31 20:29 - 2014-05-31 20:29 - 00000000 _SHDL () C:\Users\Default\Startmenü 2014-05-31 20:29 - 2014-05-31 20:29 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung 2014-05-31 20:29 - 2014-05-31 20:29 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen 2014-05-31 20:29 - 2014-05-31 20:29 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien 2014-05-31 20:29 - 2014-05-31 20:29 - 00000000 _SHDL () C:\Users\Default\Druckumgebung 2014-05-31 20:29 - 2014-05-31 20:29 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik 2014-05-31 20:29 - 2014-05-31 20:29 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder 2014-05-31 20:29 - 2014-05-31 20:29 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-05-31 20:29 - 2014-05-31 20:29 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf 2014-05-31 20:29 - 2014-05-31 20:29 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten 2014-05-31 20:29 - 2014-05-31 20:29 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten 2014-05-31 20:29 - 2014-05-31 20:29 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik 2014-05-31 20:29 - 2014-05-31 20:29 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder 2014-05-31 20:29 - 2014-05-31 20:29 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-05-31 20:29 - 2014-05-31 20:29 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf 2014-05-31 20:29 - 2014-05-31 20:29 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten 2014-05-31 20:29 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\Registration 2014-05-31 20:29 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files\Windows NT 2014-05-31 20:29 - 2013-08-22 15:36 - 00000000 __RHD () C:\Users\Default 2014-05-31 20:28 - 2014-05-31 20:28 - 00022960 _____ () C:\WINDOWS\system32\emptyregdb.dat 2014-05-31 20:28 - 2014-05-31 20:07 - 00032388 _____ () C:\WINDOWS\diagwrn.xml 2014-05-31 20:28 - 2014-05-31 20:07 - 00032388 _____ () C:\WINDOWS\diagerr.xml 2014-05-31 20:28 - 2014-05-31 19:20 - 00006611 _____ () C:\WINDOWS\comsetup.log 2014-05-31 20:26 - 2013-08-22 17:36 - 00000000 __RSD () C:\WINDOWS\Media 2014-05-31 20:26 - 2013-08-22 17:36 - 00000000 __RHD () C:\Users\Public\Libraries 2014-05-31 20:24 - 2014-05-31 20:24 - 00000020 ___SH () C:\Users\UpdatusUser\ntuser.ini 2014-05-31 20:18 - 2014-05-31 20:01 - 00000000 ____D () C:\WINDOWS\SysWOW64\NV 2014-05-31 20:18 - 2014-05-31 20:01 - 00000000 ____D () C:\WINDOWS\system32\NV 2014-05-31 20:17 - 2014-04-18 14:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Telefon CD 2005 2014-05-31 20:17 - 2014-03-18 11:40 - 00000000 ____D () C:\WINDOWS\ShellNew 2014-05-31 20:17 - 2014-01-21 19:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ElsterFormular 2014-05-31 20:17 - 2013-12-30 18:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Personal Backup 2014-05-31 20:17 - 2013-12-16 17:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2014-05-31 20:17 - 2013-12-13 19:01 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft-Maus- und Tastatur-Center 2014-05-31 20:17 - 2013-12-13 18:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lexware 2014-05-31 20:17 - 2013-12-13 18:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IrfanView 2014-05-31 20:17 - 2013-12-06 18:02 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel PROSet Wireless 2014-05-31 20:17 - 2013-12-06 16:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fingerprint Reader 2014-05-31 20:17 - 2013-08-22 17:36 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StartUp 2014-05-31 20:17 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\WinBioDatabase 2014-05-31 20:17 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\system32\Sysprep 2014-05-31 20:17 - 2013-08-08 16:00 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel AppUp(R) center 2014-05-31 20:17 - 2013-08-08 15:56 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerDVD Create 2014-05-31 20:17 - 2013-08-08 15:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lenovo 2014-05-31 20:17 - 2013-08-08 15:42 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dolby 2014-05-31 20:17 - 2013-08-08 15:28 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel 2014-05-31 20:15 - 2014-05-31 20:15 - 00001547 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk 2014-05-31 20:15 - 2014-05-31 20:15 - 00000000 ____D () C:\Users\Default\AppData\Roaming\Macromedia 2014-05-31 20:15 - 2014-05-31 20:15 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\Macromedia 2014-05-31 20:15 - 2014-03-18 11:25 - 00000000 ____D () C:\WINDOWS\SysWOW64\WCN 2014-05-31 20:15 - 2014-03-18 11:25 - 00000000 ____D () C:\WINDOWS\SysWOW64\sysprep 2014-05-31 20:15 - 2014-03-18 11:25 - 00000000 ____D () C:\WINDOWS\system32\WCN 2014-05-31 20:15 - 2013-08-22 17:37 - 00004893 _____ () C:\WINDOWS\DtcInstall.log 2014-05-31 20:15 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\migwiz 2014-05-31 20:15 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\IME 2014-05-31 20:15 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\WinBioPlugIns 2014-05-31 20:15 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\spool 2014-05-31 20:15 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\NDF 2014-05-31 20:15 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\IME 2014-05-31 20:15 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\SMI 2014-05-31 20:15 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\system32\oobe 2014-05-31 20:15 - 2013-08-08 16:07 - 00000000 ____D () C:\WINDOWS\SysWOW64\sda 2014-05-31 20:15 - 2012-07-26 07:37 - 00000000 ____D () C:\Users\Default.migrated 2014-05-31 20:13 - 2014-05-31 20:01 - 00000000 ____D () C:\ProgramData\NVIDIA 2014-05-31 20:13 - 2014-05-31 20:01 - 00000000 ____D () C:\Program Files\CONEXANT 2014-05-31 20:13 - 2014-05-31 20:01 - 00000000 ____D () C:\Program Files (x86)\Intel 2014-05-31 20:13 - 2014-05-31 20:00 - 00000000 ____D () C:\Program Files\NVIDIA Corporation 2014-05-31 20:13 - 2014-05-31 20:00 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation 2014-05-31 20:13 - 2013-12-13 19:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira 2014-05-31 20:13 - 2013-12-13 18:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\I.R.I.S. Anwendungen 2014-05-31 20:13 - 2013-12-13 18:25 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung Printers 2014-05-31 20:13 - 2013-08-22 17:43 - 00000000 ____D () C:\WINDOWS\DigitalLocker 2014-05-31 20:13 - 2013-08-22 17:36 - 00000000 __SHD () C:\Program Files\Windows Sidebar 2014-05-31 20:13 - 2013-08-22 17:36 - 00000000 __SHD () C:\Program Files (x86)\Windows Sidebar 2014-05-31 20:13 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\IME 2014-05-31 20:13 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\Help 2014-05-31 20:13 - 2013-08-08 16:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel Corporation 2014-05-31 20:13 - 2013-03-25 23:03 - 00000000 ____D () C:\ProgramData\PRICache 2014-05-31 20:10 - 2014-05-31 20:10 - 00000000 ____D () C:\WINDOWS\system32\config\bbimigrate 2014-05-31 20:10 - 2014-05-31 20:08 - 00000000 ___RD () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2014-05-31 20:10 - 2014-05-31 20:08 - 00000000 ___RD () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility 2014-05-31 20:10 - 2014-05-31 20:08 - 00000000 ___RD () C:\Users\sabine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2014-05-31 20:10 - 2014-05-31 20:08 - 00000000 ___RD () C:\Users\sabine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility 2014-05-31 20:10 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\Recovery 2014-05-31 20:08 - 2014-05-31 20:08 - 00000000 _SHDL () C:\Users\UpdatusUser\Vorlagen 2014-05-31 20:08 - 2014-05-31 20:08 - 00000000 _SHDL () C:\Users\UpdatusUser\Startmenü 2014-05-31 20:08 - 2014-05-31 20:08 - 00000000 _SHDL () C:\Users\UpdatusUser\Netzwerkumgebung 2014-05-31 20:08 - 2014-05-31 20:08 - 00000000 _SHDL () C:\Users\UpdatusUser\Lokale Einstellungen 2014-05-31 20:08 - 2014-05-31 20:08 - 00000000 _SHDL () C:\Users\UpdatusUser\Eigene Dateien 2014-05-31 20:08 - 2014-05-31 20:08 - 00000000 _SHDL () C:\Users\UpdatusUser\Druckumgebung 2014-05-31 20:08 - 2014-05-31 20:08 - 00000000 _SHDL () C:\Users\UpdatusUser\Documents\Eigene Musik 2014-05-31 20:08 - 2014-05-31 20:08 - 00000000 _SHDL () C:\Users\UpdatusUser\Documents\Eigene Bilder 2014-05-31 20:08 - 2014-05-31 20:08 - 00000000 _SHDL () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-05-31 20:08 - 2014-05-31 20:08 - 00000000 _SHDL () C:\Users\UpdatusUser\AppData\Local\Verlauf 2014-05-31 20:08 - 2014-05-31 20:08 - 00000000 _SHDL () C:\Users\UpdatusUser\AppData\Local\Anwendungsdaten 2014-05-31 20:08 - 2014-05-31 20:08 - 00000000 _SHDL () C:\Users\UpdatusUser\Anwendungsdaten 2014-05-31 20:08 - 2014-05-31 20:08 - 00000000 _SHDL () C:\Users\sabine\Vorlagen 2014-05-31 20:08 - 2014-05-31 20:08 - 00000000 _SHDL () C:\Users\sabine\Startmenü 2014-05-31 20:08 - 2014-05-31 20:08 - 00000000 _SHDL () C:\Users\sabine\Netzwerkumgebung 2014-05-31 20:08 - 2014-05-31 20:08 - 00000000 _SHDL () C:\Users\sabine\Lokale Einstellungen 2014-05-31 20:08 - 2014-05-31 20:08 - 00000000 _SHDL () C:\Users\sabine\Eigene Dateien 2014-05-31 20:08 - 2014-05-31 20:08 - 00000000 _SHDL () C:\Users\sabine\Druckumgebung 2014-05-31 20:08 - 2014-05-31 20:08 - 00000000 _SHDL () C:\Users\sabine\Documents\Eigene Musik 2014-05-31 20:08 - 2014-05-31 20:08 - 00000000 _SHDL () C:\Users\sabine\Documents\Eigene Bilder 2014-05-31 20:08 - 2014-05-31 20:08 - 00000000 _SHDL () C:\Users\sabine\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-05-31 20:08 - 2014-05-31 20:08 - 00000000 _SHDL () C:\Users\sabine\AppData\Local\Verlauf 2014-05-31 20:08 - 2014-05-31 20:08 - 00000000 _SHDL () C:\Users\sabine\AppData\Local\Anwendungsdaten 2014-05-31 20:08 - 2014-05-31 20:08 - 00000000 _SHDL () C:\Users\sabine\Anwendungsdaten 2014-05-31 20:02 - 2014-05-31 20:02 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_Kernel_iBtFltCoex_01009.Wdf 2014-05-31 20:02 - 2014-05-31 20:02 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_Kernel_dc3d_01011.Wdf 2014-05-31 20:02 - 2014-05-31 20:02 - 00000000 ____D () C:\Program Files (x86)\USB Camera 2014-05-31 20:02 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\System 2014-05-31 20:02 - 2013-08-22 16:46 - 00000756 _____ () C:\WINDOWS\setuperr.log 2014-05-31 20:01 - 2014-05-31 20:01 - 00000264 _____ () C:\WINDOWS\Tasks\Synaptics TouchPad Enhancements.job 2014-05-31 20:01 - 2014-05-31 20:01 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_Kernel_SynTP_01011.Wdf 2014-05-31 20:01 - 2014-05-31 20:01 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_Kernel_Smb_driver_Intel_01011.Wdf 2014-05-31 20:01 - 2014-05-31 20:01 - 00000000 ____D () C:\Program Files\Synaptics 2014-05-31 20:00 - 2014-05-31 20:00 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation 2014-05-31 19:40 - 2013-08-08 15:22 - 01675681 _____ () C:\WINDOWS\WindowsUpdate (1).log 2014-05-31 17:45 - 2012-07-26 10:12 - 00000000 ____D () C:\WINDOWS\AUInstallAgent 2014-05-31 09:06 - 2013-12-12 21:46 - 00000000 ____D () C:\Users\sabine\Backup 2014-05-31 07:13 - 2013-08-22 17:38 - 00703992 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe 2014-05-31 07:13 - 2013-08-22 17:38 - 00105464 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl 2014-05-30 19:13 - 2013-12-13 18:25 - 00000000 ____D () C:\Users\sabine\AppData\Local\CrashDumps 2014-05-30 16:46 - 2014-05-30 16:46 - 00000000 ___SD () C:\Users\sabine\Documents\Meine Datenquellen 2014-05-30 12:21 - 2014-06-11 20:22 - 23414784 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll 2014-05-30 11:45 - 2014-06-11 20:22 - 02768384 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll 2014-05-30 11:28 - 2014-06-11 20:22 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll 2014-05-30 11:20 - 2014-06-11 20:22 - 00752640 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll 2014-05-30 11:18 - 2014-06-11 20:22 - 17271296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll 2014-05-30 11:08 - 2014-06-11 20:22 - 05782528 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll 2014-05-30 11:06 - 2014-06-11 20:22 - 00452096 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtmsft.dll 2014-05-30 10:46 - 2014-06-11 20:22 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll 2014-05-30 10:44 - 2014-06-11 20:22 - 00295424 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll 2014-05-30 10:43 - 2014-06-11 20:22 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesetup.dll 2014-05-30 10:38 - 2014-06-11 20:22 - 02179072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll 2014-05-30 10:35 - 2014-06-11 20:22 - 00608768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe 2014-05-30 10:29 - 2014-06-11 20:22 - 00631808 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll 2014-05-30 10:27 - 2014-06-11 20:22 - 00592896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll 2014-05-30 10:23 - 2014-06-11 20:22 - 02040832 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl 2014-05-30 10:16 - 2014-06-11 20:22 - 00368128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtmsft.dll 2014-05-30 10:04 - 2014-06-11 20:22 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll 2014-05-30 10:02 - 2014-06-11 20:22 - 00242688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll 2014-05-30 09:56 - 2014-06-11 20:22 - 04244992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll 2014-05-30 09:56 - 2014-06-11 20:22 - 02266112 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll 2014-05-30 09:54 - 2014-06-11 20:22 - 00526336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll 2014-05-30 09:49 - 2014-06-11 20:22 - 01964544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl 2014-05-30 09:43 - 2014-06-11 20:22 - 13522944 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll 2014-05-30 09:40 - 2014-06-11 20:22 - 11725312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll 2014-05-30 09:30 - 2014-06-11 20:22 - 01398272 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll 2014-05-30 09:21 - 2014-06-11 20:22 - 01790976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll 2014-05-30 09:15 - 2014-06-11 20:22 - 01143296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll 2014-05-30 09:13 - 2014-06-11 20:22 - 00846336 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll 2014-05-30 09:13 - 2014-06-11 20:22 - 00704512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll 2014-05-30 07:17 - 2014-05-27 20:56 - 00000000 ____D () C:\Program Files (x86)\VideoLAN 2014-05-29 08:47 - 2013-12-14 16:12 - 00134656 ___SH () C:\Users\sabine\Desktop\Thumbs.db 2014-05-28 19:02 - 2013-12-12 21:47 - 00000000 ____D () C:\Users\sabine\Schriftverkehr und Text 2014-05-27 07:31 - 2014-04-18 14:56 - 00000000 ____D () C:\Users\sabine\Documents\TVG 2014-05-27 07:31 - 2014-04-18 14:56 - 00000000 ____D () C:\Users\sabine\Documents\Telefon CD 2005 2014-05-26 13:30 - 2014-03-26 20:11 - 00000000 ____D () C:\Users\sabine\Scan 2014-05-26 13:30 - 2014-01-19 13:04 - 00052736 ___SH () C:\Users\sabine\Thumbs.db 2014-05-23 06:48 - 2013-12-08 12:20 - 1794608475 _____ () C:\WINDOWS\MEMORY.DMP 2014-05-22 07:15 - 2013-08-08 15:54 - 839495680 ___SH () C:\WINDOWS\lenovo_fastboot.img 2014-05-19 08:31 - 2014-06-11 20:12 - 00057856 _____ (Microsoft Corporation) C:\WINDOWS\system32\drvcfg.exe 2014-05-19 08:21 - 2014-06-11 20:12 - 00110592 _____ (Microsoft Corporation) C:\WINDOWS\system32\drvinst.exe 2014-05-19 07:23 - 2014-06-11 20:12 - 00098816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\drvinst.exe Some content of TEMP: ==================== C:\Users\sabine\AppData\Local\Temp\avgnt.exe C:\Users\sabine\AppData\Local\Temp\MouseKeyboardCenterx64_1031.exe C:\Users\sabine\AppData\Local\Temp\Quarantine.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => File is digitally signed C:\Windows\System32\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\System32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\System32\services.exe => File is digitally signed C:\Windows\System32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\System32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\System32\rpcss.dll => File is digitally signed C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2014-06-16 07:12 ==================== End Of Log ============================ |
16.06.2014, 21:33 | #8 |
/// the machine /// TB-Ausbilder | Regsvr32 Fehler beim jedem Windows-StartESET Online Scanner
Downloade Dir bitte SecurityCheck und:
und ein frisches FRST log bitte. Noch Probleme?
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
17.06.2014, 17:29 | #9 |
| Regsvr32 Fehler beim jedem Windows-Start Okay, das erste Log: Code:
ATTFilter ESETSmartInstaller@High as downloader log: all ok # version=8 # OnlineScannerApp.exe=1.0.0.1 # OnlineScanner.ocx=1.0.0.7587 # api_version=3.0.2 # EOSSerial=021b33d7c4c7394cb2868343345b447f # engine=18750 # end=finished # remove_checked=false # archives_checked=true # unwanted_checked=true # unsafe_checked=false # antistealth_checked=true # utc_time=2014-06-17 11:11:22 # local_time=2014-06-17 01:11:22 (+0100, Mitteleuropäische Sommerzeit) # country="Germany" # lang=1031 # osver=6.2.9200 NT # compatibility_mode_1='Avira Desktop' # compatibility_mode=1810 16777213 100 100 26112 16421644 0 0 # compatibility_mode_1='' # compatibility_mode=5893 16776574 100 94 1441076 19159160 0 0 # scanned=398491 # found=20 # cleaned=0 # scan_time=22936 sh=A981E3D6F03D3BD57D1472F33A4093A01533F8A8 ft=1 fh=7aaf7b3d0491af48 vn="Variante von MSIL/AdvancedSystemProtector.A evtl. unerwünschte Anwendung" ac=I fn="C:\$Recycle.Bin\S-1-5-21-1240990677-1578086025-3834589401-1002\$R0AD4CJ.exe" sh=963D70C7746DF395AB8B21C0E1EE2BE367924D41 ft=1 fh=7088b8138212e43a vn="Variante von Win32/Kryptik.ATRA Trojaner" ac=I fn="C:\$Recycle.Bin\S-1-5-21-1240990677-1578086025-3834589401-1002\$RVJ8D67.exe" sh=97BCCD25561F44E9B13F05F6EEF083C9CE9BA529 ft=1 fh=641f1fb3d2e699c4 vn="Win32/Toolbar.Conduit.Y evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Conduit\Community Alerts\Alert.dll.vir" sh=8E6A6992A3C7FEC4000FA1A4D764DD597109E0B5 ft=1 fh=c71c0011cd00713e vn="Win32/NextLive.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Mobogenie\nengine.dll.vir" sh=570EB9952C88AF1EBF1B6E444948897310CCDC6B ft=1 fh=8dd053864897c267 vn="Variante von Win32/Mobogenie.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Mobogenie\New_UpdateMoboGenie.exe.vir" sh=E075096D25B65981B61BA64BD595310C95BEA7B2 ft=0 fh=0000000000000000 vn="Win32/Mobogenie.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\sabine\AppData\Local\Mobogenie\Version\NewVersion\Mobogenie2.1.35.zip.vir" sh=460FAB593C52A20FF1C135BCB9045359E8D08DA4 ft=1 fh=7d490d691a4e705b vn="Win32/Mobogenie.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\sabine\AppData\Local\Mobogenie\Version\NewVersion\Mobogenie\DaemonProcess.exe.vir" sh=A0FD1396ED2D7B79BDFB9AF24FD98AC701632E07 ft=1 fh=32cb4b5a2245d585 vn="Variante von Win32/Mobogenie.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\sabine\AppData\Local\Mobogenie\Version\NewVersion\Mobogenie\Mobogenie.exe.vir" sh=B3E9B985A45EF896577466209FC1FDEDB066EB70 ft=0 fh=0000000000000000 vn="Variante von Android/Mobserv.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\sabine\AppData\Local\Mobogenie\Version\NewVersion\Mobogenie\MUServer.apk.vir" sh=8E6A6992A3C7FEC4000FA1A4D764DD597109E0B5 ft=1 fh=c71c0011cd00713e vn="Win32/NextLive.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\sabine\AppData\Local\Mobogenie\Version\NewVersion\Mobogenie\nengine.dll.vir" sh=570EB9952C88AF1EBF1B6E444948897310CCDC6B ft=1 fh=8dd053864897c267 vn="Variante von Win32/Mobogenie.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\sabine\AppData\Local\Mobogenie\Version\NewVersion\Mobogenie\UpdateMoboGenie.exe.vir" sh=E075096D25B65981B61BA64BD595310C95BEA7B2 ft=0 fh=0000000000000000 vn="Win32/Mobogenie.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\sabine\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie2.1.35.zip.vir" sh=460FAB593C52A20FF1C135BCB9045359E8D08DA4 ft=1 fh=7d490d691a4e705b vn="Win32/Mobogenie.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\sabine\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie\DaemonProcess.exe.vir" sh=A0FD1396ED2D7B79BDFB9AF24FD98AC701632E07 ft=1 fh=32cb4b5a2245d585 vn="Variante von Win32/Mobogenie.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\sabine\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie\Mobogenie.exe.vir" sh=B3E9B985A45EF896577466209FC1FDEDB066EB70 ft=0 fh=0000000000000000 vn="Variante von Android/Mobserv.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\sabine\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie\MUServer.apk.vir" sh=8E6A6992A3C7FEC4000FA1A4D764DD597109E0B5 ft=1 fh=c71c0011cd00713e vn="Win32/NextLive.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\sabine\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie\nengine.dll.vir" sh=570EB9952C88AF1EBF1B6E444948897310CCDC6B ft=1 fh=8dd053864897c267 vn="Variante von Win32/Mobogenie.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\sabine\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie\New_UpdateMoboGenie.exe.vir" sh=15DF73618AC6DC9E3B26953DF9151E1A7BBFC3F5 ft=0 fh=0000000000000000 vn="Win64/Adware.Adpeak.D Anwendung" ac=I fn="C:\Temp\InstallFilter64.msi" sh=EAE2784C9115FE9CFA44A116B74E72C1BCCFA7F6 ft=1 fh=2e79e77116fe19c4 vn="Win32/DownWare.L evtl. unerwünschte Anwendung" ac=I fn="C:\Users\sabine\Software\MyPhoneExplorer_1.8.5.exe" sh=0F0E5EC8C22194305A813111DFEDCE7B8EE98C55 ft=0 fh=0000000000000000 vn="Variante von Win32/Toolbar.Linkury.E evtl. unerwünschte Anwendung" ac=I fn="D:\LwC\Users\sabine\AppData\Roaming\OpenCandy\0A59C526BC8144988003E3941AE85534\Installer.exe.gz" Code:
ATTFilter Results of screen317's Security Check version 0.99.83 x64 (UAC is enabled) Internet Explorer 11 ``````````````Antivirus/Firewall Check:`````````````` Avira Desktop Windows Defender Antivirus up to date! (On Access scanning disabled!) `````````Anti-malware/Other Utilities Check:````````` Adobe Reader XI Mozilla Firefox (29.0.1) Mozilla Thunderbird (24.6.0) ````````Process Check: objlist.exe by Laurent```````` Malwarebytes Anti-Malware mbamservice.exe Malwarebytes Anti-Malware mbam.exe Avira Antivir avgnt.exe Avira Antivir avguard.exe Malwarebytes Anti-Malware mbamscheduler.exe `````````````````System Health check````````````````` Total Fragmentation on Drive C: % ````````````````````End of Log`````````````````````` Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 15-06-2014 Ran by sabine (administrator) on SANI_LENOVO on 17-06-2014 18:27:15 Running from C:\Users\sabine\Desktop Platform: Windows 8.1 (X64) OS Language: German Standard Internet Explorer Version 11 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (Lenovo.) C:\Windows\System32\ibmpmsvc.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Microsoft Corporation) C:\Windows\System32\wlanext.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (Conexant Systems Inc.) C:\Windows\System32\CxAudMsg64.exe (Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe (Microsoft Corporation) C:\Windows\System32\dasHost.exe (Condusiv Technologies) C:\Program Files\Condusiv Technologies\ExpressCache\ExpressCache.exe (Lenovo) C:\Program Files (x86)\Lenovo\RapidBoot HDD Accelerator\FBService.exe (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe (LENOVO INCORPORATED.) C:\Program Files\Lenovo\SystemAgent\SystemAgentService.exe (Lenovo Group Limited) C:\Program Files\Lenovo\VIRTSCRL\lvvsst.exe (Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe (Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe (Nitro PDF Software) C:\Program Files\Common Files\Nitro\Pro\8.0\NitroPDFDriverService8x64.exe (Nalpeiron Ltd.) C:\Windows\SysWOW64\NLSSRV32.EXE (Lenovo) C:\Program Files (x86)\ThinkPad\Utilities\PWMDBSVC.exe (Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe (Samsung Electronics Co., Ltd.) C:\Windows\System32\spool\drivers\x64\3\NetFaxServer64.exe (Validity Sensors, Inc.) C:\Program Files\Lenovo Fingerprint Reader\ValBioService.exe (Validity Sensors, Inc.) C:\Windows\System32\valWBFPolicyService.exe (Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe (Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\micmute.exe (Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\tphkload.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe (Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe (Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe (Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe (Intel(R) Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe (LENOVO INCORPORATED.) C:\Program Files\Lenovo\QuickSnipService\QuickSnipService.exe (Lenovo Group Limited) C:\Program Files\Lenovo\SettingsDependency\SettingsService.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Lenovo) C:\Program Files\Lenovo\Lenovo Mobile Hotspot\LnvHotSpotSvc.exe () C:\Program Files (x86)\Lenovo\LocationAware\loctaskmgr.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE (Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Lenovo) C:\Program Files\Lenovo\QuickSnipService\QuickSnipInput.exe (Lenovo Group Limited) C:\Program Files\Lenovo\VIRTSCRL\virtscrl.exe () C:\Program Files (x86)\Lenovo\LocationAware\lpdagent.exe (Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe (Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\tpnumlkd.exe (Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe (Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\tposd.exe (Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\shtctky.exe (Validity Sensors, Inc.) C:\Program Files\Lenovo Fingerprint Reader\SwipeMonitor.exe (Intel Corporation) C:\Windows\System32\igfxtray.exe (Intel Corporation) C:\Windows\System32\igfxsrvc.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe (Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\extapsup.exe (Conexant Systems, Inc.) C:\Program Files\CONEXANT\cAudioFilterAgent\CAudioFilterAgent64.exe () C:\Program Files\CONEXANT\ForteConfig\fmapp.exe (Lenovo.) C:\Windows\System32\TpShocks.exe (Lenovo) C:\Program Files\Lenovo\Lenovo Mobile Hotspot\MobileHotspotclient.exe (Lenovo Corporation) C:\Program Files\Lenovo\Communications Utility\TpKnrres.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPLpr.exe (Vimicro) C:\Program Files (x86)\USB Camera\VM331STI.EXE (Lenovo) C:\Program Files (x86)\Lenovo\RapidBoot HDD Accelerator\FBConsole.exe () C:\Windows\Samsung\PanelMgr\SSMMgr.exe () C:\Windows\Samsung\PanelMgr\caller64.exe () C:\Windows\twain_32\Samsung\CLX3180\Scan2Pc.exe (Haufe-Lexware GmbH & Co. KG) C:\Program Files (x86)\Common Files\Lexware\Update Manager\LxUpdateManager.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe (Intel Corporation) C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe (CyberLink) C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe (Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe () C:\Windows\System32\spool\drivers\x64\3\spe__pi.exe (Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [LenovoOptMouseUpdate] => C:\Program Files\Lenovo\HOTKEY\extapsup.exe [250976 2012-09-01] (Lenovo Group Limited) HKLM\...\Run: [BTMTrayAgent] => C:\Program Files (x86)\Intel\Bluetooth\btmshellex.dll [11733888 2012-12-03] (Motorola Solutions, Inc.) HKLM\...\Run: [SmartAudio] => C:\Program Files\CONEXANT\SAII\SACpl.exe [1647616 2012-06-13] (Conexant Systems, Inc.) HKLM\...\Run: [cAudioFilterAgent] => C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe [887968 2012-06-14] (Conexant Systems, Inc.) HKLM\...\Run: [ForteConfig] => C:\Program Files\Conexant\ForteConfig\fmapp.exe [49056 2010-10-26] () HKLM\...\Run: [TpShocks] => C:\WINDOWS\system32\TpShocks.exe [382248 2013-02-12] (Lenovo.) HKLM\...\Run: [LnvMobHotspotClient] => C:\Program Files\Lenovo\Lenovo Mobile Hotspot\MobileHotspotclient.exe [937976 2013-04-11] (Lenovo) HKLM\...\Run: [LENOVO.TPKNRRES] => C:\Program Files\Lenovo\Communications Utility\TPKNRRES.exe [594936 2013-04-15] (Lenovo Corporation) HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2809072 2014-02-24] (Synaptics Incorporated) HKLM-x32\...\Run: [331BigDog] => C:\Program Files (x86)\USB Camera\VM331STI.EXE [548864 2013-03-12] (Vimicro) HKLM-x32\...\Run: [IMSS] => C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe [133440 2012-07-19] (Intel Corporation) HKLM-x32\...\Run: [Fastboot] => C:\Program Files (x86)\Lenovo\RapidBoot HDD Accelerator\FBConsole.exe [738032 2013-08-08] (Lenovo) HKLM-x32\...\Run: [Download Protect] => C:\ProgramData\dlprotect.exe HKLM-x32\...\Run: [Samsung PanelMgr] => C:\Windows\Samsung\PanelMgr\SSMMgr.exe [618496 2010-06-07] () HKLM-x32\...\Run: [CLX3180_Scan2Pc] => C:\WINDOWS\Twain_32\Samsung\CLX3180\Scan2pc.exe [1990144 2011-04-29] () HKLM-x32\...\Run: [3180 Scan2PC] => C:\Windows\twain_32\Samsung\CLX3180\Scan2Pc.exe [1990144 2011-04-29] () HKLM-x32\...\Run: [LexwareInfoService] => C:\Program Files (x86)\Common Files\Lexware\Update Manager\LxUpdateManager.exe [189808 2011-07-31] (Haufe-Lexware GmbH & Co. KG) HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [737872 2014-06-11] (Avira Operations GmbH & Co. KG) HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated) Winlogon\Notify\igfxcui: C:\WINDOWS\system32\igfxdev.dll (Intel Corporation) HKU\S-1-5-21-1240990677-1578086025-3834589401-1001\...\RunOnce: [WAB Migrate] - C:\Program Files\Windows Mail\wab.exe [516608 2013-08-22] (Microsoft Corporation) HKU\S-1-5-21-1240990677-1578086025-3834589401-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\RunOnce: [WAB Migrate] - C:\Program Files\Windows Mail\wab.exe [516608 2013-08-22] (Microsoft Corporation) HKU\S-1-5-21-1240990677-1578086025-3834589401-1002\...\Run: [OlinqUxrab] => regsvr32.exe " HKU\S-1-5-21-1240990677-1578086025-3834589401-1002\...\Run: [BrowserChoice] => C:\Windows\BrowserChoice\browserchoice.exe [86816 2013-08-22] (Microsoft Corporation) HKU\S-1-5-21-1240990677-1578086025-3834589401-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [OlinqUxrab] => regsvr32.exe " HKU\S-1-5-21-1240990677-1578086025-3834589401-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [BrowserChoice] => C:\Windows\BrowserChoice\browserchoice.exe [86816 2013-08-22] (Microsoft Corporation) AppInit_DLLs: C:\WINDOWS\system32\nvinitx.dll => C:\WINDOWS\system32\nvinitx.dll [184048 2013-10-31] (NVIDIA Corporation) AppInit_DLLs-x32: C:\WINDOWS\SysWOW64\nvinit.dll => C:\WINDOWS\SysWOW64\nvinit.dll [156256 2013-10-31] (NVIDIA Corporation) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma Loader.lnk ShortcutTarget: Adobe Gamma Loader.lnk -> C:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.spiegel.de/ SearchScopes: HKLM - DefaultScope {533E4EE6-5ED5-4722-AF78-1A567593404A} URL = hxxp://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=dnldstr&cd=2XzuyEtN2Y1L1QzuyCtByC0CyCyC0C0CtByDtB0Dzz0C0CyEtN0D0Tzu0SyBtDyCtN1L2XzutBtFtBtFtCyEtFtCtAyBzytN1L1CzutCyD1B1P1R&cr=1192424154&ir= SearchScopes: HKLM - {533E4EE6-5ED5-4722-AF78-1A567593404A} URL = hxxp://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=dnldstr&cd=2XzuyEtN2Y1L1QzuyCtByC0CyCyC0C0CtByDtB0Dzz0C0CyEtN0D0Tzu0SyBtDyCtN1L2XzutBtFtBtFtCyEtFtCtAyBzytN1L1CzutCyD1B1P1R&cr=1192424154&ir= SearchScopes: HKLM-x32 - DefaultScope value is missing. SearchScopes: HKLM-x32 - {533E4EE6-5ED5-4722-AF78-1A567593404A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MALCJS SearchScopes: HKCU - DefaultScope {533E4EE6-5ED5-4722-AF78-1A567593404A} URL = SearchScopes: HKCU - {533E4EE6-5ED5-4722-AF78-1A567593404A} URL = BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll No File Tcpip\Parameters: [DhcpNameServer] 192.168.178.1 FireFox: ======== FF ProfilePath: C:\Users\sabine\AppData\Roaming\Mozilla\Firefox\Profiles\3o5axu3s.default FF Homepage: https://www.google.de/ FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation) FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin-x32: @nitropdf.com/NitroPDF - C:\Program Files (x86)\Nitro\Pro 8\npnitromozilla.dll (Nitro PDF) FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin HKCU: intel.com/AppUp - C:\Program Files (x86)\Intel\IntelAppStore\bin\npAppUp.dll (Intel) FF Plugin HKCU: intel.com/AppUpx64 - C:\Program Files (x86)\Intel\IntelAppStore\bin\npAppUp_x64.dll (Intel) FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml ==================== Services (Whitelisted) ================= R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [430160 2014-06-11] (Avira Operations GmbH & Co. KG) R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [430160 2014-06-11] (Avira Operations GmbH & Co. KG) R2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1039952 2014-06-11] (Avira Operations GmbH & Co. KG) S3 AVControlCenter; C:\Program Files\Lenovo\Communications Utility\AVControlCenter32.exe [148472 2013-04-15] (Lenovo Corporation) R2 ExpressCache; C:\Program Files\Condusiv Technologies\ExpressCache\ExpressCache.exe [107944 2013-01-08] (Condusiv Technologies) R2 FastbootService; C:\Program Files (x86)\Lenovo\RapidBoot HDD Accelerator\FBService.exe [140016 2013-08-08] (Lenovo) R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [129856 2012-07-19] (Intel Corporation) S3 intelsba; C:\Program Files\Intel\Intel(R) Small Business Advantage\Service\Intel.SmallBusinessAdvantage.WindowsService.exe [48832 2013-04-10] (Intel Corporation) R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-07-19] (Intel Corporation) R2 Lenovo QuickSnip Service; C:\Program Files\lenovo\QuickSnipService\QuickSnipService.exe [219976 2013-06-05] (LENOVO INCORPORATED.) R2 Lenovo Settings Service; C:\Program Files\Lenovo\SettingsDependency\SettingsService.exe [1628664 2013-02-06] (Lenovo Group Limited) R2 Lenovo System Agent Service; C:\Program Files\lenovo\SystemAgent\SystemAgentService.exe [562504 2013-06-05] (LENOVO INCORPORATED.) S3 LENOVO.TVTVCAM; C:\Program Files\Lenovo\Communications Utility\vcamsvc.exe [681464 2013-04-15] (Lenovo Corporation) R2 Lenovo.VIRTSCRLSVC; C:\Program Files\LENOVO\VIRTSCRL\lvvsst.exe [136288 2012-08-10] (Lenovo Group Limited) R2 LnvHotSpotSvc; C:\Program Files\Lenovo\Lenovo Mobile Hotspot\LnvHotSpotSvc.exe [465912 2013-04-11] (Lenovo) R2 LocationTaskManager; C:\Program Files (x86)\Lenovo\LocationAware\loctaskmgr.exe [463352 2013-04-19] () S3 LSCWinService; C:\Program Files\Lenovo\Lenovo Solution Center\App\LSCWinService.exe [1663880 2014-05-06] () R2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1809720 2014-05-12] (Malwarebytes Corporation) R2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [860472 2014-05-12] (Malwarebytes Corporation) S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [273136 2013-08-28] () R2 NitroDriverReadSpool8; C:\Program Files\Common Files\Nitro\Pro\8.0\NitroPDFDriverService8x64.exe [230408 2013-03-25] (Nitro PDF Software) R2 Samsung Network Fax Server; C:\WINDOWS\system32\spool\drivers\x64\3\NetFaxServer64.exe [229888 2011-04-28] (Samsung Electronics Co., Ltd.) [File not signed] S3 SUService; C:\Program Files (x86)\Lenovo\System Update\SUService.exe [24120 2014-02-21] () R2 ValBioService; C:\Program Files\Lenovo Fingerprint Reader\ValBioService.exe [22872 2013-10-28] (Validity Sensors, Inc.) R2 valWBFPolicyService; C:\Windows\System32\valWBFPolicyService.exe [40848 2013-10-28] (Validity Sensors, Inc.) S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347880 2014-05-31] (Microsoft Corporation) S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2014-05-31] (Microsoft Corporation) R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3378416 2013-08-28] (Intel® Corporation) ==================== Drivers (Whitelisted) ==================== S0 ADP80XX; C:\Windows\System32\drivers\ADP80XX.SYS [782176 2013-08-22] (PMC-Sierra) R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [112080 2014-06-11] (Avira Operations GmbH & Co. KG) R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [130584 2014-06-11] (Avira Operations GmbH & Co. KG) R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [28600 2013-12-09] (Avira Operations GmbH & Co. KG) U4 avnetflt; C:\Windows\system32\DRIVERS\avnetflt.sys [84720 2013-12-09] (Avira Operations GmbH & Co. KG) S3 bcmfn2; C:\Windows\System32\drivers\bcmfn2.sys [17624 2013-08-13] (Windows (R) Win 7 DDK provider) R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [226304 2014-03-18] (Microsoft Corporation) R3 btmhsf; C:\Windows\system32\DRIVERS\btmhsf.sys [1342848 2012-12-03] (Motorola Solutions, Inc.) S2 DgiVecp; C:\WINDOWS\system32\Drivers\DgiVecp.sys [53816 2009-07-13] (Samsung Electronics Co., Ltd.) R1 excfs; C:\Windows\System32\DRIVERS\excfs.sys [26024 2013-01-08] (Condusiv Technologies) R0 excsd; C:\Windows\System32\DRIVERS\excsd.sys [112552 2013-01-08] (Condusiv Technologies) S3 Fastboot; C:\Windows\System32\DRIVERS\fastboot.sys [66288 2013-08-08] (Windows (R) Win 7 DDK provider) S3 iaLPSSi_GPIO; C:\Windows\System32\drivers\iaLPSSi_GPIO.sys [24568 2013-07-30] (Intel Corporation) S3 iaLPSSi_I2C; C:\Windows\System32\drivers\iaLPSSi_I2C.sys [99320 2013-07-25] (Intel Corporation) S0 iaStorAV; C:\Windows\System32\drivers\iaStorAV.sys [651248 2013-08-10] (Intel Corporation) R0 intelpep; C:\Windows\System32\drivers\intelpep.sys [39768 2014-03-18] (Microsoft Corporation) S0 LSI_SAS3; C:\Windows\System32\drivers\lsi_sas3.sys [81760 2013-08-22] (LSI Corporation) R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25816 2014-05-12] (Malwarebytes Corporation) R3 MBAMSwissArmy; C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [122584 2014-06-17] (Malwarebytes Corporation) R3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [64216 2014-05-12] (Malwarebytes Corporation) R3 NdisVirtualBus; C:\Windows\System32\drivers\NdisVirtualBus.sys [16384 2013-08-22] (Microsoft Corporation) S3 netvsc; C:\Windows\system32\DRIVERS\netvsc63.sys [87040 2013-08-22] (Microsoft Corporation) R3 NETwNe64; C:\Windows\system32\DRIVERS\Netwew00.sys [3345376 2013-10-08] (Intel Corporation) S3 ReFS; C:\Windows\System32\Drivers\ReFS.sys [924504 2014-03-18] (Microsoft Corporation) R3 RSP2STOR; C:\Windows\system32\DRIVERS\RtsP2Stor.sys [288840 2013-05-16] (Realtek Semiconductor Corp.) S3 SerCx2; C:\Windows\System32\drivers\SerCx2.sys [146776 2014-03-18] (Microsoft Corporation) R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [31472 2014-02-24] (Synaptics Incorporated) S0 stornvme; C:\Windows\System32\drivers\stornvme.sys [57176 2014-03-18] (Microsoft Corporation) S3 SWIX64; C:\Program Files (x86)\Lenovo\System Update\tvsuhd64.sys [33856 2012-09-12] (Lenovo Group Limited) S3 UEFI; C:\Windows\System32\drivers\UEFI.sys [26976 2013-08-22] (Microsoft Corporation) R3 usb3Hub; C:\Windows\System32\drivers\usb3Hub.sys [47072 2012-11-29] (Windows (R) Win 7 DDK provider) R3 vm331avs; C:\Windows\System32\Drivers\vm331avs.sys [1045248 2013-03-01] (Vimicro Corporation) S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [123224 2014-05-31] (Microsoft Corporation) R0 Wof; C:\Windows\System32\Drivers\Wof.sys [157016 2014-05-31] (Microsoft Corporation) R3 XHCIPort; C:\Windows\System32\drivers\XHCIPort.sys [188896 2012-11-29] (Windows (R) Win 7 DDK provider) ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-06-17 18:27 - 2014-06-17 18:27 - 00021449 _____ () C:\Users\sabine\Desktop\FRST.txt 2014-06-17 18:26 - 2014-06-17 18:26 - 00000874 _____ () C:\Users\sabine\Desktop\checkup.txt 2014-06-17 18:25 - 2014-06-17 18:25 - 00854367 _____ () C:\Users\sabine\Desktop\SecurityCheck.exe 2014-06-17 07:32 - 2014-06-17 07:32 - 00000072 _____ () C:\Users\Public\LMDebug.log 2014-06-16 19:09 - 2014-06-16 19:09 - 00000000 ____D () C:\ProgramData\SSScan 2014-06-16 19:08 - 2014-06-16 19:08 - 00000000 ____D () C:\Users\sabine\AppData\Roaming\Samsung 2014-06-16 19:06 - 2014-06-16 19:06 - 00000000 ____D () C:\WINDOWS\twain_64 2014-06-16 19:06 - 2014-06-16 19:06 - 00000000 ____D () C:\WINDOWS\LastGood 2014-06-16 19:06 - 2013-10-04 07:31 - 00579072 _____ () C:\WINDOWS\system32\SNWIAUI.dll 2014-06-16 19:06 - 2013-10-04 06:53 - 00734720 _____ () C:\WINDOWS\system32\SnMinDrv.dll 2014-06-16 19:06 - 2013-10-04 06:53 - 00155136 _____ () C:\WINDOWS\system32\SnImgFlt.dll 2014-06-16 19:06 - 2013-10-04 06:52 - 00068096 _____ () C:\WINDOWS\system32\SnErHdlr.dll 2014-06-16 19:06 - 2013-09-02 04:57 - 00155696 _____ () C:\WINDOWS\wiainst64.exe 2014-06-16 19:06 - 2012-12-10 04:09 - 00120846 _____ () C:\WINDOWS\system32\WIAEXSTR.loc 2014-06-16 19:06 - 2012-03-14 01:58 - 00166640 _____ (TWAIN Working Group) C:\WINDOWS\system32\TWAINDSM.dll 2014-06-16 19:06 - 2012-03-14 01:58 - 00148728 _____ (TWAIN Working Group) C:\WINDOWS\SysWOW64\TWAINDSM.dll 2014-06-16 19:06 - 2012-02-09 09:20 - 00355840 _____ (Samsung Electronics) C:\WINDOWS\system32\snWIAMUI.dll 2014-06-16 19:05 - 2014-06-16 19:05 - 00000237 _____ () C:\Autoconfig.ini 2014-06-16 19:05 - 2014-06-16 19:05 - 00000000 ____D () C:\ProgramData\Samsung 2014-06-16 19:05 - 2013-06-01 07:13 - 01571160 ____N () C:\WINDOWS\TotalUninstaller.exe 2014-06-16 19:05 - 2013-05-10 11:48 - 00162136 _____ () C:\WINDOWS\system32\spe__ci.exe 2014-06-16 19:05 - 2012-11-17 10:28 - 00000357 _____ () C:\WINDOWS\system32\spe__l.smt 2014-06-16 19:05 - 2011-04-11 07:26 - 00034304 _____ () C:\WINDOWS\system32\spe__l.dll 2014-06-16 19:05 - 2010-10-20 10:46 - 00089600 _____ (SS) C:\WINDOWS\system32\spe__ci.dll 2014-06-16 15:59 - 2014-06-16 15:59 - 00000000 ___SH () C:\DkHyperbootSync 2014-06-16 07:44 - 2014-06-16 07:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bluetooth Devices 2014-06-16 07:29 - 2014-06-16 07:29 - 00000000 ____D () C:\WINDOWS\ERUNT 2014-06-16 07:27 - 2014-06-16 07:27 - 01016261 _____ (Thisisu) C:\Users\sabine\Desktop\JRT.exe 2014-06-16 07:02 - 2014-06-17 18:18 - 00122584 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys 2014-06-16 07:02 - 2014-06-16 07:02 - 00001129 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-06-16 07:02 - 2014-06-16 07:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2014-06-16 07:02 - 2014-06-16 07:02 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 2014-06-16 07:02 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamchameleon.sys 2014-06-16 07:02 - 2014-05-12 07:26 - 00064216 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys 2014-06-16 07:02 - 2014-05-12 07:25 - 00025816 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys 2014-06-16 06:36 - 2014-06-16 07:15 - 00000000 ____D () C:\Users\sabine\AppData\Roaming\Nico Mak Computing 2014-06-15 07:23 - 2014-06-17 18:27 - 00000000 ____D () C:\FRST 2014-06-15 07:22 - 2014-06-16 07:35 - 02081280 _____ (Farbar) C:\Users\sabine\Desktop\FRST64.exe 2014-06-11 21:11 - 2014-06-12 04:10 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird 2014-06-11 20:22 - 2014-05-30 12:21 - 23414784 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll 2014-06-11 20:22 - 2014-05-30 11:45 - 02768384 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll 2014-06-11 20:22 - 2014-05-30 11:28 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll 2014-06-11 20:22 - 2014-05-30 11:20 - 00752640 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll 2014-06-11 20:22 - 2014-05-30 11:18 - 17271296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll 2014-06-11 20:22 - 2014-05-30 11:08 - 05782528 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll 2014-06-11 20:22 - 2014-05-30 11:06 - 00452096 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtmsft.dll 2014-06-11 20:22 - 2014-05-30 10:46 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll 2014-06-11 20:22 - 2014-05-30 10:44 - 00295424 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll 2014-06-11 20:22 - 2014-05-30 10:43 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesetup.dll 2014-06-11 20:22 - 2014-05-30 10:38 - 02179072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll 2014-06-11 20:22 - 2014-05-30 10:35 - 00608768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe 2014-06-11 20:22 - 2014-05-30 10:29 - 00631808 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll 2014-06-11 20:22 - 2014-05-30 10:27 - 00592896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll 2014-06-11 20:22 - 2014-05-30 10:23 - 02040832 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl 2014-06-11 20:22 - 2014-05-30 10:16 - 00368128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtmsft.dll 2014-06-11 20:22 - 2014-05-30 10:04 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll 2014-06-11 20:22 - 2014-05-30 10:02 - 00242688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll 2014-06-11 20:22 - 2014-05-30 09:56 - 04244992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll 2014-06-11 20:22 - 2014-05-30 09:56 - 02266112 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll 2014-06-11 20:22 - 2014-05-30 09:54 - 00526336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll 2014-06-11 20:22 - 2014-05-30 09:49 - 01964544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl 2014-06-11 20:22 - 2014-05-30 09:43 - 13522944 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll 2014-06-11 20:22 - 2014-05-30 09:40 - 11725312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll 2014-06-11 20:22 - 2014-05-30 09:30 - 01398272 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll 2014-06-11 20:22 - 2014-05-30 09:21 - 01790976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll 2014-06-11 20:22 - 2014-05-30 09:15 - 01143296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll 2014-06-11 20:22 - 2014-05-30 09:13 - 00846336 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll 2014-06-11 20:22 - 2014-05-30 09:13 - 00704512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll 2014-06-11 20:22 - 2014-02-06 13:30 - 00004096 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollectorres.dll 2014-06-11 20:22 - 2014-02-06 13:07 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll 2014-06-11 20:22 - 2014-02-06 13:06 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwproxystub.dll 2014-06-11 20:22 - 2014-02-06 12:56 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll 2014-06-11 20:22 - 2014-02-06 12:49 - 00139264 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieUnatt.exe 2014-06-11 20:22 - 2014-02-06 12:48 - 00111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollector.exe 2014-06-11 20:22 - 2014-02-06 12:17 - 00195584 _____ (Microsoft Corporation) C:\WINDOWS\system32\msrating.dll 2014-06-11 20:22 - 2014-02-06 12:00 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieetwproxystub.dll 2014-06-11 20:22 - 2014-02-06 11:52 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll 2014-06-11 20:22 - 2014-02-06 11:52 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iernonce.dll 2014-06-11 20:22 - 2014-02-06 11:47 - 00112128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieUnatt.exe 2014-06-11 20:22 - 2014-02-06 11:25 - 00164864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrating.dll 2014-06-11 20:14 - 2014-05-01 15:31 - 03048904 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcMon.exe 2014-06-11 20:14 - 2014-05-01 15:31 - 00055328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wpcfltr.sys 2014-06-11 20:14 - 2014-05-01 09:14 - 03118080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Wpc.dll 2014-06-11 20:14 - 2014-05-01 09:05 - 02861056 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebSync.dll 2014-06-11 20:14 - 2014-05-01 08:51 - 02344448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Wpc.dll 2014-06-11 20:14 - 2014-05-01 07:24 - 02834944 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpccpl.dll 2014-06-11 20:13 - 2014-05-10 05:46 - 02151424 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3.dll 2014-06-11 20:13 - 2014-05-10 05:22 - 01312256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3.dll 2014-06-11 20:13 - 2014-05-05 06:02 - 03360256 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll 2014-06-11 20:13 - 2014-05-03 09:14 - 00079872 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSReset.exe 2014-06-11 20:13 - 2014-05-03 06:21 - 00249344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll 2014-06-11 20:13 - 2014-05-03 06:07 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll 2014-06-11 20:13 - 2014-05-03 05:41 - 00921088 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll 2014-06-11 20:13 - 2014-05-03 05:38 - 00754688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll 2014-06-11 20:13 - 2014-04-30 06:43 - 01975296 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWrite.dll 2014-06-11 20:13 - 2014-04-30 06:26 - 01345536 _____ (Microsoft Corporation) C:\WINDOWS\system32\FntCache.dll 2014-06-11 20:13 - 2014-04-30 05:47 - 01509888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWrite.dll 2014-06-11 20:13 - 2014-04-03 09:59 - 02518872 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys 2014-06-11 20:13 - 2014-04-03 09:59 - 00428888 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS 2014-06-11 20:12 - 2014-05-19 08:31 - 00057856 _____ (Microsoft Corporation) C:\WINDOWS\system32\drvcfg.exe 2014-06-11 20:12 - 2014-05-19 08:21 - 00110592 _____ (Microsoft Corporation) C:\WINDOWS\system32\drvinst.exe 2014-06-11 20:12 - 2014-05-19 07:23 - 00098816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\drvinst.exe 2014-06-11 20:12 - 2014-05-09 01:06 - 00295424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ks.sys 2014-06-11 20:12 - 2014-04-30 13:16 - 01336648 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll 2014-06-11 20:12 - 2014-04-30 05:51 - 01064448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll 2014-06-01 13:23 - 2014-06-01 13:23 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MyPhoneExplorer 2014-06-01 12:31 - 2013-08-22 08:57 - 00002143 ___RS () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Browser Choice.lnk 2014-05-31 22:48 - 2014-05-31 22:48 - 00000000 ___RD () C:\WINDOWS\BrowserChoice 2014-05-31 22:47 - 2014-05-31 22:47 - 00000000 ____D () C:\WINDOWS\PCHEALTH 2014-05-31 22:47 - 2014-05-31 22:47 - 00000000 ____D () C:\Users\Default\AppData\Local\Microsoft Help 2014-05-31 22:47 - 2014-05-31 22:47 - 00000000 ____D () C:\Users\Default User\AppData\Local\Microsoft Help 2014-05-31 20:59 - 2014-06-17 12:56 - 00003946 _____ () C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{02C6F728-BF56-436A-A768-4B9C5F40F7D4} 2014-05-31 20:58 - 2014-05-31 20:58 - 00000000 __SHD () C:\Users\sabine\AppData\Local\EmieUserList 2014-05-31 20:58 - 2014-05-31 20:58 - 00000000 __SHD () C:\Users\sabine\AppData\Local\EmieSiteList 2014-05-31 20:57 - 2014-05-31 20:57 - 00000000 __SHD () C:\Recovery 2014-05-31 20:57 - 2014-05-31 20:49 - 00000000 ___DC () C:\WINDOWS\Panther 2014-05-31 20:56 - 2014-05-31 20:56 - 00308224 _____ (Microsoft Corporation) C:\WINDOWS\system32\wusa.exe 2014-05-31 20:56 - 2014-05-31 20:56 - 00305152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wusa.exe 2014-05-31 20:55 - 2014-05-31 20:55 - 02900992 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 02641920 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 02479616 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmSvc.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 02373784 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe 2014-05-31 20:55 - 2014-05-31 20:55 - 02331000 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 02317824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 02270208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 02141912 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 02133504 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 02088160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe 2014-05-31 20:55 - 2014-05-31 20:55 - 02030080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WsmSvc.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 02013016 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys 2014-05-31 20:55 - 2014-05-31 20:55 - 01843712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Display.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 01816576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Display.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 01779800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 01764864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 01679128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 01656832 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 01557848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys 2014-05-31 20:55 - 2014-05-31 20:55 - 01542768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 01351168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 01306624 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 01291200 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel32.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 01112536 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 01095488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 01063424 _____ (Microsoft Corporation) C:\WINDOWS\system32\IKEEXT.DLL 2014-05-31 20:55 - 2014-05-31 20:55 - 01036288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kernel32.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 01015808 _____ (Microsoft Corporation) C:\WINDOWS\system32\aclui.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00950784 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgent.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00939520 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00924160 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00887296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aclui.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00836096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00834560 _____ (Microsoft Corporation) C:\WINDOWS\system32\netlogon.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00827392 _____ (Microsoft Corporation) C:\WINDOWS\system32\BFE.DLL 2014-05-31 20:55 - 2014-05-31 20:55 - 00800256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReAgent.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00755712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00717312 _____ (Microsoft Corporation) C:\WINDOWS\system32\nshwfp.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00688640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netlogon.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00669696 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasapi32.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00655360 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsapi.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00621568 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAgent.exe 2014-05-31 20:55 - 2014-05-31 20:55 - 00605184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasapi32.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00567296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nshwfp.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00542208 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.Printing.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00518552 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00512000 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidprov.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00494592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dnsapi.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00488280 _____ (Microsoft Corporation) C:\WINDOWS\system32\netcfgx.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00467800 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS 2014-05-31 20:55 - 2014-05-31 20:55 - 00462336 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlangpui.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00412672 _____ (Microsoft Corporation) C:\WINDOWS\system32\FWPUCLNT.DLL 2014-05-31 20:55 - 2014-05-31 20:55 - 00406912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00402432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Graphics.Printing.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00390488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netcfgx.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00387210 _____ () C:\WINDOWS\system32\ApnDatabase.xml 2014-05-31 20:55 - 2014-05-31 20:55 - 00386560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlangpui.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00379224 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys 2014-05-31 20:55 - 2014-05-31 20:55 - 00376152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys 2014-05-31 20:55 - 2014-05-31 20:55 - 00360512 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfreadwrite.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00356864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlidprov.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00356848 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcomp.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00355832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfreadwrite.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00325632 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationApi.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00324096 _____ (Microsoft Corporation) C:\WINDOWS\system32\SessEnv.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00299008 _____ (Microsoft Corporation) C:\WINDOWS\system32\pdh.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00298496 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSDMon.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00291840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Sensors.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00283648 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb10.sys 2014-05-31 20:55 - 2014-05-31 20:55 - 00280576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SessEnv.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00274944 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmWmiPl.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00271872 _____ (Microsoft Corporation) C:\WINDOWS\system32\spp.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00264192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FWPUCLNT.DLL 2014-05-31 20:55 - 2014-05-31 20:55 - 00262656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LocationApi.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00254976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pdh.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00254464 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsrslvr.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00252928 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00247296 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsApi.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00226304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Sensors.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00222720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\spp.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00222720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dcomp.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00220160 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00212992 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdd.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00201216 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReInfo.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00197632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00192000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Scanners.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00186368 _____ (Microsoft Corporation) C:\WINDOWS\system32\dafWfdProvider.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00172544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReInfo.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00171008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SensorsApi.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00160768 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxAllUserStore.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00157016 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wof.sys 2014-05-31 20:55 - 2014-05-31 20:55 - 00151040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Scanners.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxdav.sys 2014-05-31 20:55 - 2014-05-31 20:55 - 00139776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxAllUserStore.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00136024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wfplwfs.sys 2014-05-31 20:55 - 2014-05-31 20:55 - 00134144 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dfsc.sys 2014-05-31 20:55 - 2014-05-31 20:55 - 00115200 _____ (Microsoft Corporation) C:\WINDOWS\system32\umpnpmgr.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00115200 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevPropMgr.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00113648 _____ (Microsoft Corporation) C:\WINDOWS\system32\userenv.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00111616 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidclass.sys 2014-05-31 20:55 - 2014-05-31 20:55 - 00102912 _____ (Microsoft Corporation) C:\WINDOWS\system32\davclnt.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00094016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\userenv.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00086016 _____ (Microsoft Corporation) C:\WINDOWS\system32\RMapi.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\davclnt.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\sxproxy.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00079360 _____ (Microsoft Corporation) C:\WINDOWS\system32\w32tm.exe 2014-05-31 20:55 - 2014-05-31 20:55 - 00079360 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\IPMIDrv.sys 2014-05-31 20:55 - 2014-05-31 20:55 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\w32tm.exe 2014-05-31 20:55 - 2014-05-31 20:55 - 00069120 _____ (Microsoft Corporation) C:\WINDOWS\system32\l2gpstore.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\l2gpstore.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpipreg.sys 2014-05-31 20:55 - 2014-05-31 20:55 - 00040448 _____ (Microsoft Corporation) C:\WINDOWS\system32\SetNetworkLocation.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sxproxy.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00033280 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidusb.sys 2014-05-31 20:55 - 2014-05-31 20:55 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredentialMigrationHandler.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredentialMigrationHandler.dll 2014-05-31 20:54 - 2014-05-31 20:54 - 03464192 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll 2014-05-31 20:54 - 2014-05-31 20:54 - 01705472 _____ (Microsoft Corporation) C:\WINDOWS\system32\wucltux.dll 2014-05-31 20:54 - 2014-05-31 20:54 - 01054208 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.appcore.dll 2014-05-31 20:54 - 2014-05-31 20:54 - 00828928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.appcore.dll 2014-05-31 20:54 - 2014-05-31 20:54 - 00827392 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll 2014-05-31 20:54 - 2014-05-31 20:54 - 00666624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll 2014-05-31 20:54 - 2014-05-31 20:54 - 00555736 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.appcore.dll 2014-05-31 20:54 - 2014-05-31 20:54 - 00419928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.appcore.dll 2014-05-31 20:54 - 2014-05-31 20:54 - 00381440 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUSettingsProvider.dll 2014-05-31 20:54 - 2014-05-31 20:54 - 00201728 _____ (Microsoft Corporation) C:\WINDOWS\system32\ubpm.dll 2014-05-31 20:54 - 2014-05-31 20:54 - 00190976 _____ (Microsoft Corporation) C:\WINDOWS\system32\storewuauth.dll 2014-05-31 20:54 - 2014-05-31 20:54 - 00137728 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuwebv.dll 2014-05-31 20:54 - 2014-05-31 20:54 - 00123904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuwebv.dll 2014-05-31 20:54 - 2014-05-31 20:54 - 00093696 _____ (Microsoft Corporation) C:\WINDOWS\system32\wudriver.dll 2014-05-31 20:54 - 2014-05-31 20:54 - 00086688 _____ (Microsoft Corporation) C:\WINDOWS\system32\mrt_map.dll 2014-05-31 20:54 - 2014-05-31 20:54 - 00080896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wudriver.dll 2014-05-31 20:54 - 2014-05-31 20:54 - 00080032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mrt_map.dll 2014-05-31 20:54 - 2014-05-31 20:54 - 00056320 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups.dll 2014-05-31 20:54 - 2014-05-31 20:54 - 00054776 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe 2014-05-31 20:54 - 2014-05-31 20:54 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapp.exe 2014-05-31 20:54 - 2014-05-31 20:54 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapp.exe 2014-05-31 20:54 - 2014-05-31 20:54 - 00028320 _____ (Microsoft Corporation) C:\WINDOWS\system32\mrt100.dll 2014-05-31 20:54 - 2014-05-31 20:54 - 00026784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mrt100.dll 2014-05-31 20:54 - 2014-05-31 20:54 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wups.dll 2014-05-31 20:53 - 2014-05-31 20:53 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb 2014-05-31 20:53 - 2014-05-31 20:53 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb 2014-05-31 20:53 - 2014-05-31 20:53 - 00257880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdFilter.sys 2014-05-31 20:53 - 2014-05-31 20:53 - 00123224 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdNisDrv.sys 2014-05-31 20:53 - 2014-05-31 20:53 - 00035856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdBoot.sys 2014-05-31 20:52 - 2014-05-31 20:52 - 21268952 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 18755672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 16872448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 13287936 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 12711424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 11792384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 08652800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 07425368 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe 2014-05-31 20:52 - 2014-05-31 20:52 - 07173120 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 06645248 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 05833216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Search.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 05774848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 05104640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 04269056 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncEngine.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 04190720 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys 2014-05-31 20:52 - 2014-05-31 20:52 - 02688000 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 02144984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 02140888 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 02124840 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d9.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 02100736 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlowUI.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 01797896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d9.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 01584128 _____ (Microsoft Corporation) C:\WINDOWS\system32\workfolderssvc.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 01527296 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 01466856 _____ (Microsoft Corporation) C:\WINDOWS\system32\propsys.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 01436160 _____ (Microsoft Corporation) C:\WINDOWS\system32\VSSVC.exe 2014-05-31 20:52 - 2014-05-31 20:52 - 01411584 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 01403856 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 01379064 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpmde.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 01308160 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpsvc.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 01287168 _____ (Microsoft Corporation) C:\WINDOWS\system32\mispace.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 01230336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 01222656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Streaming.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 01209616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmde.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 01200288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\propsys.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 01200128 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthport.sys 2014-05-31 20:52 - 2014-05-31 20:52 - 01126912 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFolder.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 01057280 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdvidcrl.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 01029120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mispace.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 01025024 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00982016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Streaming.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00955904 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00918528 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00888320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00881616 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00872448 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDrive.exe 2014-05-31 20:52 - 2014-05-31 20:52 - 00855552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdvidcrl.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00836608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchFolder.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00834048 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00805376 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00765408 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00761856 _____ (Microsoft Corporation) C:\WINDOWS\system32\WorkfoldersControl.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00731648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\adtschema.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00731648 _____ (Microsoft Corporation) C:\WINDOWS\system32\adtschema.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00721408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveTelemetry.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00718336 _____ (Microsoft Corporation) C:\WINDOWS\system32\swprv.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00707048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00677376 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys 2014-05-31 20:52 - 2014-05-31 20:52 - 00669856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00629760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmCoreR.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00609448 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00589656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fvevol.sys 2014-05-31 20:52 - 2014-05-31 20:52 - 00565536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys 2014-05-31 20:52 - 2014-05-31 20:52 - 00563200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\afd.sys 2014-05-31 20:52 - 2014-05-31 20:52 - 00518544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00491744 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00491520 _____ (Microsoft Corporation) C:\WINDOWS\system32\GeofenceMonitorService.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00486912 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv 2014-05-31 20:52 - 2014-05-31 20:52 - 00467968 _____ (Microsoft Corporation) C:\WINDOWS\system32\srcore.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00467496 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00463256 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00462336 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsGdiConverter.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00449536 _____ (Microsoft Corporation) C:\WINDOWS\system32\defragsvc.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00443904 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansec.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00443904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\nwifi.sys 2014-05-31 20:52 - 2014-05-31 20:52 - 00426496 _____ (Microsoft Corporation) C:\WINDOWS\system32\clusapi.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00407016 _____ (Microsoft Corporation) C:\WINDOWS\system32\services.exe 2014-05-31 20:52 - 2014-05-31 20:52 - 00406504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00402432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys 2014-05-31 20:52 - 2014-05-31 20:52 - 00387896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00384856 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spaceport.sys 2014-05-31 20:52 - 2014-05-31 20:52 - 00372568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storport.sys 2014-05-31 20:52 - 2014-05-31 20:52 - 00370176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv 2014-05-31 20:52 - 2014-05-31 20:52 - 00370176 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanmsm.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00364640 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00360792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fltMgr.sys 2014-05-31 20:52 - 2014-05-31 20:52 - 00357376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GeofenceMonitorService.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00337408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsGdiConverter.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00337240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Classpnp.sys 2014-05-31 20:52 - 2014-05-31 20:52 - 00335872 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDEServer.exe 2014-05-31 20:52 - 2014-05-31 20:52 - 00326024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00324888 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFCaptureEngine.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00323072 _____ (Microsoft Corporation) C:\WINDOWS\system32\srvsvc.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00313344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\clusapi.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00310616 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\volsnap.sys 2014-05-31 20:52 - 2014-05-31 20:52 - 00307304 _____ (Microsoft Corporation) C:\WINDOWS\system32\wintrust.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00305768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00300544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanmsm.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00296960 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanapi.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00285144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFCaptureEngine.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00281600 _____ (Microsoft Corporation) C:\WINDOWS\system32\resutils.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00275800 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msiscsi.sys 2014-05-31 20:52 - 2014-05-31 20:52 - 00271872 _____ (Microsoft Corporation) C:\WINDOWS\system32\rstrui.exe 2014-05-31 20:52 - 2014-05-31 20:52 - 00263424 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlows.exe 2014-05-31 20:52 - 2014-05-31 20:52 - 00250368 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpencom.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00246272 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srvnet.sys 2014-05-31 20:52 - 2014-05-31 20:52 - 00244880 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe 2014-05-31 20:52 - 2014-05-31 20:52 - 00233912 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00230808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wintrust.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanapi.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00219136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\resutils.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00209920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpencom.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00206848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys 2014-05-31 20:52 - 2014-05-31 20:52 - 00201920 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVideoDSP.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00201216 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00191488 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpchttp.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00186880 _____ (Microsoft Corporation) C:\WINDOWS\system32\WorkFoldersShell.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00180056 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys 2014-05-31 20:52 - 2014-05-31 20:52 - 00178184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVideoDSP.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00144384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpchttp.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00143872 _____ (Microsoft Corporation) C:\WINDOWS\system32\BootMenuUX.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00135168 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscsvc.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00130144 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpapi.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00125496 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmapi.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00111528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gpapi.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00098584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmapi.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00077312 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hdaudbus.sys 2014-05-31 20:52 - 2014-05-31 20:52 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\system32\srclient.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsgqec.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\srclient.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00055296 _____ (Microsoft Corporation) C:\WINDOWS\system32\energyprov.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tsgqec.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00047616 _____ (Microsoft Corporation) C:\WINDOWS\system32\tlscsp.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00046592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tlscsp.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Shell.Search.UriHandler.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Shell.Search.UriHandler.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00032600 _____ (Microsoft Corporation) C:\WINDOWS\system32\ploptin.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00028408 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfpmp.exe 2014-05-31 20:52 - 2014-05-31 20:52 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d8thk.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanhlp.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanhlp.dll 2014-05-31 20:51 - 2014-05-31 20:51 - 00262144 _____ () C:\WINDOWS\system32\config\userdiff 2014-05-31 20:49 - 2014-05-31 20:49 - 00001465 _____ () C:\Users\sabine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2014-05-31 20:48 - 2014-05-31 20:48 - 00000020 ___SH () C:\Users\sabine\ntuser.ini 2014-05-31 20:48 - 2014-05-31 20:48 - 00000000 ____D () C:\WINDOWS\SysWOW64\XPSViewer 2014-05-31 20:48 - 2014-05-31 20:48 - 00000000 ____D () C:\Program Files\Reference Assemblies 2014-05-31 20:48 - 2014-05-31 20:48 - 00000000 ____D () C:\Program Files\MSBuild 2014-05-31 20:48 - 2014-05-31 20:48 - 00000000 ____D () C:\Program Files (x86)\Reference Assemblies 2014-05-31 20:48 - 2014-05-31 20:48 - 00000000 ____D () C:\Program Files (x86)\MSBuild 2014-05-31 20:48 - 2013-08-03 06:48 - 01166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll 2014-05-31 20:48 - 2013-08-03 06:48 - 00124112 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll 2014-05-31 20:48 - 2013-08-03 06:48 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe 2014-05-31 20:48 - 2013-08-03 06:41 - 00778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll 2014-05-31 20:48 - 2013-08-03 06:41 - 00102608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll 2014-05-31 20:48 - 2013-08-03 06:41 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe 2014-05-31 20:29 - 2014-05-31 20:29 - 00000000 _SHDL () C:\Users\Default\Vorlagen 2014-05-31 20:29 - 2014-05-31 20:29 - 00000000 _SHDL () C:\Users\Default\Startmenü 2014-05-31 20:29 - 2014-05-31 20:29 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung 2014-05-31 20:29 - 2014-05-31 20:29 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen 2014-05-31 20:29 - 2014-05-31 20:29 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien 2014-05-31 20:29 - 2014-05-31 20:29 - 00000000 _SHDL () C:\Users\Default\Druckumgebung 2014-05-31 20:29 - 2014-05-31 20:29 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik 2014-05-31 20:29 - 2014-05-31 20:29 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder 2014-05-31 20:29 - 2014-05-31 20:29 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-05-31 20:29 - 2014-05-31 20:29 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf 2014-05-31 20:29 - 2014-05-31 20:29 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten 2014-05-31 20:29 - 2014-05-31 20:29 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten 2014-05-31 20:29 - 2014-05-31 20:29 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik 2014-05-31 20:29 - 2014-05-31 20:29 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder 2014-05-31 20:29 - 2014-05-31 20:29 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-05-31 20:29 - 2014-05-31 20:29 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf 2014-05-31 20:29 - 2014-05-31 20:29 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten 2014-05-31 20:28 - 2014-05-31 20:28 - 00022960 _____ () C:\WINDOWS\system32\emptyregdb.dat 2014-05-31 20:24 - 2014-05-31 20:24 - 00000020 ___SH () C:\Users\UpdatusUser\ntuser.ini 2014-05-31 20:15 - 2014-05-31 20:15 - 00001547 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk 2014-05-31 20:15 - 2014-05-31 20:15 - 00000000 ____D () C:\Users\Default\AppData\Roaming\Macromedia 2014-05-31 20:15 - 2014-05-31 20:15 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\Macromedia 2014-05-31 20:10 - 2014-05-31 20:10 - 00000000 ____D () C:\WINDOWS\system32\config\bbimigrate 2014-05-31 20:08 - 2014-06-17 18:27 - 00000000 ____D () C:\Users\sabine\AppData\Local\Temp 2014-05-31 20:08 - 2014-06-16 07:24 - 00000000 ____D () C:\Users\sabine 2014-05-31 20:08 - 2014-06-13 19:48 - 00000000 ____D () C:\Users\UpdatusUser\AppData\Local\Temp 2014-05-31 20:08 - 2014-05-31 20:10 - 00000000 ___RD () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2014-05-31 20:08 - 2014-05-31 20:10 - 00000000 ___RD () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility 2014-05-31 20:08 - 2014-05-31 20:10 - 00000000 ___RD () C:\Users\sabine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2014-05-31 20:08 - 2014-05-31 20:10 - 00000000 ___RD () C:\Users\sabine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility 2014-05-31 20:08 - 2014-05-31 20:08 - 00000000 _SHDL () C:\Users\UpdatusUser\Vorlagen 2014-05-31 20:08 - 2014-05-31 20:08 - 00000000 _SHDL () C:\Users\UpdatusUser\Startmenü 2014-05-31 20:08 - 2014-05-31 20:08 - 00000000 _SHDL () C:\Users\UpdatusUser\Netzwerkumgebung 2014-05-31 20:08 - 2014-05-31 20:08 - 00000000 _SHDL () C:\Users\UpdatusUser\Lokale Einstellungen 2014-05-31 20:08 - 2014-05-31 20:08 - 00000000 _SHDL () C:\Users\UpdatusUser\Eigene Dateien 2014-05-31 20:08 - 2014-05-31 20:08 - 00000000 _SHDL () C:\Users\UpdatusUser\Druckumgebung 2014-05-31 20:08 - 2014-05-31 20:08 - 00000000 _SHDL () C:\Users\UpdatusUser\Documents\Eigene Musik 2014-05-31 20:08 - 2014-05-31 20:08 - 00000000 _SHDL () C:\Users\UpdatusUser\Documents\Eigene Bilder 2014-05-31 20:08 - 2014-05-31 20:08 - 00000000 _SHDL () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-05-31 20:08 - 2014-05-31 20:08 - 00000000 _SHDL () C:\Users\UpdatusUser\AppData\Local\Verlauf 2014-05-31 20:08 - 2014-05-31 20:08 - 00000000 _SHDL () C:\Users\UpdatusUser\AppData\Local\Anwendungsdaten 2014-05-31 20:08 - 2014-05-31 20:08 - 00000000 _SHDL () C:\Users\UpdatusUser\Anwendungsdaten 2014-05-31 20:08 - 2014-05-31 20:08 - 00000000 _SHDL () C:\Users\sabine\Vorlagen 2014-05-31 20:08 - 2014-05-31 20:08 - 00000000 _SHDL () C:\Users\sabine\Startmenü 2014-05-31 20:08 - 2014-05-31 20:08 - 00000000 _SHDL () C:\Users\sabine\Netzwerkumgebung 2014-05-31 20:08 - 2014-05-31 20:08 - 00000000 _SHDL () C:\Users\sabine\Lokale Einstellungen 2014-05-31 20:08 - 2014-05-31 20:08 - 00000000 _SHDL () C:\Users\sabine\Eigene Dateien 2014-05-31 20:08 - 2014-05-31 20:08 - 00000000 _SHDL () C:\Users\sabine\Druckumgebung 2014-05-31 20:08 - 2014-05-31 20:08 - 00000000 _SHDL () C:\Users\sabine\Documents\Eigene Musik 2014-05-31 20:08 - 2014-05-31 20:08 - 00000000 _SHDL () C:\Users\sabine\Documents\Eigene Bilder 2014-05-31 20:08 - 2014-05-31 20:08 - 00000000 _SHDL () C:\Users\sabine\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-05-31 20:08 - 2014-05-31 20:08 - 00000000 _SHDL () C:\Users\sabine\AppData\Local\Verlauf 2014-05-31 20:08 - 2014-05-31 20:08 - 00000000 _SHDL () C:\Users\sabine\AppData\Local\Anwendungsdaten 2014-05-31 20:08 - 2014-05-31 20:08 - 00000000 _SHDL () C:\Users\sabine\Anwendungsdaten 2014-05-31 20:08 - 2014-03-18 12:11 - 00000369 _____ () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk 2014-05-31 20:08 - 2014-03-18 12:11 - 00000369 _____ () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk 2014-05-31 20:08 - 2014-03-18 12:11 - 00000369 _____ () C:\Users\sabine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk 2014-05-31 20:08 - 2014-03-18 12:11 - 00000369 _____ () C:\Users\sabine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk 2014-05-31 20:08 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2014-05-31 20:08 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\sabine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2014-05-31 20:08 - 2013-08-22 17:36 - 00000000 ____D () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance 2014-05-31 20:08 - 2013-08-22 17:36 - 00000000 ____D () C:\Users\sabine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance 2014-05-31 20:07 - 2014-05-31 20:28 - 00032388 _____ () C:\WINDOWS\diagwrn.xml 2014-05-31 20:07 - 2014-05-31 20:28 - 00032388 _____ () C:\WINDOWS\diagerr.xml 2014-05-31 20:02 - 2014-05-31 20:02 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_Kernel_iBtFltCoex_01009.Wdf 2014-05-31 20:02 - 2014-05-31 20:02 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_Kernel_dc3d_01011.Wdf 2014-05-31 20:02 - 2014-05-31 20:02 - 00000000 ____D () C:\Program Files (x86)\USB Camera 2014-05-31 20:01 - 2014-05-31 20:18 - 00000000 ____D () C:\WINDOWS\SysWOW64\NV 2014-05-31 20:01 - 2014-05-31 20:18 - 00000000 ____D () C:\WINDOWS\system32\NV 2014-05-31 20:01 - 2014-05-31 20:13 - 00000000 ____D () C:\ProgramData\NVIDIA 2014-05-31 20:01 - 2014-05-31 20:13 - 00000000 ____D () C:\Program Files\CONEXANT 2014-05-31 20:01 - 2014-05-31 20:13 - 00000000 ____D () C:\Program Files (x86)\Intel 2014-05-31 20:01 - 2014-05-31 20:01 - 00000264 _____ () C:\WINDOWS\Tasks\Synaptics TouchPad Enhancements.job 2014-05-31 20:01 - 2014-05-31 20:01 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_Kernel_SynTP_01011.Wdf 2014-05-31 20:01 - 2014-05-31 20:01 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_Kernel_Smb_driver_Intel_01011.Wdf 2014-05-31 20:01 - 2014-05-31 20:01 - 00000000 ____D () C:\Program Files\Synaptics 2014-05-31 20:01 - 2014-01-25 02:23 - 00064000 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.DLL 2014-05-31 20:01 - 2014-01-25 02:23 - 00060416 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.DLL 2014-05-31 20:00 - 2014-06-17 06:15 - 01389648 _____ () C:\WINDOWS\WindowsUpdate.log 2014-05-31 20:00 - 2014-05-31 20:13 - 00000000 ____D () C:\Program Files\NVIDIA Corporation 2014-05-31 20:00 - 2014-05-31 20:13 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation 2014-05-31 20:00 - 2014-05-31 20:00 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation 2014-05-31 20:00 - 2013-10-29 01:39 - 06610720 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll 2014-05-31 20:00 - 2013-10-29 01:39 - 03477280 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc64.dll 2014-05-31 20:00 - 2013-10-29 01:38 - 02559776 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvcr.dll 2014-05-31 20:00 - 2013-10-29 01:38 - 01042720 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshext.dll 2014-05-31 20:00 - 2013-10-29 01:38 - 00920864 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe 2014-05-31 20:00 - 2013-10-29 01:38 - 00580384 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\oemdspif.dll 2014-05-31 20:00 - 2013-10-29 01:38 - 00219424 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmctray.dll 2014-05-31 20:00 - 2013-10-29 01:38 - 00067072 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshextr.dll 2014-05-31 20:00 - 2013-10-29 01:38 - 00063776 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvshext.dll 2014-05-31 20:00 - 2013-10-25 13:44 - 03435888 _____ () C:\WINDOWS\system32\nvcoproc.bin 2014-05-31 19:20 - 2014-05-31 20:28 - 00006611 _____ () C:\WINDOWS\comsetup.log 2014-05-31 13:14 - 2014-06-01 12:41 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2014-05-30 16:46 - 2014-05-30 16:46 - 00000000 ___SD () C:\Users\sabine\Documents\Meine Datenquellen 2014-05-27 20:56 - 2014-05-30 07:17 - 00000000 ____D () C:\Program Files (x86)\VideoLAN |
17.06.2014, 17:30 | #10 |
| Regsvr32 Fehler beim jedem Windows-StartCode:
ATTFilter ==================== One Month Modified Files and Folders ======= 2014-06-17 18:27 - 2014-06-17 18:27 - 00021449 _____ () C:\Users\sabine\Desktop\FRST.txt 2014-06-17 18:27 - 2014-06-15 07:23 - 00000000 ____D () C:\FRST 2014-06-17 18:27 - 2014-05-31 20:08 - 00000000 ____D () C:\Users\sabine\AppData\Local\Temp 2014-06-17 18:26 - 2014-06-17 18:26 - 00000874 _____ () C:\Users\sabine\Desktop\checkup.txt 2014-06-17 18:25 - 2014-06-17 18:25 - 00854367 _____ () C:\Users\sabine\Desktop\SecurityCheck.exe 2014-06-17 18:19 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\sru 2014-06-17 18:18 - 2014-06-16 07:02 - 00122584 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys 2014-06-17 18:17 - 2013-08-22 16:46 - 00340111 _____ () C:\WINDOWS\setupact.log 2014-06-17 12:56 - 2014-05-31 20:59 - 00003946 _____ () C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{02C6F728-BF56-436A-A768-4B9C5F40F7D4} 2014-06-17 07:32 - 2014-06-17 07:32 - 00000072 _____ () C:\Users\Public\LMDebug.log 2014-06-17 06:40 - 2013-12-06 16:56 - 00000000 ____D () C:\Users\sabine\Software 2014-06-17 06:38 - 2014-03-18 12:03 - 01776918 _____ () C:\WINDOWS\system32\PerfStringBackup.INI 2014-06-17 06:38 - 2014-03-18 11:25 - 00765582 _____ () C:\WINDOWS\system32\perfh007.dat 2014-06-17 06:38 - 2014-03-18 11:25 - 00159366 _____ () C:\WINDOWS\system32\perfc007.dat 2014-06-17 06:15 - 2014-05-31 20:00 - 01389648 _____ () C:\WINDOWS\WindowsUpdate.log 2014-06-17 06:07 - 2013-10-12 15:28 - 00003600 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1240990677-1578086025-3834589401-1002 2014-06-17 05:55 - 2013-10-11 18:04 - 00000377 _____ () C:\Users\sabine\AppData\Local\RegisteredPackageInformation.xml 2014-06-16 19:32 - 2013-12-12 21:46 - 00000000 ____D () C:\Users\sabine\Haus Reichshofstraße 2014-06-16 19:13 - 2014-03-26 20:11 - 00000000 ____D () C:\Users\sabine\Scan 2014-06-16 19:12 - 2013-12-13 18:28 - 00012088 _____ () C:\Users\sabine\AppData\Roaming\SmarThruOptions.xml 2014-06-16 19:09 - 2014-06-16 19:09 - 00000000 ____D () C:\ProgramData\SSScan 2014-06-16 19:08 - 2014-06-16 19:08 - 00000000 ____D () C:\Users\sabine\AppData\Roaming\Samsung 2014-06-16 19:06 - 2014-06-16 19:06 - 00000000 ____D () C:\WINDOWS\twain_64 2014-06-16 19:06 - 2014-06-16 19:06 - 00000000 ____D () C:\WINDOWS\LastGood 2014-06-16 19:06 - 2013-12-13 18:25 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung Printers 2014-06-16 19:06 - 2013-12-13 18:24 - 00000000 ____D () C:\Program Files (x86)\Samsung 2014-06-16 19:05 - 2014-06-16 19:05 - 00000237 _____ () C:\Autoconfig.ini 2014-06-16 19:05 - 2014-06-16 19:05 - 00000000 ____D () C:\ProgramData\Samsung 2014-06-16 15:59 - 2014-06-16 15:59 - 00000000 ___SH () C:\DkHyperbootSync 2014-06-16 07:46 - 2013-10-11 18:04 - 00000000 ____D () C:\Users\sabine\AppData\Roaming\Nitro PDF 2014-06-16 07:44 - 2014-06-16 07:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bluetooth Devices 2014-06-16 07:43 - 2013-08-22 16:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT 2014-06-16 07:35 - 2014-06-15 07:22 - 02081280 _____ (Farbar) C:\Users\sabine\Desktop\FRST64.exe 2014-06-16 07:29 - 2014-06-16 07:29 - 00000000 ____D () C:\WINDOWS\ERUNT 2014-06-16 07:27 - 2014-06-16 07:27 - 01016261 _____ (Thisisu) C:\Users\sabine\Desktop\JRT.exe 2014-06-16 07:25 - 2014-03-18 03:50 - 00021418 _____ () C:\WINDOWS\PFRO.log 2014-06-16 07:24 - 2014-05-31 20:08 - 00000000 ____D () C:\Users\sabine 2014-06-16 07:24 - 2014-01-21 22:15 - 00000000 ____D () C:\AdwCleaner 2014-06-16 07:19 - 2013-08-22 16:45 - 00000000 ____D () C:\WINDOWS\Setup 2014-06-16 07:18 - 2013-12-28 17:32 - 00000000 ____D () C:\Temp 2014-06-16 07:15 - 2014-06-16 06:36 - 00000000 ____D () C:\Users\sabine\AppData\Roaming\Nico Mak Computing 2014-06-16 07:02 - 2014-06-16 07:02 - 00001129 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-06-16 07:02 - 2014-06-16 07:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2014-06-16 07:02 - 2014-06-16 07:02 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 2014-06-16 07:02 - 2014-01-21 22:01 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-06-14 21:34 - 2013-12-06 17:22 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service 2014-06-14 19:35 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\AppReadiness 2014-06-13 19:48 - 2014-05-31 20:08 - 00000000 ____D () C:\Users\UpdatusUser\AppData\Local\Temp 2014-06-12 07:02 - 2013-12-12 21:46 - 00000000 ____D () C:\Users\sabine\Dies&Das 2014-06-12 04:10 - 2014-06-11 21:11 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird 2014-06-11 21:09 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\rescache 2014-06-11 20:51 - 2013-08-22 15:25 - 00262144 ___SH () C:\WINDOWS\system32\config\BBI 2014-06-11 20:50 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\WinStore 2014-06-11 20:25 - 2013-12-16 16:59 - 00000000 ____D () C:\ProgramData\Microsoft Help 2014-06-11 20:25 - 2012-07-26 09:59 - 00000000 ____D () C:\WINDOWS\CbsTemp 2014-06-11 20:24 - 2013-12-06 17:59 - 00000000 ____D () C:\WINDOWS\system32\MRT 2014-06-11 20:23 - 2013-12-06 17:59 - 95414520 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe 2014-06-11 20:23 - 2013-08-22 17:36 - 00000000 ___RD () C:\WINDOWS\ToastData 2014-06-11 20:23 - 2013-08-22 15:25 - 00262144 ___SH () C:\WINDOWS\system32\config\ELAM 2014-06-11 19:49 - 2013-12-13 19:09 - 00130584 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avipbb.sys 2014-06-11 19:49 - 2013-12-13 19:09 - 00112080 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avgntflt.sys 2014-06-01 14:16 - 2013-12-13 20:19 - 00000000 ____D () C:\Users\sabine\AppData\Roaming\MyPhoneExplorer 2014-06-01 13:23 - 2014-06-01 13:23 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MyPhoneExplorer 2014-06-01 13:23 - 2013-12-13 20:19 - 00002084 _____ () C:\Users\Public\Desktop\MyPhoneExplorer.lnk 2014-06-01 13:23 - 2013-12-13 20:19 - 00000000 ____D () C:\Program Files (x86)\MyPhoneExplorer 2014-06-01 12:41 - 2014-05-31 13:14 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2014-06-01 12:41 - 2013-12-06 17:22 - 00001186 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk 2014-06-01 12:41 - 2013-12-06 17:22 - 00001174 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk 2014-06-01 12:31 - 2013-12-06 18:28 - 00003558 _____ () C:\WINDOWS\System32\Tasks\CreateChoiceProcessTask 2014-06-01 12:29 - 2013-08-22 16:44 - 00430280 _____ () C:\WINDOWS\system32\FNTCACHE.DAT 2014-06-01 06:58 - 2012-07-26 07:26 - 00000235 _____ () C:\WINDOWS\win.ini 2014-05-31 22:48 - 2014-05-31 22:48 - 00000000 ___RD () C:\WINDOWS\BrowserChoice 2014-05-31 22:48 - 2013-10-11 18:03 - 00000000 ____D () C:\Users\sabine\AppData\Local\Packages 2014-05-31 22:47 - 2014-05-31 22:47 - 00000000 ____D () C:\WINDOWS\PCHEALTH 2014-05-31 22:47 - 2014-05-31 22:47 - 00000000 ____D () C:\Users\Default\AppData\Local\Microsoft Help 2014-05-31 22:47 - 2014-05-31 22:47 - 00000000 ____D () C:\Users\Default User\AppData\Local\Microsoft Help 2014-05-31 22:47 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared 2014-05-31 21:10 - 2014-04-06 20:06 - 00000000 ____D () C:\Users\sabine\AppData\Roaming\LSC 2014-05-31 21:09 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\restore 2014-05-31 21:09 - 2013-08-08 15:53 - 00000000 ____D () C:\WINDOWS\System32\Tasks\Lenovo 2014-05-31 21:09 - 2013-08-08 15:53 - 00000000 ____D () C:\WINDOWS\Downloaded Installations 2014-05-31 21:09 - 2013-08-08 15:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lenovo ThinkVantage Tools 2014-05-31 21:09 - 2013-08-08 15:33 - 00000000 ____D () C:\Program Files\Lenovo 2014-05-31 20:58 - 2014-05-31 20:58 - 00000000 __SHD () C:\Users\sabine\AppData\Local\EmieUserList 2014-05-31 20:58 - 2014-05-31 20:58 - 00000000 __SHD () C:\Users\sabine\AppData\Local\EmieSiteList 2014-05-31 20:57 - 2014-05-31 20:57 - 00000000 __SHD () C:\Recovery 2014-05-31 20:56 - 2014-05-31 20:56 - 00308224 _____ (Microsoft Corporation) C:\WINDOWS\system32\wusa.exe 2014-05-31 20:56 - 2014-05-31 20:56 - 00305152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wusa.exe 2014-05-31 20:56 - 2013-08-22 17:36 - 00262144 _____ () C:\WINDOWS\system32\config\BCD-Template 2014-05-31 20:56 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\setup 2014-05-31 20:55 - 2014-05-31 20:55 - 02900992 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 02641920 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 02479616 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmSvc.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 02373784 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe 2014-05-31 20:55 - 2014-05-31 20:55 - 02331000 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 02317824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 02270208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 02141912 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 02133504 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 02088160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe 2014-05-31 20:55 - 2014-05-31 20:55 - 02030080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WsmSvc.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 02013016 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys 2014-05-31 20:55 - 2014-05-31 20:55 - 01843712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Display.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 01816576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Display.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 01779800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 01764864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 01679128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 01656832 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 01557848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys 2014-05-31 20:55 - 2014-05-31 20:55 - 01542768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 01351168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 01306624 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 01291200 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel32.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 01112536 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 01095488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 01063424 _____ (Microsoft Corporation) C:\WINDOWS\system32\IKEEXT.DLL 2014-05-31 20:55 - 2014-05-31 20:55 - 01036288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kernel32.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 01015808 _____ (Microsoft Corporation) C:\WINDOWS\system32\aclui.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00950784 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgent.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00939520 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00924160 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00887296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aclui.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00836096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00834560 _____ (Microsoft Corporation) C:\WINDOWS\system32\netlogon.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00827392 _____ (Microsoft Corporation) C:\WINDOWS\system32\BFE.DLL 2014-05-31 20:55 - 2014-05-31 20:55 - 00800256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReAgent.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00755712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00717312 _____ (Microsoft Corporation) C:\WINDOWS\system32\nshwfp.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00688640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netlogon.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00669696 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasapi32.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00655360 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsapi.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00621568 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAgent.exe 2014-05-31 20:55 - 2014-05-31 20:55 - 00605184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasapi32.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00567296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nshwfp.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00542208 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.Printing.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00518552 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00512000 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidprov.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00494592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dnsapi.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00488280 _____ (Microsoft Corporation) C:\WINDOWS\system32\netcfgx.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00467800 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS 2014-05-31 20:55 - 2014-05-31 20:55 - 00462336 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlangpui.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00412672 _____ (Microsoft Corporation) C:\WINDOWS\system32\FWPUCLNT.DLL 2014-05-31 20:55 - 2014-05-31 20:55 - 00406912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00402432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Graphics.Printing.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00390488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netcfgx.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00387210 _____ () C:\WINDOWS\system32\ApnDatabase.xml 2014-05-31 20:55 - 2014-05-31 20:55 - 00386560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlangpui.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00379224 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys 2014-05-31 20:55 - 2014-05-31 20:55 - 00376152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys 2014-05-31 20:55 - 2014-05-31 20:55 - 00360512 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfreadwrite.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00356864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlidprov.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00356848 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcomp.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00355832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfreadwrite.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00325632 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationApi.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00324096 _____ (Microsoft Corporation) C:\WINDOWS\system32\SessEnv.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00299008 _____ (Microsoft Corporation) C:\WINDOWS\system32\pdh.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00298496 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSDMon.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00291840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Sensors.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00283648 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb10.sys 2014-05-31 20:55 - 2014-05-31 20:55 - 00280576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SessEnv.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00274944 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmWmiPl.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00271872 _____ (Microsoft Corporation) C:\WINDOWS\system32\spp.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00264192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FWPUCLNT.DLL 2014-05-31 20:55 - 2014-05-31 20:55 - 00262656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LocationApi.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00254976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pdh.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00254464 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsrslvr.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00252928 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00247296 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsApi.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00226304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Sensors.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00222720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\spp.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00222720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dcomp.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00220160 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00212992 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdd.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00201216 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReInfo.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00197632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00192000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Scanners.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00186368 _____ (Microsoft Corporation) C:\WINDOWS\system32\dafWfdProvider.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00172544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReInfo.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00171008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SensorsApi.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00160768 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxAllUserStore.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00157016 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wof.sys 2014-05-31 20:55 - 2014-05-31 20:55 - 00151040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Scanners.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxdav.sys 2014-05-31 20:55 - 2014-05-31 20:55 - 00139776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxAllUserStore.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00136024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wfplwfs.sys 2014-05-31 20:55 - 2014-05-31 20:55 - 00134144 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dfsc.sys 2014-05-31 20:55 - 2014-05-31 20:55 - 00115200 _____ (Microsoft Corporation) C:\WINDOWS\system32\umpnpmgr.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00115200 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevPropMgr.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00113648 _____ (Microsoft Corporation) C:\WINDOWS\system32\userenv.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00111616 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidclass.sys 2014-05-31 20:55 - 2014-05-31 20:55 - 00102912 _____ (Microsoft Corporation) C:\WINDOWS\system32\davclnt.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00094016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\userenv.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00086016 _____ (Microsoft Corporation) C:\WINDOWS\system32\RMapi.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\davclnt.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\sxproxy.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00079360 _____ (Microsoft Corporation) C:\WINDOWS\system32\w32tm.exe 2014-05-31 20:55 - 2014-05-31 20:55 - 00079360 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\IPMIDrv.sys 2014-05-31 20:55 - 2014-05-31 20:55 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\w32tm.exe 2014-05-31 20:55 - 2014-05-31 20:55 - 00069120 _____ (Microsoft Corporation) C:\WINDOWS\system32\l2gpstore.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\l2gpstore.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpipreg.sys 2014-05-31 20:55 - 2014-05-31 20:55 - 00040448 _____ (Microsoft Corporation) C:\WINDOWS\system32\SetNetworkLocation.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sxproxy.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00033280 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidusb.sys 2014-05-31 20:55 - 2014-05-31 20:55 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredentialMigrationHandler.dll 2014-05-31 20:55 - 2014-05-31 20:55 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredentialMigrationHandler.dll 2014-05-31 20:54 - 2014-05-31 20:54 - 03464192 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll 2014-05-31 20:54 - 2014-05-31 20:54 - 01705472 _____ (Microsoft Corporation) C:\WINDOWS\system32\wucltux.dll 2014-05-31 20:54 - 2014-05-31 20:54 - 01054208 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.appcore.dll 2014-05-31 20:54 - 2014-05-31 20:54 - 00828928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.appcore.dll 2014-05-31 20:54 - 2014-05-31 20:54 - 00827392 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll 2014-05-31 20:54 - 2014-05-31 20:54 - 00666624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll 2014-05-31 20:54 - 2014-05-31 20:54 - 00555736 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.appcore.dll 2014-05-31 20:54 - 2014-05-31 20:54 - 00419928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.appcore.dll 2014-05-31 20:54 - 2014-05-31 20:54 - 00381440 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUSettingsProvider.dll 2014-05-31 20:54 - 2014-05-31 20:54 - 00201728 _____ (Microsoft Corporation) C:\WINDOWS\system32\ubpm.dll 2014-05-31 20:54 - 2014-05-31 20:54 - 00190976 _____ (Microsoft Corporation) C:\WINDOWS\system32\storewuauth.dll 2014-05-31 20:54 - 2014-05-31 20:54 - 00137728 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuwebv.dll 2014-05-31 20:54 - 2014-05-31 20:54 - 00123904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuwebv.dll 2014-05-31 20:54 - 2014-05-31 20:54 - 00093696 _____ (Microsoft Corporation) C:\WINDOWS\system32\wudriver.dll 2014-05-31 20:54 - 2014-05-31 20:54 - 00086688 _____ (Microsoft Corporation) C:\WINDOWS\system32\mrt_map.dll 2014-05-31 20:54 - 2014-05-31 20:54 - 00080896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wudriver.dll 2014-05-31 20:54 - 2014-05-31 20:54 - 00080032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mrt_map.dll 2014-05-31 20:54 - 2014-05-31 20:54 - 00056320 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups.dll 2014-05-31 20:54 - 2014-05-31 20:54 - 00054776 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe 2014-05-31 20:54 - 2014-05-31 20:54 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapp.exe 2014-05-31 20:54 - 2014-05-31 20:54 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapp.exe 2014-05-31 20:54 - 2014-05-31 20:54 - 00028320 _____ (Microsoft Corporation) C:\WINDOWS\system32\mrt100.dll 2014-05-31 20:54 - 2014-05-31 20:54 - 00026784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mrt100.dll 2014-05-31 20:54 - 2014-05-31 20:54 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wups.dll 2014-05-31 20:54 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\SecureBootUpdates 2014-05-31 20:53 - 2014-05-31 20:53 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb 2014-05-31 20:53 - 2014-05-31 20:53 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb 2014-05-31 20:53 - 2014-05-31 20:53 - 00257880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdFilter.sys 2014-05-31 20:53 - 2014-05-31 20:53 - 00123224 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdNisDrv.sys 2014-05-31 20:53 - 2014-05-31 20:53 - 00035856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdBoot.sys 2014-05-31 20:53 - 2013-08-22 17:36 - 00000000 ___RD () C:\WINDOWS\ImmersiveControlPanel 2014-05-31 20:53 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2014-05-31 20:53 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2014-05-31 20:53 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files\Windows Defender 2014-05-31 20:53 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files (x86)\Windows Defender 2014-05-31 20:52 - 2014-05-31 20:52 - 21268952 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 18755672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 16872448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 13287936 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 12711424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 11792384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 08652800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 07425368 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe 2014-05-31 20:52 - 2014-05-31 20:52 - 07173120 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 06645248 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 05833216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Search.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 05774848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 05104640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 04269056 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncEngine.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 04190720 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys 2014-05-31 20:52 - 2014-05-31 20:52 - 02688000 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 02144984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 02140888 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 02124840 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d9.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 02100736 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlowUI.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 01797896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d9.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 01584128 _____ (Microsoft Corporation) C:\WINDOWS\system32\workfolderssvc.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 01527296 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 01466856 _____ (Microsoft Corporation) C:\WINDOWS\system32\propsys.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 01436160 _____ (Microsoft Corporation) C:\WINDOWS\system32\VSSVC.exe 2014-05-31 20:52 - 2014-05-31 20:52 - 01411584 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 01403856 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 01379064 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpmde.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 01308160 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpsvc.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 01287168 _____ (Microsoft Corporation) C:\WINDOWS\system32\mispace.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 01230336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 01222656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Streaming.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 01209616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmde.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 01200288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\propsys.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 01200128 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthport.sys 2014-05-31 20:52 - 2014-05-31 20:52 - 01126912 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFolder.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 01057280 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdvidcrl.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 01029120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mispace.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 01025024 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00982016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Streaming.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00955904 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00918528 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00888320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00881616 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00872448 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDrive.exe 2014-05-31 20:52 - 2014-05-31 20:52 - 00855552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdvidcrl.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00836608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchFolder.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00834048 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00805376 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00765408 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00761856 _____ (Microsoft Corporation) C:\WINDOWS\system32\WorkfoldersControl.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00731648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\adtschema.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00731648 _____ (Microsoft Corporation) C:\WINDOWS\system32\adtschema.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00721408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveTelemetry.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00718336 _____ (Microsoft Corporation) C:\WINDOWS\system32\swprv.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00707048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00677376 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys 2014-05-31 20:52 - 2014-05-31 20:52 - 00669856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00629760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmCoreR.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00609448 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00589656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fvevol.sys 2014-05-31 20:52 - 2014-05-31 20:52 - 00565536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys 2014-05-31 20:52 - 2014-05-31 20:52 - 00563200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\afd.sys 2014-05-31 20:52 - 2014-05-31 20:52 - 00518544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00491744 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00491520 _____ (Microsoft Corporation) C:\WINDOWS\system32\GeofenceMonitorService.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00486912 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv 2014-05-31 20:52 - 2014-05-31 20:52 - 00467968 _____ (Microsoft Corporation) C:\WINDOWS\system32\srcore.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00467496 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00463256 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00462336 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsGdiConverter.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00449536 _____ (Microsoft Corporation) C:\WINDOWS\system32\defragsvc.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00443904 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansec.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00443904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\nwifi.sys 2014-05-31 20:52 - 2014-05-31 20:52 - 00426496 _____ (Microsoft Corporation) C:\WINDOWS\system32\clusapi.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00407016 _____ (Microsoft Corporation) C:\WINDOWS\system32\services.exe 2014-05-31 20:52 - 2014-05-31 20:52 - 00406504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00402432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys 2014-05-31 20:52 - 2014-05-31 20:52 - 00387896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00384856 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spaceport.sys 2014-05-31 20:52 - 2014-05-31 20:52 - 00372568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storport.sys 2014-05-31 20:52 - 2014-05-31 20:52 - 00370176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv 2014-05-31 20:52 - 2014-05-31 20:52 - 00370176 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanmsm.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00364640 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00360792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fltMgr.sys 2014-05-31 20:52 - 2014-05-31 20:52 - 00357376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GeofenceMonitorService.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00337408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsGdiConverter.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00337240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Classpnp.sys 2014-05-31 20:52 - 2014-05-31 20:52 - 00335872 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDEServer.exe 2014-05-31 20:52 - 2014-05-31 20:52 - 00326024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00324888 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFCaptureEngine.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00323072 _____ (Microsoft Corporation) C:\WINDOWS\system32\srvsvc.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00313344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\clusapi.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00310616 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\volsnap.sys 2014-05-31 20:52 - 2014-05-31 20:52 - 00307304 _____ (Microsoft Corporation) C:\WINDOWS\system32\wintrust.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00305768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00300544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanmsm.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00296960 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanapi.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00285144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFCaptureEngine.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00281600 _____ (Microsoft Corporation) C:\WINDOWS\system32\resutils.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00275800 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msiscsi.sys 2014-05-31 20:52 - 2014-05-31 20:52 - 00271872 _____ (Microsoft Corporation) C:\WINDOWS\system32\rstrui.exe 2014-05-31 20:52 - 2014-05-31 20:52 - 00263424 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlows.exe 2014-05-31 20:52 - 2014-05-31 20:52 - 00250368 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpencom.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00246272 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srvnet.sys 2014-05-31 20:52 - 2014-05-31 20:52 - 00244880 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe 2014-05-31 20:52 - 2014-05-31 20:52 - 00233912 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00230808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wintrust.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanapi.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00219136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\resutils.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00209920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpencom.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00206848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys 2014-05-31 20:52 - 2014-05-31 20:52 - 00201920 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVideoDSP.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00201216 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00191488 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpchttp.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00186880 _____ (Microsoft Corporation) C:\WINDOWS\system32\WorkFoldersShell.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00180056 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys 2014-05-31 20:52 - 2014-05-31 20:52 - 00178184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVideoDSP.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00144384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpchttp.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00143872 _____ (Microsoft Corporation) C:\WINDOWS\system32\BootMenuUX.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00135168 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscsvc.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00130144 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpapi.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00125496 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmapi.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00111528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gpapi.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00098584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmapi.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00077312 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hdaudbus.sys 2014-05-31 20:52 - 2014-05-31 20:52 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\system32\srclient.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsgqec.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\srclient.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00055296 _____ (Microsoft Corporation) C:\WINDOWS\system32\energyprov.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tsgqec.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00047616 _____ (Microsoft Corporation) C:\WINDOWS\system32\tlscsp.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00046592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tlscsp.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Shell.Search.UriHandler.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Shell.Search.UriHandler.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00032600 _____ (Microsoft Corporation) C:\WINDOWS\system32\ploptin.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00028408 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfpmp.exe 2014-05-31 20:52 - 2014-05-31 20:52 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d8thk.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanhlp.dll 2014-05-31 20:52 - 2014-05-31 20:52 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanhlp.dll 2014-05-31 20:51 - 2014-05-31 20:51 - 00262144 _____ () C:\WINDOWS\system32\config\userdiff 2014-05-31 20:50 - 2013-10-11 18:08 - 00000000 ___RD () C:\Users\sabine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2014-05-31 20:50 - 2013-10-11 18:08 - 00000000 ___RD () C:\Users\sabine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools 2014-05-31 20:49 - 2014-05-31 20:57 - 00000000 ___DC () C:\WINDOWS\Panther 2014-05-31 20:49 - 2014-05-31 20:49 - 00001465 _____ () C:\Users\sabine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2014-05-31 20:48 - 2014-05-31 20:48 - 00000020 ___SH () C:\Users\sabine\ntuser.ini 2014-05-31 20:48 - 2014-05-31 20:48 - 00000000 ____D () C:\WINDOWS\SysWOW64\XPSViewer 2014-05-31 20:48 - 2014-05-31 20:48 - 00000000 ____D () C:\Program Files\Reference Assemblies 2014-05-31 20:48 - 2014-05-31 20:48 - 00000000 ____D () C:\Program Files\MSBuild 2014-05-31 20:48 - 2014-05-31 20:48 - 00000000 ____D () C:\Program Files (x86)\Reference Assemblies 2014-05-31 20:48 - 2014-05-31 20:48 - 00000000 ____D () C:\Program Files (x86)\MSBuild 2014-05-31 20:48 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\MUI 2014-05-31 20:48 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\MUI 2014-05-31 20:29 - 2014-05-31 20:29 - 00000000 _SHDL () C:\Users\Default\Vorlagen 2014-05-31 20:29 - 2014-05-31 20:29 - 00000000 _SHDL () C:\Users\Default\Startmenü 2014-05-31 20:29 - 2014-05-31 20:29 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung 2014-05-31 20:29 - 2014-05-31 20:29 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen 2014-05-31 20:29 - 2014-05-31 20:29 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien 2014-05-31 20:29 - 2014-05-31 20:29 - 00000000 _SHDL () C:\Users\Default\Druckumgebung 2014-05-31 20:29 - 2014-05-31 20:29 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik 2014-05-31 20:29 - 2014-05-31 20:29 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder 2014-05-31 20:29 - 2014-05-31 20:29 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-05-31 20:29 - 2014-05-31 20:29 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf 2014-05-31 20:29 - 2014-05-31 20:29 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten 2014-05-31 20:29 - 2014-05-31 20:29 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten 2014-05-31 20:29 - 2014-05-31 20:29 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik 2014-05-31 20:29 - 2014-05-31 20:29 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder 2014-05-31 20:29 - 2014-05-31 20:29 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-05-31 20:29 - 2014-05-31 20:29 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf 2014-05-31 20:29 - 2014-05-31 20:29 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten 2014-05-31 20:29 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\Registration 2014-05-31 20:29 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files\Windows NT 2014-05-31 20:29 - 2013-08-22 15:36 - 00000000 __RHD () C:\Users\Default 2014-05-31 20:28 - 2014-05-31 20:28 - 00022960 _____ () C:\WINDOWS\system32\emptyregdb.dat 2014-05-31 20:28 - 2014-05-31 20:07 - 00032388 _____ () C:\WINDOWS\diagwrn.xml 2014-05-31 20:28 - 2014-05-31 20:07 - 00032388 _____ () C:\WINDOWS\diagerr.xml 2014-05-31 20:28 - 2014-05-31 19:20 - 00006611 _____ () C:\WINDOWS\comsetup.log 2014-05-31 20:26 - 2013-08-22 17:36 - 00000000 __RSD () C:\WINDOWS\Media 2014-05-31 20:26 - 2013-08-22 17:36 - 00000000 __RHD () C:\Users\Public\Libraries 2014-05-31 20:24 - 2014-05-31 20:24 - 00000020 ___SH () C:\Users\UpdatusUser\ntuser.ini 2014-05-31 20:18 - 2014-05-31 20:01 - 00000000 ____D () C:\WINDOWS\SysWOW64\NV 2014-05-31 20:18 - 2014-05-31 20:01 - 00000000 ____D () C:\WINDOWS\system32\NV 2014-05-31 20:17 - 2014-04-18 14:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Telefon CD 2005 2014-05-31 20:17 - 2014-03-18 11:40 - 00000000 ____D () C:\WINDOWS\ShellNew 2014-05-31 20:17 - 2014-01-21 19:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ElsterFormular 2014-05-31 20:17 - 2013-12-30 18:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Personal Backup 2014-05-31 20:17 - 2013-12-16 17:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2014-05-31 20:17 - 2013-12-13 19:01 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft-Maus- und Tastatur-Center 2014-05-31 20:17 - 2013-12-13 18:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lexware 2014-05-31 20:17 - 2013-12-13 18:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IrfanView 2014-05-31 20:17 - 2013-12-06 18:02 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel PROSet Wireless 2014-05-31 20:17 - 2013-12-06 16:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fingerprint Reader 2014-05-31 20:17 - 2013-08-22 17:36 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StartUp 2014-05-31 20:17 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\WinBioDatabase 2014-05-31 20:17 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\system32\Sysprep 2014-05-31 20:17 - 2013-08-08 16:00 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel AppUp(R) center 2014-05-31 20:17 - 2013-08-08 15:56 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerDVD Create 2014-05-31 20:17 - 2013-08-08 15:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lenovo 2014-05-31 20:17 - 2013-08-08 15:42 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dolby 2014-05-31 20:17 - 2013-08-08 15:28 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel 2014-05-31 20:15 - 2014-05-31 20:15 - 00001547 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk 2014-05-31 20:15 - 2014-05-31 20:15 - 00000000 ____D () C:\Users\Default\AppData\Roaming\Macromedia 2014-05-31 20:15 - 2014-05-31 20:15 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\Macromedia 2014-05-31 20:15 - 2014-03-18 11:25 - 00000000 ____D () C:\WINDOWS\SysWOW64\WCN 2014-05-31 20:15 - 2014-03-18 11:25 - 00000000 ____D () C:\WINDOWS\SysWOW64\sysprep 2014-05-31 20:15 - 2014-03-18 11:25 - 00000000 ____D () C:\WINDOWS\system32\WCN 2014-05-31 20:15 - 2013-08-22 17:37 - 00004893 _____ () C:\WINDOWS\DtcInstall.log 2014-05-31 20:15 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\migwiz 2014-05-31 20:15 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\IME 2014-05-31 20:15 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\WinBioPlugIns 2014-05-31 20:15 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\spool 2014-05-31 20:15 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\NDF 2014-05-31 20:15 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\IME 2014-05-31 20:15 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\SMI 2014-05-31 20:15 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\system32\oobe 2014-05-31 20:15 - 2013-08-08 16:07 - 00000000 ____D () C:\WINDOWS\SysWOW64\sda 2014-05-31 20:15 - 2012-07-26 07:37 - 00000000 ____D () C:\Users\Default.migrated 2014-05-31 20:13 - 2014-05-31 20:01 - 00000000 ____D () C:\ProgramData\NVIDIA 2014-05-31 20:13 - 2014-05-31 20:01 - 00000000 ____D () C:\Program Files\CONEXANT 2014-05-31 20:13 - 2014-05-31 20:01 - 00000000 ____D () C:\Program Files (x86)\Intel 2014-05-31 20:13 - 2014-05-31 20:00 - 00000000 ____D () C:\Program Files\NVIDIA Corporation 2014-05-31 20:13 - 2014-05-31 20:00 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation 2014-05-31 20:13 - 2013-12-13 19:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira 2014-05-31 20:13 - 2013-12-13 18:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\I.R.I.S. Anwendungen 2014-05-31 20:13 - 2013-08-22 17:43 - 00000000 ____D () C:\WINDOWS\DigitalLocker 2014-05-31 20:13 - 2013-08-22 17:36 - 00000000 __SHD () C:\Program Files\Windows Sidebar 2014-05-31 20:13 - 2013-08-22 17:36 - 00000000 __SHD () C:\Program Files (x86)\Windows Sidebar 2014-05-31 20:13 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\IME 2014-05-31 20:13 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\Help 2014-05-31 20:13 - 2013-08-08 16:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel Corporation 2014-05-31 20:13 - 2013-03-25 23:03 - 00000000 ____D () C:\ProgramData\PRICache 2014-05-31 20:10 - 2014-05-31 20:10 - 00000000 ____D () C:\WINDOWS\system32\config\bbimigrate 2014-05-31 20:10 - 2014-05-31 20:08 - 00000000 ___RD () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2014-05-31 20:10 - 2014-05-31 20:08 - 00000000 ___RD () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility 2014-05-31 20:10 - 2014-05-31 20:08 - 00000000 ___RD () C:\Users\sabine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2014-05-31 20:10 - 2014-05-31 20:08 - 00000000 ___RD () C:\Users\sabine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility 2014-05-31 20:10 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\Recovery 2014-05-31 20:08 - 2014-05-31 20:08 - 00000000 _SHDL () C:\Users\UpdatusUser\Vorlagen 2014-05-31 20:08 - 2014-05-31 20:08 - 00000000 _SHDL () C:\Users\UpdatusUser\Startmenü 2014-05-31 20:08 - 2014-05-31 20:08 - 00000000 _SHDL () C:\Users\UpdatusUser\Netzwerkumgebung 2014-05-31 20:08 - 2014-05-31 20:08 - 00000000 _SHDL () C:\Users\UpdatusUser\Lokale Einstellungen 2014-05-31 20:08 - 2014-05-31 20:08 - 00000000 _SHDL () C:\Users\UpdatusUser\Eigene Dateien 2014-05-31 20:08 - 2014-05-31 20:08 - 00000000 _SHDL () C:\Users\UpdatusUser\Druckumgebung 2014-05-31 20:08 - 2014-05-31 20:08 - 00000000 _SHDL () C:\Users\UpdatusUser\Documents\Eigene Musik 2014-05-31 20:08 - 2014-05-31 20:08 - 00000000 _SHDL () C:\Users\UpdatusUser\Documents\Eigene Bilder 2014-05-31 20:08 - 2014-05-31 20:08 - 00000000 _SHDL () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-05-31 20:08 - 2014-05-31 20:08 - 00000000 _SHDL () C:\Users\UpdatusUser\AppData\Local\Verlauf 2014-05-31 20:08 - 2014-05-31 20:08 - 00000000 _SHDL () C:\Users\UpdatusUser\AppData\Local\Anwendungsdaten 2014-05-31 20:08 - 2014-05-31 20:08 - 00000000 _SHDL () C:\Users\UpdatusUser\Anwendungsdaten 2014-05-31 20:08 - 2014-05-31 20:08 - 00000000 _SHDL () C:\Users\sabine\Vorlagen 2014-05-31 20:08 - 2014-05-31 20:08 - 00000000 _SHDL () C:\Users\sabine\Startmenü 2014-05-31 20:08 - 2014-05-31 20:08 - 00000000 _SHDL () C:\Users\sabine\Netzwerkumgebung 2014-05-31 20:08 - 2014-05-31 20:08 - 00000000 _SHDL () C:\Users\sabine\Lokale Einstellungen 2014-05-31 20:08 - 2014-05-31 20:08 - 00000000 _SHDL () C:\Users\sabine\Eigene Dateien 2014-05-31 20:08 - 2014-05-31 20:08 - 00000000 _SHDL () C:\Users\sabine\Druckumgebung 2014-05-31 20:08 - 2014-05-31 20:08 - 00000000 _SHDL () C:\Users\sabine\Documents\Eigene Musik 2014-05-31 20:08 - 2014-05-31 20:08 - 00000000 _SHDL () C:\Users\sabine\Documents\Eigene Bilder 2014-05-31 20:08 - 2014-05-31 20:08 - 00000000 _SHDL () C:\Users\sabine\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-05-31 20:08 - 2014-05-31 20:08 - 00000000 _SHDL () C:\Users\sabine\AppData\Local\Verlauf 2014-05-31 20:08 - 2014-05-31 20:08 - 00000000 _SHDL () C:\Users\sabine\AppData\Local\Anwendungsdaten 2014-05-31 20:08 - 2014-05-31 20:08 - 00000000 _SHDL () C:\Users\sabine\Anwendungsdaten 2014-05-31 20:02 - 2014-05-31 20:02 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_Kernel_iBtFltCoex_01009.Wdf 2014-05-31 20:02 - 2014-05-31 20:02 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_Kernel_dc3d_01011.Wdf 2014-05-31 20:02 - 2014-05-31 20:02 - 00000000 ____D () C:\Program Files (x86)\USB Camera 2014-05-31 20:02 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\System 2014-05-31 20:02 - 2013-08-22 16:46 - 00000756 _____ () C:\WINDOWS\setuperr.log 2014-05-31 20:01 - 2014-05-31 20:01 - 00000264 _____ () C:\WINDOWS\Tasks\Synaptics TouchPad Enhancements.job 2014-05-31 20:01 - 2014-05-31 20:01 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_Kernel_SynTP_01011.Wdf 2014-05-31 20:01 - 2014-05-31 20:01 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_Kernel_Smb_driver_Intel_01011.Wdf 2014-05-31 20:01 - 2014-05-31 20:01 - 00000000 ____D () C:\Program Files\Synaptics 2014-05-31 20:00 - 2014-05-31 20:00 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation 2014-05-31 19:40 - 2013-08-08 15:22 - 01675681 _____ () C:\WINDOWS\WindowsUpdate (1).log 2014-05-31 17:45 - 2012-07-26 10:12 - 00000000 ____D () C:\WINDOWS\AUInstallAgent 2014-05-31 09:06 - 2013-12-12 21:46 - 00000000 ____D () C:\Users\sabine\Backup 2014-05-31 07:13 - 2013-08-22 17:38 - 00703992 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe 2014-05-31 07:13 - 2013-08-22 17:38 - 00105464 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl 2014-05-30 19:13 - 2013-12-13 18:25 - 00000000 ____D () C:\Users\sabine\AppData\Local\CrashDumps 2014-05-30 16:46 - 2014-05-30 16:46 - 00000000 ___SD () C:\Users\sabine\Documents\Meine Datenquellen 2014-05-30 12:21 - 2014-06-11 20:22 - 23414784 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll 2014-05-30 11:45 - 2014-06-11 20:22 - 02768384 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll 2014-05-30 11:28 - 2014-06-11 20:22 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll 2014-05-30 11:20 - 2014-06-11 20:22 - 00752640 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll 2014-05-30 11:18 - 2014-06-11 20:22 - 17271296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll 2014-05-30 11:08 - 2014-06-11 20:22 - 05782528 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll 2014-05-30 11:06 - 2014-06-11 20:22 - 00452096 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtmsft.dll 2014-05-30 10:46 - 2014-06-11 20:22 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll 2014-05-30 10:44 - 2014-06-11 20:22 - 00295424 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll 2014-05-30 10:43 - 2014-06-11 20:22 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesetup.dll 2014-05-30 10:38 - 2014-06-11 20:22 - 02179072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll 2014-05-30 10:35 - 2014-06-11 20:22 - 00608768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe 2014-05-30 10:29 - 2014-06-11 20:22 - 00631808 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll 2014-05-30 10:27 - 2014-06-11 20:22 - 00592896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll 2014-05-30 10:23 - 2014-06-11 20:22 - 02040832 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl 2014-05-30 10:16 - 2014-06-11 20:22 - 00368128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtmsft.dll 2014-05-30 10:04 - 2014-06-11 20:22 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll 2014-05-30 10:02 - 2014-06-11 20:22 - 00242688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll 2014-05-30 09:56 - 2014-06-11 20:22 - 04244992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll 2014-05-30 09:56 - 2014-06-11 20:22 - 02266112 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll 2014-05-30 09:54 - 2014-06-11 20:22 - 00526336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll 2014-05-30 09:49 - 2014-06-11 20:22 - 01964544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl 2014-05-30 09:43 - 2014-06-11 20:22 - 13522944 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll 2014-05-30 09:40 - 2014-06-11 20:22 - 11725312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll 2014-05-30 09:30 - 2014-06-11 20:22 - 01398272 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll 2014-05-30 09:21 - 2014-06-11 20:22 - 01790976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll 2014-05-30 09:15 - 2014-06-11 20:22 - 01143296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll 2014-05-30 09:13 - 2014-06-11 20:22 - 00846336 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll 2014-05-30 09:13 - 2014-06-11 20:22 - 00704512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll 2014-05-30 07:17 - 2014-05-27 20:56 - 00000000 ____D () C:\Program Files (x86)\VideoLAN 2014-05-29 08:47 - 2013-12-14 16:12 - 00134656 ___SH () C:\Users\sabine\Desktop\Thumbs.db 2014-05-28 19:02 - 2013-12-12 21:47 - 00000000 ____D () C:\Users\sabine\Schriftverkehr und Text 2014-05-27 07:31 - 2014-04-18 14:56 - 00000000 ____D () C:\Users\sabine\Documents\TVG 2014-05-27 07:31 - 2014-04-18 14:56 - 00000000 ____D () C:\Users\sabine\Documents\Telefon CD 2005 2014-05-26 13:30 - 2014-01-19 13:04 - 00052736 ___SH () C:\Users\sabine\Thumbs.db 2014-05-23 06:48 - 2013-12-08 12:20 - 1794608475 _____ () C:\WINDOWS\MEMORY.DMP 2014-05-22 07:15 - 2013-08-08 15:54 - 839495680 ___SH () C:\WINDOWS\lenovo_fastboot.img 2014-05-19 08:31 - 2014-06-11 20:12 - 00057856 _____ (Microsoft Corporation) C:\WINDOWS\system32\drvcfg.exe 2014-05-19 08:21 - 2014-06-11 20:12 - 00110592 _____ (Microsoft Corporation) C:\WINDOWS\system32\drvinst.exe 2014-05-19 07:23 - 2014-06-11 20:12 - 00098816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\drvinst.exe Some content of TEMP: ==================== C:\Users\sabine\AppData\Local\Temp\avgnt.exe C:\Users\sabine\AppData\Local\Temp\MouseKeyboardCenterx64_1031.exe C:\Users\sabine\AppData\Local\Temp\Quarantine.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => File is digitally signed C:\Windows\System32\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\System32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\System32\services.exe => File is digitally signed C:\Windows\System32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\System32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\System32\rpcss.dll => File is digitally signed C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2014-06-17 06:07 ==================== End Of Log ============================ |
18.06.2014, 09:56 | #11 |
/// the machine /// TB-Ausbilder | Regsvr32 Fehler beim jedem Windows-Start Papierkorb leeren. Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster. Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument Code:
ATTFilter HKU\S-1-5-21-1240990677-1578086025-3834589401-1002\...\Run: [OlinqUxrab] => regsvr32.exe " Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
Fertig Die Reihenfolge ist hier entscheidend.
Falls Du Lob oder Kritik abgeben möchtest kannst Du das hier tun Hier noch ein paar Tipps zur Absicherung deines Systems. Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.
Anti- Viren Software
Zusätzlicher Schutz
Sicheres Browsen
Alternative Browser Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.
Performance Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC Halte dich fern von jedlichen Registry Cleanern. Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links Miekemoes Blogspot ( MVP ) Bill Castner ( MVP ) Don'ts
Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
18.06.2014, 21:53 | #12 |
| Regsvr32 Fehler beim jedem Windows-Start Hallo, habe gerade den PC ohne die Fehlermeldung gestartet. Es scheint, das Problem ist gelöst. Fixlog.txt habe ich leider gelöscht bevor ich es gepostet habe. Vielen Dank für die schnelle, gut verständliche und erfolgreiche Hilfe! |
19.06.2014, 20:25 | #13 |
/// the machine /// TB-Ausbilder | Regsvr32 Fehler beim jedem Windows-Start Gern Geschehen
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |