Windows 8.1 Pro 64 - stake7.com-Werbung lässt sich nicht aus FF30 entfernen

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 18-06-2014
Ran by ******** (administrator) on SILENTMAXX on 19-06-2014 17:18:50
Running from D:\download
Platform: Windows 8.1 Pro (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ 
Download link for 64-Bit Version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ 
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(ABBYY) C:\Program Files (x86)\Common Files\ABBYY\FineReader\10.00\Licensing\PE\NetworkLicenseServer.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\avp.exe
(Microsoft Corp.) C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe
(Foxit Corporation) C:\Program Files (x86)\Foxit Software\Foxit Reader\Foxit Cloud\FCUpdateService.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
() C:\Program Files (x86)\CyberLink\Shared Files\RichVideo.exe
() C:\Program Files\Synergy\synergyd.exe
(VMLite, Inc.) C:\Program Files\VMLite\VMLite Workstation\VMLiteService.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe
(Microsoft Corporation) C:\Windows\System32\vmms.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\avpui.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
(Intel Corporation) C:\Windows\System32\igfxTray.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
() C:\Program Files (x86)\phonostar-Player\phonostarTimer.exe
(Dominik Reichl) C:\Program Files (x86)\KeePass Password Safe 2\KeePass.exe
() C:\Program Files (x86)\AutoHotkey\AutoHotkey.exe
(Cyberlink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD\PDVDServ.exe
(Deutsche Telekom AG) C:\Users\********\AppData\Roaming\Telekom\MediencenterSync\Mediencenter.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWelcome.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
(Opera Software) C:\Program Files\Opera x64\opera.exe
(Opera Software) C:\Program Files\Opera x64\pluginwrapper\opera_plugin_wrapper.exe
(Microsoft Corporation) C:\Windows\System32\PrintIsolationHost.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13423688 2013-02-26] (Realtek Semiconductor)
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [286192 2013-01-31] (Intel Corporation)
HKLM-x32\...\Run: [IMSS] => C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe [134616 2013-03-12] (Intel Corporation)
HKLM-x32\...\Run: [BingDesktop] => C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktop.exe [2353880 2013-11-01] (Microsoft Corp.)
HKLM-x32\...\Run: [KeePass 2 PreLoad] => C:\Program Files (x86)\KeePass Password Safe 2\KeePass.exe [2099200 2014-04-13] (Dominik Reichl)
HKLM-x32\...\Run: [Bonus.SSR.FR10] => C:\Program Files (x86)\ABBYY FineReader 10\Bonus.ScreenshotReader.exe [940808 2009-11-30] (ABBYY.)
HKLM-x32\...\Run: [Adobe Photo Downloader] => "C:\Program Files (x86)\Adobe\Photoshop Elements 4.0\apdproxy.exe"
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-12-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Acrobat Assistant 7.0] => C:\Program Files (x86)\Adobe\Acrobat 7.0\Distillr\Acrotray.exe [483328 2005-03-03] (Adobe Systems Inc.)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [RemoteControl] => C:\Program Files (x86)\CyberLink\PowerDVD\PDVDServ.exe [56928 2006-11-23] (Cyberlink Corp.)
HKLM-x32\...\Run: [LanguageShortcut] => C:\Program Files (x86)\CyberLink\PowerDVD\Language\Language.exe [54832 2006-12-05] ()
HKLM-x32\...\Run: [SSBkgdUpdate] => C:\Program Files (x86)\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe [155648 2003-10-14] (Scansoft, Inc.)
HKLM-x32\...\Run: [PaperPort PTD] => C:\Program Files (x86)\ScanSoft\PaperPort\pptd40nt.exe [57393 2004-03-09] (ScanSoft, Inc.)
HKLM-x32\...\Run: [IndexSearch] => C:\Program Files (x86)\ScanSoft\PaperPort\IndexSearch.exe [40960 2004-03-09] (ScanSoft, Inc.)
HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [182352 2014-05-05] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [SDTray] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [4101584 2014-04-25] (Safer-Networking Ltd.)
Winlogon\Notify\igfxcui: igfxdev.dll [X]
Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X]
HKU\.DEFAULT\...\Run: [AviraSpeedup] => "C:\Program Files (x86)\Avira\AviraSpeedup\avira_system_speedup.exe" -autorun
HKU\S-1-5-21-1594369281-2355564985-1810472959-1001\...\Run: [GoogleChromeAutoLaunch_C1FC3733E9523DC87ED258EE630C022D] => C:\Program Files (x86)\Google

\Chrome\Application\chrome.exe [860488 2014-06-05] (Google Inc.)
HKU\S-1-5-21-1594369281-2355564985-1810472959-1001\...\Run: [phonostar-PlayerTimer] => C:\Program Files (x86)\phonostar-Player\phonostarTimer.exe [42496 

2014-01-11] ()
HKU\S-1-5-21-1594369281-2355564985-1810472959-1001\...\Run: [KeePass Password Safe 2] => C:\Program Files (x86)\KeePass Password Safe 2\KeePass.exe [2099200 

2014-04-13] (Dominik Reichl)
HKU\S-1-5-21-1594369281-2355564985-1810472959-1001\...\Run: [KSS] => C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Scan 2.0\kss.exe [202328 2012-

12-07] (Kaspersky Lab ZAO)
Startup: C:\Users\********\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ac'tivAid.lnk
ShortcutTarget: ac'tivAid.lnk -> C:\Program Files (x86)\ac'tivAid\ac'tivAid.ahk ()
Startup: C:\Users\********\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma.lnk
ShortcutTarget: Adobe Gamma.lnk -> C:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.)
Startup: C:\Users\********\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\AutoHotkey.ahk ()
Startup: C:\Users\********\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Mediencenter.lnk
ShortcutTarget: Mediencenter.lnk -> C:\Users\********\AppData\Roaming\Telekom\MediencenterSync\Mediencenter.exe (Deutsche Telekom AG)
BootExecute: autocheck autochk * sdnclean64.exe

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://t.de.msn.com/
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x06ECDD8E957DCF01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE,de;q=0.8,ar-DZ;q=0.5,ar;q=0.3
SearchScopes: HKLM-x32 - DefaultScope value is missing.
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&fr=vc_trans_8140&type=protegere
BHO: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\x64\IEExt

\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
BHO: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\x64\IEExt

\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\x64\IEExt\OnlineBanking

\online_banking_bho.dll (Kaspersky Lab ZAO)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\x64\IEExt\UrlAdvisor

\klwtbbho.dll (Kaspersky Lab ZAO)
BHO-x32: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\IEExt

\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
BHO-x32: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\IEExt

\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
BHO-x32: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\IEExt\OnlineBanking

\online_banking_bho.dll (Kaspersky Lab ZAO)
BHO-x32: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\IEExt\UrlAdvisor

\klwtbbho.dll (Kaspersky Lab ZAO)
BHO-x32: EZ YouTube Video Downloader 1.0 - {FDBFEA30-EC51-4B8D-B4F0-8CA4F7253C0A} - C:\Program Files (x86)\EZ YouTube Video Downloader\yvd.dll 

(XtensionPlus)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\********\AppData\Roaming\Mozilla\Firefox\Profiles\30noywmd.default
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_14_0_0_125.dll ()
FF Plugin: @java.com/DTPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_125.dll ()
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf - C:\PROGRAM FILES (X86)\FOXIT SOFTWARE\FOXIT READER\plugins

\npFoxitReaderPlugin.dll (Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf - C:\PROGRAM FILES (X86)\FOXIT SOFTWARE\FOXIT READER\plugins

\npFoxitReaderPlugin.dll (Foxit Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=3.0.72 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT

\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT

\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @phonostar.de/phonostar-Player - C:\Program Files (x86)\phonostar-Player\npphonostarDetectNP.dll ( )
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: DNSQueries.com Toolbar - C:\Users\********\AppData\Roaming\Mozilla\Firefox\Profiles\30noywmd.default\Extensions

\dnsqueriestoolbar@dnsqueries.com.xpi [2014-03-26]
FF Extension: Awesome screenshot: Capture and Annotate - C:\Users\********\AppData\Roaming\Mozilla\Firefox\Profiles\30noywmd.default\Extensions\jid0-

GXjLLfbCoAx0LcltEdFrEkQdQPI@jetpack.xpi [2014-03-28]
FF Extension: LeechBlock - C:\Users\********\AppData\Roaming\Mozilla\Firefox\Profiles\30noywmd.default\Extensions\{a95d8332-e4b4-6e7f-98ac-20b733364387}.xpi 

[2014-05-19]
FF Extension: Adblock Plus - C:\Users\********\AppData\Roaming\Mozilla\Firefox\Profiles\30noywmd.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-

2b9879e08c5d}.xpi [2014-03-11]
FF Extension: EZ YouTube Video Downloader - C:\Program Files (x86)\EZ YouTube Video Downloader\{8167E8F2-A770-4EFB-BA53-8A511051CD9B} [2014-03-29]
FF HKLM\...\Firefox\Extensions: [{8167E8F2-A770-4EFB-BA53-8A511051CD9B}] - C:\Program Files (x86)\EZ YouTube Video Downloader\{8167E8F2-A770-4EFB-BA53-

8A511051CD9B}
FF Extension: EZ YouTube Video Downloader - C:\Program Files (x86)\EZ YouTube Video Downloader\{8167E8F2-A770-4EFB-BA53-8A511051CD9B} [2014-03-29]
FF HKLM-x32\...\Firefox\Extensions: [{8167E8F2-A770-4EFB-BA53-8A511051CD9B}] - C:\Program Files (x86)\EZ YouTube Video Downloader\{8167E8F2-A770-4EFB-BA53-

8A511051CD9B}
FF Extension: EZ YouTube Video Downloader - C:\Program Files (x86)\EZ YouTube Video Downloader\{8167E8F2-A770-4EFB-BA53-8A511051CD9B} [2014-03-29]
FF HKLM-x32\...\Firefox\Extensions:  - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\FFExt

\url_advisor@kaspersky.com
FF Extension: 卡巴斯基網址顧問 - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\FFExt\url_advisor@kaspersky.com [2014-06-17]
FF HKLM-x32\...\Firefox\Extensions: [virtual_keyboard@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\FFExt

\virtual_keyboard@kaspersky.com
FF Extension: 虛擬鍵盤 - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\FFExt\virtual_keyboard@kaspersky.com [2014-06-17]
FF HKLM-x32\...\Firefox\Extensions: [content_blocker@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\FFExt

\content_blocker@kaspersky.com
FF Extension: 惡意網站攔截器 - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\FFExt\content_blocker@kaspersky.com [2014-06-17]

Chrome: 
=======
CHR HomePage: hxxp://www.google.com/
CHR StartupUrls: "hxxp://www.google.com/"
CHR Extension: (Google Docs) - C:\Users\********\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-03-09]
CHR Extension: (Google Drive) - C:\Users\********\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-03-09]
CHR Extension: (YouTube) - C:\Users\********\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-03-09]
CHR Extension: (Adblock Plus) - C:\Users\********\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2014-03-11]
CHR Extension: (Google-Suche) - C:\Users\********\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-03-09]
CHR Extension: (Modul zur Link-Untersuchung) - C:\Users\********\AppData\Local\Google\Chrome\User Data\Default\Extensions\dchlnpcodkpfdpacogkljefecpegganj 

[2014-06-17]
CHR Extension: (Protegere) - C:\Users\********\AppData\Local\Google\Chrome\User Data\Default\Extensions\ddkeieaieohnceanbhdeijclgemgjjkf [2014-03-29]
CHR Extension: (Virtual Keyboard) - C:\Users\********\AppData\Local\Google\Chrome\User Data\Default\Extensions\jagncdcchgajhfhijbbhecadmaiegcmh [2014-06-17]
CHR Extension: (Google Wallet) - C:\Users\********\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-03-09]
CHR Extension: (Google Mail) - C:\Users\********\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-03-09]
CHR Extension: (EZ YouTube Video Downloader) - C:\Users\********\AppData\Local\EZ YouTube Video Downloader [2014-03-29]
CHR HKLM-x32\...\Chrome\Extension: [dchlnpcodkpfdpacogkljefecpegganj] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\ChromeExt

\urladvisor.crx [2013-10-17]
CHR HKLM-x32\...\Chrome\Extension: [hghkgaeecgjhjkannahfamoehjmkjail] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\ChromeExt

\content_blocker_chrome.crx [2013-10-17]
CHR HKLM-x32\...\Chrome\Extension: [jagncdcchgajhfhijbbhecadmaiegcmh] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\ChromeExt

\virtkbd.crx [2013-10-17]

==================== Services (Whitelisted) =================

R2 ABBYY.Licensing.FineReader.Professional.10.0; C:\Program Files (x86)\Common Files\ABBYY\FineReader\10.00\Licensing\PE\NetworkLicenseServer.exe [814344 

2009-11-25] (ABBYY)
S3 Adobe LM Service; C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [72704 2014-03-15] (Adobe Systems) [File not signed]
R2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [124496 2014-05-05] (Avira Operations GmbH & Co. KG)
R2 AVP; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\avp.exe [214512 2013-10-17] (Kaspersky Lab ZAO)
R2 BingDesktopUpdate; C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe [173272 2013-11-01] (Microsoft Corp.)
R2 FoxitCloudUpdateService; C:\Program Files (x86)\Foxit Software\Foxit Reader\Foxit Cloud\FCUpdateService.exe [239680 2014-02-19] (Foxit Corporation)
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15344 2013-01-31] (Intel Corporation)
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [314696 2014-05-21] (Intel Corporation)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [731648 2013-02-13] (Intel(R) Corporation) [File not 

signed]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [820184 2013-02-13] (Intel(R) 

Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-03-12] (Intel Corporation)
S2 KSS; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Scan 2.0\kss.exe [202328 2012-12-07] (Kaspersky Lab ZAO)
R2 RichVideo; C:\Program Files (x86)\CyberLink\Shared Files\RichVideo.exe [167936 2005-08-08] () [File not signed]
S3 rpcapd; C:\Program Files (x86)\WinPcap\rpcapd.exe [118520 2013-03-01] (Riverbed Technology, Inc.)
R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1738200 2014-04-25] (Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [2081752 2014-04-25] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2014-04-25] (Safer-Networking Ltd.)
R2 Synergy; C:\Program Files\Synergy\synergyd.exe [292352 2014-02-17] () [File not signed]
R2 VMLiteService; C:\Program Files\VMLite\VMLite Workstation\VMLiteService.exe [426600 2010-08-21] (VMLite, Inc.)
R2 vmms; C:\Windows\system32\vmms.exe [13401600 2014-05-10] (Microsoft Corporation)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347880 2014-03-24] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2014-03-24] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

S0 ADP80XX; C:\Windows\System32\drivers\ADP80XX.SYS [782176 2013-08-22] (PMC-Sierra)
S3 bcmfn2; C:\Windows\System32\drivers\bcmfn2.sys [17624 2013-08-13] (Windows (R) Win 7 DDK provider)
R1 hvservice; C:\Windows\System32\drivers\hvservice.sys [68960 2014-05-13] (Microsoft Corporation)
S3 iaLPSSi_GPIO; C:\Windows\System32\drivers\iaLPSSi_GPIO.sys [24568 2013-07-30] (Intel Corporation)
S3 iaLPSSi_I2C; C:\Windows\System32\drivers\iaLPSSi_I2C.sys [99320 2013-07-25] (Intel Corporation)
S0 iaStorAV; C:\Windows\System32\drivers\iaStorAV.sys [651248 2013-08-10] (Intel Corporation)
R0 intelpep; C:\Windows\System32\drivers\intelpep.sys [39768 2013-11-11] (Microsoft Corporation)
S3 kbldfltr; C:\Windows\System32\drivers\kbldfltr.sys [22272 2013-08-23] (Microsoft Corporation)
R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [458336 2014-06-17] (Kaspersky Lab ZAO)
S0 klelam; C:\Windows\System32\DRIVERS\klelam.sys [29792 2014-06-17] (Kaspersky Lab)
U5 klflt; C:\Windows\System32\Drivers\klflt.sys [115296 2014-06-17] (Kaspersky Lab ZAO)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [625760 2014-06-17] (Kaspersky Lab ZAO)
R1 KLIM6; C:\Windows\system32\DRIVERS\klim6.sys [30304 2013-10-17] (Kaspersky Lab ZAO)
R3 klkbdflt; C:\Windows\system32\DRIVERS\klkbdflt.sys [29280 2014-06-17] (Kaspersky Lab ZAO)
R3 klmouflt; C:\Windows\system32\DRIVERS\klmouflt.sys [29280 2013-10-17] (Kaspersky Lab ZAO)
R1 klpd; C:\Windows\system32\DRIVERS\klpd.sys [15456 2013-04-12] (Kaspersky Lab ZAO)
R1 klwfp; C:\Windows\system32\DRIVERS\klwfp.sys [65120 2014-06-17] (Kaspersky Lab ZAO)
R1 kneps; C:\Windows\system32\DRIVERS\kneps.sys [178272 2014-06-17] (Kaspersky Lab ZAO)
S0 LSI_SAS3; C:\Windows\System32\drivers\lsi_sas3.sys [81760 2013-08-22] (LSI Corporation)
S3 lunparser; C:\Windows\System32\drivers\lunparser.sys [19456 2014-05-13] (Microsoft Corporation)
R3 NdisVirtualBus; C:\Windows\System32\drivers\NdisVirtualBus.sys [16384 2013-08-22] (Microsoft Corporation)
S3 netvsc; C:\Windows\system32\DRIVERS\netvsc63.sys [87040 2013-08-22] (Microsoft Corporation)
R2 NPF; C:\Windows\System32\drivers\npf.sys [36600 2013-03-01] (Riverbed Technology, Inc.)
S3 passthruparser; C:\Windows\System32\drivers\passthruparser.sys [22016 2014-05-13] (Microsoft Corporation)
S3 pvhdparser; C:\Windows\System32\drivers\pvhdparser.sys [27136 2014-05-13] (Microsoft Corporation)
S3 ReFS; C:\Windows\System32\Drivers\ReFS.sys [924504 2014-02-22] (Microsoft Corporation)
S3 SerCx2; C:\Windows\System32\drivers\SerCx2.sys [146776 2013-10-26] (Microsoft Corporation)
S0 stornvme; C:\Windows\System32\drivers\stornvme.sys [57176 2013-10-05] (Microsoft Corporation)
S3 UEFI; C:\Windows\System32\drivers\UEFI.sys [26976 2013-08-22] (Microsoft Corporation)
R1 VBoxDrv; C:\Windows\System32\drivers\VBoxDrv.sys [204328 2010-08-11] (VMLite, Inc.)
R3 VBoxNetAdp; C:\Windows\system32\DRIVERS\VBoxNetAdp.sys [146216 2010-08-11] (VMLite, Inc.)
R3 VBoxNetFlt; C:\Windows\system32\DRIVERS\VBoxNetFlt.sys [165800 2010-08-11] (VMLite, Inc.)
S3 vhdparser; C:\Windows\System32\drivers\vhdparser.sys [18944 2014-05-13] (Microsoft Corporation)
R1 vmlitedrv; C:\Windows\System32\drivers\vmlitedrv.sys [14952 2010-08-03] (VMLite, Inc.)
R3 vmlitestor; C:\Windows\system32\DRIVERS\vmlitestor.sys [177768 2010-08-11] (VMLite, Inc.)
R1 VMLiteUSBMon; C:\Windows\System32\drivers\vmliteusbmon.sys [135272 2010-08-18] (VMLite, Inc.)
R3 VMSMP; C:\Windows\system32\DRIVERS\vmswitch.sys [691200 2014-05-03] (Microsoft Corporation)
S3 VMSP; C:\Windows\system32\DRIVERS\vmswitch.sys [691200 2014-05-03] (Microsoft Corporation)
S3 VMSVSF; C:\Windows\system32\DRIVERS\vmswitch.sys [691200 2014-05-03] (Microsoft Corporation)
S3 VMSVSP; C:\Windows\system32\DRIVERS\vmswitch.sys [691200 2014-05-03] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [123224 2014-03-24] (Microsoft Corporation)
R0 Wof; C:\Windows\System32\Drivers\Wof.sys [157016 2014-03-13] (Microsoft Corporation)
S3 gdrv; \??\C:\Windows\gdrv.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-06-19 17:18 - 2014-06-19 17:18 - 00000000 ____D () C:\FRST
2014-06-19 14:11 - 2014-06-19 14:37 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy
2014-06-19 14:11 - 2014-06-19 14:13 - 00000000 ____D () C:\Program Files (x86)\Spybot - Search & Destroy 2
2014-06-19 14:11 - 2014-06-19 14:11 - 00001457 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot-S&D Start Center.lnk
2014-06-19 14:11 - 2014-06-19 14:11 - 00001445 _____ () C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk
2014-06-19 14:11 - 2014-06-19 14:11 - 00000000 ____D () C:\Windows\System32\Tasks\Safer-Networking
2014-06-19 14:11 - 2014-06-19 14:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2
2014-06-19 14:11 - 2013-09-20 10:49 - 00021040 _____ (Safer Networking Limited) C:\Windows\system32\sdnclean64.exe
2014-06-19 13:48 - 2014-06-19 13:48 - 00000000 ____D () C:\Users\********\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink PowerDVD
2014-06-19 11:11 - 2014-06-19 11:11 - 00000144 _____ () C:\Windows\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2014-06-19 11:04 - 2014-06-19 13:46 - 00000000 ____D () C:\AdwCleaner
2014-06-19 11:04 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll
2014-06-18 14:48 - 2014-06-18 14:48 - 00001263 _____ () C:\Users\********\Desktop\Win8-Buch.pdf - Verknüpfung.lnk
2014-06-17 23:58 - 2014-06-17 23:58 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-06-17 12:44 - 2014-06-17 12:44 - 00000451 _____ () C:\Windows\system32\{F33C3B9B-72AF-418A-B3FD-560646F7CDA2}.bat
2014-06-17 12:34 - 2014-06-17 12:34 - 00001360 _____ () C:\Users\********\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Kaspersky Anti-Virus.lnk
2014-06-17 12:29 - 2014-05-30 12:21 - 23414784 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-06-17 12:29 - 2014-05-30 11:45 - 02768384 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-06-17 12:29 - 2014-05-30 11:28 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-06-17 12:29 - 2014-05-30 11:20 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-06-17 12:29 - 2014-05-30 11:18 - 17271296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-06-17 12:29 - 2014-05-30 11:08 - 05782528 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-06-17 12:29 - 2014-05-30 11:06 - 00452096 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-06-17 12:29 - 2014-05-30 10:46 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-06-17 12:29 - 2014-05-30 10:44 - 00295424 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-06-17 12:29 - 2014-05-30 10:43 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-06-17 12:29 - 2014-05-30 10:38 - 02179072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-06-17 12:29 - 2014-05-30 10:35 - 00608768 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-06-17 12:29 - 2014-05-30 10:29 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-06-17 12:29 - 2014-05-30 10:27 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-06-17 12:29 - 2014-05-30 10:23 - 02040832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-06-17 12:29 - 2014-05-30 10:16 - 00368128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-06-17 12:29 - 2014-05-30 10:04 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-06-17 12:29 - 2014-05-30 10:02 - 00242688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-06-17 12:29 - 2014-05-30 09:56 - 04244992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-06-17 12:29 - 2014-05-30 09:56 - 02266112 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-06-17 12:29 - 2014-05-30 09:54 - 00526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-06-17 12:29 - 2014-05-30 09:49 - 01964544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-06-17 12:29 - 2014-05-30 09:43 - 13522944 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-06-17 12:29 - 2014-05-30 09:40 - 11725312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-06-17 12:29 - 2014-05-30 09:30 - 01398272 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-06-17 12:29 - 2014-05-30 09:21 - 01790976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-06-17 12:29 - 2014-05-30 09:15 - 01143296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-06-17 12:29 - 2014-05-30 09:13 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-06-17 12:29 - 2014-05-30 09:13 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-06-17 12:29 - 2014-02-06 13:30 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-06-17 12:29 - 2014-02-06 13:07 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-06-17 12:29 - 2014-02-06 13:06 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-06-17 12:29 - 2014-02-06 12:56 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-06-17 12:29 - 2014-02-06 12:49 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-06-17 12:29 - 2014-02-06 12:48 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-06-17 12:29 - 2014-02-06 12:17 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-06-17 12:29 - 2014-02-06 12:00 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-06-17 12:29 - 2014-02-06 11:52 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-06-17 12:29 - 2014-02-06 11:52 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-06-17 12:29 - 2014-02-06 11:47 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-06-17 12:29 - 2014-02-06 11:25 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-06-17 12:28 - 2014-05-15 00:47 - 04720640 _____ (Microsoft Corporation) C:\Windows\system32\SyncEngine.dll
2014-06-17 12:28 - 2014-05-13 09:01 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\BulkOperationHost.exe
2014-06-17 12:28 - 2014-05-13 07:07 - 02844160 _____ (Microsoft Corporation) C:\Windows\system32\actxprxy.dll
2014-06-17 12:28 - 2014-05-13 06:41 - 00118272 _____ (Microsoft Corporation) C:\Windows\system32\winbici.dll
2014-06-17 12:28 - 2014-05-13 06:27 - 00716800 _____ (Microsoft Corporation) C:\Windows\system32\SkyDriveTelemetry.dll
2014-06-17 12:28 - 2014-05-13 06:26 - 00285696 _____ (Microsoft Corporation) C:\Windows\system32\SkyDriveShell.dll
2014-06-17 12:28 - 2014-05-13 05:59 - 01035264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\actxprxy.dll
2014-06-17 12:28 - 2014-05-13 05:41 - 01118720 _____ (Microsoft Corporation) C:\Windows\system32\SkyDrive.exe
2014-06-17 12:28 - 2014-05-13 05:31 - 00265216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SkyDriveShell.dll
2014-06-17 12:28 - 2014-05-10 05:54 - 13401600 _____ (Microsoft Corporation) C:\Windows\system32\vmms.exe
2014-06-17 12:28 - 2014-05-10 05:46 - 02151424 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-06-17 12:28 - 2014-05-10 05:22 - 01312256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2014-06-17 12:28 - 2014-05-05 08:11 - 00440664 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2014-06-17 12:28 - 2014-05-05 08:11 - 00418136 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2014-06-17 12:28 - 2014-05-05 08:11 - 00089944 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2014-06-17 12:28 - 2014-05-05 08:11 - 00027480 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2014-06-17 12:28 - 2014-05-03 13:29 - 01726224 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2014-06-17 12:28 - 2014-05-03 11:20 - 01473080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2014-06-17 12:28 - 2014-05-03 09:41 - 04190208 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-06-17 12:28 - 2014-05-03 09:40 - 00037376 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2014-06-17 12:28 - 2014-05-03 09:35 - 00705536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wnv.sys
2014-06-17 12:28 - 2014-05-03 09:35 - 00691200 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vmswitch.sys
2014-06-17 12:28 - 2014-05-03 09:14 - 00079872 _____ (Microsoft Corporation) C:\Windows\system32\WSReset.exe
2014-06-17 12:28 - 2014-05-03 07:36 - 00997888 _____ (Microsoft Corporation) C:\Windows\system32\reseteng.dll
2014-06-17 12:28 - 2014-05-03 07:19 - 00071168 _____ (Microsoft Corporation) C:\Windows\system32\ncobjapi.dll
2014-06-17 12:28 - 2014-05-03 07:08 - 00301056 _____ (Microsoft Corporation) C:\Windows\system32\framedynos.dll
2014-06-17 12:28 - 2014-05-03 07:07 - 00262656 _____ (Microsoft Corporation) C:\Windows\system32\framedyn.dll
2014-06-17 12:28 - 2014-05-03 06:46 - 00052736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncobjapi.dll
2014-06-17 12:28 - 2014-05-03 06:43 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\vmsif.dll
2014-06-17 12:28 - 2014-05-03 06:37 - 00235008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\framedynos.dll
2014-06-17 12:28 - 2014-05-03 06:37 - 00207360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\framedyn.dll
2014-06-17 12:28 - 2014-05-03 06:21 - 00249344 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2014-06-17 12:28 - 2014-05-03 06:07 - 00189952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2014-06-17 12:28 - 2014-05-03 05:41 - 00921088 _____ (Microsoft Corporation) C:\Windows\system32\WSShared.dll
2014-06-17 12:28 - 2014-05-03 05:38 - 00754688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSShared.dll
2014-06-17 12:28 - 2014-05-03 05:30 - 02641920 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2014-06-17 12:28 - 2014-05-03 05:27 - 02317824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2014-06-17 12:28 - 2014-05-03 01:26 - 00050745 _____ () C:\Windows\system32\srms.dat
2014-06-17 12:28 - 2014-05-01 15:19 - 00054776 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2014-06-17 12:28 - 2014-05-01 07:44 - 01025536 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
2014-06-17 12:28 - 2014-05-01 07:34 - 03464192 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2014-06-17 12:28 - 2014-04-30 09:11 - 00735232 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2014-06-17 12:28 - 2014-04-30 08:43 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vwififlt.sys
2014-06-17 12:28 - 2014-04-30 08:41 - 00402432 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2014-06-17 12:28 - 2014-04-30 08:41 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\agilevpn.sys
2014-06-17 12:28 - 2014-04-30 08:41 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vwifimp.sys
2014-06-17 12:28 - 2014-04-30 08:10 - 00735232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2014-06-17 12:28 - 2014-04-30 07:45 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\Robocopy.exe
2014-06-17 12:28 - 2014-04-30 06:48 - 00106496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Robocopy.exe
2014-06-17 12:28 - 2014-04-30 06:24 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcsvc6.dll
2014-06-17 12:28 - 2014-04-30 06:23 - 00353280 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcore.dll
2014-06-17 12:28 - 2014-04-30 06:23 - 00271872 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcore6.dll
2014-06-17 12:28 - 2014-04-30 06:23 - 00087552 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcsvc.dll
2014-06-17 12:28 - 2014-04-30 06:21 - 01417216 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-06-17 12:28 - 2014-04-30 06:14 - 00827392 _____ (Microsoft Corporation) C:\Windows\system32\BFE.DLL
2014-06-17 12:28 - 2014-04-30 05:59 - 01063424 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2014-06-17 12:28 - 2014-04-30 05:46 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcore.dll
2014-06-17 12:28 - 2014-04-30 05:46 - 00229888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcore6.dll
2014-06-17 12:28 - 2014-04-30 05:46 - 00056320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcsvc6.dll
2014-06-17 12:28 - 2014-04-30 05:45 - 00062976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcsvc.dll
2014-06-17 12:28 - 2014-04-30 05:42 - 00403968 _____ (Microsoft Corporation) C:\Windows\system32\vpnike.dll
2014-06-17 12:28 - 2014-04-29 00:40 - 00721408 _____ (Microsoft Corporation) C:\Windows\system32\fveapi.dll
2014-06-17 12:28 - 2014-04-27 00:03 - 02140888 _____ (Microsoft Corporation) C:\Windows\system32\mfcore.dll
2014-06-17 12:28 - 2014-04-26 22:14 - 02144984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfcore.dll
2014-06-17 12:28 - 2014-04-26 20:41 - 00130560 _____ (Microsoft Corporation) C:\Windows\system32\BdeHdCfg.exe
2014-06-17 12:28 - 2014-04-26 20:22 - 00099328 _____ (Microsoft Corporation) C:\Windows\system32\BdeHdCfgLib.dll
2014-06-17 12:28 - 2014-04-26 20:04 - 00311296 _____ (Microsoft Corporation) C:\Windows\system32\fvecpl.dll
2014-06-17 12:28 - 2014-04-26 19:36 - 00794112 _____ (Microsoft Corporation) C:\Windows\system32\fvewiz.dll
2014-06-17 12:28 - 2014-04-26 18:39 - 00339456 _____ (Microsoft Corporation) C:\Windows\system32\bdesvc.dll
2014-06-17 12:28 - 2014-04-14 11:37 - 02125344 _____ (Microsoft Corporation) C:\Windows\system32\d3d9.dll
2014-06-17 12:28 - 2014-04-14 10:08 - 01797896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d9.dll
2014-06-17 12:28 - 2014-04-14 07:18 - 00011776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d8thk.dll
2014-06-17 12:28 - 2014-04-09 08:11 - 00226816 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll
2014-06-17 12:28 - 2014-04-09 07:20 - 00198656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll
2014-06-17 12:28 - 2014-04-03 09:59 - 02518872 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2014-06-17 12:28 - 2014-04-03 09:59 - 00428888 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2014-06-17 12:27 - 2014-06-17 12:27 - 00233912 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
2014-06-17 12:27 - 2014-05-31 08:27 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2014-06-17 12:27 - 2014-05-19 08:31 - 00057856 _____ (Microsoft Corporation) C:\Windows\system32\drvcfg.exe
2014-06-17 12:27 - 2014-05-19 08:21 - 00110592 _____ (Microsoft Corporation) C:\Windows\system32\drvinst.exe
2014-06-17 12:27 - 2014-05-19 07:23 - 00098816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drvinst.exe
2014-06-17 12:27 - 2014-05-09 01:06 - 00295424 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ks.sys
2014-06-17 12:27 - 2014-05-05 06:02 - 03360256 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2014-06-17 12:27 - 2014-05-01 15:31 - 03048904 _____ (Microsoft Corporation) C:\Windows\system32\WpcMon.exe
2014-06-17 12:27 - 2014-05-01 15:31 - 00055328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wpcfltr.sys
2014-06-17 12:27 - 2014-05-01 09:14 - 03118080 _____ (Microsoft Corporation) C:\Windows\system32\Wpc.dll
2014-06-17 12:27 - 2014-05-01 09:05 - 02861056 _____ (Microsoft Corporation) C:\Windows\system32\WpcWebSync.dll
2014-06-17 12:27 - 2014-05-01 08:51 - 02344448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wpc.dll
2014-06-17 12:27 - 2014-05-01 07:24 - 02834944 _____ (Microsoft Corporation) C:\Windows\system32\wpccpl.dll
2014-06-17 12:27 - 2014-04-30 13:16 - 01336648 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-06-17 12:27 - 2014-04-30 06:43 - 01975296 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2014-06-17 12:27 - 2014-04-30 06:26 - 01345536 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2014-06-17 12:27 - 2014-04-30 05:51 - 01064448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2014-06-17 12:27 - 2014-04-30 05:47 - 01509888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2014-06-17 12:24 - 2014-06-17 12:23 - 00001155 _____ () C:\Users\Public\Desktop\Kaspersky Anti-Virus.lnk
2014-06-17 12:23 - 2014-06-17 12:39 - 00625760 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klif.sys
2014-06-17 12:23 - 2014-06-17 12:39 - 00115296 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klflt.sys
2014-06-17 12:23 - 2013-05-06 09:13 - 00110176 _____ (Kaspersky Lab ZAO) C:\Windows\system32\klfphc.dll
2014-05-29 18:17 - 2014-05-29 18:17 - 14615358 _____ () C:\Users\********\Desktop\collection.apkg
2014-05-28 11:09 - 2014-05-28 11:09 - 00000000 ____D () C:\Users\********\AppData\Local\Dipl.-Ing. Rolf Keller
2014-05-24 16:46 - 2014-06-19 13:52 - 00779484 _____ () C:\Windows\system32\perfh00C.dat
2014-05-24 16:46 - 2014-06-19 13:52 - 00425332 _____ () C:\Windows\system32\perfh001.dat
2014-05-24 16:46 - 2014-06-19 13:52 - 00150106 _____ () C:\Windows\system32\perfc00C.dat
2014-05-24 16:46 - 2014-06-19 13:52 - 00065976 _____ () C:\Windows\system32\perfc001.dat
2014-05-24 16:46 - 2014-05-24 16:45 - 00350772 _____ () C:\Windows\system32\perfi00C.dat
2014-05-24 16:46 - 2014-05-24 16:45 - 00296742 _____ () C:\Windows\system32\perfi001.dat
2014-05-24 16:46 - 2014-05-24 16:45 - 00040528 _____ () C:\Windows\system32\perfd00C.dat
2014-05-24 16:46 - 2014-05-24 16:45 - 00033362 _____ () C:\Windows\system32\perfd001.dat
2014-05-24 16:45 - 2014-06-02 16:52 - 00000000 ____D () C:\Windows\ar-SA
2014-05-24 16:45 - 2014-05-24 16:45 - 00000000 ____D () C:\Windows\SysWOW64\fr
2014-05-24 16:45 - 2014-05-24 16:45 - 00000000 ____D () C:\Windows\SysWOW64\Drivers\ar-SA
2014-05-24 16:45 - 2014-05-24 16:45 - 00000000 ____D () C:\Windows\system32\fr
2014-05-24 16:45 - 2014-05-24 16:45 - 00000000 ____D () C:\Windows\system32\Drivers\ar-SA
2014-05-24 16:45 - 2014-05-24 16:45 - 00000000 ____D () C:\Windows\system32\ar
2014-05-22 23:44 - 2014-05-22 23:44 - 00001370 _____ () C:\Users\********\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Kaspersky Security Scan.lnk
2014-05-22 23:43 - 2014-06-19 14:46 - 00000000 ____D () C:\ProgramData\Kaspersky Lab
2014-05-22 23:43 - 2014-06-17 12:23 - 00000000 ____D () C:\Program Files (x86)\Kaspersky Lab
2014-05-22 23:43 - 2014-05-22 23:43 - 00001143 _____ () C:\Users\********\Desktop\Kaspersky Security Scan.lnk
2014-05-21 21:33 - 2014-04-18 16:57 - 00032600 _____ (Microsoft Corporation) C:\Windows\system32\ploptin.dll
2014-05-21 21:33 - 2014-04-18 16:44 - 01466856 _____ (Microsoft Corporation) C:\Windows\system32\propsys.dll
2014-05-21 21:33 - 2014-04-18 15:29 - 01200288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\propsys.dll
2014-05-21 21:33 - 2014-04-18 11:44 - 00055296 _____ (Microsoft Corporation) C:\Windows\system32\energyprov.dll
2014-05-21 21:33 - 2014-04-18 11:32 - 13287936 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll
2014-05-21 21:33 - 2014-04-18 10:58 - 11792384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll
2014-05-21 21:33 - 2014-04-18 10:32 - 00805376 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll
2014-05-21 21:33 - 2014-04-18 10:21 - 01126912 _____ (Microsoft Corporation) C:\Windows\system32\SearchFolder.dll
2014-05-21 21:33 - 2014-04-18 10:09 - 08652800 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Search.dll
2014-05-21 21:33 - 2014-04-18 09:51 - 00836608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFolder.dll
2014-05-21 21:33 - 2014-04-18 09:49 - 05833216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Search.dll
2014-05-21 21:33 - 2014-04-14 11:20 - 00324888 _____ (Microsoft Corporation) C:\Windows\system32\MFCaptureEngine.dll
2014-05-21 21:33 - 2014-04-14 10:01 - 00285144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFCaptureEngine.dll
2014-05-21 21:33 - 2014-04-11 12:03 - 00555736 _____ (Microsoft Corporation) C:\Windows\system32\twinapi.appcore.dll
2014-05-21 21:33 - 2014-04-11 10:25 - 00419928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinapi.appcore.dll
2014-05-21 21:33 - 2014-04-11 08:04 - 00056320 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2014-05-21 21:33 - 2014-04-11 07:22 - 00025088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2014-05-21 21:33 - 2014-04-11 06:51 - 00250368 _____ (Microsoft Corporation) C:\Windows\system32\rdpencom.dll
2014-05-21 21:33 - 2014-04-11 06:23 - 00209920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpencom.dll
2014-05-21 21:33 - 2014-04-11 05:54 - 00201728 _____ (Microsoft Corporation) C:\Windows\system32\ubpm.dll
2014-05-21 21:33 - 2014-04-11 05:30 - 00449536 _____ (Microsoft Corporation) C:\Windows\system32\defragsvc.dll
2014-05-21 21:33 - 2014-04-11 05:06 - 00031232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2014-05-21 21:33 - 2014-04-11 05:05 - 00123904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2014-05-21 21:33 - 2014-04-11 05:02 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2014-05-21 21:33 - 2014-04-11 05:01 - 00137728 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2014-05-21 21:33 - 2014-04-11 05:00 - 00080896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2014-05-21 21:33 - 2014-04-11 04:59 - 00666624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2014-05-21 21:33 - 2014-04-11 04:57 - 00190976 _____ (Microsoft Corporation) C:\Windows\system32\storewuauth.dll
2014-05-21 21:33 - 2014-04-11 04:56 - 00381440 _____ (Microsoft Corporation) C:\Windows\system32\WUSettingsProvider.dll
2014-05-21 21:33 - 2014-04-11 04:55 - 00093696 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2014-05-21 21:33 - 2014-04-11 04:53 - 00827392 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2014-05-21 21:33 - 2014-04-11 04:46 - 01705472 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2014-05-21 21:33 - 2014-04-11 04:36 - 00828928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.appcore.dll
2014-05-21 21:33 - 2014-04-11 04:29 - 01054208 _____ (Microsoft Corporation) C:\Windows\system32\twinui.appcore.dll
2014-05-21 21:33 - 2014-04-09 13:53 - 00337240 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Classpnp.sys
2014-05-21 21:33 - 2014-04-09 08:39 - 00191488 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll
2014-05-21 21:33 - 2014-04-09 07:44 - 00144384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpchttp.dll
2014-05-21 21:33 - 2014-04-09 05:33 - 00135168 _____ (Microsoft Corporation) C:\Windows\system32\wscsvc.dll
2014-05-21 21:33 - 2014-04-08 04:01 - 00589656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fvevol.sys
2014-05-21 21:33 - 2014-04-06 18:34 - 00372568 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
2014-05-21 21:33 - 2014-04-06 18:34 - 00275800 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys
2014-05-21 21:33 - 2014-04-06 18:32 - 00125496 _____ (Microsoft Corporation) C:\Windows\system32\dwmapi.dll
2014-05-21 21:33 - 2014-04-06 18:31 - 21268952 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2014-05-21 21:33 - 2014-04-06 18:30 - 00201920 _____ (Microsoft Corporation) C:\Windows\system32\MSVideoDSP.dll
2014-05-21 21:33 - 2014-04-06 18:24 - 00360792 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fltMgr.sys
2014-05-21 21:33 - 2014-04-06 18:20 - 01403856 _____ (Microsoft Corporation) C:\Windows\system32\winmde.dll
2014-05-21 21:33 - 2014-04-06 18:20 - 01379064 _____ (Microsoft Corporation) C:\Windows\system32\wmpmde.dll
2014-05-21 21:33 - 2014-04-06 18:20 - 00881616 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll
2014-05-21 21:33 - 2014-04-06 18:20 - 00765408 _____ (Microsoft Corporation) C:\Windows\system32\mfmpeg2srcsnk.dll
2014-05-21 21:33 - 2014-04-06 18:20 - 00609448 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2014-05-21 21:33 - 2014-04-06 18:20 - 00491744 _____ (Microsoft Corporation) C:\Windows\system32\mfsvr.dll
2014-05-21 21:33 - 2014-04-06 18:20 - 00467496 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2014-05-21 21:33 - 2014-04-06 18:20 - 00463256 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2014-05-21 21:33 - 2014-04-06 18:20 - 00364640 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2014-05-21 21:33 - 2014-04-06 18:20 - 00244880 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe
2014-05-21 21:33 - 2014-04-06 18:20 - 00028408 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe
2014-05-21 21:33 - 2014-04-06 17:23 - 00098584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmapi.dll
2014-05-21 21:33 - 2014-04-06 17:22 - 18755672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2014-05-21 21:33 - 2014-04-06 17:22 - 00178184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSVideoDSP.dll
2014-05-21 21:33 - 2014-04-06 17:16 - 01209616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winmde.dll
2014-05-21 21:33 - 2014-04-06 17:16 - 00707048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll
2014-05-21 21:33 - 2014-04-06 17:16 - 00669856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmpeg2srcsnk.dll
2014-05-21 21:33 - 2014-04-06 17:16 - 00518544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll
2014-05-21 21:33 - 2014-04-06 17:16 - 00406504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll
2014-05-21 21:33 - 2014-04-06 17:16 - 00387896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfsvr.dll
2014-05-21 21:33 - 2014-04-06 17:16 - 00326024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll
2014-05-21 21:33 - 2014-04-06 17:16 - 00305768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll
2014-05-21 21:33 - 2014-04-06 16:20 - 06172160 _____ (Microsoft Corporation) C:\Windows\system32\vmwp.exe
2014-05-21 21:33 - 2014-04-06 14:58 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2014-05-21 21:33 - 2014-04-06 14:51 - 00467968 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2014-05-21 21:33 - 2014-04-06 14:33 - 00335872 _____ (Microsoft Corporation) C:\Windows\system32\MDEServer.exe
2014-05-21 21:33 - 2014-04-06 14:24 - 00271872 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2014-05-21 21:33 - 2014-04-06 14:06 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2014-05-21 21:33 - 2014-04-06 13:55 - 16872448 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.dll
2014-05-21 21:33 - 2014-04-06 13:54 - 12711424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.dll
2014-05-21 21:33 - 2014-04-06 13:26 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\BootMenuUX.dll
2014-05-21 21:33 - 2014-04-06 13:20 - 00201216 _____ (Microsoft Corporation) C:\Windows\system32\AudioEndpointBuilder.dll
2014-05-21 21:33 - 2014-04-06 13:01 - 00834048 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2014-05-21 21:33 - 2014-04-06 12:52 - 00955904 _____ (Microsoft Corporation) C:\Windows\system32\MFMediaEngine.dll
2014-05-21 21:33 - 2014-04-06 12:51 - 01230336 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.dll
2014-05-21 21:33 - 2014-04-06 12:37 - 00800768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFMediaEngine.dll
2014-05-21 21:33 - 2014-04-06 12:36 - 00888320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.dll
2014-05-21 21:33 - 2014-04-06 12:05 - 01222656 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Streaming.dll
2014-05-21 21:33 - 2014-04-06 11:59 - 00982016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Streaming.dll
2014-05-21 21:33 - 2014-04-03 10:12 - 00307304 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2014-05-21 21:33 - 2014-04-03 10:12 - 00130144 _____ (Microsoft Corporation) C:\Windows\system32\gpapi.dll
2014-05-21 21:33 - 2014-04-03 06:03 - 00230808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2014-05-21 21:33 - 2014-04-03 06:03 - 00111528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gpapi.dll
2014-05-21 21:33 - 2014-04-03 04:53 - 00677376 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
2014-05-21 21:33 - 2014-04-03 04:51 - 01584128 _____ (Microsoft Corporation) C:\Windows\system32\workfolderssvc.dll
2014-05-21 21:33 - 2014-04-03 04:23 - 00563200 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2014-05-21 21:33 - 2014-04-03 04:23 - 00046592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tlscsp.dll
2014-05-21 21:33 - 2014-04-03 04:22 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\tlscsp.dll
2014-05-21 21:33 - 2014-04-01 08:23 - 00384856 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\spaceport.sys
2014-05-21 21:33 - 2014-03-31 07:42 - 07425368 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2014-05-21 21:33 - 2014-03-31 02:01 - 00186880 _____ (Microsoft Corporation) C:\Windows\system32\WorkFoldersShell.dll
2014-05-21 21:33 - 2014-03-31 01:43 - 00761856 _____ (Microsoft Corporation) C:\Windows\system32\WorkfoldersControl.dll
2014-05-21 21:33 - 2014-03-31 00:54 - 01308160 _____ (Microsoft Corporation) C:\Windows\system32\gpsvc.dll
2014-05-21 21:33 - 2014-03-31 00:49 - 01287168 _____ (Microsoft Corporation) C:\Windows\system32\mispace.dll
2014-05-21 21:33 - 2014-03-31 00:35 - 01029120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mispace.dll
2014-05-21 21:33 - 2014-03-28 17:58 - 00407016 _____ (Microsoft Corporation) C:\Windows\system32\services.exe
2014-05-21 21:33 - 2014-03-27 08:16 - 00246272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
2014-05-21 21:33 - 2014-03-27 07:36 - 00281600 _____ (Microsoft Corporation) C:\Windows\system32\resutils.dll
2014-05-21 21:33 - 2014-03-27 06:59 - 00426496 _____ (Microsoft Corporation) C:\Windows\system32\clusapi.dll
2014-05-21 21:33 - 2014-03-27 06:48 - 00219136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\resutils.dll
2014-05-21 21:33 - 2014-03-27 06:19 - 00313344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\clusapi.dll
2014-05-21 21:33 - 2014-03-27 05:46 - 00323072 _____ (Microsoft Corporation) C:\Windows\system32\srvsvc.dll
2014-05-21 21:33 - 2014-03-27 05:15 - 00718336 _____ (Microsoft Corporation) C:\Windows\system32\swprv.dll
2014-05-21 21:33 - 2014-03-27 05:10 - 01436160 _____ (Microsoft Corporation) C:\Windows\system32\VSSVC.exe
2014-05-21 21:33 - 2014-03-21 06:14 - 00219136 _____ (Microsoft Corporation) C:\Windows\system32\tscfgwmi.dll
2014-05-21 21:33 - 2014-03-20 05:48 - 00263424 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsAdminFlows.exe
2014-05-21 21:33 - 2014-03-20 02:51 - 00667648 _____ (Microsoft Corporation) C:\Windows\system32\gpprefcl.dll
2014-05-21 21:33 - 2014-03-20 02:44 - 06645248 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2014-05-21 21:33 - 2014-03-20 01:38 - 00590336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gpprefcl.dll
2014-05-21 21:33 - 2014-03-20 01:33 - 05774848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2014-05-21 21:33 - 2014-03-19 10:15 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\wlanhlp.dll
2014-05-21 21:33 - 2014-03-19 10:07 - 00443904 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\nwifi.sys
2014-05-21 21:33 - 2014-03-19 09:24 - 00064512 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2014-05-21 21:33 - 2014-03-19 09:17 - 00011264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanhlp.dll
2014-05-21 21:33 - 2014-03-19 08:36 - 01057280 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll
2014-05-21 21:33 - 2014-03-19 07:56 - 00855552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll
2014-05-21 21:33 - 2014-03-19 07:45 - 00443904 _____ (Microsoft Corporation) C:\Windows\system32\wlansec.dll
2014-05-21 21:33 - 2014-03-19 07:19 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\wlanapi.dll
2014-05-21 21:33 - 2014-03-19 07:07 - 00370176 _____ (Microsoft Corporation) C:\Windows\system32\wlanmsm.dll
2014-05-21 21:33 - 2014-03-19 07:02 - 01527296 _____ (Microsoft Corporation) C:\Windows\system32\wlansvc.dll
2014-05-21 21:33 - 2014-03-19 07:00 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanapi.dll
2014-05-21 21:33 - 2014-03-19 06:51 - 00300544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanmsm.dll
2014-05-21 21:33 - 2014-03-19 06:31 - 02100736 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsAdminFlowUI.dll
2014-05-21 21:33 - 2014-03-19 06:18 - 02688000 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers.dll
2014-05-21 21:33 - 2014-03-18 10:19 - 00077312 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\hdaudbus.sys
2014-05-21 21:33 - 2014-03-18 07:00 - 07173120 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Data.Pdf.dll
2014-05-21 21:33 - 2014-03-18 06:52 - 05104640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Data.Pdf.dll
2014-05-21 21:33 - 2014-03-17 07:09 - 00462336 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll
2014-05-21 21:33 - 2014-03-17 06:11 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll
2014-05-21 21:33 - 2014-03-17 05:01 - 00486912 _____ (Microsoft Corporation) C:\Windows\system32\winspool.drv
2014-05-21 21:33 - 2014-03-17 04:45 - 00370176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winspool.drv
2014-05-21 21:33 - 2014-03-14 08:26 - 00491520 _____ (Microsoft Corporation) C:\Windows\system32\GeofenceMonitorService.dll
2014-05-21 21:33 - 2014-03-14 08:10 - 00357376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GeofenceMonitorService.dll
2014-05-21 21:33 - 2014-03-06 14:42 - 00310616 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\volsnap.sys
2014-05-21 21:32 - 2014-04-09 00:46 - 00086688 _____ (Microsoft Corporation) C:\Windows\system32\mrt_map.dll
2014-05-21 21:32 - 2014-04-09 00:46 - 00028320 _____ (Microsoft Corporation) C:\Windows\system32\mrt100.dll
2014-05-21 21:32 - 2014-04-08 20:54 - 00080032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mrt_map.dll
2014-05-21 21:32 - 2014-04-08 20:54 - 00026784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mrt100.dll
2014-05-21 21:32 - 2014-03-24 04:30 - 00257880 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdFilter.sys
2014-05-21 21:32 - 2014-03-24 04:30 - 00123224 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdNisDrv.sys
2014-05-21 21:32 - 2014-03-24 04:27 - 00035856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdBoot.sys
2014-05-21 21:32 - 2014-03-13 09:42 - 00308224 _____ (Microsoft Corporation) C:\Windows\system32\wusa.exe
2014-05-21 21:32 - 2014-03-13 08:51 - 00305152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wusa.exe
2014-05-21 21:31 - 2014-05-21 21:31 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll
2014-05-21 00:34 - 2014-05-21 00:34 - 00187348 _____ () C:\Windows\system32\resTHA.cui
2014-05-21 00:34 - 2014-05-21 00:34 - 00180164 _____ () C:\Windows\system32\resELL.cui
2014-05-21 00:34 - 2014-05-21 00:34 - 00176020 _____ () C:\Windows\system32\resRUS.cui
2014-05-21 00:34 - 2014-05-21 00:34 - 00161876 _____ () C:\Windows\system32\resARA.cui
2014-05-21 00:34 - 2014-05-21 00:34 - 00161332 _____ () C:\Windows\system32\resHEB.cui
2014-05-21 00:34 - 2014-05-21 00:34 - 00161268 _____ () C:\Windows\system32\resJPN.cui
2014-05-21 00:34 - 2014-05-21 00:34 - 00156692 _____ () C:\Windows\system32\resFRA.cui
2014-05-21 00:34 - 2014-05-21 00:34 - 00156676 _____ () C:\Windows\system32\resHUN.cui
2014-05-21 00:34 - 2014-05-21 00:34 - 00154980 _____ () C:\Windows\system32\resKOR.cui
2014-05-21 00:34 - 2014-05-21 00:34 - 00154884 _____ () C:\Windows\system32\resITA.cui
2014-05-21 00:34 - 2014-05-21 00:34 - 00154884 _____ () C:\Windows\system32\resDEU.cui
2014-05-21 00:34 - 2014-05-21 00:34 - 00154724 _____ () C:\Windows\system32\resROM.cui
2014-05-21 00:34 - 2014-05-21 00:34 - 00154612 _____ () C:\Windows\system32\resESN.cui
2014-05-21 00:34 - 2014-05-21 00:34 - 00154180 _____ () C:\Windows\system32\resPLK.cui
2014-05-21 00:34 - 2014-05-21 00:34 - 00154036 _____ () C:\Windows\system32\resSKY.cui
2014-05-21 00:34 - 2014-05-21 00:34 - 00153844 _____ () C:\Windows\system32\resNLD.cui
2014-05-21 00:34 - 2014-05-21 00:34 - 00153284 _____ () C:\Windows\system32\resPTB.cui
2014-05-21 00:34 - 2014-05-21 00:34 - 00153140 _____ () C:\Windows\system32\resTRK.cui
2014-05-21 00:34 - 2014-05-21 00:34 - 00153108 _____ () C:\Windows\system32\resCSY.cui
2014-05-21 00:34 - 2014-05-21 00:34 - 00152980 _____ () C:\Windows\system32\resPTG.cui
2014-05-21 00:34 - 2014-05-21 00:34 - 00152564 _____ () C:\Windows\system32\resFIN.cui
2014-05-21 00:34 - 2014-05-21 00:34 - 00152132 _____ () C:\Windows\system32\resHRV.cui
2014-05-21 00:34 - 2014-05-21 00:34 - 00151684 _____ () C:\Windows\system32\resSVE.cui
2014-05-21 00:34 - 2014-05-21 00:34 - 00151508 _____ () C:\Windows\system32\resSLV.cui
2014-05-21 00:34 - 2014-05-21 00:34 - 00150580 _____ () C:\Windows\system32\resNOR.cui
2014-05-21 00:34 - 2014-05-21 00:34 - 00150068 _____ () C:\Windows\system32\resDAN.cui
2014-05-21 00:34 - 2014-05-21 00:34 - 00148756 _____ () C:\Windows\system32\resENU.cui
2014-05-21 00:34 - 2014-05-21 00:34 - 00146980 _____ () C:\Windows\system32\resCHT.cui
2014-05-21 00:34 - 2014-05-21 00:34 - 00146148 _____ () C:\Windows\system32\resCHS.cui
2014-05-21 00:33 - 2014-05-21 00:33 - 23048704 _____ (Intel Corporation) C:\Windows\system32\igdfcl64.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 18032640 _____ (Intel Corporation) C:\Windows\SysWOW64\igdfcl32.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 17409536 _____ (Intel Corporation) C:\Windows\SysWOW64\igd10iumd32.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 08192000 _____ (Intel Corporation) C:\Windows\system32\ig75icd64.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 06448128 _____ (Intel Corporation) C:\Windows\SysWOW64\ig75icd32.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 04342088 _____ (Intel Corporation) C:\Windows\system32\Gfxv4_0.exe
2014-05-21 00:33 - 2014-05-21 00:33 - 04338504 _____ (Intel Corporation) C:\Windows\system32\Gfxv2_0.exe
2014-05-21 00:33 - 2014-05-21 00:33 - 04011168 _____ (Intel Corporation) C:\Windows\system32\IntelWiDiAAC64.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 03791872 _____ (Intel Corporation) C:\Windows\system32\Drivers\igdkmd64.sys
2014-05-21 00:33 - 2014-05-21 00:33 - 02477728 _____ (Intel Corporation) C:\Windows\system32\IntelWiDiVAD64.exe
2014-05-21 00:33 - 2014-05-21 00:33 - 02023936 _____ (Intel Corporation) C:\Windows\system32\igfxcmjit64.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 01755648 _____ (Intel Corporation) C:\Windows\SysWOW64\igfxcmjit32.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 01673216 _____ (Intel Corporation) C:\Windows\system32\igdrcl64.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 01551872 _____ (Intel Corporation) C:\Windows\SysWOW64\igdrcl32.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 01455776 _____ (Intel Corporation) C:\Windows\system32\IntelWiDiSecureSourceFilter64.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 01137080 _____ (Intel Corporation) C:\Windows\system32\iglhsip64.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 01132960 _____ (Intel Corporation) C:\Windows\SysWOW64\iglhsip32.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00929608 _____ (Intel Corporation) C:\Windows\system32\GfxUIEx.exe
2014-05-21 00:33 - 2014-05-21 00:33 - 00792736 _____ (Intel Corporation) C:\Windows\system32\IntelWiDiWinNextAgent64.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00734208 _____ (Intel Corporation) C:\Windows\system32\MetroIntelGenericUIFramework.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00655360 _____ (Intel Corporation) C:\Windows\system32\igfxDH.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00646304 _____ (Intel Corporation) C:\Windows\system32\IntelWiDiAudioFilter64.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00603296 _____ (Intel Corporation) C:\Windows\system32\IntelWiDiMux64.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00543560 _____ (Intel Corporation) C:\Windows\system32\DPTopologyApp.exe
2014-05-21 00:33 - 2014-05-21 00:33 - 00543048 _____ (Intel Corporation) C:\Windows\system32\DPTopologyAppv2_0.exe
2014-05-21 00:33 - 2014-05-21 00:33 - 00501064 _____ (Intel Corporation) C:\Windows\system32\igfxEM.exe
2014-05-21 00:33 - 2014-05-21 00:33 - 00433560 _____ () C:\Windows\system32\igdmd64.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00415560 _____ (Intel Corporation) C:\Windows\system32\IntelWiDiUMS64.exe
2014-05-21 00:33 - 2014-05-21 00:33 - 00392520 _____ (Intel Corporation) C:\Windows\system32\CustomModeApp.exe
2014-05-21 00:33 - 2014-05-21 00:33 - 00392008 _____ (Intel Corporation) C:\Windows\system32\CustomModeAppv2_0.exe
2014-05-21 00:33 - 2014-05-21 00:33 - 00373248 _____ (Intel Corporation) C:\Windows\system32\igfxOSP.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00358912 _____ (Intel Corporation) C:\Windows\system32\IntelOpenCL64.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00348088 _____ () C:\Windows\SysWOW64\igdmd32.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00344736 _____ (Intel Corporation) C:\Windows\system32\IntelWiDiSilenceFilter64.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00330240 _____ (Intel Corporation) C:\Windows\system32\igdbcl64.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00314696 _____ (Intel Corporation) C:\Windows\system32\igfxCUIService.exe
2014-05-21 00:33 - 2014-05-21 00:33 - 00294912 _____ (Intel Corporation) C:\Windows\SysWOW64\IntelOpenCL32.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00291328 _____ (Intel Corporation) C:\Windows\SysWOW64\igdbcl32.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00278344 _____ (Intel Corporation) C:\Windows\SysWOW64\IntelCpHeciSvc.exe
2014-05-21 00:33 - 2014-05-21 00:33 - 00267264 _____ (Intel Corporation) C:\Windows\system32\igfxDI.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00254976 _____ () C:\Windows\system32\igfxCPL.cpl
2014-05-21 00:33 - 2014-05-21 00:33 - 00249856 _____ (Intel Corporation) C:\Windows\system32\igfxLHM.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00243528 _____ (Intel Corporation) C:\Windows\system32\igfxHK.exe
2014-05-21 00:33 - 2014-05-21 00:33 - 00223744 _____ () C:\Windows\system32\igdde64.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00218808 _____ (Intel Corporation) C:\Windows\system32\iglhcp64.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00212992 _____ (Intel Corporation) C:\Windows\system32\igfxDTCM.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00210592 _____ (Intel Corporation) C:\Windows\system32\IntelWiDiUtils64.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00190792 _____ (Intel Corporation) C:\Windows\system32\igfxext.exe
2014-05-21 00:33 - 2014-05-21 00:33 - 00187408 _____ (Intel Corporation) C:\Windows\system32\igfxcmrt64.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00183808 _____ () C:\Windows\SysWOW64\igdde32.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00183800 _____ (Intel Corporation) C:\Windows\SysWOW64\iglhcp32.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00182784 _____ (Intel Corporation) C:\Windows\system32\igfxCoIn_v3621.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00182784 _____ (Intel Corporation) C:\Windows\system32\igfx11cmrt64.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00177824 _____ (Intel Corporation) C:\Windows\system32\IntelWiDiDDEAgent64.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00160256 _____ () C:\Windows\system32\igdail64.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00158032 _____ (Intel Corporation) C:\Windows\SysWOW64\igfxcmrt32.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00155136 _____ (Intel Corporation) C:\Windows\SysWOW64\igfx11cmrt32.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00152392 _____ (Intel Corporation) C:\Windows\system32\difx64.exe
2014-05-21 00:33 - 2014-05-21 00:33 - 00142848 _____ () C:\Windows\SysWOW64\igdail32.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00128672 _____ (Intel Corporation) C:\Windows\system32\IntelWiDiMCUMD64.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00094368 _____ (Intel Corporation) C:\Windows\system32\IntelWiDiLogServer64.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00070144 _____ () C:\Windows\system32\igfxCUIServicePS.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00069632 _____ ( ) C:\Windows\system32\igfxDHLibv2_0.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00057856 _____ ( ) C:\Windows\system32\igfxDHLib.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00031408 _____ (Intel Corporation) C:\Windows\system32\igfxexps.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00030720 _____ (Intel Corporation) C:\Windows\SysWOW64\igfxexps32.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00010752 _____ ( ) C:\Windows\system32\igfxDILib.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00010240 _____ ( ) C:\Windows\system32\igfxEMLibv2_0.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00010240 _____ ( ) C:\Windows\system32\igfxEMLib.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00010240 _____ ( ) C:\Windows\system32\igfxDILibv2_0.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00005120 _____ ( ) C:\Windows\system32\igfxLHMLibv2_0.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00005120 _____ ( ) C:\Windows\system32\igfxLHMLib.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00002568 _____ () C:\Windows\system32\iglhxs64.vp

==================== One Month Modified Files and Folders =======

2014-06-19 17:18 - 2014-06-19 17:18 - 00000000 ____D () C:\FRST
2014-06-19 15:45 - 2014-03-09 00:23 - 00001134 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-06-19 15:00 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\sru
2014-06-19 14:46 - 2014-05-22 23:43 - 00000000 ____D () C:\ProgramData\Kaspersky Lab
2014-06-19 14:37 - 2014-06-19 14:11 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy
2014-06-19 14:18 - 2014-03-01 18:53 - 00003600 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1594369281-2355564985-1810472959

-1001
2014-06-19 14:13 - 2014-06-19 14:11 - 00000000 ____D () C:\Program Files (x86)\Spybot - Search & Destroy 2
2014-06-19 14:11 - 2014-06-19 14:11 - 00001457 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot-S&D Start Center.lnk
2014-06-19 14:11 - 2014-06-19 14:11 - 00001445 _____ () C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk
2014-06-19 14:11 - 2014-06-19 14:11 - 00000000 ____D () C:\Windows\System32\Tasks\Safer-Networking
2014-06-19 14:11 - 2014-06-19 14:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2
2014-06-19 13:52 - 2014-05-24 16:46 - 00779484 _____ () C:\Windows\system32\perfh00C.dat
2014-06-19 13:52 - 2014-05-24 16:46 - 00425332 _____ () C:\Windows\system32\perfh001.dat
2014-06-19 13:52 - 2014-05-24 16:46 - 00150106 _____ () C:\Windows\system32\perfc00C.dat
2014-06-19 13:52 - 2014-05-24 16:46 - 00065976 _____ () C:\Windows\system32\perfc001.dat
2014-06-19 13:52 - 2014-03-01 18:51 - 03206082 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-06-19 13:52 - 2013-08-23 01:24 - 00769056 _____ () C:\Windows\system32\perfh007.dat
2014-06-19 13:52 - 2013-08-23 01:24 - 00160874 _____ () C:\Windows\system32\perfc007.dat
2014-06-19 13:50 - 2014-05-13 12:11 - 27652096 _____ () C:\Windows\system32\vmguest.iso
2014-06-19 13:49 - 2014-03-09 00:23 - 00002245 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-06-19 13:48 - 2014-06-19 13:48 - 00000000 ____D () C:\Users\********\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink PowerDVD
2014-06-19 13:48 - 2014-03-09 00:23 - 00001130 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-06-19 13:47 - 2014-03-01 18:42 - 00095344 _____ () C:\Windows\PFRO.log
2014-06-19 13:47 - 2013-08-22 16:45 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-06-19 13:46 - 2014-06-19 11:04 - 00000000 ____D () C:\AdwCleaner
2014-06-19 13:31 - 2014-03-10 13:05 - 00000000 ____D () C:\Users\********\AppData\Roaming\vlc
2014-06-19 11:29 - 2014-03-01 18:47 - 01078820 _____ () C:\Windows\WindowsUpdate.log
2014-06-19 11:18 - 2014-05-12 17:11 - 00020135 _____ () C:\Windows\system32\lvcoinst.log
2014-06-19 11:11 - 2014-06-19 11:11 - 00000144 _____ () C:\Windows\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2014-06-19 11:11 - 2014-03-09 00:36 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-06-18 14:48 - 2014-06-18 14:48 - 00001263 _____ () C:\Users\********\Desktop\Win8-Buch.pdf - Verknüpfung.lnk
2014-06-18 11:54 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\rescache
2014-06-17 23:58 - 2014-06-17 23:58 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-06-17 14:22 - 2013-08-22 15:25 - 00262144 ___SH () C:\Windows\system32\config\ELAM
2014-06-17 13:37 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\tracing
2014-06-17 12:44 - 2014-06-17 12:44 - 00000451 _____ () C:\Windows\system32\{F33C3B9B-72AF-418A-B3FD-560646F7CDA2}.bat
2014-06-17 12:44 - 2014-03-01 18:47 - 00000000 ____D () C:\Users\********
2014-06-17 12:44 - 2013-08-22 16:44 - 00594720 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-06-17 12:43 - 2013-08-22 15:25 - 00262144 ___SH () C:\Windows\system32\config\BBI
2014-06-17 12:42 - 2014-03-13 14:09 - 00000000 ____D () C:\Users\********\AppData\Roaming\KeePass
2014-06-17 12:42 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\WinStore
2014-06-17 12:42 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\SysWOW64\ar-SA
2014-06-17 12:42 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\ar-SA
2014-06-17 12:42 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\MediaViewer
2014-06-17 12:42 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\FileManager
2014-06-17 12:42 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\Camera
2014-06-17 12:39 - 2014-06-17 12:23 - 00625760 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klif.sys
2014-06-17 12:39 - 2014-06-17 12:23 - 00115296 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klflt.sys
2014-06-17 12:39 - 2013-10-17 15:47 - 00458336 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\kl1.sys
2014-06-17 12:39 - 2013-10-17 15:47 - 00029280 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klkbdflt.sys
2014-06-17 12:39 - 2013-06-06 17:38 - 00178272 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\kneps.sys
2014-06-17 12:39 - 2013-05-07 17:56 - 00065120 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klwfp.sys
2014-06-17 12:39 - 2012-07-27 18:38 - 00029792 _____ (Kaspersky Lab) C:\Windows\system32\Drivers\klelam.sys
2014-06-17 12:34 - 2014-06-17 12:34 - 00001360 _____ () C:\Users\********\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Kaspersky Anti-Virus.lnk
2014-06-17 12:33 - 2014-03-12 14:07 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-06-17 12:33 - 2013-08-22 17:20 - 00000000 ____D () C:\Windows\CbsTemp
2014-06-17 12:33 - 2013-08-22 16:46 - 00041936 _____ () C:\Windows\setupact.log
2014-06-17 12:31 - 2014-03-01 19:03 - 95414520 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-06-17 12:31 - 2014-03-01 19:03 - 00000000 ____D () C:\Windows\system32\MRT
2014-06-17 12:30 - 2013-08-22 17:36 - 00000000 ___RD () C:\Windows\ToastData
2014-06-17 12:27 - 2014-06-17 12:27 - 00233912 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
2014-06-17 12:23 - 2014-06-17 12:24 - 00001155 _____ () C:\Users\Public\Desktop\Kaspersky Anti-Virus.lnk
2014-06-17 12:23 - 2014-05-22 23:43 - 00000000 ____D () C:\Program Files (x86)\Kaspersky Lab
2014-06-17 12:23 - 2014-04-04 18:48 - 00000000 ____D () C:\Program Files (x86)\Avira
2014-06-17 12:23 - 2013-08-22 17:36 - 00000000 ___HD () C:\Windows\ELAMBKUP
2014-06-17 12:16 - 2014-04-04 18:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2014-06-16 12:01 - 2014-03-22 21:30 - 00001207 _____ () C:\Users\********\Desktop\Mediencenter.lnk
2014-06-16 12:01 - 2014-03-22 21:30 - 00001193 _____ () C:\Users\********\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Mediencenter.lnk
2014-06-13 21:42 - 2014-03-09 00:21 - 00000000 ____D () C:\Users\********\AppData\Local\Adobe
2014-06-12 17:12 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\AppReadiness
2014-06-10 00:17 - 2014-05-11 21:55 - 00000000 ____D () C:\Users\********\AppData\Roaming\Skype
2014-06-02 16:52 - 2014-05-24 16:45 - 00000000 ____D () C:\Windows\ar-SA
2014-06-02 11:08 - 2014-03-15 17:43 - 00000000 ____D () C:\Users\********\AppData\Local\Deployment
2014-05-31 08:27 - 2014-06-17 12:27 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2014-05-31 07:13 - 2013-08-22 17:38 - 00703992 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-05-31 07:13 - 2013-08-22 17:38 - 00105464 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-05-30 12:21 - 2014-06-17 12:29 - 23414784 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-05-30 11:45 - 2014-06-17 12:29 - 02768384 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-05-30 11:28 - 2014-06-17 12:29 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-05-30 11:20 - 2014-06-17 12:29 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-05-30 11:18 - 2014-06-17 12:29 - 17271296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-05-30 11:08 - 2014-06-17 12:29 - 05782528 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-05-30 11:06 - 2014-06-17 12:29 - 00452096 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-05-30 10:46 - 2014-06-17 12:29 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-05-30 10:44 - 2014-06-17 12:29 - 00295424 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-05-30 10:43 - 2014-06-17 12:29 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-05-30 10:38 - 2014-06-17 12:29 - 02179072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-05-30 10:35 - 2014-06-17 12:29 - 00608768 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-05-30 10:29 - 2014-06-17 12:29 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-05-30 10:27 - 2014-06-17 12:29 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-05-30 10:23 - 2014-06-17 12:29 - 02040832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-05-30 10:16 - 2014-06-17 12:29 - 00368128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-05-30 10:04 - 2014-06-17 12:29 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-05-30 10:02 - 2014-06-17 12:29 - 00242688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-05-30 09:56 - 2014-06-17 12:29 - 04244992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-05-30 09:56 - 2014-06-17 12:29 - 02266112 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-05-30 09:54 - 2014-06-17 12:29 - 00526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-05-30 09:49 - 2014-06-17 12:29 - 01964544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-05-30 09:43 - 2014-06-17 12:29 - 13522944 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-05-30 09:40 - 2014-06-17 12:29 - 11725312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-05-30 09:30 - 2014-06-17 12:29 - 01398272 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-05-30 09:21 - 2014-06-17 12:29 - 01790976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-05-30 09:15 - 2014-06-17 12:29 - 01143296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-05-30 09:13 - 2014-06-17 12:29 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-05-30 09:13 - 2014-06-17 12:29 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-05-29 18:17 - 2014-05-29 18:17 - 14615358 _____ () C:\Users\********\Desktop\collection.apkg
2014-05-28 11:09 - 2014-05-28 11:09 - 00000000 ____D () C:\Users\********\AppData\Local\Dipl.-Ing. Rolf Keller
2014-05-26 12:38 - 2014-03-14 22:31 - 00000000 ____D () C:\Program Files (x86)\AutoHotkey
2014-05-24 16:45 - 2014-05-24 16:46 - 00350772 _____ () C:\Windows\system32\perfi00C.dat
2014-05-24 16:45 - 2014-05-24 16:46 - 00296742 _____ () C:\Windows\system32\perfi001.dat
2014-05-24 16:45 - 2014-05-24 16:46 - 00040528 _____ () C:\Windows\system32\perfd00C.dat
2014-05-24 16:45 - 2014-05-24 16:46 - 00033362 _____ () C:\Windows\system32\perfd001.dat
2014-05-24 16:45 - 2014-05-24 16:45 - 00000000 ____D () C:\Windows\SysWOW64\fr
2014-05-24 16:45 - 2014-05-24 16:45 - 00000000 ____D () C:\Windows\SysWOW64\Drivers\ar-SA
2014-05-24 16:45 - 2014-05-24 16:45 - 00000000 ____D () C:\Windows\system32\fr
2014-05-24 16:45 - 2014-05-24 16:45 - 00000000 ____D () C:\Windows\system32\Drivers\ar-SA
2014-05-24 16:45 - 2014-05-24 16:45 - 00000000 ____D () C:\Windows\system32\ar
2014-05-24 16:45 - 2014-05-13 12:09 - 00000000 ____D () C:\Program Files\Hyper-V
2014-05-24 16:45 - 2014-03-05 13:11 - 00000000 ____D () C:\Windows\SysWOW64\XPSViewer
2014-05-24 16:45 - 2013-08-23 01:26 - 00000000 ____D () C:\Program Files\Windows Journal
2014-05-24 16:45 - 2013-08-23 01:24 - 00000000 ____D () C:\Windows\SysWOW64\winrm
2014-05-24 16:45 - 2013-08-23 01:24 - 00000000 ____D () C:\Windows\SysWOW64\WCN
2014-05-24 16:45 - 2013-08-23 01:24 - 00000000 ____D () C:\Windows\SysWOW64\slmgr
2014-05-24 16:45 - 2013-08-23 01:24 - 00000000 ____D () C:\Windows\SysWOW64\Printing_Admin_Scripts
2014-05-24 16:45 - 2013-08-23 01:24 - 00000000 ____D () C:\Windows\system32\winrm
2014-05-24 16:45 - 2013-08-23 01:24 - 00000000 ____D () C:\Windows\system32\WCN
2014-05-24 16:45 - 2013-08-23 01:24 - 00000000 ____D () C:\Windows\system32\slmgr
2014-05-24 16:45 - 2013-08-23 01:24 - 00000000 ____D () C:\Windows\system32\Printing_Admin_Scripts
2014-05-24 16:45 - 2013-08-22 17:36 - 00000000 ___SD () C:\Windows\system32\dsc
2014-05-24 16:45 - 2013-08-22 17:36 - 00000000 ___RD () C:\Windows\ImmersiveControlPanel
2014-05-24 16:45 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\SysWOW64\MUI
2014-05-24 16:45 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\SysWOW64\Com
2014-05-24 16:45 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\SystemResetPlatform
2014-05-24 16:45 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\MUI
2014-05-24 16:45 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\migwiz
2014-05-24 16:45 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\Com
2014-05-24 16:45 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-05-24 16:45 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\IME
2014-05-24 16:45 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\Help
2014-05-24 16:45 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files\Windows Photo Viewer
2014-05-24 16:45 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files\Windows Defender
2014-05-24 16:45 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files\Common Files\System
2014-05-24 16:45 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files (x86)\Windows Photo Viewer
2014-05-24 16:45 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files (x86)\Windows Defender
2014-05-24 16:45 - 2013-08-22 15:36 - 00000000 ____D () C:\Windows\SysWOW64\oobe
2014-05-24 16:45 - 2013-08-22 15:36 - 00000000 ____D () C:\Windows\SysWOW64\Dism
2014-05-24 16:45 - 2013-08-22 15:36 - 00000000 ____D () C:\Windows\system32\Sysprep
2014-05-24 16:45 - 2013-08-22 15:36 - 00000000 ____D () C:\Windows\system32\oobe
2014-05-24 16:45 - 2013-08-22 15:36 - 00000000 ____D () C:\Windows\system32\Dism
2014-05-24 16:45 - 2013-08-22 15:36 - 00000000 ____D () C:\Windows\servicing
2014-05-24 00:11 - 2014-03-12 14:07 - 00000000 ____D () C:\Users\********\AppData\Local\Microsoft Help
2014-05-24 00:08 - 2014-03-15 19:45 - 00002457 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2014-05-23 13:27 - 2014-03-12 21:06 - 00123840 _____ () C:\Users\********\AppData\Local\GDIPFONTCACHEV1.DAT
2014-05-22 23:45 - 2014-05-11 21:55 - 00002715 _____ () C:\Users\Public\Desktop\Skype.lnk
2014-05-22 23:45 - 2014-05-11 21:55 - 00000000 ____D () C:\ProgramData\Skype
2014-05-22 23:45 - 2014-05-11 21:55 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2014-05-22 23:44 - 2014-05-22 23:44 - 00001370 _____ () C:\Users\********\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Kaspersky Security Scan.lnk
2014-05-22 23:43 - 2014-05-22 23:43 - 00001143 _____ () C:\Users\********\Desktop\Kaspersky Security Scan.lnk
2014-05-21 23:30 - 2014-04-22 10:29 - 00000000 ____D () C:\Users\********\VMLites
2014-05-21 23:22 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-05-21 23:22 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-05-21 21:36 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\SecureBootUpdates
2014-05-21 21:31 - 2014-05-21 21:31 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll
2014-05-21 00:34 - 2014-05-21 00:34 - 00187348 _____ () C:\Windows\system32\resTHA.cui
2014-05-21 00:34 - 2014-05-21 00:34 - 00180164 _____ () C:\Windows\system32\resELL.cui
2014-05-21 00:34 - 2014-05-21 00:34 - 00176020 _____ () C:\Windows\system32\resRUS.cui
2014-05-21 00:34 - 2014-05-21 00:34 - 00161876 _____ () C:\Windows\system32\resARA.cui
2014-05-21 00:34 - 2014-05-21 00:34 - 00161332 _____ () C:\Windows\system32\resHEB.cui
2014-05-21 00:34 - 2014-05-21 00:34 - 00161268 _____ () C:\Windows\system32\resJPN.cui
2014-05-21 00:34 - 2014-05-21 00:34 - 00156692 _____ () C:\Windows\system32\resFRA.cui
2014-05-21 00:34 - 2014-05-21 00:34 - 00156676 _____ () C:\Windows\system32\resHUN.cui
2014-05-21 00:34 - 2014-05-21 00:34 - 00154980 _____ () C:\Windows\system32\resKOR.cui
2014-05-21 00:34 - 2014-05-21 00:34 - 00154884 _____ () C:\Windows\system32\resITA.cui
2014-05-21 00:34 - 2014-05-21 00:34 - 00154884 _____ () C:\Windows\system32\resDEU.cui
2014-05-21 00:34 - 2014-05-21 00:34 - 00154724 _____ () C:\Windows\system32\resROM.cui
2014-05-21 00:34 - 2014-05-21 00:34 - 00154612 _____ () C:\Windows\system32\resESN.cui
2014-05-21 00:34 - 2014-05-21 00:34 - 00154180 _____ () C:\Windows\system32\resPLK.cui
2014-05-21 00:34 - 2014-05-21 00:34 - 00154036 _____ () C:\Windows\system32\resSKY.cui
2014-05-21 00:34 - 2014-05-21 00:34 - 00153844 _____ () C:\Windows\system32\resNLD.cui
2014-05-21 00:34 - 2014-05-21 00:34 - 00153284 _____ () C:\Windows\system32\resPTB.cui
2014-05-21 00:34 - 2014-05-21 00:34 - 00153140 _____ () C:\Windows\system32\resTRK.cui
2014-05-21 00:34 - 2014-05-21 00:34 - 00153108 _____ () C:\Windows\system32\resCSY.cui
2014-05-21 00:34 - 2014-05-21 00:34 - 00152980 _____ () C:\Windows\system32\resPTG.cui
2014-05-21 00:34 - 2014-05-21 00:34 - 00152564 _____ () C:\Windows\system32\resFIN.cui
2014-05-21 00:34 - 2014-05-21 00:34 - 00152132 _____ () C:\Windows\system32\resHRV.cui
2014-05-21 00:34 - 2014-05-21 00:34 - 00151684 _____ () C:\Windows\system32\resSVE.cui
2014-05-21 00:34 - 2014-05-21 00:34 - 00151508 _____ () C:\Windows\system32\resSLV.cui
2014-05-21 00:34 - 2014-05-21 00:34 - 00150580 _____ () C:\Windows\system32\resNOR.cui
2014-05-21 00:34 - 2014-05-21 00:34 - 00150068 _____ () C:\Windows\system32\resDAN.cui
2014-05-21 00:34 - 2014-05-21 00:34 - 00148756 _____ () C:\Windows\system32\resENU.cui
2014-05-21 00:34 - 2014-05-21 00:34 - 00146980 _____ () C:\Windows\system32\resCHT.cui
2014-05-21 00:34 - 2014-05-21 00:34 - 00146148 _____ () C:\Windows\system32\resCHS.cui
2014-05-21 00:33 - 2014-05-21 00:33 - 23048704 _____ (Intel Corporation) C:\Windows\system32\igdfcl64.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 18032640 _____ (Intel Corporation) C:\Windows\SysWOW64\igdfcl32.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 17409536 _____ (Intel Corporation) C:\Windows\SysWOW64\igd10iumd32.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 08192000 _____ (Intel Corporation) C:\Windows\system32\ig75icd64.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 06448128 _____ (Intel Corporation) C:\Windows\SysWOW64\ig75icd32.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 04342088 _____ (Intel Corporation) C:\Windows\system32\Gfxv4_0.exe
2014-05-21 00:33 - 2014-05-21 00:33 - 04338504 _____ (Intel Corporation) C:\Windows\system32\Gfxv2_0.exe
2014-05-21 00:33 - 2014-05-21 00:33 - 04011168 _____ (Intel Corporation) C:\Windows\system32\IntelWiDiAAC64.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 03791872 _____ (Intel Corporation) C:\Windows\system32\Drivers\igdkmd64.sys
2014-05-21 00:33 - 2014-05-21 00:33 - 02477728 _____ (Intel Corporation) C:\Windows\system32\IntelWiDiVAD64.exe
2014-05-21 00:33 - 2014-05-21 00:33 - 02023936 _____ (Intel Corporation) C:\Windows\system32\igfxcmjit64.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 01755648 _____ (Intel Corporation) C:\Windows\SysWOW64\igfxcmjit32.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 01673216 _____ (Intel Corporation) C:\Windows\system32\igdrcl64.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 01551872 _____ (Intel Corporation) C:\Windows\SysWOW64\igdrcl32.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 01455776 _____ (Intel Corporation) C:\Windows\system32\IntelWiDiSecureSourceFilter64.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 01137080 _____ (Intel Corporation) C:\Windows\system32\iglhsip64.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 01132960 _____ (Intel Corporation) C:\Windows\SysWOW64\iglhsip32.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00929608 _____ (Intel Corporation) C:\Windows\system32\GfxUIEx.exe
2014-05-21 00:33 - 2014-05-21 00:33 - 00792736 _____ (Intel Corporation) C:\Windows\system32\IntelWiDiWinNextAgent64.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00734208 _____ (Intel Corporation) C:\Windows\system32\MetroIntelGenericUIFramework.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00655360 _____ (Intel Corporation) C:\Windows\system32\igfxDH.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00646304 _____ (Intel Corporation) C:\Windows\system32\IntelWiDiAudioFilter64.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00603296 _____ (Intel Corporation) C:\Windows\system32\IntelWiDiMux64.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00543560 _____ (Intel Corporation) C:\Windows\system32\DPTopologyApp.exe
2014-05-21 00:33 - 2014-05-21 00:33 - 00543048 _____ (Intel Corporation) C:\Windows\system32\DPTopologyAppv2_0.exe
2014-05-21 00:33 - 2014-05-21 00:33 - 00501064 _____ (Intel Corporation) C:\Windows\system32\igfxEM.exe
2014-05-21 00:33 - 2014-05-21 00:33 - 00433560 _____ () C:\Windows\system32\igdmd64.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00415560 _____ (Intel Corporation) C:\Windows\system32\IntelWiDiUMS64.exe
2014-05-21 00:33 - 2014-05-21 00:33 - 00392520 _____ (Intel Corporation) C:\Windows\system32\CustomModeApp.exe
2014-05-21 00:33 - 2014-05-21 00:33 - 00392008 _____ (Intel Corporation) C:\Windows\system32\CustomModeAppv2_0.exe
2014-05-21 00:33 - 2014-05-21 00:33 - 00373248 _____ (Intel Corporation) C:\Windows\system32\igfxOSP.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00358912 _____ (Intel Corporation) C:\Windows\system32\IntelOpenCL64.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00348088 _____ () C:\Windows\SysWOW64\igdmd32.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00344736 _____ (Intel Corporation) C:\Windows\system32\IntelWiDiSilenceFilter64.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00330240 _____ (Intel Corporation) C:\Windows\system32\igdbcl64.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00314696 _____ (Intel Corporation) C:\Windows\system32\igfxCUIService.exe
2014-05-21 00:33 - 2014-05-21 00:33 - 00294912 _____ (Intel Corporation) C:\Windows\SysWOW64\IntelOpenCL32.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00291328 _____ (Intel Corporation) C:\Windows\SysWOW64\igdbcl32.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00278344 _____ (Intel Corporation) C:\Windows\SysWOW64\IntelCpHeciSvc.exe
2014-05-21 00:33 - 2014-05-21 00:33 - 00267264 _____ (Intel Corporation) C:\Windows\system32\igfxDI.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00254976 _____ () C:\Windows\system32\igfxCPL.cpl
2014-05-21 00:33 - 2014-05-21 00:33 - 00249856 _____ (Intel Corporation) C:\Windows\system32\igfxLHM.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00243528 _____ (Intel Corporation) C:\Windows\system32\igfxHK.exe
2014-05-21 00:33 - 2014-05-21 00:33 - 00223744 _____ () C:\Windows\system32\igdde64.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00218808 _____ (Intel Corporation) C:\Windows\system32\iglhcp64.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00212992 _____ (Intel Corporation) C:\Windows\system32\igfxDTCM.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00210592 _____ (Intel Corporation) C:\Windows\system32\IntelWiDiUtils64.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00190792 _____ (Intel Corporation) C:\Windows\system32\igfxext.exe
2014-05-21 00:33 - 2014-05-21 00:33 - 00187408 _____ (Intel Corporation) C:\Windows\system32\igfxcmrt64.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00183808 _____ () C:\Windows\SysWOW64\igdde32.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00183800 _____ (Intel Corporation) C:\Windows\SysWOW64\iglhcp32.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00182784 _____ (Intel Corporation) C:\Windows\system32\igfxCoIn_v3621.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00182784 _____ (Intel Corporation) C:\Windows\system32\igfx11cmrt64.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00177824 _____ (Intel Corporation) C:\Windows\system32\IntelWiDiDDEAgent64.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00160256 _____ () C:\Windows\system32\igdail64.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00158032 _____ (Intel Corporation) C:\Windows\SysWOW64\igfxcmrt32.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00155136 _____ (Intel Corporation) C:\Windows\SysWOW64\igfx11cmrt32.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00152392 _____ (Intel Corporation) C:\Windows\system32\difx64.exe
2014-05-21 00:33 - 2014-05-21 00:33 - 00142848 _____ () C:\Windows\SysWOW64\igdail32.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00128672 _____ (Intel Corporation) C:\Windows\system32\IntelWiDiMCUMD64.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00094368 _____ (Intel Corporation) C:\Windows\system32\IntelWiDiLogServer64.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00070144 _____ () C:\Windows\system32\igfxCUIServicePS.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00069632 _____ ( ) C:\Windows\system32\igfxDHLibv2_0.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00057856 _____ ( ) C:\Windows\system32\igfxDHLib.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00031408 _____ (Intel Corporation) C:\Windows\system32\igfxexps.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00030720 _____ (Intel Corporation) C:\Windows\SysWOW64\igfxexps32.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00010752 _____ ( ) C:\Windows\system32\igfxDILib.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00010240 _____ ( ) C:\Windows\system32\igfxEMLibv2_0.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00010240 _____ ( ) C:\Windows\system32\igfxEMLib.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00010240 _____ ( ) C:\Windows\system32\igfxDILibv2_0.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00005120 _____ ( ) C:\Windows\system32\igfxLHMLibv2_0.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00005120 _____ ( ) C:\Windows\system32\igfxLHMLib.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00002568 _____ () C:\Windows\system32\iglhxs64.vp
2014-05-21 00:33 - 2014-01-25 03:22 - 17791136 _____ (Intel Corporation) C:\Windows\system32\igd10iumd64.dll
2014-05-21 00:33 - 2014-01-25 03:22 - 16586584 _____ (Intel Corporation) C:\Windows\system32\igdumdim64.dll
2014-05-21 00:33 - 2014-01-25 03:22 - 16114320 _____ (Intel Corporation) C:\Windows\SysWOW64\igdumdim32.dll
2014-05-21 00:33 - 2014-01-25 03:22 - 04590152 _____ (Intel Corporation) C:\Windows\system32\igdusc64.dll
2014-05-21 00:33 - 2014-01-25 03:22 - 03658520 _____ (Intel Corporation) C:\Windows\SysWOW64\igdusc32.dll
2014-05-21 00:33 - 2014-01-25 03:22 - 00443720 _____ (Intel Corporation) C:\Windows\system32\igfxTray.exe

Some content of TEMP:
====================
C:\Users\********\AppData\Local\Temp\avgnt.exe
C:\Users\********\AppData\Local\Temp\ose00000.exe
C:\Users\********\AppData\Local\Temp\_is5E7F.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-06-17 10:09

==================== End Of Log ============================
         

GMER 2.1.19357 - hxxp://www.gmer.net
Rootkit scan 2014-06-19 18:20:52
Windows 6.3.9600  x64 \Device\Harddisk0\DR0 -> \Device\0000003c LSI_____ rev.5.12 111,75GB
Running: Gmer-19357.exe; Driver: C:\Users\LBBERS~1\AppData\Local\Temp\awddykow.sys


---- User code sections - GMER 2.1 ----

.text   C:\Windows\Explorer.EXE[1376] C:\Windows\SYSTEM32\MSIMG32.dll!GradientFill + 714                                                                     

                              00007ffb8c38154a 4 bytes [38, 8C, FB, 7F]
.text   C:\Windows\Explorer.EXE[1376] C:\Windows\SYSTEM32\MSIMG32.dll!GradientFill + 722                                                                     

                              00007ffb8c381552 4 bytes [38, 8C, FB, 7F]
.text   C:\Windows\Explorer.EXE[1376] C:\Windows\SYSTEM32\MSIMG32.dll!TransparentBlt + 98                                                                    

                              00007ffb8c38162a 4 bytes [38, 8C, FB, 7F]
.text   C:\Windows\Explorer.EXE[1376] C:\Windows\SYSTEM32\MSIMG32.dll!TransparentBlt + 122                                                                   

                              00007ffb8c381642 4 bytes [38, 8C, FB, 7F]

---- Threads - GMER 2.1 ----

Thread  C:\Windows\system32\csrss.exe [584:592]                                                                                                              

                              fffff96000897b90

---- Registry - GMER 2.1 ----

Reg     HKLM\SYSTEM\CurrentControlSet\Control@SystemStartOptions                                                                                             

                               NOEXECUTE=OPTIN  HYPERVISORLAUNCHTYPE=AUTO
Reg     HKLM\SYSTEM\CurrentControlSet\Control\GraphicsDrivers\Configuration

\MSBDD_VSC5320QQM091900490_13_07D9_4C_1414_008D_FFFFFFFF_FFFFFFFF_0^478C3BBB310E6657193CCB95944AF9C0@Timestamp  0xA2 0x2E 0x80 0xDB ...
Reg     HKLM\SYSTEM\CurrentControlSet\Control\Lsa@LsaPid                                                                                                     

                              848
Reg     HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Executive@UuidSequenceNumber                                                                   

                              3900049
Reg     HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Kernel\RNG@RNGAuxiliarySeed                                                                    

                              1732357909
Reg     HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management\PrefetchParameters@BootId                                                    

                              70
Reg     HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management\PrefetchParameters@BaseTime                                                  

                              414913344
Reg     HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Power@POSTTime                                                                                 

                              0
Reg     HKLM\SYSTEM\CurrentControlSet\Control\Terminal Server@InstanceID                                                                                     

                              c1652fcd-9953-4d03-a20f-ab40aed
Reg     HKLM\SYSTEM\CurrentControlSet\Control\WMI\Autologger\AITEventLog@FileCounter                                                                         

                              1
Reg     HKLM\SYSTEM\CurrentControlSet\Control\WMI\Autologger\SQMLogger@FileCounter                                                                           

                              10
Reg     HKLM\SYSTEM\CurrentControlSet\Control\WMI\Autologger\WdiContextLog@FileCounter                                                                       

                              1
Reg     HKLM\SYSTEM\CurrentControlSet\Hardware Profiles\UnitedVideo\SERVICES\BASICDISPLAY@DefaultSettings.XResolution                                        

                              1280
Reg     HKLM\SYSTEM\CurrentControlSet\Hardware Profiles\UnitedVideo\SERVICES\BASICDISPLAY@DefaultSettings.YResolution                                        

                              1024
Reg     HKLM\SYSTEM\CurrentControlSet\Services\amdsbs\Parameters\Device-1@RaidCount                                                                          

                              0
Reg     HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Epoch@Epoch                                                                                      

                              2940
Reg     HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Epoch2@Epoch                                                                                     

                              1026
Reg     HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters@DhcpDomain                                                                                   

                              fritz.box
Reg     HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters@DhcpNameServer                                                                               

                              192.168.178.1
Reg     HKLM\SYSTEM\CurrentControlSet\Services\Winmgmt\Parameters@ServiceDllUnloadOnStop                                                                     

                              0
Reg     HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shutdown@CleanShutdown                                                                       

                              1

---- EOF - GMER 2.1 ----