| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: Facebook-Malware, brwlrg113.zWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
 |
28.06.2014, 14:03
| #16 |
| /// TB-Ausbilder /// Anleitungs-Guru  |  Facebook-Malware, brwlrg113.z Das liegt, sag ich mal, an yahoo. Die Seite zickt mei mir auch rum. Zum Email abrufen würde ich einfach Thunderbird nehmen.  Mach bitte mal noch frische Logs. Damit ich Dich clean gehen lassen kann...  Schritt 1   Bitte starte FRST erneut, und drücke auf Scan. Bitte poste mir den Inhalt des Logs.
__________________ Gruß deeprybka  Lob, Kritik, Wünsche? Spende fürs trojaner-board? _______________________________________________ „Neminem laede, immo omnes, quantum potes, iuva.“ Arthur Schopenhauer |
|
28.06.2014, 15:51
| #17 |
 | Facebook-Malware, brwlrg113.zCode:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 28-06-2014 02
Ran by SergejSh at 2014-06-28 16:49:36
Running from C:\Users\SergejSh\Desktop
Boot Mode: Normal
==========================================================
==================== Security Center ========================
AV: Avira Desktop (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avira Desktop (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
Adobe Reader XI (11.0.07) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.07 - Adobe Systems Incorporated)
AMD Accelerated Video Transcoding (Version: 13.20.100.31119 - Advanced Micro Devices, Inc.) Hidden
AMD Catalyst Control Center (x32 Version: 2013.1119.2211.39813 - Ihr Firmenname) Hidden
AMD Catalyst Install Manager (HKLM\...\{37ED2328-4288-6720-9D34-ECD5709B4F21}) (Version: 8.0.915.0 - Advanced Micro Devices, Inc.)
AMD Fuel (Version: 2013.1119.2211.39813 - Ihr Firmenname) Hidden
AMD Start Now (Version: 2013.1119.2211.39813 - Advanced Micro Devices, Inc.) Hidden
Avira Free Antivirus (HKLM-x32\...\Avira AntiVir Desktop) (Version: 14.0.5.444 - Avira)
Avira Savings Advisor (HKLM-x32\...\{A18A516C-AA41-46A9-92DB-60208917E442}) (Version: 1.5.14 - Avira) <==== ATTENTION
Catalyst Control Center - Branding (x32 Version: 1.00.0000 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Graphics Previews Common (x32 Version: 2013.1119.2211.39813 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center InstallProxy (x32 Version: 2013.1119.2211.39813 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Localization All (x32 Version: 2013.1119.2211.39813 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Standard (x32 Version: 2013.1119.2210.39813 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Traditional (x32 Version: 2013.1119.2210.39813 - Advanced Micro Devices, Inc.) Hidden
CCC Help Czech (x32 Version: 2013.1119.2210.39813 - Advanced Micro Devices, Inc.) Hidden
CCC Help Danish (x32 Version: 2013.1119.2210.39813 - Advanced Micro Devices, Inc.) Hidden
CCC Help Dutch (x32 Version: 2013.1119.2210.39813 - Advanced Micro Devices, Inc.) Hidden
CCC Help English (x32 Version: 2013.1119.2210.39813 - Advanced Micro Devices, Inc.) Hidden
CCC Help Finnish (x32 Version: 2013.1119.2210.39813 - Advanced Micro Devices, Inc.) Hidden
CCC Help French (x32 Version: 2013.1119.2210.39813 - Advanced Micro Devices, Inc.) Hidden
CCC Help German (x32 Version: 2013.1119.2210.39813 - Advanced Micro Devices, Inc.) Hidden
CCC Help Greek (x32 Version: 2013.1119.2210.39813 - Advanced Micro Devices, Inc.) Hidden
CCC Help Hungarian (x32 Version: 2013.1119.2210.39813 - Advanced Micro Devices, Inc.) Hidden
CCC Help Italian (x32 Version: 2013.1119.2210.39813 - Advanced Micro Devices, Inc.) Hidden
CCC Help Japanese (x32 Version: 2013.1119.2210.39813 - Advanced Micro Devices, Inc.) Hidden
CCC Help Korean (x32 Version: 2013.1119.2210.39813 - Advanced Micro Devices, Inc.) Hidden
CCC Help Norwegian (x32 Version: 2013.1119.2210.39813 - Advanced Micro Devices, Inc.) Hidden
CCC Help Polish (x32 Version: 2013.1119.2210.39813 - Advanced Micro Devices, Inc.) Hidden
CCC Help Portuguese (x32 Version: 2013.1119.2210.39813 - Advanced Micro Devices, Inc.) Hidden
CCC Help Russian (x32 Version: 2013.1119.2210.39813 - Advanced Micro Devices, Inc.) Hidden
CCC Help Spanish (x32 Version: 2013.1119.2210.39813 - Advanced Micro Devices, Inc.) Hidden
CCC Help Swedish (x32 Version: 2013.1119.2210.39813 - Advanced Micro Devices, Inc.) Hidden
CCC Help Thai (x32 Version: 2013.1119.2210.39813 - Advanced Micro Devices, Inc.) Hidden
CCC Help Turkish (x32 Version: 2013.1119.2210.39813 - Advanced Micro Devices, Inc.) Hidden
ccc-utility64 (Version: 2013.1119.2211.39813 - Advanced Micro Devices, Inc.) Hidden
DisplayLink Core Software (HKLM\...\{E4F639D7-769C-4E9E-8CD7-12D903E99BFB}) (Version: 7.5.54018.0 - DisplayLink Corp.)
Dropbox (HKCU\...\Dropbox) (Version: 2.8.3 - Dropbox, Inc.)
ESET Online Scanner v3 (HKLM-x32\...\ESET Online Scanner) (Version: - )
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 35.0.1916.153 - Google Inc.)
Google Update Helper (x32 Version: 1.3.24.15 - Google Inc.) Hidden
HP AC Power Control (HKLM\...\{F819C151-FFEE-4F01-BE68-0D1F76574F44}) (Version: 1.0.6 - Hewlett-Packard)
HP Port Replicator Software Installer (HKLM-x32\...\{6313BCDF-1109-4682-A19D-413189817787}) (Version: 1.3.35 - HP)
HP USB Port Replicator (HKLM\...\{77F90DBD-CDF9-47E0-8274-E94DD45F1BF7}) (Version: 7.5.54081.0 - Hewlett-Packard)
HP Utility Center (HKLM\...\{D2CC454E-69D8-4640-B9EE-5A272DF3404C}) (Version: 2.4.4 - Hewlett-Packard Company)
HP Wireless Button Driver (HKLM-x32\...\{30B2D1D8-0A07-4B71-9553-0710C5D31E35}) (Version: 1.1.2.1 - Hewlett-Packard Company)
Malwarebytes Anti-Malware Version 2.0.2.1012 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.2.1012 - Malwarebytes Corporation)
Microsoft Office 365 ProPlus - de-de (HKLM\...\O365ProPlusRetail - de-de) (Version: 15.0.4623.1003 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319 (HKLM\...\{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319 (HKLM-x32\...\{196BB40D-1578-3D01-B289-BEFC77A11A1E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.50727 (Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.50727 (Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.50727 (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.50727 (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
OEM Application Profile (HKLM-x32\...\{70D5F822-F4C4-33D9-7EEC-2A4AF4EA7BDC}) (Version: 1.00.0000 - Ihr Firmenname)
Office 15 Click-to-Run Extensibility Component (Version: 15.0.4623.1003 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Licensing Component (Version: 15.0.4623.1003 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Localization Component (Version: 15.0.4623.1003 - Microsoft Corporation) Hidden
PDF24 Creator 6.5.0 (HKLM-x32\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version: - PDF24.org)
Qualcomm Atheros Driver Installation Program (HKLM-x32\...\{C3A32068-8AB1-4327-BB16-BED9C6219DC7}) (Version: 10.0 - Qualcomm Atheros)
Ralink Bluetooth Stack (HKLM\...\{49AA3AFC-37F9-94C8-BFC6-43E7DCE88C77}) (Version: 11.0.752.0 - Mediatek)
Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 6.2.9200.29070 - Realtek Semiconductor Corp.)
Realtek Ethernet Controller All-In-One Windows Driver (HKLM-x32\...\{F7E7F0CB-AA41-4D5A-B6F2-8E6738EB063F}) (Version: 8.20.815.2013 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7083 - Realtek Semiconductor Corp.)
Spotify (HKCU\...\Spotify) (Version: 0.9.10.21.g22fbdb39 - Spotify AB)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 17.0.15.0 - Synaptics Incorporated)
==================== Restore Points =========================
24-06-2014 10:30:39 Windows Update
==================== Hosts content: ==========================
2013-08-22 15:25 - 2013-08-22 15:25 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
==================== Scheduled Tasks (whitelisted) =============
Task: {05293577-D647-4185-B859-C94839A0B2E3} - System32\Tasks\Microsoft\Windows\SettingSync\NetworkStateChangeTask
Task: {0B545118-B563-42FC-8D07-B78F602FCF34} - System32\Tasks\Microsoft\Windows\WS\WSRefreshBannedAppsListTask => Rundll32.exe WSClient.dll,RefreshBannedAppsList
Task: {1DE0CA86-2FC0-42EE-B3E5-675AE49C6571} - System32\Tasks\Microsoft\Windows\DiskFootprint\Diagnostics
Task: {2085BF56-520D-4951-B7C0-DF34AF90CC6A} - System32\Tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask => Rundll32.exe sysmain.dll,PfSvWsSwapAssessmentTask
Task: {2559CBD2-D54B-411A-84C9-E2A689E2115A} - System32\Tasks\Microsoft\Windows\DiskCleanup\SilentCleanup => C:\Windows\system32\cleanmgr.exe [2014-03-18] (Microsoft Corporation)
Task: {2C9C0C6C-2A74-46F2-858A-4389D253EAD0} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCachePrepopulate
Task: {352E6CA0-7314-4DF4-89C4-682368D80D57} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join => C:\Windows\System32\AutoWorkplace.exe [2013-08-22] (Microsoft Corporation)
Task: {3650CB0E-9D60-4D24-910F-A90B4E4704B0} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesCommonx64\Microsoft Shared\OFFICE15\OLicenseHeartbeat.exe [2014-06-22] (Microsoft Corporation)
Task: {3B6D8A73-F20B-4C93-B8FB-56A154F172D2} - System32\Tasks\Microsoft\Windows\Time Zone\SynchronizeTimeZone => C:\Windows\system32\tzsync.exe [2013-08-22] (Microsoft Corporation)
Task: {49754026-21E1-41FC-94FD-727AFE414FE7} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCacheRebalance
Task: {6AA91E8C-DDBD-4979-8464-4062F7681A19} - System32\Tasks\Microsoft\Windows\Plug and Play\Plug and Play Cleanup
Task: {6DFCB649-0769-4F83-BB10-F60F235F6D3D} - System32\Tasks\Microsoft\Windows\SkyDrive\Idle Sync Maintenance Task
Task: {73B1B253-CE67-4501-AE1A-377DD1D68B65} - System32\Tasks\Microsoft\Windows\Application Experience\StartupAppTask => Rundll32.exe Startupscan.dll,SusRunTask
Task: {77F1D869-6E65-4079-A2A0-E2023408EF97} - System32\Tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState => Rundll32.exe Windows.Storage.ApplicationData.dll,CleanupTemporaryState
Task: {7BB1EC61-3140-48A7-9245-3DD56ECC42BA} - System32\Tasks\Microsoft\Windows\WOF\WIM-Hash-Management
Task: {872D0E53-FD2E-41E3-B431-698AF82882CE} - System32\Tasks\Microsoft\Windows\SkyDrive\Routine Maintenance Task
Task: {8CC813C9-712A-41EF-9512-B233444FC669} - System32\Tasks\Microsoft\Windows\AppxDeploymentClient\Pre-staged app cleanup => Rundll32.exe %windir%\system32\AppxDeploymentClient.dll,AppxPreStageCleanupRunTask
Task: {8E088B26-23A1-4E07-858A-A1BDD9516358} - System32\Tasks\aviraSWU => Cscript.exe "C:\Program Files (x86)\avira\Internet Explorer\swu.vbs"
Task: {9FF4C139-5234-410C-B7FA-23EE2FD2AB53} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Maintenance Work
Task: {A5BA4CA1-BFA1-4837-81B4-27DD1F71C78E} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office 15\root\Office15\msoia.exe [2014-06-22] (Microsoft Corporation)
Task: {A9AE5F29-FE76-4ECF-BD97-C28152FDC442} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-06-20] (Google Inc.)
Task: {BB1CE4BB-F10A-4486-B4BE-A97E0D9FC305} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-06-20] (Google Inc.)
Task: {C9C225E8-8211-4747-8279-7126BDE72043} - System32\Tasks\Microsoft\Windows\WindowsUpdate\Scheduled Start With Network => Sc.exe start wuauserv
Task: {CA7E968C-6FB8-4B8B-8B44-DE31DB59C55E} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2014-05-13] (Microsoft Corporation)
Task: {CAFBAB3B-51B1-450F-ABFF-27BBF49C106F} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\Windows\system32\MRT.exe [2014-06-01] (Microsoft Corporation)
Task: {CFD7C21A-808B-487B-A6EC-8A10E44E8360} - System32\Tasks\Microsoft\Windows\SettingSync\BackupTask
Task: {D4F1838F-B2D1-4B45-AEF2-FB800DF0E0ED} - System32\Tasks\Microsoft\Windows\WOF\WIM-Hash-Validation
Task: {D58C17CD-9543-4B2D-A253-13D22AC20343} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office 15\root\Office15\msoia.exe [2014-06-22] (Microsoft Corporation)
Task: {D88FEC9E-A82A-46F9-87E2-B6B97B301C1A} - System32\Tasks\Microsoft\Windows\WS\License Validation => Rundll32.exe WSClient.dll,WSpTLR licensing
Task: {DA46820F-FF8A-4B5E-A6B2-B12185DCFFFB} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Logon Synchronization
Task: {E6D378FA-E068-4BCB-80DE-56D43A249507} - System32\Tasks\Microsoft\Windows\RecoveryEnvironment\VerifyWinRE
Task: {FD824BF4-1020-48D6-8C7C-D76757600745} - System32\Tasks\Microsoft\Windows\Shell\FamilySafetyUpload
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
==================== Loaded Modules (whitelisted) =============
2013-11-19 22:15 - 2013-11-19 22:15 - 00099328 _____ () c:\Program Files\ATI Technologies\ATI.ACE\A4\AdaptiveSleepService.exe
2013-11-19 22:14 - 2013-11-19 22:14 - 00127488 _____ () c:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Container.Wlan.dll
2014-06-22 16:10 - 2013-10-31 18:13 - 00102568 _____ () C:\Program Files\Microsoft Office 15\ClientX64\ApiClient.dll
2014-06-22 16:10 - 2014-06-22 16:10 - 00393384 _____ () C:\Program Files\Microsoft Office 15\Root\Office15\AppVIsvStream64.dll
2014-06-28 11:02 - 2014-06-28 11:02 - 00043008 _____ () c:\users\sergejsh\appdata\local\temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpb8zfsk.dll
2014-06-22 16:24 - 2013-10-19 01:55 - 25100288 _____ () C:\Users\SergejSh\AppData\Roaming\Dropbox\bin\libcef.dll
2014-06-20 13:45 - 2014-06-05 15:58 - 00716616 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.153\libglesv2.dll
2014-06-20 13:45 - 2014-06-05 15:58 - 00126280 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.153\libegl.dll
2014-06-20 13:45 - 2014-06-05 15:58 - 04217672 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.153\pdf.dll
2014-06-20 13:45 - 2014-06-05 15:58 - 00414536 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.153\ppGoogleNaClPluginChrome.dll
2014-06-20 13:45 - 2014-06-05 15:58 - 01732424 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.153\ffmpegsumo.dll
2014-06-22 16:14 - 2014-06-04 10:08 - 00072232 _____ () C:\Program Files (x86)\PDF24\zlib.dll
2014-06-22 16:14 - 2014-06-04 10:08 - 00048680 _____ () C:\Program Files (x86)\PDF24\OperationUI.dll
==================== Safe Mode (whitelisted) ===================
==================== EXE Association (whitelisted) =============
==================== MSCONFIG/TASK MANAGER disabled items =========
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (06/28/2014 03:17:59 AM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_a9efdb8b01377ea7.manifest.
Error: (06/28/2014 02:01:24 AM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_a9efdb8b01377ea7.manifest.
Error: (06/28/2014 02:01:20 AM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_a9efdb8b01377ea7.manifest.
Error: (06/28/2014 02:01:16 AM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_a9efdb8b01377ea7.manifest.
Error: (06/28/2014 02:01:16 AM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_a9efdb8b01377ea7.manifest.
Error: (06/28/2014 02:01:13 AM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_a9efdb8b01377ea7.manifest.
Error: (06/25/2014 11:05:41 AM) (Source: Desktop Window Manager) (EventID: 9020) (User: )
Description: Der Desktopfenster-Manager hat einen schwerwiegenden Fehler (0x8898008d) festgestellt.
Error: (06/20/2014 00:14:29 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: Fehler bei der Lizenzaktivierung (slui.exe). Fehlercode:
hr=0x80072EE7
Befehlszeilenargumente:
RuleId=31e71c49-8da7-4a2f-ad92-45d98a1c79ba;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=b080aea2-e6c5-4b22-838e-fa4a21c931e3;NotificationInterval=1440;Trigger=UserLogon;SessionId=1
Error: (06/20/2014 00:14:29 PM) (Source: Software Protection Platform Service) (EventID: 1014) (User: )
Description: Fehler beim Erwerb der Endbenutzerlizenz. hr=0x80072EE7
SKU-ID=b080aea2-e6c5-4b22-838e-fa4a21c931e3
Error: (06/20/2014 00:14:29 PM) (Source: Software Protection Platform Service) (EventID: 8200) (User: )
Description: Lizenzerwerb-Fehlerdetails.
hr=0x80072EE7
System errors:
=============
Error: (06/28/2014 04:43:31 PM) (Source: DCOM) (EventID: 10010) (User: Sergej)
Description: {BF6C1E47-86EC-4194-9CE5-13C15DCB2001}
Error: (06/28/2014 04:43:01 PM) (Source: DCOM) (EventID: 10010) (User: Sergej)
Description: {1B1F472E-3221-4826-97DB-2C2324D389AE}
Error: (06/28/2014 03:54:05 PM) (Source: DCOM) (EventID: 10010) (User: Sergej)
Description: {1B1F472E-3221-4826-97DB-2C2324D389AE}
Error: (06/28/2014 03:53:35 PM) (Source: DCOM) (EventID: 10010) (User: Sergej)
Description: {BF6C1E47-86EC-4194-9CE5-13C15DCB2001}
Error: (06/28/2014 02:09:08 PM) (Source: DCOM) (EventID: 10010) (User: Sergej)
Description: {BF6C1E47-86EC-4194-9CE5-13C15DCB2001}
Error: (06/28/2014 02:08:37 PM) (Source: DCOM) (EventID: 10010) (User: Sergej)
Description: {1B1F472E-3221-4826-97DB-2C2324D389AE}
Error: (06/28/2014 11:51:38 AM) (Source: DCOM) (EventID: 10010) (User: Sergej)
Description: {BF6C1E47-86EC-4194-9CE5-13C15DCB2001}
Error: (06/28/2014 11:51:08 AM) (Source: DCOM) (EventID: 10010) (User: Sergej)
Description: {1B1F472E-3221-4826-97DB-2C2324D389AE}
Error: (06/28/2014 11:13:39 AM) (Source: DCOM) (EventID: 10010) (User: Sergej)
Description: {BF6C1E47-86EC-4194-9CE5-13C15DCB2001}
Error: (06/28/2014 11:13:09 AM) (Source: DCOM) (EventID: 10010) (User: Sergej)
Description: {1B1F472E-3221-4826-97DB-2C2324D389AE}
Microsoft Office Sessions:
=========================
Error: (06/28/2014 03:17:59 AM) (Source: SideBySide) (EventID: 78) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_a9efdb8b01377ea7.manifestC:\Program Files (x86)\ESET\ESET Online Scanner\ESETSmartInstaller.exe
Error: (06/28/2014 02:01:24 AM) (Source: SideBySide) (EventID: 78) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_a9efdb8b01377ea7.manifestC:\Users\SergejSh\Desktop\esetsmartinstaller_deu.exe
Error: (06/28/2014 02:01:20 AM) (Source: SideBySide) (EventID: 78) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_a9efdb8b01377ea7.manifestC:\Users\SergejSh\Desktop\esetsmartinstaller_deu.exe
Error: (06/28/2014 02:01:16 AM) (Source: SideBySide) (EventID: 78) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_a9efdb8b01377ea7.manifestC:\Users\SergejSh\Desktop\esetsmartinstaller_deu.exe
Error: (06/28/2014 02:01:16 AM) (Source: SideBySide) (EventID: 78) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_a9efdb8b01377ea7.manifestC:\Users\SergejSh\Desktop\esetsmartinstaller_deu.exe
Error: (06/28/2014 02:01:13 AM) (Source: SideBySide) (EventID: 78) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_a9efdb8b01377ea7.manifestC:\Users\SergejSh\Desktop\esetsmartinstaller_deu.exe
Error: (06/25/2014 11:05:41 AM) (Source: Desktop Window Manager) (EventID: 9020) (User: )
Description: 0x8898008d
Error: (06/20/2014 00:14:29 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: hr=0x80072EE7RuleId=31e71c49-8da7-4a2f-ad92-45d98a1c79ba;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=b080aea2-e6c5-4b22-838e-fa4a21c931e3;NotificationInterval=1440;Trigger=UserLogon;SessionId=1
Error: (06/20/2014 00:14:29 PM) (Source: Software Protection Platform Service) (EventID: 1014) (User: )
Description: hr=0x80072EE7b080aea2-e6c5-4b22-838e-fa4a21c931e3
Error: (06/20/2014 00:14:29 PM) (Source: Software Protection Platform Service) (EventID: 8200) (User: )
Description: hr=0x80072EE700010001(0x00000000, 12:14:29:553 - https://activation-v2.sls.microsoft.com/SLActivateProduct/SLActivateProduct.asmx?configextension=Retail)
00020001(0x00000000, 12:14:29:569)
00030001(0x00000000, 12:14:29:569 - https://activation-v2.sls.microsoft.com)
00030002(0x00000000, 12:14:29:569 - 0)
00040001(0x00000000, 12:14:29:569 - https://activation-v2.sls.microsoft.com)
00040002(0x00000000, 12:14:29:569 - 1, <NULL>, <NULL>, <NULL>)
00050002(0x80072F94, 12:14:29:584 - 0, 1)
00040006(0x00000001, 12:14:29:584 - 0, https://activation-v2.sls.microsoft.com, <N/A>, <N/A>)
00020005(0x00000000, 12:14:29:584 - 0)
00020008(0x80072EE7, 12:14:29:600 - SOAPAction: "hxxp://microsoft.com/SL/ProductActivationService/IssueToken"
Content-Type: text/xml; charset=utf-8
, <soap:Envelope xmlns:soap="hxxp://schemas.xmlsoap.org/soap/envelope/" xmlns:xsi="hxxp://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="hxxp://www.w3.org/2001/XMLSchema" xmlns:soapenc="hxxp://schemas.xmlsoap.org/soap/encoding/"><soap:Body><RequestSecurityToken xmlns="hxxp://schemas.xmlsoap.org/ws/2004/04/security/trust"><TokenType>ProductActivation</TokenType><RequestType>hxxp://schemas.xmlsoap.org/ws/2004/04/security/trust/Issue</RequestType><UseKey><Values xmlns:q1="hxxp://schemas.xmlsoap.org/ws/2004/04/security/trust" soapenc:arrayType="q1:TokenEntry[1]"><TokenEntry><Name>PublishLicense</Name><Value>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</Value></TokenEntry></Values></UseKey><Claims><Values xmlns:q1="hxxp://schemas.xmlsoap.org/ws/2004/04/security/trust" soapenc:arrayType="q1:TokenEntry[17]"><TokenEntry><Name>SessionKey</Name><Value>VBna9DD7iK0jUcwT87LXXo9fzcw9PmAtdZ1RHJie7ERI9Z1J1G8c+H8zqAvPnVun8Y3nudKfZ3UNaIOD37O19N9vodQkA/914EpPAixXEIOCjYHcG7uQHZ80sbhE0//ZPZfqytDaZzzDnnesIwlwMJl1FbtGr5cIuAOv7tw2KfIZm+VVh3hz2HIS4hqkkBle43n/dI8B3lkG2+hxctBO5SgIPovYKMN3K7wOxG/peh0qNb7E9CAWE/ghFX56sAjUN/sbZvzpV2eL8pEm1E8IEdekIVGOGz9kLJYmLOwT1b+07rNMuhptElHjVsnVtPWqgHWNkAWztQw70GlzTpyPjA==</Value></TokenEntry><TokenEntry><Name>BindingType</Name><Value>gtNtXXi81J1KJR/vPciOsXb7d6/Jg9SD4r7wUI6wKPU=</Value></TokenEntry><TokenEntry><Name>Binding</Name><Value>DDdpVoOdK4JU97UbUF+xIOQzqW+DoLxu9YK7KIp9vqQhcJfamF9sSbvOIxCyUNsS9MdbNtEcy+HZIQcOnj/VdYyLJWhgO/WcrPWOBmojKn0=</Value></TokenEntry><TokenEntry><Name>ProductKey</Name><Value>1h8MiscdGTlLSYa2HFUgH97/d9nPRRFKCmXya8rXlnQ=</Value></TokenEntry><TokenEntry><Name>ProductKeyType</Name><Value>gtNtXXi81J1KJR/vPciOsXFuGQqteL6Y8E4EAOR2aVY=</Value></TokenEntry><TokenEntry><Name>ProductKeyActConfigId</Name><Value>kLW2mt3ngHPEOfajE+Ycohx06MDR9ZLXxh03jOqhK0/5fgAt9kIHITCgC1IGfPYoh4dKg+J6s0sbxwXJDNOP59ir7cCMI3qLQEyC3TLbg4o=</Value></TokenEntry><TokenEntry><Name>SppSvcVersion</Name><Value>fiswnqxTtEisvizIV2bbtQ==</Value></TokenEntry><TokenEntry><Name>otherInfoPublic.licenseCategory</Name><Value>kWIX2Z7jWQEzK0gr1vTMOXdNaFe972JDbo9hUn5EA98=</Value></TokenEntry><TokenEntry><Name>otherInfoPrivate.licenseCategory</Name><Value>kWIX2Z7jWQEzK0gr1vTMOVjGcBw5X+pkpQCf+c2vlYw=</Value></TokenEntry><TokenEntry><Name>otherInfoPublic.sysprepAction</Name><Value>gE/rwNRuef/NigYV1CtA/w==</Value></TokenEntry><TokenEntry><Name>otherInfoPrivate.sysprepAction</Name><Value>gE/rwNRuef/NigYV1CtA/w==</Value></TokenEntry><TokenEntry><Name>ClientInformation</Name><Value>P3ljkAQ+QlDk5IA+twivYeMREnNY8iylBaWtmJOfYP5zogSF2OVWB/Pjl2qVpvbZ7aiT4Ouq7lRlnh724Fsa8w==</Value></TokenEntry><TokenEntry><Name>ReferralInformation</Name><Value>6vCfEPPU25Rsp6a6YZDdhFvbcPTva4GJqTkKw8q8tEZiJp4DNVTohWK8m/TTZW7vwBnSKEx4PgiTkZ4sxY4amQ==</Value></TokenEntry><TokenEntry><Name>ClientSystemTime</Name><Value>/68F6+24X3cw2w4Jed7xv+y+Y7dFoYmqLE0s2m8wvcg=</Value></TokenEntry><TokenEntry><Name>ClientSystemTimeUtc</Name><Value>/68F6+24X3cw2w4Jed7xv+y+Y7dFoYmqLE0s2m8wvcg=</Value></TokenEntry><TokenEntry><Name>otherInfoPublic.secureStoreId</Name><Value>WxR+VouLrify0OfCt69y1tcAYTQ9+knwhd2/16HTRrbbtmn+0HUAx0unKBknDESq</Value></TokenEntry><TokenEntry><Name>otherInfoPrivate.secureStoreId</Name><Value>WxR+VouLrify0OfCt69y1tcAYTQ9+knwhd2/16HTRrbbtmn+0HUAx0unKBknDESq</Value></TokenEntry></Values></Claims></RequestSecurityToken></soap:Body></soap:Envelope>)
00010002(0x80072EE7, 12:14:29:616 - <NULL>)
00010003(0x80072EE7, 12:14:29:616)
==================== Memory info ===========================
Percentage of memory in use: 55%
Total physical RAM: 3550.11 MB
Available physical RAM: 1566.11 MB
Total Pagefile: 4894.11 MB
Available Pagefile: 2278.85 MB
Total Virtual: 131072 MB
Available Virtual: 131071.84 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:98.6 GB) (Free:71.13 GB) NTFS
Drive d: () (Fixed) (Total:7.78 GB) (Free:6.55 GB) FAT32
Drive e: () (Fixed) (Total:351.56 GB) (Free:351.43 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: A11CAC6D)
Partition 1: (Not Active) - (Size=8 GB) - (Type=0B)
Partition 2: (Active) - (Size=8 GB) - (Type=0C)
Partition 3: (Not Active) - (Size=99 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=352 GB) - (Type=07 NTFS)
==================== End Of Log ============================
|
|
28.06.2014, 15:56
| #18 |
| | Facebook-Malware, brwlrg113.z FRST Logfile:
__________________FRST Logfile: FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 28-06-2014 02
Ran by SergejSh (administrator) on SERGEJ on 28-06-2014 16:48:14
Running from C:\Users\SergejSh\Desktop
Platform: Windows 8.1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(AMD) C:\Windows\System32\atiesrxx.exe
(DisplayLink Corp.) C:\Program Files\DisplayLink Core Software\DisplayLinkManager.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RTKAUDIOSERVICE64.EXE
() C:\Program Files\ATI Technologies\ATI.ACE\a4\AdaptiveSleepService.exe
(Andrea Electronics Corporation) C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(AMD) C:\Windows\System32\atieclxx.exe
(DisplayLink Corp.) C:\Program Files\DisplayLink Core Software\DisplayLinkUserAgent.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Spotify Ltd) C:\Users\SergejSh\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
(Dropbox, Inc.) C:\Users\SergejSh\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Geek Software GmbH) C:\Program Files (x86)\PDF24\pdf24.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.Reader_6.3.9654.17044_x64__8wekyb3d8bbwe\glcnd.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\root\office15\WINWORD.EXE
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\root\office15\EXCEL.EXE
(Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\WWAHost.exe
(Microsoft Corporation) C:\Windows\System32\UserAccountBroker.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Geek Software GmbH) C:\Program Files (x86)\PDF24\pdf24-Creator.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7204568 2013-11-04] (Realtek Semiconductor)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2780912 2013-09-20] (Synaptics Incorporated)
HKLM-x32\...\Run: [StartCCC] => c:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [766208 2013-11-20] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [750160 2014-06-24] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [PDFPrint] => C:\Program Files (x86)\PDF24\pdf24.exe [191528 2014-06-04] (Geek Software GmbH)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2014-05-08] (Adobe Systems Incorporated)
HKU\S-1-5-21-1673834559-152451206-4130808851-1001\...\Run: [Spotify Web Helper] => C:\Users\SergejSh\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1176632 2014-06-23] (Spotify Ltd)
HKU\S-1-5-21-1673834559-152451206-4130808851-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [Spotify Web Helper] => C:\Users\SergejSh\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1176632 2014-06-23] (Spotify Ltd)
Startup: C:\Users\SergejSh\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\SergejSh\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
ShellIconOverlayIdentifiers: SkyDrivePro1 (ErrorConflict) -> {8BA85C75-763B-4103-94EB-9470F12FE0F7} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL (Microsoft Corporation)
ShellIconOverlayIdentifiers: SkyDrivePro2 (SyncInProgress) -> {CD55129A-B1A1-438E-A425-CEBC7DC684EE} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL (Microsoft Corporation)
ShellIconOverlayIdentifiers: SkyDrivePro3 (InSync) -> {E768CD3B-BDDC-436D-9C13-E1B39CA257B1} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL (Microsoft Corporation)
ShellIconOverlayIdentifiers: DropboxExt1 -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => No File
ShellIconOverlayIdentifiers: DropboxExt2 -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => No File
ShellIconOverlayIdentifiers: DropboxExt3 -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => No File
ShellIconOverlayIdentifiers: DropboxExt4 -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => No File
ShellIconOverlayIdentifiers-x32: SkyDrivePro1 (ErrorConflict) -> {8BA85C75-763B-4103-94EB-9470F12FE0F7} => C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: SkyDrivePro2 (SyncInProgress) -> {CD55129A-B1A1-438E-A425-CEBC7DC684EE} => C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: SkyDrivePro3 (InSync) -> {E768CD3B-BDDC-436D-9C13-E1B39CA257B1} => C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: DropboxExt1 -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => No File
ShellIconOverlayIdentifiers-x32: DropboxExt2 -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => No File
ShellIconOverlayIdentifiers-x32: DropboxExt3 -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => No File
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://t.de.msn.com/
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x4F354DC4C992CF01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
BHO: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office 15\root\Office15\OCHelper.dll (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO-x32: Avira Savings Advisor BHO - {A18A516C-AA41-46A9-92DB-60208917E442} - C:\Program Files (x86)\avira\Internet Explorer\avira32.dll ()
BHO-x32: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL (Microsoft Corporation)
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Microsoft Office\Office15\MSOSB.DLL (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
FireFox:
========
FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Microsoft Office\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
Chrome:
=======
CHR HomePage:
CHR Extension: (Google Docs) - C:\Users\SergejSh\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-06-20]
CHR Extension: (Google Drive) - C:\Users\SergejSh\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-06-20]
CHR Extension: (YouTube) - C:\Users\SergejSh\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-06-20]
CHR Extension: (Adblock Plus) - C:\Users\SergejSh\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2014-06-20]
CHR Extension: (Google-Suche) - C:\Users\SergejSh\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-06-20]
CHR Extension: (AdBlock) - C:\Users\SergejSh\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2014-06-20]
CHR Extension: (Google Wallet) - C:\Users\SergejSh\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-06-20]
CHR Extension: (Google Mail) - C:\Users\SergejSh\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-06-20]
CHR HKLM-x32\...\Chrome\Extension: [cojnmaaohncijldefpkpkkakjonfmgeb] - C:\Program Files (x86)\avira\Chrome\avira-1.5.14.crx [2013-12-11]
==================== Services (Whitelisted) =================
R2 AdaptiveSleepService; c:\Program Files\ATI Technologies\ATI.ACE\A4\AdaptiveSleepService.exe [99328 2013-11-19] () [File not signed]
R2 AMD FUEL Service; c:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [344064 2013-11-19] (Advanced Micro Devices, Inc.) [File not signed]
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [430160 2014-06-24] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [430160 2014-06-24] (Avira Operations GmbH & Co. KG)
R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2279608 2014-05-21] (Microsoft Corporation)
R2 DisplayLinkService; C:\Program Files\DisplayLink Core Software\DisplayLinkManager.exe [9960240 2014-02-24] (DisplayLink Corp.)
R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [289496 2013-10-16] (Realtek Semiconductor)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347880 2014-03-24] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2014-03-24] (Microsoft Corporation)
==================== Drivers (Whitelisted) ====================
R3 AmdAS4; C:\Windows\System32\drivers\AmdAS4.sys [17504 2013-02-07] (Advanced Micro Devices, INC.)
R3 athr; C:\Windows\system32\DRIVERS\athwbx.sys [3880448 2013-11-13] (Qualcomm Atheros Communications, Inc.)
R3 AtiHDAudioService; C:\Windows\system32\drivers\AtihdWB6.sys [222720 2013-09-24] (Advanced Micro Devices)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [117712 2014-06-24] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [130584 2014-05-27] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [28600 2014-05-27] (Avira Operations GmbH & Co. KG)
R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [226304 2014-03-18] (Microsoft Corporation)
R3 RSP2STOR; C:\Windows\system32\DRIVERS\RtsP2Stor.sys [290520 2013-08-26] (Realtek Semiconductor Corp.)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [123224 2014-03-24] (Microsoft Corporation)
R3 WirelessButtonDriver; C:\Windows\System32\drivers\WirelessButtonDriver64.sys [20800 2013-07-22] (Hewlett-Packard Development Company, L.P.)
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-06-28 16:46 - 2014-06-28 16:48 - 00013587 _____ () C:\Users\SergejSh\Desktop\FRST.txt
2014-06-28 16:46 - 2014-06-28 16:46 - 00000000 ____D () C:\Users\SergejSh\Desktop\FRST-OlderVersion
2014-06-28 11:36 - 2014-06-28 11:36 - 00344064 _____ () C:\Users\SergejSh\Documents\Datenbank1.accdb
2014-06-28 02:01 - 2014-06-28 02:01 - 02347384 _____ (ESET) C:\Users\SergejSh\Desktop\esetsmartinstaller_deu.exe
2014-06-28 02:01 - 2014-06-28 02:01 - 00000000 ____D () C:\Program Files (x86)\ESET
2014-06-28 01:30 - 2014-06-28 01:34 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-06-28 01:30 - 2014-06-28 01:30 - 00001114 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-06-28 01:30 - 2014-06-28 01:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware
2014-06-28 01:30 - 2014-06-28 01:30 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-06-28 01:30 - 2014-06-28 01:30 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware
2014-06-28 01:30 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-06-28 01:30 - 2014-05-12 07:26 - 00064216 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-06-28 01:30 - 2014-05-12 07:25 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-06-28 01:28 - 2014-06-28 01:29 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\SergejSh\Desktop\mbam-setup-2.0.2.1012.exe
2014-06-26 15:56 - 2014-06-28 16:48 - 00000000 ____D () C:\FRST
2014-06-26 15:55 - 2014-06-28 16:46 - 02083328 _____ (Farbar) C:\Users\SergejSh\Desktop\FRST64.exe
2014-06-26 15:30 - 2014-06-25 13:03 - 00000030 _____ () C:\AVScanner.ini
2014-06-25 13:42 - 2014-06-25 13:42 - 00000000 ____D () C:\Users\SergejSh\Documents\Benutzerdefinierte Office-Vorlagen
2014-06-25 13:07 - 2014-06-25 13:07 - 00000000 ____D () C:\Users\SergejSh\AppData\Local\Adobe
2014-06-25 13:03 - 2014-06-25 13:03 - 00002457 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2014-06-25 13:03 - 2014-06-25 13:03 - 00000000 ____D () C:\ProgramData\McAfee
2014-06-25 13:02 - 2014-06-25 13:08 - 00000000 ____D () C:\ProgramData\Adobe
2014-06-25 13:02 - 2014-06-25 13:02 - 00000000 ____D () C:\Program Files (x86)\Adobe
2014-06-23 13:10 - 2014-06-23 15:45 - 00000000 ____D () C:\Users\SergejSh\AppData\Local\Spotify
2014-06-23 13:10 - 2014-06-23 13:10 - 00001814 _____ () C:\Users\SergejSh\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk
2014-06-23 13:09 - 2014-06-25 11:33 - 00000000 ____D () C:\Users\SergejSh\AppData\Roaming\Spotify
2014-06-23 12:35 - 2014-05-31 07:13 - 00703992 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-06-23 12:35 - 2014-05-31 07:13 - 00105464 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-06-23 12:30 - 2014-06-23 12:36 - 00000000 ___RD () C:\Windows\BrowserChoice
2014-06-22 16:26 - 2014-06-22 16:26 - 00000000 ____D () C:\Program Files\Common Files\DESIGNER
2014-06-22 16:25 - 2014-06-28 11:03 - 00000000 ___RD () C:\Users\SergejSh\Dropbox
2014-06-22 16:25 - 2014-06-28 11:03 - 00000000 ____D () C:\Users\SergejSh\AppData\Roaming\DropboxMaster
2014-06-22 16:24 - 2014-06-22 16:24 - 00000000 ____D () C:\Users\SergejSh\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-06-22 16:21 - 2014-06-28 11:03 - 00000000 ____D () C:\Users\SergejSh\AppData\Roaming\Dropbox
2014-06-22 16:18 - 2014-06-22 16:18 - 00000000 ____D () C:\Users\SergejSh\AppData\Local\PDF24
2014-06-22 16:15 - 2014-06-22 16:15 - 00000000 ____D () C:\Program Files\Microsoft Office
2014-06-22 16:14 - 2014-06-22 16:14 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDF24
2014-06-22 16:14 - 2014-06-22 16:14 - 00000000 ____D () C:\Program Files (x86)\PDF24
2014-06-22 16:12 - 2014-06-22 16:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2014-06-22 16:10 - 2014-06-22 16:10 - 00000000 ____D () C:\Program Files\Microsoft Office 15
2014-06-22 16:09 - 2014-06-22 16:09 - 01351872 _____ (Microsoft Corporation) C:\Users\SergejSh\Downloads\Setup.X64.de-de_O365ProPlusRetail_76a59357-cf4e-4b82-a30c-5762ef5e6dc9_TX_PR_.exe
2014-06-22 16:09 - 2014-06-22 16:09 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_LocationProvider_01_11_00.Wdf
2014-06-22 15:15 - 2014-06-22 15:16 - 00000000 ____D () C:\Windows\system32\MRT
2014-06-22 15:15 - 2014-06-01 17:17 - 95414520 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-06-22 14:50 - 2014-05-30 12:21 - 23414784 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-06-22 14:50 - 2014-05-30 11:45 - 02768384 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-06-22 14:50 - 2014-05-30 11:28 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-06-22 14:50 - 2014-05-30 11:20 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-06-22 14:50 - 2014-05-30 11:18 - 17271296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-06-22 14:50 - 2014-05-30 11:08 - 05782528 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-06-22 14:50 - 2014-05-30 11:06 - 00452096 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-06-22 14:50 - 2014-05-30 10:46 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-06-22 14:50 - 2014-05-30 10:44 - 00295424 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-06-22 14:50 - 2014-05-30 10:43 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-06-22 14:50 - 2014-05-30 10:38 - 02179072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-06-22 14:50 - 2014-05-30 10:35 - 00608768 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-06-22 14:50 - 2014-05-30 10:29 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-06-22 14:50 - 2014-05-30 10:27 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-06-22 14:50 - 2014-05-30 10:23 - 02040832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-06-22 14:50 - 2014-05-30 10:16 - 00368128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-06-22 14:50 - 2014-05-30 10:04 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-06-22 14:50 - 2014-05-30 10:02 - 00242688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-06-22 14:50 - 2014-05-30 09:56 - 04244992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-06-22 14:50 - 2014-05-30 09:56 - 02266112 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-06-22 14:50 - 2014-05-30 09:54 - 00526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-06-22 14:50 - 2014-05-30 09:49 - 01964544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-06-22 14:50 - 2014-05-30 09:43 - 13522944 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-06-22 14:50 - 2014-05-30 09:40 - 11725312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-06-22 14:50 - 2014-05-30 09:30 - 01398272 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-06-22 14:50 - 2014-05-30 09:21 - 01790976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-06-22 14:50 - 2014-05-30 09:15 - 01143296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-06-22 14:50 - 2014-05-30 09:13 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-06-22 14:50 - 2014-05-30 09:13 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-06-22 14:50 - 2014-02-06 13:30 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-06-22 14:50 - 2014-02-06 13:30 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-06-22 14:50 - 2014-02-06 13:07 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-06-22 14:50 - 2014-02-06 13:06 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-06-22 14:50 - 2014-02-06 12:56 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-06-22 14:50 - 2014-02-06 12:49 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-06-22 14:50 - 2014-02-06 12:48 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-06-22 14:50 - 2014-02-06 12:20 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-06-22 14:50 - 2014-02-06 12:17 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-06-22 14:50 - 2014-02-06 12:00 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-06-22 14:50 - 2014-02-06 11:52 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-06-22 14:50 - 2014-02-06 11:52 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-06-22 14:50 - 2014-02-06 11:47 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-06-22 14:50 - 2014-02-06 11:25 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-06-22 14:49 - 2014-03-20 06:19 - 01291200 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2014-06-22 14:49 - 2014-03-20 02:53 - 00950784 _____ (Microsoft Corporation) C:\Windows\system32\ReAgent.dll
2014-06-22 14:49 - 2014-03-20 02:48 - 00201216 _____ (Microsoft Corporation) C:\Windows\system32\ReInfo.dll
2014-06-22 14:49 - 2014-03-20 01:55 - 01036288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2014-06-22 14:49 - 2014-03-20 01:39 - 00800256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ReAgent.dll
2014-06-22 14:49 - 2014-03-20 01:36 - 00172544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ReInfo.dll
2014-06-22 14:49 - 2014-03-19 09:13 - 00836096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2014-06-22 14:49 - 2014-03-19 07:57 - 00621568 _____ (Microsoft Corporation) C:\Windows\system32\MDMAgent.exe
2014-06-22 14:49 - 2014-03-13 14:35 - 00157016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wof.sys
2014-06-22 14:49 - 2014-03-11 17:18 - 01015808 _____ (Microsoft Corporation) C:\Windows\system32\aclui.dll
2014-06-22 14:49 - 2014-03-11 16:28 - 00887296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aclui.dll
2014-06-22 14:49 - 2014-03-11 14:42 - 02641920 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2014-06-22 14:49 - 2014-03-11 14:35 - 02317824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2014-06-22 14:49 - 2014-03-08 17:29 - 00356848 _____ (Microsoft Corporation) C:\Windows\system32\dcomp.dll
2014-06-22 14:49 - 2014-03-08 13:34 - 01095488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll
2014-06-22 14:49 - 2014-03-08 10:33 - 00271872 _____ (Microsoft Corporation) C:\Windows\system32\spp.dll
2014-06-22 14:49 - 2014-03-08 09:53 - 01843712 _____ (Microsoft Corporation) C:\Windows\system32\Display.dll
2014-06-22 14:49 - 2014-03-08 09:47 - 00222720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spp.dll
2014-06-22 14:49 - 2014-03-08 09:12 - 01816576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Display.dll
2014-06-22 14:49 - 2014-03-08 09:04 - 00160768 _____ (Microsoft Corporation) C:\Windows\system32\AppxAllUserStore.dll
2014-06-22 14:49 - 2014-03-08 08:48 - 00252928 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentClient.dll
2014-06-22 14:49 - 2014-03-08 08:40 - 00139776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppxAllUserStore.dll
2014-06-22 14:49 - 2014-03-08 08:31 - 00222720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dcomp.dll
2014-06-22 14:49 - 2014-03-08 08:30 - 00197632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppXDeploymentClient.dll
2014-06-22 14:49 - 2014-03-08 07:41 - 01306624 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentServer.dll
2014-06-22 14:49 - 2014-03-08 07:11 - 00924160 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.dll
2014-06-22 14:49 - 2014-03-06 14:53 - 02141912 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll
2014-06-22 14:49 - 2014-03-06 14:53 - 00518552 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll
2014-06-22 14:49 - 2014-03-06 14:51 - 01557848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2014-06-22 14:49 - 2014-03-06 14:51 - 00488280 _____ (Microsoft Corporation) C:\Windows\system32\netcfgx.dll
2014-06-22 14:49 - 2014-03-06 14:51 - 00379224 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2014-06-22 14:49 - 2014-03-06 14:39 - 00212992 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll
2014-06-22 14:49 - 2014-03-06 13:19 - 00390488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netcfgx.dll
2014-06-22 14:49 - 2014-03-06 13:13 - 01779800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll
2014-06-22 14:49 - 2014-03-06 13:13 - 00406912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll
2014-06-22 14:49 - 2014-03-06 11:22 - 00134144 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dfsc.sys
2014-06-22 14:49 - 2014-03-06 08:51 - 02900992 _____ (Microsoft Corporation) C:\Windows\system32\msftedit.dll
2014-06-22 14:49 - 2014-03-06 08:39 - 02133504 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll
2014-06-22 14:49 - 2014-03-06 08:23 - 02270208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msftedit.dll
2014-06-22 14:49 - 2014-03-06 08:23 - 00186368 _____ (Microsoft Corporation) C:\Windows\system32\dafWfdProvider.dll
2014-06-22 14:49 - 2014-03-06 08:09 - 01764864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmcore.dll
2014-06-22 14:49 - 2014-03-04 14:25 - 02373784 _____ (Microsoft Corporation) C:\Windows\explorer.exe
2014-06-22 14:49 - 2014-03-04 14:14 - 00360512 _____ (Microsoft Corporation) C:\Windows\system32\mfreadwrite.dll
2014-06-22 14:49 - 2014-03-04 13:16 - 02088160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe
2014-06-22 14:49 - 2014-03-04 13:10 - 00355832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfreadwrite.dll
2014-06-22 14:49 - 2014-03-04 09:00 - 00512000 _____ (Microsoft Corporation) C:\Windows\system32\wlidprov.dll
2014-06-22 14:49 - 2014-03-04 08:32 - 00356864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlidprov.dll
2014-06-22 14:48 - 2014-03-20 05:41 - 02013016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2014-06-22 14:48 - 2014-03-20 05:41 - 00376152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\clfs.sys
2014-06-22 14:48 - 2014-03-20 05:40 - 01112536 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2014-06-22 14:48 - 2014-03-19 07:50 - 00079360 _____ (Microsoft Corporation) C:\Windows\system32\w32tm.exe
2014-06-22 14:48 - 2014-03-19 07:31 - 01656832 _____ (Microsoft Corporation) C:\Windows\system32\GdiPlus.dll
2014-06-22 14:48 - 2014-03-19 07:20 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\w32tm.exe
2014-06-22 14:48 - 2014-03-19 07:08 - 01351168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GdiPlus.dll
2014-06-22 14:48 - 2014-03-12 15:45 - 00387210 _____ () C:\Windows\system32\ApnDatabase.xml
2014-06-22 14:48 - 2014-03-08 22:40 - 00136024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wfplwfs.sys
2014-06-22 14:48 - 2014-03-08 22:38 - 01542768 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
2014-06-22 14:48 - 2014-03-08 22:35 - 00467800 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\USBHUB3.SYS
2014-06-22 14:48 - 2014-03-08 11:02 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\sxproxy.dll
2014-06-22 14:48 - 2014-03-08 10:25 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\SetNetworkLocation.dll
2014-06-22 14:48 - 2014-03-08 10:12 - 00033792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sxproxy.dll
2014-06-22 14:48 - 2014-03-08 09:03 - 00939520 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-06-22 14:48 - 2014-03-08 09:01 - 00827392 _____ (Microsoft Corporation) C:\Windows\system32\BFE.DLL
2014-06-22 14:48 - 2014-03-08 08:46 - 01063424 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2014-06-22 14:48 - 2014-03-08 08:41 - 00412672 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL
2014-06-22 14:48 - 2014-03-08 08:37 - 00755712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2014-06-22 14:48 - 2014-03-08 08:25 - 00264192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL
2014-06-22 14:48 - 2014-03-08 08:04 - 00717312 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll
2014-06-22 14:48 - 2014-03-08 07:58 - 00567296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll
2014-06-22 14:48 - 2014-03-06 16:34 - 02331000 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2014-06-22 14:48 - 2014-03-06 16:34 - 00113648 _____ (Microsoft Corporation) C:\Windows\system32\userenv.dll
2014-06-22 14:48 - 2014-03-06 13:19 - 00094016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\userenv.dll
2014-06-22 14:48 - 2014-03-06 12:46 - 01679128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
2014-06-22 14:48 - 2014-03-06 11:24 - 00111616 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys
2014-06-22 14:48 - 2014-03-06 11:24 - 00079360 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\IPMIDrv.sys
2014-06-22 14:48 - 2014-03-06 11:24 - 00033280 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\hidusb.sys
2014-06-22 14:48 - 2014-03-06 11:22 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys
2014-06-22 14:48 - 2014-03-06 11:19 - 00283648 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2014-06-22 14:48 - 2014-03-06 11:19 - 00049152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpipreg.sys
2014-06-22 14:48 - 2014-03-06 11:08 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\l2gpstore.dll
2014-06-22 14:48 - 2014-03-06 10:41 - 00115200 _____ (Microsoft Corporation) C:\Windows\system32\DevPropMgr.dll
2014-06-22 14:48 - 2014-03-06 10:38 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll
2014-06-22 14:48 - 2014-03-06 10:10 - 00058368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\l2gpstore.dll
2014-06-22 14:48 - 2014-03-06 10:00 - 00247296 _____ (Microsoft Corporation) C:\Windows\system32\SensorsApi.dll
2014-06-22 14:48 - 2014-03-06 09:46 - 00085504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\davclnt.dll
2014-06-22 14:48 - 2014-03-06 09:16 - 00171008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SensorsApi.dll
2014-06-22 14:48 - 2014-03-06 09:02 - 00834560 _____ (Microsoft Corporation) C:\Windows\system32\netlogon.dll
2014-06-22 14:48 - 2014-03-06 08:31 - 02479616 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll
2014-06-22 14:48 - 2014-03-06 08:29 - 00688640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netlogon.dll
2014-06-22 14:48 - 2014-03-06 08:27 - 00274944 _____ (Microsoft Corporation) C:\Windows\system32\WsmWmiPl.dll
2014-06-22 14:48 - 2014-03-06 08:24 - 00462336 _____ (Microsoft Corporation) C:\Windows\system32\wlangpui.dll
2014-06-22 14:48 - 2014-03-06 08:21 - 00291840 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Sensors.dll
2014-06-22 14:48 - 2014-03-06 08:13 - 00298496 _____ (Microsoft Corporation) C:\Windows\system32\WSDMon.dll
2014-06-22 14:48 - 2014-03-06 08:11 - 02030080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmSvc.dll
2014-06-22 14:48 - 2014-03-06 08:06 - 00386560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlangpui.dll
2014-06-22 14:48 - 2014-03-06 08:04 - 00226304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Sensors.dll
2014-06-22 14:48 - 2014-03-06 08:01 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Scanners.dll
2014-06-22 14:48 - 2014-03-06 07:51 - 00151040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Scanners.dll
2014-06-22 14:48 - 2014-03-06 07:47 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\SessEnv.dll
2014-06-22 14:48 - 2014-03-06 07:42 - 00280576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SessEnv.dll
2014-06-22 14:48 - 2014-03-04 09:16 - 00655360 _____ (Microsoft Corporation) C:\Windows\system32\dnsapi.dll
2014-06-22 14:48 - 2014-03-04 09:13 - 00254464 _____ (Microsoft Corporation) C:\Windows\system32\dnsrslvr.dll
2014-06-22 14:48 - 2014-03-04 09:08 - 00299008 _____ (Microsoft Corporation) C:\Windows\system32\pdh.dll
2014-06-22 14:48 - 2014-03-04 08:56 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RMapi.dll
2014-06-22 14:48 - 2014-03-04 08:50 - 00220160 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll
2014-06-22 14:48 - 2014-03-04 08:42 - 00494592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnsapi.dll
2014-06-22 14:48 - 2014-03-04 08:39 - 00254976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pdh.dll
2014-06-22 14:48 - 2014-03-04 08:15 - 00542208 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Graphics.Printing.dll
2014-06-22 14:48 - 2014-03-04 08:05 - 00402432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Graphics.Printing.dll
2014-06-22 14:48 - 2014-03-04 08:03 - 00669696 _____ (Microsoft Corporation) C:\Windows\system32\rasapi32.dll
2014-06-22 14:48 - 2014-03-04 08:03 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\CredentialMigrationHandler.dll
2014-06-22 14:48 - 2014-03-04 07:54 - 00027136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CredentialMigrationHandler.dll
2014-06-22 14:48 - 2014-03-04 07:52 - 00605184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rasapi32.dll
2014-06-22 14:48 - 2013-12-24 01:28 - 00262656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LocationApi.dll
2014-06-22 14:48 - 2013-12-24 01:26 - 00325632 _____ (Microsoft Corporation) C:\Windows\system32\LocationApi.dll
2014-06-22 14:46 - 2014-05-05 06:02 - 03360256 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2014-06-22 14:45 - 2014-05-10 05:46 - 02151424 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-06-22 14:45 - 2014-05-10 05:22 - 01312256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2014-06-22 14:45 - 2014-05-09 01:06 - 00295424 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ks.sys
2014-06-22 14:45 - 2014-05-03 09:14 - 00079872 _____ (Microsoft Corporation) C:\Windows\system32\WSReset.exe
2014-06-22 14:45 - 2014-05-03 06:21 - 00249344 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2014-06-22 14:45 - 2014-05-03 06:07 - 00189952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2014-06-22 14:45 - 2014-05-03 05:41 - 00921088 _____ (Microsoft Corporation) C:\Windows\system32\WSShared.dll
2014-06-22 14:45 - 2014-05-03 05:38 - 00754688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSShared.dll
2014-06-22 14:45 - 2014-04-30 13:16 - 01336648 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-06-22 14:45 - 2014-04-30 05:51 - 01064448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2014-06-22 14:45 - 2014-04-09 00:46 - 00086688 _____ (Microsoft Corporation) C:\Windows\system32\mrt_map.dll
2014-06-22 14:45 - 2014-04-09 00:46 - 00028320 _____ (Microsoft Corporation) C:\Windows\system32\mrt100.dll
2014-06-22 14:45 - 2014-04-08 20:54 - 00080032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mrt_map.dll
2014-06-22 14:45 - 2014-04-08 20:54 - 00026784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mrt100.dll
2014-06-22 14:45 - 2014-04-03 09:59 - 02518872 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2014-06-22 14:45 - 2014-04-03 09:59 - 00428888 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2014-06-22 14:45 - 2014-03-24 04:30 - 00257880 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdFilter.sys
2014-06-22 14:45 - 2014-03-24 04:30 - 00123224 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdNisDrv.sys
2014-06-22 14:45 - 2014-03-24 04:27 - 00035856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdBoot.sys
2014-06-22 14:45 - 2014-03-13 09:42 - 00308224 _____ (Microsoft Corporation) C:\Windows\system32\wusa.exe
2014-06-22 14:45 - 2014-03-13 08:51 - 00305152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wusa.exe
2014-06-22 14:44 - 2014-04-11 12:03 - 00555736 _____ (Microsoft Corporation) C:\Windows\system32\twinapi.appcore.dll
2014-06-22 14:44 - 2014-04-11 12:03 - 00054776 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2014-06-22 14:44 - 2014-04-11 10:25 - 00419928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinapi.appcore.dll
2014-06-22 14:44 - 2014-04-11 08:04 - 00056320 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2014-06-22 14:44 - 2014-04-11 07:22 - 00025088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2014-06-22 14:44 - 2014-04-11 05:54 - 00201728 _____ (Microsoft Corporation) C:\Windows\system32\ubpm.dll
2014-06-22 14:44 - 2014-04-11 05:06 - 00031232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2014-06-22 14:44 - 2014-04-11 05:05 - 00123904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2014-06-22 14:44 - 2014-04-11 05:02 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2014-06-22 14:44 - 2014-04-11 05:01 - 00137728 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2014-06-22 14:44 - 2014-04-11 05:00 - 00080896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2014-06-22 14:44 - 2014-04-11 04:59 - 00666624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2014-06-22 14:44 - 2014-04-11 04:57 - 00190976 _____ (Microsoft Corporation) C:\Windows\system32\storewuauth.dll
2014-06-22 14:44 - 2014-04-11 04:56 - 00381440 _____ (Microsoft Corporation) C:\Windows\system32\WUSettingsProvider.dll
2014-06-22 14:44 - 2014-04-11 04:55 - 00093696 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2014-06-22 14:44 - 2014-04-11 04:53 - 00827392 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2014-06-22 14:44 - 2014-04-11 04:52 - 03464192 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2014-06-22 14:44 - 2014-04-11 04:46 - 01705472 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2014-06-22 14:44 - 2014-04-11 04:36 - 00828928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.appcore.dll
2014-06-22 14:44 - 2014-04-11 04:29 - 01054208 _____ (Microsoft Corporation) C:\Windows\system32\twinui.appcore.dll
2014-06-22 14:43 - 2014-04-18 11:32 - 13287936 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll
2014-06-22 14:43 - 2014-04-18 10:09 - 08652800 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Search.dll
2014-06-22 14:43 - 2014-04-18 09:49 - 05833216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Search.dll
2014-06-22 14:43 - 2014-04-06 18:31 - 21268952 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2014-06-22 14:43 - 2014-04-06 18:20 - 02140888 _____ (Microsoft Corporation) C:\Windows\system32\mfcore.dll
2014-06-22 14:43 - 2014-04-06 18:20 - 00765408 _____ (Microsoft Corporation) C:\Windows\system32\mfmpeg2srcsnk.dll
2014-06-22 14:43 - 2014-04-06 17:22 - 18755672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2014-06-22 14:43 - 2014-04-06 16:10 - 04190720 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-06-22 14:43 - 2014-04-06 13:55 - 16872448 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.dll
2014-06-22 14:43 - 2014-04-06 13:54 - 12711424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.dll
2014-06-22 14:43 - 2014-04-03 10:12 - 02124840 _____ (Microsoft Corporation) C:\Windows\system32\d3d9.dll
2014-06-22 14:43 - 2014-04-03 05:53 - 01797896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d9.dll
2014-06-22 14:43 - 2014-04-03 04:53 - 04269056 _____ (Microsoft Corporation) C:\Windows\system32\SyncEngine.dll
2014-06-22 14:43 - 2014-03-31 00:54 - 01308160 _____ (Microsoft Corporation) C:\Windows\system32\gpsvc.dll
2014-06-22 14:43 - 2014-03-20 02:44 - 06645248 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2014-06-22 14:43 - 2014-03-20 01:33 - 05774848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2014-06-22 14:43 - 2014-03-19 07:02 - 01527296 _____ (Microsoft Corporation) C:\Windows\system32\wlansvc.dll
2014-06-22 14:43 - 2014-03-19 06:18 - 02688000 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers.dll
2014-06-22 14:43 - 2014-03-18 07:00 - 07173120 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Data.Pdf.dll
2014-06-22 14:43 - 2014-03-18 06:52 - 05104640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Data.Pdf.dll
2014-06-22 14:42 - 2014-05-19 08:31 - 00057856 _____ (Microsoft Corporation) C:\Windows\system32\drvcfg.exe
2014-06-22 14:42 - 2014-05-19 08:21 - 00110592 _____ (Microsoft Corporation) C:\Windows\system32\drvinst.exe
2014-06-22 14:42 - 2014-05-19 07:23 - 00098816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drvinst.exe
2014-06-22 14:42 - 2014-05-01 15:31 - 03048904 _____ (Microsoft Corporation) C:\Windows\system32\WpcMon.exe
2014-06-22 14:42 - 2014-05-01 15:31 - 00055328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wpcfltr.sys
2014-06-22 14:42 - 2014-05-01 09:14 - 03118080 _____ (Microsoft Corporation) C:\Windows\system32\Wpc.dll
2014-06-22 14:42 - 2014-05-01 09:05 - 02861056 _____ (Microsoft Corporation) C:\Windows\system32\WpcWebSync.dll
2014-06-22 14:42 - 2014-05-01 08:51 - 02344448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wpc.dll
2014-06-22 14:42 - 2014-05-01 07:24 - 02834944 _____ (Microsoft Corporation) C:\Windows\system32\wpccpl.dll
2014-06-22 14:42 - 2014-04-30 06:43 - 01975296 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2014-06-22 14:42 - 2014-04-30 06:26 - 01345536 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2014-06-22 14:42 - 2014-04-30 05:47 - 01509888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2014-06-22 14:42 - 2014-04-18 16:57 - 00032600 _____ (Microsoft Corporation) C:\Windows\system32\ploptin.dll
2014-06-22 14:42 - 2014-04-18 16:44 - 01466856 _____ (Microsoft Corporation) C:\Windows\system32\propsys.dll
2014-06-22 14:42 - 2014-04-18 15:29 - 01200288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\propsys.dll
2014-06-22 14:42 - 2014-04-18 11:44 - 00055296 _____ (Microsoft Corporation) C:\Windows\system32\energyprov.dll
2014-06-22 14:42 - 2014-04-18 10:58 - 11792384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll
2014-06-22 14:42 - 2014-04-18 10:32 - 00805376 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll
2014-06-22 14:42 - 2014-04-18 10:21 - 01126912 _____ (Microsoft Corporation) C:\Windows\system32\SearchFolder.dll
2014-06-22 14:42 - 2014-04-18 09:51 - 00836608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFolder.dll
2014-06-22 14:42 - 2014-04-14 11:20 - 00324888 _____ (Microsoft Corporation) C:\Windows\system32\MFCaptureEngine.dll
2014-06-22 14:42 - 2014-04-14 10:01 - 00285144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFCaptureEngine.dll
2014-06-22 14:42 - 2014-04-11 08:13 - 01200128 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\bthport.sys
2014-06-22 14:42 - 2014-04-11 06:51 - 00250368 _____ (Microsoft Corporation) C:\Windows\system32\rdpencom.dll
2014-06-22 14:42 - 2014-04-11 06:23 - 00209920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpencom.dll
2014-06-22 14:42 - 2014-04-11 05:30 - 00449536 _____ (Microsoft Corporation) C:\Windows\system32\defragsvc.dll
2014-06-22 14:42 - 2014-04-09 13:53 - 00337240 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Classpnp.sys
2014-06-22 14:42 - 2014-04-09 08:39 - 00191488 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll
2014-06-22 14:42 - 2014-04-09 07:44 - 00144384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpchttp.dll
2014-06-22 14:42 - 2014-04-09 06:35 - 01411584 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-06-22 14:42 - 2014-04-09 05:33 - 00135168 _____ (Microsoft Corporation) C:\Windows\system32\wscsvc.dll
2014-06-22 14:42 - 2014-04-08 04:01 - 00589656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fvevol.sys
2014-06-22 14:42 - 2014-04-06 18:34 - 00372568 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
2014-06-22 14:42 - 2014-04-06 18:34 - 00275800 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys
2014-06-22 14:42 - 2014-04-06 18:32 - 00125496 _____ (Microsoft Corporation) C:\Windows\system32\dwmapi.dll
2014-06-22 14:42 - 2014-04-06 18:30 - 00201920 _____ (Microsoft Corporation) C:\Windows\system32\MSVideoDSP.dll
2014-06-22 14:42 - 2014-04-06 18:24 - 00360792 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fltMgr.sys
2014-06-22 14:42 - 2014-04-06 18:20 - 01403856 _____ (Microsoft Corporation) C:\Windows\system32\winmde.dll
2014-06-22 14:42 - 2014-04-06 18:20 - 01379064 _____ (Microsoft Corporation) C:\Windows\system32\wmpmde.dll
2014-06-22 14:42 - 2014-04-06 18:20 - 00881616 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll
2014-06-22 14:42 - 2014-04-06 18:20 - 00609448 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2014-06-22 14:42 - 2014-04-06 18:20 - 00491744 _____ (Microsoft Corporation) C:\Windows\system32\mfsvr.dll
2014-06-22 14:42 - 2014-04-06 18:20 - 00467496 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2014-06-22 14:42 - 2014-04-06 18:20 - 00463256 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2014-06-22 14:42 - 2014-04-06 18:20 - 00364640 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2014-06-22 14:42 - 2014-04-06 18:20 - 00244880 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe
2014-06-22 14:42 - 2014-04-06 18:20 - 00233912 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
2014-06-22 14:42 - 2014-04-06 18:20 - 00028408 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe
2014-06-22 14:42 - 2014-04-06 17:23 - 00098584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmapi.dll
2014-06-22 14:42 - 2014-04-06 17:22 - 00178184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSVideoDSP.dll
2014-06-22 14:42 - 2014-04-06 17:16 - 02144984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfcore.dll
2014-06-22 14:42 - 2014-04-06 17:16 - 01209616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winmde.dll
2014-06-22 14:42 - 2014-04-06 17:16 - 00707048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll
2014-06-22 14:42 - 2014-04-06 17:16 - 00669856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmpeg2srcsnk.dll
2014-06-22 14:42 - 2014-04-06 17:16 - 00518544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll
2014-06-22 14:42 - 2014-04-06 17:16 - 00406504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll
2014-06-22 14:42 - 2014-04-06 17:16 - 00387896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfsvr.dll
2014-06-22 14:42 - 2014-04-06 17:16 - 00326024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll
2014-06-22 14:42 - 2014-04-06 17:16 - 00305768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll
2014-06-22 14:42 - 2014-04-06 14:58 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2014-06-22 14:42 - 2014-04-06 14:51 - 00467968 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2014-06-22 14:42 - 2014-04-06 14:33 - 00335872 _____ (Microsoft Corporation) C:\Windows\system32\MDEServer.exe
2014-06-22 14:42 - 2014-04-06 14:24 - 00271872 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2014-06-22 14:42 - 2014-04-06 14:06 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2014-06-22 14:42 - 2014-04-06 13:26 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\BootMenuUX.dll
2014-06-22 14:42 - 2014-04-06 13:20 - 00201216 _____ (Microsoft Corporation) C:\Windows\system32\AudioEndpointBuilder.dll
2014-06-22 14:42 - 2014-04-06 13:01 - 00834048 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2014-06-22 14:42 - 2014-04-06 12:52 - 00955904 _____ (Microsoft Corporation) C:\Windows\system32\MFMediaEngine.dll
2014-06-22 14:42 - 2014-04-06 12:51 - 01230336 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.dll
2014-06-22 14:42 - 2014-04-06 12:37 - 00800768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFMediaEngine.dll
2014-06-22 14:42 - 2014-04-06 12:36 - 00888320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.dll
2014-06-22 14:42 - 2014-04-06 12:05 - 01222656 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Streaming.dll
2014-06-22 14:42 - 2014-04-06 11:59 - 00982016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Streaming.dll
2014-06-22 14:42 - 2014-04-03 10:12 - 00307304 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2014-06-22 14:42 - 2014-04-03 10:12 - 00130144 _____ (Microsoft Corporation) C:\Windows\system32\gpapi.dll
2014-06-22 14:42 - 2014-04-03 06:03 - 00230808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2014-06-22 14:42 - 2014-04-03 06:03 - 00111528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gpapi.dll
2014-06-22 14:42 - 2014-04-03 04:53 - 00677376 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
2014-06-22 14:42 - 2014-04-03 04:51 - 01584128 _____ (Microsoft Corporation) C:\Windows\system32\workfolderssvc.dll
2014-06-22 14:42 - 2014-04-03 04:23 - 00563200 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2014-06-22 14:42 - 2014-04-03 04:23 - 00402432 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2014-06-22 14:42 - 2014-04-03 04:23 - 00046592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tlscsp.dll
2014-06-22 14:42 - 2014-04-03 04:22 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\tlscsp.dll
2014-06-22 14:42 - 2014-04-01 08:23 - 00384856 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\spaceport.sys
2014-06-22 14:42 - 2014-03-31 07:42 - 07425368 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2014-06-22 14:42 - 2014-03-31 02:41 - 00011776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d8thk.dll
2014-06-22 14:42 - 2014-03-31 02:01 - 00186880 _____ (Microsoft Corporation) C:\Windows\system32\WorkFoldersShell.dll
2014-06-22 14:42 - 2014-03-31 01:43 - 00761856 _____ (Microsoft Corporation) C:\Windows\system32\WorkfoldersControl.dll
2014-06-22 14:42 - 2014-03-31 00:49 - 01287168 _____ (Microsoft Corporation) C:\Windows\system32\mispace.dll
2014-06-22 14:42 - 2014-03-31 00:35 - 01029120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mispace.dll
2014-06-22 14:42 - 2014-03-31 00:11 - 00721408 _____ (Microsoft Corporation) C:\Windows\system32\SkyDriveTelemetry.dll
2014-06-22 14:42 - 2014-03-30 23:47 - 00872448 _____ (Microsoft Corporation) C:\Windows\system32\SkyDrive.exe
2014-06-22 14:42 - 2014-03-28 17:58 - 00407016 _____ (Microsoft Corporation) C:\Windows\system32\services.exe
2014-06-22 14:42 - 2014-03-27 08:16 - 00246272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
2014-06-22 14:42 - 2014-03-27 07:36 - 00281600 _____ (Microsoft Corporation) C:\Windows\system32\resutils.dll
2014-06-22 14:42 - 2014-03-27 06:59 - 00426496 _____ (Microsoft Corporation) C:\Windows\system32\clusapi.dll
2014-06-22 14:42 - 2014-03-27 06:48 - 00219136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\resutils.dll
2014-06-22 14:42 - 2014-03-27 06:19 - 00313344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\clusapi.dll
2014-06-22 14:42 - 2014-03-27 05:46 - 00323072 _____ (Microsoft Corporation) C:\Windows\system32\srvsvc.dll
2014-06-22 14:42 - 2014-03-27 05:15 - 00718336 _____ (Microsoft Corporation) C:\Windows\system32\swprv.dll
2014-06-22 14:42 - 2014-03-27 05:10 - 01436160 _____ (Microsoft Corporation) C:\Windows\system32\VSSVC.exe
2014-06-22 14:42 - 2014-03-25 00:58 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2014-06-22 14:42 - 2014-03-20 05:48 - 00263424 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsAdminFlows.exe
2014-06-22 14:42 - 2014-03-19 10:15 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\wlanhlp.dll
2014-06-22 14:42 - 2014-03-19 10:07 - 00443904 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\nwifi.sys
2014-06-22 14:42 - 2014-03-19 09:24 - 00064512 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2014-06-22 14:42 - 2014-03-19 09:17 - 00011264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanhlp.dll
2014-06-22 14:42 - 2014-03-19 08:36 - 01057280 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll
2014-06-22 14:42 - 2014-03-19 07:56 - 00855552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll
2014-06-22 14:42 - 2014-03-19 07:45 - 00443904 _____ (Microsoft Corporation) C:\Windows\system32\wlansec.dll
2014-06-22 14:42 - 2014-03-19 07:19 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\wlanapi.dll
2014-06-22 14:42 - 2014-03-19 07:07 - 00370176 _____ (Microsoft Corporation) C:\Windows\system32\wlanmsm.dll
2014-06-22 14:42 - 2014-03-19 07:00 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanapi.dll
2014-06-22 14:42 - 2014-03-19 06:51 - 00300544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanmsm.dll
2014-06-22 14:42 - 2014-03-19 06:31 - 02100736 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsAdminFlowUI.dll
2014-06-22 14:42 - 2014-03-18 10:19 - 00077312 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\hdaudbus.sys
2014-06-22 14:42 - 2014-03-17 07:09 - 00462336 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll
2014-06-22 14:42 - 2014-03-17 06:11 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll
2014-06-22 14:42 - 2014-03-17 05:01 - 00486912 _____ (Microsoft Corporation) C:\Windows\system32\winspool.drv
2014-06-22 14:42 - 2014-03-17 04:47 - 01025024 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
2014-06-22 14:42 - 2014-03-17 04:45 - 00370176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winspool.drv
2014-06-22 14:42 - 2014-03-14 08:26 - 00491520 _____ (Microsoft Corporation) C:\Windows\system32\GeofenceMonitorService.dll
2014-06-22 14:42 - 2014-03-14 08:10 - 00357376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GeofenceMonitorService.dll
2014-06-22 14:42 - 2014-03-11 15:21 - 00918528 _____ (Microsoft Corporation) C:\Windows\system32\MrmCoreR.dll
2014-06-22 14:42 - 2014-03-11 15:02 - 00629760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MrmCoreR.dll
2014-06-22 14:42 - 2014-03-08 22:47 - 00565536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2014-06-22 14:42 - 2014-03-08 22:47 - 00180056 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2014-06-22 14:42 - 2014-03-08 11:34 - 00731648 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2014-06-22 14:42 - 2014-03-08 10:44 - 00731648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2014-06-22 14:42 - 2014-03-06 14:42 - 00310616 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\volsnap.sys
2014-06-22 14:42 - 2014-03-06 11:19 - 00115200 _____ (Microsoft Corporation) C:\Windows\system32\umpnpmgr.dll
2014-06-22 14:42 - 2014-03-06 11:19 - 00040960 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Shell.Search.UriHandler.dll
2014-06-22 14:42 - 2014-03-06 10:20 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Shell.Search.UriHandler.dll
2014-06-22 14:42 - 2014-01-27 20:21 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll
2014-06-20 18:18 - 2014-06-26 15:48 - 00000000 ____D () C:\Users\SergejSh\Desktop\Programme
2014-06-20 14:00 - 2014-06-20 13:58 - 00084720 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2014-06-20 13:57 - 2014-06-20 13:57 - 00003408 _____ () C:\Windows\System32\Tasks\aviraSWU
2014-06-20 13:57 - 2014-06-20 13:57 - 00000000 ____D () C:\Users\SergejSh\AppData\Roaming\Avira
2014-06-20 13:56 - 2014-06-20 13:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2014-06-20 13:54 - 2014-06-24 12:04 - 00117712 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2014-06-20 13:54 - 2014-06-20 13:57 - 00000000 ____D () C:\Program Files (x86)\Avira
2014-06-20 13:54 - 2014-06-20 13:54 - 00000000 ____D () C:\ProgramData\Avira
2014-06-20 13:54 - 2014-05-27 17:12 - 00130584 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2014-06-20 13:54 - 2014-05-27 17:12 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2014-06-20 13:45 - 2014-06-28 15:56 - 00001128 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-06-20 13:45 - 2014-06-28 11:02 - 00001124 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-06-20 13:45 - 2014-06-25 01:51 - 00004100 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-06-20 13:45 - 2014-06-25 01:51 - 00003864 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-06-20 13:45 - 2014-06-20 13:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-06-20 13:44 - 2014-06-20 13:45 - 00000000 ____D () C:\Program Files (x86)\Google
2014-06-20 13:43 - 2014-06-20 13:46 - 00000000 ____D () C:\Users\SergejSh\AppData\Local\Google
2014-06-20 13:38 - 2014-06-20 13:38 - 00000000 __SHD () C:\Users\SergejSh\AppData\Local\EmieUserList
2014-06-20 13:38 - 2014-06-20 13:38 - 00000000 __SHD () C:\Users\SergejSh\AppData\Local\EmieSiteList
2014-06-20 13:38 - 2014-06-20 13:38 - 00000000 ____D () C:\Users\SergejSh\AppData\Roaming\Macromedia
2014-06-20 13:37 - 2014-06-28 14:11 - 00003934 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{3DAA8791-98CA-4076-9EE3-4E67C271DA9E}
2014-06-20 12:09 - 2014-06-20 11:17 - 00000000 ____D () C:\Windows\Panther
2014-06-20 12:07 - 2014-06-20 12:07 - 00000000 ____D () C:\Windows\Options
2014-06-20 12:07 - 2014-06-20 12:07 - 00000000 ____D () C:\Program Files (x86)\Qualcomm Atheros
2014-06-20 12:07 - 2013-11-13 00:05 - 03880448 _____ (Qualcomm Atheros Communications, Inc.) C:\Windows\system32\Drivers\athwbx.sys
2014-06-20 12:06 - 2014-06-20 12:07 - 00000000 ____D () C:\ProgramData\Qualcomm Atheros
2014-06-20 11:58 - 2014-06-20 11:58 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP Help and Support
2014-06-20 11:57 - 2014-06-20 11:58 - 00000000 ____D () C:\Program Files\Hewlett-Packard
2014-06-20 11:57 - 2014-06-20 11:57 - 00000000 ____D () C:\system.sav
2014-06-20 11:57 - 2014-06-20 11:57 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Productivity and Tools
2014-06-20 11:57 - 2014-06-20 11:57 - 00000000 ____D () C:\hp
2014-06-20 11:53 - 2014-06-20 11:54 - 00000032 _____ () C:\Windows\0
2014-06-20 11:53 - 2014-06-20 11:53 - 00000000 ____D () C:\Program Files (x86)\Ralink Corporation
2014-06-20 11:53 - 2014-06-20 11:53 - 00000000 _____ () C:\Windows\system32\0
2014-06-20 11:53 - 2013-11-25 13:34 - 00382492 _____ () C:\Windows\system32\Drivers\FW7650.bin
2014-06-20 11:49 - 2014-06-20 11:49 - 00003100 _____ () C:\Windows\System32\Tasks\{E4856A59-2919-4B81-BC74-F859E72F7EC5}
2014-06-20 11:49 - 2014-06-20 11:49 - 00000000 ____D () C:\Program Files\HP USB Port Replicator
2014-06-20 11:48 - 2014-06-20 11:48 - 00000000 ____D () C:\Program Files\DisplayLink Core Software
2014-06-20 11:48 - 2014-06-20 11:48 - 00000000 _____ () C:\Windows\SysWOW64\dlumd9.dll
2014-06-20 11:48 - 2014-06-20 11:48 - 00000000 _____ () C:\Windows\SysWOW64\dlumd11.dll
2014-06-20 11:48 - 2014-06-20 11:48 - 00000000 _____ () C:\Windows\SysWOW64\dlumd10.dll
2014-06-20 11:48 - 2014-06-20 11:48 - 00000000 _____ () C:\Windows\system32\dlumd9.dll
2014-06-20 11:48 - 2014-06-20 11:48 - 00000000 _____ () C:\Windows\system32\dlumd11.dll
2014-06-20 11:48 - 2014-06-20 11:48 - 00000000 _____ () C:\Windows\system32\dlumd10.dll
2014-06-20 11:47 - 2014-06-20 11:47 - 00000000 ____D () C:\Program Files (x86)\SP65752
2014-06-20 11:46 - 2014-06-20 11:46 - 00000000 ____D () C:\Users\SergejSh\AppData\Roaming\Synaptics
2014-06-20 11:46 - 2014-06-20 11:46 - 00000000 ____D () C:\ProgramData\Synaptics
2014-06-20 11:36 - 2014-06-20 11:36 - 00072097 _____ () C:\Windows\SysWOW64\CCCInstall_201406201136272696.log
2014-06-20 11:36 - 2014-06-20 11:36 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Catalyst Control Center
2014-06-20 11:36 - 2014-06-20 11:36 - 00000000 ____D () C:\Program Files (x86)\AMD AVT
2014-06-20 11:35 - 2014-06-28 04:38 - 00065536 _____ () C:\Windows\system32\spu_storage.bin
2014-06-20 11:35 - 2014-06-20 11:36 - 00000000 ____D () C:\ProgramData\AMD
2014-06-20 11:35 - 2014-06-20 11:35 - 00000000 ____D () C:\Program Files\Common Files\ATI Technologies
2014-06-20 11:35 - 2014-06-20 11:35 - 00000000 ____D () C:\AMD
2014-06-20 11:35 - 2014-06-20 11:35 - 00000000 _____ () C:\Windows\ativpsrm.bin
2014-06-20 11:34 - 2014-06-20 11:36 - 00000000 ____D () C:\Program Files (x86)\ATI Technologies
2014-06-20 11:34 - 2014-06-20 11:34 - 00000000 ____D () C:\ProgramData\Package Cache
2014-06-20 11:33 - 2014-06-20 11:35 - 00000000 ____D () C:\Program Files\ATI Technologies
2014-06-20 11:33 - 2014-06-20 11:33 - 00000000 ____D () C:\Program Files\ATI
2014-06-20 11:30 - 2014-06-20 11:30 - 00000000 ____D () C:\Windows\SysWOW64\sda
2014-06-20 11:30 - 2013-08-26 14:54 - 09889352 _____ (Realtek Semiconductor Corp.) C:\Windows\SysWOW64\RtsP2StorIcon.dll
2014-06-20 11:30 - 2013-08-26 14:54 - 00290520 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RtsP2Stor.sys
2014-06-20 11:30 - 2013-08-26 14:54 - 00263896 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RtsUStor.sys
2014-06-20 11:28 - 2014-06-20 11:28 - 00000000 ____D () C:\Windows\SysWOW64\RTCOM
2014-06-20 11:28 - 2014-06-20 11:28 - 00000000 ____D () C:\Windows\system32\SRSLabs
2014-06-20 11:28 - 2014-06-20 11:28 - 00000000 ____D () C:\Program Files\Realtek
2014-06-20 11:28 - 2013-11-05 19:47 - 03707864 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHD64.sys
2014-06-20 11:28 - 2013-11-05 18:54 - 38385664 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoRes64.dat
2014-06-20 11:28 - 2013-11-05 15:48 - 00681905 _____ () C:\Windows\system32\Drivers\RTAIODAT.DAT
2014-06-20 11:28 - 2013-11-04 19:26 - 00153304 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoInstII64.dll
2014-06-20 11:28 - 2013-11-04 11:11 - 02587864 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkAPO64.dll
2014-06-20 11:28 - 2013-10-28 17:29 - 01021656 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApi64.dll
2014-06-20 11:28 - 2013-10-18 16:41 - 01286360 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTCOM64.dll
2014-06-20 11:28 - 2013-10-07 11:05 - 02810072 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtPgEx64.dll
2014-06-20 11:28 - 2013-10-02 17:10 - 00617176 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtDataProc64.dll
2014-06-20 11:28 - 2013-04-24 17:16 - 01662024 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSnMg64.cpl
2014-06-20 11:28 - 2011-12-20 15:32 - 00331880 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtlCPAPI64.dll
2014-06-20 11:28 - 2011-11-22 16:28 - 00014952 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCoLDR64.dll
2014-06-20 11:28 - 2010-11-08 07:31 - 00375128 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEP64A.dll
2014-06-20 11:28 - 2010-11-08 07:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DHT64.dll
2014-06-20 11:28 - 2010-11-08 07:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DAA64.dll
2014-06-20 11:28 - 2010-11-08 07:31 - 00204120 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEED64A.dll
2014-06-20 11:28 - 2010-11-08 07:31 - 00101208 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEL64A.dll
2014-06-20 11:28 - 2010-11-08 07:31 - 00078680 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEG64A.dll
2014-06-20 11:28 - 2010-11-03 18:30 - 00149608 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCfg64.dll
2014-06-20 11:28 - 2009-11-24 09:55 - 00518896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSX64.dll
2014-06-20 11:28 - 2009-11-24 09:55 - 00155888 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSWOW64.dll
2014-06-20 11:27 - 2014-06-20 11:30 - 00000000 ___HD () C:\Program Files (x86)\Temp
2014-06-20 11:27 - 2013-10-16 03:43 - 00209096 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAC64.dll
2014-06-20 11:27 - 2013-10-11 12:47 - 00113576 _____ (Real Sound Lab SIA) C:\Windows\system32\CONEQMSAPOGUILibrary.dll
2014-06-20 11:27 - 2013-09-13 18:44 - 02080472 _____ (Realtek Semiconductor Corp.) C:\Windows\RtlExUpd.dll
2014-06-20 11:27 - 2012-03-08 11:47 - 00108640 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAR64.dll
2014-06-20 11:25 - 2014-06-20 11:25 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_SynTP_01011.Wdf
2014-06-20 11:25 - 2014-06-20 11:25 - 00000000 ____D () C:\Program Files\Synaptics
2014-06-20 11:24 - 2014-06-20 11:26 - 00001328 _____ () C:\Windows\Synaptics.log
2014-06-20 11:23 - 2014-06-28 11:12 - 00003598 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1673834559-152451206-4130808851-1001
2014-06-20 11:22 - 2014-06-20 12:06 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-06-20 11:22 - 2014-06-20 11:30 - 00000000 ____D () C:\Program Files (x86)\Realtek
2014-06-20 11:22 - 2013-08-16 06:28 - 00830680 _____ (Realtek ) C:\Windows\system32\Drivers\Rt630x64.sys
2014-06-20 11:22 - 2013-08-16 06:28 - 00074456 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RtNicProp64.dll
2014-06-20 11:21 - 2014-06-20 11:49 - 00015574 _____ () C:\Windows\DPINST.LOG
2014-06-20 11:21 - 2014-06-20 11:21 - 00000000 ____D () C:\Windows\Dell
2014-06-20 11:21 - 2014-06-20 11:21 - 00000000 ____D () C:\Users\SergejSh\AppData\Roaming\hpqLog
2014-06-20 11:20 - 2014-06-20 12:06 - 00000000 ____D () C:\SwSetup
2014-06-20 11:20 - 2014-06-20 11:20 - 00000000 ____D () C:\ProgramData\Hewlett-Packard
2014-06-20 11:20 - 2014-06-20 11:20 - 00000000 ____D () C:\Program Files (x86)\Hewlett-Packard
2014-06-20 11:19 - 2014-06-20 11:19 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2014-06-20 11:17 - 2014-06-28 04:11 - 00000000 ____D () C:\Users\SergejSh\AppData\Local\VirtualStore
2014-06-20 11:17 - 2014-06-28 00:16 - 01179506 _____ () C:\Windows\WindowsUpdate.log
2014-06-20 11:17 - 2014-06-25 13:07 - 00000000 ____D () C:\Users\SergejSh\AppData\Roaming\Adobe
2014-06-20 11:17 - 2014-06-25 03:43 - 00000000 ____D () C:\Users\SergejSh
2014-06-20 11:17 - 2014-06-24 23:42 - 00000000 ____D () C:\Users\SergejSh\AppData\Local\Packages
2014-06-20 11:17 - 2014-06-20 11:17 - 00001450 _____ () C:\Users\SergejSh\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-06-20 11:17 - 2014-06-20 11:17 - 00000020 ___SH () C:\Users\SergejSh\ntuser.ini
2014-06-20 11:17 - 2014-06-20 11:17 - 00000000 _SHDL () C:\Users\SergejSh\Vorlagen
2014-06-20 11:17 - 2014-06-20 11:17 - 00000000 _SHDL () C:\Users\SergejSh\Startmenü
2014-06-20 11:17 - 2014-06-20 11:17 - 00000000 _SHDL () C:\Users\SergejSh\Netzwerkumgebung
2014-06-20 11:17 - 2014-06-20 11:17 - 00000000 _SHDL () C:\Users\SergejSh\Lokale Einstellungen
2014-06-20 11:17 - 2014-06-20 11:17 - 00000000 _SHDL () C:\Users\SergejSh\Eigene Dateien
2014-06-20 11:17 - 2014-06-20 11:17 - 00000000 _SHDL () C:\Users\SergejSh\Druckumgebung
2014-06-20 11:17 - 2014-06-20 11:17 - 00000000 _SHDL () C:\Users\SergejSh\Documents\Eigene Musik
2014-06-20 11:17 - 2014-06-20 11:17 - 00000000 _SHDL () C:\Users\SergejSh\Documents\Eigene Bilder
2014-06-20 11:17 - 2014-06-20 11:17 - 00000000 _SHDL () C:\Users\SergejSh\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-06-20 11:17 - 2014-06-20 11:17 - 00000000 _SHDL () C:\Users\SergejSh\AppData\Local\Verlauf
2014-06-20 11:17 - 2014-06-20 11:17 - 00000000 _SHDL () C:\Users\SergejSh\AppData\Local\Anwendungsdaten
2014-06-20 11:17 - 2014-06-20 11:17 - 00000000 _SHDL () C:\Users\SergejSh\Anwendungsdaten
2014-06-20 11:17 - 2014-06-20 11:17 - 00000000 ____D () C:\Windows\System32\Tasks\WPD
2014-06-20 11:17 - 2014-03-18 12:31 - 00000000 ___RD () C:\Users\SergejSh\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-06-20 11:17 - 2014-03-18 12:31 - 00000000 ___RD () C:\Users\SergejSh\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-06-20 11:17 - 2014-03-18 12:11 - 00000369 _____ () C:\Users\SergejSh\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk
2014-06-20 11:17 - 2014-03-18 12:11 - 00000369 _____ () C:\Users\SergejSh\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk
2014-06-20 11:17 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\SergejSh\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-06-20 11:17 - 2013-08-22 17:36 - 00000000 ____D () C:\Users\SergejSh\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-06-20 11:14 - 2014-06-20 11:14 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Musik
2014-06-20 11:14 - 2014-06-20 11:14 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Bilder
2014-06-20 11:14 - 2014-06-20 11:14 - 00000000 _SHDL () C:\Users\Default\Vorlagen
2014-06-20 11:14 - 2014-06-20 11:14 - 00000000 _SHDL () C:\Users\Default\Startmenü
2014-06-20 11:14 - 2014-06-20 11:14 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung
2014-06-20 11:14 - 2014-06-20 11:14 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen
2014-06-20 11:14 - 2014-06-20 11:14 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien
2014-06-20 11:14 - 2014-06-20 11:14 - 00000000 _SHDL () C:\Users\Default\Druckumgebung
2014-06-20 11:14 - 2014-06-20 11:14 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik
2014-06-20 11:14 - 2014-06-20 11:14 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder
2014-06-20 11:14 - 2014-06-20 11:14 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-06-20 11:14 - 2014-06-20 11:14 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf
2014-06-20 11:14 - 2014-06-20 11:14 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten
2014-06-20 11:14 - 2014-06-20 11:14 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten
2014-06-20 11:14 - 2014-06-20 11:14 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik
2014-06-20 11:14 - 2014-06-20 11:14 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder
2014-06-20 11:14 - 2014-06-20 11:14 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-06-20 11:14 - 2014-06-20 11:14 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf
2014-06-20 11:14 - 2014-06-20 11:14 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten
2014-06-20 11:14 - 2014-06-20 11:14 - 00000000 _SHDL () C:\Programme
2014-06-20 11:14 - 2014-06-20 11:14 - 00000000 _SHDL () C:\ProgramData\Vorlagen
2014-06-20 11:14 - 2014-06-20 11:14 - 00000000 _SHDL () C:\ProgramData\Startmenü
2014-06-20 11:14 - 2014-06-20 11:14 - 00000000 _SHDL () C:\ProgramData\Microsoft\Windows\Start Menu\Programme
2014-06-20 11:14 - 2014-06-20 11:14 - 00000000 _SHDL () C:\ProgramData\Dokumente
2014-06-20 11:14 - 2014-06-20 11:14 - 00000000 _SHDL () C:\ProgramData\Anwendungsdaten
2014-06-20 11:14 - 2014-06-20 11:14 - 00000000 _SHDL () C:\Program Files\Gemeinsame Dateien
2014-06-20 11:14 - 2014-06-20 11:14 - 00000000 _SHDL () C:\Dokumente und Einstellungen
2014-06-20 11:13 - 2014-06-20 11:13 - 00000000 __SHD () C:\Recovery
2014-06-02 08:55 - 2014-06-02 08:55 - 00829264 _____ (Microsoft Corporation) C:\Windows\system32\msvcr100.dll
2014-06-02 08:55 - 2014-06-02 08:55 - 00773968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr100.dll
2014-06-02 08:55 - 2014-06-02 08:55 - 00608080 _____ (Microsoft Corporation) C:\Windows\system32\msvcp100.dll
2014-06-02 08:55 - 2014-06-02 08:55 - 00421200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcp100.dll
==================== One Month Modified Files and Folders =======
2014-06-28 16:48 - 2014-06-28 16:46 - 00013587 _____ () C:\Users\SergejSh\Desktop\FRST.txt
2014-06-28 16:48 - 2014-06-26 15:56 - 00000000 ____D () C:\FRST
2014-06-28 16:46 - 2014-06-28 16:46 - 00000000 ____D () C:\Users\SergejSh\Desktop\FRST-OlderVersion
2014-06-28 16:46 - 2014-06-26 15:55 - 02083328 _____ (Farbar) C:\Users\SergejSh\Desktop\FRST64.exe
2014-06-28 16:00 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\sru
2014-06-28 15:56 - 2014-06-20 13:45 - 00001128 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-06-28 14:11 - 2014-06-20 13:37 - 00003934 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{3DAA8791-98CA-4076-9EE3-4E67C271DA9E}
2014-06-28 11:36 - 2014-06-28 11:36 - 00344064 _____ () C:\Users\SergejSh\Documents\Datenbank1.accdb
2014-06-28 11:12 - 2014-06-20 11:23 - 00003598 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1673834559-152451206-4130808851-1001
2014-06-28 11:03 - 2014-06-22 16:25 - 00000000 ___RD () C:\Users\SergejSh\Dropbox
2014-06-28 11:03 - 2014-06-22 16:25 - 00000000 ____D () C:\Users\SergejSh\AppData\Roaming\DropboxMaster
2014-06-28 11:03 - 2014-06-22 16:21 - 00000000 ____D () C:\Users\SergejSh\AppData\Roaming\Dropbox
2014-06-28 11:02 - 2014-06-20 13:45 - 00001124 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-06-28 04:38 - 2014-06-20 11:35 - 00065536 _____ () C:\Windows\system32\spu_storage.bin
2014-06-28 04:11 - 2014-06-20 11:17 - 00000000 ____D () C:\Users\SergejSh\AppData\Local\VirtualStore
2014-06-28 02:01 - 2014-06-28 02:01 - 02347384 _____ (ESET) C:\Users\SergejSh\Desktop\esetsmartinstaller_deu.exe
2014-06-28 02:01 - 2014-06-28 02:01 - 00000000 ____D () C:\Program Files (x86)\ESET
2014-06-28 01:34 - 2014-06-28 01:30 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-06-28 01:30 - 2014-06-28 01:30 - 00001114 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-06-28 01:30 - 2014-06-28 01:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware
2014-06-28 01:30 - 2014-06-28 01:30 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-06-28 01:30 - 2014-06-28 01:30 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware
2014-06-28 01:29 - 2014-06-28 01:28 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\SergejSh\Desktop\mbam-setup-2.0.2.1012.exe
2014-06-28 00:16 - 2014-06-20 11:17 - 01179506 _____ () C:\Windows\WindowsUpdate.log
2014-06-28 00:02 - 2014-03-18 12:03 - 01686150 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-06-28 00:02 - 2014-03-18 11:25 - 00727930 _____ () C:\Windows\system32\perfh007.dat
2014-06-28 00:02 - 2014-03-18 11:25 - 00151586 _____ () C:\Windows\system32\perfc007.dat
2014-06-26 15:48 - 2014-06-20 18:18 - 00000000 ____D () C:\Users\SergejSh\Desktop\Programme
2014-06-25 13:42 - 2014-06-25 13:42 - 00000000 ____D () C:\Users\SergejSh\Documents\Benutzerdefinierte Office-Vorlagen
2014-06-25 13:08 - 2014-06-25 13:02 - 00000000 ____D () C:\ProgramData\Adobe
2014-06-25 13:07 - 2014-06-25 13:07 - 00000000 ____D () C:\Users\SergejSh\AppData\Local\Adobe
2014-06-25 13:07 - 2014-06-20 11:17 - 00000000 ____D () C:\Users\SergejSh\AppData\Roaming\Adobe
2014-06-25 13:03 - 2014-06-26 15:30 - 00000030 _____ () C:\AVScanner.ini
2014-06-25 13:03 - 2014-06-25 13:03 - 00002457 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2014-06-25 13:03 - 2014-06-25 13:03 - 00000000 ____D () C:\ProgramData\McAfee
2014-06-25 13:02 - 2014-06-25 13:02 - 00000000 ____D () C:\Program Files (x86)\Adobe
2014-06-25 11:33 - 2014-06-23 13:09 - 00000000 ____D () C:\Users\SergejSh\AppData\Roaming\Spotify
2014-06-25 03:43 - 2014-06-20 11:17 - 00000000 ____D () C:\Users\SergejSh
2014-06-25 01:51 - 2014-06-20 13:45 - 00004100 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-06-25 01:51 - 2014-06-20 13:45 - 00003864 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-06-24 23:42 - 2014-06-20 11:17 - 00000000 ____D () C:\Users\SergejSh\AppData\Local\Packages
2014-06-24 21:23 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\rescache
2014-06-24 12:31 - 2013-08-22 17:20 - 00000000 ____D () C:\Windows\CbsTemp
2014-06-24 12:04 - 2014-06-20 13:54 - 00117712 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2014-06-24 11:59 - 2013-08-22 16:45 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-06-23 15:45 - 2014-06-23 13:10 - 00000000 ____D () C:\Users\SergejSh\AppData\Local\Spotify
2014-06-23 13:10 - 2014-06-23 13:10 - 00001814 _____ () C:\Users\SergejSh\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk
2014-06-23 12:46 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\AppReadiness
2014-06-23 12:36 - 2014-06-23 12:30 - 00000000 ___RD () C:\Windows\BrowserChoice
2014-06-23 12:33 - 2013-08-22 16:44 - 00478840 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-06-23 12:32 - 2013-08-22 15:25 - 00262144 ___SH () C:\Windows\system32\config\BBI
2014-06-23 12:30 - 2014-03-18 03:50 - 00161152 _____ () C:\Windows\PFRO.log
2014-06-23 12:30 - 2013-08-22 17:36 - 00000000 ___RD () C:\Windows\ToastData
2014-06-23 12:30 - 2013-08-22 17:36 - 00000000 ___RD () C:\Windows\ImmersiveControlPanel
2014-06-23 12:30 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-06-23 12:30 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-06-23 12:30 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\WinStore
2014-06-23 12:30 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\setup
2014-06-23 12:30 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\SecureBootUpdates
2014-06-23 12:30 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files\Windows Defender
2014-06-23 12:30 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files (x86)\Windows Defender
2014-06-23 12:30 - 2013-08-22 15:36 - 00000000 ____D () C:\Windows\system32\oobe
2014-06-22 16:26 - 2014-06-22 16:26 - 00000000 ____D () C:\Program Files\Common Files\DESIGNER
2014-06-22 16:26 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared
2014-06-22 16:24 - 2014-06-22 16:24 - 00000000 ____D () C:\Users\SergejSh\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-06-22 16:18 - 2014-06-22 16:18 - 00000000 ____D () C:\Users\SergejSh\AppData\Local\PDF24
2014-06-22 16:17 - 2014-06-22 16:12 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2014-06-22 16:15 - 2014-06-22 16:15 - 00000000 ____D () C:\Program Files\Microsoft Office
2014-06-22 16:14 - 2014-06-22 16:14 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDF24
2014-06-22 16:14 - 2014-06-22 16:14 - 00000000 ____D () C:\Program Files (x86)\PDF24
2014-06-22 16:10 - 2014-06-22 16:10 - 00000000 ____D () C:\Program Files\Microsoft Office 15
2014-06-22 16:09 - 2014-06-22 16:09 - 01351872 _____ (Microsoft Corporation) C:\Users\SergejSh\Downloads\Setup.X64.de-de_O365ProPlusRetail_76a59357-cf4e-4b82-a30c-5762ef5e6dc9_TX_PR_.exe
2014-06-22 16:09 - 2014-06-22 16:09 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_LocationProvider_01_11_00.Wdf
2014-06-22 16:09 - 2013-08-22 16:46 - 00013971 _____ () C:\Windows\setupact.log
2014-06-22 15:16 - 2014-06-22 15:15 - 00000000 ____D () C:\Windows\system32\MRT
2014-06-22 15:15 - 2013-08-22 15:25 - 00262144 ___SH () C:\Windows\system32\config\ELAM
2014-06-20 13:58 - 2014-06-20 14:00 - 00084720 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2014-06-20 13:57 - 2014-06-20 13:57 - 00003408 _____ () C:\Windows\System32\Tasks\aviraSWU
2014-06-20 13:57 - 2014-06-20 13:57 - 00000000 ____D () C:\Users\SergejSh\AppData\Roaming\Avira
2014-06-20 13:57 - 2014-06-20 13:54 - 00000000 ____D () C:\Program Files (x86)\Avira
2014-06-20 13:56 - 2014-06-20 13:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2014-06-20 13:54 - 2014-06-20 13:54 - 00000000 ____D () C:\ProgramData\Avira
2014-06-20 13:46 - 2014-06-20 13:43 - 00000000 ____D () C:\Users\SergejSh\AppData\Local\Google
2014-06-20 13:45 - 2014-06-20 13:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-06-20 13:45 - 2014-06-20 13:44 - 00000000 ____D () C:\Program Files (x86)\Google
2014-06-20 13:38 - 2014-06-20 13:38 - 00000000 __SHD () C:\Users\SergejSh\AppData\Local\EmieUserList
2014-06-20 13:38 - 2014-06-20 13:38 - 00000000 __SHD () C:\Users\SergejSh\AppData\Local\EmieSiteList
2014-06-20 13:38 - 2014-06-20 13:38 - 00000000 ____D () C:\Users\SergejSh\AppData\Roaming\Macromedia
2014-06-20 12:09 - 2013-08-22 17:36 - 00262144 _____ () C:\Windows\system32\config\BCD-Template
2014-06-20 12:07 - 2014-06-20 12:07 - 00000000 ____D () C:\Windows\Options
2014-06-20 12:07 - 2014-06-20 12:07 - 00000000 ____D () C:\Program Files (x86)\Qualcomm Atheros
2014-06-20 12:07 - 2014-06-20 12:06 - 00000000 ____D () C:\ProgramData\Qualcomm Atheros
2014-06-20 12:06 - 2014-06-20 11:22 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-06-20 12:06 - 2014-06-20 11:20 - 00000000 ____D () C:\SwSetup
2014-06-20 11:58 - 2014-06-20 11:58 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP Help and Support
2014-06-20 11:58 - 2014-06-20 11:57 - 00000000 ____D () C:\Program Files\Hewlett-Packard
2014-06-20 11:57 - 2014-06-20 11:57 - 00000000 ____D () C:\system.sav
2014-06-20 11:57 - 2014-06-20 11:57 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Productivity and Tools
2014-06-20 11:57 - 2014-06-20 11:57 - 00000000 ____D () C:\hp
2014-06-20 11:54 - 2014-06-20 11:53 - 00000032 _____ () C:\Windows\0
2014-06-20 11:53 - 2014-06-20 11:53 - 00000000 ____D () C:\Program Files (x86)\Ralink Corporation
2014-06-20 11:53 - 2014-06-20 11:53 - 00000000 _____ () C:\Windows\system32\0
2014-06-20 11:49 - 2014-06-20 11:49 - 00003100 _____ () C:\Windows\System32\Tasks\{E4856A59-2919-4B81-BC74-F859E72F7EC5}
2014-06-20 11:49 - 2014-06-20 11:49 - 00000000 ____D () C:\Program Files\HP USB Port Replicator
2014-06-20 11:49 - 2014-06-20 11:21 - 00015574 _____ () C:\Windows\DPINST.LOG
2014-06-20 11:48 - 2014-06-20 11:48 - 00000000 ____D () C:\Program Files\DisplayLink Core Software
2014-06-20 11:48 - 2014-06-20 11:48 - 00000000 _____ () C:\Windows\SysWOW64\dlumd9.dll
2014-06-20 11:48 - 2014-06-20 11:48 - 00000000 _____ () C:\Windows\SysWOW64\dlumd11.dll
2014-06-20 11:48 - 2014-06-20 11:48 - 00000000 _____ () C:\Windows\SysWOW64\dlumd10.dll
2014-06-20 11:48 - 2014-06-20 11:48 - 00000000 _____ () C:\Windows\system32\dlumd9.dll
2014-06-20 11:48 - 2014-06-20 11:48 - 00000000 _____ () C:\Windows\system32\dlumd11.dll
2014-06-20 11:48 - 2014-06-20 11:48 - 00000000 _____ () C:\Windows\system32\dlumd10.dll
2014-06-20 11:47 - 2014-06-20 11:47 - 00000000 ____D () C:\Program Files (x86)\SP65752
2014-06-20 11:46 - 2014-06-20 11:46 - 00000000 ____D () C:\Users\SergejSh\AppData\Roaming\Synaptics
2014-06-20 11:46 - 2014-06-20 11:46 - 00000000 ____D () C:\ProgramData\Synaptics
2014-06-20 11:36 - 2014-06-20 11:36 - 00072097 _____ () C:\Windows\SysWOW64\CCCInstall_201406201136272696.log
2014-06-20 11:36 - 2014-06-20 11:36 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Catalyst Control Center
2014-06-20 11:36 - 2014-06-20 11:36 - 00000000 ____D () C:\Program Files (x86)\AMD AVT
2014-06-20 11:36 - 2014-06-20 11:35 - 00000000 ____D () C:\ProgramData\AMD
2014-06-20 11:36 - 2014-06-20 11:34 - 00000000 ____D () C:\Program Files (x86)\ATI Technologies
2014-06-20 11:35 - 2014-06-20 11:35 - 00000000 ____D () C:\Program Files\Common Files\ATI Technologies
2014-06-20 11:35 - 2014-06-20 11:35 - 00000000 ____D () C:\AMD
2014-06-20 11:35 - 2014-06-20 11:35 - 00000000 _____ () C:\Windows\ativpsrm.bin
2014-06-20 11:35 - 2014-06-20 11:33 - 00000000 ____D () C:\Program Files\ATI Technologies
2014-06-20 11:34 - 2014-06-20 11:34 - 00000000 ____D () C:\ProgramData\Package Cache
2014-06-20 11:33 - 2014-06-20 11:33 - 00000000 ____D () C:\Program Files\ATI
2014-06-20 11:30 - 2014-06-20 11:30 - 00000000 ____D () C:\Windows\SysWOW64\sda
2014-06-20 11:30 - 2014-06-20 11:27 - 00000000 ___HD () C:\Program Files (x86)\Temp
2014-06-20 11:30 - 2014-06-20 11:22 - 00000000 ____D () C:\Program Files (x86)\Realtek
2014-06-20 11:28 - 2014-06-20 11:28 - 00000000 ____D () C:\Windows\SysWOW64\RTCOM
2014-06-20 11:28 - 2014-06-20 11:28 - 00000000 ____D () C:\Windows\system32\SRSLabs
2014-06-20 11:28 - 2014-06-20 11:28 - 00000000 ____D () C:\Program Files\Realtek
2014-06-20 11:26 - 2014-06-20 11:24 - 00001328 _____ () C:\Windows\Synaptics.log
2014-06-20 11:25 - 2014-06-20 11:25 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_SynTP_01011.Wdf
2014-06-20 11:25 - 2014-06-20 11:25 - 00000000 ____D () C:\Program Files\Synaptics
2014-06-20 11:21 - 2014-06-20 11:21 - 00000000 ____D () C:\Windows\Dell
2014-06-20 11:21 - 2014-06-20 11:21 - 00000000 ____D () C:\Users\SergejSh\AppData\Roaming\hpqLog
2014-06-20 11:20 - 2014-06-20 11:20 - 00000000 ____D () C:\ProgramData\Hewlett-Packard
2014-06-20 11:20 - 2014-06-20 11:20 - 00000000 ____D () C:\Program Files (x86)\Hewlett-Packard
2014-06-20 11:20 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\restore
2014-06-20 11:19 - 2014-06-20 11:19 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2014-06-20 11:17 - 2014-06-20 12:09 - 00000000 ____D () C:\Windows\Panther
2014-06-20 11:17 - 2014-06-20 11:17 - 00001450 _____ () C:\Users\SergejSh\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-06-20 11:17 - 2014-06-20 11:17 - 00000020 ___SH () C:\Users\SergejSh\ntuser.ini
2014-06-20 11:17 - 2014-06-20 11:17 - 00000000 _SHDL () C:\Users\SergejSh\Vorlagen
2014-06-20 11:17 - 2014-06-20 11:17 - 00000000 _SHDL () C:\Users\SergejSh\Startmenü
2014-06-20 11:17 - 2014-06-20 11:17 - 00000000 _SHDL () C:\Users\SergejSh\Netzwerkumgebung
2014-06-20 11:17 - 2014-06-20 11:17 - 00000000 _SHDL () C:\Users\SergejSh\Lokale Einstellungen
2014-06-20 11:17 - 2014-06-20 11:17 - 00000000 _SHDL () C:\Users\SergejSh\Eigene Dateien
2014-06-20 11:17 - 2014-06-20 11:17 - 00000000 _SHDL () C:\Users\SergejSh\Druckumgebung
2014-06-20 11:17 - 2014-06-20 11:17 - 00000000 _SHDL () C:\Users\SergejSh\Documents\Eigene Musik
2014-06-20 11:17 - 2014-06-20 11:17 - 00000000 _SHDL () C:\Users\SergejSh\Documents\Eigene Bilder
2014-06-20 11:17 - 2014-06-20 11:17 - 00000000 _SHDL () C:\Users\SergejSh\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-06-20 11:17 - 2014-06-20 11:17 - 00000000 _SHDL () C:\Users\SergejSh\AppData\Local\Verlauf
2014-06-20 11:17 - 2014-06-20 11:17 - 00000000 _SHDL () C:\Users\SergejSh\AppData\Local\Anwendungsdaten
2014-06-20 11:17 - 2014-06-20 11:17 - 00000000 _SHDL () C:\Users\SergejSh\Anwendungsdaten
2014-06-20 11:17 - 2014-06-20 11:17 - 00000000 ____D () C:\Windows\System32\Tasks\WPD
2014-06-20 11:14 - 2014-06-20 11:14 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Musik
2014-06-20 11:14 - 2014-06-20 11:14 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Bilder
2014-06-20 11:14 - 2014-06-20 11:14 - 00000000 _SHDL () C:\Users\Default\Vorlagen
2014-06-20 11:14 - 2014-06-20 11:14 - 00000000 _SHDL () C:\Users\Default\Startmenü
2014-06-20 11:14 - 2014-06-20 11:14 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung
2014-06-20 11:14 - 2014-06-20 11:14 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen
2014-06-20 11:14 - 2014-06-20 11:14 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien
2014-06-20 11:14 - 2014-06-20 11:14 - 00000000 _SHDL () C:\Users\Default\Druckumgebung
2014-06-20 11:14 - 2014-06-20 11:14 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik
2014-06-20 11:14 - 2014-06-20 11:14 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder
2014-06-20 11:14 - 2014-06-20 11:14 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-06-20 11:14 - 2014-06-20 11:14 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf
2014-06-20 11:14 - 2014-06-20 11:14 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten
2014-06-20 11:14 - 2014-06-20 11:14 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten
2014-06-20 11:14 - 2014-06-20 11:14 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik
2014-06-20 11:14 - 2014-06-20 11:14 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder
2014-06-20 11:14 - 2014-06-20 11:14 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-06-20 11:14 - 2014-06-20 11:14 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf
2014-06-20 11:14 - 2014-06-20 11:14 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten
2014-06-20 11:14 - 2014-06-20 11:14 - 00000000 _SHDL () C:\Programme
2014-06-20 11:14 - 2014-06-20 11:14 - 00000000 _SHDL () C:\ProgramData\Vorlagen
2014-06-20 11:14 - 2014-06-20 11:14 - 00000000 _SHDL () C:\ProgramData\Startmenü
2014-06-20 11:14 - 2014-06-20 11:14 - 00000000 _SHDL () C:\ProgramData\Microsoft\Windows\Start Menu\Programme
2014-06-20 11:14 - 2014-06-20 11:14 - 00000000 _SHDL () C:\ProgramData\Dokumente
2014-06-20 11:14 - 2014-06-20 11:14 - 00000000 _SHDL () C:\ProgramData\Anwendungsdaten
2014-06-20 11:14 - 2014-06-20 11:14 - 00000000 _SHDL () C:\Program Files\Gemeinsame Dateien
2014-06-20 11:14 - 2014-06-20 11:14 - 00000000 _SHDL () C:\Dokumente und Einstellungen
2014-06-20 11:14 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files\Windows NT
2014-06-20 11:14 - 2013-08-22 15:36 - 00000000 __RHD () C:\Users\Default
2014-06-20 11:13 - 2014-06-20 11:13 - 00000000 __SHD () C:\Recovery
2014-06-20 11:13 - 2013-08-22 17:37 - 00002664 _____ () C:\Windows\DtcInstall.log
2014-06-20 11:13 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\Recovery
2014-06-02 08:55 - 2014-06-02 08:55 - 00829264 _____ (Microsoft Corporation) C:\Windows\system32\msvcr100.dll
2014-06-02 08:55 - 2014-06-02 08:55 - 00773968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr100.dll
2014-06-02 08:55 - 2014-06-02 08:55 - 00608080 _____ (Microsoft Corporation) C:\Windows\system32\msvcp100.dll
2014-06-02 08:55 - 2014-06-02 08:55 - 00421200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcp100.dll
2014-06-01 17:17 - 2014-06-22 15:15 - 95414520 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-05-31 07:13 - 2014-06-23 12:35 - 00703992 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-05-31 07:13 - 2014-06-23 12:35 - 00105464 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-05-30 12:21 - 2014-06-22 14:50 - 23414784 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-05-30 11:45 - 2014-06-22 14:50 - 02768384 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-05-30 11:28 - 2014-06-22 14:50 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-05-30 11:20 - 2014-06-22 14:50 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-05-30 11:18 - 2014-06-22 14:50 - 17271296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-05-30 11:08 - 2014-06-22 14:50 - 05782528 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-05-30 11:06 - 2014-06-22 14:50 - 00452096 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-05-30 10:46 - 2014-06-22 14:50 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-05-30 10:44 - 2014-06-22 14:50 - 00295424 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-05-30 10:43 - 2014-06-22 14:50 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-05-30 10:38 - 2014-06-22 14:50 - 02179072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-05-30 10:35 - 2014-06-22 14:50 - 00608768 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-05-30 10:29 - 2014-06-22 14:50 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-05-30 10:27 - 2014-06-22 14:50 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-05-30 10:23 - 2014-06-22 14:50 - 02040832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-05-30 10:16 - 2014-06-22 14:50 - 00368128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-05-30 10:04 - 2014-06-22 14:50 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-05-30 10:02 - 2014-06-22 14:50 - 00242688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-05-30 09:56 - 2014-06-22 14:50 - 04244992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-05-30 09:56 - 2014-06-22 14:50 - 02266112 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-05-30 09:54 - 2014-06-22 14:50 - 00526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-05-30 09:49 - 2014-06-22 14:50 - 01964544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-05-30 09:43 - 2014-06-22 14:50 - 13522944 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-05-30 09:40 - 2014-06-22 14:50 - 11725312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-05-30 09:30 - 2014-06-22 14:50 - 01398272 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-05-30 09:21 - 2014-06-22 14:50 - 01790976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-05-30 09:15 - 2014-06-22 14:50 - 01143296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-05-30 09:13 - 2014-06-22 14:50 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-05-30 09:13 - 2014-06-22 14:50 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
Some content of TEMP:
====================
C:\Users\SergejSh\AppData\Local\Temp\avgnt.exe
C:\Users\SergejSh\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpb8zfsk.dll
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2014-06-20 11:10
==================== End Of Log ============================
--- --- --- --- --- --- --- --- --- Vielen Dank für die schnelle und kompetente Hilfe!!!    Hat es sich bei der Malware tatsächlich bloß um die Dateien gehandelt, die ich heruntergeladen habe. Haben diese keinen weiteren Schaden angerichtet? Muss ich mir um die 2 weiteren Funde keine Sorgen machen? War ich hier also leicht hypohondrisch unterwegs?  |
|
28.06.2014, 16:11
| #19 |
| /// TB-Ausbilder /// Anleitungs-Guru | Facebook-Malware, brwlrg113.z Hi, mach Dir nicht so viele Sorgen. PC ist OK! Datenträgerbereinigung Windows 8 / 8.1
 Gibts jetzt noch Probleme mit Deinem Rechner? Oder hast Du noch Fragen? NEIN? Alle Logs gepostet? Ja! Dann lade Dir bitte  DelFix herunter.
Hinweis: DelFix entfernt u.a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst. Starte Deinen Rechner abschließend neu. Sollten jetzt noch Programme aus unserer Bereinigung übrig sein, kannst Du diese bedenkenlos löschen. >>clean<< Wir haben es geschafft! Die Logs sehen für mich im Moment sauber aus.  Wenn Du möchtest, kannst Du hier sagen, ob Du mit mir und meiner Hilfe zufrieden warst...  und/oder das Forum mit einer kleinen Spende  unterstützen. Es bleibt mir nur noch, Dir unbeschwertes und sicheres Surfen zu wünschen und dass wir uns hier so bald nicht wiedersehen. Epilog: Tipps, Dos & Don'ts  Aktualität von System und SoftwareDas Betriebsystem  Windows muss zwingend immer auf dem neusten Stand sein. Stelle sicher, dass die  automatischen Updates aktiviert sind.Auch die installierte Software sollte immer in der aktuellsten Version vorliegen. Speziell gilt das für die Browser  , Java  , Flash-Player  und PDF-Reader  , denn bekannte Sicherheitslücken in deren alten Versionen werden dazu ausgenutzt, um beim bloßen Besuch einer präparierten Website per Drive-by Download Malware zu installieren. Das kann sogar auf normalerweise legitimen Websites geschehen, wenn es einem Angreifer gelungen ist, seinen Code in die Seite einzuschleusen, und ist deshalb relativ unberechenbar.
Sicherheits-SoftwareEine Bemerkung vorneweg: Jede Softwarelösung hat ihre Schwächen. Die gesamte Verantwortung für die Sicherheit auf Software zu übertragen und einen Rundum-Schutz zu erwarten, wäre eine gefährliche Illusion. Bei unbedachtem oder bewusst risikoreichem Verhalten wird auch das beste Programm früher oder später seinen Dienst versagen (z.B. ein Virenscanner, der eine infizierte Datei nicht erkennt). Trotzdem ist entsprechende Software natürlich wichtig und hilft dir in Kombination mit einem gut gewarteten (up-to-date) System und durchdachtem Verhalten, deinen Rechner sauber zu halten.
Es liegt in der Natur der Sache, dass die am weitesten verbreitete Anwendungs-Software auch am häufigsten von Malware-Autoren attackiert wird. Es kann daher bereits einen kleinen Sicherheitsgewinn darstellen, wenn man alternative Software (z.B. einen alternativen PDF Reader) benutzt. Anstelle des Internet Explorers kann man beispielsweise den Mozilla Firefox  einsetzen, für welchen es zwei nützliche Addons als Empfehlung gibt:
(Un-)Sicheres Verhalten im InternetNebst unbemerkten Drive-by Installationen wird Malware aber auch oft mehr oder weniger aktiv vom Benutzer selbst installiert. Der Besuch zwielichtiger Websites kann bereits Risiken bergen. Und Downloads aus dubiosen Quellen sind immer russisches Roulette. Auch wenn der Virenscanner im Moment darin keine Bedrohung erkennt, muss das nichts bedeuten.
Oft wird auch versucht, den Benutzer mit mehr oder weniger trickreichen Methoden dazu zu bringen, eine für ihn verhängnisvolle Handlung selbst auszuführen (Überbegriff Social Engineering).
Nervige Adware (Werbung) und unnötige Toolbars werden auch meist durch den Benutzer selbst mitinstalliert.
Allgemeine HinweiseAbschließend noch ein paar grundsätzliche Bemerkungen:
__________________ Gruß deeprybka Lob, Kritik, Wünsche? Spende fürs trojaner-board? _______________________________________________ „Neminem laede, immo omnes, quantum potes, iuva.“ Arthur Schopenhauer |
|
| Themen zu Facebook-Malware, brwlrg113.z |
| anklicken, beiträge, beschleunigen, brwrlg, brwrlg113, brwrlg113.z, desktop, erstell, facebook, freundin, gestern, link geklickt, malware, nachricht, namen, probleme, security, seite, vbs/agent.nga, win32/bundled.toolbar.ask.d, win32/downloadsponsor.a |
Avast! Free Antivirus
Firewall. Die in Windows integrierte genügt im Normalfall völlig.
NoScript
Adblock Plus
Linear-Darstellung
