| |
| |||||||
Log-Analyse und Auswertung: Windows 7 64 Bit Virus.NeshtaWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
08.07.2014, 16:56
| #1 |
| |  Windows 7 64 Bit Virus.Neshta Hallo, Ich habe seit ca. 2 Wochen Probleme mit meinem PC. Es fing an, das Windows Standard Programme oder Fuktionen, wie DirectX nicht funktionierten. Danach ging ( Ich bin AMD- Nutzer) mein Grafikkarten Treiber, das Catalyst Control Center einfach nicht mehr auf. Mehrfache Neuinstallation bewirkte keine Änderung. Es wurden immer mehr Programme, irgendwann auch .Net Framework, Steam, Origin, mittlerweile sogar Mozilla Firefox und teilweise Malwarebytes Anti Malware. Anfangs hielt ich es für unbedeutend, dann machte ich mir jedoch Sorgen. Ich hab eine Festplatte, jedoch 2 Partitionen. Eine für Windows, eine für Daten. Die Windows Partition (C), habe ich bereits komplett gelöscht und Windows neu darauf installiert, jedoch ohne erhoffte Besserung. Neu Downloaden der Programme liefertmeistens Abhilfe, aber nur bis zum Neustart des Programms. Mir fiel auch auf, dass, sobald ein Programm gestartet wurde, sich das "Änderungsdatum" genau auf die Sekunde änderte, in der ich es gestartet hatte. Malwarebytes wies mich des öfteren auf eine Gefahr namens Virus.Neshta hin und blockierte immer mehr Programme. Vorgestern und Gestern habe ich fast nichts außer Virenscans gemacht. Malwarebytes wurde oft fündig und ich habe alles gelöscht, jedoch keine Abhilfe. Nach weiterer Recherche bin ich auf ein Tool von AVG gestoßen, dann angeblich .exe Dateien von nem Virus.Neshta "reinigen" sollte. Es lief ~3 Stunden, brachte jedoch auch keine Besserung. Ich bin nun gezwungen, hier im Internet Explorer zu schreiben, da Firefox entwedert nicht öffnet, oder von Malwarebytes blockiert wird. Genau so, viele andere Programme wie Steam etc. Sogar frisch gedownloadetes wie FRST scheint bereits "befallen" zu sein und der PC scheint immer wieder zu "vergessen", mit was er .exe Dateien öffnen soll. Sprich, sobald ich eine exe Datei starten will, soll ich ein Programm aus einer Liste zum öffnen auswählen. Das kann ich momentan jedoch noch beheben, da ich hierfür ein Tool gefunden habe was die Befehle dafür in der registry zurücksetzt. Im Anhang sind jetzt die Logs von Defogger, FRST,Gmer, sowie 2 Scan Logs und einen Daily Protection Log von Malwarebytes. Es wäre mir wichtig, das ich nicht alles löschen muss, da ich DSL 384 besitze und sich das Neu downloaden der Daten über Wochen oder Monate ziehen würde. Wenn es jedoch keine Alternative gibt, werde ich es wohl oder übel tun müssen. Logs in Text Form sind leider ~22000 Zeichen zu viel, deshalb muss ich sie leider in den Anhang hängen. Mfg und danke fürs durchlesen, reufli Edit: Teil vom Log div. Malwarebytes Logs Code:
ATTFilter Malwarebytes Anti-Malware www.malwarebytes.org Protection, 08.07.2014 16:39:57, SYSTEM, MICHAEL-PC, Protection, Malware Protection, Starting, Protection, 08.07.2014 16:39:57, SYSTEM, MICHAEL-PC, Protection, Malware Protection, Started, Protection, 08.07.2014 16:39:57, SYSTEM, MICHAEL-PC, Protection, Malicious Website Protection, Starting, Protection, 08.07.2014 16:39:57, SYSTEM, MICHAEL-PC, Protection, Malicious Website Protection, Started, Detection, 08.07.2014 16:44:17, Michael, MICHAEL-PC, Protection, Malware Protection, File, Virus.Neshta, C:\Windows\svchost.com, Quarantine, [2786e0bc22592d096fb2a29d21e2837d] Protection, 08.07.2014 16:44:17, SYSTEM, MICHAEL-PC, Protection, DeleteFile, 5, Failed, C:\Windows\svchost.com, Error, 08.07.2014 16:44:17, SYSTEM, MICHAEL-PC, Protection, DeleteFile, 5, Failed, C:\Windows\svchost.com, Detection, 08.07.2014 16:52:41, Michael, MICHAEL-PC, Protection, Malware Protection, File, Virus.Neshta, C:\Windows\svchost.com, Quarantine, [2786e0bc22592d096fb2a29d21e2837d] Detection, 08.07.2014 16:52:59, Michael, MICHAEL-PC, Protection, Malware Protection, File, Virus.Neshta, C:\Windows\svchost.com, Quarantine, [2786e0bc22592d096fb2a29d21e2837d] Detection, 08.07.2014 16:53:22, Michael, MICHAEL-PC, Protection, Malware Protection, File, Virus.Neshta, C:\Windows\svchost.com, Quarantine, [2786e0bc22592d096fb2a29d21e2837d] Detection, 08.07.2014 16:53:43, Michael, MICHAEL-PC, Protection, Malware Protection, File, Virus.Neshta, C:\Windows\svchost.com, Quarantine, [2786e0bc22592d096fb2a29d21e2837d] Protection, 08.07.2014 17:03:40, SYSTEM, MICHAEL-PC, Protection, Malware Protection, Starting, Protection, 08.07.2014 17:03:40, SYSTEM, MICHAEL-PC, Protection, Malware Protection, Started, Protection, 08.07.2014 17:03:40, SYSTEM, MICHAEL-PC, Protection, Malicious Website Protection, Starting, Protection, 08.07.2014 17:03:40, SYSTEM, MICHAEL-PC, Protection, Malicious Website Protection, Started, (end) Code:
ATTFilter Malwarebytes Anti-Malware www.malwarebytes.org Scan Date: 06.07.2014 Scan Time: 20:50:34 Logfile: Scan Log.txt Administrator: Yes Version: 2.00.2.1012 Malware Database: v2014.07.06.06 Rootkit Database: v2014.07.03.01 License: Trial Malware Protection: Enabled Malicious Website Protection: Enabled Self-protection: Disabled OS: Windows 7 CPU: x64 File System: NTFS User: Michael Scan Type: Threat Scan Result: Completed Objects Scanned: 264820 Time Elapsed: 4 min, 0 sec Memory: Enabled Startup: Enabled Filesystem: Enabled Archives: Enabled Rootkits: Disabled Heuristics: Enabled PUP: Enabled PUM: Enabled Processes: 0 (No malicious items detected) Modules: 0 (No malicious items detected) Registry Keys: 3 Virus.Neshta, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\BEService, Quarantined, [90be0d8f0b70de5816c697f1a25f3ec2], Virus.Neshta, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\LMS, Quarantined, [a2ac306c502bac8a36a624648d7410f0], Virus.Neshta, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\MozillaMaintenance, Quarantined, [6ae4e0bc027986b0cb11c2c6e12038c8], Registry Values: 0 (No malicious items detected) Registry Data: 1 Broken.OpenCommand, HKCR\exefile\shell\open\command, C:\Windows\svchost.com "Good: ("Bad: (C:\Windows\svchost.com "%1" %*),Replaced,[ffffffffffffffffffffffffffffffff]" %*)" %*, %4, %5 Folders: 0 (No malicious items detected) Files: 13 Virus.Neshta, C:\Program Files (x86)\Common Files\BattlEye\BEService.exe, Quarantined, [90be0d8f0b70de5816c697f1a25f3ec2], Virus.Neshta, C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe, Quarantined, [a2ac306c502bac8a36a624648d7410f0], Virus.Neshta, C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe, Quarantined, [6ae4e0bc027986b0cb11c2c6e12038c8], Virus.Neshta, C:\Users\Michael\AppData\Local\Temp\{134A2421-E89D-41D8-BC73-295098E65161}\ISBEWI64.exe, Quarantined, [aca216864b300234c5172a5eb64b47b9], Virus.Neshta, C:\Users\Michael\AppData\Local\Temp\{134A2421-E89D-41D8-BC73-295098E65161}\ISBEWX64.exe, Quarantined, [74da326a0c6f3cfaaa32ee9ac63bd729], Virus.Neshta, C:\Users\Michael\AppData\Local\Temp\{71CF51A8-A741-4FD7-90A9-B077111D6163}\ISBEW64.exe, Quarantined, [84cac2dae893de58c814642419e89868], Virus.Neshta, C:\Users\Michael\AppData\Local\Temp\{7A9ADC6D-A741-4ACA-AC68-FB9409E0D641}\ISBEW64.exe, Quarantined, [430b0993ef8cbe78a13be99fe71ad62a], Virus.Neshta, C:\Users\Michael\AppData\Local\Temp\Win7-64_Win7_Vista64_Vista_XP64_XP(v8.0.2.1410_5M)\IFR\IntelMeFwService.exe, Quarantined, [1e30edaf5229e84e03d9ff8932cfd52b], Virus.Neshta, C:\Users\Michael\AppData\Local\Temp\Win7-64_Win7_Vista64_Vista_XP64_XP(v8.0.2.1410_5M)\LMS\LMS.exe, Quarantined, [6de19efe2754b680e8f468205ea36898], Virus.Neshta, C:\Users\Michael\AppData\Local\Temp\Win7-64_Win7_Vista64_Vista_XP64_XP(v8.0.2.1410_5M)\UNS\UNS.exe, Quarantined, [90be524a2c4fc96de3f9513731d0ed13], Virus.Neshta, C:\Users\Michael\AppData\Local\Temp\Win7-64_Win7_Vista64_Vista_XP64_XP(v8.0.2.1410_5M)\x64\Drv64.exe, Quarantined, [4509920a83f84fe77b6199efcf3214ec], Virus.Neshta, C:\Users\Michael\AppData\Local\Temp\Win7-64_Win7_Vista64_Vista_XP64_XP(v8.0.2.1410_5M)\x64\MEcp64.exe, Quarantined, [d678504cf78449edab310f792cd57888], Virus.Neshta, C:\Windows\svchost.com, Quarantined, [8ac4dac2bfbccd6969453d013bc84bb5], Physical Sectors: 0 (No malicious items detected) (end) Code:
ATTFilter Malwarebytes Anti-Malware www.malwarebytes.org Scan Date: 07.07.2014 Scan Time: 06:57:37 Logfile: Scan Log 2.txt Administrator: Yes Version: 2.00.2.1012 Malware Database: v2014.07.07.01 Rootkit Database: v2014.07.03.01 License: Trial Malware Protection: Enabled Malicious Website Protection: Enabled Self-protection: Disabled OS: Windows 7 CPU: x64 File System: NTFS User: Michael Scan Type: Custom Scan Result: Completed Objects Scanned: 710682 Time Elapsed: 2 hr, 29 min, 48 sec Memory: Enabled Startup: Enabled Filesystem: Enabled Archives: Enabled Rootkits: Enabled Heuristics: Enabled PUP: Enabled PUM: Enabled Processes: 0 (No malicious items detected) Modules: 0 (No malicious items detected) Registry Keys: 0 (No malicious items detected) Registry Values: 0 (No malicious items detected) Registry Data: 1 Broken.OpenCommand, HKCR\exefile\shell\open\command, C:\Windows\svchost.com "Good: ("Bad: (C:\Windows\svchost.com "%1" %*),Replaced,[ffffffffffffffffffffffffffffffff]" %*)" %*, %4, %5 Folders: 0 (No malicious items detected) Files: 3 Virus.Neshta, D:\Steam\SteamApps\common\Borderlands 2\Binaries\Redist\ImgTec\PVRTexTool.exe, Quarantined, [24fea8f3582395a1af44fe8a09f8ab55], Virus.Neshta, D:\Steam\SteamApps\common\Borderlands 2\Binaries\Redist\MCPP\bin\mcpp.exe, Quarantined, [71b1dbc068134de9747f187012ef5ca4], Worm.Traces, C:\a.txt, Quarantined, [a87a108b6615e74ffa7064b4788b9967], Physical Sectors: 0 (No malicious items detected) (end) Code:
ATTFilter Malwarebytes Anti-Malware www.malwarebytes.org Scan Date: 08.07.2014 Scan Time: 17:08:54 Logfile: Scan Log 3.txt Administrator: Yes Version: 2.00.2.1012 Malware Database: v2014.07.08.06 Rootkit Database: v2014.07.07.01 License: Trial Malware Protection: Enabled Malicious Website Protection: Enabled Self-protection: Disabled OS: Windows 7 CPU: x64 File System: NTFS User: Michael Scan Type: Threat Scan Result: Completed Objects Scanned: 265328 Time Elapsed: 3 min, 51 sec Memory: Enabled Startup: Enabled Filesystem: Enabled Archives: Enabled Rootkits: Disabled Heuristics: Enabled PUP: Enabled PUM: Enabled Processes: 0 (No malicious items detected) Modules: 0 (No malicious items detected) Registry Keys: 0 (No malicious items detected) Registry Values: 0 (No malicious items detected) Registry Data: 1 Broken.OpenCommand, HKCR\exefile\shell\open\command, C:\Windows\svchost.com "Good: ("Bad: (C:\Windows\svchost.com "%1" %*),,[ffffffffffffffffffffffffffffffff]" %*)" %*, %4, %5 Folders: 0 (No malicious items detected) Files: 2 Virus.Neshta, C:\Users\Michael\Desktop\Defogger.exe, , [da3c524babd095a169c22267c140c13f], Virus.Neshta, C:\Windows\svchost.com, , [39ddbfdecead4ee8ff3f2d141fe419e7], Physical Sectors: 0 (No malicious items detected) (end) FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 05-07-2014 01
Ran by Michael (administrator) on MICHAEL-PC on 08-07-2014 17:23:29
Running from C:\Users\Michael\Desktop
Platform: Windows 7 Home Premium (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 8
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
() C:\Windows\SysWOW64\PnkBstrB.exe
() D:\Program Files\WinRAR\WinRAR.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
() D:\Program Files\WinRAR\WinRAR.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13307496 2011-10-17] (Realtek Semiconductor)
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [664856 2014-07-06] (Intel Corporation)
HKLM-x32\...\Run: [StartCCC] => D:\Programme\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [808672 2014-07-08] ()
HKLM-x32\...\Run: [IMSS] => C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe [133400 2014-07-06] (Intel Corporation)
HKU\S-1-5-21-882108099-3936887999-2136734702-1000\...\Run: [Steam] => D:\Steam\steam.exe [1836224 2014-07-08] ()
HKU\S-1-5-21-882108099-3936887999-2136734702-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [21444224 2014-05-08] (Skype Technologies S.A.)
HKU\S-1-5-21-882108099-3936887999-2136734702-1000\...\MountPoints2: {0ea6204a-f3e4-11e3-b8ab-bc5ff453abbf} - G:\pushinst.exe
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xB4442D7EBC9ACF01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - D:\Programme\bin\ssv.dll (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - D:\Programme\bin\jp2ssv.dll (Oracle Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
FireFox:
========
FF ProfilePath: C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\3t83s250.default
FF Homepage: google.de
FF NetworkProxy: "socks_remote_dns", true
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_14_0_0_125.dll ()
FF Plugin: @java.com/DTPlugin,version=10.60.2 - D:\Programme\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.60.2 - D:\Programme\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_125.dll ()
FF Plugin-x32: @videolan.org/vlc,version=2.0.8 - D:\Program Files (x86)\VideoLAN\VLC\npvlc.dll No File
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 - D:\Programme\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Extension: FoxyProxy Standard - C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\3t83s250.default\Extensions\foxyproxy@eric.h.jung [2014-06-16]
FF Extension: DownloadHelper - C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\3t83s250.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2014-06-28]
FF Extension: G Data WebFilter - D:\extensions\{9AA46F4F-4DC7-4c06-97AF-5035170633FE} [2011-07-29]
FF Extension: Java Console - D:\extensions\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} [2011-01-03]
FF StartMenuInternet: FIREFOX.EXE - D:\Programme\MozillaFirefox\firefox.exe
==================== Services (Whitelisted) =================
S2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1809720 2014-05-12] (Malwarebytes Corporation)
S2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [860472 2014-05-12] (Malwarebytes Corporation)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [75136 2014-07-04] ()
R2 PnkBstrB; C:\Windows\SysWOW64\PnkBstrB.exe [189248 2014-07-04] ()
==================== Drivers (Whitelisted) ====================
S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-05-12] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2014-05-12] (Malwarebytes Corporation)
S3 GPU-Z; \??\C:\Users\Michael\AppData\Local\Temp\GPU-Z.sys [X]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-07-08 17:23 - 2014-07-08 17:23 - 00005706 _____ () C:\Users\Michael\Desktop\FRST.txt
2014-07-08 17:23 - 2014-07-08 17:23 - 00000000 ____D () C:\FRST
2014-07-08 17:04 - 2014-07-08 17:05 - 00380416 _____ () C:\Users\Michael\Desktop\Gmer-19357.exe
2014-07-08 17:03 - 2014-07-08 17:03 - 02084352 _____ (Farbar) C:\Users\Michael\Desktop\FRST64.exe
2014-07-08 17:01 - 2014-07-08 17:01 - 00000476 _____ () C:\Users\Michael\Desktop\defogger_disable.log
2014-07-08 17:01 - 2014-07-08 17:01 - 00000000 _____ () C:\Users\Michael\defogger_reenable
2014-07-08 17:00 - 2014-07-08 17:03 - 00091949 _____ () C:\Users\Michael\Desktop\Defogger.exe
2014-07-07 16:05 - 2014-07-07 16:05 - 00000530 _____ () C:\Users\Public\Desktop\Steam.lnk
2014-07-07 12:38 - 2014-07-07 15:17 - 00001855 _____ () C:\rmneshta.log
2014-07-06 20:46 - 2014-07-08 17:08 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-07-06 20:46 - 2014-07-07 00:32 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware
2014-07-06 20:46 - 2014-07-06 20:46 - 00001102 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-07-06 20:46 - 2014-07-06 20:46 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware
2014-07-06 20:46 - 2014-07-06 20:46 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-07-06 20:46 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-07-06 20:46 - 2014-05-12 07:26 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-07-06 20:46 - 2014-05-12 07:25 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-07-05 09:57 - 2014-07-05 10:34 - 00000000 ____D () C:\Users\Michael\Documents\Euro Truck Simulator 2
2014-07-01 22:32 - 2014-07-04 20:16 - 00189248 _____ () C:\Windows\SysWOW64\PnkBstrB.exe
2014-07-01 22:32 - 2014-07-04 20:16 - 00189248 _____ () C:\Windows\SysWOW64\PnkBstrB.ex0
2014-07-01 22:32 - 2014-07-04 20:16 - 00075136 _____ () C:\Windows\SysWOW64\PnkBstrA.exe
2014-06-28 23:12 - 2014-06-28 23:14 - 00466520 _____ (Creative Labs) C:\Windows\system32\wrap_oal.dll
2014-06-28 23:12 - 2014-06-28 23:14 - 00445016 _____ (Creative Labs) C:\Windows\SysWOW64\wrap_oal.dll
2014-06-28 23:12 - 2014-06-28 23:14 - 00123480 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\Windows\system32\OpenAL32.dll
2014-06-28 23:12 - 2014-06-28 23:14 - 00109144 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\Windows\SysWOW64\OpenAL32.dll
2014-06-28 23:12 - 2014-06-28 23:12 - 00000000 ____D () C:\Program Files (x86)\OpenAL
2014-06-28 19:13 - 2014-06-28 19:13 - 00000000 ____D () C:\Users\Michael\AppData\Local\BigHugeEngine
2014-06-28 14:03 - 2014-06-28 14:03 - 00000000 ____D () C:\Users\Michael\dwhelper
2014-06-27 22:39 - 2014-06-27 22:40 - 00000000 ____D () C:\Users\Michael\AppData\Local\Origin
2014-06-27 22:11 - 2014-06-27 22:11 - 00000653 _____ () C:\Users\Public\Desktop\Origin.lnk
2014-06-27 22:11 - 2014-06-27 22:11 - 00000000 ____D () C:\ProgramData\Electronic Arts
2014-06-27 22:04 - 2014-06-27 22:00 - 00000886 ____N () C:\Users\Michael\Desktop\exe_fix_w7.zip
2014-06-26 21:16 - 2014-06-26 21:16 - 00000851 _____ () C:\Users\Michael\Desktop\Uplay.lnk
2014-06-26 21:16 - 2014-06-26 21:16 - 00000000 ____D () C:\Users\Michael\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ubisoft
2014-06-25 23:06 - 2014-06-27 13:04 - 00000000 ____D () C:\Users\Michael\AppData\Local\Ubisoft Game Launcher
2014-06-25 22:21 - 2014-07-07 21:59 - 00000000 ____D () C:\Users\Michael\AppData\Roaming\vlc
2014-06-25 22:20 - 2014-07-07 20:53 - 00000734 _____ () C:\Users\Public\Desktop\VLC media player.lnk
2014-06-25 22:20 - 2014-06-25 22:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2014-06-25 20:13 - 2014-06-25 20:13 - 00000000 ____D () C:\Users\Michael\Documents\SavedGames
2014-06-25 20:13 - 2014-06-25 20:13 - 00000000 ____D () C:\Users\Michael\AppData\Roaming\Rogue Legacy
2014-06-25 19:57 - 2014-06-25 19:57 - 00000000 ____D () C:\Program Files (x86)\Microsoft XNA
2014-06-25 19:11 - 2014-06-29 00:35 - 00038481 _____ () C:\Users\Michael\Documents\TombRaider.log
2014-06-25 17:22 - 2014-06-20 10:30 - 00000446 _____ () C:\Users\Michael\Documents\indexfile.txt
2014-06-24 19:49 - 2014-06-24 19:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Xiph.Org
2014-06-21 23:40 - 2014-06-21 23:40 - 00000000 ____D () C:\Users\Michael\AppData\Local\Introversion
2014-06-21 16:26 - 2014-06-21 16:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Vanity Pack
2014-06-20 22:44 - 2014-06-20 22:44 - 00000000 ____D () C:\Users\Michael\AppData\Local\Criterion Games
2014-06-20 22:29 - 2014-06-20 22:30 - 00000000 ____D () C:\Users\Michael\AppData\Local\Skyrim
2014-06-20 22:29 - 2014-06-20 22:29 - 00000747 _____ () C:\Users\Public\Desktop\Nexus Mod Manager.lnk
2014-06-20 22:29 - 2014-06-20 22:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nexus Mod Manager
2014-06-20 10:45 - 2014-06-25 17:08 - 00000768 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-06-20 10:45 - 2014-06-25 17:08 - 00000768 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-06-20 10:32 - 2014-06-20 10:32 - 00003068 _____ () C:\Windows\System32\Tasks\{6B7B7DDF-3F2C-460E-B34E-F866FED39582}
2014-06-20 10:30 - 2014-06-20 10:30 - 07462643 _____ () C:\Users\Michael\Documents\Firefox 30.0 (de) - 2014-06-20.pcv
2014-06-17 23:06 - 2014-06-21 20:43 - 00000122 _____ () C:\Users\Michael\Desktop\Steam.txt
2014-06-17 18:01 - 2014-06-17 18:01 - 00000000 ____D () C:\Users\Michael\AppData\Local\PunkBuster
2014-06-17 17:55 - 2014-06-17 17:55 - 00000000 ____D () C:\ProgramData\Adobe
2014-06-17 17:54 - 2014-06-17 17:54 - 00000000 ____D () C:\Users\Default\AppData\Roaming\Macromedia
2014-06-17 17:54 - 2014-06-17 17:54 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\Macromedia
2014-06-17 17:54 - 2014-06-17 17:54 - 00000000 ____D () C:\Program Files (x86)\Adobe
2014-06-17 17:53 - 2014-06-17 17:53 - 00053882 _____ () C:\Windows\SysWOW64\CCCInstall_201406171753082987.log
2014-06-17 17:53 - 2014-06-17 17:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Catalyst Control Center
2014-06-17 17:53 - 2014-06-17 17:53 - 00000000 ____D () C:\ProgramData\ATI
2014-06-17 17:53 - 2014-06-17 17:53 - 00000000 ____D () C:\Program Files (x86)\AMD AVT
2014-06-17 17:51 - 2014-06-17 17:51 - 00000000 ____D () C:\Program Files\AMD
2014-06-17 17:48 - 2014-06-17 17:48 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2014-06-17 17:47 - 2014-06-17 17:47 - 00000000 ____D () C:\Users\Michael\AppData\Local\2K Games
2014-06-16 23:59 - 2014-06-17 23:01 - 00000000 ____D () C:\Users\Michael\AppData\Local\Battle.net
2014-06-16 23:59 - 2014-06-17 00:02 - 00000000 ____D () C:\Users\Michael\AppData\Roaming\Battle.net
2014-06-16 23:59 - 2014-06-16 23:59 - 00000786 _____ () C:\Users\Public\Desktop\Battle.net.lnk
2014-06-16 23:59 - 2014-06-16 23:59 - 00000000 ____D () C:\Users\Michael\AppData\Local\Blizzard Entertainment
2014-06-16 23:59 - 2014-06-16 23:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battle.net
2014-06-16 23:59 - 2014-06-16 23:59 - 00000000 ____D () C:\ProgramData\Blizzard Entertainment
2014-06-16 23:27 - 2014-06-16 23:27 - 00000000 ____D () C:\ProgramData\Battle.net
2014-06-16 20:09 - 2014-06-16 20:09 - 00000000 ____D () C:\Users\Michael\Documents\Witcher 2
2014-06-16 20:09 - 2014-06-16 20:09 - 00000000 ____D () C:\Users\Michael\AppData\Local\The Witcher 2
2014-06-16 19:25 - 2014-06-16 19:25 - 00000679 _____ () C:\Users\Michael\Desktop\League of Trolls and French Retards.lnk
2014-06-16 16:34 - 2014-06-16 16:34 - 00000000 ____D () C:\Users\Michael\AppData\Roaming\LolClient
2014-06-16 14:42 - 2014-06-16 16:06 - 00000000 ____D () C:\Users\Michael\AppData\Roaming\Mozilla
2014-06-16 14:42 - 2014-06-16 14:42 - 00000000 ____D () C:\ProgramData\Mozilla
2014-06-16 14:42 - 2014-06-16 14:42 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-06-16 14:30 - 2014-06-16 14:30 - 00313256 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2014-06-16 14:30 - 2014-06-16 14:30 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2014-06-16 14:30 - 2014-06-16 14:30 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2014-06-16 14:30 - 2014-06-16 14:30 - 00111016 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2014-06-16 14:30 - 2014-06-16 14:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-06-16 14:14 - 2014-06-16 14:14 - 05471522 _____ () C:\Users\Michael\Documents\Firefox 30.0 (de) - 2014-06-16.pcv
2014-06-16 14:13 - 2014-06-16 14:13 - 00000739 _____ () C:\Users\Public\Desktop\MozBackup.lnk
2014-06-16 14:13 - 2014-06-16 14:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MozBackup
2014-06-16 01:34 - 2014-06-27 22:40 - 00000000 ____D () C:\Users\Michael\AppData\Roaming\Origin
2014-06-16 00:53 - 2014-06-16 00:53 - 00000000 ____D () C:\Users\Michael\AppData\Roaming\ATI
2014-06-16 00:53 - 2014-06-16 00:53 - 00000000 ____D () C:\Users\Michael\AppData\Local\ATI
2014-06-16 00:39 - 2014-07-03 21:35 - 01591896 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2014-06-16 00:16 - 2009-11-25 11:47 - 01942856 _____ (Microsoft Corporation) C:\Windows\system32\dfshim.dll
2014-06-16 00:16 - 2009-11-25 11:47 - 01130824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dfshim.dll
2014-06-16 00:16 - 2009-11-25 11:47 - 00444752 _____ (Microsoft Corporation) C:\Windows\system32\mscoree.dll
2014-06-16 00:16 - 2009-11-25 11:47 - 00320352 _____ (Microsoft Corporation) C:\Windows\system32\PresentationHost.exe
2014-06-16 00:16 - 2009-11-25 11:47 - 00297808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscoree.dll
2014-06-16 00:16 - 2009-11-25 11:47 - 00295264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationHost.exe
2014-06-16 00:16 - 2009-11-25 11:47 - 00109912 _____ (Microsoft Corporation) C:\Windows\system32\PresentationHostProxy.dll
2014-06-16 00:16 - 2009-11-25 11:47 - 00099176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationHostProxy.dll
2014-06-16 00:16 - 2009-11-25 11:47 - 00049472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netfxperf.dll
2014-06-16 00:16 - 2009-11-25 11:47 - 00048960 _____ (Microsoft Corporation) C:\Windows\system32\netfxperf.dll
2014-06-15 11:30 - 2014-06-18 13:25 - 00000000 ____D () C:\Users\Michael\AppData\Roaming\WinRAR
2014-06-15 11:30 - 2014-06-15 11:30 - 00000000 ____D () C:\Users\Michael\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-06-15 11:30 - 2014-06-15 11:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-06-15 11:25 - 2014-06-15 11:25 - 458474165 _____ () C:\Windows\MEMORY.DMP
2014-06-15 11:25 - 2014-06-15 11:25 - 00275000 _____ () C:\Windows\Minidump\061514-15834-01.dmp
2014-06-15 11:25 - 2014-06-15 11:25 - 00000000 ____D () C:\Windows\Minidump
2014-06-15 01:39 - 2014-06-15 01:39 - 00000814 _____ () C:\Users\Michael\Desktop\Steam.lnk
2014-06-15 01:14 - 2014-06-15 01:14 - 00000095 _____ () C:\Users\Michael\Desktop\SoD.txt
2014-06-15 00:41 - 2014-06-20 22:32 - 00000000 ____D () C:\Users\Michael\AppData\Local\Black_Tree_Gaming
2014-06-15 00:41 - 2014-06-15 01:06 - 00000000 ____D () C:\Users\Michael\Documents\Nexus Mod Manager
2014-06-15 00:08 - 2014-06-17 17:50 - 00000000 ____D () C:\ProgramData\Package Cache
2014-06-15 00:08 - 2008-10-15 06:22 - 05631312 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_40.dll
2014-06-15 00:08 - 2008-10-15 06:22 - 04379984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_40.dll
2014-06-15 00:08 - 2008-10-15 06:22 - 02605920 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_40.dll
2014-06-15 00:08 - 2008-10-15 06:22 - 02036576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_40.dll
2014-06-15 00:08 - 2008-10-15 06:22 - 00519000 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_40.dll
2014-06-15 00:08 - 2008-10-15 06:22 - 00452440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_40.dll
2014-06-14 23:33 - 2014-07-08 16:43 - 00698770 _____ () C:\Windows\system32\perfh007.dat
2014-06-14 23:33 - 2014-07-08 16:43 - 00148910 _____ () C:\Windows\system32\perfc007.dat
2014-06-14 23:33 - 2014-06-14 23:33 - 00262144 _____ () C:\Windows\system32\config\userdiff
2014-06-14 23:33 - 2014-06-14 23:32 - 00295922 _____ () C:\Windows\system32\perfi007.dat
2014-06-14 23:33 - 2014-06-14 23:32 - 00038104 _____ () C:\Windows\system32\perfd007.dat
2014-06-14 23:33 - 2014-06-14 13:51 - 00000000 ____D () C:\Windows\PANTHER
2014-06-14 23:33 - 2007-11-08 15:14 - 00043256 ____R () C:\Windows\system32\OEMLOGO.BMP
2014-06-14 23:33 - 2007-11-08 15:14 - 00043256 ____R () C:\Windows\LOGO_POSITIVE_JPG_MIDDLE.BMP
2014-06-14 23:32 - 2014-06-14 23:32 - 00000000 ____D () C:\Windows\SysWOW64\XPSViewer
2014-06-14 23:32 - 2014-06-14 23:32 - 00000000 ____D () C:\Windows\SysWOW64\de
2014-06-14 23:32 - 2014-06-14 23:32 - 00000000 ____D () C:\Windows\SysWOW64\0407
2014-06-14 23:32 - 2014-06-14 23:32 - 00000000 ____D () C:\Windows\system32\de
2014-06-14 23:32 - 2014-06-14 23:32 - 00000000 ____D () C:\Windows\system32\0407
2014-06-14 23:27 - 2014-06-14 23:27 - 00000000 ___HD () C:\$INPLACE.~TR
2014-06-14 23:27 - 2014-06-14 13:41 - 00000000 ___HD () C:\$WINDOWS.~Q
2014-06-14 22:32 - 2014-06-14 22:32 - 00001477 _____ () C:\Users\Michael\Desktop\APBLauncher - Verknüpfung.lnk
2014-06-14 22:30 - 2014-06-14 22:30 - 00000083 _____ () C:\Users\Michael\ClientFiles.xml
2014-06-14 21:12 - 2014-07-06 18:30 - 00000000 ____D () C:\Users\Michael\AppData\Local\Arma 3
2014-06-14 21:12 - 2014-06-14 21:13 - 00000000 ____D () C:\Users\Michael\Documents\Arma 3
2014-06-14 21:12 - 2014-06-14 21:12 - 00000000 ____D () C:\ProgramData\Bohemia Interactive
2014-06-14 19:53 - 2014-06-14 19:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
2014-06-14 18:53 - 2014-06-14 18:53 - 00000000 ____D () C:\Users\Michael\AVM_Driver
2014-06-14 17:02 - 2014-07-04 20:16 - 00168386 _____ () C:\Windows\DirectX.log
2014-06-14 17:02 - 2010-06-02 04:55 - 00527192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_7.dll
2014-06-14 17:02 - 2010-06-02 04:55 - 00518488 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_7.dll
2014-06-14 17:02 - 2010-06-02 04:55 - 00239960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_7.dll
2014-06-14 17:02 - 2010-06-02 04:55 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_7.dll
2014-06-14 17:02 - 2010-06-02 04:55 - 00077656 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_5.dll
2014-06-14 17:02 - 2010-06-02 04:55 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_5.dll
2014-06-14 17:02 - 2010-05-26 11:41 - 02526056 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_43.dll
2014-06-14 17:02 - 2010-05-26 11:41 - 02401112 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_43.dll
2014-06-14 17:02 - 2010-05-26 11:41 - 02106216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_43.dll
2014-06-14 17:02 - 2010-05-26 11:41 - 01998168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_43.dll
2014-06-14 17:02 - 2010-05-26 11:41 - 01907552 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_43.dll
2014-06-14 17:02 - 2010-05-26 11:41 - 01868128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_43.dll
2014-06-14 17:02 - 2010-05-26 11:41 - 00511328 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_43.dll
2014-06-14 17:02 - 2010-05-26 11:41 - 00470880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_43.dll
2014-06-14 17:02 - 2010-05-26 11:41 - 00276832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_43.dll
2014-06-14 17:02 - 2010-05-26 11:41 - 00248672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_43.dll
2014-06-14 17:02 - 2010-02-04 10:01 - 00530776 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_6.dll
2014-06-14 17:02 - 2010-02-04 10:01 - 00528216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_6.dll
2014-06-14 17:02 - 2010-02-04 10:01 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_6.dll
2014-06-14 17:02 - 2010-02-04 10:01 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_6.dll
2014-06-14 17:02 - 2010-02-04 10:01 - 00078680 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_4.dll
2014-06-14 17:02 - 2010-02-04 10:01 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_4.dll
2014-06-14 17:02 - 2010-02-04 10:01 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_7.dll
2014-06-14 17:02 - 2010-02-04 10:01 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_7.dll
2014-06-14 17:02 - 2009-09-04 17:44 - 00517960 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_5.dll
2014-06-14 17:02 - 2009-09-04 17:44 - 00515416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_5.dll
2014-06-14 17:02 - 2009-09-04 17:44 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_5.dll
2014-06-14 17:02 - 2009-09-04 17:44 - 00176968 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_5.dll
2014-06-14 17:02 - 2009-09-04 17:44 - 00073544 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_3.dll
2014-06-14 17:02 - 2009-09-04 17:44 - 00069464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_3.dll
2014-06-14 17:02 - 2009-09-04 17:29 - 05554512 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_42.dll
2014-06-14 17:02 - 2009-09-04 17:29 - 05501792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_42.dll
2014-06-14 17:02 - 2009-09-04 17:29 - 02582888 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_42.dll
2014-06-14 17:02 - 2009-09-04 17:29 - 02475352 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_42.dll
2014-06-14 17:02 - 2009-09-04 17:29 - 01974616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_42.dll
2014-06-14 17:02 - 2009-09-04 17:29 - 01892184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_42.dll
2014-06-14 17:02 - 2009-09-04 17:29 - 00523088 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_42.dll
2014-06-14 17:02 - 2009-09-04 17:29 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_42.dll
2014-06-14 17:02 - 2009-09-04 17:29 - 00285024 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_42.dll
2014-06-14 17:02 - 2009-09-04 17:29 - 00235344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_42.dll
2014-06-14 17:02 - 2009-03-16 14:18 - 00521560 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_4.dll
2014-06-14 17:02 - 2009-03-16 14:18 - 00517448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_4.dll
2014-06-14 17:02 - 2009-03-16 14:18 - 00235352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_4.dll
2014-06-14 17:02 - 2009-03-16 14:18 - 00174936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_4.dll
2014-06-14 17:02 - 2009-03-16 14:18 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_6.dll
2014-06-14 17:02 - 2009-03-16 14:18 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_6.dll
2014-06-14 17:02 - 2009-03-09 15:27 - 05425496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_41.dll
2014-06-14 17:02 - 2009-03-09 15:27 - 04178264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_41.dll
2014-06-14 17:02 - 2009-03-09 15:27 - 02430312 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_41.dll
2014-06-14 17:02 - 2009-03-09 15:27 - 01846632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_41.dll
2014-06-14 17:02 - 2009-03-09 15:27 - 00520544 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_41.dll
2014-06-14 17:02 - 2009-03-09 15:27 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_41.dll
2014-06-14 17:02 - 2008-10-27 10:04 - 00518480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_3.dll
2014-06-14 17:02 - 2008-10-27 10:04 - 00514384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_3.dll
2014-06-14 17:02 - 2008-10-27 10:04 - 00235856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_3.dll
2014-06-14 17:02 - 2008-10-27 10:04 - 00175440 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_3.dll
2014-06-14 17:02 - 2008-10-27 10:04 - 00074576 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_2.dll
2014-06-14 17:02 - 2008-10-27 10:04 - 00070992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_2.dll
2014-06-14 17:02 - 2008-10-27 10:04 - 00025936 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_5.dll
2014-06-14 17:02 - 2008-10-27 10:04 - 00023376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_5.dll
2014-06-14 17:02 - 2008-07-31 10:41 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_2.dll
2014-06-14 17:02 - 2008-07-31 10:41 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_2.dll
2014-06-14 17:02 - 2008-07-31 10:41 - 00072200 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_1.dll
2014-06-14 17:02 - 2008-07-31 10:41 - 00068616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_1.dll
2014-06-14 17:02 - 2008-07-31 10:40 - 00513544 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_2.dll
2014-06-14 17:02 - 2008-07-31 10:40 - 00509448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_2.dll
2014-06-14 17:02 - 2008-07-10 11:01 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_39.dll
2014-06-14 17:02 - 2008-07-10 11:00 - 04992520 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_39.dll
2014-06-14 17:02 - 2008-07-10 11:00 - 03851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll
2014-06-14 17:02 - 2008-07-10 11:00 - 01942552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_39.dll
2014-06-14 17:02 - 2008-07-10 11:00 - 01493528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_39.dll
2014-06-14 17:02 - 2008-07-10 11:00 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_39.dll
2014-06-14 17:02 - 2008-05-30 14:19 - 00511496 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_1.dll
2014-06-14 17:02 - 2008-05-30 14:19 - 00507400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_1.dll
2014-06-14 17:02 - 2008-05-30 14:18 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_1.dll
2014-06-14 17:02 - 2008-05-30 14:18 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_1.dll
2014-06-14 17:02 - 2008-05-30 14:17 - 00068104 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_0.dll
2014-06-14 17:02 - 2008-05-30 14:17 - 00065032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_0.dll
2014-06-14 17:02 - 2008-05-30 14:17 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_4.dll
2014-06-14 17:02 - 2008-05-30 14:16 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_4.dll
2014-06-14 17:02 - 2008-05-30 14:11 - 04991496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_38.dll
2014-06-14 17:02 - 2008-05-30 14:11 - 03850760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_38.dll
2014-06-14 17:02 - 2008-05-30 14:11 - 01941528 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_38.dll
2014-06-14 17:02 - 2008-05-30 14:11 - 01491992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_38.dll
2014-06-14 17:02 - 2008-05-30 14:11 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_38.dll
2014-06-14 17:02 - 2008-05-30 14:11 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_38.dll
2014-06-14 17:02 - 2008-03-05 16:04 - 00489480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_0.dll
2014-06-14 17:02 - 2008-03-05 16:03 - 00479752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_0.dll
2014-06-14 17:02 - 2008-03-05 16:03 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_0.dll
2014-06-14 17:02 - 2008-03-05 16:03 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_0.dll
2014-06-14 17:02 - 2008-03-05 16:00 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_3.dll
2014-06-14 17:02 - 2008-03-05 16:00 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_3.dll
2014-06-14 17:02 - 2008-03-05 15:56 - 04910088 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_37.dll
2014-06-14 17:02 - 2008-03-05 15:56 - 03786760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_37.dll
2014-06-14 17:02 - 2008-03-05 15:56 - 01860120 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_37.dll
2014-06-14 17:02 - 2008-03-05 15:56 - 01420824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_37.dll
2014-06-14 17:02 - 2008-02-05 23:07 - 00529424 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_37.dll
2014-06-14 17:02 - 2008-02-05 23:07 - 00462864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_37.dll
2014-06-14 17:02 - 2007-10-22 03:40 - 00411656 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_10.dll
2014-06-14 17:02 - 2007-10-22 03:39 - 00267272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_10.dll
2014-06-14 17:02 - 2007-10-22 03:37 - 00021000 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_2.dll
2014-06-14 17:02 - 2007-10-22 03:37 - 00017928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_2.dll
2014-06-14 17:02 - 2007-10-12 15:14 - 05081608 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_36.dll
2014-06-14 17:02 - 2007-10-12 15:14 - 03734536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_36.dll
2014-06-14 17:02 - 2007-10-12 15:14 - 02006552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_36.dll
2014-06-14 17:02 - 2007-10-12 15:14 - 01374232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_36.dll
2014-06-14 17:02 - 2007-10-02 09:56 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_36.dll
2014-06-14 17:02 - 2007-10-02 09:56 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_36.dll
2014-06-14 17:02 - 2007-07-20 00:57 - 00411496 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_9.dll
2014-06-14 17:02 - 2007-07-20 00:57 - 00267112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_9.dll
2014-06-14 17:02 - 2007-07-19 18:14 - 05073256 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_35.dll
2014-06-14 17:02 - 2007-07-19 18:14 - 03727720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_35.dll
2014-06-14 17:02 - 2007-07-19 18:14 - 01985904 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_35.dll
2014-06-14 17:02 - 2007-07-19 18:14 - 01358192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_35.dll
2014-06-14 17:02 - 2007-07-19 18:14 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_35.dll
2014-06-14 17:02 - 2007-07-19 18:14 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_35.dll
2014-06-14 17:02 - 2007-06-20 20:49 - 00409960 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_8.dll
2014-06-14 17:02 - 2007-06-20 20:46 - 00266088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_8.dll
2014-06-14 17:02 - 2007-05-16 16:45 - 04496232 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_34.dll
2014-06-14 17:02 - 2007-05-16 16:45 - 03497832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_34.dll
2014-06-14 17:02 - 2007-05-16 16:45 - 01401200 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_34.dll
2014-06-14 17:02 - 2007-05-16 16:45 - 01124720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_34.dll
2014-06-14 17:02 - 2007-05-16 16:45 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_34.dll
2014-06-14 17:02 - 2007-05-16 16:45 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_34.dll
2014-06-14 17:02 - 2007-04-04 18:55 - 00403304 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_7.dll
2014-06-14 17:02 - 2007-04-04 18:55 - 00261480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_7.dll
2014-06-14 17:02 - 2007-04-04 18:54 - 00107368 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_3.dll
2014-06-14 17:02 - 2007-04-04 18:53 - 00081768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_3.dll
2014-06-14 17:02 - 2007-03-15 16:57 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_33.dll
2014-06-14 17:02 - 2007-03-15 16:57 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_33.dll
2014-06-14 17:02 - 2007-03-12 16:42 - 04494184 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_33.dll
2014-06-14 17:02 - 2007-03-12 16:42 - 03495784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_33.dll
2014-06-14 17:02 - 2007-03-12 16:42 - 01400176 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_33.dll
2014-06-14 17:02 - 2007-03-12 16:42 - 01123696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_33.dll
2014-06-14 17:02 - 2007-03-05 12:42 - 00017688 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_1.dll
2014-06-14 17:02 - 2007-03-05 12:42 - 00015128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_1.dll
2014-06-14 17:02 - 2007-01-24 15:27 - 00393576 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_6.dll
2014-06-14 17:02 - 2007-01-24 15:27 - 00255848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_6.dll
2014-06-14 17:02 - 2006-12-08 12:02 - 00251672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_5.dll
2014-06-14 17:02 - 2006-12-08 12:00 - 00390424 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_5.dll
2014-06-14 17:02 - 2006-11-29 13:06 - 04398360 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_32.dll
2014-06-14 17:02 - 2006-11-29 13:06 - 03426072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_32.dll
2014-06-14 17:02 - 2006-11-29 13:06 - 00469264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10.dll
2014-06-14 17:02 - 2006-11-29 13:06 - 00440080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10.dll
2014-06-14 17:02 - 2006-09-28 16:05 - 03977496 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_31.dll
2014-06-14 17:02 - 2006-09-28 16:05 - 02414360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_31.dll
2014-06-14 17:02 - 2006-09-28 16:05 - 00237848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_4.dll
2014-06-14 17:02 - 2006-09-28 16:04 - 00364824 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_4.dll
2014-06-14 17:02 - 2006-07-28 09:31 - 00083736 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_2.dll
2014-06-14 17:02 - 2006-07-28 09:30 - 00363288 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_3.dll
2014-06-14 17:02 - 2006-07-28 09:30 - 00236824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_3.dll
2014-06-14 17:02 - 2006-07-28 09:30 - 00062744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_2.dll
2014-06-14 17:02 - 2006-05-31 07:24 - 00230168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_2.dll
2014-06-14 17:02 - 2006-05-31 07:22 - 00354072 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_2.dll
2014-06-14 17:02 - 2006-03-31 12:41 - 03927248 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_30.dll
2014-06-14 17:02 - 2006-03-31 12:40 - 02388176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_30.dll
2014-06-14 17:02 - 2006-03-31 12:40 - 00352464 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_1.dll
2014-06-14 17:02 - 2006-03-31 12:39 - 00229584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_1.dll
2014-06-14 17:02 - 2006-03-31 12:39 - 00083664 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_1.dll
2014-06-14 17:02 - 2006-03-31 12:39 - 00062672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_1.dll
2014-06-14 17:02 - 2006-02-03 08:43 - 03830992 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_29.dll
2014-06-14 17:02 - 2006-02-03 08:43 - 02332368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_29.dll
2014-06-14 17:02 - 2006-02-03 08:42 - 00355536 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_0.dll
2014-06-14 17:02 - 2006-02-03 08:42 - 00230096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_0.dll
2014-06-14 17:02 - 2006-02-03 08:41 - 00016592 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_0.dll
2014-06-14 17:02 - 2006-02-03 08:41 - 00014032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_0.dll
2014-06-14 17:02 - 2005-12-05 18:09 - 03815120 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_28.dll
2014-06-14 17:02 - 2005-12-05 18:09 - 02323664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_28.dll
2014-06-14 17:02 - 2005-07-22 19:59 - 03807440 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_27.dll
2014-06-14 17:02 - 2005-07-22 19:59 - 02319568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_27.dll
2014-06-14 17:02 - 2005-05-26 15:34 - 03767504 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_26.dll
2014-06-14 17:02 - 2005-05-26 15:34 - 02297552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_26.dll
2014-06-14 17:02 - 2005-03-18 17:19 - 03823312 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_25.dll
2014-06-14 17:02 - 2005-03-18 17:19 - 02337488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_25.dll
2014-06-14 17:02 - 2005-02-05 19:45 - 03544272 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_24.dll
2014-06-14 17:02 - 2005-02-05 19:45 - 02222800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_24.dll
2014-06-14 16:36 - 2014-06-14 16:36 - 00000000 ____D () C:\Users\Michael\AppData\Local\Apps\2.0
2014-06-14 16:17 - 2014-07-08 17:14 - 00000000 ____D () C:\Users\Michael\AppData\Roaming\Skype
2014-06-14 16:17 - 2014-06-14 16:17 - 00002517 _____ () C:\Users\Public\Desktop\Skype.lnk
2014-06-14 16:17 - 2014-06-14 16:17 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-06-14 16:17 - 2014-06-14 16:17 - 00000000 ____D () C:\Users\Michael\AppData\Local\Skype
2014-06-14 16:17 - 2014-06-14 16:17 - 00000000 ____D () C:\ProgramData\Skype
2014-06-14 16:17 - 2014-06-14 16:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2014-06-14 16:08 - 2014-06-14 17:25 - 00292184 _____ (Microsoft Corporation) C:\Users\Michael\Downloads\dxwebsetup0411.exe
2014-06-14 16:08 - 2014-06-14 17:03 - 00000000 ____D () C:\Windows\SysWOW64\directx
2014-06-14 16:01 - 2014-07-04 21:02 - 00000000 ____D () C:\Users\Michael\Documents\BioWare
2014-06-14 15:53 - 2014-06-14 16:17 - 01677440 _____ (Skype Technologies S.A.) C:\Users\Michael\Downloads\SkypeSetup.exe
2014-06-14 15:50 - 2014-06-17 17:52 - 00000000 ____D () C:\Users\Michael\AppData\Roaming\Adobe
2014-06-14 15:50 - 2014-06-14 15:50 - 00699056 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-06-14 15:50 - 2014-06-14 15:50 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-06-14 15:50 - 2014-06-14 15:50 - 00000000 ____D () C:\Windows\SysWOW64\Macromed
2014-06-14 15:50 - 2014-06-14 15:50 - 00000000 ____D () C:\Windows\system32\Macromed
2014-06-14 15:50 - 2014-06-14 15:50 - 00000000 ____D () C:\Users\Michael\AppData\Roaming\Macromedia
2014-06-14 15:50 - 2014-06-14 15:50 - 00000000 ____D () C:\Users\Michael\AppData\Local\Macromedia
2014-06-14 15:48 - 2014-07-04 20:18 - 00000000 ____D () C:\ProgramData\Origin
2014-06-14 15:45 - 2014-07-05 18:14 - 00007597 _____ () C:\Users\Michael\AppData\Local\Resmon.ResmonCfg
2014-06-14 14:45 - 2014-03-31 09:35 - 00270496 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2014-06-14 14:29 - 2014-06-14 14:29 - 00000000 ____D () C:\Users\Michael\AppData\Local\Quickscope_Simulator
2014-06-14 14:19 - 2014-06-14 17:06 - 00000000 ____D () C:\Users\Michael\AppData\Local\Mozilla
2014-06-14 14:18 - 2011-08-23 15:57 - 00565352 _____ (Realtek ) C:\Windows\system32\Drivers\Rt64win7.sys
2014-06-14 14:18 - 2011-08-23 15:57 - 00107552 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RTNUninst64.dll
2014-06-14 14:18 - 2011-08-23 15:57 - 00074272 _____ () C:\Windows\system32\RtNicProp64.dll
2014-06-14 14:15 - 2014-06-14 14:15 - 00000000 _____ () C:\Windows\ativpsrm.bin
2014-06-14 14:14 - 2014-06-17 17:53 - 00000000 ____D () C:\ProgramData\AMD
2014-06-14 14:14 - 2014-06-14 14:14 - 00057560 _____ () C:\Users\Michael\AppData\Local\GDIPFONTCACHEV1.DAT
2014-06-14 14:14 - 2014-06-14 14:14 - 00000000 ____D () C:\Program Files\Common Files\ATI Technologies
2014-06-14 14:14 - 2014-06-14 14:14 - 00000000 ____D () C:\Program Files (x86)\AMD APP
2014-06-14 14:13 - 2012-04-06 04:16 - 00442368 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\ATIDEMGX.dll
2014-06-14 14:13 - 2012-04-06 04:00 - 00064000 _____ (AMD) C:\Windows\system32\coinst.dll
2014-06-14 14:13 - 2012-04-06 03:29 - 00204952 _____ () C:\Windows\SysWOW64\ativvsvl.dat
2014-06-14 14:13 - 2012-04-06 03:29 - 00204952 _____ () C:\Windows\system32\ativvsvl.dat
2014-06-14 14:13 - 2012-04-06 03:29 - 00157144 _____ () C:\Windows\SysWOW64\ativvsva.dat
2014-06-14 14:13 - 2012-04-06 03:29 - 00157144 _____ () C:\Windows\system32\ativvsva.dat
2014-06-14 14:13 - 2012-03-06 00:15 - 00038159 _____ () C:\Windows\atiogl.xml
2014-06-14 14:13 - 2011-09-13 00:06 - 00003917 _____ () C:\Windows\SysWOW64\atipblag.dat
2014-06-14 14:13 - 2011-09-13 00:06 - 00003917 _____ () C:\Windows\system32\atipblag.dat
2014-06-14 14:12 - 2014-06-14 14:12 - 00000000 ____D () C:\Program Files\ATI
2014-06-14 14:10 - 2014-06-17 17:52 - 00000000 ____D () C:\Users\Michael\AppData\Local\Adobe
2014-06-14 14:07 - 2014-06-14 14:07 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_iusb3hcs_01009.Wdf
2014-06-14 14:07 - 2012-01-26 19:39 - 00787736 _____ (Intel Corporation) C:\Windows\system32\Drivers\iusb3xhc.sys
2014-06-14 14:07 - 2012-01-26 19:39 - 00356120 _____ (Intel Corporation) C:\Windows\system32\Drivers\iusb3hub.sys
2014-06-14 14:07 - 2012-01-26 19:39 - 00016152 _____ (Intel Corporation) C:\Windows\system32\Drivers\iusb3hcs.sys
2014-06-14 14:05 - 2014-06-14 14:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel
2014-06-14 14:05 - 2011-11-09 19:04 - 00060184 _____ (Intel Corporation) C:\Windows\system32\Drivers\HECIx64.sys
2014-06-14 14:04 - 2014-06-14 14:04 - 00000000 ____D () C:\Users\Michael\AppData\Roaming\InstallShield
2014-06-14 14:04 - 2014-06-14 14:04 - 00000000 ____D () C:\ProgramData\InstallShield
2014-06-14 13:59 - 2014-06-14 13:59 - 00000000 ____D () C:\Windows\SysWOW64\RTCOM
2014-06-14 13:59 - 2014-06-14 13:59 - 00000000 ____D () C:\Program Files\Realtek
2014-06-14 13:58 - 2014-06-14 14:18 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-06-14 13:58 - 2014-06-14 14:18 - 00000000 ____D () C:\Program Files (x86)\Realtek
2014-06-14 13:58 - 2014-06-14 13:59 - 00000000 ___HD () C:\Program Files (x86)\Temp
2014-06-14 13:58 - 2011-10-18 13:53 - 02957544 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHD64.sys
2014-06-14 13:58 - 2011-10-18 12:10 - 00099432 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoInst64.dll
2014-06-14 13:58 - 2011-10-18 10:41 - 00150996 _____ () C:\Windows\system32\Drivers\RTAIODAT.DAT
2014-06-14 13:58 - 2011-10-18 07:55 - 00331880 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtlCPAPI64.dll
2014-06-14 13:58 - 2011-10-18 07:47 - 01914472 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApi64.dll
2014-06-14 13:58 - 2011-10-18 05:05 - 02528872 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtPgEx64.dll
2014-06-14 13:58 - 2011-10-17 11:30 - 03213928 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkAPO64.dll
2014-06-14 13:58 - 2011-10-11 09:37 - 00626264 _____ (Creative Technology Ltd.) C:\Windows\system32\MBTHX64.dll
2014-06-14 13:58 - 2011-10-11 09:37 - 00561240 _____ (Creative Technology Ltd.) C:\Windows\SysWOW64\MBTHX32.dll
2014-06-14 13:58 - 2011-08-31 13:12 - 01698408 ____R (Realtek Semiconductor Corp.) C:\Windows\RtlExUpd.dll
2014-06-14 13:58 - 2011-08-19 15:10 - 00886360 _____ (Creative Technology Ltd.) C:\Windows\system32\MBAPO64.dll
2014-06-14 13:58 - 2011-08-19 15:10 - 00746072 _____ (Creative Technology Ltd.) C:\Windows\SysWOW64\MBAPO32.dll
2014-06-14 13:58 - 2011-07-27 18:55 - 02604376 _____ (Waves Audio Ltd.) C:\Windows\system32\WavesGUILib.dll
2014-06-14 13:58 - 2011-07-27 18:55 - 02132824 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioEQ.dll
2014-06-14 13:58 - 2011-07-22 13:35 - 01247848 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTCOM64.dll
2014-06-14 13:58 - 2011-06-30 10:14 - 01560168 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSnMg64.cpl
2014-06-14 13:58 - 2011-05-05 09:24 - 02085440 _____ (Fortemedia Corporation) C:\Windows\system32\FMAPO64.dll
2014-06-14 13:58 - 2010-11-08 01:31 - 00375128 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEP64A.dll
2014-06-14 13:58 - 2010-11-08 01:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DHT64.dll
2014-06-14 13:58 - 2010-11-08 01:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DAA64.dll
2014-06-14 13:58 - 2010-11-08 01:31 - 00204120 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEED64A.dll
2014-06-14 13:58 - 2010-11-08 01:31 - 00101208 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEL64A.dll
2014-06-14 13:58 - 2010-11-08 01:31 - 00078680 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEG64A.dll
2014-06-14 13:58 - 2010-11-03 12:30 - 00149608 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCfg64.dll
2014-06-14 13:58 - 2010-10-15 13:20 - 02261764 _____ () C:\Windows\system32\Drivers\rtvienna.dat
2014-06-14 13:58 - 2010-09-27 03:34 - 00318808 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO20.dll
2014-06-14 13:58 - 2010-07-22 10:37 - 00200800 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAC64.dll
2014-06-14 13:58 - 2010-07-02 13:40 - 00080984 _____ (Creative Technology Ltd.) C:\Windows\system32\MBWrp64.dll
2014-06-14 13:58 - 2009-11-24 03:55 - 00518896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSX64.dll
2014-06-14 13:58 - 2009-11-24 03:55 - 00211184 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSH64.dll
2014-06-14 13:58 - 2009-11-24 03:55 - 00198896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSHP64.dll
2014-06-14 13:58 - 2009-11-24 03:55 - 00155888 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSWOW64.dll
2014-06-14 13:58 - 2009-11-18 01:12 - 00032344 _____ (Creative Technology Ltd.) C:\Windows\system32\Drivers\MBfilt64.sys
2014-06-14 13:58 - 2009-11-17 12:12 - 00108960 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAR64.dll
2014-06-14 13:56 - 2014-06-14 14:07 - 00000000 ____D () C:\Program Files (x86)\Intel
2014-06-14 13:56 - 2014-06-14 13:56 - 00000000 ____D () C:\Intel
2014-06-14 13:56 - 2011-12-06 09:55 - 00053248 ____R (Windows XP Bundled build C-Centric Single User) C:\Windows\SysWOW64\CSVer.dll
2014-06-14 13:54 - 2014-07-08 17:03 - 00000031 _____ () C:\Windows\directx.sys
2014-06-14 13:54 - 2014-07-06 18:48 - 00000000 ____D () C:\Users\Michael\Documents\My Games
2014-06-14 13:51 - 2014-06-14 13:51 - 00001439 _____ () C:\Users\Michael\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-06-14 13:51 - 2014-06-14 13:51 - 00001405 _____ () C:\Users\Michael\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
2014-06-14 13:51 - 2014-06-14 13:51 - 00000020 ___SH () C:\Users\Michael\ntuser.ini
2014-06-14 13:51 - 2014-06-14 13:51 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Musik
2014-06-14 13:51 - 2014-06-14 13:51 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Bilder
2014-06-14 13:51 - 2014-06-14 13:51 - 00000000 _SHDL () C:\Users\Default\Vorlagen
2014-06-14 13:51 - 2014-06-14 13:51 - 00000000 _SHDL () C:\Users\Default\Startmenü
2014-06-14 13:51 - 2014-06-14 13:51 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung
2014-06-14 13:51 - 2014-06-14 13:51 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen
2014-06-14 13:51 - 2014-06-14 13:51 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien
2014-06-14 13:51 - 2014-06-14 13:51 - 00000000 _SHDL () C:\Users\Default\Druckumgebung
2014-06-14 13:51 - 2014-06-14 13:51 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik
2014-06-14 13:51 - 2014-06-14 13:51 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder
2014-06-14 13:51 - 2014-06-14 13:51 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-06-14 13:51 - 2014-06-14 13:51 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf
2014-06-14 13:51 - 2014-06-14 13:51 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten
2014-06-14 13:51 - 2014-06-14 13:51 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten
2014-06-14 13:51 - 2014-06-14 13:51 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik
2014-06-14 13:51 - 2014-06-14 13:51 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder
2014-06-14 13:51 - 2014-06-14 13:51 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-06-14 13:51 - 2014-06-14 13:51 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf
2014-06-14 13:51 - 2014-06-14 13:51 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten
2014-06-14 13:51 - 2014-06-14 13:51 - 00000000 _SHDL () C:\ProgramData\Vorlagen
2014-06-14 13:51 - 2014-06-14 13:51 - 00000000 _SHDL () C:\ProgramData\Startmenü
2014-06-14 13:51 - 2014-06-14 13:51 - 00000000 _SHDL () C:\ProgramData\Microsoft\Windows\Start Menu\Programme
2014-06-14 13:51 - 2014-06-14 13:51 - 00000000 _SHDL () C:\ProgramData\Favoriten
2014-06-14 13:51 - 2014-06-14 13:51 - 00000000 _SHDL () C:\ProgramData\Dokumente
2014-06-14 13:51 - 2014-06-14 13:51 - 00000000 _SHDL () C:\ProgramData\Anwendungsdaten
2014-06-14 13:51 - 2014-06-14 13:51 - 00000000 _SHDL () C:\Program Files\Gemeinsame Dateien
2014-06-14 13:44 - 2014-07-07 10:53 - 00100028 _____ () C:\Windows\PFRO.log
2014-06-14 13:43 - 2014-07-08 16:42 - 00211968 _____ () C:\Windows\WindowsUpdate.log
2014-06-14 13:41 - 2014-06-14 13:41 - 00022960 _____ () C:\Windows\system32\emptyregdb.dat
2014-06-14 13:37 - 2014-07-08 17:01 - 00000000 ____D () C:\Users\Michael
2014-06-14 13:37 - 2014-06-14 13:37 - 00001345 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk
2014-06-14 13:37 - 2014-06-14 13:37 - 00001326 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk
2014-06-14 13:37 - 2014-06-14 13:37 - 00001313 _____ () C:\Windows\TSSysprep.log
2014-06-14 13:37 - 2014-06-14 13:37 - 00000000 _SHDL () C:\Users\Michael\Vorlagen
2014-06-14 13:37 - 2014-06-14 13:37 - 00000000 _SHDL () C:\Users\Michael\Startmenü
2014-06-14 13:37 - 2014-06-14 13:37 - 00000000 _SHDL () C:\Users\Michael\Netzwerkumgebung
2014-06-14 13:37 - 2014-06-14 13:37 - 00000000 _SHDL () C:\Users\Michael\Lokale Einstellungen
2014-06-14 13:37 - 2014-06-14 13:37 - 00000000 _SHDL () C:\Users\Michael\Eigene Dateien
2014-06-14 13:37 - 2014-06-14 13:37 - 00000000 _SHDL () C:\Users\Michael\Druckumgebung
2014-06-14 13:37 - 2014-06-14 13:37 - 00000000 _SHDL () C:\Users\Michael\Documents\Eigene Musik
2014-06-14 13:37 - 2014-06-14 13:37 - 00000000 _SHDL () C:\Users\Michael\Documents\Eigene Bilder
2014-06-14 13:37 - 2014-06-14 13:37 - 00000000 _SHDL () C:\Users\Michael\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-06-14 13:37 - 2014-06-14 13:37 - 00000000 _SHDL () C:\Users\Michael\AppData\Local\Verlauf
2014-06-14 13:37 - 2014-06-14 13:37 - 00000000 _SHDL () C:\Users\Michael\AppData\Local\Anwendungsdaten
2014-06-14 13:37 - 2014-06-14 13:37 - 00000000 _SHDL () C:\Users\Michael\Anwendungsdaten
2014-06-14 13:37 - 2009-07-14 06:54 - 00000000 ___RD () C:\Users\Michael\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-06-14 13:37 - 2009-07-14 06:49 - 00000000 ___RD () C:\Users\Michael\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-06-14 13:22 - 2014-06-14 13:41 - 00006167 _____ () C:\Windows\comsetup.log
2014-06-14 13:13 - 2014-06-14 13:13 - 00001890 _____ () C:\Windows\diagwrn.xml
2014-06-14 13:13 - 2014-06-14 13:13 - 00001890 _____ () C:\Windows\diagerr.xml
2014-06-14 12:52 - 2014-06-14 12:52 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
2014-06-14 12:44 - 2014-06-14 12:44 - 00000355 _____ () C:\Users\Michael\Desktop\Computer.lnk
2014-06-14 11:59 - 2014-06-14 11:59 - 00003072 _____ () C:\Windows\System32\Tasks\{69687F30-17EA-4DD2-A418-9F9A2F0C10D5}
2014-06-14 11:52 - 2014-06-14 13:26 - 00019545 _____ () C:\Windows\WindowsUpdate (1).log
2014-06-14 11:52 - 2014-06-14 11:52 - 00000000 ____D () C:\Users\Michael\AppData\Local\VirtualStore
2014-06-14 11:51 - 2014-06-14 13:51 - 00000066 _____ () C:\lang.txt
2014-06-14 11:51 - 2014-06-14 13:51 - 00000012 _____ () C:\Windows\system32\Drivers\10CF_FUJITSU_FTS_To Be Filled By O.E.M._ASRock_B75 Pro3_BIOS Date 05 11 12 15 31 15 Ver 04.06.05_ALASKA - 1072009_P1.40_Standard-VGA-Grafikkarte.MRK
2014-06-14 11:51 - 2014-06-14 13:51 - 00000000 __SHD () C:\Recovery
2014-06-14 11:51 - 2014-06-14 11:51 - 00000000 _SHDL () C:\Programme
2014-06-14 11:51 - 2014-06-14 11:51 - 00000000 _SHDL () C:\Dokumente und Einstellungen
==================== One Month Modified Files and Folders =======
2014-07-08 17:23 - 2014-07-08 17:23 - 00005706 _____ () C:\Users\Michael\Desktop\FRST.txt
2014-07-08 17:23 - 2014-07-08 17:23 - 00000000 ____D () C:\FRST
2014-07-08 17:14 - 2014-06-14 16:17 - 00000000 ____D () C:\Users\Michael\AppData\Roaming\Skype
2014-07-08 17:08 - 2014-07-06 20:46 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-07-08 17:05 - 2014-07-08 17:04 - 00380416 _____ () C:\Users\Michael\Desktop\Gmer-19357.exe
2014-07-08 17:03 - 2014-07-08 17:03 - 02084352 _____ (Farbar) C:\Users\Michael\Desktop\FRST64.exe
2014-07-08 17:03 - 2014-07-08 17:00 - 00091949 _____ () C:\Users\Michael\Desktop\Defogger.exe
2014-07-08 17:03 - 2014-06-14 13:54 - 00000031 _____ () C:\Windows\directx.sys
2014-07-08 17:01 - 2014-07-08 17:01 - 00000476 _____ () C:\Users\Michael\Desktop\defogger_disable.log
2014-07-08 17:01 - 2014-07-08 17:01 - 00000000 _____ () C:\Users\Michael\defogger_reenable
2014-07-08 17:01 - 2014-06-14 13:37 - 00000000 ____D () C:\Users\Michael
2014-07-08 16:43 - 2014-06-14 23:33 - 00698770 _____ () C:\Windows\system32\perfh007.dat
2014-07-08 16:43 - 2014-06-14 23:33 - 00148910 _____ () C:\Windows\system32\perfc007.dat
2014-07-08 16:43 - 2009-07-14 07:13 - 01618320 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-07-08 16:42 - 2014-06-14 13:43 - 00211968 _____ () C:\Windows\WindowsUpdate.log
2014-07-08 16:39 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-07-08 16:39 - 2009-07-14 06:51 - 06951576 _____ () C:\Windows\setupact.log
2014-07-07 22:59 - 2009-07-14 06:45 - 00013584 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-07-07 22:59 - 2009-07-14 06:45 - 00013584 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-07-07 21:59 - 2014-06-25 22:21 - 00000000 ____D () C:\Users\Michael\AppData\Roaming\vlc
2014-07-07 20:53 - 2014-06-25 22:20 - 00000734 _____ () C:\Users\Public\Desktop\VLC media player.lnk
2014-07-07 16:05 - 2014-07-07 16:05 - 00000530 _____ () C:\Users\Public\Desktop\Steam.lnk
2014-07-07 15:17 - 2014-07-07 12:38 - 00001855 _____ () C:\rmneshta.log
2014-07-07 10:53 - 2014-06-14 13:44 - 00100028 _____ () C:\Windows\PFRO.log
2014-07-07 00:32 - 2014-07-06 20:46 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware
2014-07-06 20:55 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\tracing
2014-07-06 20:46 - 2014-07-06 20:46 - 00001102 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-07-06 20:46 - 2014-07-06 20:46 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware
2014-07-06 20:46 - 2014-07-06 20:46 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-07-06 18:48 - 2014-06-14 13:54 - 00000000 ____D () C:\Users\Michael\Documents\My Games
2014-07-06 18:30 - 2014-06-14 21:12 - 00000000 ____D () C:\Users\Michael\AppData\Local\Arma 3
2014-07-05 18:14 - 2014-06-14 15:45 - 00007597 _____ () C:\Users\Michael\AppData\Local\Resmon.ResmonCfg
2014-07-05 10:34 - 2014-07-05 09:57 - 00000000 ____D () C:\Users\Michael\Documents\Euro Truck Simulator 2
2014-07-04 21:02 - 2014-06-14 16:01 - 00000000 ____D () C:\Users\Michael\Documents\BioWare
2014-07-04 20:18 - 2014-06-14 15:48 - 00000000 ____D () C:\ProgramData\Origin
2014-07-04 20:16 - 2014-07-01 22:32 - 00189248 _____ () C:\Windows\SysWOW64\PnkBstrB.exe
2014-07-04 20:16 - 2014-07-01 22:32 - 00189248 _____ () C:\Windows\SysWOW64\PnkBstrB.ex0
2014-07-04 20:16 - 2014-07-01 22:32 - 00075136 _____ () C:\Windows\SysWOW64\PnkBstrA.exe
2014-07-04 20:16 - 2014-06-14 17:02 - 00168386 _____ () C:\Windows\DirectX.log
2014-07-03 21:35 - 2014-06-16 00:39 - 01591896 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2014-06-29 00:35 - 2014-06-25 19:11 - 00038481 _____ () C:\Users\Michael\Documents\TombRaider.log
2014-06-28 23:14 - 2014-06-28 23:12 - 00466520 _____ (Creative Labs) C:\Windows\system32\wrap_oal.dll
2014-06-28 23:14 - 2014-06-28 23:12 - 00445016 _____ (Creative Labs) C:\Windows\SysWOW64\wrap_oal.dll
2014-06-28 23:14 - 2014-06-28 23:12 - 00123480 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\Windows\system32\OpenAL32.dll
2014-06-28 23:14 - 2014-06-28 23:12 - 00109144 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\Windows\SysWOW64\OpenAL32.dll
2014-06-28 23:12 - 2014-06-28 23:12 - 00000000 ____D () C:\Program Files (x86)\OpenAL
2014-06-28 19:13 - 2014-06-28 19:13 - 00000000 ____D () C:\Users\Michael\AppData\Local\BigHugeEngine
2014-06-28 14:03 - 2014-06-28 14:03 - 00000000 ____D () C:\Users\Michael\dwhelper
2014-06-27 22:40 - 2014-06-27 22:39 - 00000000 ____D () C:\Users\Michael\AppData\Local\Origin
2014-06-27 22:40 - 2014-06-16 01:34 - 00000000 ____D () C:\Users\Michael\AppData\Roaming\Origin
2014-06-27 22:11 - 2014-06-27 22:11 - 00000653 _____ () C:\Users\Public\Desktop\Origin.lnk
2014-06-27 22:11 - 2014-06-27 22:11 - 00000000 ____D () C:\ProgramData\Electronic Arts
2014-06-27 22:00 - 2014-06-27 22:04 - 00000886 ____N () C:\Users\Michael\Desktop\exe_fix_w7.zip
2014-06-27 13:04 - 2014-06-25 23:06 - 00000000 ____D () C:\Users\Michael\AppData\Local\Ubisoft Game Launcher
2014-06-26 21:16 - 2014-06-26 21:16 - 00000851 _____ () C:\Users\Michael\Desktop\Uplay.lnk
2014-06-26 21:16 - 2014-06-26 21:16 - 00000000 ____D () C:\Users\Michael\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ubisoft
2014-06-25 22:20 - 2014-06-25 22:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2014-06-25 20:13 - 2014-06-25 20:13 - 00000000 ____D () C:\Users\Michael\Documents\SavedGames
2014-06-25 20:13 - 2014-06-25 20:13 - 00000000 ____D () C:\Users\Michael\AppData\Roaming\Rogue Legacy
2014-06-25 19:57 - 2014-06-25 19:57 - 00000000 ____D () C:\Program Files (x86)\Microsoft XNA
2014-06-25 17:08 - 2014-06-20 10:45 - 00000768 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-06-25 17:08 - 2014-06-20 10:45 - 00000768 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-06-24 19:49 - 2014-06-24 19:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Xiph.Org
2014-06-21 23:40 - 2014-06-21 23:40 - 00000000 ____D () C:\Users\Michael\AppData\Local\Introversion
2014-06-21 20:43 - 2014-06-17 23:06 - 00000122 _____ () C:\Users\Michael\Desktop\Steam.txt
2014-06-21 16:26 - 2014-06-21 16:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Vanity Pack
2014-06-20 22:44 - 2014-06-20 22:44 - 00000000 ____D () C:\Users\Michael\AppData\Local\Criterion Games
2014-06-20 22:32 - 2014-06-15 00:41 - 00000000 ____D () C:\Users\Michael\AppData\Local\Black_Tree_Gaming
2014-06-20 22:30 - 2014-06-20 22:29 - 00000000 ____D () C:\Users\Michael\AppData\Local\Skyrim
2014-06-20 22:29 - 2014-06-20 22:29 - 00000747 _____ () C:\Users\Public\Desktop\Nexus Mod Manager.lnk
2014-06-20 22:29 - 2014-06-20 22:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nexus Mod Manager
2014-06-20 10:32 - 2014-06-20 10:32 - 00003068 _____ () C:\Windows\System32\Tasks\{6B7B7DDF-3F2C-460E-B34E-F866FED39582}
2014-06-20 10:30 - 2014-06-25 17:22 - 00000446 _____ () C:\Users\Michael\Documents\indexfile.txt
2014-06-20 10:30 - 2014-06-20 10:30 - 07462643 _____ () C:\Users\Michael\Documents\Firefox 30.0 (de) - 2014-06-20.pcv
2014-06-18 13:25 - 2014-06-15 11:30 - 00000000 ____D () C:\Users\Michael\AppData\Roaming\WinRAR
2014-06-17 23:01 - 2014-06-16 23:59 - 00000000 ____D () C:\Users\Michael\AppData\Local\Battle.net
2014-06-17 18:01 - 2014-06-17 18:01 - 00000000 ____D () C:\Users\Michael\AppData\Local\PunkBuster
2014-06-17 17:55 - 2014-06-17 17:55 - 00000000 ____D () C:\ProgramData\Adobe
2014-06-17 17:54 - 2014-06-17 17:54 - 00000000 ____D () C:\Users\Default\AppData\Roaming\Macromedia
2014-06-17 17:54 - 2014-06-17 17:54 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\Macromedia
2014-06-17 17:54 - 2014-06-17 17:54 - 00000000 ____D () C:\Program Files (x86)\Adobe
2014-06-17 17:53 - 2014-06-17 17:53 - 00053882 _____ () C:\Windows\SysWOW64\CCCInstall_201406171753082987.log
2014-06-17 17:53 - 2014-06-17 17:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Catalyst Control Center
2014-06-17 17:53 - 2014-06-17 17:53 - 00000000 ____D () C:\ProgramData\ATI
2014-06-17 17:53 - 2014-06-17 17:53 - 00000000 ____D () C:\Program Files (x86)\AMD AVT
2014-06-17 17:53 - 2014-06-14 14:14 - 00000000 ____D () C:\ProgramData\AMD
2014-06-17 17:52 - 2014-06-14 15:50 - 00000000 ____D () C:\Users\Michael\AppData\Roaming\Adobe
2014-06-17 17:52 - 2014-06-14 14:10 - 00000000 ____D () C:\Users\Michael\AppData\Local\Adobe
2014-06-17 17:51 - 2014-06-17 17:51 - 00000000 ____D () C:\Program Files\AMD
2014-06-17 17:50 - 2014-06-15 00:08 - 00000000 ____D () C:\ProgramData\Package Cache
2014-06-17 17:48 - 2014-06-17 17:48 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2014-06-17 17:47 - 2014-06-17 17:47 - 00000000 ____D () C:\Users\Michael\AppData\Local\2K Games
2014-06-17 00:02 - 2014-06-16 23:59 - 00000000 ____D () C:\Users\Michael\AppData\Roaming\Battle.net
2014-06-16 23:59 - 2014-06-16 23:59 - 00000786 _____ () C:\Users\Public\Desktop\Battle.net.lnk
2014-06-16 23:59 - 2014-06-16 23:59 - 00000000 ____D () C:\Users\Michael\AppData\Local\Blizzard Entertainment
2014-06-16 23:59 - 2014-06-16 23:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battle.net
2014-06-16 23:59 - 2014-06-16 23:59 - 00000000 ____D () C:\ProgramData\Blizzard Entertainment
2014-06-16 23:27 - 2014-06-16 23:27 - 00000000 ____D () C:\ProgramData\Battle.net
2014-06-16 20:09 - 2014-06-16 20:09 - 00000000 ____D () C:\Users\Michael\Documents\Witcher 2
2014-06-16 20:09 - 2014-06-16 20:09 - 00000000 ____D () C:\Users\Michael\AppData\Local\The Witcher 2
2014-06-16 19:25 - 2014-06-16 19:25 - 00000679 _____ () C:\Users\Michael\Desktop\League of Trolls and French Retards.lnk
2014-06-16 16:34 - 2014-06-16 16:34 - 00000000 ____D () C:\Users\Michael\AppData\Roaming\LolClient
2014-06-16 16:06 - 2014-06-16 14:42 - 00000000 ____D () C:\Users\Michael\AppData\Roaming\Mozilla
2014-06-16 14:42 - 2014-06-16 14:42 - 00000000 ____D () C:\ProgramData\Mozilla
2014-06-16 14:42 - 2014-06-16 14:42 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-06-16 14:30 - 2014-06-16 14:30 - 00313256 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2014-06-16 14:30 - 2014-06-16 14:30 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2014-06-16 14:30 - 2014-06-16 14:30 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2014-06-16 14:30 - 2014-06-16 14:30 - 00111016 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2014-06-16 14:30 - 2014-06-16 14:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-06-16 14:14 - 2014-06-16 14:14 - 05471522 _____ () C:\Users\Michael\Documents\Firefox 30.0 (de) - 2014-06-16.pcv
2014-06-16 14:13 - 2014-06-16 14:13 - 00000739 _____ () C:\Users\Public\Desktop\MozBackup.lnk
2014-06-16 14:13 - 2014-06-16 14:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MozBackup
2014-06-16 12:39 - 2009-07-14 05:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared
2014-06-16 01:16 - 2009-07-14 07:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2014-06-16 00:53 - 2014-06-16 00:53 - 00000000 ____D () C:\Users\Michael\AppData\Roaming\ATI
2014-06-16 00:53 - 2014-06-16 00:53 - 00000000 ____D () C:\Users\Michael\AppData\Local\ATI
2014-06-15 11:30 - 2014-06-15 11:30 - 00000000 ____D () C:\Users\Michael\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-06-15 11:30 - 2014-06-15 11:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-06-15 11:25 - 2014-06-15 11:25 - 458474165 _____ () C:\Windows\MEMORY.DMP
2014-06-15 11:25 - 2014-06-15 11:25 - 00275000 _____ () C:\Windows\Minidump\061514-15834-01.dmp
2014-06-15 11:25 - 2014-06-15 11:25 - 00000000 ____D () C:\Windows\Minidump
2014-06-15 01:39 - 2014-06-15 01:39 - 00000814 _____ () C:\Users\Michael\Desktop\Steam.lnk
2014-06-15 01:14 - 2014-06-15 01:14 - 00000095 _____ () C:\Users\Michael\Desktop\SoD.txt
2014-06-15 01:06 - 2014-06-15 00:41 - 00000000 ____D () C:\Users\Michael\Documents\Nexus Mod Manager
2014-06-14 23:33 - 2014-06-14 23:33 - 00262144 _____ () C:\Windows\system32\config\userdiff
2014-06-14 23:33 - 2009-07-14 07:38 - 00025600 ___SH () C:\Windows\system32\config\BCD-Template.LOG
2014-06-14 23:33 - 2009-07-14 07:32 - 00028672 _____ () C:\Windows\system32\config\BCD-Template
2014-06-14 23:33 - 2009-07-14 06:45 - 00000000 ____D () C:\Windows\Setup
2014-06-14 23:33 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\oobe
2014-06-14 23:32 - 2014-06-14 23:33 - 00295922 _____ () C:\Windows\system32\perfi007.dat
2014-06-14 23:32 - 2014-06-14 23:33 - 00038104 _____ () C:\Windows\system32\perfd007.dat
2014-06-14 23:32 - 2014-06-14 23:32 - 00000000 ____D () C:\Windows\SysWOW64\XPSViewer
2014-06-14 23:32 - 2014-06-14 23:32 - 00000000 ____D () C:\Windows\SysWOW64\de
2014-06-14 23:32 - 2014-06-14 23:32 - 00000000 ____D () C:\Windows\SysWOW64\0407
2014-06-14 23:32 - 2014-06-14 23:32 - 00000000 ____D () C:\Windows\system32\de
2014-06-14 23:32 - 2014-06-14 23:32 - 00000000 ____D () C:\Windows\system32\0407
2014-06-14 23:32 - 2009-07-14 07:37 - 00000000 ____D () C:\Windows\DigitalLocker
2014-06-14 23:32 - 2009-07-14 07:32 - 00000000 ____D () C:\Windows\system32\WinBioPlugIns
2014-06-14 23:32 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-06-14 23:32 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\IME
2014-06-14 23:27 - 2014-06-14 23:27 - 00000000 ___HD () C:\$INPLACE.~TR
2014-06-14 22:32 - 2014-06-14 22:32 - 00001477 _____ () C:\Users\Michael\Desktop\APBLauncher - Verknüpfung.lnk
2014-06-14 22:30 - 2014-06-14 22:30 - 00000083 _____ () C:\Users\Michael\ClientFiles.xml
2014-06-14 21:13 - 2014-06-14 21:12 - 00000000 ____D () C:\Users\Michael\Documents\Arma 3
2014-06-14 21:12 - 2014-06-14 21:12 - 00000000 ____D () C:\ProgramData\Bohemia Interactive
2014-06-14 19:53 - 2014-06-14 19:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
2014-06-14 18:53 - 2014-06-14 18:53 - 00000000 ____D () C:\Users\Michael\AVM_Driver
2014-06-14 18:52 - 2009-07-14 07:09 - 00000000 ____D () C:\Windows\System32\Tasks\WPD
2014-06-14 18:52 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2014-06-14 18:51 - 2009-07-14 09:45 - 00000000 ____D () C:\Program Files\Windows Journal
2014-06-14 18:51 - 2009-07-14 07:37 - 00000000 ____D () C:\Windows\SysWOW64\winrm
2014-06-14 18:51 - 2009-07-14 07:37 - 00000000 ____D () C:\Windows\SysWOW64\WCN
2014-06-14 18:51 - 2009-07-14 07:37 - 00000000 ____D () C:\Windows\SysWOW64\sysprep
2014-06-14 18:51 - 2009-07-14 07:37 - 00000000 ____D () C:\Windows\SysWOW64\slmgr
2014-06-14 18:51 - 2009-07-14 07:37 - 00000000 ____D () C:\Windows\SysWOW64\Printing_Admin_Scripts
2014-06-14 18:51 - 2009-07-14 07:37 - 00000000 ____D () C:\Windows\system32\winrm
2014-06-14 18:51 - 2009-07-14 07:37 - 00000000 ____D () C:\Windows\system32\WCN
2014-06-14 18:51 - 2009-07-14 07:37 - 00000000 ____D () C:\Windows\system32\slmgr
2014-06-14 18:51 - 2009-07-14 07:37 - 00000000 ____D () C:\Windows\system32\Printing_Admin_Scripts
2014-06-14 18:51 - 2009-07-14 07:32 - 00000000 ____D () C:\Program Files\Windows Sidebar
2014-06-14 18:51 - 2009-07-14 07:32 - 00000000 ____D () C:\Program Files\Windows Photo Viewer
2014-06-14 18:51 - 2009-07-14 07:32 - 00000000 ____D () C:\Program Files\Windows Defender
2014-06-14 18:51 - 2009-07-14 07:32 - 00000000 ____D () C:\Program Files\DVD Maker
2014-06-14 18:51 - 2009-07-14 07:32 - 00000000 ____D () C:\Program Files (x86)\Windows Sidebar
2014-06-14 18:51 - 2009-07-14 07:32 - 00000000 ____D () C:\Program Files (x86)\Windows Photo Viewer
2014-06-14 18:51 - 2009-07-14 07:32 - 00000000 ____D () C:\Program Files (x86)\Windows Defender
2014-06-14 18:51 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\Setup
2014-06-14 18:51 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\oobe
2014-06-14 18:51 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\MUI
2014-06-14 18:51 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\migwiz
2014-06-14 18:51 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\Dism
2014-06-14 18:51 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\com
2014-06-14 18:51 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\sysprep
2014-06-14 18:51 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\Setup
2014-06-14 18:51 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\MUI
2014-06-14 18:51 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\migwiz
2014-06-14 18:51 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\Dism
2014-06-14 18:51 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\com
2014-06-14 18:51 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\servicing
2014-06-14 18:51 - 2009-07-14 05:20 - 00000000 ____D () C:\Program Files\Common Files\System
2014-06-14 17:25 - 2014-06-14 16:08 - 00292184 _____ (Microsoft Corporation) C:\Users\Michael\Downloads\dxwebsetup0411.exe
2014-06-14 17:06 - 2014-06-14 14:19 - 00000000 ____D () C:\Users\Michael\AppData\Local\Mozilla
2014-06-14 17:03 - 2014-06-14 16:08 - 00000000 ____D () C:\Windows\SysWOW64\directx
2014-06-14 16:36 - 2014-06-14 16:36 - 00000000 ____D () C:\Users\Michael\AppData\Local\Apps\2.0
2014-06-14 16:17 - 2014-06-14 16:17 - 00002517 _____ () C:\Users\Public\Desktop\Skype.lnk
2014-06-14 16:17 - 2014-06-14 16:17 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-06-14 16:17 - 2014-06-14 16:17 - 00000000 ____D () C:\Users\Michael\AppData\Local\Skype
2014-06-14 16:17 - 2014-06-14 16:17 - 00000000 ____D () C:\ProgramData\Skype
2014-06-14 16:17 - 2014-06-14 16:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2014-06-14 16:17 - 2014-06-14 15:53 - 01677440 _____ (Skype Technologies S.A.) C:\Users\Michael\Downloads\SkypeSetup.exe
2014-06-14 16:09 - 2009-07-14 05:20 - 00000000 __RHD () C:\Users\Public\Libraries
2014-06-14 15:50 - 2014-06-14 15:50 - 00699056 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-06-14 15:50 - 2014-06-14 15:50 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-06-14 15:50 - 2014-06-14 15:50 - 00000000 ____D () C:\Windows\SysWOW64\Macromed
2014-06-14 15:50 - 2014-06-14 15:50 - 00000000 ____D () C:\Windows\system32\Macromed
2014-06-14 15:50 - 2014-06-14 15:50 - 00000000 ____D () C:\Users\Michael\AppData\Roaming\Macromedia
2014-06-14 15:50 - 2014-06-14 15:50 - 00000000 ____D () C:\Users\Michael\AppData\Local\Macromedia
2014-06-14 14:29 - 2014-06-14 14:29 - 00000000 ____D () C:\Users\Michael\AppData\Local\Quickscope_Simulator
2014-06-14 14:26 - 2009-07-14 06:57 - 00001547 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2014-06-14 14:18 - 2014-06-14 13:58 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-06-14 14:18 - 2014-06-14 13:58 - 00000000 ____D () C:\Program Files (x86)\Realtek
2014-06-14 14:15 - 2014-06-14 14:15 - 00000000 _____ () C:\Windows\ativpsrm.bin
2014-06-14 14:14 - 2014-06-14 14:14 - 00057560 _____ () C:\Users\Michael\AppData\Local\GDIPFONTCACHEV1.DAT
2014-06-14 14:14 - 2014-06-14 14:14 - 00000000 ____D () C:\Program Files\Common Files\ATI Technologies
2014-06-14 14:14 - 2014-06-14 14:14 - 00000000 ____D () C:\Program Files (x86)\AMD APP
2014-06-14 14:13 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-06-14 14:12 - 2014-06-14 14:12 - 00000000 ____D () C:\Program Files\ATI
2014-06-14 14:07 - 2014-06-14 14:07 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_iusb3hcs_01009.Wdf
2014-06-14 14:07 - 2014-06-14 13:56 - 00000000 ____D () C:\Program Files (x86)\Intel
2014-06-14 14:05 - 2014-06-14 14:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel
2014-06-14 14:04 - 2014-06-14 14:04 - 00000000 ____D () C:\Users\Michael\AppData\Roaming\InstallShield
2014-06-14 14:04 - 2014-06-14 14:04 - 00000000 ____D () C:\ProgramData\InstallShield
2014-06-14 14:04 - 2009-07-14 07:32 - 00000000 ____D () C:\Windows\system32\restore
2014-06-14 13:59 - 2014-06-14 13:59 - 00000000 ____D () C:\Windows\SysWOW64\RTCOM
2014-06-14 13:59 - 2014-06-14 13:59 - 00000000 ____D () C:\Program Files\Realtek
2014-06-14 13:59 - 2014-06-14 13:58 - 00000000 ___HD () C:\Program Files (x86)\Temp
2014-06-14 13:56 - 2014-06-14 13:56 - 00000000 ____D () C:\Intel
2014-06-14 13:51 - 2014-06-14 23:33 - 00000000 ____D () C:\Windows\PANTHER
2014-06-14 13:51 - 2014-06-14 13:51 - 00001439 _____ () C:\Users\Michael\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-06-14 13:51 - 2014-06-14 13:51 - 00001405 _____ () C:\Users\Michael\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
2014-06-14 13:51 - 2014-06-14 13:51 - 00000020 ___SH () C:\Users\Michael\ntuser.ini
2014-06-14 13:51 - 2014-06-14 13:51 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Musik
2014-06-14 13:51 - 2014-06-14 13:51 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Bilder
2014-06-14 13:51 - 2014-06-14 13:51 - 00000000 _SHDL () C:\Users\Default\Vorlagen
2014-06-14 13:51 - 2014-06-14 13:51 - 00000000 _SHDL () C:\Users\Default\Startmenü
2014-06-14 13:51 - 2014-06-14 13:51 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung
2014-06-14 13:51 - 2014-06-14 13:51 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen
2014-06-14 13:51 - 2014-06-14 13:51 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien
2014-06-14 13:51 - 2014-06-14 13:51 - 00000000 _SHDL () C:\Users\Default\Druckumgebung
2014-06-14 13:51 - 2014-06-14 13:51 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik
2014-06-14 13:51 - 2014-06-14 13:51 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder
2014-06-14 13:51 - 2014-06-14 13:51 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-06-14 13:51 - 2014-06-14 13:51 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf
2014-06-14 13:51 - 2014-06-14 13:51 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten
2014-06-14 13:51 - 2014-06-14 13:51 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten
2014-06-14 13:51 - 2014-06-14 13:51 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik
2014-06-14 13:51 - 2014-06-14 13:51 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder
2014-06-14 13:51 - 2014-06-14 13:51 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-06-14 13:51 - 2014-06-14 13:51 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf
2014-06-14 13:51 - 2014-06-14 13:51 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten
2014-06-14 13:51 - 2014-06-14 13:51 - 00000000 _SHDL () C:\ProgramData\Vorlagen
2014-06-14 13:51 - 2014-06-14 13:51 - 00000000 _SHDL () C:\ProgramData\Startmenü
2014-06-14 13:51 - 2014-06-14 13:51 - 00000000 _SHDL () C:\ProgramData\Microsoft\Windows\Start Menu\Programme
2014-06-14 13:51 - 2014-06-14 13:51 - 00000000 _SHDL () C:\ProgramData\Favoriten
2014-06-14 13:51 - 2014-06-14 13:51 - 00000000 _SHDL () C:\ProgramData\Dokumente
2014-06-14 13:51 - 2014-06-14 13:51 - 00000000 _SHDL () C:\ProgramData\Anwendungsdaten
2014-06-14 13:51 - 2014-06-14 13:51 - 00000000 _SHDL () C:\Program Files\Gemeinsame Dateien
2014-06-14 13:51 - 2014-06-14 11:51 - 00000066 _____ () C:\lang.txt
2014-06-14 13:51 - 2014-06-14 11:51 - 00000012 _____ () C:\Windows\system32\Drivers\10CF_FUJITSU_FTS_To Be Filled By O.E.M._ASRock_B75 Pro3_BIOS Date 05 11 12 15 31 15 Ver 04.06.05_ALASKA - 1072009_P1.40_Standard-VGA-Grafikkarte.MRK
2014-06-14 13:51 - 2014-06-14 11:51 - 00000000 __SHD () C:\Recovery
2014-06-14 13:51 - 2009-07-14 05:20 - 00000000 __RHD () C:\Users\Default
2014-06-14 13:51 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\Recovery
2014-06-14 13:51 - 2009-07-14 05:20 - 00000000 ____D () C:\Program Files\Windows NT
2014-06-14 13:41 - 2014-06-14 23:27 - 00000000 ___HD () C:\$WINDOWS.~Q
2014-06-14 13:41 - 2014-06-14 13:41 - 00022960 _____ () C:\Windows\system32\emptyregdb.dat
2014-06-14 13:41 - 2014-06-14 13:22 - 00006167 _____ () C:\Windows\comsetup.log
2014-06-14 13:41 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\Registration
2014-06-14 13:40 - 2009-07-14 06:45 - 00274464 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-06-14 13:39 - 2009-07-14 06:46 - 00004141 _____ () C:\Windows\DtcInstall.log
2014-06-14 13:39 - 2009-07-14 05:20 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-06-14 13:39 - 2009-07-14 05:20 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-06-14 13:39 - 2009-07-14 05:20 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-06-14 13:39 - 2009-07-14 05:20 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-06-14 13:37 - 2014-06-14 13:37 - 00001345 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk
2014-06-14 13:37 - 2014-06-14 13:37 - 00001326 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk
2014-06-14 13:37 - 2014-06-14 13:37 - 00001313 _____ () C:\Windows\TSSysprep.log
2014-06-14 13:37 - 2014-06-14 13:37 - 00000000 _SHDL () C:\Users\Michael\Vorlagen
2014-06-14 13:37 - 2014-06-14 13:37 - 00000000 _SHDL () C:\Users\Michael\Startmenü
2014-06-14 13:37 - 2014-06-14 13:37 - 00000000 _SHDL () C:\Users\Michael\Netzwerkumgebung
2014-06-14 13:37 - 2014-06-14 13:37 - 00000000 _SHDL () C:\Users\Michael\Lokale Einstellungen
2014-06-14 13:37 - 2014-06-14 13:37 - 00000000 _SHDL () C:\Users\Michael\Eigene Dateien
2014-06-14 13:37 - 2014-06-14 13:37 - 00000000 _SHDL () C:\Users\Michael\Druckumgebung
2014-06-14 13:37 - 2014-06-14 13:37 - 00000000 _SHDL () C:\Users\Michael\Documents\Eigene Musik
2014-06-14 13:37 - 2014-06-14 13:37 - 00000000 _SHDL () C:\Users\Michael\Documents\Eigene Bilder
2014-06-14 13:37 - 2014-06-14 13:37 - 00000000 _SHDL () C:\Users\Michael\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-06-14 13:37 - 2014-06-14 13:37 - 00000000 _SHDL () C:\Users\Michael\AppData\Local\Verlauf
2014-06-14 13:37 - 2014-06-14 13:37 - 00000000 _SHDL () C:\Users\Michael\AppData\Local\Anwendungsdaten
2014-06-14 13:37 - 2014-06-14 13:37 - 00000000 _SHDL () C:\Users\Michael\Anwendungsdaten
2014-06-14 13:37 - 2009-07-14 05:20 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
2014-06-14 13:26 - 2014-06-14 11:52 - 00019545 _____ () C:\Windows\WindowsUpdate (1).log
2014-06-14 13:13 - 2014-06-14 13:13 - 00001890 _____ () C:\Windows\diagwrn.xml
2014-06-14 13:13 - 2014-06-14 13:13 - 00001890 _____ () C:\Windows\diagerr.xml
2014-06-14 12:52 - 2014-06-14 12:52 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
2014-06-14 12:44 - 2014-06-14 12:44 - 00000355 _____ () C:\Users\Michael\Desktop\Computer.lnk
2014-06-14 11:59 - 2014-06-14 11:59 - 00003072 _____ () C:\Windows\System32\Tasks\{69687F30-17EA-4DD2-A418-9F9A2F0C10D5}
2014-06-14 11:52 - 2014-06-14 11:52 - 00000000 ____D () C:\Users\Michael\AppData\Local\VirtualStore
2014-06-14 11:51 - 2014-06-14 11:51 - 00000000 _SHDL () C:\Programme
2014-06-14 11:51 - 2014-06-14 11:51 - 00000000 _SHDL () C:\Dokumente und Einstellungen
Some content of TEMP:
====================
C:\Users\Michael\AppData\Local\Temp\fp_pl_pfs_installer.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2014-06-28 14:34
==================== End Of Log ============================
Geändert von reufli (08.07.2014 um 17:27 Uhr) |
| Themen zu Windows 7 64 Bit Virus.Neshta |
| alternative, broken.opencommand, dateien, explorer, festplatte, firefox, gelöscht, grafikkarte, internet explorer, malwarebytes, mozilla, neustart, probleme, programme, registry, starten, svchost.com, treiber, virus.neshta, win7-64, windows, worm.traces, öffnet |
Baum-Darstellung