| |
| |||||||
Log-Analyse und Auswertung: Internet langsam, Windows Defender, Avira schalten automatisch aus.Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
 |
09.07.2014, 21:37
| #1 |
 |  Internet langsam, Windows Defender, Avira schalten automatisch aus. Sehr geehrtes Trojaner-Board Team, Seit geraumer Zeit habe ich massive Ping Einbrüche. Der Microsoft Defender wird sofort ausgeschaltet, sobald ich den Avira Echtzeit-Schutzmodus deaktiviere. Ein durchlauf mit Malwarebytes hat 1 Malware entdeckt. Leider hab ich die Logfile nicht mehr aber der Name vom Virus war: pup.optional.pcperformer.a roboot64 . Hier die in der Community gewünschten Logfiles: Addition: Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 09-07-2014
Ran by Denis at 2014-07-09 22:06:24
Running from C:\Users\Denis\Desktop\Logfiles Dateien\programme
Boot Mode: Normal
==========================================================
==================== Security Center ========================
AV: Avira Desktop (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avira Desktop (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
Adobe Flash Player 14 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 14.0.0.145 - Adobe Systems Incorporated)
Age of Empires II: HD Edition (HKLM-x32\...\Steam App 221380) (Version: - Hidden Path Entertainment, Ensemble Studios)
AI Suite 3 (HKLM-x32\...\{D46DA5F0-25AD-4B77-98DA-6DD6AF39FBD9}) (Version: 1.00.55 - ASUSTeK Computer Inc.)
AirMech (HKLM-x32\...\Steam App 206500) (Version: - Carbon Games)
Antichamber (HKLM\...\UDK-7912a574-9d9b-4664-a612-2893f4445647) (Version: - Epic Games, Inc.)
Antichamber (HKLM-x32\...\Steam App 219890) (Version: - Alexander Bruce)
Arma 3 (HKLM-x32\...\Steam App 107410) (Version: - Bohemia Interactive)
Avira (HKLM-x32\...\{70a79d1f-686d-4d5c-962b-07aa1294eae0}) (Version: 1.1.12.20002 - Avira Operations GmbH & Co. KG)
Avira (x32 Version: 1.1.12.20002 - Avira Operations GmbH & Co. KG) Hidden
Avira Free Antivirus (HKLM-x32\...\Avira AntiVir Desktop) (Version: 14.0.5.450 - Avira)
Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment)
Beat Hazard (HKLM-x32\...\Steam App 49600) (Version: - Cold Beam Games)
Diablo III (HKLM-x32\...\Diablo III) (Version: - Blizzard Entertainment)
Dll-Files Fixer (HKLM-x32\...\Dll-Files Fixer_is1) (Version: 3.1.81 - Dll-Files.com)
Endless Space (HKLM-x32\...\Steam App 208140) (Version: - AMPLITUDE Studios)
Free YouTube to MP3 Converter version 3.12.34.430 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.34.430 - DVDVideoSoft Ltd.)
Gnomoria (HKLM-x32\...\Steam App 224500) (Version: - Robotronic Games)
Goat Simulator (HKLM-x32\...\Steam App 265930) (Version: - Coffee Stain Studios)
Grand Theft Auto IV (HKLM-x32\...\Steam App 12210) (Version: - Rockstar North)
Hearthstone (HKLM-x32\...\Hearthstone) (Version: - Blizzard Entertainment)
Interplanetary (HKLM-x32\...\Steam App 278910) (Version: - Team Jolly Roger)
Java 7 Update 60 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217021FF}) (Version: 7.0.600 - Oracle)
Java Auto Updater (x32 Version: 2.1.60.19 - Oracle, Inc.) Hidden
Kerbal Space Program (HKLM-x32\...\{ED501254-06B8-4883-B7F3-4799C9EDD288}_is1) (Version: 0.22 - Squad)
League of Legends (HKLM-x32\...\League of Legends 3.0.1) (Version: 3.0.1 - Riot Games )
League of Legends (x32 Version: 3.0.1 - Riot Games ) Hidden
Malwarebytes Anti-Malware Version 2.0.2.1012 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.2.1012 - Malwarebytes Corporation)
Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{42AA4CA8-DCD8-4308-BCAB-0B6D75856A9D}) (Version: 3.5.95.0 - Microsoft Corporation)
Microsoft Games for Windows Marketplace (HKLM-x32\...\{67F42018-F647-4D3C-BE62-F8CB4FE2FCD5}) (Version: 3.5.67.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.60610 (Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.60610 (Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.60610 (x32 Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.60610 (x32 Version: 11.0.60610 - Microsoft Corporation) Hidden
Monaco (HKLM-x32\...\Steam App 113020) (Version: - Pocketwatch Games)
MotioninJoy Gamepad tool 0.7.1001 (HKLM\...\{330DAC67-5B62-452A-A0E4-6B4A5923940F}_is1) (Version: 0.7.1001 - www.motioninjoy.com)
Mozilla Firefox 30.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 30.0 (x86 de)) (Version: 30.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla)
NetLimiter 4 (HKLM-x32\...\NetLimiter 4 4.0.6.0) (Version: 4.0.6.0 - Locktime Software)
NetLimiter 4 (Version: 4.0.6.0 - Locktime Software) Hidden
NVIDIA Install Application (Version: 2.1002.133.889 - NVIDIA Corporation) Hidden
NVIDIA PhysX (HKLM-x32\...\{8A809006-C25A-4A3A-9DAB-94659BCDB107}) (Version: 9.10.0224 - NVIDIA Corporation)
NVIDIA Systemsteuerung 326.60 (Version: 326.60 - NVIDIA Corporation) Hidden
Pixel Piracy (HKLM-x32\...\Steam App 264140) (Version: - Vitali Kirpu)
Planetary Annihilation Launcher (HKLM-x32\...\{B88148BA-6B11-4C5F-B775-71F39AC42F9A}) (Version: 1.1.64928 - Uber Entertainment)
Prison Architect (HKLM-x32\...\Steam App 233450) (Version: - Introversion Software)
Project Zomboid (HKLM-x32\...\Steam App 108600) (Version: - The Indie Stone)
R.U.S.E (HKLM-x32\...\Steam App 21970) (Version: - Eugen Systems)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6971 - Realtek Semiconductor Corp.)
RollerCoaster Tycoon 3 (HKLM-x32\...\RollerCoaster Tycoon 3_is1) (Version: - Atari)
Rust (HKLM-x32\...\Steam App 252490) (Version: - Facepunch Studios)
Skype™ 6.16 (HKLM-x32\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.16.105 - Skype Technologies S.A.)
South Park™: The Stick of Truth™ (HKLM-x32\...\Steam App 213670) (Version: - Obsidian Entertainment)
Space Engineers (HKLM-x32\...\Steam App 244850) (Version: - )
Starbound (HKLM-x32\...\Steam App 211820) (Version: - )
StarCraft II (HKLM-x32\...\StarCraft II) (Version: - Blizzard Entertainment)
Steam (HKLM-x32\...\Steam) (Version: - Valve Corporation)
The Guild II - Pirates of the European Seas (HKLM-x32\...\Steam App 39660) (Version: - 4 Head Studios)
The Guild II (HKLM-x32\...\Steam App 39650) (Version: - 4 Head Studios)
The Guild II: Renaissance (HKLM-x32\...\Steam App 39680) (Version: - Rune Forge)
Toribash (HKLM-x32\...\Steam App 248570) (Version: - Nabi Studios)
Total War: ROME II (HKLM-x32\...\Steam App 214950) (Version: - Creative Assembly)
Tropico (HKLM-x32\...\Steam App 33520) (Version: - PopTop Software)
Tropico 2: Pirate Cove (HKLM-x32\...\Steam App 33530) (Version: - PopTop Software)
Tropico 3 - Steam Special Edition (HKLM-x32\...\Steam App 23490) (Version: - Haemimont Games)
Tropico 4 (HKLM-x32\...\Steam App 57690) (Version: - Haemimont Games)
Tropico 5 (HKCU\...\Tropico5) (Version: 1.03 - Kalypso Media)
Uplay (HKLM-x32\...\Uplay) (Version: 4.3 - Ubisoft)
VLC media player 2.1.4 (HKLM\...\VLC media player) (Version: 2.1.4 - VideoLAN)
WATCH_DOGS (HKLM-x32\...\Uplay Install 274) (Version: - Ubisoft)
Windows Media Encoder 9 Series (HKLM-x32\...\Windows Media Encoder 9) (Version: - )
Windows Media Encoder 9 Series (x32 Version: 9.00.2980 - Microsoft Corporation) Hidden
WinRAR 5.10 beta 2 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.10.2 - win.rar GmbH)
World of Warcraft (HKLM-x32\...\World of Warcraft) (Version: - Blizzard Entertainment)
X Codec Pack (HKLM\...\X Codec Pack) (Version: 2.6.5 - X Codec Pack team)
Xvid 1.2.2 final uninstall (HKLM-x32\...\Xvid_is1) (Version: 1.2 - Xvid team (Koepi))
==================== Restore Points =========================
20-06-2014 15:44:01 Installed Planetary Annihilation Launcher.
24-06-2014 13:05:01 Windows Update
25-06-2014 14:17:04 DirectX wurde installiert
28-06-2014 16:31:48 Windows Modules Installer
01-07-2014 12:44:19 Installed NetLimiter 4
08-07-2014 13:58:39 DirectX wurde installiert
==================== Hosts content: ==========================
2013-08-22 15:25 - 2013-08-22 15:25 - 00000824 ____A C:\WINDOWS\system32\Drivers\etc\hosts
==================== Scheduled Tasks (whitelisted) =============
Task: {05293577-D647-4185-B859-C94839A0B2E3} - System32\Tasks\Microsoft\Windows\SettingSync\NetworkStateChangeTask
Task: {0B545118-B563-42FC-8D07-B78F602FCF34} - System32\Tasks\Microsoft\Windows\WS\WSRefreshBannedAppsListTask => Rundll32.exe WSClient.dll,RefreshBannedAppsList
Task: {2085BF56-520D-4951-B7C0-DF34AF90CC6A} - System32\Tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask => Rundll32.exe sysmain.dll,PfSvWsSwapAssessmentTask
Task: {265268C2-E0C0-4478-B08E-D4F25547A2E7} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2014-06-13] (Microsoft Corporation)
Task: {29EDDCE9-A04F-4586-A413-879D8C4D27EA} - System32\Tasks\ASUS\USB 3.0 Boost Service => C:\Program Files (x86)\ASUS\AI Suite III\USB 3.0 Boost\U3BoostSvr.exe [2013-07-24] (ASUSTeK Computer Inc.)
Task: {2BF90693-62D1-4BD6-A8D5-FFA00D5926BC} - System32\Tasks\Microsoft\Windows\WOF\WIM-Hash-Management
Task: {2C9C0C6C-2A74-46F2-858A-4389D253EAD0} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCachePrepopulate
Task: {352E6CA0-7314-4DF4-89C4-682368D80D57} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join => C:\Windows\System32\AutoWorkplace.exe [2013-08-22] (Microsoft Corporation)
Task: {3971A9AE-6968-4FA7-80BB-E5EAC3B91AD3} - System32\Tasks\Microsoft\Windows\DiskCleanup\SilentCleanup => C:\Windows\system32\cleanmgr.exe [2014-02-22] (Microsoft Corporation)
Task: {3B6D8A73-F20B-4C93-B8FB-56A154F172D2} - System32\Tasks\Microsoft\Windows\Time Zone\SynchronizeTimeZone => C:\Windows\system32\tzsync.exe [2013-08-22] (Microsoft Corporation)
Task: {49754026-21E1-41FC-94FD-727AFE414FE7} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCacheRebalance
Task: {5DC549AD-35FB-4AAA-93B9-2224D4C4EDAD} - System32\Tasks\ASUS\ASUS DIPAwayMode => C:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\DipAwayMode.exe [2013-07-31] ()
Task: {6074B738-AE41-4C10-A848-471E6F46A6E5} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-07-08] (Adobe Systems Incorporated)
Task: {63FCFC1D-9306-4615-B9FB-E28BD2F2C07B} - System32\Tasks\Microsoft\Windows\DiskFootprint\Diagnostics
Task: {6AA91E8C-DDBD-4979-8464-4062F7681A19} - System32\Tasks\Microsoft\Windows\Plug and Play\Plug and Play Cleanup
Task: {6DFCB649-0769-4F83-BB10-F60F235F6D3D} - System32\Tasks\Microsoft\Windows\SkyDrive\Idle Sync Maintenance Task
Task: {73B1B253-CE67-4501-AE1A-377DD1D68B65} - System32\Tasks\Microsoft\Windows\Application Experience\StartupAppTask => Rundll32.exe Startupscan.dll,SusRunTask
Task: {77F1D869-6E65-4079-A2A0-E2023408EF97} - System32\Tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState => Rundll32.exe Windows.Storage.ApplicationData.dll,CleanupTemporaryState
Task: {856F52C4-E96D-4363-B09E-521CFB13B6D7} - System32\Tasks\ASUS\ASUS AISuiteIII => C:\Program Files (x86)\ASUS\AI Suite III\AISuite3.exe [2013-08-01] (ASUSTeK Computer Inc.)
Task: {872D0E53-FD2E-41E3-B431-698AF82882CE} - System32\Tasks\Microsoft\Windows\SkyDrive\Routine Maintenance Task
Task: {8C088096-3561-4619-9266-9D1AE9A1FF55} - System32\Tasks\Microsoft\Windows\Shell\FamilySafetyUpload
Task: {8CC813C9-712A-41EF-9512-B233444FC669} - System32\Tasks\Microsoft\Windows\AppxDeploymentClient\Pre-staged app cleanup => Rundll32.exe %windir%\system32\AppxDeploymentClient.dll,AppxPreStageCleanupRunTask
Task: {9E9B249B-D985-4E92-808C-920B570D536F} - System32\Tasks\DLL-Files.Com Fixer_MONTHLY => C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe [2014-02-13] (Dll-FIles.Com)
Task: {9FF4C139-5234-410C-B7FA-23EE2FD2AB53} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Maintenance Work
Task: {B1915068-076E-45F6-91E9-4A12B09260A6} - System32\Tasks\ASUS\ASUS WiFi GO! Server Execute => C:\Program Files (x86)\ASUS\AI Suite III\Wi-Fi GO!\AssistTools\WiFi GO! Server.exe [2013-07-18] (ASUSTeK Computer Inc.)
Task: {B5935B1A-241C-4297-B75D-FBA145D9901A} - System32\Tasks\Microsoft\Windows\WindowsUpdate\Scheduled Start With Network => Sc.exe start wuauserv
Task: {C25ADCE9-D070-45BF-BCF5-9302D2A32ACA} - System32\Tasks\DLL-Files.Com Fixer_Updates => C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe [2014-02-13] (Dll-FIles.Com)
Task: {CFD7C21A-808B-487B-A6EC-8A10E44E8360} - System32\Tasks\Microsoft\Windows\SettingSync\BackupTask
Task: {D8119238-158F-46CB-8984-BE9D6DFDDD7D} - System32\Tasks\Microsoft\Windows\WOF\WIM-Hash-Validation
Task: {D88FEC9E-A82A-46F9-87E2-B6B97B301C1A} - System32\Tasks\Microsoft\Windows\WS\License Validation => Rundll32.exe WSClient.dll,WSpTLR licensing
Task: {DA46820F-FF8A-4B5E-A6B2-B12185DCFFFB} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Logon Synchronization
Task: {E1318453-750A-4BDA-BB25-7E824CC7B3FB} - System32\Tasks\ASUS\ASUS Network iControl Help Execute => C:\Program Files (x86)\ASUS\AI Suite III\Network iControl\NetSvcHelp\NetSvcHelpEntry.exe [2013-02-07] (ASUSTeK Computer Inc.)
Task: {E6D378FA-E068-4BCB-80DE-56D43A249507} - System32\Tasks\Microsoft\Windows\RecoveryEnvironment\VerifyWinRE
Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\DLL-Files.Com Fixer_MONTHLY.job => C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
Task: C:\WINDOWS\Tasks\DLL-Files.Com Fixer_Updates.job => C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
==================== Loaded Modules (whitelisted) =============
2014-04-11 21:19 - 2013-07-04 04:32 - 00936728 ____N () C:\Program Files (x86)\ASUS\AXSP\1.01.02\atkexComSvc.exe
2014-04-11 21:43 - 2013-07-31 16:20 - 01225528 _____ () C:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\DipAwayMode.exe
2014-05-16 17:02 - 2012-05-03 10:40 - 00258048 _____ () C:\Program Files (x86)\ASUS\AI Suite III\Wi-Fi GO!\AssistTools\S5WOW_App\x64\S5wow_2005.exe
2014-04-11 21:43 - 2013-07-31 16:20 - 01221912 _____ () C:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\EPUShortCut.exe
2013-06-12 18:11 - 2014-04-11 21:45 - 01294336 _____ () Z:\Riot Games\RADS\system\rads_user_kernel.exe
2014-04-11 21:45 - 2014-07-03 14:33 - 05430776 _____ () Z:\Riot Games\RADS\projects\lol_launcher\releases\0.0.0.212\deploy\LoLLauncher.exe
2014-04-11 21:55 - 2014-04-11 21:55 - 00074752 _____ () Z:\Riot Games\RADS\projects\lol_air_client\releases\0.0.1.99\deploy\LolClient.exe
2014-04-11 21:19 - 2014-07-09 20:46 - 00029184 _____ () C:\Program Files (x86)\ASUS\AXSP\1.01.02\PEbiosinterface32.dll
2014-04-11 21:19 - 2013-07-04 04:32 - 00104448 ____N () C:\Program Files (x86)\ASUS\AXSP\1.01.02\ATKEX.dll
2014-05-05 10:37 - 2014-05-05 10:37 - 00138320 _____ () C:\Program Files (x86)\Avira\My Avira\Avira.OE.NativeCore.dll
2014-05-05 10:37 - 2014-05-05 10:37 - 00065616 _____ () C:\Program Files (x86)\Avira\My Avira\Avira.OE.AvConnectorNative.dll
2014-04-11 21:43 - 2013-07-31 16:20 - 00685056 _____ () C:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\DIPDLL\DIP4DIGIPowerControlAction.dll
2014-04-11 21:43 - 2013-07-31 16:20 - 00825344 _____ () C:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\DIPDLL\DIP4EpuAction.dll
2014-04-11 21:43 - 2013-07-31 16:20 - 00765952 _____ () C:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\DIPDLL\DIP4FanAction.dll
2014-04-11 21:43 - 2013-07-31 16:20 - 00776704 _____ () C:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\DIPDLL\DIP4TurboVEVOAction.dll
2014-04-11 21:43 - 2013-07-31 16:20 - 00904704 _____ () C:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\DIPDLL\UsbPowerManager.dll
2014-04-11 21:43 - 2013-08-01 10:57 - 00147456 _____ () C:\Program Files (x86)\ASUS\AI Suite III\AssistFunc.dll
2014-05-16 16:57 - 2013-03-13 17:12 - 00870912 _____ () C:\Program Files (x86)\ASUS\AI Suite III\AI Charger+\AIChargerPlus.dll
2014-04-11 21:43 - 2013-07-31 16:26 - 02743808 _____ () C:\Program Files (x86)\ASUS\AI Suite III\DIP4\dip4.dll
2014-05-16 16:58 - 2013-06-19 16:47 - 01129984 _____ () C:\Program Files (x86)\ASUS\AI Suite III\EZ Update\EasyUpdt.dll
2014-05-16 17:01 - 2013-06-24 15:59 - 01173504 _____ () C:\Program Files (x86)\ASUS\AI Suite III\Network iControl\Network iControl.dll
2014-05-16 17:02 - 2013-06-24 17:48 - 02055168 _____ () C:\Program Files (x86)\ASUS\AI Suite III\Wi-Fi GO!\WiFiGO.dll
2014-04-11 21:41 - 2013-06-04 11:41 - 00662016 ____R () C:\Program Files (x86)\ASUS\AAHM\1.00.22\aaHMLib.dll
2014-04-11 21:43 - 2013-08-01 10:57 - 00053248 _____ () C:\Program Files (x86)\ASUS\AI Suite III\cpuutil.dll
2014-04-11 21:43 - 2013-07-31 16:21 - 00010240 _____ () C:\Program Files (x86)\ASUS\AI Suite III\DIP4\IccHelper.dll
2014-05-16 17:02 - 2012-01-19 09:39 - 00028672 _____ () C:\Program Files (x86)\ASUS\AI Suite III\USB BIOS Flashback\PEInfo.dll
2014-04-11 21:43 - 2013-08-01 10:57 - 00208896 _____ () C:\Program Files (x86)\ASUS\AI Suite III\ImageHelper.dll
2014-04-11 21:43 - 2013-08-01 10:57 - 00253952 _____ () C:\Program Files (x86)\ASUS\AI Suite III\pngio.dll
2014-05-16 17:03 - 2013-06-24 13:45 - 00062976 _____ () C:\Program Files (x86)\ASUS\AI Suite III\Wi-Fi Engine\IsSupported.dll
2014-05-16 17:02 - 2010-09-23 11:51 - 00114688 _____ () C:\Program Files (x86)\ASUS\AI Suite III\USB BIOS Flashback\AsIdxParser.dll
2014-05-16 17:02 - 2010-02-25 14:01 - 00139264 _____ () C:\Program Files (x86)\ASUS\AI Suite III\USB BIOS Flashback\Aszip.dll
2014-05-16 17:02 - 2012-05-02 18:04 - 00233472 _____ () C:\Program Files (x86)\ASUS\AI Suite III\Wi-Fi GO!\AssistTools\AudioProjection.dll
2014-05-16 17:02 - 2013-07-12 12:56 - 00175616 _____ () C:\Program Files (x86)\ASUS\AI Suite III\Wi-Fi GO!\AssistTools\DLCapPP.dll
2014-05-16 17:02 - 2010-12-14 17:46 - 00067584 _____ () C:\Program Files (x86)\ASUS\AI Suite III\Wi-Fi GO!\AssistTools\CoreAudioCap.dll
2014-05-16 17:02 - 2013-06-11 12:06 - 00425984 _____ () C:\Program Files (x86)\ASUS\AI Suite III\Wi-Fi GO!\AssistTools\awiscale.DLL
2014-05-16 17:02 - 2010-10-29 18:58 - 00221184 _____ () C:\Program Files (x86)\ASUS\AI Suite III\Wi-Fi GO!\AssistTools\JpegCD.DLL
2014-05-16 17:02 - 2013-06-13 18:50 - 02462208 _____ () C:\Program Files (x86)\ASUS\AI Suite III\Wi-Fi GO!\AssistTools\xH264E.DLL
2014-05-16 17:02 - 2013-01-31 22:59 - 00515072 _____ () C:\Program Files (x86)\ASUS\AI Suite III\Wi-Fi GO!\AssistTools\WiFiGO_HelpWin8.dll
2014-05-16 17:02 - 2012-01-12 16:44 - 00475136 _____ () C:\Program Files (x86)\ASUS\AI Suite III\Wi-Fi GO!\AssistTools\WiFiGO_HookKey.dll
2014-05-16 17:02 - 2013-06-13 17:37 - 00156160 _____ () C:\Program Files (x86)\InstallShield Installation Information\{1DF11DAD-D427-4E1D-ABB6-04CB881EBE06}\CloudAPI\CloudAPI.dll
2014-05-16 17:02 - 2013-03-21 19:38 - 00716800 _____ () C:\Program Files (x86)\ASUS\AI Suite III\Wi-Fi GO!\AssistTools\WiMoveHelp.dll
2014-05-16 17:02 - 2012-04-25 14:47 - 00659456 _____ () C:\Program Files (x86)\ASUS\AI Suite III\Wi-Fi GO!\AssistTools\PhoneCtrlAPI.dll
2014-06-18 15:49 - 2014-06-18 15:50 - 03852912 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
2014-04-26 14:29 - 2014-05-05 10:37 - 00049744 _____ () C:\Users\Denis\AppData\Local\Temp\avgnt.exe\Avira.OE.ExtApi.dll
2014-05-16 17:02 - 2012-02-06 21:08 - 00253952 _____ () C:\Program Files (x86)\ASUS\AI Suite III\Wi-Fi GO!\AssistTools\WiFile\pngio.dll
2014-04-10 17:27 - 2014-04-10 17:27 - 00148480 _____ () Z:\TeamSpeak 3\quazip.dll
2014-04-10 17:27 - 2014-04-10 17:27 - 00864768 _____ () Z:\TeamSpeak 3\platforms\qwindows.dll
2014-04-10 17:27 - 2014-04-10 17:27 - 00677376 _____ () Z:\TeamSpeak 3\sqldrivers\qsqlite.dll
2014-04-10 17:27 - 2014-04-10 17:27 - 00092104 _____ () Z:\TeamSpeak 3\soundbackends\directsound_win32.dll
2014-04-10 17:27 - 2014-04-10 17:27 - 00105416 _____ () Z:\TeamSpeak 3\soundbackends\windowsaudiosession_win32.dll
2014-04-10 17:27 - 2014-04-10 17:27 - 00025600 _____ () Z:\TeamSpeak 3\imageformats\qgif.dll
2014-04-10 17:27 - 2014-04-10 17:27 - 00242688 _____ () Z:\TeamSpeak 3\imageformats\qjpeg.dll
2014-04-10 17:27 - 2014-04-10 17:27 - 00477128 _____ () Z:\TeamSpeak 3\plugins\clientquery_plugin.dll
2014-04-10 17:27 - 2014-04-10 17:27 - 00483784 _____ () Z:\TeamSpeak 3\plugins\teamspeak_control_plugin.dll
2014-04-10 17:27 - 2014-04-10 17:27 - 00123904 _____ () Z:\TeamSpeak 3\accessible\qtaccessiblewidgets.dll
2014-04-11 21:45 - 2014-07-03 14:33 - 01527800 _____ () Z:\Riot Games\RADS\projects\lol_launcher\releases\0.0.0.212\deploy\RiotLauncher.dll
==================== Alternate Data Streams (whitelisted) =========
AlternateDataStreams: C:\Users\Denis\SkyDrive:ms-properties
==================== Safe Mode (whitelisted) ===================
==================== EXE Association (whitelisted) =============
==================== MSCONFIG/TASK MANAGER disabled items =========
==================== Faulty Device Manager Devices =============
Name: ASUS Wi-Fi GO! Sensor
Description: ASUS Wi-Fi GO! Sensor
Class Guid: {5175d334-c371-4806-b3ba-71fd53c9258d}
Manufacturer: ASUSTeK COMPUTER INC.
Service: AsusSensorSimulator
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
Name: Bluetooth-Gerät (RFCOMM-Protokoll-TDI)
Description: Bluetooth-Gerät (RFCOMM-Protokoll-TDI)
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: RFCOMM
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
Name: Intel(R) Ethernet-Verbindung I217-V
Description: Intel(R) Ethernet-Verbindung I217-V
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Intel Corporation
Service: e1iexpress
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
Name: Bluetooth-Gerät (PAN)
Description: Bluetooth-Gerät (PAN)
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: BthPan
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
==================== Event log errors: =========================
Application errors:
==================
Error: (07/09/2014 08:55:53 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: mbam.exe, Version: 1.0.0.532, Zeitstempel: 0x53518532
Name des fehlerhaften Moduls: mbamcore.dll, Version: 1.0.11.0, Zeitstempel: 0x536d8027
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000636a
ID des fehlerhaften Prozesses: 0x11f4
Startzeit der fehlerhaften Anwendung: 0xmbam.exe0
Pfad der fehlerhaften Anwendung: mbam.exe1
Pfad des fehlerhaften Moduls: mbam.exe2
Berichtskennung: mbam.exe3
Vollständiger Name des fehlerhaften Pakets: mbam.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: mbam.exe5
Error: (07/09/2014 08:48:26 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: DipAwayMode.exe, Version: 0.0.0.0, Zeitstempel: 0x00000000
Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.3.9600.17055, Zeitstempel: 0x532943a3
Ausnahmecode: 0x40010006
Fehleroffset: 0x00011d4d
ID des fehlerhaften Prozesses: 0x904
Startzeit der fehlerhaften Anwendung: 0xDipAwayMode.exe0
Pfad der fehlerhaften Anwendung: DipAwayMode.exe1
Pfad des fehlerhaften Moduls: DipAwayMode.exe2
Berichtskennung: DipAwayMode.exe3
Vollständiger Name des fehlerhaften Pakets: DipAwayMode.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: DipAwayMode.exe5
Error: (07/09/2014 05:39:33 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: GuildII.exe, Version: 0.4.0.0, Zeitstempel: 0x4c76362f
Name des fehlerhaften Moduls: GuildII.exe, Version: 0.4.0.0, Zeitstempel: 0x4c76362f
Ausnahmecode: 0xc0000005
Fehleroffset: 0x003bd7f9
ID des fehlerhaften Prozesses: 0x758
Startzeit der fehlerhaften Anwendung: 0xGuildII.exe0
Pfad der fehlerhaften Anwendung: GuildII.exe1
Pfad des fehlerhaften Moduls: GuildII.exe2
Berichtskennung: GuildII.exe3
Vollständiger Name des fehlerhaften Pakets: GuildII.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: GuildII.exe5
Error: (07/09/2014 05:32:56 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: DipAwayMode.exe, Version: 0.0.0.0, Zeitstempel: 0x00000000
Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.3.9600.17055, Zeitstempel: 0x532943a3
Ausnahmecode: 0x40010006
Fehleroffset: 0x00011d4d
ID des fehlerhaften Prozesses: 0x850
Startzeit der fehlerhaften Anwendung: 0xDipAwayMode.exe0
Pfad der fehlerhaften Anwendung: DipAwayMode.exe1
Pfad des fehlerhaften Moduls: DipAwayMode.exe2
Berichtskennung: DipAwayMode.exe3
Vollständiger Name des fehlerhaften Pakets: DipAwayMode.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: DipAwayMode.exe5
Error: (07/08/2014 09:50:09 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: DipAwayMode.exe, Version: 0.0.0.0, Zeitstempel: 0x00000000
Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.3.9600.17055, Zeitstempel: 0x532943a3
Ausnahmecode: 0x40010006
Fehleroffset: 0x00011d4d
ID des fehlerhaften Prozesses: 0x7e8
Startzeit der fehlerhaften Anwendung: 0xDipAwayMode.exe0
Pfad der fehlerhaften Anwendung: DipAwayMode.exe1
Pfad des fehlerhaften Moduls: DipAwayMode.exe2
Berichtskennung: DipAwayMode.exe3
Vollständiger Name des fehlerhaften Pakets: DipAwayMode.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: DipAwayMode.exe5
Error: (07/07/2014 09:39:12 PM) (Source: Application Error) (EventID: 1005) (User: )
Description: Aus einem der folgenden Gründe kann nicht auf die Datei "" zugegriffen werden:
Es besteht ein Problem mit der Netzwerkverbindung, dem Datenträger mit der gespeicherten Datei bzw. den auf dem Computer installierten
Speichertreibern, oder der Datenträger fehlt.
Das Programm VALIANTnet.exe wurde wegen dieses Fehlers geschlossen.
Programm: VALIANTnet.exe
Datei:
Der Fehlerwert ist im Abschnitt "Zusätzliche Dateien" aufgelistet.
Benutzeraktion
1. Öffnen Sie die Datei erneut.
Diese Situation ist eventuell ein temporäres Problem, das selbstständig behoben wird, wenn das Programm erneut ausgeführt wird.
2.
Wenn Sie weiterhin nicht auf die Datei zugreifen können und
- diese sich im Netzwerk befindet,
dann sollte der Netzwerkadministrator überprüfen, dass kein Netzwerkproblem besteht und dass eine Verbindung mit dem Server hergestellt werden kann.
- diese sich auf einem Wechseldatenträger, wie z. B. einer Diskette oder einer CD, befindet, überprüfen Sie, ob der Datenträger richtig in den Computer eingelegt ist.
3. Überprüfen und reparieren Sie das Dateisystem, indem Sie CHKDSK ausführen. Klicken Sie dazu im Menü "Start" auf "Ausführen", geben Sie CMD ein, und klicken Sie auf "OK". Geben Sie an der Eingabeaufforderung CHKDSK /F ein, und drücken Sie die EINGABETASTE.
4. Stellen Sie die Datei von einer Sicherungskopie wieder her, wenn das Problem weiterhin besteht.
5. Überprüfen Sie, ob andere Dateien auf demselben Datenträger geöffnet werden können. Falls dies nicht möglich ist, ist der Datenträger eventuell beschädigt.
Wenden Sie sich an den Administrator oder den Hersteller der Computerhardware, um weitere Unterstützung zu erhalten, wenn es sich um eine Festplatte handelt.
Zusätzliche Daten
Fehlerwert: C0000098
Datenträgertyp: 0
Error: (07/07/2014 09:39:12 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: VALIANTnet.exe, Version: 0.0.0.0, Zeitstempel: 0x4d81ea7c
Name des fehlerhaften Moduls: xul.dll, Version: 0.0.0.0, Zeitstempel: 0x4d27327c
Ausnahmecode: 0xc0000006
Fehleroffset: 0x001f8760
ID des fehlerhaften Prozesses: 0x1674
Startzeit der fehlerhaften Anwendung: 0xVALIANTnet.exe0
Pfad der fehlerhaften Anwendung: VALIANTnet.exe1
Pfad des fehlerhaften Moduls: VALIANTnet.exe2
Berichtskennung: VALIANTnet.exe3
Vollständiger Name des fehlerhaften Pakets: VALIANTnet.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: VALIANTnet.exe5
Error: (07/07/2014 04:21:25 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: DipAwayMode.exe, Version: 0.0.0.0, Zeitstempel: 0x00000000
Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.3.9600.17055, Zeitstempel: 0x532943a3
Ausnahmecode: 0x40010006
Fehleroffset: 0x00011d4d
ID des fehlerhaften Prozesses: 0xaa4
Startzeit der fehlerhaften Anwendung: 0xDipAwayMode.exe0
Pfad der fehlerhaften Anwendung: DipAwayMode.exe1
Pfad des fehlerhaften Moduls: DipAwayMode.exe2
Berichtskennung: DipAwayMode.exe3
Vollständiger Name des fehlerhaften Pakets: DipAwayMode.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: DipAwayMode.exe5
Error: (07/07/2014 11:39:07 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: DipAwayMode.exe, Version: 0.0.0.0, Zeitstempel: 0x00000000
Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.3.9600.17055, Zeitstempel: 0x532943a3
Ausnahmecode: 0x40010006
Fehleroffset: 0x00011d4d
ID des fehlerhaften Prozesses: 0x1e64
Startzeit der fehlerhaften Anwendung: 0xDipAwayMode.exe0
Pfad der fehlerhaften Anwendung: DipAwayMode.exe1
Pfad des fehlerhaften Moduls: DipAwayMode.exe2
Berichtskennung: DipAwayMode.exe3
Vollständiger Name des fehlerhaften Pakets: DipAwayMode.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: DipAwayMode.exe5
Error: (07/06/2014 10:14:18 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: DipAwayMode.exe, Version: 0.0.0.0, Zeitstempel: 0x00000000
Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.3.9600.17055, Zeitstempel: 0x532943a3
Ausnahmecode: 0x40010006
Fehleroffset: 0x00011d4d
ID des fehlerhaften Prozesses: 0x368
Startzeit der fehlerhaften Anwendung: 0xDipAwayMode.exe0
Pfad der fehlerhaften Anwendung: DipAwayMode.exe1
Pfad des fehlerhaften Moduls: DipAwayMode.exe2
Berichtskennung: DipAwayMode.exe3
Vollständiger Name des fehlerhaften Pakets: DipAwayMode.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: DipAwayMode.exe5
System errors:
=============
Error: (07/09/2014 08:46:07 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "NetLimiter 4 Service" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2
Error: (07/09/2014 08:46:07 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "nldrv" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2
Error: (07/09/2014 08:45:34 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalAktivierung{D63B10C5-BB46-4990-A94F-E40B9D520160}{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar
Error: (07/09/2014 05:24:50 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "NetLimiter 4 Service" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2
Error: (07/09/2014 05:24:50 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "nldrv" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2
Error: (07/09/2014 05:24:45 PM) (Source: volmgr) (EventID: 46) (User: )
Description: Die Initialisierung des Speicherabbildes ist fehlgeschlagen.
Error: (07/09/2014 05:24:49 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: Das System wurde zuvor am 08.07.2014 um 22:27:33 unerwartet heruntergefahren.
Error: (07/08/2014 09:47:40 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "NetLimiter 4 Service" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2
Error: (07/08/2014 09:47:40 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "nldrv" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2
Error: (07/08/2014 09:47:39 AM) (Source: EventLog) (EventID: 6008) (User: )
Description: Das System wurde zuvor am 07.07.2014 um 23:01:15 unerwartet heruntergefahren.
Microsoft Office Sessions:
=========================
Error: (07/09/2014 08:55:53 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: mbam.exe1.0.0.53253518532mbamcore.dll1.0.11.0536d8027c00000050000636a11f401cf9ba68ad45f3eC:\Desktop\ Malwarebytes Anti-Malware \mbam.exeC:\Desktop\ Malwarebytes Anti-Malware \mbamcore.dlla69f41f6-079a-11e4-829c-e77ea64ff621
Error: (07/09/2014 08:48:26 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: DipAwayMode.exe0.0.0.000000000KERNELBASE.dll6.3.9600.17055532943a34001000600011d4d90401cf9ba65ccbf1beC:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\DipAwayMode.exeC:\WINDOWS\SYSTEM32\KERNELBASE.dll9be17355-0799-11e4-829c-e77ea64ff621
Error: (07/09/2014 05:39:33 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: GuildII.exe0.4.0.04c76362fGuildII.exe0.4.0.04c76362fc0000005003bd7f975801cf9b8b58b946aaZ:\Steam\steamapps\common\The Guild 2 Renaissance\GuildII.exeZ:\Steam\steamapps\common\The Guild 2 Renaissance\GuildII.exe38d42a2c-077f-11e4-829b-8304f428c4e9
Error: (07/09/2014 05:32:56 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: DipAwayMode.exe0.0.0.000000000KERNELBASE.dll6.3.9600.17055532943a34001000600011d4d85001cf9b8b0d09b0d6C:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\DipAwayMode.exeC:\WINDOWS\SYSTEM32\KERNELBASE.dll4c23e435-077e-11e4-829b-8304f428c4e9
Error: (07/08/2014 09:50:09 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: DipAwayMode.exe0.0.0.000000000KERNELBASE.dll6.3.9600.17055532943a34001000600011d4d7e801cf9a813c4a2968C:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\DipAwayMode.exeC:\WINDOWS\SYSTEM32\KERNELBASE.dll7b7ce1fc-0674-11e4-8299-faa1eb775ae1
Error: (07/07/2014 09:39:12 PM) (Source: Application Error) (EventID: 1005) (User: )
Description: VALIANTnet.exeC00000980
Error: (07/07/2014 09:39:12 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: VALIANTnet.exe0.0.0.04d81ea7cxul.dll0.0.0.04d27327cc0000006001f8760167401cf9a1a8cd16786E:\Win32\firefox\firefox\VALIANTnet.exeE:\Win32\firefox\firefox\xul.dll5ec38b24-060e-11e4-8298-c070787dd549
Error: (07/07/2014 04:21:25 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: DipAwayMode.exe0.0.0.000000000KERNELBASE.dll6.3.9600.17055532943a34001000600011d4daa401cf99eeba2af56cC:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\DipAwayMode.exeC:\WINDOWS\SYSTEM32\KERNELBASE.dllf9f9a491-05e1-11e4-8298-c070787dd549
Error: (07/07/2014 11:39:07 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: DipAwayMode.exe0.0.0.000000000KERNELBASE.dll6.3.9600.17055532943a34001000600011d4d1e6401cf99c7493dd60eC:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\DipAwayMode.exeC:\WINDOWS\SYSTEM32\KERNELBASE.dll89f0f1e4-05ba-11e4-8297-240a641d3d29
Error: (07/06/2014 10:14:18 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: DipAwayMode.exe0.0.0.000000000KERNELBASE.dll6.3.9600.17055532943a34001000600011d4d36801cf98f247bdabcbC:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\DipAwayMode.exeC:\WINDOWS\SYSTEM32\KERNELBASE.dll86248cdc-04e5-11e4-8297-240a641d3d29
==================== Memory info ===========================
Percentage of memory in use: 17%
Total physical RAM: 16322.39 MB
Available physical RAM: 13458.07 MB
Total Pagefile: 18754.39 MB
Available Pagefile: 15440.99 MB
Total Virtual: 131072 MB
Available Virtual: 131071.79 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:111.45 GB) (Free:52.33 GB) NTFS
Drive d: (SG1_SEASON1_DISC5_SKU1) (CDROM) (Total:7.75 GB) (Free:0 GB) UDF
Drive z: (Speicherplatz) (Fixed) (Total:1853.37 GB) (Free:1658.64 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 112 GB) (Disk ID: 1CB36443)
Partition 1: (Active) - (Size=350 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=111 GB) - (Type=07 NTFS)
========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 1863 GB) (Disk ID: 00000000)
Partition: GPT Partition Type.
Attempted reading MBR returned 0 bytes.
Could not read MBR for disk 2.
==================== End Of Log ============================
Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 09-07-2014
Ran by Denis (administrator) on DENIS-PC on 09-07-2014 22:06:05
Running from C:\Users\Denis\Desktop\Logfiles Dateien\programme
Platform: Windows 8.1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal
The only official download link for FRST:
Download link for 32-Bit version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/
Download link for 64-Bit Version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
() C:\Program Files (x86)\ASUS\AXSP\1.01.02\atkexComSvc.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AAHM\1.00.22\aaHMSvc.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AsusFanControlService\1.03.03\AsusFanControlService.exe
(DTS, Inc) C:\Program Files\Realtek\Audio\HDA\DTSU2PAuSrv64.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
() C:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\DipAwayMode.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite III\AISuite3.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite III\Wi-Fi GO!\AssistTools\WiFi GO! Server.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite III\USB 3.0 Boost\U3BoostSvr64.exe
() C:\Program Files (x86)\ASUS\AI Suite III\Wi-Fi GO!\AssistTools\S5WOW_App\x64\S5wow_2005.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\InstallShield Installation Information\{E6931688-DA2B-4E16-8539-3D323D69C677}\AiChargerPlus.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite III\Wi-Fi GO!\AssistTools\WiFile\WiFileTransfer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
() C:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\EPUShortCut.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite III\Wi-Fi GO!\AsDLNAServerReal.exe
(TeamSpeak Systems GmbH) Z:\TeamSpeak 3\ts3client_win32.exe
() Z:\Riot Games\RADS\system\rads_user_kernel.exe
() Z:\Riot Games\RADS\projects\lol_launcher\releases\0.0.0.212\deploy\LoLLauncher.exe
() Z:\Riot Games\RADS\projects\lol_air_client\releases\0.0.1.99\deploy\LolClient.exe
(Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(Malwarebytes Corporation) C:\Desktop\ Malwarebytes Anti-Malware \mbam.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7192792 2013-07-06] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_DTS] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1321688 2013-07-04] (Realtek Semiconductor)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [750160 2014-06-24] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [182352 2014-05-05] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [ASUS AiChargerPlus Execute] => C:\Program Files (x86)\InstallShield Installation Information\{E6931688-DA2B-4E16-8539-3D323D69C677}\AiChargerPlus.exe [550272 2013-01-28] (ASUSTek Computer Inc.)
HKLM-x32\...\Run: [ASUS WiFi GO! FileTransfer Execute] => C:\Program Files (x86)\ASUS\AI Suite III\Wi-Fi GO!\AssistTools\WiFile\WiFileTransfer.exe [1391416 2013-06-21] (ASUSTeK Computer Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896 2014-05-07] (Oracle Corporation)
HKU\S-1-5-21-1791151724-3789037606-4172102177-1001\...\Run: [NetLimiter] => "C:\Users\Denis\Desktop\nlclientapp.exe" /minimized
HKU\S-1-5-21-1791151724-3789037606-4172102177-1001\...\MountPoints2: {135151dc-f856-11e3-828c-240a641d3d29} - "E:\Start_eBanking_Login-Stick_Win.exe"
HKU\S-1-5-21-1791151724-3789037606-4172102177-1001\...\MountPoints2: {c3bf88bb-04e1-11e4-8297-240a641d3d29} - "E:\HTC_Sync_Manager_PC.exe"
HKU\S-1-5-21-1791151724-3789037606-4172102177-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [NetLimiter] => "C:\Users\Denis\Desktop\nlclientapp.exe" /minimized
HKU\S-1-5-21-1791151724-3789037606-4172102177-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\MountPoints2: {135151dc-f856-11e3-828c-240a641d3d29} - "E:\Start_eBanking_Login-Stick_Win.exe"
HKU\S-1-5-21-1791151724-3789037606-4172102177-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\MountPoints2: {c3bf88bb-04e1-11e4-8297-240a641d3d29} - "E:\HTC_Sync_Manager_PC.exe"
HKU\S-1-5-21-1791151724-3789037606-4172102177-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\...\Run: [NetLimiter] => "C:\Users\Denis\Desktop\nlclientapp.exe" /minimized
HKU\S-1-5-21-1791151724-3789037606-4172102177-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\...\MountPoints2: {135151dc-f856-11e3-828c-240a641d3d29} - "E:\Start_eBanking_Login-Stick_Win.exe"
HKU\S-1-5-21-1791151724-3789037606-4172102177-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\...\MountPoints2: {c3bf88bb-04e1-11e4-8297-240a641d3d29} - "E:\HTC_Sync_Manager_PC.exe"
Startup: C:\Users\Denis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Product Registration.lnk
ShortcutTarget: Product Registration.lnk -> C:\Users\Denis\AppData\Local\Temp\is-IOKFA.tmp\ATR1.exe (No File)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://t.de.msn.com/
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xA881B91AAD89CF01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE,de;q=0.5
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
FireFox:
========
FF ProfilePath: C:\Users\Denis\AppData\Roaming\Mozilla\Firefox\Profiles\7ptqrbfd.default
FF Plugin: @adobe.com/FlashPlayer - C:\WINDOWS\system32\Macromed\Flash\NPSWF64_14_0_0_145.dll ()
FF Plugin: @videolan.org/vlc,version=2.1.4 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_145.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=10.60.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.60.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Adblock Plus - C:\Users\Denis\AppData\Roaming\Mozilla\Firefox\Profiles\7ptqrbfd.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-04-11]
==================== Services (Whitelisted) =================
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [430160 2014-06-24] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [430160 2014-06-24] (Avira Operations GmbH & Co. KG)
R2 asComSvc; C:\Program Files (x86)\ASUS\AXSP\1.01.02\atkexComSvc.exe [936728 2013-07-04] ()
R2 asHmComSvc; C:\Program Files (x86)\ASUS\AAHM\1.00.22\aaHMSvc.exe [954648 2013-08-01] (ASUSTeK Computer Inc.)
R2 AsusFanControlService; C:\Program Files (x86)\ASUS\AsusFanControlService\1.03.03\AsusFanControlService.exe [1660728 2013-07-31] (ASUSTeK Computer Inc.)
R2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [124496 2014-05-05] (Avira Operations GmbH & Co. KG)
R2 DTSAudioSvc; C:\Program Files\Realtek\Audio\HDA\DTSU2PAuSrv64.exe [240584 2012-10-02] (DTS, Inc)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347880 2014-03-24] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2014-03-24] (Microsoft Corporation)
S2 nlsvc; C:\Users\Denis\Desktop\NLSvc.exe [X]
==================== Drivers (Whitelisted) ====================
R3 AiChargerPlus; C:\Windows\SysWow64\drivers\AiChargerPlus.sys [14848 2013-01-28] (ASUSTek Computer Inc.)
R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [15232 2013-07-04] ()
R3 ASMTFilter; C:\Windows\SysWow64\drivers\asmtufdriver.sys [21400 2013-01-28] (hxxp://www.asmedia.com.tw) [File not signed]
R1 AsUpIO; C:\Windows\SysWow64\drivers\AsUpIO.sys [14464 2012-09-14] ()
R3 ASUSFILTER; C:\Windows\SysWow64\drivers\ASUSFILTER.sys [46152 2011-09-20] (MCCI Corporation)
R3 AsusSensorSimulator; C:\Windows\system32\DRIVERS\WUDFRd.sys [230912 2013-08-22] (Microsoft Corporation)
R3 asusvad_micarray; C:\Windows\system32\drivers\vmic_x64.sys [38712 2013-02-27] (ASUS SZ provider)
R3 athr; C:\Windows\system32\DRIVERS\athwbx.sys [3880448 2013-11-12] (Qualcomm Atheros Communications, Inc.)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [117712 2014-06-24] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [130584 2014-06-03] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [28600 2014-02-25] (Avira Operations GmbH & Co. KG)
R3 BthLEEnum; C:\Windows\System32\drivers\BthLEEnum.sys [226304 2013-12-04] (Microsoft Corporation)
R3 MBAMSwissArmy; C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [122584 2014-07-09] (Malwarebytes Corporation)
R3 SensorsServiceDriver; C:\Windows\system32\DRIVERS\WUDFRd.sys [230912 2013-08-22] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [123224 2014-03-24] (Microsoft Corporation)
S2 nldrv; \??\C:\Users\Denis\Desktop\nldrv.sys [X]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-07-09 22:06 - 2014-07-09 22:06 - 00000000 ____D () C:\FRST
2014-07-09 22:05 - 2014-07-09 22:05 - 00000000 _____ () C:\Users\Denis\defogger_reenable
2014-07-09 21:51 - 2014-07-09 21:54 - 00000000 ____D () C:\Users\Denis\Desktop\Logfiles Dateien
2014-07-09 20:49 - 2014-07-09 21:04 - 00122584 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2014-07-09 20:49 - 2014-07-09 20:49 - 00000835 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-07-09 20:49 - 2014-07-09 20:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware
2014-07-09 20:49 - 2014-07-09 20:49 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-07-09 20:49 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2014-07-09 20:49 - 2014-05-12 07:26 - 00064216 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys
2014-07-09 20:49 - 2014-05-12 07:25 - 00025816 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys
2014-07-09 17:39 - 2014-07-09 17:39 - 00000000 ____D () C:\Users\Denis\AppData\Roaming\AC3Filter
2014-07-08 21:14 - 2014-07-08 21:14 - 00000000 ___HD () C:\WINDOWS\msdownld.tmp
2014-07-08 21:14 - 2014-07-08 21:14 - 00000000 ____D () C:\WINDOWS\RegisteredPackages
2014-07-08 21:14 - 2014-07-08 21:14 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media
2014-07-08 21:14 - 2014-07-08 21:14 - 00000000 ____D () C:\IExp1.tmp
2014-07-08 21:14 - 2014-07-08 21:14 - 00000000 ____D () C:\IExp0.tmp
2014-07-08 15:58 - 2014-07-08 15:58 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Xvid
2014-07-08 15:58 - 2014-07-08 15:58 - 00000000 ____D () C:\Program Files (x86)\Xvid
2014-07-08 15:58 - 2009-06-07 16:25 - 00077824 _____ () C:\WINDOWS\SysWOW64\xvid.ax
2014-07-08 15:58 - 2009-06-07 16:24 - 00180224 _____ () C:\WINDOWS\SysWOW64\xvidvfw.dll
2014-07-08 15:58 - 2009-06-07 16:16 - 00819200 _____ () C:\WINDOWS\SysWOW64\xvidcore.dll
2014-07-07 16:39 - 2013-11-12 11:00 - 03880448 _____ (Qualcomm Atheros Communications, Inc.) C:\WINDOWS\system32\Drivers\athwbx.sys
2014-07-01 14:44 - 2014-07-07 15:08 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NetLimiter 4
2014-07-01 14:44 - 2014-07-01 14:44 - 00000000 ____D () C:\Users\Denis\AppData\Roaming\Locktime Software
2014-07-01 14:44 - 2014-07-01 14:44 - 00000000 ____D () C:\Users\Denis\AppData\Roaming\Locktime
2014-07-01 14:44 - 2014-07-01 14:44 - 00000000 ____D () C:\ProgramData\Locktime
2014-07-01 14:43 - 2014-07-01 14:43 - 05911712 _____ (Locktime Software) C:\Users\Denis\Downloads\netlimiter-4.0.6.0.exe
2014-06-29 11:18 - 2014-07-04 21:13 - 00000000 ____D () C:\Users\Denis\Zomboid
2014-06-28 18:31 - 2014-06-28 18:31 - 00461312 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnet.dll
2014-06-28 18:31 - 2014-06-28 18:31 - 00377856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnet.dll
2014-06-28 18:31 - 2014-06-28 18:31 - 00214016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dplayx.dll
2014-06-28 18:31 - 2014-06-28 18:31 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnathlp.dll
2014-06-28 18:31 - 2014-06-28 18:31 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnathlp.dll
2014-06-28 18:31 - 2014-06-28 18:31 - 00045056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpwsockx.dll
2014-06-28 18:31 - 2014-06-28 18:31 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnsvr.exe
2014-06-28 18:31 - 2014-06-28 18:31 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnsvr.exe
2014-06-28 18:31 - 2014-06-28 18:31 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dplaysvr.exe
2014-06-28 18:31 - 2014-06-28 18:31 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpmodemx.dll
2014-06-28 18:31 - 2014-06-28 18:31 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnhupnp.dll
2014-06-28 18:31 - 2014-06-28 18:31 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnhpast.dll
2014-06-28 18:31 - 2014-06-28 18:31 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnhupnp.dll
2014-06-28 18:31 - 2014-06-28 18:31 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnhpast.dll
2014-06-23 23:05 - 2014-06-23 23:05 - 00000000 ____D () C:\Users\Denis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\X Codec Pack 2.6.5
2014-06-23 23:05 - 2014-06-23 23:05 - 00000000 ____D () C:\Program Files\X Codec Pack
2014-06-23 23:04 - 2014-06-23 23:05 - 24419588 _____ () C:\Users\Denis\Downloads\X-Codec-Pack-2.6.5.exe
2014-06-23 22:59 - 2014-07-07 22:31 - 00000000 ____D () C:\Users\Denis\AppData\Roaming\vlc
2014-06-23 22:59 - 2014-06-24 18:53 - 00000000 ____D () C:\Users\Denis\AppData\Roaming\dvdcss
2014-06-23 22:59 - 2014-06-23 22:59 - 00000887 _____ () C:\Users\Public\Desktop\VLC media player.lnk
2014-06-23 22:59 - 2014-06-23 22:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2014-06-23 22:59 - 2014-06-23 22:59 - 00000000 ____D () C:\Program Files\VideoLAN
2014-06-23 22:58 - 2014-06-23 22:58 - 00961360 _____ (Chip Digital GmbH) C:\Users\Denis\Downloads\VLC media player 64 Bit - CHIP-Installer.exe
2014-06-23 22:53 - 2014-06-23 22:55 - 00000000 ____D () C:\Users\Denis\AppData\Roaming\Media Player Classic
2014-06-23 22:53 - 2010-02-14 16:35 - 04411392 _____ (Gabest) C:\Users\Denis\Desktop\mplayerc.exe
2014-06-23 22:52 - 2014-06-23 22:52 - 00961360 _____ (Chip Digital GmbH) C:\Users\Denis\Downloads\mplayerc_20100214 - CHIP-Installer.exe
2014-06-20 23:58 - 2014-06-21 00:00 - 00000000 ____D () C:\Users\Denis\Documents\RCT3
2014-06-20 23:58 - 2014-06-20 23:58 - 00000000 ____D () C:\Users\Denis\AppData\Roaming\Atari
2014-06-20 23:57 - 2014-06-20 23:57 - 00043520 _____ () C:\WINDOWS\SysWOW64\CmdLineExt03.dll
2014-06-20 23:56 - 2014-06-20 23:56 - 00000649 _____ () C:\Users\Public\Desktop\RollerCoaster Tycoon 3.lnk
2014-06-20 23:56 - 2014-06-20 23:56 - 00000000 ____D () C:\Users\Denis\AppData\Roaming\Leadertech
2014-06-20 23:56 - 2014-06-20 23:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Atari
2014-06-20 17:49 - 2014-06-20 17:49 - 29602248 _____ (Uber Entertainment) C:\Users\Denis\Downloads\PA_Setup.exe
2014-06-20 17:44 - 2014-06-20 17:54 - 00000000 ____D () C:\Users\Denis\AppData\Local\Uber Entertainment
2014-06-20 17:44 - 2014-06-20 17:44 - 00002927 _____ () C:\Users\Public\Desktop\PA Launcher.lnk
2014-06-20 17:44 - 2014-06-20 17:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Uber Entertainment
2014-06-18 15:49 - 2014-06-18 15:50 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-06-18 15:18 - 2014-06-18 15:18 - 00000000 ____D () C:\Users\Denis\AppData\Roaming\.mono
2014-06-18 15:18 - 2014-06-18 15:18 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kerbal Space Program
2014-06-13 20:06 - 2014-06-13 20:06 - 00000000 ____D () C:\Users\Denis\AppData\Local\Introversion
2014-06-13 15:13 - 2014-05-30 12:21 - 23414784 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2014-06-13 15:13 - 2014-05-30 11:45 - 02768384 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2014-06-13 15:13 - 2014-05-30 11:28 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll
2014-06-13 15:13 - 2014-05-30 11:20 - 00752640 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2014-06-13 15:13 - 2014-05-30 11:18 - 17271296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2014-06-13 15:13 - 2014-05-30 11:08 - 05782528 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2014-06-13 15:13 - 2014-05-30 11:06 - 00452096 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtmsft.dll
2014-06-13 15:13 - 2014-05-30 10:46 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2014-06-13 15:13 - 2014-05-30 10:44 - 00295424 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll
2014-06-13 15:13 - 2014-05-30 10:43 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesetup.dll
2014-06-13 15:13 - 2014-05-30 10:38 - 02179072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2014-06-13 15:13 - 2014-05-30 10:35 - 00608768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2014-06-13 15:13 - 2014-05-30 10:29 - 00631808 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2014-06-13 15:13 - 2014-05-30 10:27 - 00592896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll
2014-06-13 15:13 - 2014-05-30 10:23 - 02040832 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2014-06-13 15:13 - 2014-05-30 10:16 - 00368128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtmsft.dll
2014-06-13 15:13 - 2014-05-30 10:04 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll
2014-06-13 15:13 - 2014-05-30 10:02 - 00242688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll
2014-06-13 15:13 - 2014-05-30 09:56 - 04244992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2014-06-13 15:13 - 2014-05-30 09:56 - 02266112 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2014-06-13 15:13 - 2014-05-30 09:54 - 00526336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2014-06-13 15:13 - 2014-05-30 09:49 - 01964544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2014-06-13 15:13 - 2014-05-30 09:43 - 13522944 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2014-06-13 15:13 - 2014-05-30 09:40 - 11725312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2014-06-13 15:13 - 2014-05-30 09:30 - 01398272 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2014-06-13 15:13 - 2014-05-30 09:21 - 01790976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2014-06-13 15:13 - 2014-05-30 09:15 - 01143296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2014-06-13 15:13 - 2014-05-30 09:13 - 00846336 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2014-06-13 15:13 - 2014-05-30 09:13 - 00704512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2014-06-13 15:13 - 2014-05-10 05:46 - 02151424 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3.dll
2014-06-13 15:13 - 2014-05-10 05:22 - 01312256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3.dll
2014-06-13 15:13 - 2014-05-09 01:06 - 00295424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ks.sys
2014-06-13 15:13 - 2014-05-05 06:02 - 03360256 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll
2014-06-13 15:13 - 2014-05-03 09:14 - 00079872 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSReset.exe
2014-06-13 15:13 - 2014-05-03 06:21 - 00249344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2014-06-13 15:13 - 2014-05-03 06:07 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2014-06-13 15:13 - 2014-05-03 05:41 - 00921088 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll
2014-06-13 15:13 - 2014-05-03 05:38 - 00754688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll
2014-06-13 15:13 - 2014-04-30 13:16 - 01336648 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll
2014-06-13 15:13 - 2014-04-30 05:51 - 01064448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll
2014-06-13 15:13 - 2014-04-18 16:57 - 00032600 _____ (Microsoft Corporation) C:\WINDOWS\system32\ploptin.dll
2014-06-13 15:13 - 2014-04-18 16:44 - 01466856 _____ (Microsoft Corporation) C:\WINDOWS\system32\propsys.dll
2014-06-13 15:13 - 2014-04-18 15:29 - 01200288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\propsys.dll
2014-06-13 15:13 - 2014-04-18 11:44 - 00055296 _____ (Microsoft Corporation) C:\WINDOWS\system32\energyprov.dll
2014-06-13 15:13 - 2014-04-18 11:32 - 13287936 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2014-06-13 15:13 - 2014-04-18 10:58 - 11792384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2014-06-13 15:13 - 2014-04-18 10:32 - 00805376 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll
2014-06-13 15:13 - 2014-04-18 10:21 - 01126912 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFolder.dll
2014-06-13 15:13 - 2014-04-18 10:09 - 08652800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll
2014-06-13 15:13 - 2014-04-18 09:51 - 00836608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchFolder.dll
2014-06-13 15:13 - 2014-04-18 09:49 - 05833216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Search.dll
2014-06-13 15:13 - 2014-04-14 11:20 - 00324888 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFCaptureEngine.dll
2014-06-13 15:13 - 2014-04-14 10:01 - 00285144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFCaptureEngine.dll
2014-06-13 15:13 - 2014-04-11 08:13 - 01200128 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthport.sys
2014-06-13 15:13 - 2014-04-11 06:51 - 00250368 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpencom.dll
2014-06-13 15:13 - 2014-04-11 06:23 - 00209920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpencom.dll
2014-06-13 15:13 - 2014-04-11 05:30 - 00449536 _____ (Microsoft Corporation) C:\WINDOWS\system32\defragsvc.dll
2014-06-13 15:13 - 2014-04-09 13:53 - 00337240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Classpnp.sys
2014-06-13 15:13 - 2014-04-09 08:39 - 00191488 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpchttp.dll
2014-06-13 15:13 - 2014-04-09 07:44 - 00144384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpchttp.dll
2014-06-13 15:13 - 2014-04-09 06:35 - 01411584 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2014-06-13 15:13 - 2014-04-09 05:33 - 00135168 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscsvc.dll
2014-06-13 15:13 - 2014-04-08 04:01 - 00589656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fvevol.sys
2014-06-13 15:13 - 2014-04-06 18:34 - 00372568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storport.sys
2014-06-13 15:13 - 2014-04-06 18:34 - 00275800 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msiscsi.sys
2014-06-13 15:13 - 2014-04-06 18:32 - 00125496 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmapi.dll
2014-06-13 15:13 - 2014-04-06 18:31 - 21268952 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2014-06-13 15:13 - 2014-04-06 18:30 - 00201920 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVideoDSP.dll
2014-06-13 15:13 - 2014-04-06 18:24 - 00360792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fltMgr.sys
2014-06-13 15:13 - 2014-04-06 18:20 - 02140888 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2014-06-13 15:13 - 2014-04-06 18:20 - 01403856 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll
2014-06-13 15:13 - 2014-04-06 18:20 - 01379064 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpmde.dll
2014-06-13 15:13 - 2014-04-06 18:20 - 00881616 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll
2014-06-13 15:13 - 2014-04-06 18:20 - 00765408 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2014-06-13 15:13 - 2014-04-06 18:20 - 00609448 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf.dll
2014-06-13 15:13 - 2014-04-06 18:20 - 00491744 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2014-06-13 15:13 - 2014-04-06 18:20 - 00467496 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2014-06-13 15:13 - 2014-04-06 18:20 - 00463256 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2014-06-13 15:13 - 2014-04-06 18:20 - 00364640 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2014-06-13 15:13 - 2014-04-06 18:20 - 00244880 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2014-06-13 15:13 - 2014-04-06 18:20 - 00233912 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll
2014-06-13 15:13 - 2014-04-06 18:20 - 00028408 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfpmp.exe
2014-06-13 15:13 - 2014-04-06 17:23 - 00098584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmapi.dll
2014-06-13 15:13 - 2014-04-06 17:22 - 18755672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2014-06-13 15:13 - 2014-04-06 17:22 - 00178184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVideoDSP.dll
2014-06-13 15:13 - 2014-04-06 17:16 - 02144984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2014-06-13 15:13 - 2014-04-06 17:16 - 01209616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmde.dll
2014-06-13 15:13 - 2014-04-06 17:16 - 00707048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll
2014-06-13 15:13 - 2014-04-06 17:16 - 00669856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll
2014-06-13 15:13 - 2014-04-06 17:16 - 00518544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf.dll
2014-06-13 15:13 - 2014-04-06 17:16 - 00406504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll
2014-06-13 15:13 - 2014-04-06 17:16 - 00387896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll
2014-06-13 15:13 - 2014-04-06 17:16 - 00326024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2014-06-13 15:13 - 2014-04-06 17:16 - 00305768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll
2014-06-13 15:13 - 2014-04-06 16:10 - 04190720 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2014-06-13 15:13 - 2014-04-06 14:58 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\system32\srclient.dll
2014-06-13 15:13 - 2014-04-06 14:51 - 00467968 _____ (Microsoft Corporation) C:\WINDOWS\system32\srcore.dll
2014-06-13 15:13 - 2014-04-06 14:33 - 00335872 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDEServer.exe
2014-06-13 15:13 - 2014-04-06 14:24 - 00271872 _____ (Microsoft Corporation) C:\WINDOWS\system32\rstrui.exe
2014-06-13 15:13 - 2014-04-06 14:06 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\srclient.dll
2014-06-13 15:13 - 2014-04-06 13:55 - 16872448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2014-06-13 15:13 - 2014-04-06 13:54 - 12711424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2014-06-13 15:13 - 2014-04-06 13:26 - 00143872 _____ (Microsoft Corporation) C:\WINDOWS\system32\BootMenuUX.dll
2014-06-13 15:13 - 2014-04-06 13:20 - 00201216 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2014-06-13 15:13 - 2014-04-06 13:01 - 00834048 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2014-06-13 15:13 - 2014-04-06 12:52 - 00955904 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2014-06-13 15:13 - 2014-04-06 12:51 - 01230336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2014-06-13 15:13 - 2014-04-06 12:37 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2014-06-13 15:13 - 2014-04-06 12:36 - 00888320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2014-06-13 15:13 - 2014-04-06 12:05 - 01222656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Streaming.dll
2014-06-13 15:13 - 2014-04-06 11:59 - 00982016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Streaming.dll
2014-06-13 15:13 - 2014-04-03 10:12 - 02124840 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d9.dll
2014-06-13 15:13 - 2014-04-03 10:12 - 00307304 _____ (Microsoft Corporation) C:\WINDOWS\system32\wintrust.dll
2014-06-13 15:13 - 2014-04-03 10:12 - 00130144 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpapi.dll
2014-06-13 15:13 - 2014-04-03 09:59 - 02518872 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2014-06-13 15:13 - 2014-04-03 09:59 - 00428888 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS
2014-06-13 15:13 - 2014-04-03 06:03 - 00230808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wintrust.dll
2014-06-13 15:13 - 2014-04-03 06:03 - 00111528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gpapi.dll
2014-06-13 15:13 - 2014-04-03 05:53 - 01797896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d9.dll
2014-06-13 15:13 - 2014-04-03 04:53 - 04269056 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncEngine.dll
2014-06-13 15:13 - 2014-04-03 04:53 - 00677376 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys
2014-06-13 15:13 - 2014-04-03 04:51 - 01584128 _____ (Microsoft Corporation) C:\WINDOWS\system32\workfolderssvc.dll
2014-06-13 15:13 - 2014-04-03 04:23 - 00563200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\afd.sys
2014-06-13 15:13 - 2014-04-03 04:23 - 00402432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
2014-06-13 15:13 - 2014-04-03 04:23 - 00046592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tlscsp.dll
2014-06-13 15:13 - 2014-04-03 04:22 - 00047616 _____ (Microsoft Corporation) C:\WINDOWS\system32\tlscsp.dll
2014-06-13 15:13 - 2014-04-01 08:23 - 00384856 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spaceport.sys
2014-06-13 15:13 - 2014-03-31 07:42 - 07425368 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2014-06-13 15:13 - 2014-03-31 02:41 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d8thk.dll
2014-06-13 15:13 - 2014-03-31 02:01 - 00186880 _____ (Microsoft Corporation) C:\WINDOWS\system32\WorkFoldersShell.dll
2014-06-13 15:13 - 2014-03-31 01:43 - 00761856 _____ (Microsoft Corporation) C:\WINDOWS\system32\WorkfoldersControl.dll
2014-06-13 15:13 - 2014-03-31 00:54 - 01308160 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpsvc.dll
2014-06-13 15:13 - 2014-03-31 00:49 - 01287168 _____ (Microsoft Corporation) C:\WINDOWS\system32\mispace.dll
2014-06-13 15:13 - 2014-03-31 00:35 - 01029120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mispace.dll
2014-06-13 15:13 - 2014-03-31 00:11 - 00721408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveTelemetry.dll
2014-06-13 15:13 - 2014-03-30 23:47 - 00872448 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDrive.exe
2014-06-13 15:13 - 2014-03-28 17:58 - 00407016 _____ (Microsoft Corporation) C:\WINDOWS\system32\services.exe
2014-06-13 15:13 - 2014-03-27 08:16 - 00246272 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srvnet.sys
2014-06-13 15:13 - 2014-03-27 07:36 - 00281600 _____ (Microsoft Corporation) C:\WINDOWS\system32\resutils.dll
2014-06-13 15:13 - 2014-03-27 06:59 - 00426496 _____ (Microsoft Corporation) C:\WINDOWS\system32\clusapi.dll
2014-06-13 15:13 - 2014-03-27 06:48 - 00219136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\resutils.dll
2014-06-13 15:13 - 2014-03-27 06:19 - 00313344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\clusapi.dll
2014-06-13 15:13 - 2014-03-27 05:46 - 00323072 _____ (Microsoft Corporation) C:\WINDOWS\system32\srvsvc.dll
2014-06-13 15:13 - 2014-03-27 05:15 - 00718336 _____ (Microsoft Corporation) C:\WINDOWS\system32\swprv.dll
2014-06-13 15:13 - 2014-03-27 05:10 - 01436160 _____ (Microsoft Corporation) C:\WINDOWS\system32\VSSVC.exe
2014-06-13 15:13 - 2014-03-25 00:58 - 00206848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys
2014-06-13 15:13 - 2014-03-20 05:48 - 00263424 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlows.exe
2014-06-13 15:13 - 2014-03-20 02:44 - 06645248 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2014-06-13 15:13 - 2014-03-20 01:33 - 05774848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
2014-06-13 15:13 - 2014-03-19 10:15 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanhlp.dll
2014-06-13 15:13 - 2014-03-19 10:07 - 00443904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\nwifi.sys
2014-06-13 15:13 - 2014-03-19 09:24 - 00064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsgqec.dll
2014-06-13 15:13 - 2014-03-19 09:17 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanhlp.dll
2014-06-13 15:13 - 2014-03-19 08:36 - 01057280 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdvidcrl.dll
2014-06-13 15:13 - 2014-03-19 07:56 - 00855552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdvidcrl.dll
2014-06-13 15:13 - 2014-03-19 07:45 - 00443904 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansec.dll
2014-06-13 15:13 - 2014-03-19 07:19 - 00296960 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanapi.dll
2014-06-13 15:13 - 2014-03-19 07:07 - 00370176 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanmsm.dll
2014-06-13 15:13 - 2014-03-19 07:02 - 01527296 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll
2014-06-13 15:13 - 2014-03-19 07:00 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanapi.dll
2014-06-13 15:13 - 2014-03-19 06:51 - 00300544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanmsm.dll
2014-06-13 15:13 - 2014-03-19 06:31 - 02100736 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlowUI.dll
2014-06-13 15:13 - 2014-03-19 06:18 - 02688000 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers.dll
2014-06-13 15:13 - 2014-03-18 10:19 - 00077312 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hdaudbus.sys
2014-06-13 15:13 - 2014-03-18 07:00 - 07173120 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
2014-06-13 15:13 - 2014-03-18 06:52 - 05104640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll
2014-06-13 15:13 - 2014-03-17 07:09 - 00462336 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsGdiConverter.dll
2014-06-13 15:13 - 2014-03-17 06:11 - 00337408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsGdiConverter.dll
2014-06-13 15:13 - 2014-03-17 05:01 - 00486912 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv
2014-06-13 15:13 - 2014-03-17 04:47 - 01025024 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2014-06-13 15:13 - 2014-03-17 04:45 - 00370176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv
2014-06-13 15:13 - 2014-03-14 08:26 - 00491520 _____ (Microsoft Corporation) C:\WINDOWS\system32\GeofenceMonitorService.dll
2014-06-13 15:13 - 2014-03-14 08:10 - 00357376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GeofenceMonitorService.dll
2014-06-13 15:13 - 2014-03-06 14:42 - 00310616 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\volsnap.sys
2014-06-13 15:12 - 2014-06-13 15:12 - 00195584 _____ (Microsoft Corporation) C:\WINDOWS\system32\msrating.dll
2014-06-13 15:12 - 2014-06-13 15:12 - 00164864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrating.dll
2014-06-13 15:12 - 2014-06-13 15:12 - 00139264 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieUnatt.exe
2014-06-13 15:12 - 2014-06-13 15:12 - 00112128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieUnatt.exe
2014-06-13 15:12 - 2014-06-13 15:12 - 00111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollector.exe
2014-06-13 15:12 - 2014-06-13 15:12 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll
2014-06-13 15:12 - 2014-06-13 15:12 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tsgqec.dll
2014-06-13 15:12 - 2014-06-13 15:12 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieetwproxystub.dll
2014-06-13 15:12 - 2014-06-13 15:12 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwproxystub.dll
2014-06-13 15:12 - 2014-06-13 15:12 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll
2014-06-13 15:12 - 2014-06-13 15:12 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll
2014-06-13 15:12 - 2014-06-13 15:12 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iernonce.dll
2014-06-13 15:12 - 2014-06-13 15:12 - 00004096 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollectorres.dll
2014-06-13 15:12 - 2014-05-19 08:31 - 00057856 _____ (Microsoft Corporation) C:\WINDOWS\system32\drvcfg.exe
2014-06-13 15:12 - 2014-05-19 08:21 - 00110592 _____ (Microsoft Corporation) C:\WINDOWS\system32\drvinst.exe
2014-06-13 15:12 - 2014-05-19 07:23 - 00098816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\drvinst.exe
2014-06-13 15:12 - 2014-05-01 15:31 - 03048904 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcMon.exe
2014-06-13 15:12 - 2014-05-01 15:31 - 00055328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wpcfltr.sys
2014-06-13 15:12 - 2014-05-01 09:14 - 03118080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Wpc.dll
2014-06-13 15:12 - 2014-05-01 09:05 - 02861056 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebSync.dll
2014-06-13 15:12 - 2014-05-01 08:51 - 02344448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Wpc.dll
2014-06-13 15:12 - 2014-05-01 07:24 - 02834944 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpccpl.dll
2014-06-13 15:12 - 2014-04-30 06:43 - 01975296 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWrite.dll
2014-06-13 15:12 - 2014-04-30 06:26 - 01345536 _____ (Microsoft Corporation) C:\WINDOWS\system32\FntCache.dll
2014-06-13 15:12 - 2014-04-30 05:47 - 01509888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWrite.dll
==================== One Month Modified Files and Folders =======
2014-07-09 22:06 - 2014-07-09 22:06 - 00000000 ____D () C:\FRST
2014-07-09 22:05 - 2014-07-09 22:05 - 00000000 _____ () C:\Users\Denis\defogger_reenable
2014-07-09 22:05 - 2014-04-11 21:26 - 00000000 ____D () C:\Users\Denis
2014-07-09 21:54 - 2014-07-09 21:51 - 00000000 ____D () C:\Users\Denis\Desktop\Logfiles Dateien
2014-07-09 21:50 - 2014-04-11 21:19 - 01819640 _____ () C:\WINDOWS\WindowsUpdate.log
2014-07-09 21:16 - 2014-04-11 22:19 - 00000884 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2014-07-09 21:04 - 2014-07-09 20:49 - 00122584 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2014-07-09 21:02 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\sru
2014-07-09 20:54 - 2014-04-11 21:32 - 00003598 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1791151724-3789037606-4172102177-1001
2014-07-09 20:53 - 2014-05-16 17:12 - 00000000 _____ () C:\WINDOWS\Path.idx
2014-07-09 20:52 - 2014-04-11 21:25 - 01776918 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2014-07-09 20:52 - 2013-08-23 01:24 - 00764340 _____ () C:\WINDOWS\system32\perfh007.dat
2014-07-09 20:52 - 2013-08-23 01:24 - 00159160 _____ () C:\WINDOWS\system32\perfc007.dat
2014-07-09 20:49 - 2014-07-09 20:49 - 00000835 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-07-09 20:49 - 2014-07-09 20:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware
2014-07-09 20:49 - 2014-07-09 20:49 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-07-09 20:48 - 2014-05-16 17:04 - 01048576 _____ () C:\WINDOWS\PE_Rom.dll
2014-07-09 20:48 - 2014-04-12 12:03 - 00000000 __RDO () C:\Users\Denis\SkyDrive
2014-07-09 20:46 - 2013-08-22 16:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2014-07-09 20:45 - 2013-08-22 15:25 - 00262144 ___SH () C:\WINDOWS\system32\config\BBI
2014-07-09 17:39 - 2014-07-09 17:39 - 00000000 ____D () C:\Users\Denis\AppData\Roaming\AC3Filter
2014-07-08 23:00 - 2014-05-02 18:48 - 00000049 _____ () C:\Users\Denis\Desktop\yagur kimimaru11.txt
2014-07-08 21:14 - 2014-07-08 21:14 - 00000000 ___HD () C:\WINDOWS\msdownld.tmp
2014-07-08 21:14 - 2014-07-08 21:14 - 00000000 ____D () C:\WINDOWS\RegisteredPackages
2014-07-08 21:14 - 2014-07-08 21:14 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media
2014-07-08 21:14 - 2014-07-08 21:14 - 00000000 ____D () C:\IExp1.tmp
2014-07-08 21:14 - 2014-07-08 21:14 - 00000000 ____D () C:\IExp0.tmp
2014-07-08 19:16 - 2014-04-11 22:19 - 00003772 _____ () C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2014-07-08 15:58 - 2014-07-08 15:58 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Xvid
2014-07-08 15:58 - 2014-07-08 15:58 - 00000000 ____D () C:\Program Files (x86)\Xvid
2014-07-08 15:58 - 2014-04-13 17:14 - 00395565 _____ () C:\WINDOWS\DirectX.log
2014-07-07 22:31 - 2014-06-23 22:59 - 00000000 ____D () C:\Users\Denis\AppData\Roaming\vlc
2014-07-07 16:25 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\NDF
2014-07-07 15:08 - 2014-07-01 14:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NetLimiter 4
2014-07-07 15:08 - 2014-04-11 21:45 - 00000000 __SHD () C:\WINDOWS\SysWOW64\AI_RecycleBin
2014-07-06 23:26 - 2014-04-11 23:32 - 00000000 ____D () C:\Users\Denis\AppData\Local\Battle.net
2014-07-06 21:41 - 2014-05-30 21:28 - 00000000 ____D () C:\Users\Denis\AppData\Roaming\Tropico 5
2014-07-06 14:58 - 2013-08-22 16:46 - 00194007 _____ () C:\WINDOWS\setupact.log
2014-07-04 21:13 - 2014-06-29 11:18 - 00000000 ____D () C:\Users\Denis\Zomboid
2014-07-03 12:56 - 2014-04-11 21:18 - 00086998 _____ () C:\WINDOWS\PFRO.log
2014-07-01 18:44 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\rescache
2014-07-01 14:44 - 2014-07-01 14:44 - 00000000 ____D () C:\Users\Denis\AppData\Roaming\Locktime Software
2014-07-01 14:44 - 2014-07-01 14:44 - 00000000 ____D () C:\Users\Denis\AppData\Roaming\Locktime
2014-07-01 14:44 - 2014-07-01 14:44 - 00000000 ____D () C:\ProgramData\Locktime
2014-07-01 14:43 - 2014-07-01 14:43 - 05911712 _____ (Locktime Software) C:\Users\Denis\Downloads\netlimiter-4.0.6.0.exe
2014-06-30 21:59 - 2014-04-21 22:10 - 00000000 ____D () C:\Users\Denis\AppData\Roaming\Skype
2014-06-29 13:25 - 2014-04-19 17:24 - 00000000 ____D () C:\Users\Denis\Documents\Diablo III
2014-06-28 18:31 - 2014-06-28 18:31 - 00461312 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnet.dll
2014-06-28 18:31 - 2014-06-28 18:31 - 00377856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnet.dll
2014-06-28 18:31 - 2014-06-28 18:31 - 00214016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dplayx.dll
2014-06-28 18:31 - 2014-06-28 18:31 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnathlp.dll
2014-06-28 18:31 - 2014-06-28 18:31 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnathlp.dll
2014-06-28 18:31 - 2014-06-28 18:31 - 00045056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpwsockx.dll
2014-06-28 18:31 - 2014-06-28 18:31 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnsvr.exe
2014-06-28 18:31 - 2014-06-28 18:31 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnsvr.exe
2014-06-28 18:31 - 2014-06-28 18:31 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dplaysvr.exe
2014-06-28 18:31 - 2014-06-28 18:31 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpmodemx.dll
2014-06-28 18:31 - 2014-06-28 18:31 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnhupnp.dll
2014-06-28 18:31 - 2014-06-28 18:31 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnhpast.dll
2014-06-28 18:31 - 2014-06-28 18:31 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnhupnp.dll
2014-06-28 18:31 - 2014-06-28 18:31 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnhpast.dll
2014-06-28 18:31 - 2013-08-22 17:20 - 00000000 ____D () C:\WINDOWS\CbsTemp
2014-06-28 16:56 - 2014-04-20 16:56 - 00000310 _____ () C:\WINDOWS\Tasks\DLL-Files.Com Fixer_Updates.job
2014-06-25 16:56 - 2014-04-20 16:56 - 00000294 _____ () C:\WINDOWS\Tasks\DLL-Files.Com Fixer_MONTHLY.job
2014-06-24 18:53 - 2014-06-23 22:59 - 00000000 ____D () C:\Users\Denis\AppData\Roaming\dvdcss
2014-06-24 13:49 - 2014-04-26 14:29 - 00117712 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avgntflt.sys
2014-06-23 23:05 - 2014-06-23 23:05 - 00000000 ____D () C:\Users\Denis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\X Codec Pack 2.6.5
2014-06-23 23:05 - 2014-06-23 23:05 - 00000000 ____D () C:\Program Files\X Codec Pack
2014-06-23 23:05 - 2014-06-23 23:04 - 24419588 _____ () C:\Users\Denis\Downloads\X-Codec-Pack-2.6.5.exe
2014-06-23 22:59 - 2014-06-23 22:59 - 00000887 _____ () C:\Users\Public\Desktop\VLC media player.lnk
2014-06-23 22:59 - 2014-06-23 22:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2014-06-23 22:59 - 2014-06-23 22:59 - 00000000 ____D () C:\Program Files\VideoLAN
2014-06-23 22:58 - 2014-06-23 22:58 - 00961360 _____ (Chip Digital GmbH) C:\Users\Denis\Downloads\VLC media player 64 Bit - CHIP-Installer.exe
2014-06-23 22:55 - 2014-06-23 22:53 - 00000000 ____D () C:\Users\Denis\AppData\Roaming\Media Player Classic
2014-06-23 22:52 - 2014-06-23 22:52 - 00961360 _____ (Chip Digital GmbH) C:\Users\Denis\Downloads\mplayerc_20100214 - CHIP-Installer.exe
2014-06-21 14:32 - 2013-08-22 16:44 - 00352352 _____ () C:\WINDOWS\system32\FNTCACHE.DAT
2014-06-21 00:00 - 2014-06-20 23:58 - 00000000 ____D () C:\Users\Denis\Documents\RCT3
2014-06-20 23:58 - 2014-06-20 23:58 - 00000000 ____D () C:\Users\Denis\AppData\Roaming\Atari
2014-06-20 23:57 - 2014-06-20 23:57 - 00043520 _____ () C:\WINDOWS\SysWOW64\CmdLineExt03.dll
2014-06-20 23:56 - 2014-06-20 23:56 - 00000649 _____ () C:\Users\Public\Desktop\RollerCoaster Tycoon 3.lnk
2014-06-20 23:56 - 2014-06-20 23:56 - 00000000 ____D () C:\Users\Denis\AppData\Roaming\Leadertech
2014-06-20 23:56 - 2014-06-20 23:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Atari
2014-06-20 17:54 - 2014-06-20 17:44 - 00000000 ____D () C:\Users\Denis\AppData\Local\Uber Entertainment
2014-06-20 17:49 - 2014-06-20 17:49 - 29602248 _____ (Uber Entertainment) C:\Users\Denis\Downloads\PA_Setup.exe
2014-06-20 17:44 - 2014-06-20 17:44 - 00002927 _____ () C:\Users\Public\Desktop\PA Launcher.lnk
2014-06-20 17:44 - 2014-06-20 17:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Uber Entertainment
2014-06-19 15:32 - 2014-04-11 21:40 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-06-18 15:50 - 2014-06-18 15:49 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-06-18 15:18 - 2014-06-18 15:18 - 00000000 ____D () C:\Users\Denis\AppData\Roaming\.mono
2014-06-18 15:18 - 2014-06-18 15:18 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kerbal Space Program
2014-06-13 22:23 - 2013-08-22 17:36 - 00000000 ___RD () C:\WINDOWS\ToastData
2014-06-13 22:23 - 2013-08-22 17:36 - 00000000 ___RD () C:\WINDOWS\ImmersiveControlPanel
2014-06-13 22:23 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\WinStore
2014-06-13 22:23 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\system32\oobe
2014-06-13 20:06 - 2014-06-13 20:06 - 00000000 ____D () C:\Users\Denis\AppData\Local\Introversion
2014-06-13 15:54 - 2014-04-13 15:00 - 95414520 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2014-06-13 15:54 - 2014-04-13 15:00 - 00000000 ____D () C:\WINDOWS\system32\MRT
2014-06-13 15:12 - 2014-06-13 15:12 - 00195584 _____ (Microsoft Corporation) C:\WINDOWS\system32\msrating.dll
2014-06-13 15:12 - 2014-06-13 15:12 - 00164864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrating.dll
2014-06-13 15:12 - 2014-06-13 15:12 - 00139264 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieUnatt.exe
2014-06-13 15:12 - 2014-06-13 15:12 - 00112128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieUnatt.exe
2014-06-13 15:12 - 2014-06-13 15:12 - 00111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollector.exe
2014-06-13 15:12 - 2014-06-13 15:12 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll
2014-06-13 15:12 - 2014-06-13 15:12 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tsgqec.dll
2014-06-13 15:12 - 2014-06-13 15:12 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieetwproxystub.dll
2014-06-13 15:12 - 2014-06-13 15:12 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwproxystub.dll
2014-06-13 15:12 - 2014-06-13 15:12 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll
2014-06-13 15:12 - 2014-06-13 15:12 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll
2014-06-13 15:12 - 2014-06-13 15:12 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iernonce.dll
2014-06-13 15:12 - 2014-06-13 15:12 - 00004096 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollectorres.dll
Some content of TEMP:
====================
C:\Users\Denis\AppData\Local\Temp\avgnt.exe
C:\Users\Denis\AppData\Local\Temp\drm_dyndata_7370014.dll
C:\Users\Denis\AppData\Local\Temp\drm_dyndata_7380014.dll
C:\Users\Denis\AppData\Local\Temp\i4jdel0.exe
C:\Users\Denis\AppData\Local\Temp\jre-7u55-windows-i586-iftw.exe
C:\Users\Denis\AppData\Local\Temp\jre-7u60-windows-i586-iftw.exe
C:\Users\Denis\AppData\Local\Temp\SIntf16.dll
C:\Users\Denis\AppData\Local\Temp\SIntf32.dll
C:\Users\Denis\AppData\Local\Temp\SIntfNT.dll
C:\Users\Denis\AppData\Local\Temp\swt-win32-3349.dll
C:\Users\Denis\AppData\Local\Temp\tmpE653.tmp.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2014-06-27 18:18
==================== End Of Log ============================
Code:
ATTFilter GMER 2.1.19357 - hxxp://www.gmer.net
Rootkit scan 2014-07-09 22:21:55
Windows 6.2.9200 x64 \Device\Harddisk0\DR0 -> \Device\0000002f Samsung_SSD_840_EVO_120GB rev.EXT0BB0Q 111,79GB
Running: Gmer-19357.exe; Driver: C:\Users\Denis\AppData\Local\Temp\kglcapod.sys
---- User code sections - GMER 2.1 ----
.text C:\WINDOWS\system32\dwm.exe[884] C:\WINDOWS\system32\PSAPI.DLL!GetModuleBaseNameA + 506 00007ffd411d169a 4 bytes [1D, 41, FD, 7F]
.text C:\WINDOWS\system32\dwm.exe[884] C:\WINDOWS\system32\PSAPI.DLL!GetModuleBaseNameA + 514 00007ffd411d16a2 4 bytes [1D, 41, FD, 7F]
.text C:\WINDOWS\system32\dwm.exe[884] C:\WINDOWS\system32\PSAPI.DLL!QueryWorkingSet + 118 00007ffd411d181a 4 bytes [1D, 41, FD, 7F]
.text C:\WINDOWS\system32\dwm.exe[884] C:\WINDOWS\system32\PSAPI.DLL!QueryWorkingSet + 142 00007ffd411d1832 4 bytes [1D, 41, FD, 7F]
.text C:\WINDOWS\system32\nvvsvc.exe[972] C:\WINDOWS\system32\PSAPI.DLL!GetModuleBaseNameA + 506 00007ffd411d169a 4 bytes [1D, 41, FD, 7F]
.text C:\WINDOWS\system32\nvvsvc.exe[972] C:\WINDOWS\system32\PSAPI.DLL!GetModuleBaseNameA + 514 00007ffd411d16a2 4 bytes [1D, 41, FD, 7F]
.text C:\WINDOWS\system32\nvvsvc.exe[972] C:\WINDOWS\system32\PSAPI.DLL!QueryWorkingSet + 118 00007ffd411d181a 4 bytes [1D, 41, FD, 7F]
.text C:\WINDOWS\system32\nvvsvc.exe[972] C:\WINDOWS\system32\PSAPI.DLL!QueryWorkingSet + 142 00007ffd411d1832 4 bytes [1D, 41, FD, 7F]
.text C:\WINDOWS\Explorer.EXE[1128] C:\WINDOWS\system32\PSAPI.DLL!GetModuleBaseNameA + 506 00007ffd411d169a 4 bytes [1D, 41, FD, 7F]
.text C:\WINDOWS\Explorer.EXE[1128] C:\WINDOWS\system32\PSAPI.DLL!GetModuleBaseNameA + 514 00007ffd411d16a2 4 bytes [1D, 41, FD, 7F]
.text C:\WINDOWS\Explorer.EXE[1128] C:\WINDOWS\system32\PSAPI.DLL!QueryWorkingSet + 118 00007ffd411d181a 4 bytes [1D, 41, FD, 7F]
.text C:\WINDOWS\Explorer.EXE[1128] C:\WINDOWS\system32\PSAPI.DLL!QueryWorkingSet + 142 00007ffd411d1832 4 bytes [1D, 41, FD, 7F]
.text C:\WINDOWS\ImmersiveControlPanel\SystemSettings.exe[4820] C:\WINDOWS\system32\PSAPI.DLL!GetModuleBaseNameA + 506 00007ffd411d169a 4 bytes [1D, 41, FD, 7F]
.text C:\WINDOWS\ImmersiveControlPanel\SystemSettings.exe[4820] C:\WINDOWS\system32\PSAPI.DLL!GetModuleBaseNameA + 514 00007ffd411d16a2 4 bytes [1D, 41, FD, 7F]
.text C:\WINDOWS\ImmersiveControlPanel\SystemSettings.exe[4820] C:\WINDOWS\system32\PSAPI.DLL!QueryWorkingSet + 118 00007ffd411d181a 4 bytes [1D, 41, FD, 7F]
.text C:\WINDOWS\ImmersiveControlPanel\SystemSettings.exe[4820] C:\WINDOWS\system32\PSAPI.DLL!QueryWorkingSet + 142 00007ffd411d1832 4 bytes [1D, 41, FD, 7F]
---- Threads - GMER 2.1 ----
Thread C:\WINDOWS\system32\csrss.exe [580:4208] fffff96000916b90
Thread C:\WINDOWS\Explorer.EXE [1128:3844] 00007ffd3643d6bc
---- Processes - GMER 2.1 ----
Library C:\Program Files (x86)\InstallShield Installation Information\{1DF11DAD-D427-4E1D-ABB6-04CB881EBE06}\CloudAPI\CloudAPI.dll (*** suspicious ***) @ C:\Program Files (x86)\ASUS\AI Suite III\Wi-Fi GO!\AssistTools\WiFi GO! Server.exe [1788](2014-05-16 15:02:58) 000000006a8c0000
---- Registry - GMER 2.1 ----
Reg HKLM\SYSTEM\CurrentControlSet\Control\Network\{4D36E972-E325-11CE-BFC1-08002BE10318}\{FC74F564-96C0-4B96-9195-54E54A9BEA78}\Connection@Name isatap.home
Reg HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Kernel\RNG@RNGAuxiliarySeed -910647595
Reg HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\Keys\240a641d3d29
Reg HKLM\SYSTEM\CurrentControlSet\Services\iphlpsvc\Parameters\Isatap\{FC74F564-96C0-4B96-9195-54E54A9BEA78}@ReusableType 0
Reg HKLM\SYSTEM\CurrentControlSet\Services\iphlpsvc\Parameters\Isatap\{FC74F564-96C0-4B96-9195-54E54A9BEA78}@DefunctTimestamp 0xD1 0x8D 0xBD 0x53 ...
Reg HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Epoch@Epoch 2799
Reg HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Epoch2@Epoch 495
---- EOF - GMER 2.1 ----
Mit freundlichen Grüssen Denis.Ö |
|
10.07.2014, 07:09
| #2 |
| /// the machine /// TB-Ausbilder    | Internet langsam, Windows Defender, Avira schalten automatisch aus. hi,
__________________Downloade Dir bitte  Malwarebytes Anti-Malware
Downloade Dir bitte  AdwCleaner auf deinen Desktop.
Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
und ein frisches FRST log bitte.
__________________ |
|
10.07.2014, 16:59
| #3 |
| | Internet langsam, Windows Defender, Avira schalten automatisch aus. Guten Tag,
__________________Malewarebytes hat nix gefunden. Hier das Log zu AdwCleaner Code:
ATTFilter # AdwCleaner v3.215 - Bericht erstellt am 10/07/2014 um 17:45:16
# Aktualisiert 09/07/2014 von Xplode
# Betriebssystem : Windows 8.1 (64 bits)
# Benutzername : Denis - DENIS-PC
# Gestartet von : C:\Users\Denis\Desktop\Logfiles Dateien\programme\adwcleaner_3.215.exe
# Option : Löschen
***** [ Dienste ] *****
***** [ Dateien / Ordner ] *****
Ordner Gelöscht : C:\Users\Denis\AppData\Local\Temp\OCS
Datei Gelöscht : C:\WINDOWS\System32\roboot64.exe
***** [ Verknüpfungen ] *****
***** [ Registrierungsdatenbank ] *****
Schlüssel Gelöscht : HKCU\Software\OCS
***** [ Browser ] *****
-\\ Internet Explorer v11.0.9600.17126
-\\ Mozilla Firefox v30.0 (de)
[ Datei : C:\Users\Denis\AppData\Roaming\Mozilla\Firefox\Profiles\7ptqrbfd.default\prefs.js ]
*************************
AdwCleaner[R0].txt - [1005 octets] - [10/07/2014 17:44:46]
AdwCleaner[S0].txt - [882 octets] - [10/07/2014 17:45:16]
########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [941 octets] ##########
Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.4 (04.06.2014:1)
OS: Windows 8.1 x64
Ran by Denis on 10.07.2014 at 17:52:08,03
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~ Services
~~~ Registry Values
~~~ Registry Keys
~~~ Files
Successfully deleted: [File] "C:\WINDOWS\Tasks\dll-files.com fixer_monthly.job"
Successfully deleted: [File] "C:\WINDOWS\Tasks\dll-files.com fixer_updates.job"
~~~ Folders
Successfully deleted: [Folder] "C:\Users\Denis\AppData\Roaming\dll-files.com"
Successfully deleted: [Folder] "C:\Program Files (x86)\dll-files.com fixer"
Successfully deleted: [Folder] "C:\WINDOWS\syswow64\ai_recyclebin"
~~~ FireFox
Emptied folder: C:\Users\Denis\AppData\Roaming\mozilla\firefox\profiles\7ptqrbfd.default\minidumps [46 files]
~~~ Event Viewer Logs were cleared
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 10.07.2014 at 17:53:59,95
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 09-07-2014
Ran by Denis (administrator) on DENIS-PC on 10-07-2014 17:54:49
Running from C:\Users\Denis\Desktop\Logfiles Dateien\programme
Platform: Windows 8.1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
() C:\Program Files (x86)\ASUS\AXSP\1.01.02\atkexComSvc.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AAHM\1.00.22\aaHMSvc.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AsusFanControlService\1.03.03\AsusFanControlService.exe
(DTS, Inc) C:\Program Files\Realtek\Audio\HDA\DTSU2PAuSrv64.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
() C:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\DipAwayMode.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite III\AISuite3.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite III\Wi-Fi GO!\AssistTools\WiFi GO! Server.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite III\USB 3.0 Boost\U3BoostSvr64.exe
() C:\Program Files (x86)\ASUS\AI Suite III\Wi-Fi GO!\AssistTools\S5WOW_App\x64\S5wow_2005.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\InstallShield Installation Information\{E6931688-DA2B-4E16-8539-3D323D69C677}\AiChargerPlus.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite III\Wi-Fi GO!\AssistTools\WiFile\WiFileTransfer.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
() C:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\EPUShortCut.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite III\Wi-Fi GO!\AsDLNAServerReal.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7192792 2013-07-06] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_DTS] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1321688 2013-07-04] (Realtek Semiconductor)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [750160 2014-06-24] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [182352 2014-05-05] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [ASUS AiChargerPlus Execute] => C:\Program Files (x86)\InstallShield Installation Information\{E6931688-DA2B-4E16-8539-3D323D69C677}\AiChargerPlus.exe [550272 2013-01-28] (ASUSTek Computer Inc.)
HKLM-x32\...\Run: [ASUS WiFi GO! FileTransfer Execute] => C:\Program Files (x86)\ASUS\AI Suite III\Wi-Fi GO!\AssistTools\WiFile\WiFileTransfer.exe [1391416 2013-06-21] (ASUSTeK Computer Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896 2014-05-07] (Oracle Corporation)
HKU\S-1-5-21-1791151724-3789037606-4172102177-1001\...\Run: [NetLimiter] => "C:\Users\Denis\Desktop\nlclientapp.exe" /minimized
HKU\S-1-5-21-1791151724-3789037606-4172102177-1001\...\MountPoints2: {135151dc-f856-11e3-828c-240a641d3d29} - "E:\Start_eBanking_Login-Stick_Win.exe"
HKU\S-1-5-21-1791151724-3789037606-4172102177-1001\...\MountPoints2: {c3bf88bb-04e1-11e4-8297-240a641d3d29} - "E:\HTC_Sync_Manager_PC.exe"
Startup: C:\Users\Denis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Product Registration.lnk
ShortcutTarget: Product Registration.lnk -> C:\Users\Denis\AppData\Local\Temp\is-IOKFA.tmp\ATR1.exe (No File)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://t.de.msn.com/
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xA881B91AAD89CF01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE,de;q=0.5
SearchScopes: HKLM-x32 - DefaultScope value is missing.
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
FireFox:
========
FF ProfilePath: C:\Users\Denis\AppData\Roaming\Mozilla\Firefox\Profiles\7ptqrbfd.default
FF Plugin: @adobe.com/FlashPlayer - C:\WINDOWS\system32\Macromed\Flash\NPSWF64_14_0_0_145.dll ()
FF Plugin: @videolan.org/vlc,version=2.1.4 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_145.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=10.60.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.60.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Adblock Plus - C:\Users\Denis\AppData\Roaming\Mozilla\Firefox\Profiles\7ptqrbfd.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-04-11]
==================== Services (Whitelisted) =================
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [430160 2014-06-24] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [430160 2014-06-24] (Avira Operations GmbH & Co. KG)
R2 asComSvc; C:\Program Files (x86)\ASUS\AXSP\1.01.02\atkexComSvc.exe [936728 2013-07-04] ()
R2 asHmComSvc; C:\Program Files (x86)\ASUS\AAHM\1.00.22\aaHMSvc.exe [954648 2013-08-01] (ASUSTeK Computer Inc.)
R2 AsusFanControlService; C:\Program Files (x86)\ASUS\AsusFanControlService\1.03.03\AsusFanControlService.exe [1660728 2013-07-31] (ASUSTeK Computer Inc.)
R2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [124496 2014-05-05] (Avira Operations GmbH & Co. KG)
R2 DTSAudioSvc; C:\Program Files\Realtek\Audio\HDA\DTSU2PAuSrv64.exe [240584 2012-10-02] (DTS, Inc)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347880 2014-03-24] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2014-03-24] (Microsoft Corporation)
S2 nlsvc; C:\Users\Denis\Desktop\NLSvc.exe [X]
==================== Drivers (Whitelisted) ====================
R3 AiChargerPlus; C:\Windows\SysWow64\drivers\AiChargerPlus.sys [14848 2013-01-28] (ASUSTek Computer Inc.)
R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [15232 2013-07-04] ()
R3 ASMTFilter; C:\Windows\SysWow64\drivers\asmtufdriver.sys [21400 2013-01-28] (hxxp://www.asmedia.com.tw) [File not signed]
R1 AsUpIO; C:\Windows\SysWow64\drivers\AsUpIO.sys [14464 2012-09-14] ()
R3 ASUSFILTER; C:\Windows\SysWow64\drivers\ASUSFILTER.sys [46152 2011-09-20] (MCCI Corporation)
R3 AsusSensorSimulator; C:\Windows\system32\DRIVERS\WUDFRd.sys [230912 2013-08-22] (Microsoft Corporation)
R3 asusvad_micarray; C:\Windows\system32\drivers\vmic_x64.sys [38712 2013-02-27] (ASUS SZ provider)
R3 athr; C:\Windows\system32\DRIVERS\athwbx.sys [3880448 2013-11-12] (Qualcomm Atheros Communications, Inc.)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [117712 2014-06-24] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [130584 2014-06-03] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [28600 2014-02-25] (Avira Operations GmbH & Co. KG)
R3 BthLEEnum; C:\Windows\System32\drivers\BthLEEnum.sys [226304 2013-12-04] (Microsoft Corporation)
R3 SensorsServiceDriver; C:\Windows\system32\DRIVERS\WUDFRd.sys [230912 2013-08-22] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [123224 2014-03-24] (Microsoft Corporation)
S2 nldrv; \??\C:\Users\Denis\Desktop\nldrv.sys [X]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-07-10 17:52 - 2014-07-10 17:52 - 00000000 ____D () C:\WINDOWS\ERUNT
2014-07-10 17:44 - 2014-07-10 17:45 - 00000000 ____D () C:\AdwCleaner
2014-07-09 22:06 - 2014-07-10 17:54 - 00000000 ____D () C:\FRST
2014-07-09 21:51 - 2014-07-09 21:54 - 00000000 ____D () C:\Users\Denis\Desktop\Logfiles Dateien
2014-07-09 20:49 - 2014-07-10 17:34 - 00122584 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2014-07-09 20:49 - 2014-07-09 20:49 - 00000835 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-07-09 20:49 - 2014-07-09 20:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware
2014-07-09 20:49 - 2014-07-09 20:49 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-07-09 20:49 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2014-07-09 20:49 - 2014-05-12 07:26 - 00064216 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys
2014-07-09 20:49 - 2014-05-12 07:25 - 00025816 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys
2014-07-09 17:39 - 2014-07-09 17:39 - 00000000 ____D () C:\Users\Denis\AppData\Roaming\AC3Filter
2014-07-08 21:14 - 2014-07-08 21:14 - 00000000 ___HD () C:\WINDOWS\msdownld.tmp
2014-07-08 21:14 - 2014-07-08 21:14 - 00000000 ____D () C:\WINDOWS\RegisteredPackages
2014-07-08 21:14 - 2014-07-08 21:14 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media
2014-07-08 21:14 - 2014-07-08 21:14 - 00000000 ____D () C:\IExp1.tmp
2014-07-08 21:14 - 2014-07-08 21:14 - 00000000 ____D () C:\IExp0.tmp
2014-07-08 15:58 - 2014-07-08 15:58 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Xvid
2014-07-08 15:58 - 2014-07-08 15:58 - 00000000 ____D () C:\Program Files (x86)\Xvid
2014-07-08 15:58 - 2009-06-07 16:25 - 00077824 _____ () C:\WINDOWS\SysWOW64\xvid.ax
2014-07-08 15:58 - 2009-06-07 16:24 - 00180224 _____ () C:\WINDOWS\SysWOW64\xvidvfw.dll
2014-07-08 15:58 - 2009-06-07 16:16 - 00819200 _____ () C:\WINDOWS\SysWOW64\xvidcore.dll
2014-07-07 16:39 - 2013-11-12 11:00 - 03880448 _____ (Qualcomm Atheros Communications, Inc.) C:\WINDOWS\system32\Drivers\athwbx.sys
2014-07-01 14:44 - 2014-07-07 15:08 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NetLimiter 4
2014-07-01 14:44 - 2014-07-01 14:44 - 00000000 ____D () C:\Users\Denis\AppData\Roaming\Locktime Software
2014-07-01 14:44 - 2014-07-01 14:44 - 00000000 ____D () C:\Users\Denis\AppData\Roaming\Locktime
2014-07-01 14:44 - 2014-07-01 14:44 - 00000000 ____D () C:\ProgramData\Locktime
2014-07-01 14:43 - 2014-07-01 14:43 - 05911712 _____ (Locktime Software) C:\Users\Denis\Downloads\netlimiter-4.0.6.0.exe
2014-06-29 11:18 - 2014-07-04 21:13 - 00000000 ____D () C:\Users\Denis\Zomboid
2014-06-28 18:31 - 2014-06-28 18:31 - 00461312 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnet.dll
2014-06-28 18:31 - 2014-06-28 18:31 - 00377856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnet.dll
2014-06-28 18:31 - 2014-06-28 18:31 - 00214016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dplayx.dll
2014-06-28 18:31 - 2014-06-28 18:31 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnathlp.dll
2014-06-28 18:31 - 2014-06-28 18:31 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnathlp.dll
2014-06-28 18:31 - 2014-06-28 18:31 - 00045056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpwsockx.dll
2014-06-28 18:31 - 2014-06-28 18:31 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnsvr.exe
2014-06-28 18:31 - 2014-06-28 18:31 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnsvr.exe
2014-06-28 18:31 - 2014-06-28 18:31 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dplaysvr.exe
2014-06-28 18:31 - 2014-06-28 18:31 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpmodemx.dll
2014-06-28 18:31 - 2014-06-28 18:31 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnhupnp.dll
2014-06-28 18:31 - 2014-06-28 18:31 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnhpast.dll
2014-06-28 18:31 - 2014-06-28 18:31 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnhupnp.dll
2014-06-28 18:31 - 2014-06-28 18:31 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnhpast.dll
2014-06-23 23:05 - 2014-06-23 23:05 - 00000000 ____D () C:\Users\Denis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\X Codec Pack 2.6.5
2014-06-23 23:05 - 2014-06-23 23:05 - 00000000 ____D () C:\Program Files\X Codec Pack
2014-06-23 23:04 - 2014-06-23 23:05 - 24419588 _____ () C:\Users\Denis\Downloads\X-Codec-Pack-2.6.5.exe
2014-06-23 22:59 - 2014-07-07 22:31 - 00000000 ____D () C:\Users\Denis\AppData\Roaming\vlc
2014-06-23 22:59 - 2014-06-24 18:53 - 00000000 ____D () C:\Users\Denis\AppData\Roaming\dvdcss
2014-06-23 22:59 - 2014-06-23 22:59 - 00000887 _____ () C:\Users\Public\Desktop\VLC media player.lnk
2014-06-23 22:59 - 2014-06-23 22:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2014-06-23 22:59 - 2014-06-23 22:59 - 00000000 ____D () C:\Program Files\VideoLAN
2014-06-23 22:58 - 2014-06-23 22:58 - 00961360 _____ (Chip Digital GmbH) C:\Users\Denis\Downloads\VLC media player 64 Bit - CHIP-Installer.exe
2014-06-23 22:53 - 2014-06-23 22:55 - 00000000 ____D () C:\Users\Denis\AppData\Roaming\Media Player Classic
2014-06-23 22:53 - 2010-02-14 16:35 - 04411392 _____ (Gabest) C:\Users\Denis\Desktop\mplayerc.exe
2014-06-23 22:52 - 2014-06-23 22:52 - 00961360 _____ (Chip Digital GmbH) C:\Users\Denis\Downloads\mplayerc_20100214 - CHIP-Installer.exe
2014-06-20 23:58 - 2014-06-21 00:00 - 00000000 ____D () C:\Users\Denis\Documents\RCT3
2014-06-20 23:58 - 2014-06-20 23:58 - 00000000 ____D () C:\Users\Denis\AppData\Roaming\Atari
2014-06-20 23:57 - 2014-06-20 23:57 - 00043520 _____ () C:\WINDOWS\SysWOW64\CmdLineExt03.dll
2014-06-20 23:56 - 2014-06-20 23:56 - 00000649 _____ () C:\Users\Public\Desktop\RollerCoaster Tycoon 3.lnk
2014-06-20 23:56 - 2014-06-20 23:56 - 00000000 ____D () C:\Users\Denis\AppData\Roaming\Leadertech
2014-06-20 23:56 - 2014-06-20 23:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Atari
2014-06-20 17:49 - 2014-06-20 17:49 - 29602248 _____ (Uber Entertainment) C:\Users\Denis\Downloads\PA_Setup.exe
2014-06-20 17:44 - 2014-06-20 17:54 - 00000000 ____D () C:\Users\Denis\AppData\Local\Uber Entertainment
2014-06-20 17:44 - 2014-06-20 17:44 - 00002927 _____ () C:\Users\Public\Desktop\PA Launcher.lnk
2014-06-20 17:44 - 2014-06-20 17:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Uber Entertainment
2014-06-18 15:49 - 2014-06-18 15:50 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-06-18 15:18 - 2014-06-18 15:18 - 00000000 ____D () C:\Users\Denis\AppData\Roaming\.mono
2014-06-18 15:18 - 2014-06-18 15:18 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kerbal Space Program
2014-06-13 20:06 - 2014-06-13 20:06 - 00000000 ____D () C:\Users\Denis\AppData\Local\Introversion
2014-06-13 15:13 - 2014-05-30 12:21 - 23414784 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2014-06-13 15:13 - 2014-05-30 11:45 - 02768384 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2014-06-13 15:13 - 2014-05-30 11:28 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll
2014-06-13 15:13 - 2014-05-30 11:20 - 00752640 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2014-06-13 15:13 - 2014-05-30 11:18 - 17271296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2014-06-13 15:13 - 2014-05-30 11:08 - 05782528 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2014-06-13 15:13 - 2014-05-30 11:06 - 00452096 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtmsft.dll
2014-06-13 15:13 - 2014-05-30 10:46 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2014-06-13 15:13 - 2014-05-30 10:44 - 00295424 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll
2014-06-13 15:13 - 2014-05-30 10:43 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesetup.dll
2014-06-13 15:13 - 2014-05-30 10:38 - 02179072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2014-06-13 15:13 - 2014-05-30 10:35 - 00608768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2014-06-13 15:13 - 2014-05-30 10:29 - 00631808 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2014-06-13 15:13 - 2014-05-30 10:27 - 00592896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll
2014-06-13 15:13 - 2014-05-30 10:23 - 02040832 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2014-06-13 15:13 - 2014-05-30 10:16 - 00368128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtmsft.dll
2014-06-13 15:13 - 2014-05-30 10:04 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll
2014-06-13 15:13 - 2014-05-30 10:02 - 00242688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll
2014-06-13 15:13 - 2014-05-30 09:56 - 04244992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2014-06-13 15:13 - 2014-05-30 09:56 - 02266112 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2014-06-13 15:13 - 2014-05-30 09:54 - 00526336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2014-06-13 15:13 - 2014-05-30 09:49 - 01964544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2014-06-13 15:13 - 2014-05-30 09:43 - 13522944 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2014-06-13 15:13 - 2014-05-30 09:40 - 11725312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2014-06-13 15:13 - 2014-05-30 09:30 - 01398272 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2014-06-13 15:13 - 2014-05-30 09:21 - 01790976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2014-06-13 15:13 - 2014-05-30 09:15 - 01143296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2014-06-13 15:13 - 2014-05-30 09:13 - 00846336 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2014-06-13 15:13 - 2014-05-30 09:13 - 00704512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2014-06-13 15:13 - 2014-05-10 05:46 - 02151424 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3.dll
2014-06-13 15:13 - 2014-05-10 05:22 - 01312256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3.dll
2014-06-13 15:13 - 2014-05-09 01:06 - 00295424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ks.sys
2014-06-13 15:13 - 2014-05-05 06:02 - 03360256 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll
2014-06-13 15:13 - 2014-05-03 09:14 - 00079872 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSReset.exe
2014-06-13 15:13 - 2014-05-03 06:21 - 00249344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2014-06-13 15:13 - 2014-05-03 06:07 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2014-06-13 15:13 - 2014-05-03 05:41 - 00921088 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll
2014-06-13 15:13 - 2014-05-03 05:38 - 00754688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll
2014-06-13 15:13 - 2014-04-30 13:16 - 01336648 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll
2014-06-13 15:13 - 2014-04-30 05:51 - 01064448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll
2014-06-13 15:13 - 2014-04-18 16:57 - 00032600 _____ (Microsoft Corporation) C:\WINDOWS\system32\ploptin.dll
2014-06-13 15:13 - 2014-04-18 16:44 - 01466856 _____ (Microsoft Corporation) C:\WINDOWS\system32\propsys.dll
2014-06-13 15:13 - 2014-04-18 15:29 - 01200288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\propsys.dll
2014-06-13 15:13 - 2014-04-18 11:44 - 00055296 _____ (Microsoft Corporation) C:\WINDOWS\system32\energyprov.dll
2014-06-13 15:13 - 2014-04-18 11:32 - 13287936 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2014-06-13 15:13 - 2014-04-18 10:58 - 11792384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2014-06-13 15:13 - 2014-04-18 10:32 - 00805376 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll
2014-06-13 15:13 - 2014-04-18 10:21 - 01126912 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFolder.dll
2014-06-13 15:13 - 2014-04-18 10:09 - 08652800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll
2014-06-13 15:13 - 2014-04-18 09:51 - 00836608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchFolder.dll
2014-06-13 15:13 - 2014-04-18 09:49 - 05833216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Search.dll
2014-06-13 15:13 - 2014-04-14 11:20 - 00324888 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFCaptureEngine.dll
2014-06-13 15:13 - 2014-04-14 10:01 - 00285144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFCaptureEngine.dll
2014-06-13 15:13 - 2014-04-11 08:13 - 01200128 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthport.sys
2014-06-13 15:13 - 2014-04-11 06:51 - 00250368 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpencom.dll
2014-06-13 15:13 - 2014-04-11 06:23 - 00209920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpencom.dll
2014-06-13 15:13 - 2014-04-11 05:30 - 00449536 _____ (Microsoft Corporation) C:\WINDOWS\system32\defragsvc.dll
2014-06-13 15:13 - 2014-04-09 13:53 - 00337240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Classpnp.sys
2014-06-13 15:13 - 2014-04-09 08:39 - 00191488 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpchttp.dll
2014-06-13 15:13 - 2014-04-09 07:44 - 00144384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpchttp.dll
2014-06-13 15:13 - 2014-04-09 06:35 - 01411584 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2014-06-13 15:13 - 2014-04-09 05:33 - 00135168 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscsvc.dll
2014-06-13 15:13 - 2014-04-08 04:01 - 00589656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fvevol.sys
2014-06-13 15:13 - 2014-04-06 18:34 - 00372568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storport.sys
2014-06-13 15:13 - 2014-04-06 18:34 - 00275800 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msiscsi.sys
2014-06-13 15:13 - 2014-04-06 18:32 - 00125496 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmapi.dll
2014-06-13 15:13 - 2014-04-06 18:31 - 21268952 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2014-06-13 15:13 - 2014-04-06 18:30 - 00201920 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVideoDSP.dll
2014-06-13 15:13 - 2014-04-06 18:24 - 00360792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fltMgr.sys
2014-06-13 15:13 - 2014-04-06 18:20 - 02140888 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2014-06-13 15:13 - 2014-04-06 18:20 - 01403856 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll
2014-06-13 15:13 - 2014-04-06 18:20 - 01379064 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpmde.dll
2014-06-13 15:13 - 2014-04-06 18:20 - 00881616 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll
2014-06-13 15:13 - 2014-04-06 18:20 - 00765408 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2014-06-13 15:13 - 2014-04-06 18:20 - 00609448 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf.dll
2014-06-13 15:13 - 2014-04-06 18:20 - 00491744 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2014-06-13 15:13 - 2014-04-06 18:20 - 00467496 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2014-06-13 15:13 - 2014-04-06 18:20 - 00463256 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2014-06-13 15:13 - 2014-04-06 18:20 - 00364640 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2014-06-13 15:13 - 2014-04-06 18:20 - 00244880 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2014-06-13 15:13 - 2014-04-06 18:20 - 00233912 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll
2014-06-13 15:13 - 2014-04-06 18:20 - 00028408 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfpmp.exe
2014-06-13 15:13 - 2014-04-06 17:23 - 00098584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmapi.dll
2014-06-13 15:13 - 2014-04-06 17:22 - 18755672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2014-06-13 15:13 - 2014-04-06 17:22 - 00178184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVideoDSP.dll
2014-06-13 15:13 - 2014-04-06 17:16 - 02144984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2014-06-13 15:13 - 2014-04-06 17:16 - 01209616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmde.dll
2014-06-13 15:13 - 2014-04-06 17:16 - 00707048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll
2014-06-13 15:13 - 2014-04-06 17:16 - 00669856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll
2014-06-13 15:13 - 2014-04-06 17:16 - 00518544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf.dll
2014-06-13 15:13 - 2014-04-06 17:16 - 00406504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll
2014-06-13 15:13 - 2014-04-06 17:16 - 00387896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll
2014-06-13 15:13 - 2014-04-06 17:16 - 00326024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2014-06-13 15:13 - 2014-04-06 17:16 - 00305768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll
2014-06-13 15:13 - 2014-04-06 16:10 - 04190720 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2014-06-13 15:13 - 2014-04-06 14:58 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\system32\srclient.dll
2014-06-13 15:13 - 2014-04-06 14:51 - 00467968 _____ (Microsoft Corporation) C:\WINDOWS\system32\srcore.dll
2014-06-13 15:13 - 2014-04-06 14:33 - 00335872 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDEServer.exe
2014-06-13 15:13 - 2014-04-06 14:24 - 00271872 _____ (Microsoft Corporation) C:\WINDOWS\system32\rstrui.exe
2014-06-13 15:13 - 2014-04-06 14:06 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\srclient.dll
2014-06-13 15:13 - 2014-04-06 13:55 - 16872448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2014-06-13 15:13 - 2014-04-06 13:54 - 12711424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2014-06-13 15:13 - 2014-04-06 13:26 - 00143872 _____ (Microsoft Corporation) C:\WINDOWS\system32\BootMenuUX.dll
2014-06-13 15:13 - 2014-04-06 13:20 - 00201216 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2014-06-13 15:13 - 2014-04-06 13:01 - 00834048 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2014-06-13 15:13 - 2014-04-06 12:52 - 00955904 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2014-06-13 15:13 - 2014-04-06 12:51 - 01230336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2014-06-13 15:13 - 2014-04-06 12:37 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2014-06-13 15:13 - 2014-04-06 12:36 - 00888320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2014-06-13 15:13 - 2014-04-06 12:05 - 01222656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Streaming.dll
2014-06-13 15:13 - 2014-04-06 11:59 - 00982016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Streaming.dll
2014-06-13 15:13 - 2014-04-03 10:12 - 02124840 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d9.dll
2014-06-13 15:13 - 2014-04-03 10:12 - 00307304 _____ (Microsoft Corporation) C:\WINDOWS\system32\wintrust.dll
2014-06-13 15:13 - 2014-04-03 10:12 - 00130144 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpapi.dll
2014-06-13 15:13 - 2014-04-03 09:59 - 02518872 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2014-06-13 15:13 - 2014-04-03 09:59 - 00428888 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS
2014-06-13 15:13 - 2014-04-03 06:03 - 00230808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wintrust.dll
2014-06-13 15:13 - 2014-04-03 06:03 - 00111528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gpapi.dll
2014-06-13 15:13 - 2014-04-03 05:53 - 01797896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d9.dll
2014-06-13 15:13 - 2014-04-03 04:53 - 04269056 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncEngine.dll
2014-06-13 15:13 - 2014-04-03 04:53 - 00677376 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys
2014-06-13 15:13 - 2014-04-03 04:51 - 01584128 _____ (Microsoft Corporation) C:\WINDOWS\system32\workfolderssvc.dll
2014-06-13 15:13 - 2014-04-03 04:23 - 00563200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\afd.sys
2014-06-13 15:13 - 2014-04-03 04:23 - 00402432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
2014-06-13 15:13 - 2014-04-03 04:23 - 00046592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tlscsp.dll
2014-06-13 15:13 - 2014-04-03 04:22 - 00047616 _____ (Microsoft Corporation) C:\WINDOWS\system32\tlscsp.dll
2014-06-13 15:13 - 2014-04-01 08:23 - 00384856 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spaceport.sys
2014-06-13 15:13 - 2014-03-31 07:42 - 07425368 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2014-06-13 15:13 - 2014-03-31 02:41 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d8thk.dll
2014-06-13 15:13 - 2014-03-31 02:01 - 00186880 _____ (Microsoft Corporation) C:\WINDOWS\system32\WorkFoldersShell.dll
2014-06-13 15:13 - 2014-03-31 01:43 - 00761856 _____ (Microsoft Corporation) C:\WINDOWS\system32\WorkfoldersControl.dll
2014-06-13 15:13 - 2014-03-31 00:54 - 01308160 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpsvc.dll
2014-06-13 15:13 - 2014-03-31 00:49 - 01287168 _____ (Microsoft Corporation) C:\WINDOWS\system32\mispace.dll
2014-06-13 15:13 - 2014-03-31 00:35 - 01029120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mispace.dll
2014-06-13 15:13 - 2014-03-31 00:11 - 00721408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveTelemetry.dll
2014-06-13 15:13 - 2014-03-30 23:47 - 00872448 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDrive.exe
2014-06-13 15:13 - 2014-03-28 17:58 - 00407016 _____ (Microsoft Corporation) C:\WINDOWS\system32\services.exe
2014-06-13 15:13 - 2014-03-27 08:16 - 00246272 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srvnet.sys
2014-06-13 15:13 - 2014-03-27 07:36 - 00281600 _____ (Microsoft Corporation) C:\WINDOWS\system32\resutils.dll
2014-06-13 15:13 - 2014-03-27 06:59 - 00426496 _____ (Microsoft Corporation) C:\WINDOWS\system32\clusapi.dll
2014-06-13 15:13 - 2014-03-27 06:48 - 00219136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\resutils.dll
2014-06-13 15:13 - 2014-03-27 06:19 - 00313344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\clusapi.dll
2014-06-13 15:13 - 2014-03-27 05:46 - 00323072 _____ (Microsoft Corporation) C:\WINDOWS\system32\srvsvc.dll
2014-06-13 15:13 - 2014-03-27 05:15 - 00718336 _____ (Microsoft Corporation) C:\WINDOWS\system32\swprv.dll
2014-06-13 15:13 - 2014-03-27 05:10 - 01436160 _____ (Microsoft Corporation) C:\WINDOWS\system32\VSSVC.exe
2014-06-13 15:13 - 2014-03-25 00:58 - 00206848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys
2014-06-13 15:13 - 2014-03-20 05:48 - 00263424 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlows.exe
2014-06-13 15:13 - 2014-03-20 02:44 - 06645248 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2014-06-13 15:13 - 2014-03-20 01:33 - 05774848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
2014-06-13 15:13 - 2014-03-19 10:15 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanhlp.dll
2014-06-13 15:13 - 2014-03-19 10:07 - 00443904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\nwifi.sys
2014-06-13 15:13 - 2014-03-19 09:24 - 00064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsgqec.dll
2014-06-13 15:13 - 2014-03-19 09:17 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanhlp.dll
2014-06-13 15:13 - 2014-03-19 08:36 - 01057280 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdvidcrl.dll
2014-06-13 15:13 - 2014-03-19 07:56 - 00855552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdvidcrl.dll
2014-06-13 15:13 - 2014-03-19 07:45 - 00443904 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansec.dll
2014-06-13 15:13 - 2014-03-19 07:19 - 00296960 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanapi.dll
2014-06-13 15:13 - 2014-03-19 07:07 - 00370176 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanmsm.dll
2014-06-13 15:13 - 2014-03-19 07:02 - 01527296 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll
2014-06-13 15:13 - 2014-03-19 07:00 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanapi.dll
2014-06-13 15:13 - 2014-03-19 06:51 - 00300544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanmsm.dll
2014-06-13 15:13 - 2014-03-19 06:31 - 02100736 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlowUI.dll
2014-06-13 15:13 - 2014-03-19 06:18 - 02688000 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers.dll
2014-06-13 15:13 - 2014-03-18 10:19 - 00077312 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hdaudbus.sys
2014-06-13 15:13 - 2014-03-18 07:00 - 07173120 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
2014-06-13 15:13 - 2014-03-18 06:52 - 05104640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll
2014-06-13 15:13 - 2014-03-17 07:09 - 00462336 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsGdiConverter.dll
2014-06-13 15:13 - 2014-03-17 06:11 - 00337408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsGdiConverter.dll
2014-06-13 15:13 - 2014-03-17 05:01 - 00486912 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv
2014-06-13 15:13 - 2014-03-17 04:47 - 01025024 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2014-06-13 15:13 - 2014-03-17 04:45 - 00370176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv
2014-06-13 15:13 - 2014-03-14 08:26 - 00491520 _____ (Microsoft Corporation) C:\WINDOWS\system32\GeofenceMonitorService.dll
2014-06-13 15:13 - 2014-03-14 08:10 - 00357376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GeofenceMonitorService.dll
2014-06-13 15:13 - 2014-03-06 14:42 - 00310616 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\volsnap.sys
2014-06-13 15:12 - 2014-06-13 15:12 - 00195584 _____ (Microsoft Corporation) C:\WINDOWS\system32\msrating.dll
2014-06-13 15:12 - 2014-06-13 15:12 - 00164864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrating.dll
2014-06-13 15:12 - 2014-06-13 15:12 - 00139264 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieUnatt.exe
2014-06-13 15:12 - 2014-06-13 15:12 - 00112128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieUnatt.exe
2014-06-13 15:12 - 2014-06-13 15:12 - 00111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollector.exe
2014-06-13 15:12 - 2014-06-13 15:12 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll
2014-06-13 15:12 - 2014-06-13 15:12 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tsgqec.dll
2014-06-13 15:12 - 2014-06-13 15:12 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieetwproxystub.dll
2014-06-13 15:12 - 2014-06-13 15:12 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwproxystub.dll
2014-06-13 15:12 - 2014-06-13 15:12 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll
2014-06-13 15:12 - 2014-06-13 15:12 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll
2014-06-13 15:12 - 2014-06-13 15:12 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iernonce.dll
2014-06-13 15:12 - 2014-06-13 15:12 - 00004096 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollectorres.dll
2014-06-13 15:12 - 2014-05-19 08:31 - 00057856 _____ (Microsoft Corporation) C:\WINDOWS\system32\drvcfg.exe
2014-06-13 15:12 - 2014-05-19 08:21 - 00110592 _____ (Microsoft Corporation) C:\WINDOWS\system32\drvinst.exe
2014-06-13 15:12 - 2014-05-19 07:23 - 00098816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\drvinst.exe
2014-06-13 15:12 - 2014-05-01 15:31 - 03048904 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcMon.exe
2014-06-13 15:12 - 2014-05-01 15:31 - 00055328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wpcfltr.sys
2014-06-13 15:12 - 2014-05-01 09:14 - 03118080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Wpc.dll
2014-06-13 15:12 - 2014-05-01 09:05 - 02861056 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebSync.dll
2014-06-13 15:12 - 2014-05-01 08:51 - 02344448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Wpc.dll
2014-06-13 15:12 - 2014-05-01 07:24 - 02834944 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpccpl.dll
2014-06-13 15:12 - 2014-04-30 06:43 - 01975296 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWrite.dll
2014-06-13 15:12 - 2014-04-30 06:26 - 01345536 _____ (Microsoft Corporation) C:\WINDOWS\system32\FntCache.dll
2014-06-13 15:12 - 2014-04-30 05:47 - 01509888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWrite.dll
==================== One Month Modified Files and Folders =======
2014-07-10 17:54 - 2014-07-09 22:06 - 00000000 ____D () C:\FRST
2014-07-10 17:52 - 2014-07-10 17:52 - 00000000 ____D () C:\WINDOWS\ERUNT
2014-07-10 17:52 - 2014-04-11 21:25 - 01776918 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2014-07-10 17:52 - 2013-08-23 01:24 - 00764340 _____ () C:\WINDOWS\system32\perfh007.dat
2014-07-10 17:52 - 2013-08-23 01:24 - 00159160 _____ () C:\WINDOWS\system32\perfc007.dat
2014-07-10 17:51 - 2014-05-16 17:12 - 00000000 _____ () C:\WINDOWS\Path.idx
2014-07-10 17:48 - 2014-05-02 18:48 - 00001165 _____ () C:\Users\Denis\Desktop\yagur kimimaru11.txt
2014-07-10 17:47 - 2014-04-12 12:03 - 00000000 __RDO () C:\Users\Denis\SkyDrive
2014-07-10 17:46 - 2014-05-16 17:04 - 01048576 _____ () C:\WINDOWS\PE_Rom.dll
2014-07-10 17:45 - 2014-07-10 17:44 - 00000000 ____D () C:\AdwCleaner
2014-07-10 17:45 - 2014-04-11 21:19 - 01952305 _____ () C:\WINDOWS\WindowsUpdate.log
2014-07-10 17:45 - 2014-04-11 21:18 - 00087312 _____ () C:\WINDOWS\PFRO.log
2014-07-10 17:45 - 2013-08-22 16:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2014-07-10 17:45 - 2013-08-22 15:25 - 00262144 ___SH () C:\WINDOWS\system32\config\BBI
2014-07-10 17:34 - 2014-07-09 20:49 - 00122584 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2014-07-10 17:31 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\NDF
2014-07-09 23:00 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\sru
2014-07-09 22:23 - 2014-04-11 21:26 - 00000000 ____D () C:\Users\Denis
2014-07-09 22:16 - 2014-04-11 22:19 - 00000884 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2014-07-09 22:15 - 2014-04-11 21:32 - 00003600 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1791151724-3789037606-4172102177-1001
2014-07-09 21:54 - 2014-07-09 21:51 - 00000000 ____D () C:\Users\Denis\Desktop\Logfiles Dateien
2014-07-09 20:49 - 2014-07-09 20:49 - 00000835 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-07-09 20:49 - 2014-07-09 20:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware
2014-07-09 20:49 - 2014-07-09 20:49 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-07-09 17:39 - 2014-07-09 17:39 - 00000000 ____D () C:\Users\Denis\AppData\Roaming\AC3Filter
2014-07-08 21:14 - 2014-07-08 21:14 - 00000000 ___HD () C:\WINDOWS\msdownld.tmp
2014-07-08 21:14 - 2014-07-08 21:14 - 00000000 ____D () C:\WINDOWS\RegisteredPackages
2014-07-08 21:14 - 2014-07-08 21:14 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media
2014-07-08 21:14 - 2014-07-08 21:14 - 00000000 ____D () C:\IExp1.tmp
2014-07-08 21:14 - 2014-07-08 21:14 - 00000000 ____D () C:\IExp0.tmp
2014-07-08 19:16 - 2014-04-11 22:19 - 00003772 _____ () C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2014-07-08 15:58 - 2014-07-08 15:58 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Xvid
2014-07-08 15:58 - 2014-07-08 15:58 - 00000000 ____D () C:\Program Files (x86)\Xvid
2014-07-08 15:58 - 2014-04-13 17:14 - 00395565 _____ () C:\WINDOWS\DirectX.log
2014-07-07 22:31 - 2014-06-23 22:59 - 00000000 ____D () C:\Users\Denis\AppData\Roaming\vlc
2014-07-07 15:08 - 2014-07-01 14:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NetLimiter 4
2014-07-06 23:26 - 2014-04-11 23:32 - 00000000 ____D () C:\Users\Denis\AppData\Local\Battle.net
2014-07-06 21:41 - 2014-05-30 21:28 - 00000000 ____D () C:\Users\Denis\AppData\Roaming\Tropico 5
2014-07-06 14:58 - 2013-08-22 16:46 - 00194007 _____ () C:\WINDOWS\setupact.log
2014-07-04 21:13 - 2014-06-29 11:18 - 00000000 ____D () C:\Users\Denis\Zomboid
2014-07-01 18:44 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\rescache
2014-07-01 14:44 - 2014-07-01 14:44 - 00000000 ____D () C:\Users\Denis\AppData\Roaming\Locktime Software
2014-07-01 14:44 - 2014-07-01 14:44 - 00000000 ____D () C:\Users\Denis\AppData\Roaming\Locktime
2014-07-01 14:44 - 2014-07-01 14:44 - 00000000 ____D () C:\ProgramData\Locktime
2014-07-01 14:43 - 2014-07-01 14:43 - 05911712 _____ (Locktime Software) C:\Users\Denis\Downloads\netlimiter-4.0.6.0.exe
2014-06-30 21:59 - 2014-04-21 22:10 - 00000000 ____D () C:\Users\Denis\AppData\Roaming\Skype
2014-06-29 13:25 - 2014-04-19 17:24 - 00000000 ____D () C:\Users\Denis\Documents\Diablo III
2014-06-28 18:31 - 2014-06-28 18:31 - 00461312 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnet.dll
2014-06-28 18:31 - 2014-06-28 18:31 - 00377856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnet.dll
2014-06-28 18:31 - 2014-06-28 18:31 - 00214016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dplayx.dll
2014-06-28 18:31 - 2014-06-28 18:31 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnathlp.dll
2014-06-28 18:31 - 2014-06-28 18:31 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnathlp.dll
2014-06-28 18:31 - 2014-06-28 18:31 - 00045056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpwsockx.dll
2014-06-28 18:31 - 2014-06-28 18:31 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnsvr.exe
2014-06-28 18:31 - 2014-06-28 18:31 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnsvr.exe
2014-06-28 18:31 - 2014-06-28 18:31 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dplaysvr.exe
2014-06-28 18:31 - 2014-06-28 18:31 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpmodemx.dll
2014-06-28 18:31 - 2014-06-28 18:31 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnhupnp.dll
2014-06-28 18:31 - 2014-06-28 18:31 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnhpast.dll
2014-06-28 18:31 - 2014-06-28 18:31 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnhupnp.dll
2014-06-28 18:31 - 2014-06-28 18:31 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnhpast.dll
2014-06-28 18:31 - 2013-08-22 17:20 - 00000000 ____D () C:\WINDOWS\CbsTemp
2014-06-24 18:53 - 2014-06-23 22:59 - 00000000 ____D () C:\Users\Denis\AppData\Roaming\dvdcss
2014-06-24 13:49 - 2014-04-26 14:29 - 00117712 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avgntflt.sys
2014-06-23 23:05 - 2014-06-23 23:05 - 00000000 ____D () C:\Users\Denis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\X Codec Pack 2.6.5
2014-06-23 23:05 - 2014-06-23 23:05 - 00000000 ____D () C:\Program Files\X Codec Pack
2014-06-23 23:05 - 2014-06-23 23:04 - 24419588 _____ () C:\Users\Denis\Downloads\X-Codec-Pack-2.6.5.exe
2014-06-23 22:59 - 2014-06-23 22:59 - 00000887 _____ () C:\Users\Public\Desktop\VLC media player.lnk
2014-06-23 22:59 - 2014-06-23 22:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2014-06-23 22:59 - 2014-06-23 22:59 - 00000000 ____D () C:\Program Files\VideoLAN
2014-06-23 22:58 - 2014-06-23 22:58 - 00961360 _____ (Chip Digital GmbH) C:\Users\Denis\Downloads\VLC media player 64 Bit - CHIP-Installer.exe
2014-06-23 22:55 - 2014-06-23 22:53 - 00000000 ____D () C:\Users\Denis\AppData\Roaming\Media Player Classic
2014-06-23 22:52 - 2014-06-23 22:52 - 00961360 _____ (Chip Digital GmbH) C:\Users\Denis\Downloads\mplayerc_20100214 - CHIP-Installer.exe
2014-06-21 14:32 - 2013-08-22 16:44 - 00352352 _____ () C:\WINDOWS\system32\FNTCACHE.DAT
2014-06-21 00:00 - 2014-06-20 23:58 - 00000000 ____D () C:\Users\Denis\Documents\RCT3
2014-06-20 23:58 - 2014-06-20 23:58 - 00000000 ____D () C:\Users\Denis\AppData\Roaming\Atari
2014-06-20 23:57 - 2014-06-20 23:57 - 00043520 _____ () C:\WINDOWS\SysWOW64\CmdLineExt03.dll
2014-06-20 23:56 - 2014-06-20 23:56 - 00000649 _____ () C:\Users\Public\Desktop\RollerCoaster Tycoon 3.lnk
2014-06-20 23:56 - 2014-06-20 23:56 - 00000000 ____D () C:\Users\Denis\AppData\Roaming\Leadertech
2014-06-20 23:56 - 2014-06-20 23:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Atari
2014-06-20 17:54 - 2014-06-20 17:44 - 00000000 ____D () C:\Users\Denis\AppData\Local\Uber Entertainment
2014-06-20 17:49 - 2014-06-20 17:49 - 29602248 _____ (Uber Entertainment) C:\Users\Denis\Downloads\PA_Setup.exe
2014-06-20 17:44 - 2014-06-20 17:44 - 00002927 _____ () C:\Users\Public\Desktop\PA Launcher.lnk
2014-06-20 17:44 - 2014-06-20 17:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Uber Entertainment
2014-06-19 15:32 - 2014-04-11 21:40 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-06-18 15:50 - 2014-06-18 15:49 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-06-18 15:18 - 2014-06-18 15:18 - 00000000 ____D () C:\Users\Denis\AppData\Roaming\.mono
2014-06-18 15:18 - 2014-06-18 15:18 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kerbal Space Program
2014-06-13 22:23 - 2013-08-22 17:36 - 00000000 ___RD () C:\WINDOWS\ToastData
2014-06-13 22:23 - 2013-08-22 17:36 - 00000000 ___RD () C:\WINDOWS\ImmersiveControlPanel
2014-06-13 22:23 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\WinStore
2014-06-13 22:23 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\system32\oobe
2014-06-13 20:06 - 2014-06-13 20:06 - 00000000 ____D () C:\Users\Denis\AppData\Local\Introversion
2014-06-13 15:54 - 2014-04-13 15:00 - 95414520 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2014-06-13 15:54 - 2014-04-13 15:00 - 00000000 ____D () C:\WINDOWS\system32\MRT
2014-06-13 15:12 - 2014-06-13 15:12 - 00195584 _____ (Microsoft Corporation) C:\WINDOWS\system32\msrating.dll
2014-06-13 15:12 - 2014-06-13 15:12 - 00164864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrating.dll
2014-06-13 15:12 - 2014-06-13 15:12 - 00139264 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieUnatt.exe
2014-06-13 15:12 - 2014-06-13 15:12 - 00112128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieUnatt.exe
2014-06-13 15:12 - 2014-06-13 15:12 - 00111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollector.exe
2014-06-13 15:12 - 2014-06-13 15:12 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll
2014-06-13 15:12 - 2014-06-13 15:12 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tsgqec.dll
2014-06-13 15:12 - 2014-06-13 15:12 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieetwproxystub.dll
2014-06-13 15:12 - 2014-06-13 15:12 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwproxystub.dll
2014-06-13 15:12 - 2014-06-13 15:12 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll
2014-06-13 15:12 - 2014-06-13 15:12 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll
2014-06-13 15:12 - 2014-06-13 15:12 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iernonce.dll
2014-06-13 15:12 - 2014-06-13 15:12 - 00004096 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollectorres.dll
Some content of TEMP:
====================
C:\Users\Denis\AppData\Local\Temp\avgnt.exe
C:\Users\Denis\AppData\Local\Temp\drm_dyndata_7370014.dll
C:\Users\Denis\AppData\Local\Temp\drm_dyndata_7380014.dll
C:\Users\Denis\AppData\Local\Temp\i4jdel0.exe
C:\Users\Denis\AppData\Local\Temp\jre-7u55-windows-i586-iftw.exe
C:\Users\Denis\AppData\Local\Temp\jre-7u60-windows-i586-iftw.exe
C:\Users\Denis\AppData\Local\Temp\Quarantine.exe
C:\Users\Denis\AppData\Local\Temp\SIntf16.dll
C:\Users\Denis\AppData\Local\Temp\SIntf32.dll
C:\Users\Denis\AppData\Local\Temp\SIntfNT.dll
C:\Users\Denis\AppData\Local\Temp\swt-win32-3349.dll
C:\Users\Denis\AppData\Local\Temp\tmpE653.tmp.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2014-06-27 18:18
==================== End Of Log ============================
|
|
11.07.2014, 11:13
| #4 |
| /// the machine /// TB-Ausbilder | Internet langsam, Windows Defender, Avira schalten automatisch aus.ESET Online Scanner
Downloade Dir bitte  SecurityCheck und:
und ein frisches FRST log bitte. Noch Probleme? 
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
11.07.2014, 21:56
| #5 |
| | Internet langsam, Windows Defender, Avira schalten automatisch aus. Abend, Eset Log Code:
ATTFilter C:\AdwCleaner\Quarantine\C\Users\Denis\AppData\Local\Temp\OCS\ocs_v71b.exe.vir Variante von Win32/DownloadSponsor.A evtl. unerwünschte Anwendung
C:\Program Files (x86)\Avira\AntiVir Desktop\offercast_avirav7_.exe Variante von Win32/Bundled.Toolbar.Ask.D potenziell unsichere Anwendung
C:\ProgramData\Avira\My Avira\Temp\antivirus.exe Variante von Win32/Bundled.Toolbar.Ask.D potenziell unsichere Anwendung
C:\Users\All Users\Avira\My Avira\Temp\antivirus.exe Variante von Win32/Bundled.Toolbar.Ask.D potenziell unsichere Anwendung
C:\Users\Denis\Downloads\FreeYouTubeToMP3Converter34430.exe Win32/OpenCandy potenziell unsichere Anwendung
C:\Users\Denis\Downloads\mplayerc_20100214 - CHIP-Installer.exe Variante von Win32/DownloadSponsor.A evtl. unerwünschte Anwendung
C:\Users\Denis\Downloads\VLC media player 64 Bit - CHIP-Installer.exe Variante von Win32/DownloadSponsor.A evtl. unerwünschte Anwendung
C:\Users\Helga\Downloads\mplayerc_20100214 - CHIP-Installer.exe Variante von Win32/DownloadSponsor.A evtl. unerwünschte Anwendung
C:\Windows.old\Users\All Users\Avira\My Avira\Temp\antivirus.exe Variante von Win32/Bundled.Toolbar.Ask.D potenziell unsichere Anwendung
Code:
ATTFilter Results of screen317's Security Check version 0.99.85
x64 (UAC is enabled)
Internet Explorer 11
``````````````Antivirus/Firewall Check:``````````````
Avira Desktop
Windows Defender
Antivirus up to date!
`````````Anti-malware/Other Utilities Check:`````````
Java 7 Update 60
Adobe Flash Player 14.0.0.145
Mozilla Firefox (30.0)
````````Process Check: objlist.exe by Laurent````````
Avira Antivir avgnt.exe
Avira Antivir avguard.exe
`````````````````System Health check`````````````````
Total Fragmentation on Drive C: %
````````````````````End of Log``````````````````````
FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 11-07-2014
Ran by Denis (administrator) on DENIS-PC on 11-07-2014 22:52:35
Running from C:\Users\Denis\Desktop\Logfiles Dateien\programme
Platform: Windows 8.1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
() C:\Program Files (x86)\ASUS\AXSP\1.01.02\atkexComSvc.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AAHM\1.00.22\aaHMSvc.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AsusFanControlService\1.03.03\AsusFanControlService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(DTS, Inc) C:\Program Files\Realtek\Audio\HDA\DTSU2PAuSrv64.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite III\AISuite3.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite III\Wi-Fi GO!\AssistTools\WiFi GO! Server.exe
() C:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\DipAwayMode.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite III\USB 3.0 Boost\U3BoostSvr64.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
() C:\Program Files (x86)\ASUS\AI Suite III\Wi-Fi GO!\AssistTools\S5WOW_App\x64\S5wow_2005.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\InstallShield Installation Information\{E6931688-DA2B-4E16-8539-3D323D69C677}\AiChargerPlus.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite III\Wi-Fi GO!\AssistTools\WiFile\WiFileTransfer.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Apple Inc.) Z:\itunes\iTunesHelper.exe
() C:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\EPUShortCut.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite III\Wi-Fi GO!\AsDLNAServerReal.exe
(TeamSpeak Systems GmbH) Z:\TeamSpeak 3\ts3client_win32.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
() C:\Users\Denis\Desktop\Logfiles Dateien\programme\SecurityCheck.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7192792 2013-07-06] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_DTS] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1321688 2013-07-04] (Realtek Semiconductor)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [750160 2014-06-24] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [182352 2014-05-05] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [ASUS AiChargerPlus Execute] => C:\Program Files (x86)\InstallShield Installation Information\{E6931688-DA2B-4E16-8539-3D323D69C677}\AiChargerPlus.exe [550272 2013-01-28] (ASUSTek Computer Inc.)
HKLM-x32\...\Run: [ASUS WiFi GO! FileTransfer Execute] => C:\Program Files (x86)\ASUS\AI Suite III\Wi-Fi GO!\AssistTools\WiFile\WiFileTransfer.exe [1391416 2013-06-21] (ASUSTeK Computer Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896 2014-05-07] (Oracle Corporation)
HKLM-x32\...\Run: [iTunesHelper] => Z:\itunes\iTunesHelper.exe [152392 2014-07-08] (Apple Inc.)
HKU\S-1-5-21-1791151724-3789037606-4172102177-1001\...\Run: [NetLimiter] => "C:\Users\Denis\Desktop\nlclientapp.exe" /minimized
HKU\S-1-5-21-1791151724-3789037606-4172102177-1001\...\MountPoints2: {135151dc-f856-11e3-828c-240a641d3d29} - "E:\Start_eBanking_Login-Stick_Win.exe"
HKU\S-1-5-21-1791151724-3789037606-4172102177-1001\...\MountPoints2: {c3bf88bb-04e1-11e4-8297-240a641d3d29} - "E:\HTC_Sync_Manager_PC.exe"
Startup: C:\Users\Denis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Product Registration.lnk
ShortcutTarget: Product Registration.lnk -> C:\Users\Denis\AppData\Local\Temp\is-IOKFA.tmp\ATR1.exe (No File)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://t.de.msn.com/
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xA881B91AAD89CF01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE,de;q=0.5
SearchScopes: HKLM-x32 - DefaultScope value is missing.
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
FireFox:
========
FF ProfilePath: C:\Users\Denis\AppData\Roaming\Mozilla\Firefox\Profiles\7ptqrbfd.default
FF Plugin: @adobe.com/FlashPlayer - C:\WINDOWS\system32\Macromed\Flash\NPSWF64_14_0_0_145.dll ()
FF Plugin: @videolan.org/vlc,version=2.1.4 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_145.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - Z:\itunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=10.60.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.60.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Adblock Plus - C:\Users\Denis\AppData\Roaming\Mozilla\Firefox\Profiles\7ptqrbfd.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-04-11]
==================== Services (Whitelisted) =================
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [430160 2014-06-24] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [430160 2014-06-24] (Avira Operations GmbH & Co. KG)
R2 asComSvc; C:\Program Files (x86)\ASUS\AXSP\1.01.02\atkexComSvc.exe [936728 2013-07-04] ()
R2 asHmComSvc; C:\Program Files (x86)\ASUS\AAHM\1.00.22\aaHMSvc.exe [954648 2013-08-01] (ASUSTeK Computer Inc.)
R2 AsusFanControlService; C:\Program Files (x86)\ASUS\AsusFanControlService\1.03.03\AsusFanControlService.exe [1660728 2013-07-31] (ASUSTeK Computer Inc.)
R2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [124496 2014-05-05] (Avira Operations GmbH & Co. KG)
R2 DTSAudioSvc; C:\Program Files\Realtek\Audio\HDA\DTSU2PAuSrv64.exe [240584 2012-10-02] (DTS, Inc)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347880 2014-03-24] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2014-03-24] (Microsoft Corporation)
S2 nlsvc; C:\Users\Denis\Desktop\NLSvc.exe [X]
==================== Drivers (Whitelisted) ====================
R3 AiChargerPlus; C:\Windows\SysWow64\drivers\AiChargerPlus.sys [14848 2013-01-28] (ASUSTek Computer Inc.)
R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [15232 2013-07-04] ()
R3 ASMTFilter; C:\Windows\SysWow64\drivers\asmtufdriver.sys [21400 2013-01-28] (hxxp://www.asmedia.com.tw) [File not signed]
R1 AsUpIO; C:\Windows\SysWow64\drivers\AsUpIO.sys [14464 2012-09-14] ()
R3 ASUSFILTER; C:\Windows\SysWow64\drivers\ASUSFILTER.sys [46152 2011-09-20] (MCCI Corporation)
R3 AsusSensorSimulator; C:\Windows\system32\DRIVERS\WUDFRd.sys [230912 2013-08-22] (Microsoft Corporation)
R3 asusvad_micarray; C:\Windows\system32\drivers\vmic_x64.sys [38712 2013-02-27] (ASUS SZ provider)
R3 athr; C:\Windows\system32\DRIVERS\athwbx.sys [3880448 2013-11-12] (Qualcomm Atheros Communications, Inc.)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [117712 2014-06-24] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [130584 2014-06-03] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [28600 2014-02-25] (Avira Operations GmbH & Co. KG)
R3 BthLEEnum; C:\Windows\System32\drivers\BthLEEnum.sys [226304 2013-12-04] (Microsoft Corporation)
R3 SensorsServiceDriver; C:\Windows\system32\DRIVERS\WUDFRd.sys [230912 2013-08-22] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [123224 2014-03-24] (Microsoft Corporation)
S2 nldrv; \??\C:\Users\Denis\Desktop\nldrv.sys [X]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-07-11 22:06 - 2014-07-11 22:06 - 00000000 ____D () C:\Program Files (x86)\ESET
2014-07-11 22:04 - 2014-07-11 22:04 - 00000000 ____D () C:\Users\Denis\AppData\Roaming\Apple Computer
2014-07-11 11:17 - 2014-07-11 11:17 - 61513304 _____ (Ubisoft) C:\Users\Helga\Downloads\UplayInstaller.exe
2014-07-11 11:16 - 2014-07-11 11:16 - 02907552 _____ (Blizzard Entertainment) C:\Users\Helga\Downloads\Battle.net-Setup-deDE.exe
2014-07-11 11:14 - 2014-07-11 11:15 - 64853120 _____ (Logitech Inc.) C:\Users\Helga\Downloads\LGS_8.53.186_x64_Logitech.exe
2014-07-11 11:12 - 2014-07-11 11:13 - 04834336 _____ (AVAST Software) C:\Users\Helga\Downloads\avast_pro_antivirus_setup_online.exe
2014-07-11 11:11 - 2014-07-11 11:11 - 01141680 _____ () C:\Users\Helga\Downloads\SteamSetup.exe
2014-07-11 11:10 - 2014-07-11 11:10 - 00961360 _____ (Chip Digital GmbH) C:\Users\Helga\Downloads\mplayerc_20100214 - CHIP-Installer.exe
2014-07-11 11:07 - 2014-07-11 11:07 - 03602664 _____ () C:\Users\Helga\Downloads\aquasuite_setup.exe
2014-07-11 11:06 - 2014-07-11 11:17 - 155091320 _____ (Creative Technology Ltd) C:\Users\Helga\Downloads\SBZxR_CD_LD_1_00_24.exe
2014-07-11 11:03 - 2014-07-11 11:03 - 30000520 _____ (NVIDIA Corporation) C:\Users\Helga\Downloads\GeForce_Experience_v2.1.0.0.exe
2014-07-11 10:57 - 2014-07-11 11:00 - 281478056 _____ (NVIDIA Corporation) C:\Users\Helga\Downloads\337.88-desktop-win8-win7-winvista-64bit-international-whql.exe
2014-07-11 10:56 - 2014-07-11 10:56 - 00000000 ____D () C:\Users\Helga\AppData\Roaming\Macromedia
2014-07-11 10:56 - 2014-07-11 10:56 - 00000000 ____D () C:\Users\Helga\AppData\Local\Macromedia
2014-07-11 10:55 - 2014-07-11 10:55 - 00000000 ____D () C:\Users\Helga\AppData\Roaming\Apple Computer
2014-07-11 10:55 - 2014-07-11 10:55 - 00000000 ____D () C:\Users\Helga\AppData\Local\Apple Computer
2014-07-11 10:55 - 2014-07-11 10:55 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2014-07-11 10:55 - 2014-07-11 10:55 - 00000000 ____D () C:\ProgramData\Apple Computer
2014-07-11 10:55 - 2014-07-11 10:55 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-07-11 10:55 - 2014-07-11 10:55 - 00000000 ____D () C:\Program Files\iTunes
2014-07-11 10:55 - 2014-07-11 10:55 - 00000000 ____D () C:\Program Files\iPod
2014-07-11 10:55 - 2012-08-21 13:01 - 00033240 _____ (GEAR Software Inc.) C:\WINDOWS\system32\Drivers\GEARAspiWDM.sys
2014-07-11 10:45 - 2014-07-11 10:45 - 00002535 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk
2014-07-11 10:45 - 2014-07-11 10:45 - 00000000 ____D () C:\WINDOWS\System32\Tasks\Apple
2014-07-11 10:45 - 2014-07-11 10:45 - 00000000 ____D () C:\Users\Denis\AppData\Local\Apple
2014-07-11 10:45 - 2014-07-11 10:45 - 00000000 ____D () C:\ProgramData\Apple
2014-07-11 10:45 - 2014-07-11 10:45 - 00000000 ____D () C:\Program Files\Common Files\Apple
2014-07-11 10:45 - 2014-07-11 10:45 - 00000000 ____D () C:\Program Files\Bonjour
2014-07-11 10:45 - 2014-07-11 10:45 - 00000000 ____D () C:\Program Files (x86)\Bonjour
2014-07-11 10:45 - 2014-07-11 10:45 - 00000000 ____D () C:\Program Files (x86)\Apple Software Update
2014-07-11 10:38 - 2014-07-11 10:38 - 00000000 ____D () C:\Users\Helga\AppData\Roaming\WinRAR
2014-07-11 10:36 - 2014-07-11 10:36 - 02156511 _____ () C:\Users\Helga\Downloads\BIOS_updater_for_4th_Gen_Intel_Core1_5M.zip
2014-07-11 10:35 - 2014-07-11 10:36 - 60058379 _____ () C:\Users\Helga\Downloads\MEI_Win7-8-8-1_VER95151730-X79(1).zip
2014-07-11 10:34 - 2014-07-11 10:34 - 22823720 _____ () C:\Users\Helga\Downloads\ISCT_Win7-8-8-1_VER42412710.zip
2014-07-11 10:34 - 2014-07-11 10:34 - 03820648 _____ () C:\Users\Helga\Downloads\Asmedia_Win7-8-8-1_VER2080.zip
2014-07-11 10:34 - 2014-07-11 10:34 - 02625785 _____ () C:\Users\Helga\Downloads\IRSS_Win7-8-8-1_VER4001068.zip
2014-07-11 10:33 - 2014-07-11 10:40 - 524890982 _____ () C:\Users\Helga\Downloads\WIFI_Win7-8-8-1_VER6312231_6322231_6332231.zip
2014-07-11 10:33 - 2014-07-11 10:36 - 161334500 _____ () C:\Users\Helga\Downloads\AISuite3_Win7-8-8-1_M6F_VER10056.zip
2014-07-11 10:33 - 2014-07-11 10:33 - 00625619 _____ () C:\Users\Helga\Downloads\ASMedia_U3_FW_update.zip
2014-07-11 10:32 - 2014-07-11 10:33 - 60058379 _____ () C:\Users\Helga\Downloads\MEI_Win7-8-8-1_VER95151730-X79.zip
2014-07-11 10:28 - 2014-07-11 10:28 - 00000000 ____D () C:\Users\Helga\AppData\Roaming\Mozilla
2014-07-11 10:28 - 2014-07-11 10:28 - 00000000 ____D () C:\Users\Helga\AppData\Local\Mozilla
2014-07-11 10:05 - 2014-07-11 10:05 - 00000000 ____D () C:\Users\Helga\AppData\Roaming\Avira
2014-07-11 10:04 - 2014-07-11 14:44 - 00003600 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1791151724-3789037606-4172102177-1004
2014-07-11 09:58 - 2014-07-11 10:08 - 00000000 ____D () C:\Users\Helga
2014-07-11 09:58 - 2014-07-11 09:59 - 00000000 ____D () C:\Users\Helga\AppData\Local\Packages
2014-07-11 09:58 - 2014-07-11 09:58 - 00001454 _____ () C:\Users\Helga\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-07-11 09:58 - 2014-07-11 09:58 - 00000020 ___SH () C:\Users\Helga\ntuser.ini
2014-07-11 09:58 - 2014-07-11 09:58 - 00000000 _SHDL () C:\Users\Helga\Vorlagen
2014-07-11 09:58 - 2014-07-11 09:58 - 00000000 _SHDL () C:\Users\Helga\Startmenü
2014-07-11 09:58 - 2014-07-11 09:58 - 00000000 _SHDL () C:\Users\Helga\Netzwerkumgebung
2014-07-11 09:58 - 2014-07-11 09:58 - 00000000 _SHDL () C:\Users\Helga\Lokale Einstellungen
2014-07-11 09:58 - 2014-07-11 09:58 - 00000000 _SHDL () C:\Users\Helga\Eigene Dateien
2014-07-11 09:58 - 2014-07-11 09:58 - 00000000 _SHDL () C:\Users\Helga\Druckumgebung
2014-07-11 09:58 - 2014-07-11 09:58 - 00000000 _SHDL () C:\Users\Helga\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-07-11 09:58 - 2014-07-11 09:58 - 00000000 _SHDL () C:\Users\Helga\AppData\Local\Verlauf
2014-07-11 09:58 - 2014-07-11 09:58 - 00000000 _SHDL () C:\Users\Helga\AppData\Local\Anwendungsdaten
2014-07-11 09:58 - 2014-07-11 09:58 - 00000000 _SHDL () C:\Users\Helga\Anwendungsdaten
2014-07-11 09:58 - 2014-07-11 09:58 - 00000000 ____D () C:\Users\Helga\AppData\Roaming\Adobe
2014-07-11 09:58 - 2014-07-11 09:58 - 00000000 ____D () C:\Users\Helga\AppData\Local\VirtualStore
2014-07-11 09:58 - 2014-05-16 15:10 - 00000000 ___RD () C:\Users\Helga\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-07-11 09:58 - 2014-05-02 15:52 - 00000000 ___RD () C:\Users\Helga\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-07-11 09:58 - 2014-02-22 06:37 - 00000369 _____ () C:\Users\Helga\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk
2014-07-11 09:58 - 2014-02-22 06:37 - 00000369 _____ () C:\Users\Helga\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk
2014-07-11 09:58 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Helga\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-07-11 09:58 - 2013-08-22 17:36 - 00000000 ____D () C:\Users\Helga\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-07-10 17:52 - 2014-07-10 17:52 - 00000000 ____D () C:\WINDOWS\ERUNT
2014-07-10 17:44 - 2014-07-10 17:45 - 00000000 ____D () C:\AdwCleaner
2014-07-09 22:06 - 2014-07-11 22:52 - 00000000 ____D () C:\FRST
2014-07-09 21:51 - 2014-07-09 21:54 - 00000000 ____D () C:\Users\Denis\Desktop\Logfiles Dateien
2014-07-09 20:49 - 2014-07-10 17:34 - 00122584 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2014-07-09 20:49 - 2014-07-09 20:49 - 00000835 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-07-09 20:49 - 2014-07-09 20:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware
2014-07-09 20:49 - 2014-07-09 20:49 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-07-09 20:49 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2014-07-09 20:49 - 2014-05-12 07:26 - 00064216 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys
2014-07-09 20:49 - 2014-05-12 07:25 - 00025816 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys
2014-07-09 17:39 - 2014-07-09 17:39 - 00000000 ____D () C:\Users\Denis\AppData\Roaming\AC3Filter
2014-07-08 21:14 - 2014-07-08 21:14 - 00000000 ___HD () C:\WINDOWS\msdownld.tmp
2014-07-08 21:14 - 2014-07-08 21:14 - 00000000 ____D () C:\WINDOWS\RegisteredPackages
2014-07-08 21:14 - 2014-07-08 21:14 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media
2014-07-08 21:14 - 2014-07-08 21:14 - 00000000 ____D () C:\IExp1.tmp
2014-07-08 21:14 - 2014-07-08 21:14 - 00000000 ____D () C:\IExp0.tmp
2014-07-08 15:58 - 2014-07-08 15:58 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Xvid
2014-07-08 15:58 - 2014-07-08 15:58 - 00000000 ____D () C:\Program Files (x86)\Xvid
2014-07-08 15:58 - 2009-06-07 16:25 - 00077824 _____ () C:\WINDOWS\SysWOW64\xvid.ax
2014-07-08 15:58 - 2009-06-07 16:24 - 00180224 _____ () C:\WINDOWS\SysWOW64\xvidvfw.dll
2014-07-08 15:58 - 2009-06-07 16:16 - 00819200 _____ () C:\WINDOWS\SysWOW64\xvidcore.dll
2014-07-07 16:39 - 2013-11-12 11:00 - 03880448 _____ (Qualcomm Atheros Communications, Inc.) C:\WINDOWS\system32\Drivers\athwbx.sys
2014-07-01 14:44 - 2014-07-07 15:08 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NetLimiter 4
2014-07-01 14:44 - 2014-07-01 14:44 - 00000000 ____D () C:\Users\Denis\AppData\Roaming\Locktime Software
2014-07-01 14:44 - 2014-07-01 14:44 - 00000000 ____D () C:\Users\Denis\AppData\Roaming\Locktime
2014-07-01 14:44 - 2014-07-01 14:44 - 00000000 ____D () C:\ProgramData\Locktime
2014-07-01 14:43 - 2014-07-01 14:43 - 05911712 _____ (Locktime Software) C:\Users\Denis\Downloads\netlimiter-4.0.6.0.exe
2014-06-29 11:18 - 2014-07-04 21:13 - 00000000 ____D () C:\Users\Denis\Zomboid
2014-06-28 18:31 - 2014-06-28 18:31 - 00461312 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnet.dll
2014-06-28 18:31 - 2014-06-28 18:31 - 00377856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnet.dll
2014-06-28 18:31 - 2014-06-28 18:31 - 00214016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dplayx.dll
2014-06-28 18:31 - 2014-06-28 18:31 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnathlp.dll
2014-06-28 18:31 - 2014-06-28 18:31 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnathlp.dll
2014-06-28 18:31 - 2014-06-28 18:31 - 00045056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpwsockx.dll
2014-06-28 18:31 - 2014-06-28 18:31 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnsvr.exe
2014-06-28 18:31 - 2014-06-28 18:31 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnsvr.exe
2014-06-28 18:31 - 2014-06-28 18:31 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dplaysvr.exe
2014-06-28 18:31 - 2014-06-28 18:31 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpmodemx.dll
2014-06-28 18:31 - 2014-06-28 18:31 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnhupnp.dll
2014-06-28 18:31 - 2014-06-28 18:31 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnhpast.dll
2014-06-28 18:31 - 2014-06-28 18:31 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnhupnp.dll
2014-06-28 18:31 - 2014-06-28 18:31 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnhpast.dll
2014-06-23 23:05 - 2014-06-23 23:05 - 00000000 ____D () C:\Users\Denis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\X Codec Pack 2.6.5
2014-06-23 23:05 - 2014-06-23 23:05 - 00000000 ____D () C:\Program Files\X Codec Pack
2014-06-23 23:04 - 2014-06-23 23:05 - 24419588 _____ () C:\Users\Denis\Downloads\X-Codec-Pack-2.6.5.exe
2014-06-23 22:59 - 2014-07-07 22:31 - 00000000 ____D () C:\Users\Denis\AppData\Roaming\vlc
2014-06-23 22:59 - 2014-06-24 18:53 - 00000000 ____D () C:\Users\Denis\AppData\Roaming\dvdcss
2014-06-23 22:59 - 2014-06-23 22:59 - 00000887 _____ () C:\Users\Public\Desktop\VLC media player.lnk
2014-06-23 22:59 - 2014-06-23 22:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2014-06-23 22:59 - 2014-06-23 22:59 - 00000000 ____D () C:\Program Files\VideoLAN
2014-06-23 22:58 - 2014-06-23 22:58 - 00961360 _____ (Chip Digital GmbH) C:\Users\Denis\Downloads\VLC media player 64 Bit - CHIP-Installer.exe
2014-06-23 22:53 - 2014-06-23 22:55 - 00000000 ____D () C:\Users\Denis\AppData\Roaming\Media Player Classic
2014-06-23 22:53 - 2010-02-14 16:35 - 04411392 _____ (Gabest) C:\Users\Denis\Desktop\mplayerc.exe
2014-06-23 22:52 - 2014-06-23 22:52 - 00961360 _____ (Chip Digital GmbH) C:\Users\Denis\Downloads\mplayerc_20100214 - CHIP-Installer.exe
2014-06-20 23:58 - 2014-06-21 00:00 - 00000000 ____D () C:\Users\Denis\Documents\RCT3
2014-06-20 23:58 - 2014-06-20 23:58 - 00000000 ____D () C:\Users\Denis\AppData\Roaming\Atari
2014-06-20 23:57 - 2014-06-20 23:57 - 00043520 _____ () C:\WINDOWS\SysWOW64\CmdLineExt03.dll
2014-06-20 23:56 - 2014-06-20 23:56 - 00000649 _____ () C:\Users\Public\Desktop\RollerCoaster Tycoon 3.lnk
2014-06-20 23:56 - 2014-06-20 23:56 - 00000000 ____D () C:\Users\Denis\AppData\Roaming\Leadertech
2014-06-20 23:56 - 2014-06-20 23:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Atari
2014-06-20 17:49 - 2014-06-20 17:49 - 29602248 _____ (Uber Entertainment) C:\Users\Denis\Downloads\PA_Setup.exe
2014-06-20 17:44 - 2014-06-20 17:54 - 00000000 ____D () C:\Users\Denis\AppData\Local\Uber Entertainment
2014-06-20 17:44 - 2014-06-20 17:44 - 00002927 _____ () C:\Users\Public\Desktop\PA Launcher.lnk
2014-06-20 17:44 - 2014-06-20 17:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Uber Entertainment
2014-06-18 15:49 - 2014-06-18 15:50 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-06-18 15:18 - 2014-06-18 15:18 - 00000000 ____D () C:\Users\Denis\AppData\Roaming\.mono
2014-06-18 15:18 - 2014-06-18 15:18 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kerbal Space Program
2014-06-13 20:06 - 2014-06-13 20:06 - 00000000 ____D () C:\Users\Denis\AppData\Local\Introversion
2014-06-13 15:13 - 2014-05-30 12:21 - 23414784 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2014-06-13 15:13 - 2014-05-30 11:45 - 02768384 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2014-06-13 15:13 - 2014-05-30 11:28 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll
2014-06-13 15:13 - 2014-05-30 11:20 - 00752640 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2014-06-13 15:13 - 2014-05-30 11:18 - 17271296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2014-06-13 15:13 - 2014-05-30 11:08 - 05782528 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2014-06-13 15:13 - 2014-05-30 11:06 - 00452096 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtmsft.dll
2014-06-13 15:13 - 2014-05-30 10:46 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2014-06-13 15:13 - 2014-05-30 10:44 - 00295424 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll
2014-06-13 15:13 - 2014-05-30 10:43 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesetup.dll
2014-06-13 15:13 - 2014-05-30 10:38 - 02179072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2014-06-13 15:13 - 2014-05-30 10:35 - 00608768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2014-06-13 15:13 - 2014-05-30 10:29 - 00631808 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2014-06-13 15:13 - 2014-05-30 10:27 - 00592896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll
2014-06-13 15:13 - 2014-05-30 10:23 - 02040832 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2014-06-13 15:13 - 2014-05-30 10:16 - 00368128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtmsft.dll
2014-06-13 15:13 - 2014-05-30 10:04 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll
2014-06-13 15:13 - 2014-05-30 10:02 - 00242688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll
2014-06-13 15:13 - 2014-05-30 09:56 - 04244992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2014-06-13 15:13 - 2014-05-30 09:56 - 02266112 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2014-06-13 15:13 - 2014-05-30 09:54 - 00526336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2014-06-13 15:13 - 2014-05-30 09:49 - 01964544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2014-06-13 15:13 - 2014-05-30 09:43 - 13522944 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2014-06-13 15:13 - 2014-05-30 09:40 - 11725312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2014-06-13 15:13 - 2014-05-30 09:30 - 01398272 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2014-06-13 15:13 - 2014-05-30 09:21 - 01790976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2014-06-13 15:13 - 2014-05-30 09:15 - 01143296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2014-06-13 15:13 - 2014-05-30 09:13 - 00846336 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2014-06-13 15:13 - 2014-05-30 09:13 - 00704512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2014-06-13 15:13 - 2014-05-10 05:46 - 02151424 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3.dll
2014-06-13 15:13 - 2014-05-10 05:22 - 01312256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3.dll
2014-06-13 15:13 - 2014-05-09 01:06 - 00295424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ks.sys
2014-06-13 15:13 - 2014-05-05 06:02 - 03360256 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll
2014-06-13 15:13 - 2014-05-03 09:14 - 00079872 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSReset.exe
2014-06-13 15:13 - 2014-05-03 06:21 - 00249344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2014-06-13 15:13 - 2014-05-03 06:07 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2014-06-13 15:13 - 2014-05-03 05:41 - 00921088 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll
2014-06-13 15:13 - 2014-05-03 05:38 - 00754688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll
2014-06-13 15:13 - 2014-04-30 13:16 - 01336648 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll
2014-06-13 15:13 - 2014-04-30 05:51 - 01064448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll
2014-06-13 15:13 - 2014-04-18 16:57 - 00032600 _____ (Microsoft Corporation) C:\WINDOWS\system32\ploptin.dll
2014-06-13 15:13 - 2014-04-18 16:44 - 01466856 _____ (Microsoft Corporation) C:\WINDOWS\system32\propsys.dll
2014-06-13 15:13 - 2014-04-18 15:29 - 01200288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\propsys.dll
2014-06-13 15:13 - 2014-04-18 11:44 - 00055296 _____ (Microsoft Corporation) C:\WINDOWS\system32\energyprov.dll
2014-06-13 15:13 - 2014-04-18 11:32 - 13287936 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2014-06-13 15:13 - 2014-04-18 10:58 - 11792384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2014-06-13 15:13 - 2014-04-18 10:32 - 00805376 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll
2014-06-13 15:13 - 2014-04-18 10:21 - 01126912 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFolder.dll
2014-06-13 15:13 - 2014-04-18 10:09 - 08652800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll
2014-06-13 15:13 - 2014-04-18 09:51 - 00836608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchFolder.dll
2014-06-13 15:13 - 2014-04-18 09:49 - 05833216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Search.dll
2014-06-13 15:13 - 2014-04-14 11:20 - 00324888 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFCaptureEngine.dll
2014-06-13 15:13 - 2014-04-14 10:01 - 00285144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFCaptureEngine.dll
2014-06-13 15:13 - 2014-04-11 08:13 - 01200128 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthport.sys
2014-06-13 15:13 - 2014-04-11 06:51 - 00250368 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpencom.dll
2014-06-13 15:13 - 2014-04-11 06:23 - 00209920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpencom.dll
2014-06-13 15:13 - 2014-04-11 05:30 - 00449536 _____ (Microsoft Corporation) C:\WINDOWS\system32\defragsvc.dll
2014-06-13 15:13 - 2014-04-09 13:53 - 00337240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Classpnp.sys
2014-06-13 15:13 - 2014-04-09 08:39 - 00191488 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpchttp.dll
2014-06-13 15:13 - 2014-04-09 07:44 - 00144384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpchttp.dll
2014-06-13 15:13 - 2014-04-09 06:35 - 01411584 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2014-06-13 15:13 - 2014-04-09 05:33 - 00135168 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscsvc.dll
2014-06-13 15:13 - 2014-04-08 04:01 - 00589656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fvevol.sys
2014-06-13 15:13 - 2014-04-06 18:34 - 00372568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storport.sys
2014-06-13 15:13 - 2014-04-06 18:34 - 00275800 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msiscsi.sys
2014-06-13 15:13 - 2014-04-06 18:32 - 00125496 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmapi.dll
2014-06-13 15:13 - 2014-04-06 18:31 - 21268952 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2014-06-13 15:13 - 2014-04-06 18:30 - 00201920 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVideoDSP.dll
2014-06-13 15:13 - 2014-04-06 18:24 - 00360792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fltMgr.sys
2014-06-13 15:13 - 2014-04-06 18:20 - 02140888 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2014-06-13 15:13 - 2014-04-06 18:20 - 01403856 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll
2014-06-13 15:13 - 2014-04-06 18:20 - 01379064 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpmde.dll
2014-06-13 15:13 - 2014-04-06 18:20 - 00881616 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll
2014-06-13 15:13 - 2014-04-06 18:20 - 00765408 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2014-06-13 15:13 - 2014-04-06 18:20 - 00609448 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf.dll
2014-06-13 15:13 - 2014-04-06 18:20 - 00491744 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2014-06-13 15:13 - 2014-04-06 18:20 - 00467496 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2014-06-13 15:13 - 2014-04-06 18:20 - 00463256 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2014-06-13 15:13 - 2014-04-06 18:20 - 00364640 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2014-06-13 15:13 - 2014-04-06 18:20 - 00244880 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2014-06-13 15:13 - 2014-04-06 18:20 - 00233912 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll
2014-06-13 15:13 - 2014-04-06 18:20 - 00028408 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfpmp.exe
2014-06-13 15:13 - 2014-04-06 17:23 - 00098584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmapi.dll
2014-06-13 15:13 - 2014-04-06 17:22 - 18755672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2014-06-13 15:13 - 2014-04-06 17:22 - 00178184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVideoDSP.dll
2014-06-13 15:13 - 2014-04-06 17:16 - 02144984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2014-06-13 15:13 - 2014-04-06 17:16 - 01209616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmde.dll
2014-06-13 15:13 - 2014-04-06 17:16 - 00707048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll
2014-06-13 15:13 - 2014-04-06 17:16 - 00669856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll
2014-06-13 15:13 - 2014-04-06 17:16 - 00518544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf.dll
2014-06-13 15:13 - 2014-04-06 17:16 - 00406504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll
2014-06-13 15:13 - 2014-04-06 17:16 - 00387896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll
2014-06-13 15:13 - 2014-04-06 17:16 - 00326024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2014-06-13 15:13 - 2014-04-06 17:16 - 00305768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll
2014-06-13 15:13 - 2014-04-06 16:10 - 04190720 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2014-06-13 15:13 - 2014-04-06 14:58 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\system32\srclient.dll
2014-06-13 15:13 - 2014-04-06 14:51 - 00467968 _____ (Microsoft Corporation) C:\WINDOWS\system32\srcore.dll
2014-06-13 15:13 - 2014-04-06 14:33 - 00335872 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDEServer.exe
2014-06-13 15:13 - 2014-04-06 14:24 - 00271872 _____ (Microsoft Corporation) C:\WINDOWS\system32\rstrui.exe
2014-06-13 15:13 - 2014-04-06 14:06 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\srclient.dll
2014-06-13 15:13 - 2014-04-06 13:55 - 16872448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2014-06-13 15:13 - 2014-04-06 13:54 - 12711424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2014-06-13 15:13 - 2014-04-06 13:26 - 00143872 _____ (Microsoft Corporation) C:\WINDOWS\system32\BootMenuUX.dll
2014-06-13 15:13 - 2014-04-06 13:20 - 00201216 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2014-06-13 15:13 - 2014-04-06 13:01 - 00834048 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2014-06-13 15:13 - 2014-04-06 12:52 - 00955904 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2014-06-13 15:13 - 2014-04-06 12:51 - 01230336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2014-06-13 15:13 - 2014-04-06 12:37 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2014-06-13 15:13 - 2014-04-06 12:36 - 00888320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2014-06-13 15:13 - 2014-04-06 12:05 - 01222656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Streaming.dll
2014-06-13 15:13 - 2014-04-06 11:59 - 00982016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Streaming.dll
2014-06-13 15:13 - 2014-04-03 10:12 - 02124840 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d9.dll
2014-06-13 15:13 - 2014-04-03 10:12 - 00307304 _____ (Microsoft Corporation) C:\WINDOWS\system32\wintrust.dll
2014-06-13 15:13 - 2014-04-03 10:12 - 00130144 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpapi.dll
2014-06-13 15:13 - 2014-04-03 09:59 - 02518872 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2014-06-13 15:13 - 2014-04-03 09:59 - 00428888 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS
2014-06-13 15:13 - 2014-04-03 06:03 - 00230808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wintrust.dll
2014-06-13 15:13 - 2014-04-03 06:03 - 00111528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gpapi.dll
2014-06-13 15:13 - 2014-04-03 05:53 - 01797896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d9.dll
2014-06-13 15:13 - 2014-04-03 04:53 - 04269056 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncEngine.dll
2014-06-13 15:13 - 2014-04-03 04:53 - 00677376 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys
2014-06-13 15:13 - 2014-04-03 04:51 - 01584128 _____ (Microsoft Corporation) C:\WINDOWS\system32\workfolderssvc.dll
2014-06-13 15:13 - 2014-04-03 04:23 - 00563200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\afd.sys
2014-06-13 15:13 - 2014-04-03 04:23 - 00402432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
2014-06-13 15:13 - 2014-04-03 04:23 - 00046592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tlscsp.dll
2014-06-13 15:13 - 2014-04-03 04:22 - 00047616 _____ (Microsoft Corporation) C:\WINDOWS\system32\tlscsp.dll
2014-06-13 15:13 - 2014-04-01 08:23 - 00384856 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spaceport.sys
2014-06-13 15:13 - 2014-03-31 07:42 - 07425368 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2014-06-13 15:13 - 2014-03-31 02:41 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d8thk.dll
2014-06-13 15:13 - 2014-03-31 02:01 - 00186880 _____ (Microsoft Corporation) C:\WINDOWS\system32\WorkFoldersShell.dll
2014-06-13 15:13 - 2014-03-31 01:43 - 00761856 _____ (Microsoft Corporation) C:\WINDOWS\system32\WorkfoldersControl.dll
2014-06-13 15:13 - 2014-03-31 00:54 - 01308160 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpsvc.dll
2014-06-13 15:13 - 2014-03-31 00:49 - 01287168 _____ (Microsoft Corporation) C:\WINDOWS\system32\mispace.dll
2014-06-13 15:13 - 2014-03-31 00:35 - 01029120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mispace.dll
2014-06-13 15:13 - 2014-03-31 00:11 - 00721408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveTelemetry.dll
2014-06-13 15:13 - 2014-03-30 23:47 - 00872448 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDrive.exe
2014-06-13 15:13 - 2014-03-28 17:58 - 00407016 _____ (Microsoft Corporation) C:\WINDOWS\system32\services.exe
2014-06-13 15:13 - 2014-03-27 08:16 - 00246272 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srvnet.sys
2014-06-13 15:13 - 2014-03-27 07:36 - 00281600 _____ (Microsoft Corporation) C:\WINDOWS\system32\resutils.dll
2014-06-13 15:13 - 2014-03-27 06:59 - 00426496 _____ (Microsoft Corporation) C:\WINDOWS\system32\clusapi.dll
2014-06-13 15:13 - 2014-03-27 06:48 - 00219136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\resutils.dll
2014-06-13 15:13 - 2014-03-27 06:19 - 00313344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\clusapi.dll
2014-06-13 15:13 - 2014-03-27 05:46 - 00323072 _____ (Microsoft Corporation) C:\WINDOWS\system32\srvsvc.dll
2014-06-13 15:13 - 2014-03-27 05:15 - 00718336 _____ (Microsoft Corporation) C:\WINDOWS\system32\swprv.dll
2014-06-13 15:13 - 2014-03-27 05:10 - 01436160 _____ (Microsoft Corporation) C:\WINDOWS\system32\VSSVC.exe
2014-06-13 15:13 - 2014-03-25 00:58 - 00206848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys
2014-06-13 15:13 - 2014-03-20 05:48 - 00263424 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlows.exe
2014-06-13 15:13 - 2014-03-20 02:44 - 06645248 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2014-06-13 15:13 - 2014-03-20 01:33 - 05774848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
2014-06-13 15:13 - 2014-03-19 10:15 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanhlp.dll
2014-06-13 15:13 - 2014-03-19 10:07 - 00443904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\nwifi.sys
2014-06-13 15:13 - 2014-03-19 09:24 - 00064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsgqec.dll
2014-06-13 15:13 - 2014-03-19 09:17 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanhlp.dll
2014-06-13 15:13 - 2014-03-19 08:36 - 01057280 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdvidcrl.dll
2014-06-13 15:13 - 2014-03-19 07:56 - 00855552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdvidcrl.dll
2014-06-13 15:13 - 2014-03-19 07:45 - 00443904 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansec.dll
2014-06-13 15:13 - 2014-03-19 07:19 - 00296960 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanapi.dll
2014-06-13 15:13 - 2014-03-19 07:07 - 00370176 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanmsm.dll
2014-06-13 15:13 - 2014-03-19 07:02 - 01527296 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll
2014-06-13 15:13 - 2014-03-19 07:00 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanapi.dll
2014-06-13 15:13 - 2014-03-19 06:51 - 00300544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanmsm.dll
2014-06-13 15:13 - 2014-03-19 06:31 - 02100736 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlowUI.dll
2014-06-13 15:13 - 2014-03-19 06:18 - 02688000 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers.dll
2014-06-13 15:13 - 2014-03-18 10:19 - 00077312 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hdaudbus.sys
2014-06-13 15:13 - 2014-03-18 07:00 - 07173120 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
2014-06-13 15:13 - 2014-03-18 06:52 - 05104640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll
2014-06-13 15:13 - 2014-03-17 07:09 - 00462336 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsGdiConverter.dll
2014-06-13 15:13 - 2014-03-17 06:11 - 00337408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsGdiConverter.dll
2014-06-13 15:13 - 2014-03-17 05:01 - 00486912 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv
2014-06-13 15:13 - 2014-03-17 04:47 - 01025024 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2014-06-13 15:13 - 2014-03-17 04:45 - 00370176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv
2014-06-13 15:13 - 2014-03-14 08:26 - 00491520 _____ (Microsoft Corporation) C:\WINDOWS\system32\GeofenceMonitorService.dll
2014-06-13 15:13 - 2014-03-14 08:10 - 00357376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GeofenceMonitorService.dll
2014-06-13 15:13 - 2014-03-06 14:42 - 00310616 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\volsnap.sys
2014-06-13 15:12 - 2014-06-13 15:12 - 00195584 _____ (Microsoft Corporation) C:\WINDOWS\system32\msrating.dll
2014-06-13 15:12 - 2014-06-13 15:12 - 00164864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrating.dll
2014-06-13 15:12 - 2014-06-13 15:12 - 00139264 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieUnatt.exe
2014-06-13 15:12 - 2014-06-13 15:12 - 00112128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieUnatt.exe
2014-06-13 15:12 - 2014-06-13 15:12 - 00111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollector.exe
2014-06-13 15:12 - 2014-06-13 15:12 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll
2014-06-13 15:12 - 2014-06-13 15:12 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tsgqec.dll
2014-06-13 15:12 - 2014-06-13 15:12 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieetwproxystub.dll
2014-06-13 15:12 - 2014-06-13 15:12 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwproxystub.dll
2014-06-13 15:12 - 2014-06-13 15:12 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll
2014-06-13 15:12 - 2014-06-13 15:12 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll
2014-06-13 15:12 - 2014-06-13 15:12 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iernonce.dll
2014-06-13 15:12 - 2014-06-13 15:12 - 00004096 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollectorres.dll
2014-06-13 15:12 - 2014-05-19 08:31 - 00057856 _____ (Microsoft Corporation) C:\WINDOWS\system32\drvcfg.exe
2014-06-13 15:12 - 2014-05-19 08:21 - 00110592 _____ (Microsoft Corporation) C:\WINDOWS\system32\drvinst.exe
2014-06-13 15:12 - 2014-05-19 07:23 - 00098816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\drvinst.exe
2014-06-13 15:12 - 2014-05-01 15:31 - 03048904 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcMon.exe
2014-06-13 15:12 - 2014-05-01 15:31 - 00055328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wpcfltr.sys
2014-06-13 15:12 - 2014-05-01 09:14 - 03118080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Wpc.dll
2014-06-13 15:12 - 2014-05-01 09:05 - 02861056 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebSync.dll
2014-06-13 15:12 - 2014-05-01 08:51 - 02344448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Wpc.dll
2014-06-13 15:12 - 2014-05-01 07:24 - 02834944 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpccpl.dll
2014-06-13 15:12 - 2014-04-30 06:43 - 01975296 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWrite.dll
2014-06-13 15:12 - 2014-04-30 06:26 - 01345536 _____ (Microsoft Corporation) C:\WINDOWS\system32\FntCache.dll
2014-06-13 15:12 - 2014-04-30 05:47 - 01509888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWrite.dll
==================== One Month Modified Files and Folders =======
2014-07-11 22:52 - 2014-07-09 22:06 - 00000000 ____D () C:\FRST
2014-07-11 22:16 - 2014-04-11 22:19 - 00000884 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2014-07-11 22:09 - 2014-05-16 17:12 - 00000000 _____ () C:\WINDOWS\Path.idx
2014-07-11 22:09 - 2014-04-11 21:25 - 01776918 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2014-07-11 22:09 - 2013-08-23 01:24 - 00764340 _____ () C:\WINDOWS\system32\perfh007.dat
2014-07-11 22:09 - 2013-08-23 01:24 - 00159160 _____ () C:\WINDOWS\system32\perfc007.dat
2014-07-11 22:06 - 2014-07-11 22:06 - 00000000 ____D () C:\Program Files (x86)\ESET
2014-07-11 22:04 - 2014-07-11 22:04 - 00000000 ____D () C:\Users\Denis\AppData\Roaming\Apple Computer
2014-07-11 22:04 - 2014-05-16 17:04 - 01048576 _____ () C:\WINDOWS\PE_Rom.dll
2014-07-11 22:04 - 2014-04-12 12:03 - 00000000 __RDO () C:\Users\Denis\SkyDrive
2014-07-11 22:03 - 2013-08-22 16:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2014-07-11 15:06 - 2014-04-11 21:19 - 01104343 _____ () C:\WINDOWS\WindowsUpdate.log
2014-07-11 15:00 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\sru
2014-07-11 14:44 - 2014-07-11 10:04 - 00003600 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1791151724-3789037606-4172102177-1004
2014-07-11 14:33 - 2013-08-22 16:46 - 00195597 _____ () C:\WINDOWS\setupact.log
2014-07-11 11:17 - 2014-07-11 11:17 - 61513304 _____ (Ubisoft) C:\Users\Helga\Downloads\UplayInstaller.exe
2014-07-11 11:17 - 2014-07-11 11:06 - 155091320 _____ (Creative Technology Ltd) C:\Users\Helga\Downloads\SBZxR_CD_LD_1_00_24.exe
2014-07-11 11:16 - 2014-07-11 11:16 - 02907552 _____ (Blizzard Entertainment) C:\Users\Helga\Downloads\Battle.net-Setup-deDE.exe
2014-07-11 11:15 - 2014-07-11 11:14 - 64853120 _____ (Logitech Inc.) C:\Users\Helga\Downloads\LGS_8.53.186_x64_Logitech.exe
2014-07-11 11:13 - 2014-07-11 11:12 - 04834336 _____ (AVAST Software) C:\Users\Helga\Downloads\avast_pro_antivirus_setup_online.exe
2014-07-11 11:11 - 2014-07-11 11:11 - 01141680 _____ () C:\Users\Helga\Downloads\SteamSetup.exe
2014-07-11 11:10 - 2014-07-11 11:10 - 00961360 _____ (Chip Digital GmbH) C:\Users\Helga\Downloads\mplayerc_20100214 - CHIP-Installer.exe
2014-07-11 11:07 - 2014-07-11 11:07 - 03602664 _____ () C:\Users\Helga\Downloads\aquasuite_setup.exe
2014-07-11 11:03 - 2014-07-11 11:03 - 30000520 _____ (NVIDIA Corporation) C:\Users\Helga\Downloads\GeForce_Experience_v2.1.0.0.exe
2014-07-11 11:00 - 2014-07-11 10:57 - 281478056 _____ (NVIDIA Corporation) C:\Users\Helga\Downloads\337.88-desktop-win8-win7-winvista-64bit-international-whql.exe
2014-07-11 10:56 - 2014-07-11 10:56 - 00000000 ____D () C:\Users\Helga\AppData\Roaming\Macromedia
2014-07-11 10:56 - 2014-07-11 10:56 - 00000000 ____D () C:\Users\Helga\AppData\Local\Macromedia
2014-07-11 10:55 - 2014-07-11 10:55 - 00000000 ____D () C:\Users\Helga\AppData\Roaming\Apple Computer
2014-07-11 10:55 - 2014-07-11 10:55 - 00000000 ____D () C:\Users\Helga\AppData\Local\Apple Computer
2014-07-11 10:55 - 2014-07-11 10:55 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2014-07-11 10:55 - 2014-07-11 10:55 - 00000000 ____D () C:\ProgramData\Apple Computer
2014-07-11 10:55 - 2014-07-11 10:55 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-07-11 10:55 - 2014-07-11 10:55 - 00000000 ____D () C:\Program Files\iTunes
2014-07-11 10:55 - 2014-07-11 10:55 - 00000000 ____D () C:\Program Files\iPod
2014-07-11 10:45 - 2014-07-11 10:45 - 00002535 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk
2014-07-11 10:45 - 2014-07-11 10:45 - 00000000 ____D () C:\WINDOWS\System32\Tasks\Apple
2014-07-11 10:45 - 2014-07-11 10:45 - 00000000 ____D () C:\Users\Denis\AppData\Local\Apple
2014-07-11 10:45 - 2014-07-11 10:45 - 00000000 ____D () C:\ProgramData\Apple
2014-07-11 10:45 - 2014-07-11 10:45 - 00000000 ____D () C:\Program Files\Common Files\Apple
2014-07-11 10:45 - 2014-07-11 10:45 - 00000000 ____D () C:\Program Files\Bonjour
2014-07-11 10:45 - 2014-07-11 10:45 - 00000000 ____D () C:\Program Files (x86)\Bonjour
2014-07-11 10:45 - 2014-07-11 10:45 - 00000000 ____D () C:\Program Files (x86)\Apple Software Update
2014-07-11 10:40 - 2014-07-11 10:33 - 524890982 _____ () C:\Users\Helga\Downloads\WIFI_Win7-8-8-1_VER6312231_6322231_6332231.zip
2014-07-11 10:38 - 2014-07-11 10:38 - 00000000 ____D () C:\Users\Helga\AppData\Roaming\WinRAR
2014-07-11 10:36 - 2014-07-11 10:36 - 02156511 _____ () C:\Users\Helga\Downloads\BIOS_updater_for_4th_Gen_Intel_Core1_5M.zip
2014-07-11 10:36 - 2014-07-11 10:35 - 60058379 _____ () C:\Users\Helga\Downloads\MEI_Win7-8-8-1_VER95151730-X79(1).zip
2014-07-11 10:36 - 2014-07-11 10:33 - 161334500 _____ () C:\Users\Helga\Downloads\AISuite3_Win7-8-8-1_M6F_VER10056.zip
2014-07-11 10:34 - 2014-07-11 10:34 - 22823720 _____ () C:\Users\Helga\Downloads\ISCT_Win7-8-8-1_VER42412710.zip
2014-07-11 10:34 - 2014-07-11 10:34 - 03820648 _____ () C:\Users\Helga\Downloads\Asmedia_Win7-8-8-1_VER2080.zip
2014-07-11 10:34 - 2014-07-11 10:34 - 02625785 _____ () C:\Users\Helga\Downloads\IRSS_Win7-8-8-1_VER4001068.zip
2014-07-11 10:33 - 2014-07-11 10:33 - 00625619 _____ () C:\Users\Helga\Downloads\ASMedia_U3_FW_update.zip
2014-07-11 10:33 - 2014-07-11 10:32 - 60058379 _____ () C:\Users\Helga\Downloads\MEI_Win7-8-8-1_VER95151730-X79.zip
2014-07-11 10:28 - 2014-07-11 10:28 - 00000000 ____D () C:\Users\Helga\AppData\Roaming\Mozilla
2014-07-11 10:28 - 2014-07-11 10:28 - 00000000 ____D () C:\Users\Helga\AppData\Local\Mozilla
2014-07-11 10:08 - 2014-07-11 09:58 - 00000000 ____D () C:\Users\Helga
2014-07-11 10:05 - 2014-07-11 10:05 - 00000000 ____D () C:\Users\Helga\AppData\Roaming\Avira
2014-07-11 10:04 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\AppReadiness
2014-07-11 09:59 - 2014-07-11 09:58 - 00000000 ____D () C:\Users\Helga\AppData\Local\Packages
2014-07-11 09:58 - 2014-07-11 09:58 - 00001454 _____ () C:\Users\Helga\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-07-11 09:58 - 2014-07-11 09:58 - 00000020 ___SH () C:\Users\Helga\ntuser.ini
2014-07-11 09:58 - 2014-07-11 09:58 - 00000000 _SHDL () C:\Users\Helga\Vorlagen
2014-07-11 09:58 - 2014-07-11 09:58 - 00000000 _SHDL () C:\Users\Helga\Startmenü
2014-07-11 09:58 - 2014-07-11 09:58 - 00000000 _SHDL () C:\Users\Helga\Netzwerkumgebung
2014-07-11 09:58 - 2014-07-11 09:58 - 00000000 _SHDL () C:\Users\Helga\Lokale Einstellungen
2014-07-11 09:58 - 2014-07-11 09:58 - 00000000 _SHDL () C:\Users\Helga\Eigene Dateien
2014-07-11 09:58 - 2014-07-11 09:58 - 00000000 _SHDL () C:\Users\Helga\Druckumgebung
2014-07-11 09:58 - 2014-07-11 09:58 - 00000000 _SHDL () C:\Users\Helga\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-07-11 09:58 - 2014-07-11 09:58 - 00000000 _SHDL () C:\Users\Helga\AppData\Local\Verlauf
2014-07-11 09:58 - 2014-07-11 09:58 - 00000000 _SHDL () C:\Users\Helga\AppData\Local\Anwendungsdaten
2014-07-11 09:58 - 2014-07-11 09:58 - 00000000 _SHDL () C:\Users\Helga\Anwendungsdaten
2014-07-11 09:58 - 2014-07-11 09:58 - 00000000 ____D () C:\Users\Helga\AppData\Roaming\Adobe
2014-07-11 09:58 - 2014-07-11 09:58 - 00000000 ____D () C:\Users\Helga\AppData\Local\VirtualStore
2014-07-10 17:58 - 2014-05-02 18:48 - 00000128 _____ () C:\Users\Denis\Desktop\yagur kimimaru11.txt
2014-07-10 17:52 - 2014-07-10 17:52 - 00000000 ____D () C:\WINDOWS\ERUNT
2014-07-10 17:45 - 2014-07-10 17:44 - 00000000 ____D () C:\AdwCleaner
2014-07-10 17:45 - 2014-04-11 21:18 - 00087312 _____ () C:\WINDOWS\PFRO.log
2014-07-10 17:45 - 2013-08-22 15:25 - 00262144 ___SH () C:\WINDOWS\system32\config\BBI
2014-07-10 17:34 - 2014-07-09 20:49 - 00122584 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2014-07-10 17:31 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\NDF
2014-07-09 22:23 - 2014-04-11 21:26 - 00000000 ____D () C:\Users\Denis
2014-07-09 22:15 - 2014-04-11 21:32 - 00003600 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1791151724-3789037606-4172102177-1001
2014-07-09 21:54 - 2014-07-09 21:51 - 00000000 ____D () C:\Users\Denis\Desktop\Logfiles Dateien
2014-07-09 20:49 - 2014-07-09 20:49 - 00000835 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-07-09 20:49 - 2014-07-09 20:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware
2014-07-09 20:49 - 2014-07-09 20:49 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-07-09 17:39 - 2014-07-09 17:39 - 00000000 ____D () C:\Users\Denis\AppData\Roaming\AC3Filter
2014-07-08 21:14 - 2014-07-08 21:14 - 00000000 ___HD () C:\WINDOWS\msdownld.tmp
2014-07-08 21:14 - 2014-07-08 21:14 - 00000000 ____D () C:\WINDOWS\RegisteredPackages
2014-07-08 21:14 - 2014-07-08 21:14 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media
2014-07-08 21:14 - 2014-07-08 21:14 - 00000000 ____D () C:\IExp1.tmp
2014-07-08 21:14 - 2014-07-08 21:14 - 00000000 ____D () C:\IExp0.tmp
2014-07-08 19:16 - 2014-04-11 22:19 - 00003772 _____ () C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2014-07-08 15:58 - 2014-07-08 15:58 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Xvid
2014-07-08 15:58 - 2014-07-08 15:58 - 00000000 ____D () C:\Program Files (x86)\Xvid
2014-07-08 15:58 - 2014-04-13 17:14 - 00395565 _____ () C:\WINDOWS\DirectX.log
2014-07-07 22:31 - 2014-06-23 22:59 - 00000000 ____D () C:\Users\Denis\AppData\Roaming\vlc
2014-07-07 15:08 - 2014-07-01 14:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NetLimiter 4
2014-07-06 23:26 - 2014-04-11 23:32 - 00000000 ____D () C:\Users\Denis\AppData\Local\Battle.net
2014-07-06 21:41 - 2014-05-30 21:28 - 00000000 ____D () C:\Users\Denis\AppData\Roaming\Tropico 5
2014-07-04 21:13 - 2014-06-29 11:18 - 00000000 ____D () C:\Users\Denis\Zomboid
2014-07-01 18:44 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\rescache
2014-07-01 14:44 - 2014-07-01 14:44 - 00000000 ____D () C:\Users\Denis\AppData\Roaming\Locktime Software
2014-07-01 14:44 - 2014-07-01 14:44 - 00000000 ____D () C:\Users\Denis\AppData\Roaming\Locktime
2014-07-01 14:44 - 2014-07-01 14:44 - 00000000 ____D () C:\ProgramData\Locktime
2014-07-01 14:43 - 2014-07-01 14:43 - 05911712 _____ (Locktime Software) C:\Users\Denis\Downloads\netlimiter-4.0.6.0.exe
2014-06-30 21:59 - 2014-04-21 22:10 - 00000000 ____D () C:\Users\Denis\AppData\Roaming\Skype
2014-06-29 13:25 - 2014-04-19 17:24 - 00000000 ____D () C:\Users\Denis\Documents\Diablo III
2014-06-28 18:31 - 2014-06-28 18:31 - 00461312 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnet.dll
2014-06-28 18:31 - 2014-06-28 18:31 - 00377856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnet.dll
2014-06-28 18:31 - 2014-06-28 18:31 - 00214016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dplayx.dll
2014-06-28 18:31 - 2014-06-28 18:31 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnathlp.dll
2014-06-28 18:31 - 2014-06-28 18:31 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnathlp.dll
2014-06-28 18:31 - 2014-06-28 18:31 - 00045056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpwsockx.dll
2014-06-28 18:31 - 2014-06-28 18:31 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnsvr.exe
2014-06-28 18:31 - 2014-06-28 18:31 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnsvr.exe
2014-06-28 18:31 - 2014-06-28 18:31 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dplaysvr.exe
2014-06-28 18:31 - 2014-06-28 18:31 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpmodemx.dll
2014-06-28 18:31 - 2014-06-28 18:31 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnhupnp.dll
2014-06-28 18:31 - 2014-06-28 18:31 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnhpast.dll
2014-06-28 18:31 - 2014-06-28 18:31 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnhupnp.dll
2014-06-28 18:31 - 2014-06-28 18:31 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnhpast.dll
2014-06-28 18:31 - 2013-08-22 17:20 - 00000000 ____D () C:\WINDOWS\CbsTemp
2014-06-24 18:53 - 2014-06-23 22:59 - 00000000 ____D () C:\Users\Denis\AppData\Roaming\dvdcss
2014-06-24 13:49 - 2014-04-26 14:29 - 00117712 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avgntflt.sys
2014-06-23 23:05 - 2014-06-23 23:05 - 00000000 ____D () C:\Users\Denis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\X Codec Pack 2.6.5
2014-06-23 23:05 - 2014-06-23 23:05 - 00000000 ____D () C:\Program Files\X Codec Pack
2014-06-23 23:05 - 2014-06-23 23:04 - 24419588 _____ () C:\Users\Denis\Downloads\X-Codec-Pack-2.6.5.exe
2014-06-23 22:59 - 2014-06-23 22:59 - 00000887 _____ () C:\Users\Public\Desktop\VLC media player.lnk
2014-06-23 22:59 - 2014-06-23 22:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2014-06-23 22:59 - 2014-06-23 22:59 - 00000000 ____D () C:\Program Files\VideoLAN
2014-06-23 22:58 - 2014-06-23 22:58 - 00961360 _____ (Chip Digital GmbH) C:\Users\Denis\Downloads\VLC media player 64 Bit - CHIP-Installer.exe
2014-06-23 22:55 - 2014-06-23 22:53 - 00000000 ____D () C:\Users\Denis\AppData\Roaming\Media Player Classic
2014-06-23 22:52 - 2014-06-23 22:52 - 00961360 _____ (Chip Digital GmbH) C:\Users\Denis\Downloads\mplayerc_20100214 - CHIP-Installer.exe
2014-06-21 14:32 - 2013-08-22 16:44 - 00352352 _____ () C:\WINDOWS\system32\FNTCACHE.DAT
2014-06-21 00:00 - 2014-06-20 23:58 - 00000000 ____D () C:\Users\Denis\Documents\RCT3
2014-06-20 23:58 - 2014-06-20 23:58 - 00000000 ____D () C:\Users\Denis\AppData\Roaming\Atari
2014-06-20 23:57 - 2014-06-20 23:57 - 00043520 _____ () C:\WINDOWS\SysWOW64\CmdLineExt03.dll
2014-06-20 23:56 - 2014-06-20 23:56 - 00000649 _____ () C:\Users\Public\Desktop\RollerCoaster Tycoon 3.lnk
2014-06-20 23:56 - 2014-06-20 23:56 - 00000000 ____D () C:\Users\Denis\AppData\Roaming\Leadertech
2014-06-20 23:56 - 2014-06-20 23:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Atari
2014-06-20 17:54 - 2014-06-20 17:44 - 00000000 ____D () C:\Users\Denis\AppData\Local\Uber Entertainment
2014-06-20 17:49 - 2014-06-20 17:49 - 29602248 _____ (Uber Entertainment) C:\Users\Denis\Downloads\PA_Setup.exe
2014-06-20 17:44 - 2014-06-20 17:44 - 00002927 _____ () C:\Users\Public\Desktop\PA Launcher.lnk
2014-06-20 17:44 - 2014-06-20 17:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Uber Entertainment
2014-06-19 15:32 - 2014-04-11 21:40 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-06-18 15:50 - 2014-06-18 15:49 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-06-18 15:18 - 2014-06-18 15:18 - 00000000 ____D () C:\Users\Denis\AppData\Roaming\.mono
2014-06-18 15:18 - 2014-06-18 15:18 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kerbal Space Program
2014-06-13 22:23 - 2013-08-22 17:36 - 00000000 ___RD () C:\WINDOWS\ToastData
2014-06-13 22:23 - 2013-08-22 17:36 - 00000000 ___RD () C:\WINDOWS\ImmersiveControlPanel
2014-06-13 22:23 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\WinStore
2014-06-13 22:23 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\system32\oobe
2014-06-13 20:06 - 2014-06-13 20:06 - 00000000 ____D () C:\Users\Denis\AppData\Local\Introversion
2014-06-13 15:54 - 2014-04-13 15:00 - 95414520 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2014-06-13 15:54 - 2014-04-13 15:00 - 00000000 ____D () C:\WINDOWS\system32\MRT
2014-06-13 15:12 - 2014-06-13 15:12 - 00195584 _____ (Microsoft Corporation) C:\WINDOWS\system32\msrating.dll
2014-06-13 15:12 - 2014-06-13 15:12 - 00164864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrating.dll
2014-06-13 15:12 - 2014-06-13 15:12 - 00139264 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieUnatt.exe
2014-06-13 15:12 - 2014-06-13 15:12 - 00112128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieUnatt.exe
2014-06-13 15:12 - 2014-06-13 15:12 - 00111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollector.exe
2014-06-13 15:12 - 2014-06-13 15:12 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll
2014-06-13 15:12 - 2014-06-13 15:12 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tsgqec.dll
2014-06-13 15:12 - 2014-06-13 15:12 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieetwproxystub.dll
2014-06-13 15:12 - 2014-06-13 15:12 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwproxystub.dll
2014-06-13 15:12 - 2014-06-13 15:12 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll
2014-06-13 15:12 - 2014-06-13 15:12 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll
2014-06-13 15:12 - 2014-06-13 15:12 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iernonce.dll
2014-06-13 15:12 - 2014-06-13 15:12 - 00004096 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollectorres.dll
Some content of TEMP:
====================
C:\Users\Denis\AppData\Local\Temp\avgnt.exe
C:\Users\Denis\AppData\Local\Temp\drm_dyndata_7370014.dll
C:\Users\Denis\AppData\Local\Temp\drm_dyndata_7380014.dll
C:\Users\Denis\AppData\Local\Temp\i4jdel0.exe
C:\Users\Denis\AppData\Local\Temp\jre-7u55-windows-i586-iftw.exe
C:\Users\Denis\AppData\Local\Temp\jre-7u60-windows-i586-iftw.exe
C:\Users\Denis\AppData\Local\Temp\Quarantine.exe
C:\Users\Denis\AppData\Local\Temp\SIntf16.dll
C:\Users\Denis\AppData\Local\Temp\SIntf32.dll
C:\Users\Denis\AppData\Local\Temp\SIntfNT.dll
C:\Users\Denis\AppData\Local\Temp\swt-win32-3349.dll
C:\Users\Denis\AppData\Local\Temp\tmpE653.tmp.exe
C:\Users\Helga\AppData\Local\Temp\avgnt.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2014-07-10 18:10
==================== End Of Log ============================
|
|
12.07.2014, 20:19
| #6 |
| /// the machine /// TB-Ausbilder | Internet langsam, Windows Defender, Avira schalten automatisch aus. Ordner Windows.old löschen. Fertig Die Reihenfolge ist hier entscheidend.
Falls Du Lob oder Kritik abgeben möchtest kannst Du das hier tun Hier noch ein paar Tipps zur Absicherung deines Systems. Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.
Anti- Viren Software
Zusätzlicher Schutz
Sicheres Browsen
Alternative Browser Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.
Performance Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC Halte dich fern von jedlichen Registry Cleanern. Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links Miekemoes Blogspot ( MVP ) Bill Castner ( MVP ) Don'ts
Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.
__________________ --> Internet langsam, Windows Defender, Avira schalten automatisch aus. |
|
12.07.2014, 20:36
| #7 |
| | Internet langsam, Windows Defender, Avira schalten automatisch aus. Danke, Fürs Pc bereinigen schnell und seriös . |
|
13.07.2014, 15:03
| #8 |
| /// the machine /// TB-Ausbilder | Internet langsam, Windows Defender, Avira schalten automatisch aus. Gern Geschehen
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
| Themen zu Internet langsam, Windows Defender, Avira schalten automatisch aus. |
| 4d36e972-e325-11ce-bfc1-08002be10318, amplitude, antivirus, avira, browser, computer, converter, desktop, dvdvideosoft ltd., ebanking, festplatte, firefox, flash player, help, installation, internet langsam, langsam, logfile, microsoft defender, mp3, pirates, registry, scan, security, server, software, svchost.exe, teamspeak, usb, virus, windows |
Linear-Darstellung
