|
Log-Analyse und Auswertung: Windows Vista 64 Bit: EXP/CVE-2011-2414.DWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
13.07.2014, 17:21 | #1 |
| Windows Vista 64 Bit: EXP/CVE-2011-2414.D Hey Leute, vielen Dank für eure Hilfe. Ihr macht einen richtig guten Job! Ich hab gestern Abend den Exploit "EXP/CVE-2011-2414.D" und vor ein paar Tagen "ADWARE/InstallCore.Gen9" auf meinem Rechner gefunden. Inwiefern diesen Dateien eine Gefahr für die Computersicherheit darstellen, kann ich leider nicht selbstständig beantworten, weswegen ich mich an euch wende. Noch eine kleine Anmerkung: Ich habe, meiner Meinung, nach sensible Informationen unkenntlich gemacht. Ich hoffe das geht in Ordnung. Leider sind die Logs anscheinend zu groß, weswegen ich eine Zip-Datei anhängen musste. Danke für eure Hilfe! |
13.07.2014, 17:35 | #2 |
/// Winkelfunktion /// TB-Süch-Tiger™ | Windows Vista 64 Bit: EXP/CVE-2011-2414.D Hi und
__________________Logs bitte nicht anhängen, notfalls splitten und über mehrere Postings verteilt posten Lesestoff: Posten in CODE-Tags Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR oder 7Z-Archiv zu packen erschwert mir massiv die Arbeit. Auch wenn die Logs für einen Beitrag zu groß sein sollten, bitte ich dich die Logs direkt und notfalls über mehrere Beiträge verteilt zu posten. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
__________________ |
15.07.2014, 12:07 | #3 |
| Windows Vista 64 Bit: EXP/CVE-2011-2414.D Nun folgen die Logs:
__________________Ereignisse von Antivir: Code:
ATTFilter Exportierte Ereignisse: 12.07.2014 22:40 [System-Scanner] Malware gefunden Die Datei 'C:\ProgramData\**********\Content\data\99\0\9903392a451e5063e098e4a6ff025fb7cd3da3d0' enthielt einen Virus oder unerwünschtes Programm 'EXP/CVE-2011-2414.D' [exploit]. Durchgeführte Aktion(en): Eine Sicherungskopie wurde unter dem Namen 57e73f2a.qua erstellt ( QUARANTÄNE ). Die Datei wurde gelöscht. 12.07.2014 22:15 [Echtzeit-Scanner] Malware gefunden In der Datei 'C:\ProgramData\**********\Content\data\99\0\9903392a451e5063e098e4a6ff025fb7cd3da3d0' wurde ein Virus oder unerwünschtes Programm 'EXP/CVE-2011-2414.D' [exploit] gefunden. Ausgeführte Aktion: Übergeben an Scanner 10.07.2014 13:46 [System-Scanner] Malware gefunden Die Datei 'C:\Users\Cyberstation\AppData\Local\Temp\JDSetup130459463820817068.exe' enthielt einen Virus oder unerwünschtes Programm 'ADWARE/InstallCore.Gen9' [adware]. Durchgeführte Aktion(en): Die Datei wurde gelöscht. 10.07.2014 13:46 [System-Scanner] Malware gefunden Die Datei 'C:\Users\Cyberstation\AppData\Local\Temp\JDSetup130459454121741068.exe' enthielt einen Virus oder unerwünschtes Programm 'ADWARE/InstallCore.Gen9' [adware]. Durchgeführte Aktion(en): Die Datei wurde gelöscht. Defogger_disable: Code:
ATTFilter defogger_disable by jpshortstuff (23.02.10.1) Log created at 15:29 on 13/07/2014 (Cyberstation) Checking for autostart values... HKCU\~\Run values retrieved. HKLM\~\Run values retrieved. Checking for services/drivers... SPTD -> Disabled (Service running -> reboot required) -=E.O.F=- Code:
ATTFilter GMER 2.1.19357 - hxxp://www.gmer.net Rootkit scan 2014-07-13 16:27:05 Windows 6.0.6002 Service Pack 2 x64 \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T1L0-3 SAMSUNG_HD322HJ rev.1AC01113 298,09GB Running: Gmer-19357.exe; Driver: C:\Users\CYBERS~1\AppData\Local\Temp\ufkyrpoc.sys ---- Kernel code sections - GMER 2.1 ---- INITKDBG C:\Windows\system32\ntoskrnl.exe suspicious modification INITKDBG C:\Windows\system32\ntoskrnl.exe suspicious modification INITKDBG C:\Windows\system32\ntoskrnl.exe suspicious modification INITKDBG C:\Windows\system32\ntoskrnl.exe suspicious modification INITKDBG C:\Windows\system32\ntoskrnl.exe suspicious modification ---- Processes - GMER 2.1 ---- Library C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{E4358E82-58D5-42C5-9C29-D9E2F502F6CC}\mpengine.dll (*** suspicious ***) @ C:\Windows\System32\svchost.exe [856] (Microsoft Malware Protection Engine/Microsoft Corporation)(2014-07-11 07:39:05) 000007fefb370000 Library C:\Users\Cyberstation\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (*** suspicious ***) @ C:\Windows\Explorer.EXE [2764] (Dropbox Shell Extension/Dropbox, Inc.)(2013-09-11 02:09:56) 000007fef8210000 Process C:\Users\Cyberstation\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe (*** suspicious ***) @ C:\Users\Cyberstation\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [3032] (SpotifyWebHelper/Spotify Ltd)(2014-05-30 18:20:41) 0000000000400000 Process C:\Users\Cyberstation\AppData\Roaming\Dropbox\bin\Dropbox.exe (*** suspicious ***) @ C:\Users\Cyberstation\AppData\Roaming\Dropbox\bin\Dropbox.exe [3048] (Dropbox/Dropbox, Inc.)(2014-05-20 00:45:22) 0000000000400000 Library C:\Users\Cyberstation\AppData\Roaming\Dropbox\bin\wxmsw28uh_vc.dll (*** suspicious ***) @ C:\Users\Cyberstation\AppData\Roaming\Dropbox\bin\Dropbox.exe [3048](2014-01-03 01:09:26) 0000000004030000 Library c:\users\cybers~1\appdata\local\temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpuzov5s.dll (*** suspicious ***) @ C:\Users\Cyberstation\AppData\Roaming\Dropbox\bin\Dropbox.exe [3048](2014-07-13 13:32:19) 00000000055d0000 Library C:\Users\Cyberstation\AppData\Roaming\Dropbox\bin\libcef.dll (*** suspicious ***) @ C:\Users\Cyberstation\AppData\Roaming\Dropbox\bin\Dropbox.exe [3048](2013-08-23 19:01:44) 0000000052b90000 Library C:\Users\Cyberstation\AppData\Roaming\Dropbox\bin\icudt.dll (*** suspicious ***) @ C:\Users\Cyberstation\AppData\Roaming\Dropbox\bin\Dropbox.exe [3048] (ICU Data DLL/The ICU Project)(2013-08-23 19:01:42) 0000000054b80000 ---- Registry - GMER 2.1 ---- Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@p0 C:\Program Files (x86)\DAEMON Tools Lite\ Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@u0 0x00 0x00 0x00 0x00 ... Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@h0 0 Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@hdf12 0xDE 0x8F 0x39 0x11 ... Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001 Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@a0 0xA0 0x02 0x00 0x00 ... Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@hdf12 0xFD 0xB3 0x24 0x17 ... Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0 Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0@hdf12 0xC5 0x65 0x7F 0xED ... Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC (not active ControlSet) Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@p0 C:\Program Files (x86)\DAEMON Tools Lite\ Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@u0 0x00 0x00 0x00 0x00 ... Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@h0 0 Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@hdf12 0xDE 0x8F 0x39 0x11 ... Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001 (not active ControlSet) Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@a0 0xA0 0x02 0x00 0x00 ... Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@hdf12 0xFD 0xB3 0x24 0x17 ... Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0 (not active ControlSet) Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0@hdf12 0xC5 0x65 0x7F 0xED ... ---- EOF - GMER 2.1 ---- Addition: Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 13-07-2014 Ran by Cyberstation at 2014-07-13 15:36:15 Running from C:\Users\Cyberstation\Downloads Boot Mode: Normal ========================================================== ==================== Security Center ======================== AV: Avira Desktop (Disabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859} AS: Avira Desktop (Disabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4} AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ==================== Installed Programs ====================== Add or Remove Adobe Creative Suite 3 Design Premium (HKLM-x32\...\Adobe_c14ac4070fd9614ffe63f4bb533db2c) (Version: 1.0 - Adobe Systems Incorporated) Adobe Anchor Service CS3 (x32 Version: 1.0 - Adobe Systems Incorporated) Hidden Adobe Asset Services CS3 (x32 Version: 3 - Adobe Systems Incorporated) Hidden Adobe Bridge CS3 (x32 Version: 2 - Adobe Systems Incorporated) Hidden Adobe Bridge Start Meeting (x32 Version: 1.0 - Adobe Systems Incorporated) Hidden Adobe BridgeTalk Plugin CS3 (x32 Version: 1.0 - Adobe Systems Incorporated) Hidden Adobe Camera Raw 4.0 (x32 Version: 4.0 - Adobe Systems Incorporated) Hidden Adobe CMaps (x32 Version: 1.0 - Adobe Systems Incorporated) Hidden Adobe Color - Photoshop Specific (x32 Version: 1.0 - Adobe Systems Incorporated) Hidden Adobe Color Common Settings (x32 Version: 1.0 - Adobe Systems Incorporated) Hidden Adobe Color EU Extra Settings (x32 Version: 1.0 - Adobe Systems Incorporated) Hidden Adobe Color JA Extra Settings (x32 Version: 1.0 - Adobe Systems Incorporated) Hidden Adobe Color NA Recommended Settings (x32 Version: 1.0 - Adobe Systems Incorporated) Hidden Adobe Creative Suite 3 Design Premium (x32 Version: 1.0 - Adobe Systems Incorporated) Hidden Adobe Default Language CS3 (x32 Version: 1.0 - Adobe Systems Incorporated) Hidden Adobe Device Central CS3 (x32 Version: 1.0 - Adobe Systems Incorporated) Hidden Adobe Dreamweaver CS3 (x32 Version: 9 - Adobe Systems Incorporated) Hidden Adobe ExtendScript Toolkit 2 (x32 Version: 2.0 - Adobe Systems Incorporated) Hidden Adobe Extension Manager CS3 (x32 Version: 1.8 - Adobe Systems Incorporated) Hidden Adobe Flash CS3 (x32 Version: 9.0 - Adobe Systems Incorporated) Hidden Adobe Flash Player 14 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 14.0.0.125 - Adobe Systems Incorporated) Adobe Flash Video Encoder (x32 Version: 2.0 - Adobe Systems Incorporated) Hidden Adobe Fonts All (x32 Version: 1.0 - Adobe Systems Incorporated) Hidden Adobe Help Viewer CS3 (x32 Version: 1 - Adobe Systems Incorporated) Hidden Adobe Illustrator CS3 (x32 Version: 13.0 - Adobe Systems Incorporated) Hidden Adobe InDesign CS3 (x32 Version: 5.0 - Adobe Systems Incorporated) Hidden Adobe InDesign CS3 Icon Handler (x32 Version: 5.0 - Adobe Systems Incorporated) Hidden Adobe Linguistics CS3 (x32 Version: 3.0.0 - Adobe Systems Incorporated) Hidden Adobe MotionPicture Color Files (x32 Version: 1.0 - Adobe Systems Incorporated) Hidden Adobe PDF Library Files (x32 Version: 8.0 - Adobe Systems Incorporated) Hidden Adobe Photoshop CS3 (x32 Version: 10 - Adobe Systems Incorporated) Hidden Adobe Reader X (10.1.4) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AA1000000001}) (Version: 10.1.4 - Adobe Systems Incorporated) Adobe Setup (x32 Version: 1.0 - Adobe Systems Incorporated) Hidden Adobe SING CS3 (x32 Version: 0.1 - Adobe Systems Incorporated) Hidden Adobe Stock Photos CS3 (x32 Version: 1.5 - Adobe Systems Incorporated) Hidden Adobe Type Support (x32 Version: 1.0 - Adobe Systems Incorporated) Hidden Adobe Update Manager CS3 (x32 Version: 5.1.0 - Adobe Systems Incorporated) Hidden Adobe Version Cue CS3 Client (x32 Version: 3 - Adobe Systems Incorporated) Hidden Adobe Version Cue CS3 Server (x32 Version: 3.0 - Adobe Systems Incorporated) Hidden Adobe WAS CS3 (x32 Version: 1.0 - Adobe Systems Incorporated) Hidden Adobe WinSoft Linguistics Plugin (x32 Version: 1.0 - Adobe Systems Incorporated) Hidden Adobe XMP Panels CS3 (x32 Version: 1.0 - Adobe Systems Incorporated) Hidden AHV content for Acrobat and Flash (x32 Version: 1 - Adobe Systems Incorporated) Hidden AMD Catalyst Install Manager (HKLM\...\{37FCE154-7F59-74F0-3A35-BF503CEB230B}) (Version: 8.0.877.0 - Advanced Micro Devices, Inc.) Apple Application Support (HKLM-x32\...\{D9DAD0FF-495A-472B-9F10-BAE430A26682}) (Version: 3.0.3 - Apple Inc.) Apple Mobile Device Support (HKLM\...\{787136D2-F0F8-4625-AA3F-72D7795AC842}) (Version: 7.1.1.3 - Apple Inc.) Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.) Atheros Communications Inc.(R) AR8121/AR8113/AR8114 Gigabit/Fast Ethernet Driver (HKLM-x32\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 1.0.0.34 - Atheros Communications Inc.) Avira Free Antivirus (HKLM-x32\...\Avira AntiVir Desktop) (Version: 14.0.5.464 - Avira) Bing-Desktop (HKLM-x32\...\{7D095455-D971-4D4C-9EFD-9AF6A6584F3A}) (Version: 1.3.466.0 - Microsoft Corporation) Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.) calibre (HKLM-x32\...\{59DC1BC4-08BC-466C-91E7-642C2EAAABF1}) (Version: 1.44.0 - Kovid Goyal) Catalyst Control Center - Branding (x32 Version: 1.00.0000 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center (x32 Version: 2013.0429.2313.39747 - Ihr Firmenname) Hidden Catalyst Control Center Graphics Previews Common (x32 Version: 2013.0429.2313.39747 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center InstallProxy (x32 Version: 2013.0429.2313.39747 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Localization All (x32 Version: 2013.0429.2313.39747 - Advanced Micro Devices, Inc.) Hidden CCC Help Chinese Standard (x32 Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden CCC Help Chinese Traditional (x32 Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden CCC Help Czech (x32 Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden CCC Help Danish (x32 Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden CCC Help Dutch (x32 Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden CCC Help English (x32 Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden CCC Help Finnish (x32 Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden CCC Help French (x32 Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden CCC Help German (x32 Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden CCC Help Greek (x32 Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden CCC Help Hungarian (x32 Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden CCC Help Italian (x32 Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden CCC Help Japanese (x32 Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden CCC Help Korean (x32 Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden CCC Help Norwegian (x32 Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden CCC Help Polish (x32 Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden CCC Help Portuguese (x32 Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden CCC Help Russian (x32 Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden CCC Help Spanish (x32 Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden CCC Help Swedish (x32 Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden CCC Help Thai (x32 Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden CCC Help Turkish (x32 Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden ccc-utility64 (Version: 2013.0429.2313.39747 - Advanced Micro Devices, Inc.) Hidden Cisco AnyConnect Secure Mobility Client (HKLM-x32\...\Cisco AnyConnect Secure Mobility Client) (Version: 3.1.05152 - Cisco Systems, Inc.) Cisco AnyConnect Secure Mobility Client (x32 Version: 3.1.05152 - Cisco Systems, Inc.) Hidden DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.47.1.0333 - Disc Soft Ltd) Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{5C78021E-3C8E-4EDF-97EA-E9B8D808FD6D}) (Version: - Microsoft) Dota 2 (HKLM-x32\...\Steam App 570) (Version: - Valve) Dropbox (HKCU\...\Dropbox) (Version: 2.8.2 - Dropbox, Inc.) Druckerdeinstallation für EPSON SX110 Series (HKLM\...\EPSON SX110 Series) (Version: - SEIKO EPSON Corporation) EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version: - ) Epson Stylus SX110_TX110 Handbuch (HKLM-x32\...\Epson Stylus SX110_TX110 Benutzerhandbuch) (Version: - ) EPU-6 Engine (HKLM-x32\...\{56B83336-FBC1-4C46-8613-90A9E3B440D6}) (Version: 1.00.16 - ) FileZilla Client 3.8.1 (HKCU\...\FileZilla Client) (Version: 3.8.1 - Tim Kosse) Google Chrome (HKLM-x32\...\Google Chrome) (Version: 35.0.1916.153 - Google Inc.) Google Update Helper (x32 Version: 1.3.24.15 - Google Inc.) Hidden Greenshot 1.1.9.13 (HKLM\...\Greenshot_is1) (Version: 1.1.9.13 - Greenshot) iTunes (HKLM\...\{5A68A656-979F-4168-8795-E2E368AA4DC2}) (Version: 11.2.2.3 - Apple Inc.) Java 7 Update 60 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F03217060FF}) (Version: 7.0.600 - Oracle) Java Auto Updater (x32 Version: 2.1.60.19 - Oracle, Inc.) Hidden JDownloader 0.9 (HKLM-x32\...\5513-1208-7298-9440) (Version: 0.9 - AppWork GmbH) marvell 61xx (HKLM-x32\...\mv61xxDriver) (Version: 1.2.0.57 - Marvell) Microsoft .NET Framework 3.5 Language Pack SP1 - DEU (HKLM\...\Microsoft .NET Framework 3.5 Language Pack SP1 - deu) (Version: - Microsoft Corporation) Microsoft .NET Framework 3.5 Language Pack SP1 - deu (Version: 3.5.30729 - Microsoft Corporation) Hidden Microsoft .NET Framework 3.5 SP1 (HKLM\...\Microsoft .NET Framework 3.5 SP1) (Version: - Microsoft Corporation) Microsoft .NET Framework 3.5 SP1 (Version: 3.5.30729 - Microsoft Corporation) Hidden Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden Microsoft Office Access MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Excel MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Groove MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office InfoPath MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Office 64-bit Components 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office OneNote MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Outlook Connector (HKLM-x32\...\{95140000-0081-0407-0000-0000000FF1CE}) (Version: 14.0.6123.5001 - Microsoft Corporation) Microsoft Office Outlook MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office PowerPoint MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Professional Plus 2010 (HKLM-x32\...\Office14.PROPLUS) (Version: 14.0.7015.1000 - Microsoft Corporation) Microsoft Office Professional Plus 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (English) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (French) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (Italian) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Proofing (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Publisher MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Shared 64-bit MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Shared MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Word MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Silverlight (HKLM-x32\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319 (HKLM\...\{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Mozilla Firefox 30.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 30.0 (x86 de)) (Version: 30.0 - Mozilla) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 30.0 - Mozilla) OpenAL (HKLM-x32\...\OpenAL) (Version: - ) Pando Media Booster (HKLM-x32\...\{980A182F-E0A2-4A40-94C1-AE0C1235902E}) (Version: 2.6.0.7 - Pando Networks Inc.) PDF Settings (x32 Version: 1.0 - Adobe Systems Incorporated) Hidden PDF24 Creator 6.4.1 (HKLM-x32\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version: - PDF24.org) Rosetta Stone Version 3 (HKLM-x32\...\{99011A6E-5200-11DE-BDB8-7ACD56D89593}) (Version: 3.4.5.0 - Rosetta Stone Ltd.) Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version: - Microsoft) Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (x32 Version: - Microsoft) Hidden Skype™ 6.16 (HKLM-x32\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.16.105 - Skype Technologies S.A.) Sound Blaster X-Fi (HKLM-x32\...\{18F11181-EA1A-42AE-AF89-4867C7F7A6FA}) (Version: 1.0 - ) Spotify (HKCU\...\Spotify) (Version: 0.9.10.22.gf87988f9 - Spotify AB) Update for Microsoft .NET Framework 3.5 SP1 (KB963707) (HKLM-x32\...\{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB963707) (Version: 1 - Microsoft Corporation) Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{B4A38370-2ADB-46B0-A1B0-0C4A2F7DCA31}) (Version: - Microsoft) Update for Microsoft Excel 2010 (KB2837600) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{4ACD847E-547D-493F-9A86-F73EAE1B5174}) (Version: - Microsoft) Update for Microsoft Filter Pack 2.0 (KB2878281) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{302A8FE3-EBF5-486C-A431-16A1CD914443}) (Version: - Microsoft) Update for Microsoft Filter Pack 2.0 (KB2878281) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.PROPLUS_{302A8FE3-EBF5-486C-A431-16A1CD914443}) (Version: - Microsoft) Update for Microsoft InfoPath 2010 (KB2817369) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{4EEA3D3E-989C-4DF4-AB0A-3042C0C12AA3}) (Version: - Microsoft) Update for Microsoft InfoPath 2010 (KB2817396) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{39767ECA-1731-45DB-AB5B-6BF40E151D66}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{DADF7E25-FFA4-4D02-BE84-1DAE62C18516}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.PROPLUS_{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{287A1E92-9E41-4BC1-8920-B3D0E9220800}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{9D69691D-823D-4C3E-9B12-563A3F520366}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{ECFE33A3-B8B7-439A-ADE4-59FBD29EF9B8}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.PROPLUS_{ECFE33A3-B8B7-439A-ADE4-59FBD29EF9B8}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{5AA578BB-759C-40FD-9661-A737C0884541}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2825635) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{F1A20C69-9FE5-40FD-9CD5-84EABC2EF64A}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2825640) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{BA610006-2C39-4419-9834-CF61AB24810A}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2837581) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{334FB202-28D7-4BA4-8BC9-4FE4AB233EA0}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2837606) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{B0D672F7-883E-4279-8E75-D97A5445AB46}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2878252) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{B0DB9F71-E0F7-4FE6-8925-35B860CAC0C4}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2881028) 32-Bit Edition (HKLM-x32\...\{90140000-001F-0407-0000-0000000FF1CE}_Office14.PROPLUS_{EAD7BEF9-B28C-425F-B2C5-538CB27EF013}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2881028) 32-Bit Edition (HKLM-x32\...\{90140000-001F-0409-0000-0000000FF1CE}_Office14.PROPLUS_{C0BDC1DE-C35E-422B-8CBD-C1D555468720}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2881028) 32-Bit Edition (HKLM-x32\...\{90140000-001F-040C-0000-0000000FF1CE}_Office14.PROPLUS_{089DBFD7-8211-43B2-AAAE-5BDD8C23E3A8}) (Version: - Microsoft) Update for Microsoft OneNote 2010 (KB2837595) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{51CCA922-A0CC-47C4-8910-6936D97CAC2E}) (Version: - Microsoft) Update for Microsoft OneNote 2010 (KB2837595) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.PROPLUS_{51CCA922-A0CC-47C4-8910-6936D97CAC2E}) (Version: - Microsoft) Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{2AB483F1-C86E-427A-83B4-23889B03512D}) (Version: - Microsoft) Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition (HKLM-x32\...\{90140000-001A-0407-0000-0000000FF1CE}_Office14.PROPLUS_{A0657506-69DC-44AE-8DC1-58E7C6F5B1C9}) (Version: - Microsoft) Update for Microsoft PowerPoint 2010 (KB2837579) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{2BA40F82-F3A4-441C-BF1A-ED4C42FF4872}) (Version: - Microsoft) Update for Microsoft PowerPoint 2010 (KB2837579) 32-Bit Edition (HKLM-x32\...\{90140000-0018-0407-0000-0000000FF1CE}_Office14.PROPLUS_{40EC8FB1-5202-469D-9232-C28FB1C6FC64}) (Version: - Microsoft) Update for Microsoft SharePoint Workspace 2010 (KB2760601) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{F9F5A080-AF38-4966-9A6B-C43DCA465035}) (Version: - Microsoft) Update for Microsoft SharePoint Workspace 2010 (KB2760601) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.PROPLUS_{F9F5A080-AF38-4966-9A6B-C43DCA465035}) (Version: - Microsoft) Update for Microsoft Visio 2010 (KB2880526) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{7B29D8B8-6A87-496C-A65E-B935E740448A}) (Version: - Microsoft) Update for Microsoft Visio Viewer 2010 (KB2837587) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{38CF30E4-3348-4BD1-A859-B630C355A56F}) (Version: - Microsoft) Update for Microsoft Word 2010 (KB2880529) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{B9B89E01-5B6B-4F73-BC34-B2C0D8ACB4CD}) (Version: - Microsoft) VLC media player 2.0.6 (HKLM-x32\...\VLC media player) (Version: 2.0.6 - VideoLAN) WinHTTrack Website Copier 3.48-10 (HKLM-x32\...\WinHTTrack Website Copier_is1) (Version: 3.48.10 - HTTrack) WinRAR 4.20 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 4.20.0 - win.rar GmbH) Wise Registry Cleaner 7.67 (HKLM-x32\...\Wise Registry Cleaner_is1) (Version: - WiseCleaner.com, Inc.) ==================== Restore Points ========================= 07-07-2014 09:30:16 Geplanter Prüfpunkt 08-07-2014 18:33:59 Geplanter Prüfpunkt 09-07-2014 14:35:41 Geplanter Prüfpunkt 10-07-2014 07:19:30 Windows Update 11-07-2014 15:26:27 Geplanter Prüfpunkt 12-07-2014 13:15:01 Geplanter Prüfpunkt 12-07-2014 13:46:17 Installed calibre 13-07-2014 12:29:51 Geplanter Prüfpunkt ==================== Hosts content: ========================== 2006-11-02 14:34 - 2006-09-18 23:37 - 00000761 ____A C:\Windows\system32\Drivers\etc\hosts 127.0.0.1 localhost ::1 localhost ==================== Scheduled Tasks (whitelisted) ============= Task: {0AEAFAF6-F116-4A60-AFB4-C8B755A6E975} - System32\Tasks\Microsoft\Windows\MobilePC\TMM Task: {192DDA2D-5815-47B8-983F-65744FEEC03A} - System32\Tasks\Microsoft\Windows\Shell\CrawlStartPages Task: {240BD6BF-CEB2-4FA9-B405-4226B14F7946} - System32\Tasks\Microsoft\Windows\Tcpip\WSHReset => C:\Windows\system32\netsh.exe [2006-11-02] (Microsoft Corporation) Task: {254095AE-FB97-48EA-94A5-D8BF2AB79714} - System32\Tasks\Microsoft\Windows\RAC\RACAgent => C:\Windows\system32\RacAgent.exe [2008-01-21] (Microsoft Corporation) Task: {40EEDC7C-D5E9-4F2A-A82E-FFC0A55077BC} - System32\Tasks\Microsoft\Windows Defender\MP Scheduled Signature Update => c:\program files\windows defender\MpCmdRun.exe [2008-01-21] (Microsoft Corporation) Task: {4E946E6C-49EC-4FD9-8F58-EB5AF1752C5D} - System32\Tasks\Microsoft\Windows\PLA\System\ConvertLogEntries => Rundll32.exe %windir%\system32\pla.dll,PlaConvertLogEntries Task: {6D6A5FC9-E93E-4B56-ACFB-6DBE710CFF8E} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-06-11] (Google Inc.) Task: {6F3F40E2-EE0C-4F32-9BED-816B8FEFDCA6} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-06-11] (Google Inc.) Task: {7C638E5B-ECE5-4424-A7E5-2C913CA682E9} - System32\Tasks\Microsoft\Windows\NetworkAccessProtection\NAPStatus UI Task: {929B3367-CEE2-44F5-9143-310A111603D3} - System32\Tasks\ASUS\ASUS SIX Engine => C:\Program Files\ASUS\Six Engine\SixEngine.exe [2008-06-03] () Task: {98CB5F42-C3E7-490F-BC57-D1076A962D2B} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.) Task: {E91D6474-70CC-42BE-80FF-8BED8AF557ED} - System32\Tasks\Microsoft\Windows\Wireless\GatherWirelessInfo => C:\Windows\system32\gatherWirelessInfo.vbs [2008-01-21] () Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe ==================== Loaded Modules (whitelisted) ============= 2013-04-30 04:46 - 2013-04-30 04:46 - 00045056 _____ () C:\Windows\system32\atitmp64.dll 2013-09-05 00:17 - 2013-09-05 00:17 - 04300456 _____ () C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF 2014-05-01 21:29 - 2014-05-01 21:29 - 00098304 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext_64.dll 2014-05-30 18:43 - 2008-06-03 01:06 - 05964800 _____ () C:\Program Files\ASUS\Six Engine\SixEngine.exe 2013-06-18 15:49 - 2013-06-18 15:49 - 00016384 _____ () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Branding\Branding.dll 2013-04-29 23:08 - 2013-04-29 23:08 - 00369152 _____ () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll 2014-05-30 20:20 - 2014-06-27 22:20 - 00598072 _____ () C:\Users\Cyberstation\AppData\Roaming\Spotify\Data\SpotifyHelper.exe 2013-12-13 00:36 - 2013-12-13 00:36 - 00063376 _____ () C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\zlib1.dll 2014-04-23 16:05 - 2014-04-23 16:05 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll 2014-04-23 16:04 - 2014-04-23 16:04 - 01044808 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll 2014-05-30 18:43 - 2005-05-11 16:39 - 00565248 _____ () C:\Program Files\ASUS\Six Engine\pngio.dll 2014-05-30 18:43 - 2008-04-15 10:07 - 00053248 _____ () C:\Program Files\ASUS\Six Engine\AsSpindownTimeout.dll 2014-05-30 20:20 - 2014-06-27 22:19 - 36966968 _____ () C:\Users\Cyberstation\AppData\Roaming\Spotify\Data\libcef.dll 2014-07-13 15:32 - 2014-07-13 15:32 - 00043008 _____ () c:\Users\Cyberstation\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpuzov5s.dll 2013-08-23 21:01 - 2013-08-23 21:01 - 25100288 _____ () C:\Users\Cyberstation\AppData\Roaming\Dropbox\bin\libcef.dll 2013-09-05 00:14 - 2013-09-05 00:14 - 04300456 _____ () C:\Program Files (x86)\Common Files\Microsoft Shared\office14\Cultures\office.odf 2013-02-14 15:46 - 2013-02-14 15:46 - 01044048 _____ () C:\Program Files (x86)\Microsoft Office\Office14\ADDINS\UmOutlookAddin.dll 2014-05-30 20:31 - 2006-06-09 09:20 - 00003072 _____ () C:\Windows\system32\CTXFIGER.DLL 2014-05-30 20:30 - 2009-03-26 14:46 - 00148480 _____ () C:\Windows\SysWOW64\APOMngr.DLL 2014-05-30 19:38 - 2014-06-18 09:42 - 03852912 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll 2013-09-05 00:14 - 2013-09-05 00:14 - 04300456 _____ () C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF 2014-05-30 20:20 - 2014-06-27 22:20 - 00886840 _____ () C:\Users\Cyberstation\AppData\Roaming\Spotify\Data\libglesv2.dll 2014-05-30 20:20 - 2014-06-27 22:19 - 00108600 _____ () C:\Users\Cyberstation\AppData\Roaming\Spotify\Data\libegl.dll ==================== Alternate Data Streams (whitelisted) ========= ==================== Safe Mode (whitelisted) =================== ==================== EXE Association (whitelisted) ============= ==================== MSCONFIG/TASK MANAGER disabled items ========= MSCONFIG\startupfolder: C:^Users^Cyberstation^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Dropbox.lnk => C:\Windows\pss\Dropbox.lnk.Startup MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" MSCONFIG\startupreg: Adobe_ID0EYTHM => C:\PROGRA~2\COMMON~1\Adobe\ADOBEV~1\Server\bin\VERSIO~2.EXE MSCONFIG\startupreg: APSDaemon => "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" MSCONFIG\startupreg: Cisco AnyConnect Secure Mobility Agent for Windows => "C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe" -minimized MSCONFIG\startupreg: DAEMON Tools Lite => "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun MSCONFIG\startupreg: iTunesHelper => "C:\Program Files (x86)\iTunes\iTunesHelper.exe" MSCONFIG\startupreg: PDFPrint => "C:\Program Files (x86)\PDF24\pdf24.exe" ==================== Faulty Device Manager Devices ============= Name: Cisco AnyConnect Secure Mobility Client Virtual Miniport Adapter for Windows x64 Description: Cisco AnyConnect Secure Mobility Client Virtual Miniport Adapter for Windows x64 Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Cisco Systems Service: vpnva Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. ==================== Event log errors: ========================= Application errors: ================== Error: (07/13/2014 03:32:08 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (07/13/2014 11:25:35 AM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (07/12/2014 09:36:41 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (07/12/2014 08:52:49 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (07/12/2014 03:49:33 PM) (Source: Windows Search Service) (EventID: 3013) (User: ) Description: Eintrag <C:\USERS\CYBERSTATION\DOCUMENTS\CALIBRE-BIBLIOTHEK\METADATA.DB-JOURNAL> in der Hash-Zuordnung kann nicht aktualisiert werden. Kontext: Anwendung, SystemIndex Katalog Details: Ein an das System angeschlossenes Gerät funktioniert nicht. (0x8007001f) Error: (07/12/2014 03:49:28 PM) (Source: Windows Search Service) (EventID: 3013) (User: ) Description: Eintrag <C:\USERS\CYBERSTATION\DOCUMENTS\CALIBRE-BIBLIOTHEK\METADATA.DB-JOURNAL> in der Hash-Zuordnung kann nicht aktualisiert werden. Kontext: Anwendung, SystemIndex Katalog Details: Ein an das System angeschlossenes Gerät funktioniert nicht. (0x8007001f) Error: (07/12/2014 11:43:16 AM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (07/11/2014 09:32:44 AM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (07/10/2014 07:51:24 PM) (Source: RasClient) (EventID: 20227) (User: ) Description: CoID={354358F9-36B2-4708-8532-F17A93A49B69}: Der Benutzer "Cyberstation-PC\Cyberstation" hat eine Verbindung mit dem Namen "*********" gewählt, die Verbindung konnte jedoch nicht hergestellt werden. Der durch den Fehler zurückgegebene Ursachencode lautet: 0. Error: (07/10/2014 04:04:37 PM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Task Scheduling Error: m->NextScheduledSPRetry 5055 System errors: ============= Error: (07/12/2014 03:36:55 PM) (Source: Server) (EventID: 2505) (User: ) Description: Aufgrund eines doppelten Netzwerknamens konnte zu der Transportschicht \Device\NetBT_Tcpip_{29C601DC-1189-4392-BD5A-D4A292B8BE64} vom Serverdienst nicht gebunden werden. Der Serverdienst konnte nicht gestartet werden. Error: (07/12/2014 03:36:50 PM) (Source: Server) (EventID: 2505) (User: ) Description: Aufgrund eines doppelten Netzwerknamens konnte zu der Transportschicht \Device\NetBT_Tcpip_{29C601DC-1189-4392-BD5A-D4A292B8BE64} vom Serverdienst nicht gebunden werden. Der Serverdienst konnte nicht gestartet werden. Error: (07/11/2014 11:53:11 AM) (Source: Server) (EventID: 2505) (User: ) Description: Aufgrund eines doppelten Netzwerknamens konnte zu der Transportschicht \Device\NetBT_Tcpip_{29C601DC-1189-4392-BD5A-D4A292B8BE64} vom Serverdienst nicht gebunden werden. Der Serverdienst konnte nicht gestartet werden. Error: (07/11/2014 11:53:06 AM) (Source: Server) (EventID: 2505) (User: ) Description: Aufgrund eines doppelten Netzwerknamens konnte zu der Transportschicht \Device\NetBT_Tcpip_{29C601DC-1189-4392-BD5A-D4A292B8BE64} vom Serverdienst nicht gebunden werden. Der Serverdienst konnte nicht gestartet werden. Error: (07/11/2014 11:53:05 AM) (Source: Server) (EventID: 2505) (User: ) Description: Aufgrund eines doppelten Netzwerknamens konnte zu der Transportschicht \Device\NetBT_Tcpip_{29C601DC-1189-4392-BD5A-D4A292B8BE64} vom Serverdienst nicht gebunden werden. Der Serverdienst konnte nicht gestartet werden. Error: (07/11/2014 11:53:04 AM) (Source: Server) (EventID: 2505) (User: ) Description: Aufgrund eines doppelten Netzwerknamens konnte zu der Transportschicht \Device\NetBT_Tcpip_{29C601DC-1189-4392-BD5A-D4A292B8BE64} vom Serverdienst nicht gebunden werden. Der Serverdienst konnte nicht gestartet werden. Error: (07/10/2014 07:52:12 PM) (Source: Server) (EventID: 2505) (User: ) Description: Aufgrund eines doppelten Netzwerknamens konnte zu der Transportschicht \Device\NetBT_Tcpip_{29C601DC-1189-4392-BD5A-D4A292B8BE64} vom Serverdienst nicht gebunden werden. Der Serverdienst konnte nicht gestartet werden. Error: (07/10/2014 07:52:07 PM) (Source: Server) (EventID: 2505) (User: ) Description: Aufgrund eines doppelten Netzwerknamens konnte zu der Transportschicht \Device\NetBT_Tcpip_{29C601DC-1189-4392-BD5A-D4A292B8BE64} vom Serverdienst nicht gebunden werden. Der Serverdienst konnte nicht gestartet werden. Error: (07/10/2014 07:52:06 PM) (Source: Server) (EventID: 2505) (User: ) Description: Aufgrund eines doppelten Netzwerknamens konnte zu der Transportschicht \Device\NetBT_Tcpip_{29C601DC-1189-4392-BD5A-D4A292B8BE64} vom Serverdienst nicht gebunden werden. Der Serverdienst konnte nicht gestartet werden. Error: (07/10/2014 07:52:05 PM) (Source: Server) (EventID: 2505) (User: ) Description: Aufgrund eines doppelten Netzwerknamens konnte zu der Transportschicht \Device\NetBT_Tcpip_{29C601DC-1189-4392-BD5A-D4A292B8BE64} vom Serverdienst nicht gebunden werden. Der Serverdienst konnte nicht gestartet werden. Microsoft Office Sessions: ========================= Error: (07/13/2014 03:32:08 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (07/13/2014 11:25:35 AM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (07/12/2014 09:36:41 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (07/12/2014 08:52:49 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (07/12/2014 03:49:33 PM) (Source: Windows Search Service) (EventID: 3013) (User: ) Description: Kontext: Anwendung, SystemIndex Katalog Details: Ein an das System angeschlossenes Gerät funktioniert nicht. (0x8007001f) C:\USERS\CYBERSTATION\DOCUMENTS\CALIBRE-BIBLIOTHEK\METADATA.DB-JOURNAL Error: (07/12/2014 03:49:28 PM) (Source: Windows Search Service) (EventID: 3013) (User: ) Description: Kontext: Anwendung, SystemIndex Katalog Details: Ein an das System angeschlossenes Gerät funktioniert nicht. (0x8007001f) C:\USERS\CYBERSTATION\DOCUMENTS\CALIBRE-BIBLIOTHEK\METADATA.DB-JOURNAL Error: (07/12/2014 11:43:16 AM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (07/11/2014 09:32:44 AM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (07/10/2014 07:51:24 PM) (Source: RasClient) (EventID: 20227) (User: ) Description: {354358F9-36B2-4708-8532-F17A93A49B69}Cyberstation-PC\Cyberstation********0 Error: (07/10/2014 04:04:37 PM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Task Scheduling Error: m->NextScheduledSPRetry 5055 CodeIntegrity Errors: =================================== Date: 2014-06-11 13:35:21.114 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-06-11 13:35:21.059 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-06-11 13:35:21.009 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-06-11 13:35:20.953 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-06-11 13:35:20.896 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. ==================== Memory info =========================== Percentage of memory in use: 55% Total physical RAM: 4094.12 MB Available physical RAM: 1802.98 MB Total Pagefile: 8391.52 MB Available Pagefile: 5636.33 MB Total Virtual: 8192 MB Available Virtual: 8191.82 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:298.09 GB) (Free:96.78 GB) NTFS ==>[Drive with boot components (obtained from BCD)] Drive f: (Seagate Expansion Drive) (Fixed) (Total:1863.02 GB) (Free:1042.42 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 298 GB) (Disk ID: 9DF0F6F6) Partition 1: (Active) - (Size=298 GB) - (Type=07 NTFS) ======================================================== Disk: 1 (Size: 1863 GB) (Disk ID: 90925266) Partition 1: (Not Active) - (Size=-198625372160) - (Type=07 NTFS) ==================== End Of Log ============================ |
15.07.2014, 12:09 | #4 |
| Windows Vista 64 Bit: EXP/CVE-2011-2414.D FRST: FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-07-2014 Ran by Cyberstation (administrator) on CYBERSTATION-PC on 13-07-2014 15:35:08 Running from C:\Users\Cyberstation\Downloads Platform: Windows Vista (TM) Home Premium Service Pack 2 (X64) OS Language: Deutsch (Deutschland) Internet Explorer Version 9 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (AMD) C:\Windows\System32\atiesrxx.exe (Microsoft Corporation) C:\Windows\System32\SLsvc.exe (Cisco Systems, Inc.) C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnagent.exe (AMD) C:\Windows\System32\atieclxx.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Microsoft Corp.) C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe () C:\Program Files\ASUS\Six Engine\SixEngine.exe (Microsoft Corporation) C:\Program Files\Windows Defender\MSASCui.exe (Greenshot) C:\Program Files\Greenshot\Greenshot.exe (Spotify Ltd) C:\Users\Cyberstation\AppData\Roaming\Spotify\spotify.exe (Spotify Ltd) C:\Users\Cyberstation\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe (Dropbox, Inc.) C:\Users\Cyberstation\AppData\Roaming\Dropbox\bin\Dropbox.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office14\OUTLOOK.EXE (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Microsoft Corp.) C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktop.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe (Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe (Creative Technology Ltd) C:\Windows\SysWOW64\Ctxfihlp.exe (Creative Technology Ltd) C:\Windows\SysWOW64\CTxfispi.exe (ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe (Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE (Microsoft Corp.) C:\Program Files (x86)\Microsoft\BingDesktop\BDExtHost.exe (Microsoft Corp.) C:\Program Files (x86)\Microsoft\BingDesktop\BDAppHost.exe (Microsoft Corp.) C:\Program Files (x86)\Microsoft\BingDesktop\BDRuntimeHost.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe () C:\Users\Cyberstation\AppData\Roaming\Spotify\Data\SpotifyHelper.exe () C:\Users\Cyberstation\AppData\Roaming\Spotify\Data\SpotifyHelper.exe () C:\Users\Cyberstation\AppData\Roaming\Spotify\Data\SpotifyHelper.exe () C:\Users\Cyberstation\AppData\Roaming\Spotify\Data\SpotifyHelper.exe (Microsoft Corporation) C:\Windows\SysWOW64\SearchProtocolHost.exe () C:\Users\Cyberstation\AppData\Roaming\Spotify\Data\SpotifyHelper.exe (Microsoft Corporation) C:\Windows\System32\conime.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [Windows Defender] => C:\Program Files\Windows Defender\MSASCui.exe [1584184 2008-01-21] (Microsoft Corporation) HKLM\...\Run: [Greenshot] => C:\Program Files\Greenshot\Greenshot.exe [495616 2014-05-12] (Greenshot) HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [750160 2014-07-06] (Avira Operations GmbH & Co. KG) HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642304 2013-04-30] (Advanced Micro Devices, Inc.) HKLM-x32\...\Run: [BingDesktop] => C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktop.exe [2368728 2014-05-23] (Microsoft Corp.) HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896 2014-05-07] (Oracle Corporation) HKLM-x32\...\Run: [UpdReg] => C:\Windows\UpdReg.EXE [90112 2000-05-11] (Creative Technology Ltd.) HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-05-26] (Apple Inc.) HKLM-x32\...\Run: [CTxfiHlp] => C:\Windows\SysWOW64\CTXFIHLP.EXE [25600 2009-06-03] (Creative Technology Ltd) HKU\S-1-5-19\...\Run: [WindowsWelcomeCenter] => rundll32.exe oobefldr.dll,ShowWelcomeCenter HKU\S-1-5-20\...\Run: [WindowsWelcomeCenter] => rundll32.exe oobefldr.dll,ShowWelcomeCenter HKU\S-1-5-21-3132636138-289149283-414863540-1000\...\Run: [Spotify] => C:\Users\Cyberstation\AppData\Roaming\Spotify\Spotify.exe [6189624 2014-06-27] (Spotify Ltd) HKU\S-1-5-21-3132636138-289149283-414863540-1000\...\Run: [Spotify Web Helper] => C:\Users\Cyberstation\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1176632 2014-06-27] (Spotify Ltd) HKU\S-1-5-21-3132636138-289149283-414863540-1000\...\Policies\system: [LogonHoursAction] 2 HKU\S-1-5-21-3132636138-289149283-414863540-1000\...\Policies\system: [DontDisplayLogonHoursWarnings] 1 Startup: C:\Users\Cyberstation\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk ShortcutTarget: Dropbox.lnk -> C:\Users\Cyberstation\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) Startup: C:\Users\Cyberstation\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Microsoft Outlook 2010.lnk ShortcutTarget: Microsoft Outlook 2010.lnk -> C:\Windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\outicon.exe () ShellIconOverlayIdentifiers: DropboxExt1 -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => No File ShellIconOverlayIdentifiers: DropboxExt2 -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => No File ShellIconOverlayIdentifiers: DropboxExt3 -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => No File ShellIconOverlayIdentifiers: DropboxExt4 -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => No File ShellIconOverlayIdentifiers-x32: DropboxExt1 -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => No File ShellIconOverlayIdentifiers-x32: DropboxExt2 -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => No File ShellIconOverlayIdentifiers-x32: DropboxExt3 -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => No File ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x1D9E641F7185CF01 HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation) BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated) BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation) BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) Tcpip\Parameters: [DhcpNameServer] 192.168.0.1 FireFox: ======== FF ProfilePath: C:\Users\Cyberstation\AppData\Roaming\Mozilla\Firefox\Profiles\14pz22pp.default FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_14_0_0_125.dll () FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_125.dll () FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll () FF Plugin-x32: @java.com/DTPlugin,version=10.60.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.60.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WPF,version=3.5 - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation) FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @videolan.org/vlc,version=2.0.6 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: DownloadHelper - C:\Users\Cyberstation\AppData\Roaming\Mozilla\Firefox\Profiles\14pz22pp.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2014-05-30] FF Extension: Facebook Ads Block - C:\Users\Cyberstation\AppData\Roaming\Mozilla\Firefox\Profiles\14pz22pp.default\Extensions\jid1-CGxMej0nDJTjwQ@jetpack.xpi [2014-05-30] FF Extension: Nimbus Screen Capture - editable screenshots. - C:\Users\Cyberstation\AppData\Roaming\Mozilla\Firefox\Profiles\14pz22pp.default\Extensions\nimbusscreencaptureff@everhelper.me.xpi [2014-05-30] FF Extension: Updated Ad Blocker for Firefox 11+ - C:\Users\Cyberstation\AppData\Roaming\Mozilla\Firefox\Profiles\14pz22pp.default\Extensions\{4DC70064-89E2-4a55-8FC6-E8CDEAE3618C}.xpi [2014-05-30] FF HKLM-x32\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension FF Extension: Microsoft .NET Framework Assistant - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2014-05-30] Chrome: ======= CHR Extension: (Google Docs) - C:\Users\Cyberstation\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-06-11] CHR Extension: (Google Drive) - C:\Users\Cyberstation\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-06-11] CHR Extension: (YouTube) - C:\Users\Cyberstation\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-06-11] CHR Extension: (Google-Suche) - C:\Users\Cyberstation\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-06-11] CHR Extension: (Google Wallet) - C:\Users\Cyberstation\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-06-11] CHR Extension: (Google Mail) - C:\Users\Cyberstation\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-06-11] ==================== Services (Whitelisted) ================= R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [430160 2014-07-06] (Avira Operations GmbH & Co. KG) R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [430160 2014-07-06] (Avira Operations GmbH & Co. KG) R2 BingDesktopUpdate; C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe [173784 2014-05-23] (Microsoft Corp.) ==================== Drivers (Whitelisted) ==================== S3 acsint; C:\Windows\System32\DRIVERS\acsint64.sys [49520 2013-12-13] (Cisco Systems, Inc.) S3 acsmux; C:\Windows\System32\DRIVERS\acsmux64.sys [73584 2013-12-13] (Cisco Systems, Inc.) R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [14392 2007-12-17] () R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [117712 2014-07-06] (Avira Operations GmbH & Co. KG) R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [130584 2014-06-03] (Avira Operations GmbH & Co. KG) R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2014-05-30] (Avira Operations GmbH & Co. KG) R3 L1E; C:\Windows\System32\DRIVERS\L1E60x64.sys [56320 2008-06-30] (Atheros Communications, Inc.) R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [15680 2006-11-01] () R0 mv61xx; C:\Windows\System32\DRIVERS\mv61xx.sys [173096 2008-06-24] (Marvell Semiconductor, Inc.) S4 sptd; C:\Windows\System32\Drivers\sptd.sys [564824 2014-05-30] (Duplex Secure Ltd.) S3 CT20XUT.DLL; system32\CT20XUT.DLL [X] S3 CTEXFIFX.DLL; system32\CTEXFIFX.DLL [X] S3 CTHWIUT.DLL; system32\CTHWIUT.DLL [X] S3 IpInIp; system32\DRIVERS\ipinip.sys [X] S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [X] S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [X] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-07-13 15:35 - 2014-07-13 15:35 - 00014975 _____ () C:\Users\Cyberstation\Downloads\FRST.txt 2014-07-13 15:34 - 2014-07-13 15:35 - 00000000 ____D () C:\FRST 2014-07-13 15:34 - 2014-07-13 15:34 - 02086912 _____ (Farbar) C:\Users\Cyberstation\Downloads\FRST64.exe 2014-07-13 15:29 - 2014-07-13 15:29 - 00000596 _____ () C:\Users\Cyberstation\Downloads\defogger_disable.log 2014-07-13 15:29 - 2014-07-13 15:29 - 00000020 _____ () C:\Users\Cyberstation\defogger_reenable 2014-07-13 15:27 - 2014-07-13 15:27 - 00050477 _____ () C:\Users\Cyberstation\Downloads\Defogger.exe 2014-07-13 00:26 - 2014-07-13 00:28 - 239621255 _____ () C:\Users\Cyberstation\Downloads\********** 2014-07-12 23:19 - 2014-07-12 23:22 - 273409069 _____ () C:\Users\Cyberstation\Downloads\********** 2014-07-12 23:19 - 2014-07-12 23:21 - 288907926 _____ () C:\Users\Cyberstation\Downloads\********** 2014-07-12 23:15 - 2014-07-12 23:15 - 00000000 ____D () C:\Users\Cyberstation\Downloads\********** 2014-07-12 23:10 - 2014-07-12 23:14 - 471518082 _____ () C:\Users\Cyberstation\Downloads\********** 2014-07-12 15:48 - 2014-07-12 15:48 - 00000000 ____D () C:\Users\Cyberstation\AppData\Local\calibre-cache 2014-07-12 15:47 - 2014-07-12 15:52 - 00000000 ____D () C:\Users\Cyberstation\Documents\Calibre-Bibliothek 2014-07-12 15:47 - 2014-07-12 15:48 - 00000000 ____D () C:\Users\Cyberstation\AppData\Roaming\calibre 2014-07-12 15:47 - 2012-10-10 15:27 - 00000000 ____D () C:\Users\Cyberstation\Downloads\********** 2014-07-12 15:46 - 2014-07-12 15:46 - 00000871 _____ () C:\Users\Public\Desktop\calibre - E-book management.lnk 2014-07-12 15:46 - 2014-07-12 15:46 - 00000000 ____D () C:\Program Files (x86)\Calibre2 2014-07-12 15:44 - 2014-07-12 15:44 - 56244224 _____ () C:\Users\Cyberstation\Downloads\calibre-1.44.0.msi 2014-07-12 15:44 - 2014-07-12 15:44 - 16737290 _____ () C:\Users\Cyberstation\Downloads\********** 2014-07-12 15:40 - 2014-07-12 15:40 - 16702117 _____ () C:\Users\Cyberstation\Downloads\********** 2014-07-10 16:50 - 2014-07-10 16:50 - 00000000 ____D () C:\Users\Cyberstation\Downloads\********** 2014-07-10 16:41 - 2014-07-10 16:49 - 734003200 _____ () C:\Users\Cyberstation\Downloads\********** 2014-07-10 16:41 - 2014-07-10 16:48 - 672344384 _____ () C:\Users\Cyberstation\Downloads\********** 2014-07-10 13:41 - 2014-07-10 18:46 - 00010147 _____ () C:\Users\Cyberstation\Desktop\********** 2014-07-09 13:46 - 2014-06-07 06:02 - 17854464 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-07-09 13:46 - 2014-06-07 05:13 - 10890752 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-07-09 13:46 - 2014-06-07 04:59 - 02339328 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-07-09 13:46 - 2014-06-07 04:52 - 01348608 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-07-09 13:46 - 2014-06-07 04:51 - 01494016 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-07-09 13:46 - 2014-06-07 04:51 - 01392128 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-07-09 13:46 - 2014-06-07 04:50 - 00237056 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2014-07-09 13:46 - 2014-06-07 04:47 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-07-09 13:46 - 2014-06-07 04:45 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2014-07-09 13:46 - 2014-06-07 04:45 - 00599040 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2014-07-09 13:46 - 2014-06-07 04:45 - 00173056 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2014-07-09 13:46 - 2014-06-07 04:42 - 02148352 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-07-09 13:46 - 2014-06-07 04:42 - 00729088 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-07-09 13:46 - 2014-06-07 04:42 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2014-07-09 13:46 - 2014-06-07 04:42 - 00282112 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2014-07-09 13:46 - 2014-06-07 04:41 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2014-07-09 13:46 - 2014-06-07 04:41 - 00055296 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2014-07-09 13:46 - 2014-06-07 04:41 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2014-07-09 13:46 - 2014-06-07 04:40 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-07-09 13:46 - 2014-06-07 04:39 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe 2014-07-09 13:46 - 2014-06-07 04:35 - 00248320 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-07-09 13:46 - 2014-06-07 02:33 - 02777088 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2014-07-09 13:46 - 2014-06-07 02:05 - 12353024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-07-09 13:46 - 2014-06-07 01:25 - 09711616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2014-07-09 13:46 - 2014-06-07 01:12 - 01810432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2014-07-09 13:46 - 2014-06-07 01:04 - 01106432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2014-07-09 13:46 - 2014-06-07 01:03 - 01427968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2014-07-09 13:46 - 2014-06-07 01:02 - 01129472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2014-07-09 13:46 - 2014-06-07 01:00 - 00231936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll 2014-07-09 13:46 - 2014-06-07 00:58 - 00065024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2014-07-09 13:46 - 2014-06-07 00:57 - 00142848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2014-07-09 13:46 - 2014-06-07 00:56 - 00717824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2014-07-09 13:46 - 2014-06-07 00:56 - 00421376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2014-07-09 13:46 - 2014-06-07 00:54 - 00607744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2014-07-09 13:46 - 2014-06-07 00:54 - 00353792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2014-07-09 13:46 - 2014-06-07 00:54 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2014-07-09 13:46 - 2014-06-07 00:54 - 00041472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll 2014-07-09 13:46 - 2014-06-07 00:53 - 01796096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2014-07-09 13:46 - 2014-06-07 00:53 - 00073728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2014-07-09 13:46 - 2014-06-07 00:53 - 00010752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe 2014-07-09 13:46 - 2014-06-07 00:52 - 02382848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2014-07-09 13:46 - 2014-06-07 00:51 - 00011776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe 2014-07-09 13:46 - 2014-06-07 00:47 - 00176640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2014-07-09 13:46 - 2014-06-06 10:59 - 00506880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll 2014-07-09 13:46 - 2014-06-06 09:13 - 00620032 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll 2014-07-09 13:46 - 2014-05-30 09:10 - 00404992 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys 2014-07-06 20:23 - 2014-07-06 20:27 - 00000000 ____D () C:\Users\Cyberstation\Downloads\********** 2014-07-06 20:10 - 2014-07-06 20:18 - 734003200 _____ () C:\Users\Cyberstation\Downloads\********** 2014-07-06 20:10 - 2014-07-06 20:17 - 669643728 _____ () C:\Users\Cyberstation\Downloads\********** 2014-07-01 17:33 - 2014-06-25 00:02 - 00000000 ____D () C:\Users\Cyberstation\Downloads\********** 2014-07-01 17:26 - 2014-07-01 17:33 - 701000032 _____ () C:\Users\Cyberstation\Downloads\********** 2014-07-01 17:26 - 2014-06-17 20:27 - 00000000 ____D () C:\Users\Cyberstation\Downloads\********** 2014-07-01 17:24 - 2014-07-01 17:32 - 734003200 _____ () C:\Users\Cyberstation\Downloads\********** 2014-07-01 17:19 - 2014-07-01 17:26 - 706128656 _____ () C:\Users\Cyberstation\Downloads\********** 2014-07-01 17:19 - 2014-06-11 14:58 - 00000000 ____D () C:\Users\Cyberstation\Downloads\********** 2014-07-01 17:16 - 2014-07-01 17:16 - 00000000 _____ () C:\Users\Cyberstation\Desktop\********** 2014-07-01 17:15 - 2014-07-01 17:24 - 734003200 _____ () C:\Users\Cyberstation\Downloads\********** 2014-07-01 17:11 - 2014-07-01 17:18 - 706064608 _____ () C:\Users\Cyberstation\Downloads\********** 2014-07-01 17:11 - 2014-06-04 20:52 - 00000000 ____D () C:\Users\Cyberstation\Downloads\********** 2014-07-01 17:07 - 2014-07-01 17:15 - 734003200 _____ () C:\Users\Cyberstation\Downloads\********** 2014-07-01 17:01 - 2014-07-01 17:11 - 677611088 _____ () C:\Users\Cyberstation\Downloads\********** 2014-07-01 17:01 - 2014-07-01 17:07 - 681574400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-07-01 17:01 - 2014-06-11 20:48 - 00000000 ____D () C:\Users\Cyberstation\Downloads\********** 2014-07-01 16:50 - 2014-07-01 17:00 - 849346560 _____ () C:\Users\Cyberstation\Downloads\********** 2014-07-01 16:50 - 2014-07-01 17:00 - 833077712 _____ () C:\Users\Cyberstation\Downloads\********** 2014-07-01 14:58 - 2014-07-01 15:03 - 535328048 _____ () C:\Users\Cyberstation\Downloads\********** 2014-07-01 14:56 - 2014-07-01 15:02 - 576716800 _____ () C:\Users\Cyberstation\Downloads\********** 2014-07-01 14:51 - 2014-07-01 14:57 - 576716800 _____ () C:\Users\Cyberstation\Downloads\********** 2014-07-01 14:49 - 2014-07-01 14:56 - 576716800 _____ () C:\Users\Cyberstation\Downloads\********** 2014-07-01 14:46 - 2014-07-01 14:51 - 524288000 _____ () C:\Users\Cyberstation\Downloads\********** 2014-07-01 14:43 - 2014-07-01 14:49 - 476037888 _____ () C:\Users\Cyberstation\Downloads\********** 2014-07-01 14:40 - 2014-07-01 14:46 - 524288000 _____ () C:\Users\Cyberstation\Downloads\********** 2014-07-01 14:38 - 2014-07-01 14:43 - 524288000 _____ () C:\Users\Cyberstation\Downloads\********** 2014-07-01 14:34 - 2014-07-01 14:40 - 524288000 _____ () C:\Users\Cyberstation\Downloads\********** 2014-07-01 14:32 - 2014-07-01 14:37 - 524288000 _____ () C:\Users\Cyberstation\Downloads\********** 2014-07-01 14:28 - 2014-07-01 14:34 - 524288000 _____ () C:\Users\Cyberstation\Downloads\********** 2014-07-01 14:28 - 2014-07-01 14:32 - 259149888 _____ () C:\Users\Cyberstation\Downloads\********** 2014-07-01 14:23 - 2014-07-01 14:28 - 524288000 _____ () C:\Users\Cyberstation\Downloads\********** 2014-07-01 14:21 - 2014-07-01 14:28 - 524288000 _____ () C:\Users\Cyberstation\Downloads\********** 2014-07-01 14:19 - 2014-07-01 14:23 - 398004976 _____ () C:\Users\Cyberstation\Downloads\********** 2014-07-01 14:17 - 2014-07-01 14:21 - 400102976 _____ () C:\Users\Cyberstation\Downloads\********** 2014-07-01 14:12 - 2014-07-01 14:18 - 524288000 _____ () C:\Users\Cyberstation\Downloads\********** 2014-07-01 14:11 - 2014-07-01 14:17 - 524288000 _____ () C:\Users\Cyberstation\Downloads\********** 2014-07-01 14:07 - 2014-07-01 14:11 - 405696048 _____ () C:\Users\Cyberstation\Downloads\********** 2014-07-01 14:05 - 2014-07-01 14:12 - 524288000 _____ () C:\Users\Cyberstation\Downloads\********** 2014-07-01 14:02 - 2014-07-01 14:05 - 349102864 _____ () C:\Users\Cyberstation\Downloads\********** 2014-07-01 14:00 - 2014-07-01 14:07 - 524288000 _____ () C:\Users\Cyberstation\Downloads\********** 2014-07-01 13:57 - 2014-07-01 14:02 - 420847904 _____ () C:\Users\Cyberstation\Downloads\********** 2014-07-01 13:55 - 2014-07-01 14:00 - 524288000 _____ () C:\Users\Cyberstation\Downloads\********** 2014-07-01 13:51 - 2014-07-01 13:57 - 524288000 _____ () C:\Users\Cyberstation\Downloads\********** 2014-07-01 13:48 - 2014-07-01 13:54 - 524288000 _____ () C:\Users\Cyberstation\Downloads\********** 2014-07-01 13:46 - 2014-07-01 13:51 - 524288000 _____ () C:\Users\Cyberstation\Downloads\********** 2014-07-01 13:42 - 2014-07-01 13:48 - 524288000 _____ () C:\Users\Cyberstation\Downloads\********** 2014-07-01 13:40 - 2014-07-01 13:46 - 524288000 _____ () C:\Users\Cyberstation\Downloads\********** 2014-07-01 13:37 - 2014-07-01 13:42 - 351488704 _____ () C:\Users\Cyberstation\Downloads\********** 2014-07-01 13:35 - 2014-07-01 13:40 - 524288000 _____ () C:\Users\Cyberstation\Downloads\********** 2014-07-01 13:32 - 2014-07-01 13:37 - 524288000 _____ () C:\Users\Cyberstation\Downloads\********** 2014-07-01 13:28 - 2014-07-01 13:35 - 524288000 _____ () C:\Users\Cyberstation\Downloads\********** 2014-07-01 13:27 - 2014-07-01 13:32 - 524288000 _____ () C:\Users\Cyberstation\Downloads\********** 2014-07-01 13:22 - 2014-07-01 13:28 - 524288000 _____ () C:\Users\Cyberstation\Downloads\********** 2014-07-01 13:21 - 2014-07-01 13:27 - 461647600 _____ () C:\Users\Cyberstation\Downloads\********** 2014-07-01 13:16 - 2014-07-01 13:21 - 524288000 _____ () C:\Users\Cyberstation\Downloads\********** 2014-07-01 13:15 - 2014-07-01 13:21 - 524288000 _____ () C:\Users\Cyberstation\Downloads\********** 2014-07-01 12:14 - 2014-07-01 13:15 - 524288000 _____ () C:\Users\Cyberstation\Downloads\********** 2014-07-01 12:14 - 2014-07-01 13:15 - 524288000 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-30 15:00 - 2014-07-01 00:35 - 00000000 ____D () C:\Users\Cyberstation\Downloads\********** 2014-06-30 14:59 - 2014-06-30 15:00 - 163491820 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-30 14:56 - 2014-06-30 15:00 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-30 14:54 - 2014-06-30 14:59 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-30 14:51 - 2014-06-30 14:55 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-30 14:50 - 2014-07-01 00:34 - 00000000 ____D () C:\Users\Cyberstation\Downloads\********** 2014-06-30 14:50 - 2014-06-30 14:54 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-30 14:46 - 2014-06-30 14:50 - 370164760 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-30 14:45 - 2014-06-30 14:50 - 440401920 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-30 14:41 - 2014-07-01 00:30 - 00000000 ____D () C:\Users\Cyberstation\Downloads\********** 2014-06-30 14:41 - 2014-06-30 14:45 - 440401920 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-30 14:39 - 2014-06-30 14:45 - 440401920 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-30 14:37 - 2014-06-30 14:39 - 203917016 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-30 14:36 - 2014-06-30 14:41 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-30 14:32 - 2014-06-30 14:37 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-30 14:32 - 2014-06-30 14:36 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-30 14:32 - 2012-11-22 22:43 - 00000000 ____D () C:\Users\Cyberstation\Downloads\********** 2014-06-30 14:29 - 2014-06-30 14:32 - 229162904 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-30 14:27 - 2014-06-30 14:32 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-30 14:25 - 2014-06-30 14:29 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-30 14:25 - 2012-11-22 22:43 - 00000000 ____D () C:\Users\Cyberstation\Downloads\********** 2014-06-30 14:21 - 2014-06-30 14:25 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-30 14:21 - 2014-06-30 14:25 - 326638680 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-30 14:17 - 2014-06-30 14:21 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-30 14:15 - 2014-06-30 14:21 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-30 14:15 - 2012-11-22 22:43 - 00000000 ____D () C:\Users\Cyberstation\Downloads\********** 2014-06-30 14:13 - 2014-06-30 14:17 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-30 14:10 - 2014-06-30 14:15 - 374940216 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-30 14:09 - 2014-06-30 14:13 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-30 14:04 - 2014-06-30 14:10 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-30 14:04 - 2014-06-30 14:08 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-30 14:04 - 2012-11-22 22:43 - 00000000 ____D () C:\Users\Cyberstation\Downloads\********** 2014-06-30 14:02 - 2014-06-30 14:04 - 160388808 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-30 14:00 - 2014-06-30 14:04 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-30 13:57 - 2014-06-30 14:02 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-30 13:57 - 2012-11-22 22:43 - 00000000 ____D () C:\Users\Cyberstation\Downloads\********** 2014-06-30 13:56 - 2014-06-30 14:00 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-30 13:54 - 2014-06-30 13:56 - 177277560 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-30 13:52 - 2014-06-30 13:56 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-30 13:49 - 2014-06-30 13:54 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-30 13:49 - 2012-11-22 22:43 - 00000000 ____D () C:\Users\Cyberstation\Downloads\********** 2014-06-30 13:47 - 2014-06-30 13:52 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-30 13:46 - 2014-06-30 13:49 - 305981112 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-30 13:43 - 2014-06-30 13:47 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-30 13:40 - 2014-06-30 13:46 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-30 13:40 - 2012-11-22 22:43 - 00000000 ____D () C:\Users\Cyberstation\Downloads\********** 2014-06-30 13:38 - 2014-06-30 13:42 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-30 13:36 - 2014-06-30 13:38 - 186982360 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-30 13:35 - 2014-06-30 13:40 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-30 13:31 - 2014-06-30 13:36 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-30 13:31 - 2014-06-30 13:35 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-28 23:26 - 2014-06-29 16:59 - 00000000 ____D () C:\Users\Cyberstation\Downloads\********** 2014-06-28 23:22 - 2014-06-28 23:26 - 325952240 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-28 23:21 - 2014-06-28 23:26 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-28 23:18 - 2014-06-28 23:22 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-28 23:16 - 2014-06-28 23:21 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-28 23:13 - 2014-06-29 17:00 - 00000000 ____D () C:\Users\Cyberstation\Downloads\********** 2014-06-28 23:13 - 2014-06-28 23:18 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-28 23:12 - 2014-06-28 23:16 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-28 23:08 - 2014-06-28 23:13 - 330509056 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-28 23:08 - 2014-06-28 23:12 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-28 23:04 - 2014-06-28 23:08 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-28 23:02 - 2014-06-28 23:08 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-28 22:59 - 2014-06-29 16:59 - 00000000 ____D () C:\Users\Cyberstation\Downloads\********** 2014-06-28 22:59 - 2014-06-28 23:04 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-28 22:58 - 2014-06-28 23:02 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-28 22:55 - 2014-06-28 22:59 - 407250772 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-28 22:53 - 2014-06-28 22:58 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-28 22:50 - 2014-06-28 22:55 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-28 22:48 - 2014-06-28 22:52 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-28 22:46 - 2014-06-28 22:50 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-28 22:43 - 2014-06-29 16:59 - 00000000 ____D () C:\Users\Cyberstation\Downloads\********** 2014-06-28 22:43 - 2014-06-28 22:48 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-28 22:40 - 2014-06-28 22:46 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-28 22:39 - 2014-06-28 22:43 - 406919476 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-28 22:35 - 2014-06-28 22:40 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-28 22:35 - 2014-06-28 22:39 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-28 22:30 - 2014-06-28 22:35 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-28 22:30 - 2014-06-28 22:35 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-28 22:25 - 2014-06-29 16:57 - 00000000 ____D () C:\Users\Cyberstation\Downloads\********** 2014-06-28 22:25 - 2014-06-28 22:30 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-28 22:25 - 2014-06-28 22:30 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-28 22:21 - 2014-06-28 22:25 - 321940816 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-28 22:20 - 2014-06-28 22:25 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-28 22:16 - 2014-06-28 22:21 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-28 22:13 - 2014-06-28 22:18 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-28 22:12 - 2014-06-28 22:19 - 00000000 ____D () C:\Users\Cyberstation\Downloads\********** 2014-06-28 22:11 - 2014-06-28 22:15 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-28 22:07 - 2014-06-28 22:16 - 00000000 ____D () C:\Users\Cyberstation\Downloads\********** 2014-06-28 22:07 - 2014-06-28 22:11 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-28 22:07 - 2014-06-28 22:10 - 325194736 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-28 22:02 - 2014-06-28 22:07 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-28 21:55 - 2014-06-28 22:02 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-28 21:47 - 2014-06-28 21:55 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-28 21:41 - 2014-06-28 21:47 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-28 21:34 - 2014-06-28 22:17 - 00000000 ____D () C:\Users\Cyberstation\Downloads\********** 2014-06-28 21:34 - 2014-06-28 21:40 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-28 21:28 - 2014-06-28 21:33 - 326931936 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-28 21:21 - 2014-06-28 21:28 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-28 21:15 - 2014-06-28 21:21 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-28 21:08 - 2014-06-28 21:14 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-28 20:55 - 2014-06-28 21:08 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-28 20:53 - 2014-06-28 21:01 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-28 20:46 - 2014-06-28 20:53 - 407078660 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-28 20:39 - 2014-06-28 20:46 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-28 20:32 - 2014-06-28 20:39 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-28 20:30 - 2014-06-28 20:32 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-28 20:27 - 2014-06-28 20:30 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-28 20:25 - 2014-06-28 22:07 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-28 20:25 - 2012-11-22 22:41 - 00000000 ____D () C:\Users\Cyberstation\Downloads\********** 2014-06-28 20:22 - 2014-06-28 20:26 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-28 20:19 - 2014-06-28 20:24 - 413233588 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-28 20:18 - 2014-06-28 20:22 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-28 20:14 - 2014-06-28 20:19 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-28 20:13 - 2014-06-28 20:18 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-28 20:10 - 2014-06-28 20:14 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-28 20:08 - 2014-06-28 20:13 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-28 20:05 - 2014-06-28 20:09 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-28 19:44 - 2012-11-22 22:41 - 00000000 ____D () C:\Users\Cyberstation\Downloads\********** 2014-06-28 19:41 - 2014-06-28 19:44 - 328768656 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-28 19:39 - 2014-06-28 19:43 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-28 19:35 - 2014-06-28 19:41 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-28 19:34 - 2014-06-28 19:38 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-28 19:30 - 2014-06-28 19:35 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-28 19:30 - 2014-06-28 19:34 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-28 19:27 - 2014-07-13 00:26 - 00000000 ____D () C:\Users\Cyberstation\AppData\Roaming\vlc 2014-06-27 22:05 - 2010-06-02 04:55 - 00527192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_7.dll 2014-06-27 22:05 - 2010-06-02 04:55 - 00518488 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_7.dll 2014-06-27 22:05 - 2010-06-02 04:55 - 00239960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_7.dll 2014-06-27 22:05 - 2010-06-02 04:55 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_7.dll 2014-06-27 22:05 - 2010-06-02 04:55 - 00077656 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_5.dll 2014-06-27 22:05 - 2010-06-02 04:55 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_5.dll 2014-06-27 22:05 - 2010-05-26 11:41 - 02526056 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_43.dll 2014-06-27 22:05 - 2010-05-26 11:41 - 02401112 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_43.dll 2014-06-27 22:05 - 2010-05-26 11:41 - 02106216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_43.dll 2014-06-27 22:05 - 2010-05-26 11:41 - 01998168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_43.dll 2014-06-27 22:05 - 2010-05-26 11:41 - 01907552 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_43.dll 2014-06-27 22:05 - 2010-05-26 11:41 - 01868128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_43.dll 2014-06-27 22:05 - 2010-05-26 11:41 - 00511328 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_43.dll 2014-06-27 22:05 - 2010-05-26 11:41 - 00470880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_43.dll 2014-06-27 22:05 - 2010-05-26 11:41 - 00276832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_43.dll 2014-06-27 22:05 - 2010-05-26 11:41 - 00248672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_43.dll 2014-06-27 22:05 - 2010-02-04 10:01 - 00530776 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_6.dll 2014-06-27 22:05 - 2010-02-04 10:01 - 00528216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_6.dll 2014-06-27 22:05 - 2010-02-04 10:01 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_6.dll 2014-06-27 22:05 - 2010-02-04 10:01 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_6.dll 2014-06-27 22:05 - 2010-02-04 10:01 - 00078680 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_4.dll 2014-06-27 22:05 - 2010-02-04 10:01 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_4.dll 2014-06-27 22:05 - 2010-02-04 10:01 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_7.dll 2014-06-27 22:05 - 2010-02-04 10:01 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_7.dll 2014-06-27 22:05 - 2009-09-04 17:44 - 00517960 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_5.dll 2014-06-27 22:05 - 2009-09-04 17:44 - 00515416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_5.dll 2014-06-27 22:05 - 2009-09-04 17:44 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_5.dll 2014-06-27 22:05 - 2009-09-04 17:44 - 00176968 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_5.dll 2014-06-27 22:05 - 2009-09-04 17:44 - 00073544 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_3.dll 2014-06-27 22:05 - 2009-09-04 17:44 - 00069464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_3.dll 2014-06-27 22:05 - 2009-09-04 17:29 - 05554512 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_42.dll 2014-06-27 22:05 - 2009-09-04 17:29 - 05501792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_42.dll 2014-06-27 22:05 - 2009-09-04 17:29 - 02582888 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_42.dll 2014-06-27 22:05 - 2009-09-04 17:29 - 02475352 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_42.dll 2014-06-27 22:05 - 2009-09-04 17:29 - 01974616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_42.dll 2014-06-27 22:05 - 2009-09-04 17:29 - 01892184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_42.dll 2014-06-27 22:05 - 2009-09-04 17:29 - 00523088 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_42.dll 2014-06-27 22:05 - 2009-09-04 17:29 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_42.dll 2014-06-27 22:05 - 2009-09-04 17:29 - 00285024 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_42.dll 2014-06-27 22:05 - 2009-09-04 17:29 - 00235344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_42.dll 2014-06-27 22:05 - 2009-03-16 14:18 - 00521560 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_4.dll 2014-06-27 22:05 - 2009-03-16 14:18 - 00517448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_4.dll 2014-06-27 22:05 - 2009-03-16 14:18 - 00235352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_4.dll 2014-06-27 22:05 - 2009-03-16 14:18 - 00174936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_4.dll 2014-06-27 22:05 - 2009-03-16 14:18 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_6.dll 2014-06-27 22:05 - 2009-03-16 14:18 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_6.dll 2014-06-27 22:05 - 2009-03-09 15:27 - 05425496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_41.dll 2014-06-27 22:05 - 2009-03-09 15:27 - 04178264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_41.dll 2014-06-27 22:05 - 2009-03-09 15:27 - 02430312 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_41.dll 2014-06-27 22:05 - 2009-03-09 15:27 - 01846632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_41.dll 2014-06-27 22:05 - 2009-03-09 15:27 - 00520544 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_41.dll 2014-06-27 22:05 - 2009-03-09 15:27 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_41.dll 2014-06-27 22:05 - 2008-10-27 10:04 - 00518480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_3.dll 2014-06-27 22:05 - 2008-10-27 10:04 - 00514384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_3.dll 2014-06-27 22:05 - 2008-10-27 10:04 - 00235856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_3.dll 2014-06-27 22:05 - 2008-10-27 10:04 - 00175440 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_3.dll 2014-06-27 22:05 - 2008-10-27 10:04 - 00074576 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_2.dll 2014-06-27 22:05 - 2008-10-27 10:04 - 00070992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_2.dll 2014-06-27 22:05 - 2008-10-27 10:04 - 00025936 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_5.dll 2014-06-27 22:05 - 2008-10-27 10:04 - 00023376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_5.dll 2014-06-27 22:05 - 2008-10-15 06:22 - 05631312 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_40.dll 2014-06-27 22:05 - 2008-10-15 06:22 - 04379984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_40.dll 2014-06-27 22:05 - 2008-10-15 06:22 - 02605920 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_40.dll 2014-06-27 22:05 - 2008-10-15 06:22 - 02036576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_40.dll 2014-06-27 22:05 - 2008-10-15 06:22 - 00519000 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_40.dll 2014-06-27 22:05 - 2008-10-15 06:22 - 00452440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_40.dll 2014-06-27 22:05 - 2008-07-31 10:41 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_2.dll 2014-06-27 22:05 - 2008-07-31 10:41 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_2.dll 2014-06-27 22:05 - 2008-07-31 10:41 - 00072200 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_1.dll 2014-06-27 22:05 - 2008-07-31 10:40 - 00513544 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_2.dll 2014-06-27 22:05 - 2008-07-10 11:00 - 04992520 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_39.dll 2014-06-27 22:05 - 2008-07-10 11:00 - 01942552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_39.dll 2014-06-27 22:05 - 2008-07-10 11:00 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_39.dll 2014-06-27 22:05 - 2008-05-30 14:19 - 00511496 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_1.dll 2014-06-27 22:05 - 2008-05-30 14:19 - 00507400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_1.dll 2014-06-27 22:05 - 2008-05-30 14:17 - 00068104 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_0.dll 2014-06-27 22:05 - 2008-05-30 14:17 - 00065032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_0.dll 2014-06-27 22:04 - 2008-05-30 14:18 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_1.dll 2014-06-27 22:04 - 2008-05-30 14:18 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_1.dll 2014-06-27 22:04 - 2008-05-30 14:17 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_4.dll 2014-06-27 22:04 - 2008-05-30 14:16 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_4.dll 2014-06-27 22:04 - 2008-05-30 14:11 - 04991496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_38.dll 2014-06-27 22:04 - 2008-05-30 14:11 - 03850760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_38.dll 2014-06-27 22:04 - 2008-05-30 14:11 - 01941528 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_38.dll 2014-06-27 22:04 - 2008-05-30 14:11 - 01491992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_38.dll 2014-06-27 22:04 - 2008-05-30 14:11 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_38.dll 2014-06-27 22:04 - 2008-05-30 14:11 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_38.dll 2014-06-27 22:04 - 2008-03-05 16:04 - 00489480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_0.dll 2014-06-27 22:04 - 2008-03-05 16:03 - 00479752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_0.dll 2014-06-27 22:04 - 2008-03-05 16:03 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_0.dll 2014-06-27 22:04 - 2008-03-05 16:03 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_0.dll 2014-06-27 22:04 - 2008-03-05 16:00 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_3.dll 2014-06-27 22:04 - 2008-03-05 16:00 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_3.dll 2014-06-27 22:04 - 2008-03-05 15:56 - 04910088 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_37.dll 2014-06-27 22:04 - 2008-03-05 15:56 - 03786760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_37.dll 2014-06-27 22:04 - 2008-03-05 15:56 - 01860120 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_37.dll 2014-06-27 22:04 - 2008-03-05 15:56 - 01420824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_37.dll 2014-06-27 22:04 - 2008-02-05 23:07 - 00529424 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_37.dll 2014-06-27 22:04 - 2008-02-05 23:07 - 00462864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_37.dll 2014-06-27 22:04 - 2007-10-22 03:40 - 00411656 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_10.dll 2014-06-27 22:04 - 2007-10-22 03:39 - 00267272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_10.dll 2014-06-27 22:04 - 2007-10-22 03:37 - 00021000 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_2.dll 2014-06-27 22:04 - 2007-10-22 03:37 - 00017928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_2.dll 2014-06-27 22:04 - 2007-10-12 15:14 - 05081608 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_36.dll 2014-06-27 22:04 - 2007-10-12 15:14 - 03734536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_36.dll 2014-06-27 22:04 - 2007-10-12 15:14 - 02006552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_36.dll 2014-06-27 22:04 - 2007-10-12 15:14 - 01374232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_36.dll 2014-06-27 22:04 - 2007-10-02 09:56 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_36.dll 2014-06-27 22:04 - 2007-10-02 09:56 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_36.dll 2014-06-27 22:04 - 2007-07-20 00:57 - 00411496 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_9.dll 2014-06-27 22:04 - 2007-07-20 00:57 - 00267112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_9.dll 2014-06-27 22:04 - 2007-07-19 18:14 - 05073256 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_35.dll 2014-06-27 22:04 - 2007-07-19 18:14 - 03727720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_35.dll 2014-06-27 22:04 - 2007-07-19 18:14 - 01985904 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_35.dll 2014-06-27 22:04 - 2007-07-19 18:14 - 01358192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_35.dll 2014-06-27 22:04 - 2007-07-19 18:14 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_35.dll 2014-06-27 22:04 - 2007-07-19 18:14 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_35.dll 2014-06-27 22:04 - 2007-06-20 20:49 - 00409960 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_8.dll 2014-06-27 22:04 - 2007-06-20 20:46 - 00266088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_8.dll 2014-06-27 22:04 - 2007-05-16 16:45 - 04496232 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_34.dll 2014-06-27 22:04 - 2007-05-16 16:45 - 03497832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_34.dll 2014-06-27 22:04 - 2007-05-16 16:45 - 01401200 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_34.dll 2014-06-27 22:04 - 2007-05-16 16:45 - 01124720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_34.dll 2014-06-27 22:04 - 2007-05-16 16:45 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_34.dll 2014-06-27 22:04 - 2007-05-16 16:45 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_34.dll 2014-06-27 22:04 - 2007-04-04 18:55 - 00403304 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_7.dll 2014-06-27 22:04 - 2007-04-04 18:55 - 00261480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_7.dll 2014-06-27 22:04 - 2007-04-04 18:54 - 00107368 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_3.dll 2014-06-27 22:04 - 2007-04-04 18:53 - 00081768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_3.dll 2014-06-27 22:04 - 2007-03-15 16:57 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_33.dll 2014-06-27 22:04 - 2007-03-15 16:57 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_33.dll 2014-06-27 22:04 - 2007-03-12 16:42 - 04494184 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_33.dll 2014-06-27 22:04 - 2007-03-12 16:42 - 03495784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_33.dll 2014-06-27 22:04 - 2007-03-12 16:42 - 01400176 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_33.dll 2014-06-27 22:04 - 2007-03-12 16:42 - 01123696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_33.dll 2014-06-27 22:04 - 2007-03-05 12:42 - 00017688 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_1.dll 2014-06-27 22:04 - 2007-03-05 12:42 - 00015128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_1.dll 2014-06-27 22:04 - 2007-01-24 15:27 - 00393576 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_6.dll 2014-06-27 22:04 - 2007-01-24 15:27 - 00255848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_6.dll 2014-06-27 22:04 - 2006-12-08 12:02 - 00251672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_5.dll 2014-06-27 22:04 - 2006-12-08 12:00 - 00390424 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_5.dll 2014-06-27 22:04 - 2006-11-29 13:06 - 04398360 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_32.dll 2014-06-27 22:04 - 2006-11-29 13:06 - 03426072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_32.dll 2014-06-27 22:04 - 2006-11-29 13:06 - 00469264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10.dll 2014-06-27 22:04 - 2006-11-29 13:06 - 00440080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10.dll 2014-06-27 22:04 - 2006-09-28 16:05 - 03977496 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_31.dll 2014-06-27 22:04 - 2006-09-28 16:05 - 02414360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_31.dll 2014-06-27 22:04 - 2006-09-28 16:05 - 00237848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_4.dll 2014-06-27 22:04 - 2006-09-28 16:04 - 00364824 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_4.dll 2014-06-27 22:04 - 2006-07-28 09:31 - 00083736 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_2.dll 2014-06-27 22:04 - 2006-07-28 09:30 - 00363288 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_3.dll 2014-06-27 22:04 - 2006-07-28 09:30 - 00236824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_3.dll 2014-06-27 22:04 - 2006-07-28 09:30 - 00062744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_2.dll 2014-06-27 22:04 - 2006-05-31 07:24 - 00230168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_2.dll 2014-06-27 22:04 - 2006-05-31 07:22 - 00354072 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_2.dll 2014-06-27 22:04 - 2006-03-31 12:39 - 00083664 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_1.dll 2014-06-27 22:04 - 2006-03-31 12:39 - 00062672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_1.dll 2014-06-27 22:03 - 2014-06-27 22:04 - 00010123 _____ () C:\Windows\DirectX.log 2014-06-27 22:03 - 2006-03-31 12:41 - 03927248 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_30.dll 2014-06-27 22:03 - 2006-03-31 12:40 - 02388176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_30.dll 2014-06-27 22:03 - 2006-03-31 12:40 - 00352464 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_1.dll 2014-06-27 22:03 - 2006-03-31 12:39 - 00229584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_1.dll 2014-06-27 22:03 - 2006-02-03 08:43 - 03830992 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_29.dll 2014-06-27 22:03 - 2006-02-03 08:43 - 02332368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_29.dll 2014-06-27 22:03 - 2006-02-03 08:42 - 00355536 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_0.dll 2014-06-27 22:03 - 2006-02-03 08:42 - 00230096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_0.dll 2014-06-27 22:03 - 2006-02-03 08:41 - 00016592 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_0.dll 2014-06-27 22:03 - 2006-02-03 08:41 - 00014032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_0.dll 2014-06-27 22:03 - 2005-12-05 18:09 - 03815120 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_28.dll 2014-06-27 22:03 - 2005-12-05 18:09 - 02323664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_28.dll 2014-06-27 22:03 - 2005-07-22 19:59 - 03807440 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_27.dll 2014-06-27 22:03 - 2005-07-22 19:59 - 02319568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_27.dll 2014-06-27 22:03 - 2005-05-26 15:34 - 03767504 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_26.dll 2014-06-27 22:03 - 2005-05-26 15:34 - 02297552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_26.dll 2014-06-27 22:03 - 2005-03-18 17:19 - 03823312 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_25.dll 2014-06-27 22:03 - 2005-03-18 17:19 - 02337488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_25.dll 2014-06-27 22:03 - 2005-02-05 19:45 - 03544272 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_24.dll 2014-06-27 22:03 - 2005-02-05 19:45 - 02222800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_24.dll 2014-06-27 20:59 - 2014-06-27 20:59 - 01141680 _____ () C:\Users\Cyberstation\Downloads\SteamSetup.exe 2014-06-18 09:42 - 2014-06-18 09:42 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service 2014-06-15 14:58 - 2014-06-15 14:58 - 00000000 ____D () C:\Users\Cyberstation\AppData\Roaming\LolClient 2014-06-15 13:27 - 2014-06-16 23:40 - 00000000 __SHD () C:\Windows\SysWOW64\AI_RecycleBin 2014-06-15 13:27 - 2008-07-31 10:41 - 00068616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_1.dll 2014-06-15 13:27 - 2008-07-31 10:40 - 00509448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_2.dll 2014-06-15 13:27 - 2008-07-12 08:18 - 03851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll 2014-06-15 13:27 - 2008-07-12 08:18 - 01493528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_39.dll 2014-06-15 13:27 - 2008-07-12 08:18 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_39.dll 2014-06-15 13:26 - 2014-06-16 23:40 - 00000000 ____D () C:\Program Files (x86)\LOL 2014-06-15 13:24 - 2014-06-16 23:39 - 00000000 ____D () C:\Users\Cyberstation\AppData\Local\PMB Files 2014-06-15 13:24 - 2014-06-15 13:24 - 00000000 ____D () C:\Program Files (x86)\Pando Networks 2014-06-15 13:23 - 2014-06-15 13:24 - 00000000 ____D () C:\Users\Cyberstation\AppData\Roaming\Riot Games 2014-06-15 13:22 - 2014-06-15 13:22 - 34888568 _____ (Riot Games) C:\Users\Cyberstation\Downloads\LeagueofLegends_EUW_Installer_06_12_13.exe 2014-06-15 11:57 - 2014-06-16 12:09 - 01540748 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI 2014-06-15 01:21 - 2014-06-15 01:21 - 00000000 ____D () C:\Users\Gast\AppData\Local\Google 2014-06-14 19:54 - 2014-06-14 19:54 - 00000000 ____D () C:\Windows\System32\Tasks\WPD 2014-06-13 17:43 - 2014-06-13 17:43 - 00001080 _____ () C:\Windows\system32\settingsbkup.sfm 2014-06-13 17:43 - 2014-06-13 17:43 - 00001080 _____ () C:\Windows\system32\settings.sfm 2014-06-13 17:42 - 2014-06-13 17:42 - 00000000 ____D () C:\Program Files\Windows Portable Devices 2014-06-13 17:42 - 2014-06-13 17:42 - 00000000 ____D () C:\Program Files (x86)\Windows Portable Devices 2014-06-13 17:41 - 2014-06-13 17:41 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_07_00.Wdf 2014-06-13 17:41 - 2014-06-13 17:41 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdFs_01_07_00.Wdf 2014-06-13 13:10 - 2009-10-01 03:02 - 02537472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wpdshext.dll 2014-06-13 13:10 - 2009-10-01 03:02 - 00334848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PortableDeviceApi.dll 2014-06-13 13:10 - 2009-10-01 03:02 - 00087552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WPDShServiceObj.dll 2014-06-13 13:10 - 2009-10-01 03:02 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WPDShextAutoplay.exe 2014-06-13 13:10 - 2009-10-01 03:01 - 00350208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WPDSp.dll 2014-06-13 13:10 - 2009-10-01 03:01 - 00196608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PortableDeviceWMDRM.dll 2014-06-13 13:10 - 2009-10-01 03:01 - 00160256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PortableDeviceTypes.dll 2014-06-13 13:10 - 2009-10-01 03:01 - 00100864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PortableDeviceClassExtension.dll 2014-06-13 13:10 - 2009-10-01 03:01 - 00060928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PortableDeviceConnectApi.dll 2014-06-13 13:10 - 2009-10-01 02:52 - 02727936 _____ (Microsoft Corporation) C:\Windows\system32\wpdshext.dll 2014-06-13 13:10 - 2009-10-01 02:52 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\PortableDeviceApi.dll 2014-06-13 13:10 - 2009-10-01 02:52 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\WPDShextAutoplay.exe 2014-06-13 13:10 - 2009-10-01 02:51 - 00573440 _____ (Microsoft Corporation) C:\Windows\system32\wpd_ci.dll 2014-06-13 13:10 - 2009-10-01 02:51 - 00433152 _____ (Microsoft Corporation) C:\Windows\system32\WPDSp.dll 2014-06-13 13:10 - 2009-10-01 02:51 - 00295936 _____ (Microsoft Corporation) C:\Windows\system32\WpdMtp.dll 2014-06-13 13:10 - 2009-10-01 02:51 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\PortableDeviceWMDRM.dll 2014-06-13 13:10 - 2009-10-01 02:51 - 00214528 _____ (Microsoft Corporation) C:\Windows\system32\PortableDeviceTypes.dll 2014-06-13 13:10 - 2009-10-01 02:51 - 00113152 _____ (Microsoft Corporation) C:\Windows\system32\PortableDeviceClassExtension.dll 2014-06-13 13:10 - 2009-10-01 02:51 - 00110080 _____ (Microsoft Corporation) C:\Windows\system32\WPDShServiceObj.dll 2014-06-13 13:10 - 2009-10-01 02:51 - 00107008 _____ (Microsoft Corporation) C:\Windows\system32\wpdbusenum.dll 2014-06-13 13:10 - 2009-10-01 02:51 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\PortableDeviceConnectApi.dll 2014-06-13 13:10 - 2009-10-01 02:51 - 00075264 _____ (Microsoft Corporation) C:\Windows\system32\WpdMtpUS.dll 2014-06-13 13:10 - 2009-10-01 02:51 - 00046592 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WpdUsb.sys 2014-06-13 13:10 - 2009-10-01 02:51 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\BthMtpContextHandler.dll 2014-06-13 13:10 - 2009-10-01 02:51 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\WpdConns.dll 2014-06-13 12:45 - 2012-07-26 05:08 - 00744448 _____ (Microsoft Corporation) C:\Windows\system32\WUDFx.dll 2014-06-13 12:45 - 2012-07-26 05:08 - 00229888 _____ (Microsoft Corporation) C:\Windows\system32\WUDFHost.exe 2014-06-13 12:45 - 2012-07-26 05:08 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\WUDFPlatform.dll 2014-06-13 12:45 - 2012-07-26 05:08 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\WUDFSvc.dll 2014-06-13 12:45 - 2012-07-26 05:08 - 00045056 _____ (Microsoft Corporation) C:\Windows\system32\WUDFCoinstaller.dll 2014-06-13 12:45 - 2012-07-26 04:26 - 00198656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFRd.sys 2014-06-13 12:45 - 2012-07-26 04:26 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFPf.sys 2014-06-13 12:45 - 2012-06-02 16:57 - 00000003 _____ () C:\Windows\system32\Drivers\MsftWdf_User_01_11_00_Inbox_Critical.Wdf 2014-06-13 12:45 - 2009-07-14 14:19 - 00020480 _____ (Microsoft Corporation) C:\Windows\system32\winusb.dll 2014-06-13 12:45 - 2009-07-14 14:12 - 00016896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winusb.dll 2014-06-13 12:25 - 2012-02-29 17:37 - 00005632 _____ (Microsoft Corporation) C:\Windows\system32\wmi.dll 2014-06-13 12:25 - 2012-02-29 17:11 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmi.dll 2014-06-13 12:25 - 2012-02-29 15:52 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fs_rec.sys 2014-06-13 12:25 - 2009-09-10 04:07 - 03815424 _____ (Microsoft Corporation) C:\Windows\system32\UIRibbon.dll 2014-06-13 12:25 - 2009-09-10 04:06 - 01164800 _____ (Microsoft Corporation) C:\Windows\system32\UIRibbonRes.dll 2014-06-13 12:25 - 2009-09-10 04:05 - 00103424 _____ (Microsoft Corporation) C:\Windows\system32\UIAnimation.dll 2014-06-13 12:25 - 2009-09-10 04:01 - 03023360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIRibbon.dll 2014-06-13 12:25 - 2009-09-10 04:00 - 01164800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIRibbonRes.dll 2014-06-13 12:25 - 2009-09-10 04:00 - 00092672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAnimation.dll ==================== One Month Modified Files and Folders ======= 2014-07-13 15:35 - 2014-07-13 15:35 - 00014975 _____ () C:\Users\Cyberstation\Downloads\FRST.txt 2014-07-13 15:35 - 2014-07-13 15:34 - 00000000 ____D () C:\FRST 2014-07-13 15:35 - 2014-06-11 13:25 - 00001122 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2014-07-13 15:35 - 2008-01-21 03:53 - 01099527 _____ () C:\Windows\WindowsUpdate.log 2014-07-13 15:34 - 2014-07-13 15:34 - 02086912 _____ (Farbar) C:\Users\Cyberstation\Downloads\FRST64.exe 2014-07-13 15:33 - 2014-05-31 13:25 - 00000000 ____D () C:\Users\Cyberstation\AppData\Roaming\DropboxMaster 2014-07-13 15:33 - 2014-05-31 13:23 - 00000000 ___RD () C:\Users\Cyberstation\Dropbox 2014-07-13 15:33 - 2014-05-30 19:33 - 00000000 ____D () C:\Users\Cyberstation\AppData\Roaming\Dropbox 2014-07-13 15:32 - 2014-05-30 20:20 - 00000000 ____D () C:\Users\Cyberstation\AppData\Roaming\Spotify 2014-07-13 15:30 - 2014-06-11 13:25 - 00001118 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2014-07-13 15:30 - 2006-11-02 17:42 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-07-13 15:30 - 2006-11-02 17:22 - 00003712 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0 2014-07-13 15:30 - 2006-11-02 17:22 - 00003712 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0 2014-07-13 15:29 - 2014-07-13 15:29 - 00000596 _____ () C:\Users\Cyberstation\Downloads\defogger_disable.log 2014-07-13 15:29 - 2014-07-13 15:29 - 00000020 _____ () C:\Users\Cyberstation\defogger_reenable 2014-07-13 15:29 - 2014-05-30 18:23 - 00000000 ____D () C:\Users\Cyberstation 2014-07-13 15:29 - 2006-11-02 17:42 - 00032592 _____ () C:\Windows\Tasks\SCHEDLGU.TXT 2014-07-13 15:27 - 2014-07-13 15:27 - 00050477 _____ () C:\Users\Cyberstation\Downloads\Defogger.exe 2014-07-13 15:15 - 2014-05-31 23:03 - 00002745 _____ () C:\Users\Cyberstation\Desktop\Microsoft Outlook 2010.lnk 2014-07-13 00:28 - 2014-07-13 00:26 - 239621255 _____ () C:\Users\Cyberstation\Downloads\********** 2014-07-13 00:26 - 2014-06-28 19:27 - 00000000 ____D () C:\Users\Cyberstation\AppData\Roaming\vlc 2014-07-12 23:22 - 2014-07-12 23:19 - 273409069 _____ () C:\Users\Cyberstation\Downloads\********** 2014-07-12 23:21 - 2014-07-12 23:19 - 288907926 _____ () C:\Users\Cyberstation\Downloads\********** 2014-07-12 23:15 - 2014-07-12 23:15 - 00000000 ____D () C:\Users\Cyberstation\Downloads\********** 2014-07-12 23:14 - 2014-07-12 23:10 - 471518082 _____ () C:\Users\Cyberstation\Downloads\********** 2014-07-12 21:42 - 2014-05-30 19:37 - 00000000 ____D () C:\Users\Cyberstation\AppData\Roaming\DAEMON Tools Lite 2014-07-12 21:41 - 2014-05-30 21:15 - 00001173 _____ () C:\Users\Cyberstation\Desktop\RosettaStoneVersion3.lnk 2014-07-12 21:41 - 2014-05-30 18:23 - 00000000 ____D () C:\Users\Cyberstation\AppData\Local\VirtualStore 2014-07-12 15:52 - 2014-07-12 15:47 - 00000000 ____D () C:\Users\Cyberstation\Documents\Calibre-Bibliothek 2014-07-12 15:48 - 2014-07-12 15:48 - 00000000 ____D () C:\Users\Cyberstation\AppData\Local\calibre-cache 2014-07-12 15:48 - 2014-07-12 15:47 - 00000000 ____D () C:\Users\Cyberstation\AppData\Roaming\calibre 2014-07-12 15:46 - 2014-07-12 15:46 - 00000871 _____ () C:\Users\Public\Desktop\calibre - E-book management.lnk 2014-07-12 15:46 - 2014-07-12 15:46 - 00000000 ____D () C:\Program Files (x86)\Calibre2 2014-07-12 15:44 - 2014-07-12 15:44 - 56244224 _____ () C:\Users\Cyberstation\Downloads\calibre-1.44.0.msi 2014-07-12 15:44 - 2014-07-12 15:44 - 16737290 _____ () C:\Users\Cyberstation\Downloads\********** 2014-07-12 15:40 - 2014-07-12 15:40 - 16702117 _____ () C:\Users\Cyberstation\Downloads\********** 2014-07-12 15:37 - 2014-05-30 22:28 - 00000000 ____D () C:\Users\Cyberstation\Documents\********** 2014-07-11 18:30 - 2014-05-30 20:20 - 00000000 ____D () C:\Users\Cyberstation\AppData\Local\Spotify 2014-07-11 15:14 - 2008-01-21 13:10 - 01565124 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-07-11 15:14 - 2008-01-21 13:09 - 00673414 _____ () C:\Windows\system32\perfh007.dat 2014-07-11 15:14 - 2008-01-21 13:09 - 00145426 _____ () C:\Windows\system32\perfc007.dat 2014-07-11 15:11 - 2006-11-02 17:27 - 00101210 _____ () C:\Windows\setupact.log 2014-07-11 14:46 - 2014-06-04 11:11 - 00013050 _____ () C:\Users\Cyberstation\Desktop\********** 2014-07-10 19:29 - 2014-05-30 22:27 - 00002641 _____ () C:\Users\Cyberstation\Desktop\Microsoft Word 2010.lnk 2014-07-10 18:46 - 2014-07-10 13:41 - 00010147 _____ () C:\Users\Cyberstation\Desktop\********** 2014-07-10 16:50 - 2014-07-10 16:50 - 00000000 ____D () C:\Users\Cyberstation\Downloads\********** 2014-07-10 16:49 - 2014-07-10 16:41 - 734003200 _____ () C:\Users\Cyberstation\Downloads\********** 2014-07-10 16:48 - 2014-07-10 16:41 - 672344384 _____ () C:\Users\Cyberstation\Downloads\********** 2014-07-10 16:40 - 2014-05-30 20:00 - 00000000 ____D () C:\Program Files (x86)\JDownloader 2014-07-10 13:18 - 2014-05-30 22:27 - 00002643 _____ () C:\Users\Cyberstation\Desktop\Microsoft Excel 2010.lnk 2014-07-10 09:49 - 2006-11-02 17:21 - 02302280 _____ () C:\Windows\system32\FNTCACHE.DAT 2014-07-10 09:43 - 2006-11-02 17:07 - 00000000 ____D () C:\Program Files\Windows Journal 2014-07-10 09:24 - 2014-05-30 21:37 - 00000000 ____D () C:\Windows\system32\MRT 2014-07-10 09:22 - 2006-11-02 14:35 - 96441528 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe 2014-07-06 20:27 - 2014-07-06 20:23 - 00000000 ____D () C:\Users\Cyberstation\Downloads\********** 2014-07-06 20:18 - 2014-07-06 20:10 - 734003200 _____ () C:\Users\Cyberstation\Downloads\********** 2014-07-06 20:17 - 2014-07-06 20:10 - 669643728 _____ () C:\Users\Cyberstation\Downloads\********** 2014-07-06 17:19 - 2014-05-31 13:32 - 00008192 _____ () C:\Users\Cyberstation\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini 2014-07-06 15:54 - 2014-05-30 18:52 - 00117712 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys 2014-07-01 17:33 - 2014-07-01 17:26 - 701000032 _____ () C:\Users\Cyberstation\Downloads\********** 2014-07-01 17:32 - 2014-07-01 17:24 - 734003200 _____ () C:\Users\Cyberstation\Downloads\********** 2014-07-01 17:26 - 2014-07-01 17:19 - 706128656 _____ () C:\Users\Cyberstation\Downloads\********** 2014-07-01 17:24 - 2014-07-01 17:15 - 734003200 _____ () C:\Users\Cyberstation\Downloads\********** 2014-07-01 17:18 - 2014-07-01 17:11 - 706064608 _____ () C:\Users\Cyberstation\Downloads\********** 2014-07-01 17:16 - 2014-07-01 17:16 - 00000000 _____ () C:\Users\Cyberstation\Desktop\********** 2014-07-01 17:15 - 2014-07-01 17:07 - 734003200 _____ () C:\Users\Cyberstation\Downloads\********** 2014-07-01 17:11 - 2014-07-01 17:01 - 677611088 _____ () C:\Users\Cyberstation\Downloads\********** 2014-07-01 17:07 - 2014-07-01 17:01 - 681574400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-07-01 17:00 - 2014-07-01 16:50 - 849346560 _____ () C:\Users\Cyberstation\Downloads\********** 2014-07-01 17:00 - 2014-07-01 16:50 - 833077712 _____ () C:\Users\Cyberstation\Downloads\********** 2014-07-01 15:03 - 2014-07-01 14:58 - 535328048 _____ () C:\Users\Cyberstation\Downloads\********** 2014-07-01 15:02 - 2014-07-01 14:56 - 576716800 _____ () C:\Users\Cyberstation\Downloads\********** 2014-07-01 14:57 - 2014-07-01 14:51 - 576716800 _____ () C:\Users\Cyberstation\Downloads\********** 2014-07-01 14:56 - 2014-07-01 14:49 - 576716800 _____ () C:\Users\Cyberstation\Downloads\********** 2014-07-01 14:51 - 2014-07-01 14:46 - 524288000 _____ () C:\Users\Cyberstation\Downloads\********** 2014-07-01 14:49 - 2014-07-01 14:43 - 476037888 _____ () C:\Users\Cyberstation\Downloads\********** 2014-07-01 14:46 - 2014-07-01 14:40 - 524288000 _____ () C:\Users\Cyberstation\Downloads\********** 2014-07-01 14:43 - 2014-07-01 14:38 - 524288000 _____ () C:\Users\Cyberstation\Downloads\********** 2014-07-01 14:40 - 2014-07-01 14:34 - 524288000 _____ () C:\Users\Cyberstation\Downloads\********** 2014-07-01 14:37 - 2014-07-01 14:32 - 524288000 _____ () C:\Users\Cyberstation\Downloads\********** 2014-07-01 14:34 - 2014-07-01 14:28 - 524288000 _____ () C:\Users\Cyberstation\Downloads\********** 2014-07-01 14:32 - 2014-07-01 14:28 - 259149888 _____ () C:\Users\Cyberstation\Downloads\********** 2014-07-01 14:28 - 2014-07-01 14:23 - 524288000 _____ () C:\Users\Cyberstation\Downloads\********** 2014-07-01 14:28 - 2014-07-01 14:21 - 524288000 _____ () C:\Users\Cyberstation\Downloads\********** 2014-07-01 14:23 - 2014-07-01 14:19 - 398004976 _____ () C:\Users\Cyberstation\Downloads\********** 2014-07-01 14:21 - 2014-07-01 14:17 - 400102976 _____ () C:\Users\Cyberstation\Downloads\********** 2014-07-01 14:18 - 2014-07-01 14:12 - 524288000 _____ () C:\Users\Cyberstation\Downloads\********** 2014-07-01 14:17 - 2014-07-01 14:11 - 524288000 _____ () C:\Users\Cyberstation\Downloads\********** 2014-07-01 14:12 - 2014-07-01 14:05 - 524288000 _____ () C:\Users\Cyberstation\Downloads\********** 2014-07-01 14:11 - 2014-07-01 14:07 - 405696048 _____ () C:\Users\Cyberstation\Downloads\********** 2014-07-01 14:07 - 2014-07-01 14:00 - 524288000 _____ () C:\Users\Cyberstation\Downloads\********** 2014-07-01 14:05 - 2014-07-01 14:02 - 349102864 _____ () C:\Users\Cyberstation\Downloads\********** 2014-07-01 14:02 - 2014-07-01 13:57 - 420847904 _____ () C:\Users\Cyberstation\Downloads\********** 2014-07-01 14:00 - 2014-07-01 13:55 - 524288000 _____ () C:\Users\Cyberstation\Downloads\********** 2014-07-01 13:57 - 2014-07-01 13:51 - 524288000 _____ () C:\Users\Cyberstation\Downloads\********** 2014-07-01 13:54 - 2014-07-01 13:48 - 524288000 _____ () C:\Users\Cyberstation\Downloads\********** 2014-07-01 13:51 - 2014-07-01 13:46 - 524288000 _____ () C:\Users\Cyberstation\Downloads\********** 2014-07-01 13:48 - 2014-07-01 13:42 - 524288000 _____ () C:\Users\Cyberstation\Downloads\********** 2014-07-01 13:46 - 2014-07-01 13:40 - 524288000 _____ () C:\Users\Cyberstation\Downloads\********** 2014-07-01 13:42 - 2014-07-01 13:37 - 351488704 _____ () C:\Users\Cyberstation\Downloads\********** 2014-07-01 13:40 - 2014-07-01 13:35 - 524288000 _____ () C:\Users\Cyberstation\Downloads\********** 2014-07-01 13:37 - 2014-07-01 13:32 - 524288000 _____ () C:\Users\Cyberstation\Downloads\********** 2014-07-01 13:35 - 2014-07-01 13:28 - 524288000 _____ () C:\Users\Cyberstation\Downloads\********** 2014-07-01 13:32 - 2014-07-01 13:27 - 524288000 _____ () C:\Users\Cyberstation\Downloads\********** 2014-07-01 13:28 - 2014-07-01 13:22 - 524288000 _____ () C:\Users\Cyberstation\Downloads\********** 2014-07-01 13:27 - 2014-07-01 13:21 - 461647600 _____ () C:\Users\Cyberstation\Downloads\********** 2014-07-01 13:21 - 2014-07-01 13:16 - 524288000 _____ () C:\Users\Cyberstation\Downloads\********** 2014-07-01 13:21 - 2014-07-01 13:15 - 524288000 _____ () C:\Users\Cyberstation\Downloads\********** 2014-07-01 13:15 - 2014-07-01 12:14 - 524288000 _____ () C:\Users\Cyberstation\Downloads\********** 2014-07-01 13:15 - 2014-07-01 12:14 - 524288000 _____ () C:\Users\Cyberstation\Downloads\********** 2014-07-01 00:35 - 2014-06-30 15:00 - 00000000 ____D () C:\Users\Cyberstation\Downloads\********** 2014-07-01 00:34 - 2014-06-30 14:50 - 00000000 ____D () C:\Users\Cyberstation\Downloads\********** 2014-07-01 00:30 - 2014-06-30 14:41 - 00000000 ____D () C:\Users\Cyberstation\Downloads\********** 2014-06-30 15:00 - 2014-06-30 14:59 - 163491820 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-30 15:00 - 2014-06-30 14:56 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-30 14:59 - 2014-06-30 14:54 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-30 14:55 - 2014-06-30 14:51 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-30 14:54 - 2014-06-30 14:50 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-30 14:50 - 2014-06-30 14:46 - 370164760 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-30 14:50 - 2014-06-30 14:45 - 440401920 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-30 14:45 - 2014-06-30 14:41 - 440401920 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-30 14:45 - 2014-06-30 14:39 - 440401920 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-30 14:41 - 2014-06-30 14:36 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-30 14:39 - 2014-06-30 14:37 - 203917016 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-30 14:37 - 2014-06-30 14:32 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-30 14:36 - 2014-06-30 14:32 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-30 14:32 - 2014-06-30 14:29 - 229162904 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-30 14:32 - 2014-06-30 14:27 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-30 14:29 - 2014-06-30 14:25 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-30 14:25 - 2014-06-30 14:21 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-30 14:25 - 2014-06-30 14:21 - 326638680 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-30 14:21 - 2014-06-30 14:17 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-30 14:21 - 2014-06-30 14:15 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-30 14:17 - 2014-06-30 14:13 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-30 14:15 - 2014-06-30 14:10 - 374940216 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-30 14:13 - 2014-06-30 14:09 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-30 14:10 - 2014-06-30 14:04 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-30 14:08 - 2014-06-30 14:04 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-30 14:04 - 2014-06-30 14:02 - 160388808 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-30 14:04 - 2014-06-30 14:00 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-30 14:02 - 2014-06-30 13:57 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-30 14:00 - 2014-06-30 13:56 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-30 13:56 - 2014-06-30 13:54 - 177277560 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-30 13:56 - 2014-06-30 13:52 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-30 13:54 - 2014-06-30 13:49 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-30 13:52 - 2014-06-30 13:47 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-30 13:49 - 2014-06-30 13:46 - 305981112 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-30 13:47 - 2014-06-30 13:43 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-30 13:46 - 2014-06-30 13:40 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-30 13:42 - 2014-06-30 13:38 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-30 13:40 - 2014-06-30 13:35 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-30 13:38 - 2014-06-30 13:36 - 186982360 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-30 13:36 - 2014-06-30 13:31 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-30 13:35 - 2014-06-30 13:31 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-29 17:00 - 2014-06-28 23:13 - 00000000 ____D () C:\Users\Cyberstation\Downloads\********** 2014-06-29 16:59 - 2014-06-28 23:26 - 00000000 ____D () C:\Users\Cyberstation\Downloads\********** 2014-06-29 16:59 - 2014-06-28 22:59 - 00000000 ____D () C:\Users\Cyberstation\Downloads\********** 2014-06-29 16:59 - 2014-06-28 22:43 - 00000000 ____D () C:\Users\Cyberstation\Downloads\********** 2014-06-29 16:57 - 2014-06-28 22:25 - 00000000 ____D () C:\Users\Cyberstation\Downloads\********** 2014-06-28 23:26 - 2014-06-28 23:22 - 325952240 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-28 23:26 - 2014-06-28 23:21 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-28 23:22 - 2014-06-28 23:18 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-28 23:21 - 2014-06-28 23:16 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-28 23:18 - 2014-06-28 23:13 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-28 23:16 - 2014-06-28 23:12 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-28 23:13 - 2014-06-28 23:08 - 330509056 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-28 23:12 - 2014-06-28 23:08 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-28 23:08 - 2014-06-28 23:04 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-28 23:08 - 2014-06-28 23:02 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-28 23:04 - 2014-06-28 22:59 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-28 23:02 - 2014-06-28 22:58 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-28 22:59 - 2014-06-28 22:55 - 407250772 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-28 22:58 - 2014-06-28 22:53 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-28 22:55 - 2014-06-28 22:50 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-28 22:52 - 2014-06-28 22:48 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-28 22:50 - 2014-06-28 22:46 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-28 22:48 - 2014-06-28 22:43 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-28 22:46 - 2014-06-28 22:40 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-28 22:43 - 2014-06-28 22:39 - 406919476 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-28 22:40 - 2014-06-28 22:35 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-28 22:39 - 2014-06-28 22:35 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-28 22:35 - 2014-06-28 22:30 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-28 22:35 - 2014-06-28 22:30 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-28 22:30 - 2014-06-28 22:25 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-28 22:30 - 2014-06-28 22:25 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-28 22:25 - 2014-06-28 22:21 - 321940816 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-28 22:25 - 2014-06-28 22:20 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-28 22:21 - 2014-06-28 22:16 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-28 22:19 - 2014-06-28 22:12 - 00000000 ____D () C:\Users\Cyberstation\Downloads\********** 2014-06-28 22:18 - 2014-06-28 22:13 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-28 22:17 - 2014-06-28 21:34 - 00000000 ____D () C:\Users\Cyberstation\Downloads\********** 2014-06-28 22:16 - 2014-06-28 22:07 - 00000000 ____D () C:\Users\Cyberstation\Downloads\********** 2014-06-28 22:15 - 2014-06-28 22:11 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-28 22:11 - 2014-06-28 22:07 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-28 22:10 - 2014-06-28 22:07 - 325194736 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-28 22:07 - 2014-06-28 22:02 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-28 22:07 - 2014-06-28 20:25 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-28 22:02 - 2014-06-28 21:55 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-28 21:55 - 2014-06-28 21:47 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-28 21:47 - 2014-06-28 21:41 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-28 21:40 - 2014-06-28 21:34 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-28 21:33 - 2014-06-28 21:28 - 326931936 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-28 21:28 - 2014-06-28 21:21 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-28 21:21 - 2014-06-28 21:15 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-28 21:14 - 2014-06-28 21:08 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-28 21:08 - 2014-06-28 20:55 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-28 21:01 - 2014-06-28 20:53 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-28 20:53 - 2014-06-28 20:46 - 407078660 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-28 20:46 - 2014-06-28 20:39 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-28 20:39 - 2014-06-28 20:32 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-28 20:32 - 2014-06-28 20:30 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-28 20:30 - 2014-06-28 20:27 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-28 20:26 - 2014-06-28 20:22 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-28 20:24 - 2014-06-28 20:19 - 413233588 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-28 20:22 - 2014-06-28 20:18 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-28 20:19 - 2014-06-28 20:14 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-28 20:18 - 2014-06-28 20:13 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-28 20:14 - 2014-06-28 20:10 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-28 20:13 - 2014-06-28 20:08 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-28 20:09 - 2014-06-28 20:05 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-28 19:44 - 2014-06-28 19:41 - 328768656 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-28 19:43 - 2014-06-28 19:39 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-28 19:41 - 2014-06-28 19:35 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-28 19:38 - 2014-06-28 19:34 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-28 19:35 - 2014-06-28 19:30 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-28 19:34 - 2014-06-28 19:30 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********** 2014-06-28 13:02 - 2006-11-02 15:33 - 00000000 ____D () C:\Windows\LiveKernelReports 2014-06-27 22:04 - 2014-06-27 22:03 - 00010123 _____ () C:\Windows\DirectX.log 2014-06-27 20:59 - 2014-06-27 20:59 - 01141680 _____ () C:\Users\Cyberstation\Downloads\SteamSetup.exe 2014-06-25 00:02 - 2014-07-01 17:33 - 00000000 ____D () C:\Users\Cyberstation\Downloads\********** 2014-06-21 05:30 - 2014-06-11 13:25 - 00004118 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA 2014-06-21 05:30 - 2014-06-11 13:25 - 00003866 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore 2014-06-18 09:42 - 2014-06-18 09:42 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service 2014-06-18 09:42 - 2014-05-30 19:38 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2014-06-17 20:27 - 2014-07-01 17:26 - 00000000 ____D () C:\Users\Cyberstation\Downloads\********** 2014-06-16 23:40 - 2014-06-15 13:27 - 00000000 __SHD () C:\Windows\SysWOW64\AI_RecycleBin 2014-06-16 23:40 - 2014-06-15 13:26 - 00000000 ____D () C:\Program Files (x86)\LOL 2014-06-16 23:39 - 2014-06-15 13:24 - 00000000 ____D () C:\Users\Cyberstation\AppData\Local\PMB Files 2014-06-16 14:33 - 2014-05-30 21:02 - 00000000 ____D () C:\Users\Cyberstation\AppData\Roaming\Adobe 2014-06-16 14:23 - 2014-05-30 21:07 - 00000000 ____D () C:\Users\Cyberstation\AppData\Local\Adobe 2014-06-16 12:09 - 2014-06-15 11:57 - 01540748 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI 2014-06-15 16:19 - 2008-01-21 05:26 - 00104466 _____ () C:\Windows\PFRO.log 2014-06-15 14:58 - 2014-06-15 14:58 - 00000000 ____D () C:\Users\Cyberstation\AppData\Roaming\LolClient 2014-06-15 14:43 - 2014-05-30 22:28 - 00000000 ____D () C:\Users\Cyberstation\Documents\********** 2014-06-15 14:33 - 2014-05-30 22:29 - 00015142 _____ () C:\Users\Cyberstation\Desktop\********** 2014-06-15 13:24 - 2014-06-15 13:24 - 00000000 ____D () C:\Program Files (x86)\Pando Networks 2014-06-15 13:24 - 2014-06-15 13:23 - 00000000 ____D () C:\Users\Cyberstation\AppData\Roaming\Riot Games 2014-06-15 13:22 - 2014-06-15 13:22 - 34888568 _____ (Riot Games) C:\Users\Cyberstation\Downloads\LeagueofLegends_EUW_Installer_06_12_13.exe 2014-06-15 01:21 - 2014-06-15 01:21 - 00000000 ____D () C:\Users\Gast\AppData\Local\Google 2014-06-15 01:21 - 2014-05-30 23:08 - 00000979 _____ () C:\Users\Gast\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2014-06-15 01:21 - 2014-05-30 23:08 - 00000949 _____ () C:\Users\Gast\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk 2014-06-15 01:21 - 2014-05-30 23:07 - 00000915 _____ () C:\Users\Gast\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Mail.lnk 2014-06-14 21:02 - 2014-05-30 21:01 - 00699056 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2014-06-14 21:02 - 2014-05-30 21:01 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2014-06-14 20:08 - 2006-11-02 15:33 - 00000000 ____D () C:\Windows\rescache 2014-06-14 19:54 - 2014-06-14 19:54 - 00000000 ____D () C:\Windows\System32\Tasks\WPD 2014-06-13 17:43 - 2014-06-13 17:43 - 00001080 _____ () C:\Windows\system32\settingsbkup.sfm 2014-06-13 17:43 - 2014-06-13 17:43 - 00001080 _____ () C:\Windows\system32\settings.sfm 2014-06-13 17:42 - 2014-06-13 17:42 - 00000000 ____D () C:\Program Files\Windows Portable Devices 2014-06-13 17:42 - 2014-06-13 17:42 - 00000000 ____D () C:\Program Files (x86)\Windows Portable Devices 2014-06-13 17:42 - 2006-11-02 17:07 - 00000000 ____D () C:\Windows\SysWOW64\XPSViewer 2014-06-13 17:42 - 2006-11-02 15:34 - 00000000 ____D () C:\Windows\SysWOW64\zh-HK 2014-06-13 17:42 - 2006-11-02 15:34 - 00000000 ____D () C:\Windows\SysWOW64\uk-UA 2014-06-13 17:42 - 2006-11-02 15:34 - 00000000 ____D () C:\Windows\SysWOW64\tr-TR 2014-06-13 17:42 - 2006-11-02 15:34 - 00000000 ____D () C:\Windows\SysWOW64\th-TH 2014-06-13 17:42 - 2006-11-02 15:34 - 00000000 ____D () C:\Windows\SysWOW64\sr-Latn-CS 2014-06-13 17:42 - 2006-11-02 15:34 - 00000000 ____D () C:\Windows\SysWOW64\sl-SI 2014-06-13 17:42 - 2006-11-02 15:34 - 00000000 ____D () C:\Windows\SysWOW64\sk-SK 2014-06-13 17:42 - 2006-11-02 15:34 - 00000000 ____D () C:\Windows\SysWOW64\ro-RO 2014-06-13 17:42 - 2006-11-02 15:34 - 00000000 ____D () C:\Windows\SysWOW64\lv-LV 2014-06-13 17:42 - 2006-11-02 15:34 - 00000000 ____D () C:\Windows\SysWOW64\lt-LT 2014-06-13 17:42 - 2006-11-02 15:34 - 00000000 ____D () C:\Windows\SysWOW64\hr-HR 2014-06-13 17:42 - 2006-11-02 15:34 - 00000000 ____D () C:\Windows\SysWOW64\he-IL 2014-06-13 17:42 - 2006-11-02 15:34 - 00000000 ____D () C:\Windows\SysWOW64\et-EE 2014-06-13 17:42 - 2006-11-02 15:34 - 00000000 ____D () C:\Windows\SysWOW64\bg-BG 2014-06-13 17:42 - 2006-11-02 15:34 - 00000000 ____D () C:\Windows\SysWOW64\ar-SA 2014-06-13 17:42 - 2006-11-02 15:34 - 00000000 ____D () C:\Windows\system32\zh-HK 2014-06-13 17:42 - 2006-11-02 15:34 - 00000000 ____D () C:\Windows\system32\uk-UA 2014-06-13 17:42 - 2006-11-02 15:34 - 00000000 ____D () C:\Windows\system32\tr-TR 2014-06-13 17:42 - 2006-11-02 15:34 - 00000000 ____D () C:\Windows\system32\th-TH 2014-06-13 17:42 - 2006-11-02 15:34 - 00000000 ____D () C:\Windows\system32\sr-Latn-CS 2014-06-13 17:42 - 2006-11-02 15:34 - 00000000 ____D () C:\Windows\system32\sl-SI 2014-06-13 17:42 - 2006-11-02 15:34 - 00000000 ____D () C:\Windows\system32\sk-SK 2014-06-13 17:42 - 2006-11-02 15:34 - 00000000 ____D () C:\Windows\system32\ro-RO 2014-06-13 17:42 - 2006-11-02 15:34 - 00000000 ____D () C:\Windows\system32\lv-LV 2014-06-13 17:42 - 2006-11-02 15:34 - 00000000 ____D () C:\Windows\system32\lt-LT 2014-06-13 17:42 - 2006-11-02 15:34 - 00000000 ____D () C:\Windows\system32\hr-HR 2014-06-13 17:42 - 2006-11-02 15:34 - 00000000 ____D () C:\Windows\system32\he-IL 2014-06-13 17:42 - 2006-11-02 15:34 - 00000000 ____D () C:\Windows\system32\et-EE 2014-06-13 17:42 - 2006-11-02 15:33 - 00000000 ____D () C:\Windows\system32\bg-BG 2014-06-13 17:42 - 2006-11-02 15:33 - 00000000 ____D () C:\Windows\system32\ar-SA 2014-06-13 17:41 - 2014-06-13 17:41 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_07_00.Wdf 2014-06-13 17:41 - 2014-06-13 17:41 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdFs_01_07_00.Wdf 2014-06-13 17:41 - 2006-11-02 15:33 - 00000000 ____D () C:\Program Files\Common Files\System 2014-06-13 17:40 - 2014-05-30 20:47 - 00000159 ___RH () C:\Windows\ctfile.rfc 2014-06-13 17:40 - 2014-05-30 20:31 - 00466456 _____ (Creative Labs) C:\Windows\system32\wrap_oal.dll 2014-06-13 17:40 - 2014-05-30 20:31 - 00444952 _____ (Creative Labs) C:\Windows\SysWOW64\wrap_oal.dll 2014-06-13 17:40 - 2014-05-30 20:31 - 00121880 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\Windows\system32\OpenAL32.dll 2014-06-13 17:40 - 2014-05-30 20:31 - 00109080 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\Windows\SysWOW64\OpenAL32.dll Some content of TEMP: ==================== C:\Users\Cyberstation\AppData\Local\Temp\13-9-legacy_vista_win7_64_dd_ccc_whql.exe C:\Users\Cyberstation\AppData\Local\Temp\avgnt.exe C:\Users\Cyberstation\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpuzov5s.dll C:\Users\Cyberstation\AppData\Local\Temp\swt-win32-3349.dll C:\Users\Cyberstation\AppData\Local\Temp\Uni000.exe C:\Users\Cyberstation\AppData\Local\Temp\_is46B0.exe C:\Users\Cyberstation\AppData\Local\Temp\_is586C.exe C:\Users\Cyberstation\AppData\Local\Temp\_isB06A.exe C:\Users\Gast\AppData\Local\Temp\avgnt.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => File is digitally signed C:\Windows\System32\wininit.exe => File is digitally signed C:\Windows\SysWOW64\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\System32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\System32\services.exe => File is digitally signed C:\Windows\System32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\System32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\System32\rpcss.dll => File is digitally signed C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2014-07-13 15:37 ==================== End Of Log ============================ Momentan finde ich mittels Antivir und Bitdefender Total Security keinerlei Schädlinge mehr auf meinem PC, weswegen ich davon ausgehe, dass ich dem Problem Einhalt geboten habe. Wie sieht eure Einschätzung aus? Danke für euer Engagement und eure Hilfe! |
15.07.2014, 12:12 | #5 |
/// Winkelfunktion /// TB-Süch-Tiger™ | Windows Vista 64 Bit: EXP/CVE-2011-2414.D (edit) Bitte erläutern, ob dieser Rechner gewerblich genutzt wird. Ich seh da eine ganze Reihe an Software, die sich der durchschnittliche Otto Privato niemals kaufen würde.
__________________ Logfiles bitte immer in CODE-Tags posten |
15.07.2014, 12:39 | #6 |
| Windows Vista 64 Bit: EXP/CVE-2011-2414.D Ich bin derzeit Student und arbeite als 450€ Kraft via Home Office für ein Medienunternehmen eines Freundes. Dieses Unternehmen hat mir die Software zur Verfügung gestellt. Der PC von dem ihr hier die Logdaten seht, wird von mir hauptsächlich, mit der Ausnahme der 10h die Woche, privat genutzt. |
15.07.2014, 13:09 | #7 |
/// Winkelfunktion /// TB-Süch-Tiger™ | Windows Vista 64 Bit: EXP/CVE-2011-2414.D Ok, mir ging's nämlich darum, ob das ein Büro-PC ist oder nicht, so einer kann nämlich u.U. sensible Kundendaten o.ä. in die Logs schreiben. Adware/Junkware/Toolbars entfernen 1. Schritt: adwCleaner Downloade Dir bitte AdwCleaner auf deinen Desktop.
2. Schritt: JRT - Junkware Removal Tool Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
3. Schritt: Frisches Log mit FRST Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit (Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
__________________ Logfiles bitte immer in CODE-Tags posten |
15.07.2014, 13:59 | #8 |
| Windows Vista 64 Bit: EXP/CVE-2011-2414.D AdwCleaner: Code:
ATTFilter # AdwCleaner v3.215 - Bericht erstellt am 15/07/2014 um 14:18:21 # Aktualisiert 09/07/2014 von Xplode # Betriebssystem : Windows (TM) Vista Home Premium Service Pack 2 (64 bits) # Benutzername : Cyberstation - CYBERSTATION-PC # Gestartet von : C:\Users\Cyberstation\Downloads\adwcleaner_3.215.exe # Option : Löschen ***** [ Dienste ] ***** ***** [ Dateien / Ordner ] ***** [!] Ordner Gelöscht : C:\Users\CYBERS~1\AppData\Local\Temp\OCS ***** [ Verknüpfungen ] ***** ***** [ Registrierungsdatenbank ] ***** Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5} Schlüssel Gelöscht : HKCU\Software\OCS ***** [ Browser ] ***** -\\ Internet Explorer v9.0.8112.16561 -\\ Mozilla Firefox v30.0 (de) [ Datei : C:\Users\Cyberstation\AppData\Roaming\Mozilla\Firefox\Profiles\14pz22pp.default\prefs.js ] [ Datei : C:\Users\Gast\AppData\Roaming\Mozilla\Firefox\Profiles\43ddkp89.default\prefs.js ] -\\ Google Chrome v35.0.1916.153 [ Datei : C:\Users\Cyberstation\AppData\Local\Google\Chrome\User Data\Default\preferences ] ************************* AdwCleaner[R0].txt - [1418 octets] - [15/07/2014 14:17:39] AdwCleaner[S0].txt - [1198 octets] - [15/07/2014 14:18:21] ########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [1258 octets] ########## Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Junkware Removal Tool (JRT) by Thisisu Version: 6.1.4 (04.06.2014:1) OS: Windows (TM) Vista Home Premium x64 Ran by Cyberstation on 15.07.2014 at 14:28:03,43 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~ Services ~~~ Registry Values ~~~ Registry Keys ~~~ Files ~~~ Folders Successfully deleted: [Folder] "C:\Windows\syswow64\ai_recyclebin" ~~~ FireFox Emptied folder: C:\Users\Cyberstation\AppData\Roaming\mozilla\firefox\profiles\14pz22pp.default\minidumps [27 files] ~~~ Event Viewer Logs were cleared ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Scan was completed on 15.07.2014 at 14:33:24,26 End of JRT log ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-07-2014 Ran by Cyberstation (administrator) on CYBERSTATION-PC on 15-07-2014 14:35:46 Running from C:\Users\Cyberstation\Downloads Platform: Windows Vista (TM) Home Premium Service Pack 2 (X64) OS Language: Deutsch (Deutschland) Internet Explorer Version 9 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (AMD) C:\Windows\System32\atiesrxx.exe (Microsoft Corporation) C:\Windows\System32\SLsvc.exe (AMD) C:\Windows\System32\atieclxx.exe (Cisco Systems, Inc.) C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnagent.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe () C:\Program Files\ASUS\Six Engine\SixEngine.exe (Microsoft Corporation) C:\Program Files\Windows Defender\MSASCui.exe (Greenshot) C:\Program Files\Greenshot\Greenshot.exe (Spotify Ltd) C:\Users\Cyberstation\AppData\Roaming\Spotify\spotify.exe (Spotify Ltd) C:\Users\Cyberstation\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe (Dropbox, Inc.) C:\Users\Cyberstation\AppData\Roaming\Dropbox\bin\Dropbox.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Microsoft Corp.) C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktop.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (Creative Technology Ltd) C:\Windows\SysWOW64\Ctxfihlp.exe (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe (Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe (ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Microsoft Corp.) C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe (Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe (Microsoft Corp.) C:\Program Files (x86)\Microsoft\BingDesktop\BDExtHost.exe (Microsoft Corp.) C:\Program Files (x86)\Microsoft\BingDesktop\BDAppHost.exe (Microsoft Corp.) C:\Program Files (x86)\Microsoft\BingDesktop\BDRuntimeHost.exe (Creative Technology Ltd) C:\Windows\SysWOW64\CTxfispi.exe (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE () C:\Users\Cyberstation\AppData\Roaming\Spotify\Data\SpotifyHelper.exe () C:\Users\Cyberstation\AppData\Roaming\Spotify\Data\SpotifyHelper.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe () C:\Users\Cyberstation\AppData\Roaming\Spotify\Data\SpotifyHelper.exe () C:\Users\Cyberstation\AppData\Roaming\Spotify\Data\SpotifyHelper.exe () C:\Users\Cyberstation\AppData\Roaming\Spotify\Data\SpotifyHelper.exe (Microsoft Corporation) C:\Windows\SysWOW64\conime.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_14_0_0_145.exe (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_14_0_0_145.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [Windows Defender] => C:\Program Files\Windows Defender\MSASCui.exe [1584184 2008-01-21] (Microsoft Corporation) HKLM\...\Run: [Greenshot] => C:\Program Files\Greenshot\Greenshot.exe [495616 2014-05-12] (Greenshot) HKLM\...\Run: [InstallerLauncher] => "C:\Program Files\Common Files\Bitdefender\SetupInformation\{6F57816A-791A-4159-A75F-CFD0C7EA4FBF}\setuplauncher.exe" /run:"C:\Program Files\Common Files\Bitdefender\SetupInformation\{6F57816A-791A-4159-A75F-CFD0C7EA4FBF}\Installer.exe" HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [750160 2014-07-06] (Avira Operations GmbH & Co. KG) HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642304 2013-04-30] (Advanced Micro Devices, Inc.) HKLM-x32\...\Run: [BingDesktop] => C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktop.exe [2368728 2014-05-23] (Microsoft Corp.) HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896 2014-05-07] (Oracle Corporation) HKLM-x32\...\Run: [UpdReg] => C:\Windows\UpdReg.EXE [90112 2000-05-11] (Creative Technology Ltd.) HKLM-x32\...\Run: [CTxfiHlp] => C:\Windows\SysWOW64\CTXFIHLP.EXE [25600 2009-06-03] (Creative Technology Ltd) HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-07-08] (Apple Inc.) HKU\S-1-5-19\...\Run: [WindowsWelcomeCenter] => rundll32.exe oobefldr.dll,ShowWelcomeCenter HKU\S-1-5-20\...\Run: [WindowsWelcomeCenter] => rundll32.exe oobefldr.dll,ShowWelcomeCenter HKU\S-1-5-21-3132636138-289149283-414863540-1000\...\Run: [Spotify] => C:\Users\Cyberstation\AppData\Roaming\Spotify\Spotify.exe [6189624 2014-06-27] (Spotify Ltd) HKU\S-1-5-21-3132636138-289149283-414863540-1000\...\Run: [Spotify Web Helper] => C:\Users\Cyberstation\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1176632 2014-06-27] (Spotify Ltd) HKU\S-1-5-21-3132636138-289149283-414863540-1000\...\Policies\system: [LogonHoursAction] 2 HKU\S-1-5-21-3132636138-289149283-414863540-1000\...\Policies\system: [DontDisplayLogonHoursWarnings] 1 Startup: C:\Users\Cyberstation\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk ShortcutTarget: Dropbox.lnk -> C:\Users\Cyberstation\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) Startup: C:\Users\Cyberstation\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Microsoft Outlook 2010.lnk ShortcutTarget: Microsoft Outlook 2010.lnk -> C:\Windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\outicon.exe () ShellIconOverlayIdentifiers: DropboxExt1 -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => No File ShellIconOverlayIdentifiers: DropboxExt2 -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => No File ShellIconOverlayIdentifiers: DropboxExt3 -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => No File ShellIconOverlayIdentifiers: DropboxExt4 -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => No File ShellIconOverlayIdentifiers-x32: DropboxExt1 -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => No File ShellIconOverlayIdentifiers-x32: DropboxExt2 -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => No File ShellIconOverlayIdentifiers-x32: DropboxExt3 -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => No File ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x1D9E641F7185CF01 HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe SearchScopes: HKLM-x32 - DefaultScope value is missing. BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation) BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated) BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation) BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) Tcpip\Parameters: [DhcpNameServer] 192.168.0.1 FireFox: ======== FF ProfilePath: C:\Users\Cyberstation\AppData\Roaming\Mozilla\Firefox\Profiles\14pz22pp.default FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_14_0_0_145.dll () FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_145.dll () FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll () FF Plugin-x32: @java.com/DTPlugin,version=10.60.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.60.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WPF,version=3.5 - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation) FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @videolan.org/vlc,version=2.0.6 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: DownloadHelper - C:\Users\Cyberstation\AppData\Roaming\Mozilla\Firefox\Profiles\14pz22pp.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2014-05-30] FF Extension: Facebook Ads Block - C:\Users\Cyberstation\AppData\Roaming\Mozilla\Firefox\Profiles\14pz22pp.default\Extensions\jid1-CGxMej0nDJTjwQ@jetpack.xpi [2014-05-30] FF Extension: Nimbus Screen Capture - editable screenshots. - C:\Users\Cyberstation\AppData\Roaming\Mozilla\Firefox\Profiles\14pz22pp.default\Extensions\nimbusscreencaptureff@everhelper.me.xpi [2014-05-30] FF Extension: Updated Ad Blocker for Firefox 11+ - C:\Users\Cyberstation\AppData\Roaming\Mozilla\Firefox\Profiles\14pz22pp.default\Extensions\{4DC70064-89E2-4a55-8FC6-E8CDEAE3618C}.xpi [2014-05-30] FF HKLM-x32\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension FF Extension: Microsoft .NET Framework Assistant - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2014-05-30] Chrome: ======= CHR HomePage: CHR Extension: (Google Docs) - C:\Users\Cyberstation\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-06-11] CHR Extension: (Google Drive) - C:\Users\Cyberstation\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-06-11] CHR Extension: (YouTube) - C:\Users\Cyberstation\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-06-11] CHR Extension: (Google-Suche) - C:\Users\Cyberstation\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-06-11] CHR Extension: (Google Wallet) - C:\Users\Cyberstation\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-06-11] CHR Extension: (Google Mail) - C:\Users\Cyberstation\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-06-11] ==================== Services (Whitelisted) ================= R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [430160 2014-07-06] (Avira Operations GmbH & Co. KG) R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [430160 2014-07-06] (Avira Operations GmbH & Co. KG) R2 BingDesktopUpdate; C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe [173784 2014-05-23] (Microsoft Corp.) ==================== Drivers (Whitelisted) ==================== S3 acsint; C:\Windows\System32\DRIVERS\acsint64.sys [49520 2013-12-13] (Cisco Systems, Inc.) S3 acsmux; C:\Windows\System32\DRIVERS\acsmux64.sys [73584 2013-12-13] (Cisco Systems, Inc.) R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [14392 2007-12-17] () R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [117712 2014-07-06] (Avira Operations GmbH & Co. KG) R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [130584 2014-06-03] (Avira Operations GmbH & Co. KG) R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2014-05-30] (Avira Operations GmbH & Co. KG) R3 L1E; C:\Windows\System32\DRIVERS\L1E60x64.sys [56320 2008-06-30] (Atheros Communications, Inc.) R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [15680 2006-11-01] () R0 mv61xx; C:\Windows\System32\DRIVERS\mv61xx.sys [173096 2008-06-24] (Marvell Semiconductor, Inc.) S4 sptd; C:\Windows\System32\Drivers\sptd.sys [564824 2014-05-30] (Duplex Secure Ltd.) S3 CT20XUT.DLL; system32\CT20XUT.DLL [X] S3 CTEXFIFX.DLL; system32\CTEXFIFX.DLL [X] S3 CTHWIUT.DLL; system32\CTHWIUT.DLL [X] S3 IpInIp; system32\DRIVERS\ipinip.sys [X] S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [X] S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [X] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-07-15 14:33 - 2014-07-15 14:33 - 00000850 _____ () C:\Users\Cyberstation\Desktop\JRT.txt 2014-07-15 14:28 - 2014-07-15 14:28 - 00000000 ____D () C:\Windows\ERUNT 2014-07-15 14:27 - 2014-07-15 14:27 - 01016261 _____ (Thisisu) C:\Users\Cyberstation\Downloads\JRT.exe 2014-07-15 14:23 - 2014-07-15 14:23 - 00001338 _____ () C:\Users\Cyberstation\Desktop\AdwCleaner[S0].txt 2014-07-15 14:18 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll 2014-07-15 14:17 - 2014-07-15 14:18 - 00000000 ____D () C:\AdwCleaner 2014-07-15 14:16 - 2014-07-15 14:16 - 01348263 _____ () C:\Users\Cyberstation\Downloads\adwcleaner_3.215.exe 2014-07-15 00:20 - 2014-07-15 00:20 - 00001694 _____ () C:\Users\Public\Desktop\iTunes.lnk 2014-07-15 00:19 - 2014-07-15 00:20 - 00000000 ____D () C:\Program Files\iTunes 2014-07-15 00:19 - 2014-07-15 00:20 - 00000000 ____D () C:\Program Files (x86)\iTunes 2014-07-15 00:19 - 2014-07-15 00:19 - 00000000 ____D () C:\Program Files\iPod 2014-07-13 18:16 - 2014-07-13 18:16 - 00000000 ____D () C:\Users\Cyberstation\Desktop\Neuer Ordner 2014-07-13 16:45 - 2014-07-13 16:45 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_avchv_01009.Wdf 2014-07-13 16:44 - 2013-11-04 16:47 - 00074512 _____ (BitDefender SRL) C:\Windows\SysWOW64\bdsandboxuiskin32.dll 2014-07-13 16:44 - 2009-07-15 01:21 - 01721576 _____ (Microsoft Corporation) C:\Windows\system32\WdfCoInstaller01009.dll 2014-07-13 16:44 - 2007-04-11 11:11 - 00511328 _____ (Microsoft Corporation) C:\Windows\capicom.dll 2014-07-13 16:39 - 2014-07-13 16:57 - 00000000 ____D () C:\Program Files\Bitdefender 2014-07-13 16:39 - 2014-07-13 16:39 - 00000000 _____ () C:\Windows\system32\BDSandBoxUISkin32.dll 2014-07-13 16:39 - 2013-11-04 16:47 - 00084848 _____ (BitDefender SRL) C:\Windows\system32\BDSandBoxUISkin.dll 2014-07-13 16:39 - 2013-11-04 16:46 - 00034384 _____ (BitDefender SRL) C:\Windows\system32\BDSandBoxUH.dll 2014-07-13 16:38 - 2014-07-13 16:55 - 00000000 ____D () C:\Program Files\Common Files\Bitdefender 2014-07-13 16:38 - 2014-07-13 16:38 - 07040424 _____ () C:\Users\Cyberstation\Downloads\bitdefender_tsecurity_2015.exe 2014-07-13 16:38 - 2014-07-13 16:38 - 00000000 ____D () C:\Users\Cyberstation\AppData\Roaming\QuickScan 2014-07-13 15:56 - 2014-07-13 15:56 - 00380416 _____ () C:\Users\Cyberstation\Downloads\Gmer-19357.exe 2014-07-13 15:36 - 2014-07-13 15:37 - 00040126 _____ () C:\Users\Cyberstation\Downloads\Addition.txt 2014-07-13 15:35 - 2014-07-15 14:35 - 00015351 _____ () C:\Users\Cyberstation\Downloads\FRST.txt 2014-07-13 15:34 - 2014-07-15 14:35 - 00000000 ____D () C:\FRST 2014-07-13 15:34 - 2014-07-13 15:34 - 02086912 _____ (Farbar) C:\Users\Cyberstation\Downloads\FRST64.exe 2014-07-13 15:29 - 2014-07-13 15:29 - 00000596 _____ () C:\Users\Cyberstation\Downloads\defogger_disable.log 2014-07-13 15:29 - 2014-07-13 15:29 - 00000020 _____ () C:\Users\Cyberstation\defogger_reenable 2014-07-13 15:27 - 2014-07-13 15:27 - 00050477 _____ () C:\Users\Cyberstation\Downloads\Defogger.exe 2014-07-13 00:26 - 2014-07-13 00:28 - 239621255 _____ () C:\Users\Cyberstation\Downloads\********* 2014-07-12 23:19 - 2014-07-12 23:22 - 273409069 _____ () C:\Users\Cyberstation\Downloads\********* 2014-07-12 23:19 - 2014-07-12 23:21 - 288907926 _____ () C:\Users\Cyberstation\Downloads\********* 2014-07-12 23:15 - 2014-07-12 23:15 - 00000000 ____D () C:\Users\Cyberstation\Downloads\********* 2014-07-12 23:10 - 2014-07-12 23:14 - 471518082 _____ () C:\Users\Cyberstation\Downloads\********* 2014-07-12 15:48 - 2014-07-12 15:48 - 00000000 ____D () C:\Users\Cyberstation\AppData\Local\calibre-cache 2014-07-12 15:47 - 2014-07-12 15:52 - 00000000 ____D () C:\Users\Cyberstation\Documents\Calibre-Bibliothek 2014-07-12 15:47 - 2014-07-12 15:48 - 00000000 ____D () C:\Users\Cyberstation\AppData\Roaming\calibre 2014-07-12 15:47 - 2012-10-10 15:27 - 00000000 ____D () C:\Users\Cyberstation\Downloads\********* 2014-07-12 15:46 - 2014-07-12 15:46 - 00000871 _____ () C:\Users\Public\Desktop\calibre - E-book management.lnk 2014-07-12 15:46 - 2014-07-12 15:46 - 00000000 ____D () C:\Program Files (x86)\Calibre2 2014-07-12 15:44 - 2014-07-12 15:44 - 56244224 _____ () C:\Users\Cyberstation\Downloads\calibre-1.44.0.msi 2014-07-12 15:44 - 2014-07-12 15:44 - 16737290 _____ () C:\Users\Cyberstation\Downloads\********* 2014-07-12 15:40 - 2014-07-12 15:40 - 16702117 _____ () C:\Users\Cyberstation\Downloads\********* 2014-07-10 16:50 - 2014-07-10 16:50 - 00000000 ____D () C:\Users\Cyberstation\Downloads\********* 2014-07-10 16:41 - 2014-07-10 16:49 - 734003200 _____ () C:\Users\Cyberstation\Downloads\********* 2014-07-10 16:41 - 2014-07-10 16:48 - 672344384 _____ () C:\Users\Cyberstation\Downloads\********* 2014-07-10 13:41 - 2014-07-10 18:46 - 00010147 _____ () C:\Users\Cyberstation\Desktop\********* 2014-07-09 13:46 - 2014-06-07 06:02 - 17854464 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-07-09 13:46 - 2014-06-07 05:13 - 10890752 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-07-09 13:46 - 2014-06-07 04:59 - 02339328 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-07-09 13:46 - 2014-06-07 04:52 - 01348608 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-07-09 13:46 - 2014-06-07 04:51 - 01494016 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-07-09 13:46 - 2014-06-07 04:51 - 01392128 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-07-09 13:46 - 2014-06-07 04:50 - 00237056 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2014-07-09 13:46 - 2014-06-07 04:47 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-07-09 13:46 - 2014-06-07 04:45 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2014-07-09 13:46 - 2014-06-07 04:45 - 00599040 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2014-07-09 13:46 - 2014-06-07 04:45 - 00173056 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2014-07-09 13:46 - 2014-06-07 04:42 - 02148352 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-07-09 13:46 - 2014-06-07 04:42 - 00729088 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-07-09 13:46 - 2014-06-07 04:42 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2014-07-09 13:46 - 2014-06-07 04:42 - 00282112 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2014-07-09 13:46 - 2014-06-07 04:41 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2014-07-09 13:46 - 2014-06-07 04:41 - 00055296 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2014-07-09 13:46 - 2014-06-07 04:41 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2014-07-09 13:46 - 2014-06-07 04:40 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-07-09 13:46 - 2014-06-07 04:39 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe 2014-07-09 13:46 - 2014-06-07 04:35 - 00248320 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-07-09 13:46 - 2014-06-07 02:33 - 02777088 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2014-07-09 13:46 - 2014-06-07 02:05 - 12353024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-07-09 13:46 - 2014-06-07 01:25 - 09711616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2014-07-09 13:46 - 2014-06-07 01:12 - 01810432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2014-07-09 13:46 - 2014-06-07 01:04 - 01106432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2014-07-09 13:46 - 2014-06-07 01:03 - 01427968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2014-07-09 13:46 - 2014-06-07 01:02 - 01129472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2014-07-09 13:46 - 2014-06-07 01:00 - 00231936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll 2014-07-09 13:46 - 2014-06-07 00:58 - 00065024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2014-07-09 13:46 - 2014-06-07 00:57 - 00142848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2014-07-09 13:46 - 2014-06-07 00:56 - 00717824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2014-07-09 13:46 - 2014-06-07 00:56 - 00421376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2014-07-09 13:46 - 2014-06-07 00:54 - 00607744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2014-07-09 13:46 - 2014-06-07 00:54 - 00353792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2014-07-09 13:46 - 2014-06-07 00:54 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2014-07-09 13:46 - 2014-06-07 00:54 - 00041472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll 2014-07-09 13:46 - 2014-06-07 00:53 - 01796096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2014-07-09 13:46 - 2014-06-07 00:53 - 00073728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2014-07-09 13:46 - 2014-06-07 00:53 - 00010752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe 2014-07-09 13:46 - 2014-06-07 00:52 - 02382848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2014-07-09 13:46 - 2014-06-07 00:51 - 00011776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe 2014-07-09 13:46 - 2014-06-07 00:47 - 00176640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2014-07-09 13:46 - 2014-06-06 10:59 - 00506880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll 2014-07-09 13:46 - 2014-06-06 09:13 - 00620032 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll 2014-07-09 13:46 - 2014-05-30 09:10 - 00404992 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys 2014-07-06 20:23 - 2014-07-06 20:27 - 00000000 ____D () C:\Users\Cyberstation\Downloads\********* 2014-07-06 20:10 - 2014-07-06 20:18 - 734003200 _____ () C:\Users\Cyberstation\Downloads\********* 2014-07-06 20:10 - 2014-07-06 20:17 - 669643728 _____ () C:\Users\Cyberstation\Downloads\********* 2014-07-01 17:33 - 2014-06-25 00:02 - 00000000 ____D () C:\Users\Cyberstation\Downloads\********* 2014-07-01 17:26 - 2014-07-01 17:33 - 701000032 _____ () C:\Users\Cyberstation\Downloads\********* 2014-07-01 17:26 - 2014-06-17 20:27 - 00000000 ____D () C:\Users\Cyberstation\Downloads\********* 2014-07-01 17:24 - 2014-07-01 17:32 - 734003200 _____ () C:\Users\Cyberstation\Downloads\********* 2014-07-01 17:19 - 2014-07-01 17:26 - 706128656 _____ () C:\Users\Cyberstation\Downloads\********* 2014-07-01 17:19 - 2014-06-11 14:58 - 00000000 ____D () C:\Users\Cyberstation\Downloads\********* 2014-07-01 17:16 - 2014-07-01 17:16 - 00000000 _____ () C:\Users\Cyberstation\Desktop\********* 2014-07-01 17:15 - 2014-07-01 17:24 - 734003200 _____ () C:\Users\Cyberstation\Downloads\********* 2014-07-01 17:11 - 2014-07-01 17:18 - 706064608 _____ () C:\Users\Cyberstation\Downloads\********* 2014-07-01 17:11 - 2014-06-04 20:52 - 00000000 ____D () C:\Users\Cyberstation\Downloads\********* 2014-07-01 17:07 - 2014-07-01 17:15 - 734003200 _____ () C:\Users\Cyberstation\Downloads\********* 2014-07-01 17:01 - 2014-07-01 17:11 - 677611088 _____ () C:\Users\Cyberstation\Downloads\********* 2014-07-01 17:01 - 2014-07-01 17:07 - 681574400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-07-01 17:01 - 2014-06-11 20:48 - 00000000 ____D () C:\Users\Cyberstation\Downloads\********* 2014-07-01 16:50 - 2014-07-01 17:00 - 849346560 _____ () C:\Users\Cyberstation\Downloads\********* 2014-07-01 16:50 - 2014-07-01 17:00 - 833077712 _____ () C:\Users\Cyberstation\Downloads\********* 2014-07-01 14:58 - 2014-07-01 15:03 - 535328048 _____ () C:\Users\Cyberstation\Downloads\********* 2014-07-01 14:56 - 2014-07-01 15:02 - 576716800 _____ () C:\Users\Cyberstation\Downloads\********* 2014-07-01 14:51 - 2014-07-01 14:57 - 576716800 _____ () C:\Users\Cyberstation\Downloads\********* 2014-07-01 14:49 - 2014-07-01 14:56 - 576716800 _____ () C:\Users\Cyberstation\Downloads\********* 2014-07-01 14:46 - 2014-07-01 14:51 - 524288000 _____ () C:\Users\Cyberstation\Downloads\********* 2014-07-01 14:43 - 2014-07-01 14:49 - 476037888 _____ () C:\Users\Cyberstation\Downloads\********* 2014-07-01 14:40 - 2014-07-01 14:46 - 524288000 _____ () C:\Users\Cyberstation\Downloads\********* 2014-07-01 14:38 - 2014-07-01 14:43 - 524288000 _____ () C:\Users\Cyberstation\Downloads\********* 2014-07-01 14:34 - 2014-07-01 14:40 - 524288000 _____ () C:\Users\Cyberstation\Downloads\********* 2014-07-01 14:32 - 2014-07-01 14:37 - 524288000 _____ () C:\Users\Cyberstation\Downloads\********* 2014-07-01 14:28 - 2014-07-01 14:34 - 524288000 _____ () C:\Users\Cyberstation\Downloads\********* 2014-07-01 14:28 - 2014-07-01 14:32 - 259149888 _____ () C:\Users\Cyberstation\Downloads\********* 2014-07-01 14:23 - 2014-07-01 14:28 - 524288000 _____ () C:\Users\Cyberstation\Downloads\********* 2014-07-01 14:21 - 2014-07-01 14:28 - 524288000 _____ () C:\Users\Cyberstation\Downloads\********* 2014-07-01 14:19 - 2014-07-01 14:23 - 398004976 _____ () C:\Users\Cyberstation\Downloads\********* 2014-07-01 14:17 - 2014-07-01 14:21 - 400102976 _____ () C:\Users\Cyberstation\Downloads\********* 2014-07-01 14:12 - 2014-07-01 14:18 - 524288000 _____ () C:\Users\Cyberstation\Downloads\********* 2014-07-01 14:11 - 2014-07-01 14:17 - 524288000 _____ () C:\Users\Cyberstation\Downloads\********* 2014-07-01 14:07 - 2014-07-01 14:11 - 405696048 _____ () C:\Users\Cyberstation\Downloads\********* 2014-07-01 14:05 - 2014-07-01 14:12 - 524288000 _____ () C:\Users\Cyberstation\Downloads\********* 2014-07-01 14:02 - 2014-07-01 14:05 - 349102864 _____ () C:\Users\Cyberstation\Downloads\********* 2014-07-01 14:00 - 2014-07-01 14:07 - 524288000 _____ () C:\Users\Cyberstation\Downloads\********* 2014-07-01 13:57 - 2014-07-01 14:02 - 420847904 _____ () C:\Users\Cyberstation\Downloads\********* 2014-07-01 13:55 - 2014-07-01 14:00 - 524288000 _____ () C:\Users\Cyberstation\Downloads\********* 2014-07-01 13:51 - 2014-07-01 13:57 - 524288000 _____ () C:\Users\Cyberstation\Downloads\********* 2014-07-01 13:48 - 2014-07-01 13:54 - 524288000 _____ () C:\Users\Cyberstation\Downloads\********* 2014-07-01 13:46 - 2014-07-01 13:51 - 524288000 _____ () C:\Users\Cyberstation\Downloads\********* 2014-07-01 13:42 - 2014-07-01 13:48 - 524288000 _____ () C:\Users\Cyberstation\Downloads\********* 2014-07-01 13:40 - 2014-07-01 13:46 - 524288000 _____ () C:\Users\Cyberstation\Downloads\********* 2014-07-01 13:37 - 2014-07-01 13:42 - 351488704 _____ () C:\Users\Cyberstation\Downloads\********* 2014-07-01 13:35 - 2014-07-01 13:40 - 524288000 _____ () C:\Users\Cyberstation\Downloads\********* 2014-07-01 13:32 - 2014-07-01 13:37 - 524288000 _____ () C:\Users\Cyberstation\Downloads\********* 2014-07-01 13:28 - 2014-07-01 13:35 - 524288000 _____ () C:\Users\Cyberstation\Downloads\********* 2014-07-01 13:27 - 2014-07-01 13:32 - 524288000 _____ () C:\Users\Cyberstation\Downloads\********* 2014-07-01 13:22 - 2014-07-01 13:28 - 524288000 _____ () C:\Users\Cyberstation\Downloads\********* 2014-07-01 13:21 - 2014-07-01 13:27 - 461647600 _____ () C:\Users\Cyberstation\Downloads\********* 2014-07-01 13:16 - 2014-07-01 13:21 - 524288000 _____ () C:\Users\Cyberstation\Downloads\********* 2014-07-01 13:15 - 2014-07-01 13:21 - 524288000 _____ () C:\Users\Cyberstation\Downloads\********* 2014-07-01 12:14 - 2014-07-01 13:15 - 524288000 _____ () C:\Users\Cyberstation\Downloads\********* 2014-07-01 12:14 - 2014-07-01 13:15 - 524288000 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-30 15:00 - 2014-07-01 00:35 - 00000000 ____D () C:\Users\Cyberstation\Downloads\********* 2014-06-30 14:59 - 2014-06-30 15:00 - 163491820 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-30 14:56 - 2014-06-30 15:00 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-30 14:54 - 2014-06-30 14:59 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-30 14:51 - 2014-06-30 14:55 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-30 14:50 - 2014-07-01 00:34 - 00000000 ____D () C:\Users\Cyberstation\Downloads\********* 2014-06-30 14:50 - 2014-06-30 14:54 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-30 14:46 - 2014-06-30 14:50 - 370164760 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-30 14:45 - 2014-06-30 14:50 - 440401920 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-30 14:41 - 2014-07-01 00:30 - 00000000 ____D () C:\Users\Cyberstation\Downloads\********* 2014-06-30 14:41 - 2014-06-30 14:45 - 440401920 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-30 14:39 - 2014-06-30 14:45 - 440401920 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-30 14:37 - 2014-06-30 14:39 - 203917016 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-30 14:36 - 2014-06-30 14:41 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-30 14:32 - 2014-06-30 14:37 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-30 14:32 - 2014-06-30 14:36 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-30 14:32 - 2012-11-22 22:43 - 00000000 ____D () C:\Users\Cyberstation\Downloads\********* 2014-06-30 14:29 - 2014-06-30 14:32 - 229162904 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-30 14:27 - 2014-06-30 14:32 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-30 14:25 - 2014-06-30 14:29 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-30 14:25 - 2012-11-22 22:43 - 00000000 ____D () C:\Users\Cyberstation\Downloads\********* 2014-06-30 14:21 - 2014-06-30 14:25 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-30 14:21 - 2014-06-30 14:25 - 326638680 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-30 14:17 - 2014-06-30 14:21 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-30 14:15 - 2014-06-30 14:21 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-30 14:15 - 2012-11-22 22:43 - 00000000 ____D () C:\Users\Cyberstation\Downloads\********* 2014-06-30 14:13 - 2014-06-30 14:17 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-30 14:10 - 2014-06-30 14:15 - 374940216 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-30 14:09 - 2014-06-30 14:13 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-30 14:04 - 2014-06-30 14:10 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-30 14:04 - 2014-06-30 14:08 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-30 14:04 - 2012-11-22 22:43 - 00000000 ____D () C:\Users\Cyberstation\Downloads\********* 2014-06-30 14:02 - 2014-06-30 14:04 - 160388808 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-30 14:00 - 2014-06-30 14:04 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-30 13:57 - 2014-06-30 14:02 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-30 13:57 - 2012-11-22 22:43 - 00000000 ____D () C:\Users\Cyberstation\Downloads\********* 2014-06-30 13:56 - 2014-06-30 14:00 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-30 13:54 - 2014-06-30 13:56 - 177277560 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-30 13:52 - 2014-06-30 13:56 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-30 13:49 - 2014-06-30 13:54 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-30 13:49 - 2012-11-22 22:43 - 00000000 ____D () C:\Users\Cyberstation\Downloads\********* 2014-06-30 13:47 - 2014-06-30 13:52 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-30 13:46 - 2014-06-30 13:49 - 305981112 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-30 13:43 - 2014-06-30 13:47 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-30 13:40 - 2014-06-30 13:46 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-30 13:40 - 2012-11-22 22:43 - 00000000 ____D () C:\Users\Cyberstation\Downloads\********* 2014-06-30 13:38 - 2014-06-30 13:42 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-30 13:36 - 2014-06-30 13:38 - 186982360 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-30 13:35 - 2014-06-30 13:40 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-30 13:31 - 2014-06-30 13:36 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-30 13:31 - 2014-06-30 13:35 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-28 23:26 - 2014-06-29 16:59 - 00000000 ____D () C:\Users\Cyberstation\Downloads\********* 2014-06-28 23:22 - 2014-06-28 23:26 - 325952240 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-28 23:21 - 2014-06-28 23:26 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-28 23:18 - 2014-06-28 23:22 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-28 23:16 - 2014-06-28 23:21 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-28 23:13 - 2014-06-29 17:00 - 00000000 ____D () C:\Users\Cyberstation\Downloads\********* 2014-06-28 23:13 - 2014-06-28 23:18 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-28 23:12 - 2014-06-28 23:16 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-28 23:08 - 2014-06-28 23:13 - 330509056 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-28 23:08 - 2014-06-28 23:12 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-28 23:04 - 2014-06-28 23:08 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-28 23:02 - 2014-06-28 23:08 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-28 22:59 - 2014-06-29 16:59 - 00000000 ____D () C:\Users\Cyberstation\Downloads\********* 2014-06-28 22:59 - 2014-06-28 23:04 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-28 22:58 - 2014-06-28 23:02 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-28 22:55 - 2014-06-28 22:59 - 407250772 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-28 22:53 - 2014-06-28 22:58 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-28 22:50 - 2014-06-28 22:55 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-28 22:48 - 2014-06-28 22:52 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-28 22:46 - 2014-06-28 22:50 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-28 22:43 - 2014-06-29 16:59 - 00000000 ____D () C:\Users\Cyberstation\Downloads\********* 2014-06-28 22:43 - 2014-06-28 22:48 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-28 22:40 - 2014-06-28 22:46 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-28 22:39 - 2014-06-28 22:43 - 406919476 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-28 22:35 - 2014-06-28 22:40 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-28 22:35 - 2014-06-28 22:39 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-28 22:30 - 2014-06-28 22:35 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-28 22:30 - 2014-06-28 22:35 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-28 22:25 - 2014-06-29 16:57 - 00000000 ____D () C:\Users\Cyberstation\Downloads\********* 2014-06-28 22:25 - 2014-06-28 22:30 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-28 22:25 - 2014-06-28 22:30 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-28 22:21 - 2014-06-28 22:25 - 321940816 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-28 22:20 - 2014-06-28 22:25 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-28 22:16 - 2014-06-28 22:21 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-28 22:13 - 2014-06-28 22:18 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-28 22:12 - 2014-06-28 22:19 - 00000000 ____D () C:\Users\Cyberstation\Downloads\********* 2014-06-28 22:11 - 2014-06-28 22:15 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-28 22:07 - 2014-06-28 22:16 - 00000000 ____D () C:\Users\Cyberstation\Downloads\********* 2014-06-28 22:07 - 2014-06-28 22:11 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-28 22:07 - 2014-06-28 22:10 - 325194736 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-28 22:02 - 2014-06-28 22:07 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-28 21:55 - 2014-06-28 22:02 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-28 21:47 - 2014-06-28 21:55 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-28 21:41 - 2014-06-28 21:47 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-28 21:34 - 2014-06-28 22:17 - 00000000 ____D () C:\Users\Cyberstation\Downloads\********* 2014-06-28 21:34 - 2014-06-28 21:40 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-28 21:28 - 2014-06-28 21:33 - 326931936 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-28 21:21 - 2014-06-28 21:28 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-28 21:15 - 2014-06-28 21:21 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-28 21:08 - 2014-06-28 21:14 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-28 20:55 - 2014-06-28 21:08 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-28 20:53 - 2014-06-28 21:01 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-28 20:46 - 2014-06-28 20:53 - 407078660 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-28 20:39 - 2014-06-28 20:46 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-28 20:32 - 2014-06-28 20:39 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-28 20:30 - 2014-06-28 20:32 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-28 20:27 - 2014-06-28 20:30 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-28 20:25 - 2014-06-28 22:07 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-28 20:25 - 2012-11-22 22:41 - 00000000 ____D () C:\Users\Cyberstation\Downloads\********* 2014-06-28 20:22 - 2014-06-28 20:26 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-28 20:19 - 2014-06-28 20:24 - 413233588 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-28 20:18 - 2014-06-28 20:22 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-28 20:14 - 2014-06-28 20:19 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-28 20:13 - 2014-06-28 20:18 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-28 20:10 - 2014-06-28 20:14 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-28 20:08 - 2014-06-28 20:13 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-28 20:05 - 2014-06-28 20:09 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-28 19:44 - 2012-11-22 22:41 - 00000000 ____D () C:\Users\Cyberstation\Downloads\********* 2014-06-28 19:41 - 2014-06-28 19:44 - 328768656 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-28 19:39 - 2014-06-28 19:43 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-28 19:35 - 2014-06-28 19:41 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-28 19:34 - 2014-06-28 19:38 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-28 19:30 - 2014-06-28 19:35 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-28 19:30 - 2014-06-28 19:34 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-28 19:27 - 2014-07-13 00:26 - 00000000 ____D () C:\Users\Cyberstation\AppData\Roaming\vlc 2014-06-27 22:05 - 2010-06-02 04:55 - 00527192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_7.dll 2014-06-27 22:05 - 2010-06-02 04:55 - 00518488 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_7.dll 2014-06-27 22:05 - 2010-06-02 04:55 - 00239960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_7.dll 2014-06-27 22:05 - 2010-06-02 04:55 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_7.dll 2014-06-27 22:05 - 2010-06-02 04:55 - 00077656 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_5.dll 2014-06-27 22:05 - 2010-06-02 04:55 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_5.dll 2014-06-27 22:05 - 2010-05-26 11:41 - 02526056 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_43.dll 2014-06-27 22:05 - 2010-05-26 11:41 - 02401112 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_43.dll 2014-06-27 22:05 - 2010-05-26 11:41 - 02106216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_43.dll 2014-06-27 22:05 - 2010-05-26 11:41 - 01998168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_43.dll 2014-06-27 22:05 - 2010-05-26 11:41 - 01907552 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_43.dll 2014-06-27 22:05 - 2010-05-26 11:41 - 01868128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_43.dll 2014-06-27 22:05 - 2010-05-26 11:41 - 00511328 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_43.dll 2014-06-27 22:05 - 2010-05-26 11:41 - 00470880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_43.dll 2014-06-27 22:05 - 2010-05-26 11:41 - 00276832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_43.dll 2014-06-27 22:05 - 2010-05-26 11:41 - 00248672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_43.dll 2014-06-27 22:05 - 2010-02-04 10:01 - 00530776 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_6.dll 2014-06-27 22:05 - 2010-02-04 10:01 - 00528216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_6.dll 2014-06-27 22:05 - 2010-02-04 10:01 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_6.dll 2014-06-27 22:05 - 2010-02-04 10:01 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_6.dll 2014-06-27 22:05 - 2010-02-04 10:01 - 00078680 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_4.dll 2014-06-27 22:05 - 2010-02-04 10:01 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_4.dll 2014-06-27 22:05 - 2010-02-04 10:01 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_7.dll 2014-06-27 22:05 - 2010-02-04 10:01 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_7.dll 2014-06-27 22:05 - 2009-09-04 17:44 - 00517960 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_5.dll 2014-06-27 22:05 - 2009-09-04 17:44 - 00515416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_5.dll 2014-06-27 22:05 - 2009-09-04 17:44 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_5.dll 2014-06-27 22:05 - 2009-09-04 17:44 - 00176968 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_5.dll 2014-06-27 22:05 - 2009-09-04 17:44 - 00073544 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_3.dll 2014-06-27 22:05 - 2009-09-04 17:44 - 00069464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_3.dll 2014-06-27 22:05 - 2009-09-04 17:29 - 05554512 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_42.dll 2014-06-27 22:05 - 2009-09-04 17:29 - 05501792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_42.dll 2014-06-27 22:05 - 2009-09-04 17:29 - 02582888 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_42.dll 2014-06-27 22:05 - 2009-09-04 17:29 - 02475352 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_42.dll 2014-06-27 22:05 - 2009-09-04 17:29 - 01974616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_42.dll 2014-06-27 22:05 - 2009-09-04 17:29 - 01892184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_42.dll 2014-06-27 22:05 - 2009-09-04 17:29 - 00523088 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_42.dll 2014-06-27 22:05 - 2009-09-04 17:29 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_42.dll 2014-06-27 22:05 - 2009-09-04 17:29 - 00285024 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_42.dll 2014-06-27 22:05 - 2009-09-04 17:29 - 00235344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_42.dll 2014-06-27 22:05 - 2009-03-16 14:18 - 00521560 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_4.dll 2014-06-27 22:05 - 2009-03-16 14:18 - 00517448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_4.dll 2014-06-27 22:05 - 2009-03-16 14:18 - 00235352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_4.dll 2014-06-27 22:05 - 2009-03-16 14:18 - 00174936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_4.dll 2014-06-27 22:05 - 2009-03-16 14:18 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_6.dll 2014-06-27 22:05 - 2009-03-16 14:18 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_6.dll 2014-06-27 22:05 - 2009-03-09 15:27 - 05425496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_41.dll 2014-06-27 22:05 - 2009-03-09 15:27 - 04178264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_41.dll 2014-06-27 22:05 - 2009-03-09 15:27 - 02430312 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_41.dll 2014-06-27 22:05 - 2009-03-09 15:27 - 01846632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_41.dll 2014-06-27 22:05 - 2009-03-09 15:27 - 00520544 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_41.dll 2014-06-27 22:05 - 2009-03-09 15:27 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_41.dll 2014-06-27 22:05 - 2008-10-27 10:04 - 00518480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_3.dll 2014-06-27 22:05 - 2008-10-27 10:04 - 00514384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_3.dll 2014-06-27 22:05 - 2008-10-27 10:04 - 00235856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_3.dll 2014-06-27 22:05 - 2008-10-27 10:04 - 00175440 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_3.dll 2014-06-27 22:05 - 2008-10-27 10:04 - 00074576 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_2.dll 2014-06-27 22:05 - 2008-10-27 10:04 - 00070992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_2.dll 2014-06-27 22:05 - 2008-10-27 10:04 - 00025936 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_5.dll 2014-06-27 22:05 - 2008-10-27 10:04 - 00023376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_5.dll 2014-06-27 22:05 - 2008-10-15 06:22 - 05631312 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_40.dll 2014-06-27 22:05 - 2008-10-15 06:22 - 04379984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_40.dll 2014-06-27 22:05 - 2008-10-15 06:22 - 02605920 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_40.dll 2014-06-27 22:05 - 2008-10-15 06:22 - 02036576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_40.dll 2014-06-27 22:05 - 2008-10-15 06:22 - 00519000 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_40.dll 2014-06-27 22:05 - 2008-10-15 06:22 - 00452440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_40.dll 2014-06-27 22:05 - 2008-07-31 10:41 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_2.dll 2014-06-27 22:05 - 2008-07-31 10:41 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_2.dll 2014-06-27 22:05 - 2008-07-31 10:41 - 00072200 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_1.dll 2014-06-27 22:05 - 2008-07-31 10:40 - 00513544 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_2.dll 2014-06-27 22:05 - 2008-07-10 11:00 - 04992520 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_39.dll 2014-06-27 22:05 - 2008-07-10 11:00 - 01942552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_39.dll 2014-06-27 22:05 - 2008-07-10 11:00 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_39.dll 2014-06-27 22:05 - 2008-05-30 14:19 - 00511496 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_1.dll 2014-06-27 22:05 - 2008-05-30 14:19 - 00507400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_1.dll 2014-06-27 22:05 - 2008-05-30 14:17 - 00068104 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_0.dll 2014-06-27 22:05 - 2008-05-30 14:17 - 00065032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_0.dll 2014-06-27 22:04 - 2008-05-30 14:18 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_1.dll 2014-06-27 22:04 - 2008-05-30 14:18 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_1.dll 2014-06-27 22:04 - 2008-05-30 14:17 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_4.dll 2014-06-27 22:04 - 2008-05-30 14:16 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_4.dll 2014-06-27 22:04 - 2008-05-30 14:11 - 04991496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_38.dll 2014-06-27 22:04 - 2008-05-30 14:11 - 03850760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_38.dll 2014-06-27 22:04 - 2008-05-30 14:11 - 01941528 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_38.dll 2014-06-27 22:04 - 2008-05-30 14:11 - 01491992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_38.dll 2014-06-27 22:04 - 2008-05-30 14:11 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_38.dll 2014-06-27 22:04 - 2008-05-30 14:11 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_38.dll 2014-06-27 22:04 - 2008-03-05 16:04 - 00489480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_0.dll 2014-06-27 22:04 - 2008-03-05 16:03 - 00479752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_0.dll 2014-06-27 22:04 - 2008-03-05 16:03 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_0.dll 2014-06-27 22:04 - 2008-03-05 16:03 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_0.dll 2014-06-27 22:04 - 2008-03-05 16:00 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_3.dll 2014-06-27 22:04 - 2008-03-05 16:00 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_3.dll 2014-06-27 22:04 - 2008-03-05 15:56 - 04910088 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_37.dll 2014-06-27 22:04 - 2008-03-05 15:56 - 03786760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_37.dll 2014-06-27 22:04 - 2008-03-05 15:56 - 01860120 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_37.dll 2014-06-27 22:04 - 2008-03-05 15:56 - 01420824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_37.dll 2014-06-27 22:04 - 2008-02-05 23:07 - 00529424 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_37.dll 2014-06-27 22:04 - 2008-02-05 23:07 - 00462864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_37.dll 2014-06-27 22:04 - 2007-10-22 03:40 - 00411656 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_10.dll 2014-06-27 22:04 - 2007-10-22 03:39 - 00267272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_10.dll 2014-06-27 22:04 - 2007-10-22 03:37 - 00021000 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_2.dll 2014-06-27 22:04 - 2007-10-22 03:37 - 00017928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_2.dll 2014-06-27 22:04 - 2007-10-12 15:14 - 05081608 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_36.dll 2014-06-27 22:04 - 2007-10-12 15:14 - 03734536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_36.dll 2014-06-27 22:04 - 2007-10-12 15:14 - 02006552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_36.dll 2014-06-27 22:04 - 2007-10-12 15:14 - 01374232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_36.dll 2014-06-27 22:04 - 2007-10-02 09:56 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_36.dll 2014-06-27 22:04 - 2007-10-02 09:56 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_36.dll 2014-06-27 22:04 - 2007-07-20 00:57 - 00411496 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_9.dll 2014-06-27 22:04 - 2007-07-20 00:57 - 00267112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_9.dll 2014-06-27 22:04 - 2007-07-19 18:14 - 05073256 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_35.dll 2014-06-27 22:04 - 2007-07-19 18:14 - 03727720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_35.dll 2014-06-27 22:04 - 2007-07-19 18:14 - 01985904 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_35.dll 2014-06-27 22:04 - 2007-07-19 18:14 - 01358192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_35.dll 2014-06-27 22:04 - 2007-07-19 18:14 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_35.dll 2014-06-27 22:04 - 2007-07-19 18:14 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_35.dll 2014-06-27 22:04 - 2007-06-20 20:49 - 00409960 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_8.dll 2014-06-27 22:04 - 2007-06-20 20:46 - 00266088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_8.dll 2014-06-27 22:04 - 2007-05-16 16:45 - 04496232 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_34.dll 2014-06-27 22:04 - 2007-05-16 16:45 - 03497832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_34.dll 2014-06-27 22:04 - 2007-05-16 16:45 - 01401200 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_34.dll 2014-06-27 22:04 - 2007-05-16 16:45 - 01124720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_34.dll 2014-06-27 22:04 - 2007-05-16 16:45 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_34.dll 2014-06-27 22:04 - 2007-05-16 16:45 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_34.dll 2014-06-27 22:04 - 2007-04-04 18:55 - 00403304 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_7.dll 2014-06-27 22:04 - 2007-04-04 18:55 - 00261480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_7.dll 2014-06-27 22:04 - 2007-04-04 18:54 - 00107368 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_3.dll 2014-06-27 22:04 - 2007-04-04 18:53 - 00081768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_3.dll 2014-06-27 22:04 - 2007-03-15 16:57 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_33.dll 2014-06-27 22:04 - 2007-03-15 16:57 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_33.dll 2014-06-27 22:04 - 2007-03-12 16:42 - 04494184 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_33.dll 2014-06-27 22:04 - 2007-03-12 16:42 - 03495784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_33.dll 2014-06-27 22:04 - 2007-03-12 16:42 - 01400176 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_33.dll 2014-06-27 22:04 - 2007-03-12 16:42 - 01123696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_33.dll 2014-06-27 22:04 - 2007-03-05 12:42 - 00017688 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_1.dll 2014-06-27 22:04 - 2007-03-05 12:42 - 00015128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_1.dll 2014-06-27 22:04 - 2007-01-24 15:27 - 00393576 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_6.dll 2014-06-27 22:04 - 2007-01-24 15:27 - 00255848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_6.dll 2014-06-27 22:04 - 2006-12-08 12:02 - 00251672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_5.dll 2014-06-27 22:04 - 2006-12-08 12:00 - 00390424 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_5.dll 2014-06-27 22:04 - 2006-11-29 13:06 - 04398360 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_32.dll 2014-06-27 22:04 - 2006-11-29 13:06 - 03426072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_32.dll 2014-06-27 22:04 - 2006-11-29 13:06 - 00469264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10.dll 2014-06-27 22:04 - 2006-11-29 13:06 - 00440080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10.dll 2014-06-27 22:04 - 2006-09-28 16:05 - 03977496 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_31.dll 2014-06-27 22:04 - 2006-09-28 16:05 - 02414360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_31.dll 2014-06-27 22:04 - 2006-09-28 16:05 - 00237848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_4.dll 2014-06-27 22:04 - 2006-09-28 16:04 - 00364824 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_4.dll 2014-06-27 22:04 - 2006-07-28 09:31 - 00083736 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_2.dll 2014-06-27 22:04 - 2006-07-28 09:30 - 00363288 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_3.dll 2014-06-27 22:04 - 2006-07-28 09:30 - 00236824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_3.dll 2014-06-27 22:04 - 2006-07-28 09:30 - 00062744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_2.dll 2014-06-27 22:04 - 2006-05-31 07:24 - 00230168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_2.dll 2014-06-27 22:04 - 2006-05-31 07:22 - 00354072 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_2.dll 2014-06-27 22:04 - 2006-03-31 12:39 - 00083664 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_1.dll 2014-06-27 22:04 - 2006-03-31 12:39 - 00062672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_1.dll 2014-06-27 22:03 - 2014-06-27 22:04 - 00010123 _____ () C:\Windows\DirectX.log 2014-06-27 22:03 - 2006-03-31 12:41 - 03927248 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_30.dll 2014-06-27 22:03 - 2006-03-31 12:40 - 02388176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_30.dll 2014-06-27 22:03 - 2006-03-31 12:40 - 00352464 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_1.dll 2014-06-27 22:03 - 2006-03-31 12:39 - 00229584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_1.dll 2014-06-27 22:03 - 2006-02-03 08:43 - 03830992 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_29.dll 2014-06-27 22:03 - 2006-02-03 08:43 - 02332368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_29.dll 2014-06-27 22:03 - 2006-02-03 08:42 - 00355536 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_0.dll 2014-06-27 22:03 - 2006-02-03 08:42 - 00230096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_0.dll 2014-06-27 22:03 - 2006-02-03 08:41 - 00016592 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_0.dll 2014-06-27 22:03 - 2006-02-03 08:41 - 00014032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_0.dll 2014-06-27 22:03 - 2005-12-05 18:09 - 03815120 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_28.dll 2014-06-27 22:03 - 2005-12-05 18:09 - 02323664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_28.dll 2014-06-27 22:03 - 2005-07-22 19:59 - 03807440 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_27.dll 2014-06-27 22:03 - 2005-07-22 19:59 - 02319568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_27.dll 2014-06-27 22:03 - 2005-05-26 15:34 - 03767504 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_26.dll 2014-06-27 22:03 - 2005-05-26 15:34 - 02297552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_26.dll 2014-06-27 22:03 - 2005-03-18 17:19 - 03823312 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_25.dll 2014-06-27 22:03 - 2005-03-18 17:19 - 02337488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_25.dll 2014-06-27 22:03 - 2005-02-05 19:45 - 03544272 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_24.dll 2014-06-27 22:03 - 2005-02-05 19:45 - 02222800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_24.dll 2014-06-27 20:59 - 2014-06-27 20:59 - 01141680 _____ () C:\Users\Cyberstation\Downloads\SteamSetup.exe 2014-06-18 09:42 - 2014-06-18 09:42 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service 2014-06-15 14:58 - 2014-06-15 14:58 - 00000000 ____D () C:\Users\Cyberstation\AppData\Roaming\LolClient 2014-06-15 13:27 - 2008-07-31 10:41 - 00068616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_1.dll 2014-06-15 13:27 - 2008-07-31 10:40 - 00509448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_2.dll 2014-06-15 13:27 - 2008-07-12 08:18 - 03851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll 2014-06-15 13:27 - 2008-07-12 08:18 - 01493528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_39.dll 2014-06-15 13:27 - 2008-07-12 08:18 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_39.dll 2014-06-15 13:26 - 2014-06-16 23:40 - 00000000 ____D () C:\Program Files (x86)\LOL 2014-06-15 13:24 - 2014-06-16 23:39 - 00000000 ____D () C:\Users\Cyberstation\AppData\Local\PMB Files 2014-06-15 13:24 - 2014-06-15 13:24 - 00000000 ____D () C:\Program Files (x86)\Pando Networks 2014-06-15 13:23 - 2014-06-15 13:24 - 00000000 ____D () C:\Users\Cyberstation\AppData\Roaming\Riot Games 2014-06-15 13:22 - 2014-06-15 13:22 - 34888568 _____ (Riot Games) C:\Users\Cyberstation\Downloads\LeagueofLegends_EUW_Installer_06_12_13.exe 2014-06-15 11:57 - 2014-06-16 12:09 - 01540748 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI 2014-06-15 01:21 - 2014-06-15 01:21 - 00000000 ____D () C:\Users\Gast\AppData\Local\Google ==================== One Month Modified Files and Folders ======= 2014-07-15 14:36 - 2014-07-13 15:35 - 00015351 _____ () C:\Users\Cyberstation\Downloads\FRST.txt 2014-07-15 14:35 - 2014-07-13 15:34 - 00000000 ____D () C:\FRST 2014-07-15 14:35 - 2014-06-11 13:25 - 00001122 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2014-07-15 14:33 - 2014-07-15 14:33 - 00000850 _____ () C:\Users\Cyberstation\Desktop\JRT.txt 2014-07-15 14:28 - 2014-07-15 14:28 - 00000000 ____D () C:\Windows\ERUNT 2014-07-15 14:27 - 2014-07-15 14:27 - 01016261 _____ (Thisisu) C:\Users\Cyberstation\Downloads\JRT.exe 2014-07-15 14:27 - 2014-05-30 20:20 - 00000000 ____D () C:\Users\Cyberstation\AppData\Roaming\Spotify 2014-07-15 14:27 - 2008-01-21 03:53 - 01176958 _____ () C:\Windows\WindowsUpdate.log 2014-07-15 14:24 - 2014-05-31 13:25 - 00000000 ____D () C:\Users\Cyberstation\AppData\Roaming\DropboxMaster 2014-07-15 14:24 - 2014-05-31 13:23 - 00000000 ___RD () C:\Users\Cyberstation\Dropbox 2014-07-15 14:24 - 2014-05-30 19:33 - 00000000 ____D () C:\Users\Cyberstation\AppData\Roaming\Dropbox 2014-07-15 14:23 - 2014-07-15 14:23 - 00001338 _____ () C:\Users\Cyberstation\Desktop\AdwCleaner[S0].txt 2014-07-15 14:21 - 2014-06-11 13:25 - 00001118 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2014-07-15 14:20 - 2008-01-21 05:26 - 00107418 _____ () C:\Windows\PFRO.log 2014-07-15 14:20 - 2006-11-02 17:42 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-07-15 14:20 - 2006-11-02 17:22 - 00003712 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0 2014-07-15 14:20 - 2006-11-02 17:22 - 00003712 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0 2014-07-15 14:19 - 2006-11-02 17:42 - 00032592 _____ () C:\Windows\Tasks\SCHEDLGU.TXT 2014-07-15 14:18 - 2014-07-15 14:17 - 00000000 ____D () C:\AdwCleaner 2014-07-15 14:16 - 2014-07-15 14:16 - 01348263 _____ () C:\Users\Cyberstation\Downloads\adwcleaner_3.215.exe 2014-07-15 13:42 - 2014-05-30 22:27 - 00002641 _____ () C:\Users\Cyberstation\Desktop\Microsoft Word 2010.lnk 2014-07-15 00:20 - 2014-07-15 00:20 - 00001694 _____ () C:\Users\Public\Desktop\iTunes.lnk 2014-07-15 00:20 - 2014-07-15 00:19 - 00000000 ____D () C:\Program Files\iTunes 2014-07-15 00:20 - 2014-07-15 00:19 - 00000000 ____D () C:\Program Files (x86)\iTunes 2014-07-15 00:19 - 2014-07-15 00:19 - 00000000 ____D () C:\Program Files\iPod 2014-07-14 16:26 - 2014-05-30 20:20 - 00000000 ____D () C:\Users\Cyberstation\AppData\Local\Spotify 2014-07-13 18:16 - 2014-07-13 18:16 - 00000000 ____D () C:\Users\Cyberstation\Desktop\Neuer Ordner 2014-07-13 17:01 - 2014-05-30 21:01 - 00699056 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2014-07-13 17:01 - 2014-05-30 21:01 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2014-07-13 16:57 - 2014-07-13 16:39 - 00000000 ____D () C:\Program Files\Bitdefender 2014-07-13 16:55 - 2014-07-13 16:38 - 00000000 ____D () C:\Program Files\Common Files\Bitdefender 2014-07-13 16:45 - 2014-07-13 16:45 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_avchv_01009.Wdf 2014-07-13 16:45 - 2014-05-30 18:23 - 00000000 ____D () C:\Users\Cyberstation 2014-07-13 16:45 - 2006-11-02 17:27 - 00102028 _____ () C:\Windows\setupact.log 2014-07-13 16:43 - 2006-11-02 15:33 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared 2014-07-13 16:39 - 2014-07-13 16:39 - 00000000 _____ () C:\Windows\system32\BDSandBoxUISkin32.dll 2014-07-13 16:38 - 2014-07-13 16:38 - 07040424 _____ () C:\Users\Cyberstation\Downloads\bitdefender_tsecurity_2015.exe 2014-07-13 16:38 - 2014-07-13 16:38 - 00000000 ____D () C:\Users\Cyberstation\AppData\Roaming\QuickScan 2014-07-13 15:56 - 2014-07-13 15:56 - 00380416 _____ () C:\Users\Cyberstation\Downloads\Gmer-19357.exe 2014-07-13 15:37 - 2014-07-13 15:36 - 00040126 _____ () C:\Users\Cyberstation\Downloads\Addition.txt 2014-07-13 15:34 - 2014-07-13 15:34 - 02086912 _____ (Farbar) C:\Users\Cyberstation\Downloads\FRST64.exe 2014-07-13 15:29 - 2014-07-13 15:29 - 00000596 _____ () C:\Users\Cyberstation\Downloads\defogger_disable.log 2014-07-13 15:29 - 2014-07-13 15:29 - 00000020 _____ () C:\Users\Cyberstation\defogger_reenable 2014-07-13 15:27 - 2014-07-13 15:27 - 00050477 _____ () C:\Users\Cyberstation\Downloads\Defogger.exe 2014-07-13 15:15 - 2014-05-31 23:03 - 00002745 _____ () C:\Users\Cyberstation\Desktop\Microsoft Outlook 2010.lnk 2014-07-13 00:28 - 2014-07-13 00:26 - 239621255 _____ () C:\Users\Cyberstation\Downloads\********* 2014-07-13 00:26 - 2014-06-28 19:27 - 00000000 ____D () C:\Users\Cyberstation\AppData\Roaming\vlc 2014-07-12 23:22 - 2014-07-12 23:19 - 273409069 _____ () C:\Users\Cyberstation\Downloads\********* 2014-07-12 23:21 - 2014-07-12 23:19 - 288907926 _____ () C:\Users\Cyberstation\Downloads\********* 2014-07-12 23:15 - 2014-07-12 23:15 - 00000000 ____D () C:\Users\Cyberstation\Downloads\********* 2014-07-12 23:14 - 2014-07-12 23:10 - 471518082 _____ () C:\Users\Cyberstation\Downloads\********* 2014-07-12 21:42 - 2014-05-30 19:37 - 00000000 ____D () C:\Users\Cyberstation\AppData\Roaming\DAEMON Tools Lite 2014-07-12 21:41 - 2014-05-30 21:15 - 00001173 _____ () C:\Users\Cyberstation\Desktop\RosettaStoneVersion3.lnk 2014-07-12 21:41 - 2014-05-30 18:23 - 00000000 ____D () C:\Users\Cyberstation\AppData\Local\VirtualStore 2014-07-12 15:52 - 2014-07-12 15:47 - 00000000 ____D () C:\Users\Cyberstation\Documents\Calibre-Bibliothek 2014-07-12 15:48 - 2014-07-12 15:48 - 00000000 ____D () C:\Users\Cyberstation\AppData\Local\calibre-cache 2014-07-12 15:48 - 2014-07-12 15:47 - 00000000 ____D () C:\Users\Cyberstation\AppData\Roaming\calibre 2014-07-12 15:46 - 2014-07-12 15:46 - 00000871 _____ () C:\Users\Public\Desktop\calibre - E-book management.lnk 2014-07-12 15:46 - 2014-07-12 15:46 - 00000000 ____D () C:\Program Files (x86)\Calibre2 2014-07-12 15:44 - 2014-07-12 15:44 - 56244224 _____ () C:\Users\Cyberstation\Downloads\calibre-1.44.0.msi 2014-07-12 15:44 - 2014-07-12 15:44 - 16737290 _____ () C:\Users\Cyberstation\Downloads\********* 2014-07-12 15:40 - 2014-07-12 15:40 - 16702117 _____ () C:\Users\Cyberstation\Downloads\********* 2014-07-12 15:37 - 2014-05-30 22:28 - 00000000 ____D () C:\Users\Cyberstation\Documents\********* 2014-07-11 15:14 - 2008-01-21 13:10 - 01565124 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-07-11 15:14 - 2008-01-21 13:09 - 00673414 _____ () C:\Windows\system32\perfh007.dat 2014-07-11 15:14 - 2008-01-21 13:09 - 00145426 _____ () C:\Windows\system32\perfc007.dat 2014-07-11 14:46 - 2014-06-04 11:11 - 00013050 _____ () C:\Users\Cyberstation\Desktop\********* 2014-07-10 18:46 - 2014-07-10 13:41 - 00010147 _____ () C:\Users\Cyberstation\Desktop\********* 2014-07-10 16:50 - 2014-07-10 16:50 - 00000000 ____D () C:\Users\Cyberstation\Downloads\********* 2014-07-10 16:49 - 2014-07-10 16:41 - 734003200 _____ () C:\Users\Cyberstation\Downloads\********* 2014-07-10 16:48 - 2014-07-10 16:41 - 672344384 _____ () C:\Users\Cyberstation\Downloads\********* 2014-07-10 16:40 - 2014-05-30 20:00 - 00000000 ____D () C:\Program Files (x86)\JDownloader 2014-07-10 13:18 - 2014-05-30 22:27 - 00002643 _____ () C:\Users\Cyberstation\Desktop\Microsoft Excel 2010.lnk 2014-07-10 09:49 - 2006-11-02 17:21 - 02302280 _____ () C:\Windows\system32\FNTCACHE.DAT 2014-07-10 09:43 - 2006-11-02 17:07 - 00000000 ____D () C:\Program Files\Windows Journal 2014-07-10 09:24 - 2014-05-30 21:37 - 00000000 ____D () C:\Windows\system32\MRT 2014-07-10 09:22 - 2006-11-02 14:35 - 96441528 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe 2014-07-06 20:27 - 2014-07-06 20:23 - 00000000 ____D () C:\Users\Cyberstation\Downloads\********* 2014-07-06 20:18 - 2014-07-06 20:10 - 734003200 _____ () C:\Users\Cyberstation\Downloads\********* 2014-07-06 20:17 - 2014-07-06 20:10 - 669643728 _____ () C:\Users\Cyberstation\Downloads\********* 2014-07-06 17:19 - 2014-05-31 13:32 - 00008192 _____ () C:\Users\Cyberstation\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini 2014-07-06 15:54 - 2014-05-30 18:52 - 00117712 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys 2014-07-01 17:33 - 2014-07-01 17:26 - 701000032 _____ () C:\Users\Cyberstation\Downloads\********* 2014-07-01 17:32 - 2014-07-01 17:24 - 734003200 _____ () C:\Users\Cyberstation\Downloads\********* 2014-07-01 17:26 - 2014-07-01 17:19 - 706128656 _____ () C:\Users\Cyberstation\Downloads\********* 2014-07-01 17:24 - 2014-07-01 17:15 - 734003200 _____ () C:\Users\Cyberstation\Downloads\********* 2014-07-01 17:18 - 2014-07-01 17:11 - 706064608 _____ () C:\Users\Cyberstation\Downloads\********* 2014-07-01 17:16 - 2014-07-01 17:16 - 00000000 _____ () C:\Users\Cyberstation\Desktop\********* 2014-07-01 17:15 - 2014-07-01 17:07 - 734003200 _____ () C:\Users\Cyberstation\Downloads\********* 2014-07-01 17:11 - 2014-07-01 17:01 - 677611088 _____ () C:\Users\Cyberstation\Downloads\********* 2014-07-01 17:07 - 2014-07-01 17:01 - 681574400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-07-01 17:00 - 2014-07-01 16:50 - 849346560 _____ () C:\Users\Cyberstation\Downloads\********* 2014-07-01 17:00 - 2014-07-01 16:50 - 833077712 _____ () C:\Users\Cyberstation\Downloads\********* 2014-07-01 15:03 - 2014-07-01 14:58 - 535328048 _____ () C:\Users\Cyberstation\Downloads\********* 2014-07-01 15:02 - 2014-07-01 14:56 - 576716800 _____ () C:\Users\Cyberstation\Downloads\********* 2014-07-01 14:57 - 2014-07-01 14:51 - 576716800 _____ () C:\Users\Cyberstation\Downloads\********* 2014-07-01 14:56 - 2014-07-01 14:49 - 576716800 _____ () C:\Users\Cyberstation\Downloads\********* 2014-07-01 14:51 - 2014-07-01 14:46 - 524288000 _____ () C:\Users\Cyberstation\Downloads\********* 2014-07-01 14:49 - 2014-07-01 14:43 - 476037888 _____ () C:\Users\Cyberstation\Downloads\********* 2014-07-01 14:46 - 2014-07-01 14:40 - 524288000 _____ () C:\Users\Cyberstation\Downloads\********* 2014-07-01 14:43 - 2014-07-01 14:38 - 524288000 _____ () C:\Users\Cyberstation\Downloads\********* 2014-07-01 14:40 - 2014-07-01 14:34 - 524288000 _____ () C:\Users\Cyberstation\Downloads\********* 2014-07-01 14:37 - 2014-07-01 14:32 - 524288000 _____ () C:\Users\Cyberstation\Downloads\********* 2014-07-01 14:34 - 2014-07-01 14:28 - 524288000 _____ () C:\Users\Cyberstation\Downloads\********* 2014-07-01 14:32 - 2014-07-01 14:28 - 259149888 _____ () C:\Users\Cyberstation\Downloads\********* 2014-07-01 14:28 - 2014-07-01 14:23 - 524288000 _____ () C:\Users\Cyberstation\Downloads\********* 2014-07-01 14:28 - 2014-07-01 14:21 - 524288000 _____ () C:\Users\Cyberstation\Downloads\********* 2014-07-01 14:23 - 2014-07-01 14:19 - 398004976 _____ () C:\Users\Cyberstation\Downloads\********* 2014-07-01 14:21 - 2014-07-01 14:17 - 400102976 _____ () C:\Users\Cyberstation\Downloads\********* 2014-07-01 14:18 - 2014-07-01 14:12 - 524288000 _____ () C:\Users\Cyberstation\Downloads\********* 2014-07-01 14:17 - 2014-07-01 14:11 - 524288000 _____ () C:\Users\Cyberstation\Downloads\********* 2014-07-01 14:12 - 2014-07-01 14:05 - 524288000 _____ () C:\Users\Cyberstation\Downloads\********* 2014-07-01 14:11 - 2014-07-01 14:07 - 405696048 _____ () C:\Users\Cyberstation\Downloads\********* 2014-07-01 14:07 - 2014-07-01 14:00 - 524288000 _____ () C:\Users\Cyberstation\Downloads\********* 2014-07-01 14:05 - 2014-07-01 14:02 - 349102864 _____ () C:\Users\Cyberstation\Downloads\********* 2014-07-01 14:02 - 2014-07-01 13:57 - 420847904 _____ () C:\Users\Cyberstation\Downloads\********* 2014-07-01 14:00 - 2014-07-01 13:55 - 524288000 _____ () C:\Users\Cyberstation\Downloads\********* 2014-07-01 13:57 - 2014-07-01 13:51 - 524288000 _____ () C:\Users\Cyberstation\Downloads\********* 2014-07-01 13:54 - 2014-07-01 13:48 - 524288000 _____ () C:\Users\Cyberstation\Downloads\********* 2014-07-01 13:51 - 2014-07-01 13:46 - 524288000 _____ () C:\Users\Cyberstation\Downloads\********* 2014-07-01 13:48 - 2014-07-01 13:42 - 524288000 _____ () C:\Users\Cyberstation\Downloads\********* 2014-07-01 13:46 - 2014-07-01 13:40 - 524288000 _____ () C:\Users\Cyberstation\Downloads\********* 2014-07-01 13:42 - 2014-07-01 13:37 - 351488704 _____ () C:\Users\Cyberstation\Downloads\********* 2014-07-01 13:40 - 2014-07-01 13:35 - 524288000 _____ () C:\Users\Cyberstation\Downloads\********* 2014-07-01 13:37 - 2014-07-01 13:32 - 524288000 _____ () C:\Users\Cyberstation\Downloads\********* 2014-07-01 13:35 - 2014-07-01 13:28 - 524288000 _____ () C:\Users\Cyberstation\Downloads\********* 2014-07-01 13:32 - 2014-07-01 13:27 - 524288000 _____ () C:\Users\Cyberstation\Downloads\********* 2014-07-01 13:28 - 2014-07-01 13:22 - 524288000 _____ () C:\Users\Cyberstation\Downloads\********* 2014-07-01 13:27 - 2014-07-01 13:21 - 461647600 _____ () C:\Users\Cyberstation\Downloads\********* 2014-07-01 13:21 - 2014-07-01 13:16 - 524288000 _____ () C:\Users\Cyberstation\Downloads\********* 2014-07-01 13:21 - 2014-07-01 13:15 - 524288000 _____ () C:\Users\Cyberstation\Downloads\********* 2014-07-01 13:15 - 2014-07-01 12:14 - 524288000 _____ () C:\Users\Cyberstation\Downloads\********* 2014-07-01 13:15 - 2014-07-01 12:14 - 524288000 _____ () C:\Users\Cyberstation\Downloads\********* 2014-07-01 00:35 - 2014-06-30 15:00 - 00000000 ____D () C:\Users\Cyberstation\Downloads\********* 2014-07-01 00:34 - 2014-06-30 14:50 - 00000000 ____D () C:\Users\Cyberstation\Downloads\********* 2014-07-01 00:30 - 2014-06-30 14:41 - 00000000 ____D () C:\Users\Cyberstation\Downloads\********* 2014-06-30 15:00 - 2014-06-30 14:59 - 163491820 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-30 15:00 - 2014-06-30 14:56 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-30 14:59 - 2014-06-30 14:54 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-30 14:55 - 2014-06-30 14:51 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-30 14:54 - 2014-06-30 14:50 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-30 14:50 - 2014-06-30 14:46 - 370164760 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-30 14:50 - 2014-06-30 14:45 - 440401920 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-30 14:45 - 2014-06-30 14:41 - 440401920 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-30 14:45 - 2014-06-30 14:39 - 440401920 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-30 14:41 - 2014-06-30 14:36 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-30 14:39 - 2014-06-30 14:37 - 203917016 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-30 14:37 - 2014-06-30 14:32 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-30 14:36 - 2014-06-30 14:32 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-30 14:32 - 2014-06-30 14:29 - 229162904 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-30 14:32 - 2014-06-30 14:27 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-30 14:29 - 2014-06-30 14:25 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-30 14:25 - 2014-06-30 14:21 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-30 14:25 - 2014-06-30 14:21 - 326638680 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-30 14:21 - 2014-06-30 14:17 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-30 14:21 - 2014-06-30 14:15 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-30 14:17 - 2014-06-30 14:13 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-30 14:15 - 2014-06-30 14:10 - 374940216 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-30 14:13 - 2014-06-30 14:09 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-30 14:10 - 2014-06-30 14:04 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-30 14:08 - 2014-06-30 14:04 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-30 14:04 - 2014-06-30 14:02 - 160388808 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-30 14:04 - 2014-06-30 14:00 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-30 14:02 - 2014-06-30 13:57 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-30 14:00 - 2014-06-30 13:56 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-30 13:56 - 2014-06-30 13:54 - 177277560 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-30 13:56 - 2014-06-30 13:52 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-30 13:54 - 2014-06-30 13:49 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-30 13:52 - 2014-06-30 13:47 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-30 13:49 - 2014-06-30 13:46 - 305981112 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-30 13:47 - 2014-06-30 13:43 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-30 13:46 - 2014-06-30 13:40 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-30 13:42 - 2014-06-30 13:38 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-30 13:40 - 2014-06-30 13:35 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-30 13:38 - 2014-06-30 13:36 - 186982360 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-30 13:36 - 2014-06-30 13:31 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-30 13:35 - 2014-06-30 13:31 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-29 17:00 - 2014-06-28 23:13 - 00000000 ____D () C:\Users\Cyberstation\Downloads\********* 2014-06-29 16:59 - 2014-06-28 23:26 - 00000000 ____D () C:\Users\Cyberstation\Downloads\********* 2014-06-29 16:59 - 2014-06-28 22:59 - 00000000 ____D () C:\Users\Cyberstation\Downloads\********* 2014-06-29 16:59 - 2014-06-28 22:43 - 00000000 ____D () C:\Users\Cyberstation\Downloads\********* 2014-06-29 16:57 - 2014-06-28 22:25 - 00000000 ____D () C:\Users\Cyberstation\Downloads\********* 2014-06-28 23:26 - 2014-06-28 23:22 - 325952240 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-28 23:26 - 2014-06-28 23:21 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-28 23:22 - 2014-06-28 23:18 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-28 23:21 - 2014-06-28 23:16 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-28 23:18 - 2014-06-28 23:13 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-28 23:16 - 2014-06-28 23:12 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-28 23:13 - 2014-06-28 23:08 - 330509056 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-28 23:12 - 2014-06-28 23:08 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-28 23:08 - 2014-06-28 23:04 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-28 23:08 - 2014-06-28 23:02 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-28 23:04 - 2014-06-28 22:59 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-28 23:02 - 2014-06-28 22:58 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-28 22:59 - 2014-06-28 22:55 - 407250772 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-28 22:58 - 2014-06-28 22:53 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-28 22:55 - 2014-06-28 22:50 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-28 22:52 - 2014-06-28 22:48 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-28 22:50 - 2014-06-28 22:46 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-28 22:48 - 2014-06-28 22:43 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-28 22:46 - 2014-06-28 22:40 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-28 22:43 - 2014-06-28 22:39 - 406919476 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-28 22:40 - 2014-06-28 22:35 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-28 22:39 - 2014-06-28 22:35 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-28 22:35 - 2014-06-28 22:30 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-28 22:35 - 2014-06-28 22:30 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-28 22:30 - 2014-06-28 22:25 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-28 22:30 - 2014-06-28 22:25 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-28 22:25 - 2014-06-28 22:21 - 321940816 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-28 22:25 - 2014-06-28 22:20 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-28 22:21 - 2014-06-28 22:16 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-28 22:19 - 2014-06-28 22:12 - 00000000 ____D () C:\Users\Cyberstation\Downloads\********* 2014-06-28 22:18 - 2014-06-28 22:13 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-28 22:17 - 2014-06-28 21:34 - 00000000 ____D () C:\Users\Cyberstation\Downloads\********* 2014-06-28 22:16 - 2014-06-28 22:07 - 00000000 ____D () C:\Users\Cyberstation\Downloads\********* 2014-06-28 22:15 - 2014-06-28 22:11 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-28 22:11 - 2014-06-28 22:07 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-28 22:10 - 2014-06-28 22:07 - 325194736 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-28 22:07 - 2014-06-28 22:02 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-28 22:07 - 2014-06-28 20:25 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-28 22:02 - 2014-06-28 21:55 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-28 21:55 - 2014-06-28 21:47 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-28 21:47 - 2014-06-28 21:41 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-28 21:40 - 2014-06-28 21:34 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-28 21:33 - 2014-06-28 21:28 - 326931936 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-28 21:28 - 2014-06-28 21:21 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-28 21:21 - 2014-06-28 21:15 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-28 21:14 - 2014-06-28 21:08 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-28 21:08 - 2014-06-28 20:55 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-28 21:01 - 2014-06-28 20:53 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-28 20:53 - 2014-06-28 20:46 - 407078660 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-28 20:46 - 2014-06-28 20:39 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-28 20:39 - 2014-06-28 20:32 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-28 20:32 - 2014-06-28 20:30 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-28 20:30 - 2014-06-28 20:27 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-28 20:26 - 2014-06-28 20:22 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-28 20:24 - 2014-06-28 20:19 - 413233588 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-28 20:22 - 2014-06-28 20:18 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-28 20:19 - 2014-06-28 20:14 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-28 20:18 - 2014-06-28 20:13 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-28 20:14 - 2014-06-28 20:10 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-28 20:13 - 2014-06-28 20:08 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-28 20:09 - 2014-06-28 20:05 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-28 19:44 - 2014-06-28 19:41 - 328768656 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-28 19:43 - 2014-06-28 19:39 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-28 19:41 - 2014-06-28 19:35 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-28 19:38 - 2014-06-28 19:34 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-28 19:35 - 2014-06-28 19:30 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-28 19:34 - 2014-06-28 19:30 - 419430400 _____ () C:\Users\Cyberstation\Downloads\********* 2014-06-28 13:02 - 2006-11-02 15:33 - 00000000 ____D () C:\Windows\LiveKernelReports 2014-06-27 22:04 - 2014-06-27 22:03 - 00010123 _____ () C:\Windows\DirectX.log 2014-06-27 20:59 - 2014-06-27 20:59 - 01141680 _____ () C:\Users\Cyberstation\Downloads\SteamSetup.exe 2014-06-25 00:02 - 2014-07-01 17:33 - 00000000 ____D () C:\Users\Cyberstation\Downloads\********* 2014-06-21 05:30 - 2014-06-11 13:25 - 00004118 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA 2014-06-21 05:30 - 2014-06-11 13:25 - 00003866 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore 2014-06-18 09:42 - 2014-06-18 09:42 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service 2014-06-18 09:42 - 2014-05-30 19:38 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2014-06-17 20:27 - 2014-07-01 17:26 - 00000000 ____D () C:\Users\Cyberstation\Downloads\********* 2014-06-16 23:40 - 2014-06-15 13:26 - 00000000 ____D () C:\Program Files (x86)\LOL 2014-06-16 23:39 - 2014-06-15 13:24 - 00000000 ____D () C:\Users\Cyberstation\AppData\Local\PMB Files 2014-06-16 14:33 - 2014-05-30 21:02 - 00000000 ____D () C:\Users\Cyberstation\AppData\Roaming\Adobe 2014-06-16 14:23 - 2014-05-30 21:07 - 00000000 ____D () C:\Users\Cyberstation\AppData\Local\Adobe 2014-06-16 12:09 - 2014-06-15 11:57 - 01540748 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI 2014-06-15 14:58 - 2014-06-15 14:58 - 00000000 ____D () C:\Users\Cyberstation\AppData\Roaming\LolClient 2014-06-15 14:43 - 2014-05-30 22:28 - 00000000 ____D () C:\Users\Cyberstation\Documents\********* 2014-06-15 14:33 - 2014-05-30 22:29 - 00015142 _____ () C:\Users\Cyberstation\Desktop\********* 2014-06-15 13:24 - 2014-06-15 13:24 - 00000000 ____D () C:\Program Files (x86)\Pando Networks 2014-06-15 13:24 - 2014-06-15 13:23 - 00000000 ____D () C:\Users\Cyberstation\AppData\Roaming\Riot Games 2014-06-15 13:22 - 2014-06-15 13:22 - 34888568 _____ (Riot Games) C:\Users\Cyberstation\Downloads\LeagueofLegends_EUW_Installer_06_12_13.exe 2014-06-15 01:21 - 2014-06-15 01:21 - 00000000 ____D () C:\Users\Gast\AppData\Local\Google 2014-06-15 01:21 - 2014-05-30 23:08 - 00000979 _____ () C:\Users\Gast\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2014-06-15 01:21 - 2014-05-30 23:08 - 00000949 _____ () C:\Users\Gast\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk 2014-06-15 01:21 - 2014-05-30 23:07 - 00000915 _____ () C:\Users\Gast\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Mail.lnk Some content of TEMP: ==================== C:\Users\Cyberstation\AppData\Local\Temp\13-9-legacy_vista_win7_64_dd_ccc_whql.exe C:\Users\Cyberstation\AppData\Local\Temp\avgnt.exe C:\Users\Cyberstation\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpdksznu.dll C:\Users\Cyberstation\AppData\Local\Temp\Quarantine.exe C:\Users\Cyberstation\AppData\Local\Temp\swt-win32-3349.dll C:\Users\Cyberstation\AppData\Local\Temp\Uni000.exe C:\Users\Cyberstation\AppData\Local\Temp\_is46B0.exe C:\Users\Cyberstation\AppData\Local\Temp\_is586C.exe C:\Users\Cyberstation\AppData\Local\Temp\_isB06A.exe C:\Users\Gast\AppData\Local\Temp\avgnt.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => File is digitally signed C:\Windows\System32\wininit.exe => File is digitally signed C:\Windows\SysWOW64\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\System32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\System32\services.exe => File is digitally signed C:\Windows\System32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\System32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\System32\rpcss.dll => File is digitally signed C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2014-07-15 14:27 ==================== End Of Log ============================ --- --- --- Mein unwissendes Ich würde behaupten, dass die Scans gut aussehen! Ich hätte noch zwei Fragen: 1. Wie lange verbleiben die Posts auf eurem Forum online bzw. im Archiv erreichbar? 2. Was genau ist der Exploit "EXP/CVE-2011-2414.D"? Ich habe mich danach zwar im Internet erkundigt, versteh seine Funktionsweise jedoch immer noch nicht. :-/ Nochmals danke für eure Hilfe und euer Engagement! |
15.07.2014, 14:03 | #9 | |
/// Winkelfunktion /// TB-Süch-Tiger™ | Windows Vista 64 Bit: EXP/CVE-2011-2414.D Was ein Exploit ist kannst du ja selber nachlesen => Zitat:
__________________ Logfiles bitte immer in CODE-Tags posten |
15.07.2014, 14:37 | #10 | ||
| Windows Vista 64 Bit: EXP/CVE-2011-2414.DZitat:
|
15.07.2014, 14:47 | #11 |
/// Winkelfunktion /// TB-Süch-Tiger™ | Windows Vista 64 Bit: EXP/CVE-2011-2414.D Hab diesen Link vergessen zu posten => Exploit ? Wikipedia
__________________ Logfiles bitte immer in CODE-Tags posten |
15.07.2014, 16:30 | #12 |
| Windows Vista 64 Bit: EXP/CVE-2011-2414.D Danke dir! |
16.07.2014, 00:09 | #13 |
/// Winkelfunktion /// TB-Süch-Tiger™ | Windows Vista 64 Bit: EXP/CVE-2011-2414.D Was die Sternchen sein sollen wissen wir aber immer noch nicht
__________________ Logfiles bitte immer in CODE-Tags posten |
18.07.2014, 16:46 | #14 |
| Windows Vista 64 Bit: EXP/CVE-2011-2414.D Müsst ihr das denn wissen? |
18.07.2014, 21:29 | #15 |
/// Winkelfunktion /// TB-Süch-Tiger™ | Windows Vista 64 Bit: EXP/CVE-2011-2414.D Erklär ich mal wie ich das sonst irgendwie zuordnen soll
__________________ Logfiles bitte immer in CODE-Tags posten |
Themen zu Windows Vista 64 Bit: EXP/CVE-2011-2414.D |
anhänge, anhängen, computersicherheit, dateien, exploit, gefahr, gestern, guten, hilfe!, hoffe, hängen, job, kleine, leute, meinung, rechner, richtig, schei, sensible, unkenntlich, vista, vista 64 bit, windows, windows vista, worte |