Hallo,

habe mir einen win dvd-brenner gedownloaded und offensichtilich einen virus eingefangen. Brauche dringend Hilfe!

Tausend Dank.

Hallo



Eine Bereinigung ist mitunter mit viel Arbeit für Dich verbunden.

• Bitte arbeite alle Schritte der Reihe nach ab.
• Lese die Anleitungen sorgfältig. Sollte es Probleme geben, bitte stoppen und hier so gut es geht beschreiben.
• Nur Scanns durchführen zu denen Du von einem Helfer aufgefordert wirst.
• Bitte kein Crossposting ( posten in mehreren Foren).
• Installiere oder Deinstalliere während der Bereinigung keine Software ausser Du wurdest dazu aufgefordert.
• Lese Dir die Anleitung zuerst vollständig durch. Sollte etwas unklar sein, frage bevor Du beginnst.
• Poste die Logfiles direkt in deinen Thread. Nicht anhängen ausser ich fordere Dich dazu auf. Erschwert mir nämlich das auswerten.

Hinweis: Ich kann Dir niemals eine Garantie geben, dass ich auch alles finde. Eine Formatierung ist meist der Schnellere und immer der sicherste Weg.
Solltest Du Dich für eine Bereinigung entscheiden, arbeite solange mit, bis dir jemand vom Team sagt, dass Du clean bist.

Vista und Win7 User
Alle Tools mit Rechtsklick "als Administrator ausführen" starten.

Schritt 1

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

• Starte jetzt FRST.
• Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
• Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
• Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

Hallo Aneri,

ich habe ein Problem mit den Logfiles - kann diese nicht hier editieren, da diese zu lang sind. Wie soll ich vorgehen?

Teile die Logfiles zur not in mehrere Posts auf

[CODE]Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 24-07-2014 01
Ran by Katharina (administrator) on WICHTLZWERG on 24-07-2014 20:39:59
Running from C:\Users\Katharina\Downloads
Platform: Windows 8.1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal


==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\stacsv64.exe
(Qualcomm Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe
(Intel Corporation) C:\Windows\SysWOW64\IntelCpHeciSvc.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
() C:\Program Files (x86)\Lenovo\Lenovo VeriFace\VfConnectorService.exe
(Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxTray.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(Atheros Communications) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe
() C:\Program Files (x86)\Bluetooth Suite\ActivateDesktop.exe
(Dolby Laboratories Inc.) C:\Program Files (x86)\Dolby Home Theater v4\pcee4.exe
(Dolby Laboratories Inc.) C:\Program Files (x86)\Dolby Home Theater v4\pcee4.exe
(Lenovo) C:\Program Files\Lenovo\Onekey Theater\OnekeyStudio.exe
(Lenovo(beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Manager\Energy Manager.exe
(Lenovo(beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Manager\utility.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
() C:\Users\Katharina\AppData\Local\Amazon Music\Amazon Music Helper.exe
(Vimicro) C:\Program Files (x86)\USB Camera\VM331STI.EXE
(CyberLink Corp.) C:\Program Files (x86)\Lenovo\YouCam\YouCamTray.exe
(CyberLink Corp.) C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20498_x64__8wekyb3d8bbwe\livecomm.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Farbar) C:\Users\Katharina\Downloads\FRST64(1).exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [Nvtmru] => C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe [1012000 2013-05-16] (NVIDIA Corporation)
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe [36352 2013-04-30] (Intel Corporation)
HKLM\...\Run: [DolbyTrayApp] => c:\program files (x86)\Dolby Home Theater v4\pcee4.exe [508656 2012-08-31] (Dolby Laboratories Inc.)
HKLM\...\Run: [OnekeyStudio] => C:\Program Files\Lenovo\Onekey Theater\OnekeyStudio.exe [4196432 2012-09-14] (Lenovo)
HKLM\...\Run: [Energy Manager] => C:\Program Files (x86)\Lenovo\Energy Manager\Energy Manager.exe [15794160 2014-02-12] (Lenovo(beijing) Limited)
HKLM\...\Run: [Lenovo Utility] => C:\Program Files (x86)\Lenovo\Energy Manager\Utility.exe [80368 2014-02-12] (Lenovo(beijing) Limited)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2778864 2013-08-30] (Synaptics Incorporated)
HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray64.exe [1703424 2013-07-04] (IDT, Inc.)
HKLM-x32\...\Run: [331BigDog] => C:\Program Files (x86)\USB Camera\VM331STI.EXE [552960 2013-05-14] (Vimicro)
HKLM-x32\...\Run: [YouCam Tray] => C:\Program Files (x86)\Lenovo\YouCam\YouCamTray.exe [168464 2012-10-30] (CyberLink Corp.)
HKLM-x32\...\Run: [UpdateP2GShortCut] => C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe [217088 2012-04-18] (CyberLink Corp.)
HKLM-x32\...\Run: [RemoteControl10] => C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe [95192 2013-03-08] (CyberLink Corp.)
HKLM-x32\...\Run: [Intel AppUp(SM) center] => C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe [155488 2012-07-12] (Intel Corporation)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2014-05-08] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [189520 2014-07-07] (Avira Operations GmbH & Co. KG)
Winlogon\Notify\igfxcui: igfxdev.dll [X]
HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [132224 2013-02-28] ( (Atheros Communications))
HKU\S-1-5-21-3349096550-3144467483-3537340833-1001\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [516608 2013-08-22] (Microsoft Corporation)
HKU\S-1-5-21-3349096550-3144467483-3537340833-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [516608 2013-08-22] (Microsoft Corporation)
HKU\S-1-5-21-3349096550-3144467483-3537340833-1002\...\Run: [Amazon Music] => C:\Users\Katharina\AppData\Local\Amazon Music\Amazon Music Helper.exe [3162944 2014-06-24] ()
HKU\S-1-5-21-3349096550-3144467483-3537340833-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [Amazon Music] => C:\Users\Katharina\AppData\Local\Amazon Music\Amazon Music Helper.exe [3162944 2014-06-24] ()
AppInit_DLLs: C:\WINDOWS\system32\nvinitx.dll => C:\WINDOWS\system32\nvinitx.dll [184048 2013-12-26] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\WINDOWS\SysWOW64\nvinit.dll => C:\WINDOWS\SysWOW64\nvinit.dll [156256 2013-12-26] (NVIDIA Corporation)
ShellIconOverlayIdentifiers: SugarSyncBackedUp -> {0C4A258A-3F3B-4FFF-80A7-9B3BEC139472} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll (SugarSync, Inc.)
ShellIconOverlayIdentifiers: SugarSyncPending -> {62CCD8E3-9C21-41E1-B55E-1E26DFC68511} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll (SugarSync, Inc.)
ShellIconOverlayIdentifiers: SugarSyncRoot -> {A759AFF6-5851-457D-A540-F4ECED148351} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll (SugarSync, Inc.)
ShellIconOverlayIdentifiers: SugarSyncShared -> {1574C9EF-7D58-488F-B358-8B78C1538F51} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll (SugarSync, Inc.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.trovi.com/?gd=&ctid=CT3314932&octid=EB_ORIGINAL_CTID&ISID=7224FBF2-2D57-47FB-89B0-FC5B6EB49A3A&SearchSource=55&CUI=&UM=6&UP=SPE6083BDE-BAFC-411E-A79F-641FA4D24565&SSPV=
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://lenovo13.msn.com/?pc=LCJB
HKCU\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.lenovo.com
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://www.lenovo.com
SearchScopes: HKLM - DefaultScope {9BB47C17-9C68-4BB3-B188-DD9AF0FD2410} URL =
SearchScopes: HKLM - {14810DE1-195E-4F23-B623-860FE40A0752} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=LCJB
SearchScopes: HKLM-x32 - DefaultScope value is missing.
SearchScopes: HKLM-x32 - {14810DE1-195E-4F23-B623-860FE40A0752} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=LCJB
SearchScopes: HKCU - DefaultScope {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = hxxp://www.trovi.com/Results.aspx?gd=&ctid=CT3314932&octid=EB_ORIGINAL_CTID&ISID=7224FBF2-2D57-47FB-89B0-FC5B6EB49A3A&SearchSource=58&CUI=&UM=6&UP=SPE6083BDE-BAFC-411E-A79F-641FA4D24565&q={searchTerms}&SSPV=
SearchScopes: HKCU - {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = hxxp://www.trovi.com/Results.aspx?gd=&ctid=CT3314932&octid=EB_ORIGINAL_CTID&ISID=7224FBF2-2D57-47FB-89B0-FC5B6EB49A3A&SearchSource=58&CUI=&UM=6&UP=SPE6083BDE-BAFC-411E-A79F-641FA4D24565&q={searchTerms}&SSPV=
SearchScopes: HKCU - {14810DE1-195E-4F23-B623-860FE40A0752} URL =
BHO-x32: mySecureSurfer -> {52EA1989-D16E-4560-9021-F0AD247DE4D1} -> C:\Users\Katharina\AppData\LocalLow\mySecureSurfer\IE\mySecureSurfer.dll (Soft-Ware International Ltd.)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\Katharina\AppData\Roaming\Mozilla\Firefox\Profiles\ekrrck2g.default
FF DefaultSearchEngine: Trovi search
FF SelectedSearchEngine: Trovi search
FF Plugin: @adobe.com/FlashPlayer - C:\WINDOWS\system32\Macromed\Flash\NPSWF64_14_0_0_125.dll ()
FF Plugin: @videolan.org/vlc,version=2.1.4 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_125.dll ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=3.5.29 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\Katharina\AppData\Roaming\Mozilla\Firefox\Profiles\ekrrck2g.default\searchplugins\trovi-search.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: DownloadHelper - C:\Users\Katharina\AppData\Roaming\Mozilla\Firefox\Profiles\ekrrck2g.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2014-06-21]
FF Extension: mySecureSurfer - C:\Users\Katharina\AppData\Roaming\Mozilla\Firefox\Profiles\ekrrck2g.default\Extensions\{d64e478d-4dee-4bfb-afe4-30b84e6a3157} [2014-07-24]
FF Extension: Ghostery - C:\Users\Katharina\AppData\Roaming\Mozilla\Firefox\Profiles\ekrrck2g.default\Extensions\firefox@ghostery.com.xpi [2014-06-21]
FF Extension: Adblock Plus - C:\Users\Katharina\AppData\Roaming\Mozilla\Firefox\Profiles\ekrrck2g.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-06-21]
FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK

Chrome:
=======
CHR Extension: (mySecureSurfer) - C:\Users\Katharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\agabegcgoagbgcpiegohpamfdpcnmfba [2014-07-24]
CHR HKLM-x32\...\Chrome\Extension: [agabegcgoagbgcpiegohpamfdpcnmfba] - C:\Users\Katharina\AppData\LocalLow\mySecureSurfer\CHROME\mySecureSurfer.crx [2014-06-30]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [227968 2013-02-28] (Qualcomm Atheros Commnucations)
R2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [141392 2014-07-07] (Avira Operations GmbH & Co. KG)
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15344 2013-04-30] (Intel Corporation)
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [314696 2014-05-21] (Intel Corporation)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [731648 2013-02-13] (Intel(R) Corporation) [File not signed]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [820184 2013-02-13] (Intel(R) Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-05-17] (Intel Corporation)
R2 STacSV; C:\Program Files\IDT\WDM\STacSV64.exe [337920 2013-07-04] (IDT, Inc.) [File not signed]
R2 VeriFaceSrv; C:\Program Files (x86)\Lenovo\Lenovo VeriFace\VfConnectorService.exe [68368 2014-02-12] ()
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347880 2014-07-16] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2014-07-16] (Microsoft Corporation)
R2 ZAtheros Bt and Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [323584 2013-02-28] (Atheros) [File not signed]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2013-02-28] (Qualcomm Atheros)
R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [226304 2014-03-18] (Microsoft Corporation)
R0 IntelHSWPcc; C:\Windows\System32\drivers\IntelPcc.sys [100184 2013-04-09] (Intel Corporation)
R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [34544 2013-08-30] (Synaptics Incorporated)
R3 vm331avs; C:\Windows\System32\Drivers\vm331avs.sys [1064704 2013-05-31] (Vimicro Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [123224 2014-07-16] (Microsoft Corporation)
S3 wsvd; C:\Windows\system32\DRIVERS\wsvd.sys [102376 2012-06-13] ("CyberLink)
R3 MBAMSwissArmy; \??\C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-07-24 20:39 - 2014-07-24 20:39 - 02093568 _____ (Farbar) C:\Users\Katharina\Downloads\FRST64(1).exe
2014-07-24 18:38 - 2014-07-24 18:38 - 01084416 _____ (Farbar) C:\Users\Katharina\Downloads\FRST.exe
2014-07-24 18:21 - 2014-07-24 18:21 - 01110476 _____ () C:\Users\Katharina\Downloads\7z920.exe
2014-07-24 18:12 - 2014-07-24 20:39 - 00015862 _____ () C:\Users\Katharina\Downloads\FRST.txt
2014-07-24 18:12 - 2014-07-24 18:13 - 00022455 _____ () C:\Users\Katharina\Downloads\Addition.txt
2014-07-24 18:11 - 2014-07-24 20:39 - 00000000 ____D () C:\FRST
2014-07-24 18:10 - 2014-07-24 18:10 - 02093568 _____ (Farbar) C:\Users\Katharina\Downloads\FRST64.exe
2014-07-24 18:10 - 2014-07-24 18:10 - 00000017 _____ () C:\Users\Katharina\AppData\Local\resmon.resmoncfg
2014-07-24 17:53 - 2014-01-19 09:38 - 00270496 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2014-07-24 17:46 - 2014-07-24 17:46 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Katharina\Downloads\mbam-setup-2.0.2.1012(1).exe
2014-07-24 17:43 - 2014-07-24 17:43 - 00000451 _____ () C:\WINDOWS\system32\{F33C3B9B-72AF-418A-B3FD-560646F7CDA2}.bat
2014-07-24 17:30 - 2014-07-24 17:30 - 00000000 ____D () C:\Users\Katharina\AppData\Roaming\Digiarty
2014-07-24 17:28 - 2014-07-24 17:29 - 00000163 _____ () C:\WINDOWS\Reimage.ini
2014-07-24 17:28 - 2014-07-24 17:28 - 00000133 _____ () C:\Users\Katharina\Desktop\Amazon.de.url
2014-07-24 17:28 - 2014-07-24 17:28 - 00000000 ____D () C:\Users\Katharina\Downloads\winx-dvd-author
2014-07-24 17:28 - 2014-07-24 17:28 - 00000000 ____D () C:\Users\Katharina\AppData\Local\Google
2014-07-24 17:26 - 2014-07-24 17:26 - 00667392 _____ (© 2014 ClientConnect Ltd.) C:\Users\Katharina\Downloads\winx-dvd-author.exe
2014-07-23 22:12 - 2014-07-23 22:12 - 01459302 _____ () C:\Users\Katharina\Desktop\Slideshow 2014-07-23.MVM
2014-07-23 20:51 - 2014-07-23 20:54 - 00016384 ___SH () C:\Users\Katharina\Documents\Thumbs.db
2014-07-20 16:21 - 2014-07-01 00:45 - 00688128 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepdu.dll
2014-07-20 16:21 - 2014-06-28 09:48 - 00527360 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2014-07-20 16:21 - 2014-06-28 09:07 - 00385536 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2014-07-20 13:01 - 2014-07-20 13:01 - 00000000 ___RD () C:\WINDOWS\BrowserChoice
2014-07-19 21:15 - 2014-05-19 08:31 - 00057856 _____ (Microsoft Corporation) C:\WINDOWS\system32\drvcfg.exe
2014-07-19 21:15 - 2014-05-19 08:21 - 00110592 _____ (Microsoft Corporation) C:\WINDOWS\system32\drvinst.exe
2014-07-19 21:15 - 2014-05-19 07:23 - 00098816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\drvinst.exe
2014-07-17 11:18 - 2014-07-17 11:18 - 00000000 ____D () C:\WINDOWS\SysWOW64\NV
2014-07-17 11:18 - 2014-07-17 11:18 - 00000000 ____D () C:\WINDOWS\system32\NV
2014-07-17 11:18 - 2014-07-17 11:18 - 00000000 ____D () C:\Program Files\Common Files\Atheros
2014-07-17 07:21 - 2014-07-24 17:45 - 00000000 __RDO () C:\Users\Katharina\OneDrive
2014-07-17 07:19 - 2014-07-17 07:19 - 00001465 _____ () C:\Users\Katharina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-07-17 07:19 - 2014-07-17 07:19 - 00000020 ___SH () C:\Users\Katharina\ntuser.ini
2014-07-17 06:50 - 2014-07-17 06:50 - 00000000 _SHDL () C:\Users\Default\Vorlagen
2014-07-17 06:50 - 2014-07-17 06:50 - 00000000 _SHDL () C:\Users\Default\Startmenü
2014-07-17 06:50 - 2014-07-17 06:50 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung
2014-07-17 06:50 - 2014-07-17 06:50 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen
2014-07-17 06:50 - 2014-07-17 06:50 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien
2014-07-17 06:50 - 2014-07-17 06:50 - 00000000 _SHDL () C:\Users\Default\Druckumgebung
2014-07-17 06:50 - 2014-07-17 06:50 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik
2014-07-17 06:50 - 2014-07-17 06:50 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder
2014-07-17 06:50 - 2014-07-17 06:50 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-07-17 06:50 - 2014-07-17 06:50 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf
2014-07-17 06:50 - 2014-07-17 06:50 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten
2014-07-17 06:50 - 2014-07-17 06:50 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten
2014-07-17 06:50 - 2014-07-17 06:50 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik
2014-07-17 06:50 - 2014-07-17 06:50 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder
2014-07-17 06:50 - 2014-07-17 06:50 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-07-17 06:50 - 2014-07-17 06:50 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf
2014-07-17 06:50 - 2014-07-17 06:50 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten
2014-07-17 06:49 - 2014-07-24 18:21 - 01137003 _____ () C:\WINDOWS\WindowsUpdate.log
2014-07-17 06:49 - 2014-07-17 06:49 - 00022960 _____ () C:\WINDOWS\system32\emptyregdb.dat
2014-07-17 06:44 - 2014-07-17 06:44 - 00000020 ___SH () C:\Users\UpdatusUser\ntuser.ini
2014-07-16 23:30 - 2014-07-18 21:34 - 00000000 ___DC () C:\WINDOWS\Panther
2014-07-16 23:29 - 2014-07-20 16:50 - 00000000 ____D () C:\Windows.old
2014-07-16 23:29 - 2014-07-16 23:29 - 00308224 _____ (Microsoft Corporation) C:\WINDOWS\system32\wusa.exe
2014-07-16 23:29 - 2014-07-16 23:29 - 00305152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wusa.exe
2014-07-16 23:28 - 2014-07-16 23:28 - 03118080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Wpc.dll
2014-07-16 23:28 - 2014-07-16 23:28 - 03048904 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcMon.exe
2014-07-16 23:28 - 2014-07-16 23:28 - 02861056 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebSync.dll
2014-07-16 23:28 - 2014-07-16 23:28 - 02834944 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpccpl.dll
2014-07-16 23:28 - 2014-07-16 23:28 - 02344448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Wpc.dll
2014-07-16 23:28 - 2014-07-16 23:28 - 01336648 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll
2014-07-16 23:28 - 2014-07-16 23:28 - 01064448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll
2014-07-16 23:28 - 2014-07-16 23:28 - 00295424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ks.sys
2014-07-16 23:28 - 2014-07-16 23:28 - 00055328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wpcfltr.sys
2014-07-16 23:27 - 2014-07-16 23:27 - 23464448 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 17276416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 13527040 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 11742208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 05721088 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 04254720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 02768384 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 02266112 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 02179072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 02040832 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2014-07-16 23:27 - 2014-07-16 23:27 - 01964544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2014-07-16 23:27 - 2014-07-16 23:27 - 01791488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 01393664 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 01139200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 00846336 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 00752640 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 00704512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 00631808 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 00608768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2014-07-16 23:27 - 2014-07-16 23:27 - 00592896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 00526336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 00452608 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtmsft.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 00367616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtmsft.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 00292864 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 00250880 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 00239616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 00225280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 00195584 _____ (Microsoft Corporation) C:\WINDOWS\system32\msrating.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 00164864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrating.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 00139264 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieUnatt.exe
2014-07-16 23:27 - 2014-07-16 23:27 - 00112128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieUnatt.exe
2014-07-16 23:27 - 2014-07-16 23:27 - 00111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollector.exe
2014-07-16 23:27 - 2014-07-16 23:27 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesetup.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieetwproxystub.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwproxystub.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iernonce.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 00004096 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollectorres.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 02900992 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 02641920 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 02479616 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmSvc.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 02373784 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2014-07-16 23:26 - 2014-07-16 23:26 - 02331000 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 02317824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 02270208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 02141912 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 02133504 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 02088160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2014-07-16 23:26 - 2014-07-16 23:26 - 02030080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WsmSvc.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 02013016 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2014-07-16 23:26 - 2014-07-16 23:26 - 01843712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Display.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 01816576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Display.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 01779800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 01764864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 01679128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 01656832 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 01557848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2014-07-16 23:26 - 2014-07-16 23:26 - 01542768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 01351168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 01306624 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 01291200 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel32.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 01112536 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 01095488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 01063424 _____ (Microsoft Corporation) C:\WINDOWS\system32\IKEEXT.DLL
2014-07-16 23:26 - 2014-07-16 23:26 - 01036288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kernel32.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 01015808 _____ (Microsoft Corporation) C:\WINDOWS\system32\aclui.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00950784 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgent.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00939520 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00924160 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00887296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aclui.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00836096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00834560 _____ (Microsoft Corporation) C:\WINDOWS\system32\netlogon.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00827392 _____ (Microsoft Corporation) C:\WINDOWS\system32\BFE.DLL
2014-07-16 23:26 - 2014-07-16 23:26 - 00800256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReAgent.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00755712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00717312 _____ (Microsoft Corporation) C:\WINDOWS\system32\nshwfp.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00688640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netlogon.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00669696 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasapi32.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00655360 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsapi.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00621568 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAgent.exe
2014-07-16 23:26 - 2014-07-16 23:26 - 00605184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasapi32.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00567296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nshwfp.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00542208 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.Printing.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00518552 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00512000 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidprov.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00494592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dnsapi.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00488280 _____ (Microsoft Corporation) C:\WINDOWS\system32\netcfgx.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00462336 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlangpui.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00412672 _____ (Microsoft Corporation) C:\WINDOWS\system32\FWPUCLNT.DLL
2014-07-16 23:26 - 2014-07-16 23:26 - 00406912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00402432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Graphics.Printing.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00390488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netcfgx.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00387210 _____ () C:\WINDOWS\system32\ApnDatabase.xml
2014-07-16 23:26 - 2014-07-16 23:26 - 00386560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlangpui.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00379224 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2014-07-16 23:26 - 2014-07-16 23:26 - 00376152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys
2014-07-16 23:26 - 2014-07-16 23:26 - 00360512 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfreadwrite.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00356864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlidprov.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00356848 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcomp.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00355832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfreadwrite.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00325632 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationApi.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00324096 _____ (Microsoft Corporation) C:\WINDOWS\system32\SessEnv.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00299008 _____ (Microsoft Corporation) C:\WINDOWS\system32\pdh.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00298496 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSDMon.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00291840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Sensors.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00283648 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb10.sys
2014-07-16 23:26 - 2014-07-16 23:26 - 00280576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SessEnv.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00274944 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmWmiPl.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00271872 _____ (Microsoft Corporation) C:\WINDOWS\system32\spp.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00264192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FWPUCLNT.DLL
2014-07-16 23:26 - 2014-07-16 23:26 - 00262656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LocationApi.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00254976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pdh.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00254464 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsrslvr.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00252928 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00247296 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsApi.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00226304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Sensors.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00222720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\spp.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00222720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dcomp.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00220160 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00212992 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdd.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00201216 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReInfo.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00197632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00192000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Scanners.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00186368 _____ (Microsoft Corporation) C:\WINDOWS\system32\dafWfdProvider.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00172544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReInfo.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00171008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SensorsApi.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00160768 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxAllUserStore.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00157016 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wof.sys
2014-07-16 23:26 - 2014-07-16 23:26 - 00151040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Scanners.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxdav.sys
2014-07-16 23:26 - 2014-07-16 23:26 - 00139776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxAllUserStore.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00136024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wfplwfs.sys
2014-07-16 23:26 - 2014-07-16 23:26 - 00134144 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dfsc.sys
2014-07-16 23:26 - 2014-07-16 23:26 - 00115200 _____ (Microsoft Corporation) C:\WINDOWS\system32\umpnpmgr.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00115200 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevPropMgr.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00113648 _____ (Microsoft Corporation) C:\WINDOWS\system32\userenv.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidclass.sys
2014-07-16 23:26 - 2014-07-16 23:26 - 00102912 _____ (Microsoft Corporation) C:\WINDOWS\system32\davclnt.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00094016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\userenv.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00086016 _____ (Microsoft Corporation) C:\WINDOWS\system32\RMapi.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\davclnt.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\sxproxy.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00079360 _____ (Microsoft Corporation) C:\WINDOWS\system32\w32tm.exe
2014-07-16 23:26 - 2014-07-16 23:26 - 00079360 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\IPMIDrv.sys
2014-07-16 23:26 - 2014-07-16 23:26 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\w32tm.exe
2014-07-16 23:26 - 2014-07-16 23:26 - 00069120 _____ (Microsoft Corporation) C:\WINDOWS\system32\l2gpstore.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\l2gpstore.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpipreg.sys
2014-07-16 23:26 - 2014-07-16 23:26 - 00040448 _____ (Microsoft Corporation) C:\WINDOWS\system32\SetNetworkLocation.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sxproxy.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidusb.sys
2014-07-16 23:26 - 2014-07-16 23:26 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredentialMigrationHandler.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredentialMigrationHandler.dll
2014-07-16 23:24 - 2014-07-16 23:24 - 16871936 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2014-07-16 23:24 - 2014-07-16 23:24 - 12711424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2014-07-16 23:24 - 2014-07-16 23:24 - 02518360 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2014-07-16 23:24 - 2014-07-16 23:24 - 01417216 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2014-07-16 23:24 - 2014-07-16 23:24 - 00735232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\adtschema.dll
2014-07-16 23:24 - 2014-07-16 23:24 - 00735232 _____ (Microsoft Corporation) C:\WINDOWS\system32\adtschema.dll
2014-07-16 23:24 - 2014-07-16 23:24 - 00565576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2014-07-16 23:24 - 2014-07-16 23:24 - 00467800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS
2014-07-16 23:24 - 2014-07-16 23:24 - 00440664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbport.sys
2014-07-16 23:24 - 2014-07-16 23:24 - 00436224 _____ (Microsoft Corporation) C:\WINDOWS\system32\certcli.dll
2014-07-16 23:24 - 2014-07-16 23:24 - 00423768 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll
2014-07-16 23:24 - 2014-07-16 23:24 - 00419672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbhub.sys
2014-07-16 23:24 - 2014-07-16 23:24 - 00323584 _____ (Microsoft Corporation) C:\WINDOWS\system32\DaOtpCredentialProvider.dll
2014-07-16 23:24 - 2014-07-16 23:24 - 00318976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certcli.dll
2014-07-16 23:24 - 2014-07-16 23:24 - 00284672 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUDFHost.exe
2014-07-16 23:24 - 2014-07-16 23:24 - 00270848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DaOtpCredentialProvider.dll
2014-07-16 23:24 - 2014-07-16 23:24 - 00227840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WUDFRd.sys
2014-07-16 23:24 - 2014-07-16 23:24 - 00216368 _____ (Microsoft Corporation) C:\WINDOWS\system32\rsaenh.dll
2014-07-16 23:24 - 2014-07-16 23:24 - 00209408 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUDFPlatform.dll
2014-07-16 23:24 - 2014-07-16 23:24 - 00189016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rsaenh.dll
2014-07-16 23:24 - 2014-07-16 23:24 - 00110592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WUDFPf.sys
2014-07-16 23:24 - 2014-07-16 23:24 - 00099840 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUDFSvc.dll
2014-07-16 23:24 - 2014-07-16 23:24 - 00089944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbehci.sys
2014-07-16 23:24 - 2014-07-16 23:24 - 00037376 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbuhci.sys
2014-07-16 23:24 - 2014-07-16 23:24 - 00027480 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbd.sys
2014-07-16 23:23 - 2014-07-16 23:23 - 13287936 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2014-07-16 23:23 - 2014-07-16 23:23 - 11792384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2014-07-16 23:23 - 2014-07-16 23:23 - 03463680 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2014-07-16 23:23 - 2014-07-16 23:23 - 01054208 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.appcore.dll
2014-07-16 23:23 - 2014-07-16 23:23 - 01018880 _____ (Microsoft Corporation) C:\WINDOWS\system32\termsrv.dll
2014-07-16 23:23 - 2014-07-16 23:23 - 00923136 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll
2014-07-16 23:23 - 2014-07-16 23:23 - 00828928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.appcore.dll
2014-07-16 23:23 - 2014-07-16 23:23 - 00827392 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2014-07-16 23:23 - 2014-07-16 23:23 - 00756224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll
2014-07-16 23:23 - 2014-07-16 23:23 - 00666624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2014-07-16 23:23 - 2014-07-16 23:23 - 00563200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\afd.sys
2014-07-16 23:23 - 2014-07-16 23:23 - 00555736 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.appcore.dll
2014-07-16 23:23 - 2014-07-16 23:23 - 00249344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2014-07-16 23:23 - 2014-07-16 23:23 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2014-07-16 23:23 - 2014-07-16 23:23 - 00093696 _____ (Microsoft Corporation) C:\WINDOWS\system32\wudriver.dll
2014-07-16 23:23 - 2014-07-16 23:23 - 00086688 _____ (Microsoft Corporation) C:\WINDOWS\system32\mrt_map.dll
2014-07-16 23:23 - 2014-07-16 23:23 - 00080896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wudriver.dll
2014-07-16 23:23 - 2014-07-16 23:23 - 00080032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mrt_map.dll
2014-07-16 23:23 - 2014-07-16 23:23 - 00054776 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2014-07-16 23:23 - 2014-07-16 23:23 - 00028320 _____ (Microsoft Corporation) C:\WINDOWS\system32\mrt100.dll
2014-07-16 23:23 - 2014-07-16 23:23 - 00026784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mrt100.dll
2014-07-16 23:22 - 2014-07-16 23:22 - 04190720 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2014-07-16 23:22 - 2014-07-16 23:22 - 03360256 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll
2014-07-16 23:22 - 2014-07-16 23:22 - 02151424 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3.dll
2014-07-16 23:22 - 2014-07-16 23:22 - 01975296 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWrite.dll
2014-07-16 23:22 - 2014-07-16 23:22 - 01509888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWrite.dll
2014-07-16 23:22 - 2014-07-16 23:22 - 01345536 _____ (Microsoft Corporation) C:\WINDOWS\system32\FntCache.dll
2014-07-16 23:22 - 2014-07-16 23:22 - 01312256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3.dll
2014-07-16 23:22 - 2014-07-16 23:22 - 00834048 _____ (Microsoft Corporation) C:\WINDOWS\system32\osk.exe
2014-07-16 23:22 - 2014-07-16 23:22 - 00779264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\osk.exe
2014-07-16 23:22 - 2014-07-16 23:22 - 00586240 _____ (Microsoft Corporation) C:\WINDOWS\system32\qedit.dll
2014-07-16 23:22 - 2014-07-16 23:22 - 00488960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qedit.dll
2014-07-16 23:21 - 2014-07-16 23:21 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2014-07-16 23:21 - 2014-07-16 23:21 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2014-07-16 23:21 - 2014-07-16 23:21 - 01705472 _____ (Microsoft Corporation) C:\WINDOWS\system32\wucltux.dll
2014-07-16 23:21 - 2014-07-16 23:21 - 00419928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.appcore.dll
2014-07-16 23:21 - 2014-07-16 23:21 - 00381440 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUSettingsProvider.dll
2014-07-16 23:21 - 2014-07-16 23:21 - 00201728 _____ (Microsoft Corporation) C:\WINDOWS\system32\ubpm.dll
2014-07-16 23:21 - 2014-07-16 23:21 - 00190976 _____ (Microsoft Corporation) C:\WINDOWS\system32\storewuauth.dll
2014-07-16 23:21 - 2014-07-16 23:21 - 00137728 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuwebv.dll
2014-07-16 23:21 - 2014-07-16 23:21 - 00123904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuwebv.dll
2014-07-16 23:21 - 2014-07-16 23:21 - 00079872 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSReset.exe
2014-07-16 23:21 - 2014-07-16 23:21 - 00056320 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups.dll
2014-07-16 23:21 - 2014-07-16 23:21 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapp.exe
2014-07-16 23:21 - 2014-07-16 23:21 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapp.exe
2014-07-16 23:21 - 2014-07-16 23:21 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wups.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 21268952 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 18755672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 08652800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 07425368 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2014-07-16 23:20 - 2014-07-16 23:20 - 07173120 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 06645248 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 05833216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Search.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 05774848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 05104640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 04269056 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncEngine.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 02688000 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 02144984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 02140888 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 02124840 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d9.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 02100736 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlowUI.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 01797896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d9.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 01584128 _____ (Microsoft Corporation) C:\WINDOWS\system32\workfolderssvc.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 01527296 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 01466856 _____ (Microsoft Corporation) C:\WINDOWS\system32\propsys.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 01436160 _____ (Microsoft Corporation) C:\WINDOWS\system32\VSSVC.exe
2014-07-16 23:20 - 2014-07-16 23:20 - 01403856 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 01379064 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpmde.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 01308160 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpsvc.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 01287168 _____ (Microsoft Corporation) C:\WINDOWS\system32\mispace.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 01230336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 01222656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Streaming.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 01209616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmde.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 01200288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\propsys.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 01200128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthport.sys
2014-07-16 23:20 - 2014-07-16 23:20 - 01126912 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFolder.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 01057280 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdvidcrl.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 01029120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mispace.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 01025024 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00982016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Streaming.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00955904 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00918528 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00888320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00881616 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00872448 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDrive.exe
2014-07-16 23:20 - 2014-07-16 23:20 - 00855552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdvidcrl.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00836608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchFolder.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00834048 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00805376 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00765408 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00761856 _____ (Microsoft Corporation) C:\WINDOWS\system32\WorkfoldersControl.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00721408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveTelemetry.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00718336 _____ (Microsoft Corporation) C:\WINDOWS\system32\swprv.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00707048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00677376 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys
2014-07-16 23:20 - 2014-07-16 23:20 - 00669856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00629760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmCoreR.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00609448 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00589656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fvevol.sys
2014-07-16 23:20 - 2014-07-16 23:20 - 00518544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00491744 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00491520 _____ (Microsoft Corporation) C:\WINDOWS\system32\GeofenceMonitorService.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00486912 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv
2014-07-16 23:20 - 2014-07-16 23:20 - 00467968 _____ (Microsoft Corporation) C:\WINDOWS\system32\srcore.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00467496 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00463256 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00462336 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsGdiConverter.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00449536 _____ (Microsoft Corporation) C:\WINDOWS\system32\defragsvc.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00443904 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansec.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00443904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\nwifi.sys
2014-07-16 23:20 - 2014-07-16 23:20 - 00428888 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS
2014-07-16 23:20 - 2014-07-16 23:20 - 00426496 _____ (Microsoft Corporation) C:\WINDOWS\system32\clusapi.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00407016 _____ (Microsoft Corporation) C:\WINDOWS\system32\services.exe
2014-07-16 23:20 - 2014-07-16 23:20 - 00406504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00402432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
2014-07-16 23:20 - 2014-07-16 23:20 - 00387896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00384856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spaceport.sys
2014-07-16 23:20 - 2014-07-16 23:20 - 00372568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storport.sys
2014-07-16 23:20 - 2014-07-16 23:20 - 00370176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv
2014-07-16 23:20 - 2014-07-16 23:20 - 00370176 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanmsm.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00364640 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00360792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fltMgr.sys
2014-07-16 23:20 - 2014-07-16 23:20 - 00357376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GeofenceMonitorService.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00337408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsGdiConverter.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00337240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Classpnp.sys
2014-07-16 23:20 - 2014-07-16 23:20 - 00335872 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDEServer.exe
2014-07-16 23:20 - 2014-07-16 23:20 - 00326024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00324888 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFCaptureEngine.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00323072 _____ (Microsoft Corporation) C:\WINDOWS\system32\srvsvc.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00313344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\clusapi.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00310616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\volsnap.sys
2014-07-16 23:20 - 2014-07-16 23:20 - 00307304 _____ (Microsoft Corporation) C:\WINDOWS\system32\wintrust.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00305768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00300544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanmsm.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00296960 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanapi.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00285144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFCaptureEngine.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00281600 _____ (Microsoft Corporation) C:\WINDOWS\system32\resutils.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00275800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msiscsi.sys
2014-07-16 23:20 - 2014-07-16 23:20 - 00271872 _____ (Microsoft Corporation) C:\WINDOWS\system32\rstrui.exe
2014-07-16 23:20 - 2014-07-16 23:20 - 00263424 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlows.exe
2014-07-16 23:20 - 2014-07-16 23:20 - 00257880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdFilter.sys
2014-07-16 23:20 - 2014-07-16 23:20 - 00250368 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpencom.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00246272 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srvnet.sys
2014-07-16 23:20 - 2014-07-16 23:20 - 00244880 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2014-07-16 23:20 - 2014-07-16 23:20 - 00233912 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00230808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wintrust.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanapi.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00219136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\resutils.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00209920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpencom.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00206848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys
2014-07-16 23:20 - 2014-07-16 23:20 - 00201920 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVideoDSP.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00201216 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00191488 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpchttp.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00186880 _____ (Microsoft Corporation) C:\WINDOWS\system32\WorkFoldersShell.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00180056 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2014-07-16 23:20 - 2014-07-16 23:20 - 00178184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVideoDSP.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00144384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpchttp.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00143872 _____ (Microsoft Corporation) C:\WINDOWS\system32\BootMenuUX.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00135168 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscsvc.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00130144 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpapi.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00125496 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmapi.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00123224 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdNisDrv.sys
2014-07-16 23:20 - 2014-07-16 23:20 - 00111528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gpapi.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00098584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmapi.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00077312 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hdaudbus.sys
2014-07-16 23:20 - 2014-07-16 23:20 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\system32\srclient.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsgqec.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\srclient.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00055296 _____ (Microsoft Corporation) C:\WINDOWS\system32\energyprov.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tsgqec.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00047616 _____ (Microsoft Corporation) C:\WINDOWS\system32\tlscsp.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00046592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tlscsp.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Shell.Search.UriHandler.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00035856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdBoot.sys
2014-07-16 23:20 - 2014-07-16 23:20 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Shell.Search.UriHandler.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00032600 _____ (Microsoft Corporation) C:\WINDOWS\system32\ploptin.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00028408 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfpmp.exe
2014-07-16 23:20 - 2014-07-16 23:20 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d8thk.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanhlp.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanhlp.dll
2014-07-16 23:18 - 2014-07-16 23:18 - 00262144 _____ () C:\WINDOWS\system32\config\userdiff
2014-07-16 23:16 - 2014-07-16 23:16 - 00000000 ____D () C:\WINDOWS\SysWOW64\XPSViewer
2014-07-16 23:16 - 2014-07-16 23:16 - 00000000 ____D () C:\Program Files\Reference Assemblies
2014-07-16 23:16 - 2014-07-16 23:16 - 00000000 ____D () C:\Program Files\MSBuild
2014-07-16 23:16 - 2014-07-16 23:16 - 00000000 ____D () C:\Program Files (x86)\Reference Assemblies
2014-07-16 23:16 - 2014-07-16 23:16 - 00000000 ____D () C:\Program Files (x86)\MSBuild
2014-07-16 23:15 - 2014-07-16 22:37 - 00000000 ____D () C:\Recovery
2014-07-16 23:15 - 2013-08-03 06:48 - 01166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll
2014-07-16 23:15 - 2013-08-03 06:48 - 00124112 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2014-07-16 23:15 - 2013-08-03 06:48 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe
2014-07-16 23:15 - 2013-08-03 06:41 - 00778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll
2014-07-16 23:15 - 2013-08-03 06:41 - 00102608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2014-07-16 23:15 - 2013-08-03 06:41 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe
2014-07-16 22:44 - 2014-07-16 22:44 - 00001547 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2014-07-16 22:44 - 2014-07-16 22:44 - 00000000 ____D () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Lenovo
2014-07-16 22:44 - 2014-07-16 22:44 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Lenovo
2014-07-16 22:43 - 2014-07-16 22:43 - 00000000 ____D () C:\WINDOWS\system32\config\bbimigrate
2014-07-16 22:41 - 2014-07-24 17:06 - 00000000 ____D () C:\Users\Katharina
2014-07-16 22:41 - 2014-07-17 06:49 - 00032388 _____ () C:\WINDOWS\diagwrn.xml
2014-07-16 22:41 - 2014-07-17 06:49 - 00032388 _____ () C:\WINDOWS\diagerr.xml
2014-07-16 22:41 - 2014-07-16 22:42 - 00000000 ___RD () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-07-16 22:41 - 2014-07-16 22:42 - 00000000 ___RD () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-07-16 22:41 - 2014-07-16 22:42 - 00000000 ___RD () C:\Users\Katharina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-07-16 22:41 - 2014-07-16 22:42 - 00000000 ___RD () C:\Users\Katharina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-07-16 22:41 - 2014-07-16 22:41 - 00000000 _SHDL () C:\Users\UpdatusUser\Vorlagen
2014-07-16 22:41 - 2014-07-16 22:41 - 00000000 _SHDL () C:\Users\UpdatusUser\Startmenü
2014-07-16 22:41 - 2014-07-16 22:41 - 00000000 _SHDL () C:\Users\UpdatusUser\Netzwerkumgebung
2014-07-16 22:41 - 2014-07-16 22:41 - 00000000 _SHDL () C:\Users\UpdatusUser\Lokale Einstellungen
2014-07-16 22:41 - 2014-07-16 22:41 - 00000000 _SHDL () C:\Users\UpdatusUser\Eigene Dateien
2014-07-16 22:41 - 2014-07-16 22:41 - 00000000 _SHDL () C:\Users\UpdatusUser\Druckumgebung
2014-07-16 22:41 - 2014-07-16 22:41 - 00000000 _SHDL () C:\Users\UpdatusUser\Documents\Eigene Musik
2014-07-16 22:41 - 2014-07-16 22:41 - 00000000 _SHDL () C:\Users\UpdatusUser\Documents\Eigene Bilder
2014-07-16 22:41 - 2014-07-16 22:41 - 00000000 _SHDL () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-07-16 22:41 - 2014-07-16 22:41 - 00000000 _SHDL () C:\Users\UpdatusUser\AppData\Local\Verlauf
2014-07-16 22:41 - 2014-07-16 22:41 - 00000000 _SHDL () C:\Users\UpdatusUser\AppData\Local\Anwendungsdaten
2014-07-16 22:41 - 2014-07-16 22:41 - 00000000 _SHDL () C:\Users\UpdatusUser\Anwendungsdaten
2014-07-16 22:41 - 2014-07-16 22:41 - 00000000 _SHDL () C:\Users\Katharina\Vorlagen
2014-07-16 22:41 - 2014-07-16 22:41 - 00000000 _SHDL () C:\Users\Katharina\Startmenü
2014-07-16 22:41 - 2014-07-16 22:41 - 00000000 _SHDL () C:\Users\Katharina\Netzwerkumgebung
2014-07-16 22:41 - 2014-07-16 22:41 - 00000000 _SHDL () C:\Users\Katharina\Lokale Einstellungen
2014-07-16 22:41 - 2014-07-16 22:41 - 00000000 _SHDL () C:\Users\Katharina\Eigene Dateien
2014-07-16 22:41 - 2014-07-16 22:41 - 00000000 _SHDL () C:\Users\Katharina\Druckumgebung
2014-07-16 22:41 - 2014-07-16 22:41 - 00000000 _SHDL () C:\Users\Katharina\Documents\Eigene Musik
2014-07-16 22:41 - 2014-07-16 22:41 - 00000000 _SHDL () C:\Users\Katharina\Documents\Eigene Bilder
2014-07-16 22:41 - 2014-07-16 22:41 - 00000000 _SHDL () C:\Users\Katharina\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-07-16 22:41 - 2014-07-16 22:41 - 00000000 _SHDL () C:\Users\Katharina\AppData\Local\Verlauf
2014-07-16 22:41 - 2014-07-16 22:41 - 00000000 _SHDL () C:\Users\Katharina\AppData\Local\Anwendungsdaten
2014-07-16 22:41 - 2014-07-16 22:41 - 00000000 _SHDL () C:\Users\Katharina\Anwendungsdaten
2014-07-16 22:41 - 2014-03-18 12:11 - 00000369 _____ () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk
2014-07-16 22:41 - 2014-03-18 12:11 - 00000369 _____ () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk
2014-07-16 22:41 - 2014-03-18 12:11 - 00000369 _____ () C:\Users\Katharina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk
2014-07-16 22:41 - 2014-03-18 12:11 - 00000369 _____ () C:\Users\Katharina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk
2014-07-16 22:41 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-07-16 22:41 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Katharina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-07-16 22:41 - 2013-08-22 17:36 - 00000000 ____D () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-07-16 22:41 - 2013-08-22 17:36 - 00000000 ____D () C:\Users\Katharina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-07-16 22:33 - 2014-07-16 22:43 - 00000000 ____D () C:\Program Files\Intel
2014-07-16 22:33 - 2014-07-16 22:33 - 00000264 _____ () C:\WINDOWS\Tasks\Synaptics TouchPad Enhancements.job
2014-07-16 22:33 - 2014-07-16 22:33 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2014-07-16 22:33 - 2014-07-16 22:33 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_Kernel_SynTP_01011.Wdf
2014-07-16 22:33 - 2014-07-16 22:33 - 00000000 ____D () C:\Program Files (x86)\USB Camera
2014-07-16 22:33 - 2013-06-11 18:42 - 00064000 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.DLL
2014-07-16 22:33 - 2013-06-11 18:42 - 00060416 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.DLL
2014-07-16 22:32 - 2014-07-16 22:32 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_Kernel_Smb_driver_Intel_01011.Wdf
2014-07-16 22:32 - 2014-07-16 22:32 - 00000000 ____D () C:\Program Files\Synaptics
2014-07-16 21:59 - 2014-07-17 06:49 - 00006580 _____ () C:\WINDOWS\comsetup.log
2014-07-16 13:42 - 2014-07-16 18:12 - 00014889 _____ () C:\Users\Katharina\Desktop\Vorratsliste.ods
2014-07-12 11:40 - 2014-07-21 16:26 - 00000000 ___SD () C:\WINDOWS\system32\CompatTel
2014-07-08 19:26 - 2014-07-08 20:17 - 00032202 _____ () C:\Users\Katharina\Desktop\Lipödem.odt
2014-07-05 21:44 - 2014-07-05 21:45 - 00001102 _____ () C:\DelFix.txt
2014-07-05 21:44 - 2014-07-05 21:44 - 00000000 ____D () C:\WINDOWS\ERUNT
2014-07-02 18:58 - 2014-07-02 18:58 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-07-02 18:57 - 2014-07-02 18:58 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Katharina\Downloads\mbam-setup-2.0.2.1012.exe
2014-07-01 18:30 - 2014-07-01 18:42 - 00017536 _____ () C:\Users\Katharina\Desktop\Menüpläne.odt
2014-07-01 09:39 - 2014-07-16 22:46 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDFCreator
2014-07-01 09:39 - 2014-07-01 09:39 - 00001046 _____ () C:\Users\Public\Desktop\PDFCreator.lnk
2014-07-01 09:39 - 2014-07-01 09:39 - 00000000 ____D () C:\ProgramData\PDF Architect 2
2014-07-01 09:38 - 2014-07-01 09:39 - 00000000 ____D () C:\Program Files (x86)\PDFCreator
2014-07-01 09:38 - 2014-04-25 17:44 - 00137000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSMAPI32.OCX
2014-07-01 09:38 - 2014-04-25 17:44 - 00110264 _____ (pdfforge GmbH) C:\WINDOWS\system32\pdfcmon.dll
2014-07-01 09:38 - 2014-04-25 17:44 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSMPIDE.DLL
2014-07-01 09:38 - 1998-07-06 18:56 - 00125712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VB6DE.DLL
2014-07-01 09:38 - 1998-07-06 18:55 - 00158208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSCMCDE.DLL
2014-07-01 09:38 - 1998-07-06 18:55 - 00064512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSCC2DE.DLL
2014-07-01 09:17 - 2013-09-01 12:59 - 01103872 _____ () C:\WINDOWS\SysWOW64\CBLCtlsU.ocx
2014-07-01 09:17 - 2013-07-13 12:15 - 00805376 _____ () C:\WINDOWS\SysWOW64\EditCtlsU.ocx
2014-07-01 09:17 - 2013-07-12 22:57 - 00539648 _____ () C:\WINDOWS\SysWOW64\LblCtlsU.ocx
2014-07-01 09:17 - 2013-04-05 13:55 - 00476160 _____ () C:\WINDOWS\SysWOW64\TabStripCtlU.ocx
2014-07-01 09:17 - 2013-03-28 23:13 - 00645632 _____ () C:\WINDOWS\SysWOW64\BtnCtlsU.ocx
2014-07-01 09:17 - 2013-03-03 14:37 - 01061888 _____ () C:\WINDOWS\SysWOW64\ExLvwU.ocx
2014-07-01 09:04 - 2014-07-01 09:04 - 00000000 ____D () C:\ProgramData\boost_interprocess
2014-06-30 20:56 - 2014-06-30 20:56 - 00000000 ____D () C:\Users\Katharina\dwhelper
2014-06-30 20:42 - 2014-07-16 22:46 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Free Audio Pack
2014-06-30 20:42 - 2014-06-30 20:42 - 00001329 _____ () C:\Users\Katharina\Desktop\Easy Audio Cutter.lnk
2014-06-30 20:42 - 2014-06-30 20:42 - 00001313 _____ () C:\Users\Katharina\Desktop\Free CD Ripper.lnk
2014-06-30 20:42 - 2014-06-30 20:42 - 00001311 _____ () C:\Users\Katharina\Desktop\Free Mp3 Wma Converter.lnk
2014-06-30 20:42 - 2014-06-30 20:42 - 00000000 ____D () C:\Users\Katharina\AppData\Roaming\FreeAudioPack
2014-06-30 20:42 - 2014-06-30 20:42 - 00000000 ____D () C:\Program Files (x86)\Free mp3 Wma Converter
2014-06-30 20:42 - 2014-04-25 17:44 - 01070152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSCOMCTL.OCX
2014-06-30 20:42 - 2011-09-29 14:20 - 02084864 _____ (NCT Company Ltd.) C:\WINDOWS\SysWOW64\AudDesign.dll
2014-06-30 20:42 - 2011-09-29 14:20 - 01986560 _____ (NCT Company Ltd.) C:\WINDOWS\SysWOW64\AudFile.dll
2014-06-30 20:42 - 2011-09-29 14:20 - 01212416 _____ (NCT Company Ltd.) C:\WINDOWS\SysWOW64\AudioInfos.dll
2014-06-30 20:42 - 2011-09-29 14:20 - 00484352 _____ () C:\WINDOWS\SysWOW64\lame_enc.dll
2014-06-30 20:42 - 2011-09-29 14:20 - 00479232 _____ (NCT Company Ltd.) C:\WINDOWS\SysWOW64\AudioVisu.dll
2014-06-30 20:42 - 2011-09-29 14:20 - 00458752 _____ (NCT Company Ltd.) C:\WINDOWS\SysWOW64\AudPlayer.dll
2014-06-30 20:42 - 2011-09-29 14:20 - 00454656 _____ (NCT Company Ltd.) C:\WINDOWS\SysWOW64\AudioRecord.dll
2014-06-30 20:42 - 2011-09-29 14:20 - 00417792 _____ (NCT Company Ltd.) C:\WINDOWS\SysWOW64\AudDisplay.dll
2014-06-30 20:42 - 2011-09-29 14:20 - 00348160 _____ (NCT Company Ltd.) C:\WINDOWS\SysWOW64\WMAFile.dll
2014-06-30 20:42 - 2011-09-29 14:20 - 00307200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcr70.dll
2014-06-30 20:42 - 2011-09-29 14:20 - 00164144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\COMCT232.OCX
2014-06-30 20:42 - 2011-09-29 14:20 - 00116296 _____ () C:\WINDOWS\SysWOW64\NCTWMAProfiles.prx
2014-06-30 20:42 - 2011-09-29 14:19 - 00662288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSCOMCT2.OCX
2014-06-30 20:42 - 2011-09-29 14:19 - 00224016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TABCTL32.OCX
2014-06-30 20:42 - 2011-09-29 14:19 - 00152848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\COMDLG32.OCX
2014-06-30 20:42 - 2011-09-29 14:19 - 00141312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSCMCFR.DLL
2014-06-30 20:42 - 2011-09-29 14:19 - 00119568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VB6FR.DLL
2014-06-30 20:42 - 2011-09-29 14:19 - 00115920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msinet.OCX
2014-06-30 20:42 - 2011-09-29 14:19 - 00101888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VB6STKIT.DLL
2014-06-30 20:42 - 2011-09-29 14:19 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Mscc2fr.dll
2014-06-30 20:42 - 2011-09-29 14:19 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CMDLGFR.DLL
2014-06-30 20:42 - 2011-09-29 14:19 - 00021504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TABCTFR.DLL
2014-06-30 20:42 - 2011-09-29 14:19 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetfr.DLL
2014-06-30 20:32 - 2014-06-30 20:32 - 00001163 _____ () C:\Users\Katharina\Desktop\Amazon Music.lnk
2014-06-30 20:31 - 2014-06-30 20:31 - 38534920 _____ (Amazon) C:\Users\Katharina\Downloads\AmazonMusicInstaller.exe
2014-06-30 20:26 - 2014-06-30 20:27 - 09659608 _____ () C:\Users\Katharina\Downloads\AmazonMusicImporterInstaller-2.1.0._V337128703_.exe
2014-06-30 17:25 - 2014-06-30 17:25 - 00015074 _____ () C:\Users\Katharina\Documents\Saisonkalender_Obst_Gemüse.odt
2014-06-30 16:28 - 2014-06-30 16:28 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf
2014-06-30 15:58 - 2014-07-23 22:16 - 01853538 _____ () C:\Users\Katharina\Documents\Unbenannt 1.odt
2014-06-29 09:34 - 2014-06-30 20:27 - 00000000 ____D () C:\Users\Katharina\AppData\Local\Adobe
2014-06-27 20:26 - 2014-06-27 20:26 - 00000000 ____D () C:\Users\Katharina\AppData\Local\Macromedia
2014-06-26 21:02 - 2014-06-26 21:02 - 00955246 _____ () C:\Users\Katharina\Desktop\Hochzeitstag 26082014.MVM
2014-06-26 20:59 - 2014-06-26 20:59 - 00000000 ____D () C:\Users\Katharina\AppData\Local\CrashDumps
2014-06-26 20:43 - 2014-06-26 20:43 - 00000000 ____D () C:\Users\Katharina\AppData\Roaming\WebApp
2014-06-26 20:40 - 2014-06-26 20:40 - 00000000 ____D () C:\Users\Katharina\Documents\Lenovo
2014-06-26 20:40 - 2014-06-26 20:40 - 00000000 ____D () C:\Users\Katharina\Documents\CyberLink
2014-06-26 20:40 - 2014-06-26 20:40 - 00000000 ____D () C:\Users\Katharina\AppData\Roaming\Lenovo
2014-06-26 20:40 - 2014-06-26 20:40 - 00000000 ____D () C:\Users\Katharina\AppData\Roaming\CyberLink
2014-06-26 13:32 - 2014-06-26 20:50 - 00023040 ___SH () C:\Users\Katharina\Downloads\Thumbs.db
2014-06-26 13:30 - 2014-07-16 22:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MAGIX
2014-06-26 13:30 - 2014-06-26 13:31 - 00000000 ____D () C:\ProgramData\MAGIX
2014-06-26 13:30 - 2014-06-26 13:30 - 00001051 _____ () C:\Users\Public\Desktop\MAGIX Slideshow Maker 2.lnk
2014-06-26 13:30 - 2014-06-26 13:30 - 00000000 ____D () C:\Users\Katharina\Documents\MAGIX
2014-06-26 13:30 - 2014-06-26 13:30 - 00000000 ____D () C:\Program Files (x86)\MAGIX
2014-06-26 13:27 - 2014-06-26 13:31 - 00000000 ____D () C:\Users\Katharina\AppData\Roaming\MAGIX
2014-06-26 13:09 - 2014-06-26 13:10 - 00000000 ____D () C:\Users\Katharina\AppData\Local\AquaSoft
2014-06-26 13:09 - 2014-06-26 13:09 - 00000000 ____D () C:\Users\Katharina\AppData\Roaming\AquaSoft
2014-06-24 17:24 - 2014-07-21 16:53 - 00167936 ___SH () C:\Users\Katharina\Desktop\Thumbs.db
2014-06-24 16:40 - 2014-06-24 16:40 - 00000000 ____D () C:\sources
2014-06-24 16:39 - 2014-07-10 09:53 - 00000000 ____D () C:\Users\UpdatusUser\AppData\Local\CrashDumps

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-07-24 20:40 - 2014-07-24 18:12 - 00015862 _____ () C:\Users\Katharina\Downloads\FRST.txt
2014-07-24 20:39 - 2014-07-24 20:39 - 02093568 _____ (Farbar) C:\Users\Katharina\Downloads\FRST64(1).exe
2014-07-24 20:39 - 2014-07-24 18:11 - 00000000 ____D () C:\FRST
2014-07-24 20:00 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\sru
2014-07-24 18:43 - 2014-06-21 19:34 - 00003600 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3349096550-3144467483-3537340833-1002
2014-07-24 18:38 - 2014-07-24 18:38 - 01084416 _____ (Farbar) C:\Users\Katharina\Downloads\FRST.exe
2014-07-24 18:21 - 2014-07-24 18:21 - 01110476 _____ () C:\Users\Katharina\Downloads\7z920.exe
2014-07-24 18:21 - 2014-07-17 06:49 - 01137003 _____ () C:\WINDOWS\WindowsUpdate.log
2014-07-24 18:13 - 2014-07-24 18:12 - 00022455 _____ () C:\Users\Katharina\Downloads\Addition.txt
2014-07-24 18:10 - 2014-07-24 18:10 - 02093568 _____ (Farbar) C:\Users\Katharina\Downloads\FRST64.exe
2014-07-24 18:10 - 2014-07-24 18:10 - 00000017 _____ () C:\Users\Katharina\AppData\Local\resmon.resmoncfg
2014-07-24 17:58 - 2014-06-21 19:27 - 00000000 ____D () C:\Users\Katharina\Documents\Bluetooth Folder
2014-07-24 17:55 - 2013-08-22 15:25 - 00262144 ___SH () C:\WINDOWS\system32\config\ELAM
2014-07-24 17:47 - 2014-03-18 12:03 - 01780340 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2014-07-24 17:47 - 2014-03-18 11:25 - 00766620 _____ () C:\WINDOWS\system32\perfh007.dat
2014-07-24 17:47 - 2014-03-18 11:25 - 00159902 _____ () C:\WINDOWS\system32\perfc007.dat
2014-07-24 17:46 - 2014-07-24 17:46 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Katharina\Downloads\mbam-setup-2.0.2.1012(1).exe
2014-07-24 17:45 - 2014-07-17 07:21 - 00000000 __RDO () C:\Users\Katharina\OneDrive
2014-07-24 17:43 - 2014-07-24 17:43 - 00000451 _____ () C:\WINDOWS\system32\{F33C3B9B-72AF-418A-B3FD-560646F7CDA2}.bat
2014-07-24 17:42 - 2014-06-21 19:45 - 00000000 ____D () C:\Program Files (x86)\Avira
2014-07-24 17:42 - 2014-03-18 03:50 - 00011060 _____ () C:\WINDOWS\PFRO.log
2014-07-24 17:42 - 2013-08-22 16:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2014-07-24 17:42 - 2013-08-22 15:25 - 00262144 ___SH () C:\WINDOWS\system32\config\BBI
2014-07-24 17:41 - 2014-06-21 19:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2014-07-24 17:41 - 2014-02-12 16:15 - 00002560 _____ () C:\WINDOWS\system32\VfService.trf
2014-07-24 17:30 - 2014-07-24 17:30 - 00000000 ____D () C:\Users\Katharina\AppData\Roaming\Digiarty
2014-07-24 17:29 - 2014-07-24 17:28 - 00000163 _____ () C:\WINDOWS\Reimage.ini
2014-07-24 17:28 - 2014-07-24 17:28 - 00000133 _____ () C:\Users\Katharina\Desktop\Amazon.de.url
2014-07-24 17:28 - 2014-07-24 17:28 - 00000000 ____D () C:\Users\Katharina\Downloads\winx-dvd-author
2014-07-24 17:28 - 2014-07-24 17:28 - 00000000 ____D () C:\Users\Katharina\AppData\Local\Google
2014-07-24 17:26 - 2014-07-24 17:26 - 00667392 _____ (© 2014 ClientConnect Ltd.) C:\Users\Katharina\Downloads\winx-dvd-author.exe
2014-07-24 17:06 - 2014-07-16 22:41 - 00000000 ____D () C:\Users\Katharina
2014-07-23 22:16 - 2014-06-30 15:58 - 01853538 _____ () C:\Users\Katharina\Documents\Unbenannt 1.odt
2014-07-23 22:12 - 2014-07-23 22:12 - 01459302 _____ () C:\Users\Katharina\Desktop\Slideshow 2014-07-23.MVM
2014-07-23 21:59 - 2014-06-21 19:45 - 00001164 _____ () C:\Users\Public\Desktop\Avira.lnk
2014-07-23 21:59 - 2014-06-21 19:45 - 00000000 ____D () C:\ProgramData\Package Cache
2014-07-23 20:54 - 2014-07-23 20:51 - 00016384 ___SH () C:\Users\Katharina\Documents\Thumbs.db
2014-07-23 14:39 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\AppReadiness
2014-07-21 16:53 - 2014-06-24 17:24 - 00167936 ___SH () C:\Users\Katharina\Desktop\Thumbs.db
2014-07-21 16:42 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\rescache
2014-07-21 16:26 - 2014-07-12 11:40 - 00000000 ___SD () C:\WINDOWS\system32\CompatTel
2014-07-21 16:26 - 2012-07-26 09:59 - 00000000 ____D () C:\WINDOWS\CbsTemp
2014-07-20 16:50 - 2014-07-16 23:29 - 00000000 ____D () C:\Windows.old
2014-07-20 13:01 - 2014-07-20 13:01 - 00000000 ___RD () C:\WINDOWS\BrowserChoice
2014-07-20 13:01 - 2014-06-21 19:26 - 00000000 ____D () C:\Users\Katharina\AppData\Local\Packages
2014-07-20 13:00 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\restore
2014-07-18 21:34 - 2014-07-16 23:30 - 00000000 ___DC () C:\WINDOWS\Panther
2014-07-17 19:34 - 2013-08-22 16:46 - 00325967 _____ () C:\WINDOWS\setupact.log
2014-07-17 11:18 - 2014-07-17 11:18 - 00000000 ____D () C:\WINDOWS\SysWOW64\NV
2014-07-17 11:18 - 2014-07-17 11:18 - 00000000 ____D () C:\WINDOWS\system32\NV
2014-07-17 11:18 - 2014-07-17 11:18 - 00000000 ____D () C:\Program Files\Common Files\Atheros
2014-07-17 11:18 - 2014-02-12 15:53 - 00000000 ____D () C:\Program Files (x86)\Bluetooth Suite
2014-07-17 11:18 - 2014-02-12 15:48 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-07-17 11:18 - 2013-08-22 16:46 - 00000262 _____ () C:\WINDOWS\setuperr.log
2014-07-17 11:17 - 2014-02-12 15:47 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2014-07-17 07:19 - 2014-07-17 07:19 - 00001465 _____ () C:\Users\Katharina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-07-17 07:19 - 2014-07-17 07:19 - 00000020 ___SH () C:\Users\Katharina\ntuser.ini
2014-07-17 06:50 - 2014-07-17 06:50 - 00000000 _SHDL () C:\Users\Default\Vorlagen
2014-07-17 06:50 - 2014-07-17 06:50 - 00000000 _SHDL () C:\Users\Default\Startmenü
2014-07-17 06:50 - 2014-07-17 06:50 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung
2014-07-17 06:50 - 2014-07-17 06:50 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen
2014-07-17 06:50 - 2014-07-17 06:50 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien
2014-07-17 06:50 - 2014-07-17 06:50 - 00000000 _SHDL () C:\Users\Default\Druckumgebung
2014-07-17 06:50 - 2014-07-17 06:50 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik
2014-07-17 06:50 - 2014-07-17 06:50 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder
2014-07-17 06:50 - 2014-07-17 06:50 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-07-17 06:50 - 2014-07-17 06:50 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf
2014-07-17 06:50 - 2014-07-17 06:50 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten
2014-07-17 06:50 - 2014-07-17 06:50 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten
2014-07-17 06:50 - 2014-07-17 06:50 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik
2014-07-17 06:50 - 2014-07-17 06:50 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder
2014-07-17 06:50 - 2014-07-17 06:50 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-07-17 06:50 - 2014-07-17 06:50 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf
2014-07-17 06:50 - 2014-07-17 06:50 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten
2014-07-17 06:50 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files\Windows NT
2014-07-17 06:50 - 2013-08-22 15:36 - 00000000 __RHD () C:\Users\Default
2014-07-17 06:49 - 2014-07-17 06:49 - 00022960 _____ () C:\WINDOWS\system32\emptyregdb.dat
2014-07-17 06:49 - 2014-07-16 22:41 - 00032388 _____ () C:\WINDOWS\diagwrn.xml
2014-07-17 06:49 - 2014-07-16 22:41 - 00032388 _____ () C:\WINDOWS\diagerr.xml
2014-07-17 06:49 - 2014-07-16 21:59 - 00006580 _____ () C:\WINDOWS\comsetup.log
2014-07-17 06:49 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\Registration
2014-07-17 06:47 - 2014-02-12 15:50 - 01804472 _____ () C:\WINDOWS\SysWOW64\PerfStringBackup.INI
2014-07-17 06:46 - 2013-08-22 17:36 - 00000000 __RSD () C:\WINDOWS\Media
2014-07-17 06:46 - 2013-08-22 17:36 - 00000000 __RHD () C:\Users\Public\Libraries
2014-07-17 06:44 - 2014-07-17 06:44 - 00000020 ___SH () C:\Users\UpdatusUser\ntuser.ini
2014-07-16 23:29 - 2014-07-16 23:29 - 00308224 _____ (Microsoft Corporation) C:\WINDOWS\system32\wusa.exe
2014-07-16 23:29 - 2014-07-16 23:29 - 00305152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wusa.exe
2014-07-16 23:29 - 2013-08-22 17:36 - 00262144 _____ () C:\WINDOWS\system32\config\BCD-Template
2014-07-16 23:28 - 2014-07-16 23:28 - 03118080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Wpc.dll
2014-07-16 23:28 - 2014-07-16 23:28 - 03048904 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcMon.exe
2014-07-16 23:28 - 2014-07-16 23:28 - 02861056 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebSync.dll
2014-07-16 23:28 - 2014-07-16 23:28 - 02834944 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpccpl.dll
2014-07-16 23:28 - 2014-07-16 23:28 - 02344448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Wpc.dll
2014-07-16 23:28 - 2014-07-16 23:28 - 01336648 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll
2014-07-16 23:28 - 2014-07-16 23:28 - 01064448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll
2014-07-16 23:28 - 2014-07-16 23:28 - 00295424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ks.sys
2014-07-16 23:28 - 2014-07-16 23:28 - 00055328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wpcfltr.sys
2014-07-16 23:28 - 2013-08-22 17:36 - 00000000 ___RD () C:\WINDOWS\ToastData
2014-07-16 23:27 - 2014-07-16 23:27 - 23464448 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 17276416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 13527040 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 11742208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 05721088 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 04254720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 02768384 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 02266112 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 02179072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 02040832 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2014-07-16 23:27 - 2014-07-16 23:27 - 01964544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2014-07-16 23:27 - 2014-07-16 23:27 - 01791488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 01393664 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 01139200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 00846336 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 00752640 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 00704512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 00631808 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 00608768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2014-07-16 23:27 - 2014-07-16 23:27 - 00592896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 00526336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 00452608 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtmsft.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 00367616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtmsft.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 00292864 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 00250880 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 00239616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 00225280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 00195584 _____ (Microsoft Corporation) C:\WINDOWS\system32\msrating.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 00164864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrating.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 00139264 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieUnatt.exe
2014-07-16 23:27 - 2014-07-16 23:27 - 00112128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieUnatt.exe
2014-07-16 23:27 - 2014-07-16 23:27 - 00111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollector.exe
2014-07-16 23:27 - 2014-07-16 23:27 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesetup.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieetwproxystub.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwproxystub.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iernonce.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 00004096 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollectorres.dll
2014-07-16 23:27 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\setup
2014-07-16 23:26 - 2014-07-16 23:26 - 02900992 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 02641920 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 02479616 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmSvc.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 02373784 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2014-07-16 23:26 - 2014-07-16 23:26 - 02331000 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 02317824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 02270208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 02141912 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 02133504 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 02088160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2014-07-16 23:26 - 2014-07-16 23:26 - 02030080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WsmSvc.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 02013016 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2014-07-16 23:26 - 2014-07-16 23:26 - 01843712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Display.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 01816576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Display.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 01779800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 01764864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 01679128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 01656832 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 01557848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2014-07-16 23:26 - 2014-07-16 23:26 - 01542768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 01351168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 01306624 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 01291200 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel32.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 01112536 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 01095488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 01063424 _____ (Microsoft Corporation) C:\WINDOWS\system32\IKEEXT.DLL
2014-07-16 23:26 - 2014-07-16 23:26 - 01036288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kernel32.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 01015808 _____ (Microsoft Corporation) C:\WINDOWS\system32\aclui.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00950784 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgent.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00939520 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00924160 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00887296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aclui.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00836096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00834560 _____ (Microsoft Corporation) C:\WINDOWS\system32\netlogon.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00827392 _____ (Microsoft Corporation) C:\WINDOWS\system32\BFE.DLL
2014-07-16 23:26 - 2014-07-16 23:26 - 00800256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReAgent.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00755712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00717312 _____ (Microsoft Corporation) C:\WINDOWS\system32\nshwfp.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00688640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netlogon.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00669696 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasapi32.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00655360 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsapi.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00621568 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAgent.exe
2014-07-16 23:26 - 2014-07-16 23:26 - 00605184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasapi32.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00567296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nshwfp.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00542208 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.Printing.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00518552 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00512000 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidprov.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00494592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dnsapi.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00488280 _____ (Microsoft Corporation) C:\WINDOWS\system32\netcfgx.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00462336 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlangpui.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00412672 _____ (Microsoft Corporation) C:\WINDOWS\system32\FWPUCLNT.DLL
2014-07-16 23:26 - 2014-07-16 23:26 - 00406912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00402432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Graphics.Printing.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00390488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netcfgx.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00387210 _____ () C:\WINDOWS\system32\ApnDatabase.xml
2014-07-16 23:26 - 2014-07-16 23:26 - 00386560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlangpui.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00379224 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2014-07-16 23:26 - 2014-07-16 23:26 - 00376152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys
2014-07-16 23:26 - 2014-07-16 23:26 - 00360512 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfreadwrite.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00356864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlidprov.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00356848 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcomp.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00355832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfreadwrite.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00325632 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationApi.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00324096 _____ (Microsoft Corporation) C:\WINDOWS\system32\SessEnv.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00299008 _____ (Microsoft Corporation) C:\WINDOWS\system32\pdh.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00298496 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSDMon.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00291840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Sensors.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00283648 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb10.sys
2014-07-16 23:26 - 2014-07-16 23:26 - 00280576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SessEnv.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00274944 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmWmiPl.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00271872 _____ (Microsoft Corporation) C:\WINDOWS\system32\spp.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00264192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FWPUCLNT.DLL
2014-07-16 23:26 - 2014-07-16 23:26 - 00262656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LocationApi.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00254976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pdh.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00254464 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsrslvr.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00252928 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00247296 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsApi.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00226304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Sensors.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00222720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\spp.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00222720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dcomp.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00220160 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00212992 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdd.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00201216 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReInfo.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00197632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00192000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Scanners.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00186368 _____ (Microsoft Corporation) C:\WINDOWS\system32\dafWfdProvider.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00172544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReInfo.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00171008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SensorsApi.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00160768 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxAllUserStore.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00157016 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wof.sys
2014-07-16 23:26 - 2014-07-16 23:26 - 00151040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Scanners.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxdav.sys
2014-07-16 23:26 - 2014-07-16 23:26 - 00139776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxAllUserStore.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00136024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wfplwfs.sys
2014-07-16 23:26 - 2014-07-16 23:26 - 00134144 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dfsc.sys
2014-07-16 23:26 - 2014-07-16 23:26 - 00115200 _____ (Microsoft Corporation) C:\WINDOWS\system32\umpnpmgr.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00115200 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevPropMgr.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00113648 _____ (Microsoft Corporation) C:\WINDOWS\system32\userenv.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidclass.sys
2014-07-16 23:26 - 2014-07-16 23:26 - 00102912 _____ (Microsoft Corporation) C:\WINDOWS\system32\davclnt.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00094016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\userenv.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00086016 _____ (Microsoft Corporation) C:\WINDOWS\system32\RMapi.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\davclnt.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\sxproxy.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00079360 _____ (Microsoft Corporation) C:\WINDOWS\system32\w32tm.exe
2014-07-16 23:26 - 2014-07-16 23:26 - 00079360 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\IPMIDrv.sys
2014-07-16 23:26 - 2014-07-16 23:26 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\w32tm.exe
2014-07-16 23:26 - 2014-07-16 23:26 - 00069120 _____ (Microsoft Corporation) C:\WINDOWS\system32\l2gpstore.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\l2gpstore.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpipreg.sys
2014-07-16 23:26 - 2014-07-16 23:26 - 00040448 _____ (Microsoft Corporation) C:\WINDOWS\system32\SetNetworkLocation.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sxproxy.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidusb.sys
2014-07-16 23:26 - 2014-07-16 23:26 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredentialMigrationHandler.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredentialMigrationHandler.dll
2014-07-16 23:24 - 2014-07-16 23:24 - 16871936 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2014-07-16 23:24 - 2014-07-16 23:24 - 12711424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2014-07-16 23:24 - 2014-07-16 23:24 - 02518360 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2014-07-16 23:24 - 2014-07-16 23:24 - 01417216 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2014-07-16 23:24 - 2014-07-16 23:24 - 00735232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\adtschema.dll
2014-07-16 23:24 - 2014-07-16 23:24 - 00735232 _____ (Microsoft Corporation) C:\WINDOWS\system32\adtschema.dll
2014-07-16 23:24 - 2014-07-16 23:24 - 00565576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2014-07-16 23:24 - 2014-07-16 23:24 - 00467800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS
2014-07-16 23:24 - 2014-07-16 23:24 - 00440664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbport.sys
2014-07-16 23:24 - 2014-07-16 23:24 - 00436224 _____ (Microsoft Corporation) C:\WINDOWS\system32\certcli.dll
2014-07-16 23:24 - 2014-07-16 23:24 - 00423768 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll
2014-07-16 23:24 - 2014-07-16 23:24 - 00419672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbhub.sys
2014-07-16 23:24 - 2014-07-16 23:24 - 00323584 _____ (Microsoft Corporation) C:\WINDOWS\system32\DaOtpCredentialProvider.dll
2014-07-16 23:24 - 2014-07-16 23:24 - 00318976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certcli.dll
2014-07-16 23:24 - 2014-07-16 23:24 - 00284672 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUDFHost.exe
2014-07-16 23:24 - 2014-07-16 23:24 - 00270848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DaOtpCredentialProvider.dll
2014-07-16 23:24 - 2014-07-16 23:24 - 00227840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WUDFRd.sys
2014-07-16 23:24 - 2014-07-16 23:24 - 00216368 _____ (Microsoft Corporation) C:\WINDOWS\system32\rsaenh.dll
2014-07-16 23:24 - 2014-07-16 23:24 - 00209408 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUDFPlatform.dll
2014-07-16 23:24 - 2014-07-16 23:24 - 00189016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rsaenh.dll
2014-07-16 23:24 - 2014-07-16 23:24 - 00110592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WUDFPf.sys
2014-07-16 23:24 - 2014-07-16 23:24 - 00099840 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUDFSvc.dll
2014-07-16 23:24 - 2014-07-16 23:24 - 00089944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbehci.sys
2014-07-16 23:24 - 2014-07-16 23:24 - 00037376 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbuhci.sys
2014-07-16 23:24 - 2014-07-16 23:24 - 00027480 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbd.sys
2014-07-16 23:23 - 2014-07-16 23:23 - 13287936 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2014-07-16 23:23 - 2014-07-16 23:23 - 11792384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2014-07-16 23:23 - 2014-07-16 23:23 - 03463680 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2014-07-16 23:23 - 2014-07-16 23:23 - 01054208 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.appcore.dll
2014-07-16 23:23 - 2014-07-16 23:23 - 01018880 _____ (Microsoft Corporation) C:\WINDOWS\system32\termsrv.dll
2014-07-16 23:23 - 2014-07-16 23:23 - 00923136 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll
2014-07-16 23:23 - 2014-07-16 23:23 - 00828928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.appcore.dll
2014-07-16 23:23 - 2014-07-16 23:23 - 00827392 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2014-07-16 23:23 - 2014-07-16 23:23 - 00756224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll
2014-07-16 23:23 - 2014-07-16 23:23 - 00666624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2014-07-16 23:23 - 2014-07-16 23:23 - 00563200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\afd.sys
2014-07-16 23:23 - 2014-07-16 23:23 - 00555736 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.appcore.dll
2014-07-16 23:23 - 2014-07-16 23:23 - 00249344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2014-07-16 23:23 - 2014-07-16 23:23 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2014-07-16 23:23 - 2014-07-16 23:23 - 00093696 _____ (Microsoft Corporation) C:\WINDOWS\system32\wudriver.dll
2014-07-16 23:23 - 2014-07-16 23:23 - 00086688 _____ (Microsoft Corporation) C:\WINDOWS\system32\mrt_map.dll
2014-07-16 23:23 - 2014-07-16 23:23 - 00080896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wudriver.dll
2014-07-16 23:23 - 2014-07-16 23:23 - 00080032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mrt_map.dll
2014-07-16 23:23 - 2014-07-16 23:23 - 00054776 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2014-07-16 23:23 - 2014-07-16 23:23 - 00028320 _____ (Microsoft Corporation) C:\WINDOWS\system32\mrt100.dll
2014-07-16 23:23 - 2014-07-16 23:23 - 00026784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mrt100.dll
2014-07-16 23:23 - 2014-03-18 11:40 - 00000000 ____D () C:\Program Files\Windows Journal
2014-07-16 23:23 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\WinStore
2014-07-16 23:23 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\SecureBootUpdates
2014-07-16 23:22 - 2014-07-16 23:22 - 04190720 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2014-07-16 23:22 - 2014-07-16 23:22 - 03360256 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll
2014-07-16 23:22 - 2014-07-16 23:22 - 02151424 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3.dll
2014-07-16 23:22 - 2014-07-16 23:22 - 01975296 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWrite.dll
2014-07-16 23:22 - 2014-07-16 23:22 - 01509888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWrite.dll
2014-07-16 23:22 - 2014-07-16 23:22 - 01345536 _____ (Microsoft Corporation) C:\WINDOWS\system32\FntCache.dll
2014-07-16 23:22 - 2014-07-16 23:22 - 01312256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3.dll
2014-07-16 23:22 - 2014-07-16 23:22 - 00834048 _____ (Microsoft Corporation) C:\WINDOWS\system32\osk.exe
2014-07-16 23:22 - 2014-07-16 23:22 - 00779264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\osk.exe
2014-07-16 23:22 - 2014-07-16 23:22 - 00586240 _____ (Microsoft Corporation) C:\WINDOWS\system32\qedit.dll
2014-07-16 23:22 - 2014-07-16 23:22 - 00488960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qedit.dll
2014-07-16 23:22 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-07-16 23:22 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-07-16 23:21 - 2014-07-16 23:21 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2014-07-16 23:21 - 2014-07-16 23:21 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2014-07-16 23:21 - 2014-07-16 23:21 - 01705472 _____ (Microsoft Corporation) C:\WINDOWS\system32\wucltux.dll
2014-07-16 23:21 - 2014-07-16 23:21 - 00419928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.appcore.dll
2014-07-16 23:21 - 2014-07-16 23:21 - 00381440 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUSettingsProvider.dll
2014-07-16 23:21 - 2014-07-16 23:21 - 00201728 _____ (Microsoft Corporation) C:\WINDOWS\system32\ubpm.dll
2014-07-16 23:21 - 2014-07-16 23:21 - 00190976 _____ (Microsoft Corporation) C:\WINDOWS\system32\storewuauth.dll
2014-07-16 23:21 - 2014-07-16 23:21 - 00137728 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuwebv.dll
2014-07-16 23:21 - 2014-07-16 23:21 - 00123904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuwebv.dll
2014-07-16 23:21 - 2014-07-16 23:21 - 00079872 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSReset.exe
2014-07-16 23:21 - 2014-07-16 23:21 - 00056320 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups.dll
2014-07-16 23:21 - 2014-07-16 23:21 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapp.exe
2014-07-16 23:21 - 2014-07-16 23:21 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapp.exe
2014-07-16 23:21 - 2014-07-16 23:21 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wups.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 21268952 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 18755672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 08652800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 07425368 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2014-07-16 23:20 - 2014-07-16 23:20 - 07173120 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 06645248 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 05833216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Search.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 05774848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 05104640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 04269056 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncEngine.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 02688000 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 02144984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 02140888 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 02124840 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d9.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 02100736 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlowUI.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 01797896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d9.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 01584128 _____ (Microsoft Corporation) C:\WINDOWS\system32\workfolderssvc.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 01527296 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 01466856 _____ (Microsoft Corporation) C:\WINDOWS\system32\propsys.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 01436160 _____ (Microsoft Corporation) C:\WINDOWS\system32\VSSVC.exe
2014-07-16 23:20 - 2014-07-16 23:20 - 01403856 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 01379064 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpmde.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 01308160 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpsvc.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 01287168 _____ (Microsoft Corporation) C:\WINDOWS\system32\mispace.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 01230336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 01222656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Streaming.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 01209616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmde.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 01200288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\propsys.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 01200128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthport.sys
2014-07-16 23:20 - 2014-07-16 23:20 - 01126912 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFolder.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 01057280 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdvidcrl.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 01029120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mispace.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 01025024 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00982016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Streaming.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00955904 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00918528 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00888320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00881616 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00872448 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDrive.exe
2014-07-16 23:20 - 2014-07-16 23:20 - 00855552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdvidcrl.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00836608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchFolder.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00834048 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00805376 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00765408 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00761856 _____ (Microsoft Corporation) C:\WINDOWS\system32\WorkfoldersControl.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00721408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveTelemetry.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00718336 _____ (Microsoft Corporation) C:\WINDOWS\system32\swprv.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00707048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00677376 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys
2014-07-16 23:20 - 2014-07-16 23:20 - 00669856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00629760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmCoreR.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00609448 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00589656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fvevol.sys
2014-07-16 23:20 - 2014-07-16 23:20 - 00518544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00491744 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00491520 _____ (Microsoft Corporation) C:\WINDOWS\system32\GeofenceMonitorService.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00486912 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv
2014-07-16 23:20 - 2014-07-16 23:20 - 00467968 _____ (Microsoft Corporation) C:\WINDOWS\system32\srcore.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00467496 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00463256 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00462336 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsGdiConverter.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00449536 _____ (Microsoft Corporation) C:\WINDOWS\system32\defragsvc.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00443904 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansec.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00443904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\nwifi.sys
2014-07-16 23:20 - 2014-07-16 23:20 - 00428888 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS
2014-07-16 23:20 - 2014-07-16 23:20 - 00426496 _____ (Microsoft Corporation) C:\WINDOWS\system32\clusapi.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00407016 _____ (Microsoft Corporation) C:\WINDOWS\system32\services.exe
2014-07-16 23:20 - 2014-07-16 23:20 - 00406504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00402432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
2014-07-16 23:20 - 2014-07-16 23:20 - 00387896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00384856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spaceport.sys
2014-07-16 23:20 - 2014-07-16 23:20 - 00372568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storport.sys
2014-07-16 23:20 - 2014-07-16 23:20 - 00370176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv
2014-07-16 23:20 - 2014-07-16 23:20 - 00370176 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanmsm.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00364640 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00360792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fltMgr.sys
2014-07-16 23:20 - 2014-07-16 23:20 - 00357376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GeofenceMonitorService.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00337408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsGdiConverter.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00337240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Classpnp.sys
2014-07-16 23:20 - 2014-07-16 23:20 - 00335872 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDEServer.exe
2014-07-16 23:20 - 2014-07-16 23:20 - 00326024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00324888 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFCaptureEngine.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00323072 _____ (Microsoft Corporation) C:\WINDOWS\system32\srvsvc.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00313344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\clusapi.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00310616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\volsnap.sys
2014-07-16 23:20 - 2014-07-16 23:20 - 00307304 _____ (Microsoft Corporation) C:\WINDOWS\system32\wintrust.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00305768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00300544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanmsm.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00296960 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanapi.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00285144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFCaptureEngine.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00281600 _____ (Microsoft Corporation) C:\WINDOWS\system32\resutils.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00275800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msiscsi.sys
2014-07-16 23:20 - 2014-07-16 23:20 - 00271872 _____ (Microsoft Corporation) C:\WINDOWS\system32\rstrui.exe
2014-07-16 23:20 - 2014-07-16 23:20 - 00263424 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlows.exe
2014-07-16 23:20 - 2014-07-16 23:20 - 00257880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdFilter.sys
2014-07-16 23:20 - 2014-07-16 23:20 - 00250368 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpencom.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00246272 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srvnet.sys
2014-07-16 23:20 - 2014-07-16 23:20 - 00244880 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2014-07-16 23:20 - 2014-07-16 23:20 - 00233912 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00230808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wintrust.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanapi.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00219136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\resutils.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00209920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpencom.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00206848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys
2014-07-16 23:20 - 2014-07-16 23:20 - 00201920 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVideoDSP.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00201216 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00191488 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpchttp.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00186880 _____ (Microsoft Corporation) C:\WINDOWS\system32\WorkFoldersShell.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00180056 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2014-07-16 23:20 - 2014-07-16 23:20 - 00178184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVideoDSP.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00144384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpchttp.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00143872 _____ (Microsoft Corporation) C:\WINDOWS\system32\BootMenuUX.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00135168 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscsvc.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00130144 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpapi.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00125496 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmapi.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00123224 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdNisDrv.sys
2014-07-16 23:20 - 2014-07-16 23:20 - 00111528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gpapi.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00098584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmapi.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00077312 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hdaudbus.sys
2014-07-16 23:20 - 2014-07-16 23:20 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\system32\srclient.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsgqec.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\srclient.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00055296 _____ (Microsoft Corporation) C:\WINDOWS\system32\energyprov.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tsgqec.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00047616 _____ (Microsoft Corporation) C:\WINDOWS\system32\tlscsp.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00046592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tlscsp.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Shell.Search.UriHandler.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00035856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdBoot.sys
2014-07-16 23:20 - 2014-07-16 23:20 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Shell.Search.UriHandler.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00032600 _____ (Microsoft Corporation) C:\WINDOWS\system32\ploptin.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00028408 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfpmp.exe
2014-07-16 23:20 - 2014-07-16 23:20 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d8thk.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanhlp.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanhlp.dll
2014-07-16 23:20 - 2013-08-22 17:36 - 00000000 ___RD () C:\WINDOWS\ImmersiveControlPanel
2014-07-16 23:20 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-07-16 23:20 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-07-16 23:20 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files\Windows Defender
2014-07-16 23:20 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files (x86)\Windows Defender
2014-07-16 23:18 - 2014-07-16 23:18 - 00262144 _____ () C:\WINDOWS\system32\config\userdiff
2014-07-16 23:16 - 2014-07-16 23:16 - 00000000 ____D () C:\WINDOWS\SysWOW64\XPSViewer
2014-07-16 23:16 - 2014-07-16 23:16 - 00000000 ____D () C:\Program Files\Reference Assemblies
2014-07-16 23:16 - 2014-07-16 23:16 - 00000000 ____D () C:\Program Files\MSBuild
2014-07-16 23:16 - 2014-07-16 23:16 - 00000000 ____D () C:\Program Files (x86)\Reference Assemblies
2014-07-16 23:16 - 2014-07-16 23:16 - 00000000 ____D () C:\Program Files (x86)\MSBuild
2014-07-16 23:16 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\MUI
2014-07-16 23:16 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\MUI
2014-07-16 22:47 - 2013-08-22 16:44 - 00360464 _____ () C:\WINDOWS\system32\FNTCACHE.DAT
2014-07-16 22:46 - 2014-07-01 09:39 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDFCreator
2014-07-16 22:46 - 2014-06-30 20:42 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Free Audio Pack
2014-07-16 22:46 - 2014-06-21 19:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2014-07-16 22:46 - 2014-06-21 14:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\dm-Fotowelt
2014-07-16 22:46 - 2014-06-21 13:36 - 00000000 ___SD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.1.0
2014-07-16 22:46 - 2014-02-12 16:17 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneKey Recovery
2014-07-16 22:46 - 2014-02-12 16:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel AppUp(SM) center
2014-07-16 22:46 - 2014-02-12 16:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lenovo
2014-07-16 22:46 - 2014-02-12 15:52 - 00000000 ____D () C:\WINDOWS\SysWOW64\Atheros_L1e
2014-07-16 22:46 - 2014-02-12 15:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dolby
2014-07-16 22:46 - 2014-02-12 15:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2014-07-16 22:46 - 2014-02-12 15:44 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel
2014-07-16 22:46 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\system32\Sysprep
2014-07-16 22:44 - 2014-07-16 22:44 - 00001547 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2014-07-16 22:44 - 2014-07-16 22:44 - 00000000 ____D () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Lenovo
2014-07-16 22:44 - 2014-07-16 22:44 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Lenovo
2014-07-16 22:44 - 2014-06-26 13:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MAGIX
2014-07-16 22:44 - 2014-03-18 11:25 - 00000000 ____D () C:\WINDOWS\SysWOW64\WCN
2014-07-16 22:44 - 2014-03-18 11:25 - 00000000 ____D () C:\WINDOWS\SysWOW64\sysprep
2014-07-16 22:44 - 2014-03-18 11:25 - 00000000 ____D () C:\WINDOWS\system32\WCN
2014-07-16 22:44 - 2013-08-22 17:43 - 00000000 ____D () C:\WINDOWS\DigitalLocker
2014-07-16 22:44 - 2013-08-22 17:37 - 00004893 _____ () C:\WINDOWS\DtcInstall.log
2014-07-16 22:44 - 2013-08-22 17:36 - 00000000 __SHD () C:\Program Files (x86)\Windows Sidebar
2014-07-16 22:44 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\migwiz
2014-07-16 22:44 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\IME
2014-07-16 22:44 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\WinBioPlugIns
2014-07-16 22:44 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\spool
2014-07-16 22:44 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\IME
2014-07-16 22:44 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\IME
2014-07-16 22:44 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\Help
2014-07-16 22:44 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\SMI
2014-07-16 22:44 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\system32\oobe
2014-07-16 22:44 - 2013-03-25 23:03 - 00000000 ____D () C:\ProgramData\PRICache
2014-07-16 22:44 - 2012-07-26 07:37 - 00000000 ____D () C:\Users\Default.migrated
2014-07-16 22:43 - 2014-07-16 22:43 - 00000000 ____D () C:\WINDOWS\system32\config\bbimigrate
2014-07-16 22:43 - 2014-07-16 22:33 - 00000000 ____D () C:\Program Files\Intel
2014-07-16 22:43 - 2014-02-12 15:47 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2014-07-16 22:43 - 2013-08-22 17:36 - 00000000 __SHD () C:\Program Files\Windows Sidebar
2014-07-16 22:43 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\Recovery
2014-07-16 22:43 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared
2014-07-16 22:42 - 2014-07-16 22:41 - 00000000 ___RD () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-07-16 22:42 - 2014-07-16 22:41 - 00000000 ___RD () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-07-16 22:42 - 2014-07-16 22:41 - 00000000 ___RD () C:\Users\Katharina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-07-16 22:42 - 2014-07-16 22:41 - 00000000 ___RD () C:\Users\Katharina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-07-16 22:42 - 2014-06-21 19:26 - 00000000 ____D () C:\Users\Katharina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Lenovo
2014-07-16 22:42 - 2014-02-12 16:10 - 00000000 ____D () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Lenovo
2014-07-16 22:41 - 2014-07-16 22:41 - 00000000 _SHDL () C:\Users\UpdatusUser\Vorlagen
2014-07-16 22:41 - 2014-07-16 22:41 - 00000000 _SHDL () C:\Users\UpdatusUser\Startmenü
2014-07-16 22:41 - 2014-07-16 22:41 - 00000000 _SHDL () C:\Users\UpdatusUser\Netzwerkumgebung
2014-07-16 22:41 - 2014-07-16 22:41 - 00000000 _SHDL () C:\Users\UpdatusUser\Lokale Einstellungen
2014-07-16 22:41 - 2014-07-16 22:41 - 00000000 _SHDL () C:\Users\UpdatusUser\Eigene Dateien
2014-07-16 22:41 - 2014-07-16 22:41 - 00000000 _SHDL () C:\Users\UpdatusUser\Druckumgebung
2014-07-16 22:41 - 2014-07-16 22:41 - 00000000 _SHDL () C:\Users\UpdatusUser\Documents\Eigene Musik
2014-07-16 22:41 - 2014-07-16 22:41 - 00000000 _SHDL () C:\Users\UpdatusUser\Documents\Eigene Bilder
2014-07-16 22:41 - 2014-07-16 22:41 - 00000000 _SHDL () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-07-16 22:41 - 2014-07-16 22:41 - 00000000 _SHDL () C:\Users\UpdatusUser\AppData\Local\Verlauf
2014-07-16 22:41 - 2014-07-16 22:41 - 00000000 _SHDL () C:\Users\UpdatusUser\AppData\Local\Anwendungsdaten
2014-07-16 22:41 - 2014-07-16 22:41 - 00000000 _SHDL () C:\Users\UpdatusUser\Anwendungsdaten
2014-07-16 22:41 - 2014-07-16 22:41 - 00000000 _SHDL () C:\Users\Katharina\Vorlagen
2014-07-16 22:41 - 2014-07-16 22:41 - 00000000 _SHDL () C:\Users\Katharina\Startmenü
2014-07-16 22:41 - 2014-07-16 22:41 - 00000000 _SHDL () C:\Users\Katharina\Netzwerkumgebung
2014-07-16 22:41 - 2014-07-16 22:41 - 00000000 _SHDL () C:\Users\Katharina\Lokale Einstellungen
2014-07-16 22:41 - 2014-07-16 22:41 - 00000000 _SHDL () C:\Users\Katharina\Eigene Dateien
2014-07-16 22:41 - 2014-07-16 22:41 - 00000000 _SHDL () C:\Users\Katharina\Druckumgebung
2014-07-16 22:41 - 2014-07-16 22:41 - 00000000 _SHDL () C:\Users\Katharina\Documents\Eigene Musik
2014-07-16 22:41 - 2014-07-16 22:41 - 00000000 _SHDL () C:\Users\Katharina\Documents\Eigene Bilder
2014-07-16 22:41 - 2014-07-16 22:41 - 00000000 _SHDL () C:\Users\Katharina\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-07-16 22:41 - 2014-07-16 22:41 - 00000000 _SHDL () C:\Users\Katharina\AppData\Local\Verlauf
2014-07-16 22:41 - 2014-07-16 22:41 - 00000000 _SHDL () C:\Users\Katharina\AppData\Local\Anwendungsdaten
2014-07-16 22:41 - 2014-07-16 22:41 - 00000000 _SHDL () C:\Users\Katharina\Anwendungsdaten
2014-07-16 22:37 - 2014-07-16 23:15 - 00000000 ____D () C:\Recovery
2014-07-16 22:33 - 2014-07-16 22:33 - 00000264 _____ () C:\WINDOWS\Tasks\Synaptics TouchPad Enhancements.job
2014-07-16 22:33 - 2014-07-16 22:33 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2014-07-16 22:33 - 2014-07-16 22:33 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_Kernel_SynTP_01011.Wdf
2014-07-16 22:33 - 2014-07-16 22:33 - 00000000 ____D () C:\Program Files (x86)\USB Camera
2014-07-16 22:33 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\System
2014-07-16 22:32 - 2014-07-16 22:32 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_Kernel_Smb_driver_Intel_01011.Wdf
2014-07-16 22:32 - 2014-07-16 22:32 - 00000000 ____D () C:\Program Files\Synaptics
2014-07-16 22:04 - 2014-02-12 15:28 - 01061258 _____ () C:\WINDOWS\WindowsUpdate (1).log
2014-07-16 21:44 - 2012-07-26 10:12 - 00000000 ____D () C:\WINDOWS\AUInstallAgent
2014-07-16 18:12 - 2014-07-16 13:42 - 00014889 _____ () C:\Users\Katharina\Desktop\Vorratsliste.ods
2014-07-10 09:53 - 2014-06-24 16:39 - 00000000 ____D () C:\Users\UpdatusUser\AppData\Local\CrashDumps
2014-07-09 21:22 - 2014-06-22 11:38 - 00000000 ____D () C:\WINDOWS\system32\MRT
2014-07-09 21:21 - 2014-06-22 11:38 - 96441528 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2014-07-08 20:17 - 2014-07-08 19:26 - 00032202 _____ () C:\Users\Katharina\Desktop\Lipödem.odt
2014-07-05 21:45 - 2014-07-05 21:44 - 00001102 _____ () C:\DelFix.txt
2014-07-05 21:44 - 2014-07-05 21:44 - 00000000 ____D () C:\WINDOWS\ERUNT
2014-07-02 18:58 - 2014-07-02 18:58 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-07-02 18:58 - 2014-07-02 18:57 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Katharina\Downloads\mbam-setup-2.0.2.1012.exe
2014-07-02 11:37 - 2014-06-21 19:13 - 00000000 ____D () C:\Users\Katharina\AppData\Roaming\vlc
2014-07-01 18:42 - 2014-07-01 18:30 - 00017536 _____ () C:\Users\Katharina\Desktop\Menüpläne.odt
2014-07-01 09:39 - 2014-07-01 09:39 - 00001046 _____ () C:\Users\Public\Desktop\PDFCreator.lnk
2014-07-01 09:39 - 2014-07-01 09:39 - 00000000 ____D () C:\ProgramData\PDF Architect 2
2014-07-01 09:39 - 2014-07-01 09:38 - 00000000 ____D () C:\Program Files (x86)\PDFCreator
2014-07-01 09:04 - 2014-07-01 09:04 - 00000000 ____D () C:\ProgramData\boost_interprocess
2014-07-01 00:45 - 2014-07-20 16:21 - 00688128 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepdu.dll
2014-06-30 20:56 - 2014-06-30 20:56 - 00000000 ____D () C:\Users\Katharina\dwhelper
2014-06-30 20:42 - 2014-06-30 20:42 - 00001329 _____ () C:\Users\Katharina\Desktop\Easy Audio Cutter.lnk
2014-06-30 20:42 - 2014-06-30 20:42 - 00001313 _____ () C:\Users\Katharina\Desktop\Free CD Ripper.lnk
2014-06-30 20:42 - 2014-06-30 20:42 - 00001311 _____ () C:\Users\Katharina\Desktop\Free Mp3 Wma Converter.lnk
2014-06-30 20:42 - 2014-06-30 20:42 - 00000000 ____D () C:\Users\Katharina\AppData\Roaming\FreeAudioPack
2014-06-30 20:42 - 2014-06-30 20:42 - 00000000 ____D () C:\Program Files (x86)\Free mp3 Wma Converter
2014-06-30 20:42 - 2014-06-21 12:54 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-06-30 20:32 - 2014-06-30 20:32 - 00001163 _____ () C:\Users\Katharina\Desktop\Amazon Music.lnk
2014-06-30 20:31 - 2014-06-30 20:31 - 38534920 _____ (Amazon) C:\Users\Katharina\Downloads\AmazonMusicInstaller.exe
2014-06-30 20:27 - 2014-06-30 20:26 - 09659608 _____ () C:\Users\Katharina\Downloads\AmazonMusicImporterInstaller-2.1.0._V337128703_.exe
2014-06-30 20:27 - 2014-06-29 09:34 - 00000000 ____D () C:\Users\Katharina\AppData\Local\Adobe
2014-06-30 20:27 - 2014-06-21 19:26 - 00000000 ____D () C:\Users\Katharina\AppData\Roaming\Adobe
2014-06-30 17:25 - 2014-06-30 17:25 - 00015074 _____ () C:\Users\Katharina\Documents\Saisonkalender_Obst_Gemüse.odt
2014-06-30 16:28 - 2014-06-30 16:28 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf
2014-06-28 09:48 - 2014-07-20 16:21 - 00527360 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2014-06-28 09:07 - 2014-07-20 16:21 - 00385536 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2014-06-27 20:26 - 2014-06-27 20:26 - 00000000 ____D () C:\Users\Katharina\AppData\Local\Macromedia
2014-06-26 22:55 - 2013-08-22 17:38 - 00703968 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2014-06-26 22:55 - 2013-08-22 17:38 - 00105440 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2014-06-26 21:02 - 2014-06-26 21:02 - 00955246 _____ () C:\Users\Katharina\Desktop\Hochzeitstag 26082014.MVM
2014-06-26 20:59 - 2014-06-26 20:59 - 00000000 ____D () C:\Users\Katharina\AppData\Local\CrashDumps
2014-06-26 20:50 - 2014-06-26 13:32 - 00023040 ___SH () C:\Users\Katharina\Downloads\Thumbs.db
2014-06-26 20:43 - 2014-06-26 20:43 - 00000000 ____D () C:\Users\Katharina\AppData\Roaming\WebApp
2014-06-26 20:40 - 2014-06-26 20:40 - 00000000 ____D () C:\Users\Katharina\Documents\Lenovo
2014-06-26 20:40 - 2014-06-26 20:40 - 00000000 ____D () C:\Users\Katharina\Documents\CyberLink
2014-06-26 20:40 - 2014-06-26 20:40 - 00000000 ____D () C:\Users\Katharina\AppData\Roaming\Lenovo
2014-06-26 20:40 - 2014-06-26 20:40 - 00000000 ____D () C:\Users\Katharina\AppData\Roaming\CyberLink
2014-06-26 20:40 - 2014-02-12 16:15 - 00000000 ____D () C:\ProgramData\Lenovo
2014-06-26 20:40 - 2014-02-12 16:08 - 00000000 ____D () C:\ProgramData\CyberLink
2014-06-26 13:31 - 2014-06-26 13:30 - 00000000 ____D () C:\ProgramData\MAGIX
2014-06-26 13:31 - 2014-06-26 13:27 - 00000000 ____D () C:\Users\Katharina\AppData\Roaming\MAGIX
2014-06-26 13:30 - 2014-06-26 13:30 - 00001051 _____ () C:\Users\Public\Desktop\MAGIX Slideshow Maker 2.lnk
2014-06-26 13:30 - 2014-06-26 13:30 - 00000000 ____D () C:\Users\Katharina\Documents\MAGIX
2014-06-26 13:30 - 2014-06-26 13:30 - 00000000 ____D () C:\Program Files (x86)\MAGIX
2014-06-26 13:10 - 2014-06-26 13:09 - 00000000 ____D () C:\Users\Katharina\AppData\Local\AquaSoft
2014-06-26 13:09 - 2014-06-26 13:09 - 00000000 ____D () C:\Users\Katharina\AppData\Roaming\AquaSoft
2014-06-24 16:46 - 2014-06-21 13:05 - 00000000 ____D () C:\ProgramData\Adobe
2014-06-24 16:40 - 2014-06-24 16:40 - 00000000 ____D () C:\sources

Some content of TEMP:
====================
C:\Users\Katharina\AppData\Local\Temp\avgnt.exe
C:\Users\Katharina\AppData\Local\Temp\nsdA8E1.exe
C:\Users\Katharina\AppData\Local\Temp\nsh735C.exe
C:\Users\Katharina\AppData\Local\Temp\nsn501F.exe
C:\Users\Katharina\AppData\Local\Temp\nso537B.exe
C:\Users\Katharina\AppData\Local\Temp\nsv705D.exe
C:\Users\Katharina\AppData\Local\Temp\ReimagePackage.exe
C:\Users\Katharina\AppData\Local\Temp\ReimageRepair.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-07-16 22:31

==================== End Of Log ============================
         

[/CODE]

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 24-07-2014 01
Ran by Katharina at 2014-07-24 20:57:26
Running from C:\Users\Katharina\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe Flash Player 14 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 14.0.0.125 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.07) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.07 - Adobe Systems Incorporated)
Alcor Micro USB Card Reader (HKLM-x32\...\AmUStor) (Version: 3.1.1245.72250 - Alcor Micro Corp.)
Alcor Micro USB Card Reader (x32 Version: 3.1.1245.72250 - Alcor Micro Corp.) Hidden
Amazon Music (HKCU\...\Amazon Amazon Music) (Version: 3.0.5.567 - Amazon Services LLC)
Avira (HKLM-x32\...\{142be4a8-895b-4ed9-b1ff-11c76357e3df}) (Version: 1.1.17.31000 - Avira Operations GmbH & Co. KG)
Avira (x32 Version: 1.1.17.31000 - Avira Operations GmbH & Co. KG) Hidden
Benutzerhandbuch (x32 Version: 1.0.0.15 - Lenovo) Hidden
dm-Fotowelt (HKLM-x32\...\dm-Fotowelt) (Version: 5.1.5 - CEWE Stiftung u Co. KGaA)
Dolby Home Theater v4 (HKLM-x32\...\{B26438B4-BF51-49C3-9567-7F14A5E40CB9}) (Version: 7.2.8000.17 - Dolby Laboratories Inc)
Energy Manager (HKLM-x32\...\InstallShield_{AC768037-7079-4658-AC24-2897650E0ABE}) (Version: 1.0.0.28 - Lenovo)
Energy Manager (x32 Version: 1.0.0.28 - Lenovo) Hidden
Free Mp3 Wma Converter V 2.2 (HKLM-x32\...\Free Mp3 Wma Converter_is1) (Version: 2.2.0.0 - Koyote Soft)
IDT Audio (HKLM-x32\...\{E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}) (Version: 1.0.6486.0 - IDT)
Intel AppUp(SM) center (HKLM-x32\...\Intel AppUp(SM) center 33057) (Version: 3.6.1.33057.10 - Intel)
Intel Collaborative Processor Performance Control (HKLM-x32\...\0E7DAF70-FB54-4B91-B192-7E771C25AEEB) (Version: 1.0.0.1010 - Intel Corporation)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.0.10.1372 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3621 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.6.0.1033 - Intel Corporation)
Intel(R) Rapid Storage Technology (Version: 12.6.0.1033 - Intel Corporation) Hidden
Intel(R) SDK for OpenCL - CPU Only Runtime Package (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: 3.0.0.66956 - Intel Corporation)
Intel® Trusted Connect Service Client (Version: 1.27.798.1 - Intel Corporation) Hidden
Lenovo EasyCamera (HKLM-x32\...\{ADE16A9D-FBDC-4ecc-B6BD-9C31E51D0332}) (Version: 3.13.531.1 - Vimicro)
Lenovo OneKey Recovery (HKLM-x32\...\InstallShield_{46F4D124-20E5-4D12-BE52-EC177A7A4B42}) (Version: 8.0.0.1219 - CyberLink Corp.)
Lenovo OneKey Recovery (Version: 8.0.0.1219 - CyberLink Corp.) Hidden
Lenovo PowerDVD10 (HKLM-x32\...\InstallShield_{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}) (Version: 10.0.5108.52 - CyberLink Corp.)
Lenovo PowerDVD10 (x32 Version: 10.0.5108.52 - CyberLink Corp.) Hidden
Lenovo VeriFace (HKLM\...\Lenovo VeriFace) (Version: 5.0.13.5261 - Lenovo)
Lenovo YouCam (HKLM-x32\...\InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}) (Version: 4.1.3423 - CyberLink Corp.)
Lenovo YouCam (x32 Version: 4.1.3423 - CyberLink Corp.) Hidden
MAGIX Slideshow Maker 2 (HKLM-x32\...\MAGIX_MSI_Slideshow_Maker_2) (Version: 2.0.0.8 - MAGIX AG)
MAGIX Slideshow Maker 2 (x32 Version: 2.0.0.8 - MAGIX AG) Hidden
Microsoft Office (HKLM-x32\...\{90150000-0138-0409-0000-0000000FF1CE}) (Version: 15.0.4454.1510 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Mozilla Firefox 30.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 30.0 (x86 de)) (Version: 30.0 - Mozilla)
NVIDIA GeForce Experience 1.5 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 1.5 - NVIDIA Corporation)
NVIDIA Grafiktreiber 327.62 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 327.62 - NVIDIA Corporation)
NVIDIA Install Application (Version: 2.1002.141.953 - NVIDIA Corporation) Hidden
NVIDIA Optimus 4.11.9 (Version: 4.11.9 - NVIDIA Corporation) Hidden
NVIDIA PhysX (x32 Version: 9.13.0604 - NVIDIA Corporation) Hidden
NVIDIA PhysX-Systemsoftware 9.13.0604 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.0604 - NVIDIA Corporation)
NVIDIA Systemsteuerung 327.62 (Version: 327.62 - NVIDIA Corporation) Hidden
NVIDIA Update 4.11.9 (Version: 4.11.9 - NVIDIA Corporation) Hidden
NVIDIA Update Components (Version: 4.11.9 - NVIDIA Corporation) Hidden
Onekey Theater (HKLM-x32\...\{91CC5BAE-A098-40D3-A43B-C0DC7CE263FE}) (Version: 3.0.1.2 - Lenovo)
OpenOffice 4.1.0 (HKLM-x32\...\{E19483E2-6C18-494D-A307-D4498BCFD2C7}) (Version: 4.10.9764 - Apache Software Foundation)
PDFCreator (HKLM-x32\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 1.7.3 - pdfforge)
Power2Go (HKLM-x32\...\{40BF1E83-20EB-11D8-97C5-0009C5020658}) (Version: 5.6.0.9109 - CyberLink Corp.)
Qualcomm Atheros Bluetooth Suite (64) (HKLM\...\{A84A4FB1-D703-48DB-89E0-68B6499D2801}) (Version: 8.0.0.222 - Qualcomm Atheros Communications)
Qualcomm Atheros Client Installation Program (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 10.0 - Qualcomm Atheros)
Qualcomm Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (HKLM-x32\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 2.1.0.16 - Qualcomm Atheros Communications Inc.)
Shared C Run-time for x64 (HKLM\...\{EF79C448-6946-4D71-8134-03407888C054}) (Version: 10.0.0 - McAfee)
SugarSync Manager (HKLM-x32\...\SugarSync) (Version: 1.9.61.90905 - SugarSync, Inc.)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 17.0.10.7 - Synaptics Incorporated)
UserGuide (HKLM-x32\...\InstallShield_{F07C2CF8-4C53-4EC3-8162-A6221E36EB88}) (Version: 1.0.0.15 - Lenovo)
VLC media player 2.1.4 (HKLM\...\VLC media player) (Version: 2.1.4 - VideoLAN)
Windows-Treiberpaket - Lenovo (ACPIVPC) System  (02/17/2013 9.52.0.776) (HKLM\...\35DD26BE48DAF4A9F35F969F3CB1E3E1435E661E) (Version: 02/17/2013 9.52.0.776 - Lenovo)
Windows-Treiberpaket - Lenovo (WUDFRd) LenovoVhid  (06/19/2012 10.13.29.733) (HKLM\...\8A223E56FB1ED4F697B54E5BF96F1EB63B512684) (Version: 06/19/2012 10.13.29.733 - Lenovo)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

CustomCLSID: HKU\S-1-5-21-3349096550-3144467483-3537340833-1002_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 -> C:\WINDOWS\system32\igfxEM.exe (Intel Corporation)

==================== Restore Points  =========================

20-07-2014 11:00:52 Windows Update

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2013-08-22 15:25 - 2013-08-22 15:25 - 00000824 ____A C:\WINDOWS\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {035792A1-D4EF-4A78-BF9A-AA9628C281A3} - System32\Tasks\Microsoft\Windows\Setup\SetupCleanupTask
Task: {05293577-D647-4185-B859-C94839A0B2E3} - System32\Tasks\Microsoft\Windows\SettingSync\NetworkStateChangeTask
Task: {0B545118-B563-42FC-8D07-B78F602FCF34} - System32\Tasks\Microsoft\Windows\WS\WSRefreshBannedAppsListTask => Rundll32.exe WSClient.dll,RefreshBannedAppsList
Task: {1DE0CA86-2FC0-42EE-B3E5-675AE49C6571} - System32\Tasks\Microsoft\Windows\DiskFootprint\Diagnostics
Task: {2085BF56-520D-4951-B7C0-DF34AF90CC6A} - System32\Tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask => Rundll32.exe sysmain.dll,PfSvWsSwapAssessmentTask
Task: {2559CBD2-D54B-411A-84C9-E2A689E2115A} - System32\Tasks\Microsoft\Windows\DiskCleanup\SilentCleanup => C:\Windows\system32\cleanmgr.exe [2014-03-18] (Microsoft Corporation)
Task: {2C9C0C6C-2A74-46F2-858A-4389D253EAD0} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCachePrepopulate
Task: {352E6CA0-7314-4DF4-89C4-682368D80D57} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join => C:\Windows\System32\AutoWorkplace.exe [2013-08-22] (Microsoft Corporation)
Task: {3B6D8A73-F20B-4C93-B8FB-56A154F172D2} - System32\Tasks\Microsoft\Windows\Time Zone\SynchronizeTimeZone => C:\Windows\system32\tzsync.exe [2013-08-22] (Microsoft Corporation)
Task: {49754026-21E1-41FC-94FD-727AFE414FE7} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCacheRebalance
Task: {6AA91E8C-DDBD-4979-8464-4062F7681A19} - System32\Tasks\Microsoft\Windows\Plug and Play\Plug and Play Cleanup
Task: {6DFCB649-0769-4F83-BB10-F60F235F6D3D} - System32\Tasks\Microsoft\Windows\SkyDrive\Idle Sync Maintenance Task
Task: {73B1B253-CE67-4501-AE1A-377DD1D68B65} - System32\Tasks\Microsoft\Windows\Application Experience\StartupAppTask => Rundll32.exe Startupscan.dll,SusRunTask
Task: {77F1D869-6E65-4079-A2A0-E2023408EF97} - System32\Tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState => Rundll32.exe Windows.Storage.ApplicationData.dll,CleanupTemporaryState
Task: {7BB1EC61-3140-48A7-9245-3DD56ECC42BA} - System32\Tasks\Microsoft\Windows\WOF\WIM-Hash-Management
Task: {7C6E816E-BA3A-4A20-A555-55C832FACDF8} - System32\Tasks\Dolby Selector => C:\Program Files (x86)\Dolby Home Theater v4\pcee4.exe [2012-08-31] (Dolby Laboratories Inc.)
Task: {872D0E53-FD2E-41E3-B431-698AF82882CE} - System32\Tasks\Microsoft\Windows\SkyDrive\Routine Maintenance Task
Task: {8CC813C9-712A-41EF-9512-B233444FC669} - System32\Tasks\Microsoft\Windows\AppxDeploymentClient\Pre-staged app cleanup => Rundll32.exe %windir%\system32\AppxDeploymentClient.dll,AppxPreStageCleanupRunTask
Task: {935D4440-A221-462A-B1E8-513D808AF51F} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2014-07-09] (Microsoft Corporation)
Task: {9FF4C139-5234-410C-B7FA-23EE2FD2AB53} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Maintenance Work
Task: {A955DD22-62B5-40E3-A118-059BA926BC60} - System32\Tasks\Microsoft\Windows\WindowsUpdate\Scheduled Start With Network => Sc.exe start wuauserv
Task: {C8959E4F-A5D3-4AEF-84AB-A31B10D64CF6} - System32\Tasks\OFFICE2013ACT => C:\ProgramData\Microsoft\Windows\OFFICEICON.vbs [2012-03-08] ()
Task: {CFD7C21A-808B-487B-A6EC-8A10E44E8360} - System32\Tasks\Microsoft\Windows\SettingSync\BackupTask
Task: {D4F1838F-B2D1-4B45-AEF2-FB800DF0E0ED} - System32\Tasks\Microsoft\Windows\WOF\WIM-Hash-Validation
Task: {D88FEC9E-A82A-46F9-87E2-B6B97B301C1A} - System32\Tasks\Microsoft\Windows\WS\License Validation => Rundll32.exe WSClient.dll,WSpTLR licensing
Task: {DA46820F-FF8A-4B5E-A6B2-B12185DCFFFB} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Logon Synchronization
Task: {E6D378FA-E068-4BCB-80DE-56D43A249507} - System32\Tasks\Microsoft\Windows\RecoveryEnvironment\VerifyWinRE
Task: {F6EBF882-B4DD-4FEE-B689-89E63F003287} - System32\Tasks\Microsoft\Windows\Shell\FamilySafetyUpload
Task: C:\WINDOWS\Tasks\Synaptics TouchPad Enhancements.job => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

==================== Loaded Modules (whitelisted) =============

2013-12-26 19:42 - 2013-12-26 19:42 - 00013088 _____ () C:\Program Files\NVIDIA Corporation\CoProcManager\detoured.dll
2014-02-12 16:15 - 2014-02-12 16:15 - 00068368 _____ () C:\Program Files (x86)\Lenovo\Lenovo VeriFace\VfConnectorService.exe
2014-02-12 16:15 - 2014-02-12 16:15 - 00669288 _____ () C:\Program Files (x86)\Lenovo\Lenovo VeriFace\VfDataStorageInterface.dll
2013-02-28 19:05 - 2013-02-28 19:05 - 00011264 _____ () C:\Program Files (x86)\Bluetooth Suite\Modules\ActivateDesktopDebugger\ActivateDesktopDebugger.dll
2013-02-28 19:02 - 2013-02-28 19:02 - 00086016 _____ () C:\Program Files (x86)\Bluetooth Suite\Modules\Map\MAP.dll
2013-02-28 19:06 - 2013-02-28 19:06 - 00012928 _____ () C:\Program Files (x86)\Bluetooth Suite\ActivateDesktop.exe
2014-06-30 20:32 - 2014-06-24 23:24 - 03162944 _____ () C:\Users\Katharina\AppData\Local\Amazon Music\Amazon Music Helper.exe
2014-07-07 13:53 - 2014-07-07 13:53 - 00137296 _____ () C:\Program Files (x86)\Avira\My Avira\Avira.OE.NativeCore.dll
2014-02-12 15:50 - 2013-05-17 01:06 - 01199576 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll
2014-06-21 12:54 - 2014-06-06 06:38 - 03852912 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

AlternateDataStreams: C:\Users\Katharina\OneDrive:ms-properties

==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (whitelisted) =============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== MSCONFIG/TASK MANAGER disabled items =========

(Currently there is no automatic fix for this section.)


==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (07/24/2014 04:58:47 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: daemonu.exe, Version: 4.11.9.1, Zeitstempel: 0x5194eb80
Name des fehlerhaften Moduls: daemonu.exe, Version: 4.11.9.1, Zeitstempel: 0x5194eb80
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00025fc5
ID des fehlerhaften Prozesses: 0x460
Startzeit der fehlerhaften Anwendung: 0xdaemonu.exe0
Pfad der fehlerhaften Anwendung: daemonu.exe1
Pfad des fehlerhaften Moduls: daemonu.exe2
Berichtskennung: daemonu.exe3
Vollständiger Name des fehlerhaften Pakets: daemonu.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: daemonu.exe5

Error: (07/22/2014 05:34:03 PM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )
Description: 80070005

Error: (07/21/2014 02:43:47 PM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )
Description: 80070005

Error: (07/20/2014 01:45:19 PM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )
Description: 80070005

Error: (07/19/2014 04:03:02 PM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )
Description: 80070005

Error: (07/17/2014 11:12:14 AM) (Source: Desktop Window Manager) (EventID: 9020) (User: )
Description: Der Desktopfenster-Manager hat einen schwerwiegenden Fehler (0x8898008d) festgestellt.

Error: (07/17/2014 11:08:38 AM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )
Description: 80070005

Error: (07/17/2014 06:49:14 AM) (Source: Microsoft-Windows-WMI) (EventID: 24) (User: NT-AUTORITÄT)
Description: Vom Ereignisanbieter "AVWMIEVTProv" wurde versucht, die Abfrage "select * from Event_Notification" zu registrieren, deren Zielklasse "Event_Notification" im Namespace "//./ROOT/CIMV2/Applications/Avira_AntiVir" nicht vorhanden ist. Die Abfrage wird ignoriert.

Error: (07/17/2014 06:49:14 AM) (Source: Microsoft-Windows-WMI) (EventID: 24) (User: NT-AUTORITÄT)
Description: Vom Ereignisanbieter "" wurde versucht, die Abfrage "select * from Event_Notification" zu registrieren, deren Zielklasse "Event_Notification" im Namespace "//./ROOT/CIMV2/Applications/Avira_AntiVir" nicht vorhanden ist. Die Abfrage wird ignoriert.

Error: (07/17/2014 06:47:07 AM) (Source: Perflib) (EventID: 1023) (User: )
Description: rdyboost4


System errors:
=============
Error: (07/24/2014 04:58:47 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "NVIDIA Update Service Daemon" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (07/21/2014 08:14:33 AM) (Source: disk) (EventID: 11) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR2 gefunden.

Error: (07/17/2014 11:18:46 AM) (Source: BTHUSB) (EventID: 17) (User: )
Description: Der lokale Bluetooth-Adapter ist aus einem unbekannten Grund fehlgeschlagen und wird nicht verwendet. Der Treiber wurde entladen.

Error: (07/17/2014 06:49:50 AM) (Source: NETLOGON) (EventID: 3095) (User: )
Description: Dieser Computer ist als Mitglied einer Arbeitsgruppe konfiguriert, nicht als
Mitglied einer Domäne. Der Anmeldedienst braucht bei dieser
Konfiguration nicht gestartet zu sein.

Error: (07/16/2014 10:36:54 PM) (Source: Service Control Manager) (EventID: 7024) (User: )
Description: Der Dienst "Intelligenter Hintergrundübertragungsdienst" wurde mit dem folgenden dienstspezifischen Fehler beendet: 
%%2148007941

Error: (07/16/2014 10:36:54 PM) (Source: Microsoft-Windows-Bits-Client) (EventID: 16392) (User: NT-AUTORITÄT)
Description: Fehler beim Starten des BITS-Dienstes. Fehler: 2148007941.

Error: (07/16/2014 10:36:54 PM) (Source: DCOM) (EventID: 10010) (User: NT-AUTORITÄT)
Description: {A47979D2-C419-11D9-A5B4-001185AD2B89}

Error: (07/16/2014 10:34:55 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Der Dienst "Netzwerklistendienst" wurde mit folgendem Fehler beendet: 
%%21

Error: (07/16/2014 10:32:43 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Der Dienst "IP-Hilfsdienst" wurde mit folgendem Fehler beendet: 
%%1058

Error: (07/16/2014 10:31:26 PM) (Source: Microsoft-Windows-Kernel-Processor-Power) (EventID: 54) (User: NT-AUTORITÄT)
Description: Die gemeinschaftlichen Prozessorenergiesteuerungen für den Prozessor "3" in der Gruppe "0" sind aufgrund eines Firmwareproblems deaktiviert. Wenden Sie sich an den Computerhersteller, um aktualisierte Firmware zu erhalten.


Microsoft Office Sessions:
=========================
Error: (07/24/2014 04:58:47 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: daemonu.exe4.11.9.15194eb80daemonu.exe4.11.9.15194eb80c000000500025fc546001cfa179cbbb2b16C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exeC:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe0325aaf2-1343-11e4-8250-40f02ff2e08a

Error: (07/22/2014 05:34:03 PM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )
Description: 80070005

Error: (07/21/2014 02:43:47 PM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )
Description: 80070005

Error: (07/20/2014 01:45:19 PM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )
Description: 80070005

Error: (07/19/2014 04:03:02 PM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )
Description: 80070005

Error: (07/17/2014 11:12:14 AM) (Source: Desktop Window Manager) (EventID: 9020) (User: )
Description: 0x8898008d

Error: (07/17/2014 11:08:38 AM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )
Description: 80070005

Error: (07/17/2014 06:49:14 AM) (Source: Microsoft-Windows-WMI) (EventID: 24) (User: NT-AUTORITÄT)
Description: AVWMIEVTProvselect * from Event_NotificationEvent_Notification//./ROOT/CIMV2/Applications/Avira_AntiVir

Error: (07/17/2014 06:49:14 AM) (Source: Microsoft-Windows-WMI) (EventID: 24) (User: NT-AUTORITÄT)
Description: select * from Event_NotificationEvent_Notification//./ROOT/CIMV2/Applications/Avira_AntiVir

Error: (07/17/2014 06:47:07 AM) (Source: Perflib) (EventID: 1023) (User: )
Description: rdyboost4


==================== Memory info =========================== 

Percentage of memory in use: 22%
Total physical RAM: 8104.27 MB
Available physical RAM: 6313.33 MB
Total Pagefile: 10024.27 MB
Available Pagefile: 8108.28 MB
Total Virtual: 131072 MB
Available Virtual: 131071.84 MB

==================== Drives ================================

Drive c: (Windows8_OS) (Fixed) (Total:425.8 GB) (Free:391.39 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive d: (LENOVO) (Fixed) (Total:25 GB) (Free:23.06 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 466 GB) (Disk ID: 237A1541)

Partition: GPT Partition Type.

==================== End Of Log ============================
         

Hallo

das klappt ja ganz gut bisher

Schritt 1:

Downloade Dir bitte AdwCleaner auf deinen Desktop.

• Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
• Starte die AdwCleaner.exe mit einem Doppelklick.
• Stimme den Nutzungsbedingungen zu.
• Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
  • "Tracing" Schlüssel löschen
  • Winsock Einstellungen zurücksetzen
  • Proxy Einstellungen zurücksetzen
  • Internet Explorer Richtlinien zurücksetzen
  • Chrome Richtlinien zurücksetzen
  • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
• Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
• Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
• Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
• Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Schritt 2:

Downloade Dir bitte Malwarebytes Anti-Malware

• Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
• Starte Malwarebytes' Anti-Malware (MBAM).
• Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
• Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
• Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
• Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
• Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
• Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

Schritt 3:

erstelle ein neues FRST Logfile und poste es hier

# AdwCleaner v3.216 - Bericht erstellt am 24/07/2014 um 21:09:45
# Aktualisiert 17/07/2014 von Xplode
# Betriebssystem : Windows 8.1  (64 bits)
# Benutzername : Katharina - WICHTLZWERG
# Gestartet von : C:\Users\Katharina\Downloads\adwcleaner_3.216.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****

Datei Gelöscht : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Search.lnk
Datei Gelöscht : C:\Users\Katharina\AppData\Roaming\Mozilla\Firefox\Profiles\ekrrck2g.default\searchplugins\trovi-search.xml

***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\WajamInternetEnhancer_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\WajamInternetEnhancer_RASMANCS
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9}

***** [ Browser ] *****

-\\ Internet Explorer v11.0.9600.17126

Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page]

-\\ Mozilla Firefox v30.0 (de)

[ Datei : C:\Users\Katharina\AppData\Roaming\Mozilla\Firefox\Profiles\ekrrck2g.default\prefs.js ]

Zeile gelöscht : user_pref("browser.search.defaultenginename", "Trovi search");
Zeile gelöscht : user_pref("browser.search.selectedEngine", "Trovi search");

-\\ Google Chrome v

[ Datei : C:\Users\Katharina\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [1961 octets] - [24/07/2014 21:07:47]
AdwCleaner[S0].txt - [1587 octets] - [24/07/2014 21:09:45]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [1647 octets] ##########
         

 Malwarebytes Anti-Malware 
www.malwarebytes.org


Protection, 24.07.2014 17:47:40, SYSTEM, WICHTLZWERG, Protection, Malware Protection, Starting, 
Protection, 24.07.2014 17:47:40, SYSTEM, WICHTLZWERG, Protection, Malware Protection, Started, 
Protection, 24.07.2014 17:47:40, SYSTEM, WICHTLZWERG, Protection, Malicious Website Protection, Starting, 
Protection, 24.07.2014 17:47:40, SYSTEM, WICHTLZWERG, Protection, Malicious Website Protection, Started, 
Update, 24.07.2014 17:47:45, SYSTEM, WICHTLZWERG, Manual, Rootkit Database, 2014.2.20.1, 2014.7.17.1, 
Update, 24.07.2014 17:47:52, SYSTEM, WICHTLZWERG, Manual, Malware Database, 2014.3.4.9, 2014.7.24.4, 
Protection, 24.07.2014 17:47:53, SYSTEM, WICHTLZWERG, Protection, Refresh, Starting, 
Protection, 24.07.2014 17:47:53, SYSTEM, WICHTLZWERG, Protection, Malicious Website Protection, Stopping, 
Protection, 24.07.2014 17:47:53, SYSTEM, WICHTLZWERG, Protection, Malicious Website Protection, Stopped, 
Protection, 24.07.2014 17:47:56, SYSTEM, WICHTLZWERG, Protection, Refresh, Success, 
Protection, 24.07.2014 17:47:56, SYSTEM, WICHTLZWERG, Protection, Malicious Website Protection, Starting, 
Protection, 24.07.2014 17:47:57, SYSTEM, WICHTLZWERG, Protection, Malicious Website Protection, Started, 
Protection, 24.07.2014 17:58:01, SYSTEM, WICHTLZWERG, Protection, Malicious Website Protection, Stopping, 
Protection, 24.07.2014 17:58:01, SYSTEM, WICHTLZWERG, Protection, Malicious Website Protection, Stopped, 
Protection, 24.07.2014 17:58:01, SYSTEM, WICHTLZWERG, Protection, Malware Protection, Stopping, 
Protection, 24.07.2014 17:58:01, SYSTEM, WICHTLZWERG, Protection, Malware Protection, Stopped, 
Protection, 24.07.2014 21:15:45, SYSTEM, WICHTLZWERG, Protection, Malware Protection, Starting, 
Protection, 24.07.2014 21:15:45, SYSTEM, WICHTLZWERG, Protection, Malware Protection, Started, 
Protection, 24.07.2014 21:15:45, SYSTEM, WICHTLZWERG, Protection, Malicious Website Protection, Starting, 
Protection, 24.07.2014 21:15:45, SYSTEM, WICHTLZWERG, Protection, Malicious Website Protection, Started, 
Update, 24.07.2014 21:15:49, SYSTEM, WICHTLZWERG, Manual, Rootkit Database, 2014.2.20.1, 2014.7.17.1, 
Update, 24.07.2014 21:16:09, SYSTEM, WICHTLZWERG, Manual, Malware Database, 2014.3.4.9, 2014.7.24.7, 
Protection, 24.07.2014 21:16:11, SYSTEM, WICHTLZWERG, Protection, Refresh, Starting, 
Protection, 24.07.2014 21:16:11, SYSTEM, WICHTLZWERG, Protection, Malicious Website Protection, Stopping, 
Protection, 24.07.2014 21:16:11, SYSTEM, WICHTLZWERG, Protection, Malicious Website Protection, Stopped, 
Protection, 24.07.2014 21:16:14, SYSTEM, WICHTLZWERG, Protection, Refresh, Success, 
Protection, 24.07.2014 21:16:14, SYSTEM, WICHTLZWERG, Protection, Malicious Website Protection, Starting, 
Protection, 24.07.2014 21:16:14, SYSTEM, WICHTLZWERG, Protection, Malicious Website Protection, Started, 
Protection, 24.07.2014 21:26:51, SYSTEM, WICHTLZWERG, Protection, Malware Protection, Starting, 
Protection, 24.07.2014 21:26:51, SYSTEM, WICHTLZWERG, Protection, Malware Protection, Started, 
Protection, 24.07.2014 21:26:51, SYSTEM, WICHTLZWERG, Protection, Malicious Website Protection, Starting, 
Protection, 24.07.2014 21:26:54, SYSTEM, WICHTLZWERG, Protection, Malicious Website Protection, Started, 

(end)
         

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 24-07-2014 01
Ran by Katharina (administrator) on WICHTLZWERG on 24-07-2014 21:34:22
Running from C:\Users\Katharina\Downloads
Platform: Windows 8.1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal


==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\stacsv64.exe
(Qualcomm Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
() C:\Program Files (x86)\Lenovo\Lenovo VeriFace\VfConnectorService.exe
(Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
(Intel Corporation) C:\Windows\System32\igfxTray.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Atheros Communications) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe
() C:\Program Files (x86)\Bluetooth Suite\ActivateDesktop.exe
(Dolby Laboratories Inc.) C:\Program Files (x86)\Dolby Home Theater v4\pcee4.exe
(Lenovo) C:\Program Files\Lenovo\Onekey Theater\OnekeyStudio.exe
(Lenovo(beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Manager\Energy Manager.exe
(Lenovo(beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Manager\utility.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe
() C:\Users\Katharina\AppData\Local\Amazon Music\Amazon Music Helper.exe
(Vimicro) C:\Program Files (x86)\USB Camera\VM331STI.EXE
(CyberLink Corp.) C:\Program Files (x86)\Lenovo\YouCam\YouCamTray.exe
(CyberLink Corp.) C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe
(Dolby Laboratories Inc.) C:\Program Files (x86)\Dolby Home Theater v4\pcee4.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe
(Farbar) C:\Users\Katharina\Downloads\FRST64(1).exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [Nvtmru] => C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe [1012000 2013-05-16] (NVIDIA Corporation)
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe [36352 2013-04-30] (Intel Corporation)
HKLM\...\Run: [DolbyTrayApp] => c:\program files (x86)\Dolby Home Theater v4\pcee4.exe [508656 2012-08-31] (Dolby Laboratories Inc.)
HKLM\...\Run: [OnekeyStudio] => C:\Program Files\Lenovo\Onekey Theater\OnekeyStudio.exe [4196432 2012-09-14] (Lenovo)
HKLM\...\Run: [Energy Manager] => C:\Program Files (x86)\Lenovo\Energy Manager\Energy Manager.exe [15794160 2014-02-12] (Lenovo(beijing) Limited)
HKLM\...\Run: [Lenovo Utility] => C:\Program Files (x86)\Lenovo\Energy Manager\Utility.exe [80368 2014-02-12] (Lenovo(beijing) Limited)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2778864 2013-08-30] (Synaptics Incorporated)
HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray64.exe [1703424 2013-07-04] (IDT, Inc.)
HKLM-x32\...\Run: [331BigDog] => C:\Program Files (x86)\USB Camera\VM331STI.EXE [552960 2013-05-14] (Vimicro)
HKLM-x32\...\Run: [YouCam Tray] => C:\Program Files (x86)\Lenovo\YouCam\YouCamTray.exe [168464 2012-10-30] (CyberLink Corp.)
HKLM-x32\...\Run: [UpdateP2GShortCut] => C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe [217088 2012-04-18] (CyberLink Corp.)
HKLM-x32\...\Run: [RemoteControl10] => C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe [95192 2013-03-08] (CyberLink Corp.)
HKLM-x32\...\Run: [Intel AppUp(SM) center] => C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe [155488 2012-07-12] (Intel Corporation)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2014-05-08] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [189520 2014-07-07] (Avira Operations GmbH & Co. KG)
Winlogon\Notify\igfxcui: igfxdev.dll [X]
HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [132224 2013-02-28] ( (Atheros Communications))
HKU\S-1-5-21-3349096550-3144467483-3537340833-1001\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [516608 2013-08-22] (Microsoft Corporation)
HKU\S-1-5-21-3349096550-3144467483-3537340833-1002\...\Run: [Amazon Music] => C:\Users\Katharina\AppData\Local\Amazon Music\Amazon Music Helper.exe [3162944 2014-06-24] ()
AppInit_DLLs: C:\WINDOWS\system32\nvinitx.dll => C:\WINDOWS\system32\nvinitx.dll [184048 2013-12-26] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\WINDOWS\SysWOW64\nvinit.dll => C:\WINDOWS\SysWOW64\nvinit.dll [156256 2013-12-26] (NVIDIA Corporation)
ShellIconOverlayIdentifiers: SugarSyncBackedUp -> {0C4A258A-3F3B-4FFF-80A7-9B3BEC139472} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll (SugarSync, Inc.)
ShellIconOverlayIdentifiers: SugarSyncPending -> {62CCD8E3-9C21-41E1-B55E-1E26DFC68511} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll (SugarSync, Inc.)
ShellIconOverlayIdentifiers: SugarSyncRoot -> {A759AFF6-5851-457D-A540-F4ECED148351} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll (SugarSync, Inc.)
ShellIconOverlayIdentifiers: SugarSyncShared -> {1574C9EF-7D58-488F-B358-8B78C1538F51} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll (SugarSync, Inc.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://lenovo13.msn.com/?pc=LCJB
HKCU\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.lenovo.com
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://www.lenovo.com
SearchScopes: HKLM - DefaultScope {9BB47C17-9C68-4BB3-B188-DD9AF0FD2410} URL = 
SearchScopes: HKLM - {14810DE1-195E-4F23-B623-860FE40A0752} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=LCJB
SearchScopes: HKLM-x32 - DefaultScope value is missing.
SearchScopes: HKLM-x32 - {14810DE1-195E-4F23-B623-860FE40A0752} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=LCJB
SearchScopes: HKCU - {14810DE1-195E-4F23-B623-860FE40A0752} URL = 
BHO-x32: mySecureSurfer -> {52EA1989-D16E-4560-9021-F0AD247DE4D1} -> C:\Users\Katharina\AppData\LocalLow\mySecureSurfer\IE\mySecureSurfer.dll (Soft-Ware International Ltd.)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\Katharina\AppData\Roaming\Mozilla\Firefox\Profiles\ekrrck2g.default
FF Plugin: @adobe.com/FlashPlayer - C:\WINDOWS\system32\Macromed\Flash\NPSWF64_14_0_0_125.dll ()
FF Plugin: @videolan.org/vlc,version=2.1.4 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_125.dll ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=3.5.29 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: DownloadHelper - C:\Users\Katharina\AppData\Roaming\Mozilla\Firefox\Profiles\ekrrck2g.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2014-06-21]
FF Extension: mySecureSurfer - C:\Users\Katharina\AppData\Roaming\Mozilla\Firefox\Profiles\ekrrck2g.default\Extensions\{d64e478d-4dee-4bfb-afe4-30b84e6a3157} [2014-07-24]
FF Extension: Ghostery - C:\Users\Katharina\AppData\Roaming\Mozilla\Firefox\Profiles\ekrrck2g.default\Extensions\firefox@ghostery.com.xpi [2014-06-21]
FF Extension: Adblock Plus - C:\Users\Katharina\AppData\Roaming\Mozilla\Firefox\Profiles\ekrrck2g.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-06-21]
FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK

Chrome: 
=======
CHR HomePage: 
CHR Extension: (mySecureSurfer) - C:\Users\Katharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\agabegcgoagbgcpiegohpamfdpcnmfba [2014-07-24]
CHR HKLM-x32\...\Chrome\Extension: [agabegcgoagbgcpiegohpamfdpcnmfba] - C:\Users\Katharina\AppData\LocalLow\mySecureSurfer\CHROME\mySecureSurfer.crx [2014-06-30]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [227968 2013-02-28] (Qualcomm Atheros Commnucations)
R2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [141392 2014-07-07] (Avira Operations GmbH & Co. KG)
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15344 2013-04-30] (Intel Corporation)
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [314696 2014-05-21] (Intel Corporation)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [731648 2013-02-13] (Intel(R) Corporation) [File not signed]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [820184 2013-02-13] (Intel(R) Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-05-17] (Intel Corporation)
R2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1809720 2014-05-12] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [860472 2014-05-12] (Malwarebytes Corporation)
R2 STacSV; C:\Program Files\IDT\WDM\STacSV64.exe [337920 2013-07-04] (IDT, Inc.) [File not signed]
R2 VeriFaceSrv; C:\Program Files (x86)\Lenovo\Lenovo VeriFace\VfConnectorService.exe [68368 2014-02-12] ()
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347880 2014-07-16] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2014-07-16] (Microsoft Corporation)
R2 ZAtheros Bt and Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [323584 2013-02-28] (Atheros) [File not signed]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2013-02-28] (Qualcomm Atheros)
R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [226304 2014-03-18] (Microsoft Corporation)
R0 IntelHSWPcc; C:\Windows\System32\drivers\IntelPcc.sys [100184 2013-04-09] (Intel Corporation)
R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25816 2014-05-12] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [122584 2014-07-24] (Malwarebytes Corporation)
R3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [64216 2014-05-12] (Malwarebytes Corporation)
R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [34544 2013-08-30] (Synaptics Incorporated)
R3 vm331avs; C:\Windows\System32\Drivers\vm331avs.sys [1064704 2013-05-31] (Vimicro Corporation)
R3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [123224 2014-07-16] (Microsoft Corporation)
S3 wsvd; C:\Windows\system32\DRIVERS\wsvd.sys [102376 2012-06-13] ("CyberLink)

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-07-24 21:32 - 2014-07-24 21:32 - 00003320 _____ () C:\Users\Katharina\Desktop\mbam.txt
2014-07-24 21:15 - 2014-07-24 21:27 - 00122584 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2014-07-24 21:15 - 2014-07-24 21:15 - 00001129 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-07-24 21:15 - 2014-07-24 21:15 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-07-24 21:15 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2014-07-24 21:15 - 2014-05-12 07:26 - 00064216 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys
2014-07-24 21:15 - 2014-05-12 07:25 - 00025816 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys
2014-07-24 21:14 - 2014-07-24 21:15 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Katharina\Downloads\mbam-setup-2.0.2.1012(2).exe
2014-07-24 21:11 - 2014-07-24 21:11 - 00000144 _____ () C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2014-07-24 21:07 - 2014-07-24 21:09 - 00000000 ____D () C:\AdwCleaner
2014-07-24 21:07 - 2014-07-24 21:07 - 01354223 _____ () C:\Users\Katharina\Downloads\adwcleaner_3.216.exe
2014-07-24 21:07 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\WINDOWS\SysWOW64\sqlite3.dll
2014-07-24 20:39 - 2014-07-24 20:39 - 02093568 _____ (Farbar) C:\Users\Katharina\Downloads\FRST64(1).exe
2014-07-24 18:38 - 2014-07-24 18:38 - 01084416 _____ (Farbar) C:\Users\Katharina\Downloads\FRST.exe
2014-07-24 18:21 - 2014-07-24 18:21 - 01110476 _____ () C:\Users\Katharina\Downloads\7z920.exe
2014-07-24 18:12 - 2014-07-24 21:34 - 00015056 _____ () C:\Users\Katharina\Downloads\FRST.txt
2014-07-24 18:12 - 2014-07-24 20:57 - 00022408 _____ () C:\Users\Katharina\Downloads\Addition.txt
2014-07-24 18:11 - 2014-07-24 21:34 - 00000000 ____D () C:\FRST
2014-07-24 18:10 - 2014-07-24 18:10 - 02093568 _____ (Farbar) C:\Users\Katharina\Downloads\FRST64.exe
2014-07-24 18:10 - 2014-07-24 18:10 - 00000017 _____ () C:\Users\Katharina\AppData\Local\resmon.resmoncfg
2014-07-24 17:53 - 2014-01-19 09:38 - 00270496 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2014-07-24 17:46 - 2014-07-24 17:46 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Katharina\Downloads\mbam-setup-2.0.2.1012(1).exe
2014-07-24 17:43 - 2014-07-24 17:43 - 00000451 _____ () C:\WINDOWS\system32\{F33C3B9B-72AF-418A-B3FD-560646F7CDA2}.bat
2014-07-24 17:30 - 2014-07-24 17:30 - 00000000 ____D () C:\Users\Katharina\AppData\Roaming\Digiarty
2014-07-24 17:28 - 2014-07-24 17:29 - 00000163 _____ () C:\WINDOWS\Reimage.ini
2014-07-24 17:28 - 2014-07-24 17:28 - 00000133 _____ () C:\Users\Katharina\Desktop\Amazon.de.url
2014-07-24 17:28 - 2014-07-24 17:28 - 00000000 ____D () C:\Users\Katharina\Downloads\winx-dvd-author
2014-07-24 17:28 - 2014-07-24 17:28 - 00000000 ____D () C:\Users\Katharina\AppData\Local\Google
2014-07-23 22:12 - 2014-07-23 22:12 - 01459302 _____ () C:\Users\Katharina\Desktop\Slideshow 2014-07-23.MVM
2014-07-23 20:51 - 2014-07-23 20:54 - 00016384 ___SH () C:\Users\Katharina\Documents\Thumbs.db
2014-07-20 16:21 - 2014-07-01 00:45 - 00688128 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepdu.dll
2014-07-20 16:21 - 2014-06-28 09:48 - 00527360 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2014-07-20 16:21 - 2014-06-28 09:07 - 00385536 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2014-07-20 13:01 - 2014-07-20 13:01 - 00000000 ___RD () C:\WINDOWS\BrowserChoice
2014-07-19 21:15 - 2014-05-19 08:31 - 00057856 _____ (Microsoft Corporation) C:\WINDOWS\system32\drvcfg.exe
2014-07-19 21:15 - 2014-05-19 08:21 - 00110592 _____ (Microsoft Corporation) C:\WINDOWS\system32\drvinst.exe
2014-07-19 21:15 - 2014-05-19 07:23 - 00098816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\drvinst.exe
2014-07-17 11:18 - 2014-07-17 11:18 - 00000000 ____D () C:\WINDOWS\SysWOW64\NV
2014-07-17 11:18 - 2014-07-17 11:18 - 00000000 ____D () C:\WINDOWS\system32\NV
2014-07-17 11:18 - 2014-07-17 11:18 - 00000000 ____D () C:\Program Files\Common Files\Atheros
2014-07-17 07:21 - 2014-07-24 21:28 - 00000000 __RDO () C:\Users\Katharina\OneDrive
2014-07-17 07:19 - 2014-07-17 07:19 - 00001465 _____ () C:\Users\Katharina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-07-17 07:19 - 2014-07-17 07:19 - 00000020 ___SH () C:\Users\Katharina\ntuser.ini
2014-07-17 06:50 - 2014-07-17 06:50 - 00000000 _SHDL () C:\Users\Default\Vorlagen
2014-07-17 06:50 - 2014-07-17 06:50 - 00000000 _SHDL () C:\Users\Default\Startmenü
2014-07-17 06:50 - 2014-07-17 06:50 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung
2014-07-17 06:50 - 2014-07-17 06:50 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen
2014-07-17 06:50 - 2014-07-17 06:50 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien
2014-07-17 06:50 - 2014-07-17 06:50 - 00000000 _SHDL () C:\Users\Default\Druckumgebung
2014-07-17 06:50 - 2014-07-17 06:50 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik
2014-07-17 06:50 - 2014-07-17 06:50 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder
2014-07-17 06:50 - 2014-07-17 06:50 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-07-17 06:50 - 2014-07-17 06:50 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf
2014-07-17 06:50 - 2014-07-17 06:50 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten
2014-07-17 06:50 - 2014-07-17 06:50 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten
2014-07-17 06:50 - 2014-07-17 06:50 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik
2014-07-17 06:50 - 2014-07-17 06:50 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder
2014-07-17 06:50 - 2014-07-17 06:50 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-07-17 06:50 - 2014-07-17 06:50 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf
2014-07-17 06:50 - 2014-07-17 06:50 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten
2014-07-17 06:49 - 2014-07-24 18:21 - 01137003 _____ () C:\WINDOWS\WindowsUpdate.log
2014-07-17 06:49 - 2014-07-17 06:49 - 00022960 _____ () C:\WINDOWS\system32\emptyregdb.dat
2014-07-17 06:44 - 2014-07-17 06:44 - 00000020 ___SH () C:\Users\UpdatusUser\ntuser.ini
2014-07-16 23:30 - 2014-07-18 21:34 - 00000000 ___DC () C:\WINDOWS\Panther
2014-07-16 23:29 - 2014-07-20 16:50 - 00000000 ____D () C:\Windows.old
2014-07-16 23:29 - 2014-07-16 23:29 - 00308224 _____ (Microsoft Corporation) C:\WINDOWS\system32\wusa.exe
2014-07-16 23:29 - 2014-07-16 23:29 - 00305152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wusa.exe
2014-07-16 23:28 - 2014-07-16 23:28 - 03118080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Wpc.dll
2014-07-16 23:28 - 2014-07-16 23:28 - 03048904 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcMon.exe
2014-07-16 23:28 - 2014-07-16 23:28 - 02861056 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebSync.dll
2014-07-16 23:28 - 2014-07-16 23:28 - 02834944 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpccpl.dll
2014-07-16 23:28 - 2014-07-16 23:28 - 02344448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Wpc.dll
2014-07-16 23:28 - 2014-07-16 23:28 - 01336648 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll
2014-07-16 23:28 - 2014-07-16 23:28 - 01064448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll
2014-07-16 23:28 - 2014-07-16 23:28 - 00295424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ks.sys
2014-07-16 23:28 - 2014-07-16 23:28 - 00055328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wpcfltr.sys
2014-07-16 23:27 - 2014-07-16 23:27 - 23464448 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 17276416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 13527040 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 11742208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 05721088 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 04254720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 02768384 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 02266112 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 02179072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 02040832 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2014-07-16 23:27 - 2014-07-16 23:27 - 01964544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2014-07-16 23:27 - 2014-07-16 23:27 - 01791488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 01393664 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 01139200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 00846336 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 00752640 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 00704512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 00631808 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 00608768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2014-07-16 23:27 - 2014-07-16 23:27 - 00592896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 00526336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 00452608 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtmsft.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 00367616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtmsft.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 00292864 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 00250880 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 00239616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 00225280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 00195584 _____ (Microsoft Corporation) C:\WINDOWS\system32\msrating.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 00164864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrating.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 00139264 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieUnatt.exe
2014-07-16 23:27 - 2014-07-16 23:27 - 00112128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieUnatt.exe
2014-07-16 23:27 - 2014-07-16 23:27 - 00111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollector.exe
2014-07-16 23:27 - 2014-07-16 23:27 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesetup.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieetwproxystub.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwproxystub.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iernonce.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 00004096 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollectorres.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 02900992 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 02641920 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 02479616 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmSvc.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 02373784 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2014-07-16 23:26 - 2014-07-16 23:26 - 02331000 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 02317824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 02270208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 02141912 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 02133504 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 02088160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2014-07-16 23:26 - 2014-07-16 23:26 - 02030080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WsmSvc.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 02013016 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2014-07-16 23:26 - 2014-07-16 23:26 - 01843712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Display.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 01816576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Display.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 01779800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 01764864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 01679128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 01656832 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 01557848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2014-07-16 23:26 - 2014-07-16 23:26 - 01542768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 01351168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 01306624 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 01291200 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel32.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 01112536 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 01095488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 01063424 _____ (Microsoft Corporation) C:\WINDOWS\system32\IKEEXT.DLL
2014-07-16 23:26 - 2014-07-16 23:26 - 01036288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kernel32.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 01015808 _____ (Microsoft Corporation) C:\WINDOWS\system32\aclui.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00950784 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgent.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00939520 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00924160 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00887296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aclui.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00836096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00834560 _____ (Microsoft Corporation) C:\WINDOWS\system32\netlogon.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00827392 _____ (Microsoft Corporation) C:\WINDOWS\system32\BFE.DLL
2014-07-16 23:26 - 2014-07-16 23:26 - 00800256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReAgent.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00755712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00717312 _____ (Microsoft Corporation) C:\WINDOWS\system32\nshwfp.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00688640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netlogon.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00669696 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasapi32.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00655360 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsapi.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00621568 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAgent.exe
2014-07-16 23:26 - 2014-07-16 23:26 - 00605184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasapi32.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00567296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nshwfp.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00542208 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.Printing.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00518552 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00512000 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidprov.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00494592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dnsapi.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00488280 _____ (Microsoft Corporation) C:\WINDOWS\system32\netcfgx.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00462336 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlangpui.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00412672 _____ (Microsoft Corporation) C:\WINDOWS\system32\FWPUCLNT.DLL
2014-07-16 23:26 - 2014-07-16 23:26 - 00406912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00402432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Graphics.Printing.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00390488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netcfgx.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00387210 _____ () C:\WINDOWS\system32\ApnDatabase.xml
2014-07-16 23:26 - 2014-07-16 23:26 - 00386560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlangpui.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00379224 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2014-07-16 23:26 - 2014-07-16 23:26 - 00376152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys
2014-07-16 23:26 - 2014-07-16 23:26 - 00360512 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfreadwrite.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00356864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlidprov.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00356848 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcomp.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00355832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfreadwrite.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00325632 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationApi.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00324096 _____ (Microsoft Corporation) C:\WINDOWS\system32\SessEnv.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00299008 _____ (Microsoft Corporation) C:\WINDOWS\system32\pdh.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00298496 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSDMon.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00291840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Sensors.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00283648 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb10.sys
2014-07-16 23:26 - 2014-07-16 23:26 - 00280576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SessEnv.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00274944 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmWmiPl.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00271872 _____ (Microsoft Corporation) C:\WINDOWS\system32\spp.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00264192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FWPUCLNT.DLL
2014-07-16 23:26 - 2014-07-16 23:26 - 00262656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LocationApi.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00254976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pdh.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00254464 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsrslvr.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00252928 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00247296 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsApi.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00226304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Sensors.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00222720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\spp.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00222720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dcomp.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00220160 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00212992 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdd.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00201216 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReInfo.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00197632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00192000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Scanners.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00186368 _____ (Microsoft Corporation) C:\WINDOWS\system32\dafWfdProvider.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00172544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReInfo.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00171008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SensorsApi.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00160768 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxAllUserStore.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00157016 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wof.sys
2014-07-16 23:26 - 2014-07-16 23:26 - 00151040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Scanners.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxdav.sys
2014-07-16 23:26 - 2014-07-16 23:26 - 00139776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxAllUserStore.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00136024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wfplwfs.sys
2014-07-16 23:26 - 2014-07-16 23:26 - 00134144 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dfsc.sys
2014-07-16 23:26 - 2014-07-16 23:26 - 00115200 _____ (Microsoft Corporation) C:\WINDOWS\system32\umpnpmgr.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00115200 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevPropMgr.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00113648 _____ (Microsoft Corporation) C:\WINDOWS\system32\userenv.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidclass.sys
2014-07-16 23:26 - 2014-07-16 23:26 - 00102912 _____ (Microsoft Corporation) C:\WINDOWS\system32\davclnt.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00094016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\userenv.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00086016 _____ (Microsoft Corporation) C:\WINDOWS\system32\RMapi.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\davclnt.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\sxproxy.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00079360 _____ (Microsoft Corporation) C:\WINDOWS\system32\w32tm.exe
2014-07-16 23:26 - 2014-07-16 23:26 - 00079360 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\IPMIDrv.sys
2014-07-16 23:26 - 2014-07-16 23:26 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\w32tm.exe
2014-07-16 23:26 - 2014-07-16 23:26 - 00069120 _____ (Microsoft Corporation) C:\WINDOWS\system32\l2gpstore.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\l2gpstore.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpipreg.sys
2014-07-16 23:26 - 2014-07-16 23:26 - 00040448 _____ (Microsoft Corporation) C:\WINDOWS\system32\SetNetworkLocation.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sxproxy.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidusb.sys
2014-07-16 23:26 - 2014-07-16 23:26 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredentialMigrationHandler.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredentialMigrationHandler.dll
2014-07-16 23:24 - 2014-07-16 23:24 - 16871936 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2014-07-16 23:24 - 2014-07-16 23:24 - 12711424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2014-07-16 23:24 - 2014-07-16 23:24 - 02518360 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2014-07-16 23:24 - 2014-07-16 23:24 - 01417216 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2014-07-16 23:24 - 2014-07-16 23:24 - 00735232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\adtschema.dll
2014-07-16 23:24 - 2014-07-16 23:24 - 00735232 _____ (Microsoft Corporation) C:\WINDOWS\system32\adtschema.dll
2014-07-16 23:24 - 2014-07-16 23:24 - 00565576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2014-07-16 23:24 - 2014-07-16 23:24 - 00467800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS
2014-07-16 23:24 - 2014-07-16 23:24 - 00440664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbport.sys
2014-07-16 23:24 - 2014-07-16 23:24 - 00436224 _____ (Microsoft Corporation) C:\WINDOWS\system32\certcli.dll
2014-07-16 23:24 - 2014-07-16 23:24 - 00423768 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll
2014-07-16 23:24 - 2014-07-16 23:24 - 00419672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbhub.sys
2014-07-16 23:24 - 2014-07-16 23:24 - 00323584 _____ (Microsoft Corporation) C:\WINDOWS\system32\DaOtpCredentialProvider.dll
2014-07-16 23:24 - 2014-07-16 23:24 - 00318976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certcli.dll
2014-07-16 23:24 - 2014-07-16 23:24 - 00284672 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUDFHost.exe
2014-07-16 23:24 - 2014-07-16 23:24 - 00270848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DaOtpCredentialProvider.dll
2014-07-16 23:24 - 2014-07-16 23:24 - 00227840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WUDFRd.sys
2014-07-16 23:24 - 2014-07-16 23:24 - 00216368 _____ (Microsoft Corporation) C:\WINDOWS\system32\rsaenh.dll
2014-07-16 23:24 - 2014-07-16 23:24 - 00209408 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUDFPlatform.dll
2014-07-16 23:24 - 2014-07-16 23:24 - 00189016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rsaenh.dll
2014-07-16 23:24 - 2014-07-16 23:24 - 00110592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WUDFPf.sys
2014-07-16 23:24 - 2014-07-16 23:24 - 00099840 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUDFSvc.dll
2014-07-16 23:24 - 2014-07-16 23:24 - 00089944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbehci.sys
2014-07-16 23:24 - 2014-07-16 23:24 - 00037376 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbuhci.sys
2014-07-16 23:24 - 2014-07-16 23:24 - 00027480 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbd.sys
2014-07-16 23:23 - 2014-07-16 23:23 - 13287936 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2014-07-16 23:23 - 2014-07-16 23:23 - 11792384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2014-07-16 23:23 - 2014-07-16 23:23 - 03463680 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2014-07-16 23:23 - 2014-07-16 23:23 - 01054208 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.appcore.dll
2014-07-16 23:23 - 2014-07-16 23:23 - 01018880 _____ (Microsoft Corporation) C:\WINDOWS\system32\termsrv.dll
2014-07-16 23:23 - 2014-07-16 23:23 - 00923136 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll
2014-07-16 23:23 - 2014-07-16 23:23 - 00828928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.appcore.dll
2014-07-16 23:23 - 2014-07-16 23:23 - 00827392 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2014-07-16 23:23 - 2014-07-16 23:23 - 00756224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll
2014-07-16 23:23 - 2014-07-16 23:23 - 00666624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2014-07-16 23:23 - 2014-07-16 23:23 - 00563200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\afd.sys
2014-07-16 23:23 - 2014-07-16 23:23 - 00555736 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.appcore.dll
2014-07-16 23:23 - 2014-07-16 23:23 - 00249344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2014-07-16 23:23 - 2014-07-16 23:23 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2014-07-16 23:23 - 2014-07-16 23:23 - 00093696 _____ (Microsoft Corporation) C:\WINDOWS\system32\wudriver.dll
2014-07-16 23:23 - 2014-07-16 23:23 - 00086688 _____ (Microsoft Corporation) C:\WINDOWS\system32\mrt_map.dll
2014-07-16 23:23 - 2014-07-16 23:23 - 00080896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wudriver.dll
2014-07-16 23:23 - 2014-07-16 23:23 - 00080032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mrt_map.dll
2014-07-16 23:23 - 2014-07-16 23:23 - 00054776 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2014-07-16 23:23 - 2014-07-16 23:23 - 00028320 _____ (Microsoft Corporation) C:\WINDOWS\system32\mrt100.dll
2014-07-16 23:23 - 2014-07-16 23:23 - 00026784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mrt100.dll
2014-07-16 23:22 - 2014-07-16 23:22 - 04190720 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2014-07-16 23:22 - 2014-07-16 23:22 - 03360256 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll
2014-07-16 23:22 - 2014-07-16 23:22 - 02151424 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3.dll
2014-07-16 23:22 - 2014-07-16 23:22 - 01975296 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWrite.dll
2014-07-16 23:22 - 2014-07-16 23:22 - 01509888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWrite.dll
2014-07-16 23:22 - 2014-07-16 23:22 - 01345536 _____ (Microsoft Corporation) C:\WINDOWS\system32\FntCache.dll
2014-07-16 23:22 - 2014-07-16 23:22 - 01312256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3.dll
2014-07-16 23:22 - 2014-07-16 23:22 - 00834048 _____ (Microsoft Corporation) C:\WINDOWS\system32\osk.exe
2014-07-16 23:22 - 2014-07-16 23:22 - 00779264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\osk.exe
2014-07-16 23:22 - 2014-07-16 23:22 - 00586240 _____ (Microsoft Corporation) C:\WINDOWS\system32\qedit.dll
2014-07-16 23:22 - 2014-07-16 23:22 - 00488960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qedit.dll
2014-07-16 23:21 - 2014-07-16 23:21 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2014-07-16 23:21 - 2014-07-16 23:21 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2014-07-16 23:21 - 2014-07-16 23:21 - 01705472 _____ (Microsoft Corporation) C:\WINDOWS\system32\wucltux.dll
2014-07-16 23:21 - 2014-07-16 23:21 - 00419928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.appcore.dll
2014-07-16 23:21 - 2014-07-16 23:21 - 00381440 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUSettingsProvider.dll
2014-07-16 23:21 - 2014-07-16 23:21 - 00201728 _____ (Microsoft Corporation) C:\WINDOWS\system32\ubpm.dll
2014-07-16 23:21 - 2014-07-16 23:21 - 00190976 _____ (Microsoft Corporation) C:\WINDOWS\system32\storewuauth.dll
2014-07-16 23:21 - 2014-07-16 23:21 - 00137728 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuwebv.dll
2014-07-16 23:21 - 2014-07-16 23:21 - 00123904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuwebv.dll
2014-07-16 23:21 - 2014-07-16 23:21 - 00079872 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSReset.exe
2014-07-16 23:21 - 2014-07-16 23:21 - 00056320 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups.dll
2014-07-16 23:21 - 2014-07-16 23:21 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapp.exe
2014-07-16 23:21 - 2014-07-16 23:21 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapp.exe
2014-07-16 23:21 - 2014-07-16 23:21 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wups.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 21268952 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 18755672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 08652800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 07425368 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2014-07-16 23:20 - 2014-07-16 23:20 - 07173120 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 06645248 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 05833216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Search.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 05774848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 05104640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 04269056 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncEngine.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 02688000 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 02144984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 02140888 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 02124840 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d9.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 02100736 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlowUI.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 01797896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d9.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 01584128 _____ (Microsoft Corporation) C:\WINDOWS\system32\workfolderssvc.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 01527296 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 01466856 _____ (Microsoft Corporation) C:\WINDOWS\system32\propsys.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 01436160 _____ (Microsoft Corporation) C:\WINDOWS\system32\VSSVC.exe
2014-07-16 23:20 - 2014-07-16 23:20 - 01403856 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 01379064 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpmde.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 01308160 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpsvc.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 01287168 _____ (Microsoft Corporation) C:\WINDOWS\system32\mispace.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 01230336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 01222656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Streaming.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 01209616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmde.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 01200288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\propsys.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 01200128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthport.sys
2014-07-16 23:20 - 2014-07-16 23:20 - 01126912 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFolder.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 01057280 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdvidcrl.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 01029120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mispace.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 01025024 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00982016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Streaming.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00955904 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00918528 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00888320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00881616 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00872448 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDrive.exe
2014-07-16 23:20 - 2014-07-16 23:20 - 00855552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdvidcrl.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00836608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchFolder.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00834048 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00805376 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00765408 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00761856 _____ (Microsoft Corporation) C:\WINDOWS\system32\WorkfoldersControl.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00721408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveTelemetry.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00718336 _____ (Microsoft Corporation) C:\WINDOWS\system32\swprv.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00707048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00677376 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys
2014-07-16 23:20 - 2014-07-16 23:20 - 00669856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00629760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmCoreR.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00609448 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00589656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fvevol.sys
2014-07-16 23:20 - 2014-07-16 23:20 - 00518544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00491744 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00491520 _____ (Microsoft Corporation) C:\WINDOWS\system32\GeofenceMonitorService.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00486912 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv
2014-07-16 23:20 - 2014-07-16 23:20 - 00467968 _____ (Microsoft Corporation) C:\WINDOWS\system32\srcore.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00467496 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00463256 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00462336 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsGdiConverter.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00449536 _____ (Microsoft Corporation) C:\WINDOWS\system32\defragsvc.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00443904 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansec.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00443904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\nwifi.sys
2014-07-16 23:20 - 2014-07-16 23:20 - 00428888 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS
2014-07-16 23:20 - 2014-07-16 23:20 - 00426496 _____ (Microsoft Corporation) C:\WINDOWS\system32\clusapi.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00407016 _____ (Microsoft Corporation) C:\WINDOWS\system32\services.exe
2014-07-16 23:20 - 2014-07-16 23:20 - 00406504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00402432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
2014-07-16 23:20 - 2014-07-16 23:20 - 00387896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00384856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spaceport.sys
2014-07-16 23:20 - 2014-07-16 23:20 - 00372568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storport.sys
2014-07-16 23:20 - 2014-07-16 23:20 - 00370176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv
2014-07-16 23:20 - 2014-07-16 23:20 - 00370176 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanmsm.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00364640 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00360792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fltMgr.sys
2014-07-16 23:20 - 2014-07-16 23:20 - 00357376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GeofenceMonitorService.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00337408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsGdiConverter.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00337240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Classpnp.sys
2014-07-16 23:20 - 2014-07-16 23:20 - 00335872 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDEServer.exe
2014-07-16 23:20 - 2014-07-16 23:20 - 00326024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00324888 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFCaptureEngine.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00323072 _____ (Microsoft Corporation) C:\WINDOWS\system32\srvsvc.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00313344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\clusapi.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00310616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\volsnap.sys
2014-07-16 23:20 - 2014-07-16 23:20 - 00307304 _____ (Microsoft Corporation) C:\WINDOWS\system32\wintrust.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00305768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00300544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanmsm.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00296960 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanapi.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00285144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFCaptureEngine.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00281600 _____ (Microsoft Corporation) C:\WINDOWS\system32\resutils.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00275800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msiscsi.sys
2014-07-16 23:20 - 2014-07-16 23:20 - 00271872 _____ (Microsoft Corporation) C:\WINDOWS\system32\rstrui.exe
2014-07-16 23:20 - 2014-07-16 23:20 - 00263424 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlows.exe
2014-07-16 23:20 - 2014-07-16 23:20 - 00257880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdFilter.sys
2014-07-16 23:20 - 2014-07-16 23:20 - 00250368 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpencom.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00246272 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srvnet.sys
2014-07-16 23:20 - 2014-07-16 23:20 - 00244880 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2014-07-16 23:20 - 2014-07-16 23:20 - 00233912 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00230808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wintrust.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanapi.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00219136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\resutils.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00209920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpencom.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00206848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys
2014-07-16 23:20 - 2014-07-16 23:20 - 00201920 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVideoDSP.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00201216 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00191488 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpchttp.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00186880 _____ (Microsoft Corporation) C:\WINDOWS\system32\WorkFoldersShell.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00180056 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2014-07-16 23:20 - 2014-07-16 23:20 - 00178184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVideoDSP.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00144384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpchttp.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00143872 _____ (Microsoft Corporation) C:\WINDOWS\system32\BootMenuUX.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00135168 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscsvc.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00130144 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpapi.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00125496 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmapi.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00123224 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdNisDrv.sys
2014-07-16 23:20 - 2014-07-16 23:20 - 00111528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gpapi.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00098584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmapi.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00077312 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hdaudbus.sys
2014-07-16 23:20 - 2014-07-16 23:20 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\system32\srclient.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsgqec.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\srclient.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00055296 _____ (Microsoft Corporation) C:\WINDOWS\system32\energyprov.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tsgqec.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00047616 _____ (Microsoft Corporation) C:\WINDOWS\system32\tlscsp.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00046592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tlscsp.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Shell.Search.UriHandler.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00035856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdBoot.sys
2014-07-16 23:20 - 2014-07-16 23:20 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Shell.Search.UriHandler.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00032600 _____ (Microsoft Corporation) C:\WINDOWS\system32\ploptin.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00028408 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfpmp.exe
2014-07-16 23:20 - 2014-07-16 23:20 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d8thk.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanhlp.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanhlp.dll
2014-07-16 23:18 - 2014-07-16 23:18 - 00262144 _____ () C:\WINDOWS\system32\config\userdiff
2014-07-16 23:16 - 2014-07-16 23:16 - 00000000 ____D () C:\WINDOWS\SysWOW64\XPSViewer
2014-07-16 23:16 - 2014-07-16 23:16 - 00000000 ____D () C:\Program Files\Reference Assemblies
2014-07-16 23:16 - 2014-07-16 23:16 - 00000000 ____D () C:\Program Files\MSBuild
2014-07-16 23:16 - 2014-07-16 23:16 - 00000000 ____D () C:\Program Files (x86)\Reference Assemblies
2014-07-16 23:16 - 2014-07-16 23:16 - 00000000 ____D () C:\Program Files (x86)\MSBuild
2014-07-16 23:15 - 2014-07-16 22:37 - 00000000 ____D () C:\Recovery
2014-07-16 23:15 - 2013-08-03 06:48 - 01166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll
2014-07-16 23:15 - 2013-08-03 06:48 - 00124112 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2014-07-16 23:15 - 2013-08-03 06:48 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe
2014-07-16 23:15 - 2013-08-03 06:41 - 00778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll
2014-07-16 23:15 - 2013-08-03 06:41 - 00102608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2014-07-16 23:15 - 2013-08-03 06:41 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe
2014-07-16 22:44 - 2014-07-16 22:44 - 00001547 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2014-07-16 22:44 - 2014-07-16 22:44 - 00000000 ____D () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Lenovo
2014-07-16 22:44 - 2014-07-16 22:44 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Lenovo
2014-07-16 22:43 - 2014-07-16 22:43 - 00000000 ____D () C:\WINDOWS\system32\config\bbimigrate
2014-07-16 22:41 - 2014-07-24 17:06 - 00000000 ____D () C:\Users\Katharina
2014-07-16 22:41 - 2014-07-17 06:49 - 00032388 _____ () C:\WINDOWS\diagwrn.xml
2014-07-16 22:41 - 2014-07-17 06:49 - 00032388 _____ () C:\WINDOWS\diagerr.xml
2014-07-16 22:41 - 2014-07-16 22:42 - 00000000 ___RD () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-07-16 22:41 - 2014-07-16 22:42 - 00000000 ___RD () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-07-16 22:41 - 2014-07-16 22:42 - 00000000 ___RD () C:\Users\Katharina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-07-16 22:41 - 2014-07-16 22:42 - 00000000 ___RD () C:\Users\Katharina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-07-16 22:41 - 2014-07-16 22:41 - 00000000 _SHDL () C:\Users\UpdatusUser\Vorlagen
2014-07-16 22:41 - 2014-07-16 22:41 - 00000000 _SHDL () C:\Users\UpdatusUser\Startmenü
2014-07-16 22:41 - 2014-07-16 22:41 - 00000000 _SHDL () C:\Users\UpdatusUser\Netzwerkumgebung
2014-07-16 22:41 - 2014-07-16 22:41 - 00000000 _SHDL () C:\Users\UpdatusUser\Lokale Einstellungen
2014-07-16 22:41 - 2014-07-16 22:41 - 00000000 _SHDL () C:\Users\UpdatusUser\Eigene Dateien
2014-07-16 22:41 - 2014-07-16 22:41 - 00000000 _SHDL () C:\Users\UpdatusUser\Druckumgebung
2014-07-16 22:41 - 2014-07-16 22:41 - 00000000 _SHDL () C:\Users\UpdatusUser\Documents\Eigene Musik
2014-07-16 22:41 - 2014-07-16 22:41 - 00000000 _SHDL () C:\Users\UpdatusUser\Documents\Eigene Bilder
2014-07-16 22:41 - 2014-07-16 22:41 - 00000000 _SHDL () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-07-16 22:41 - 2014-07-16 22:41 - 00000000 _SHDL () C:\Users\UpdatusUser\AppData\Local\Verlauf
2014-07-16 22:41 - 2014-07-16 22:41 - 00000000 _SHDL () C:\Users\UpdatusUser\AppData\Local\Anwendungsdaten
2014-07-16 22:41 - 2014-07-16 22:41 - 00000000 _SHDL () C:\Users\UpdatusUser\Anwendungsdaten
2014-07-16 22:41 - 2014-07-16 22:41 - 00000000 _SHDL () C:\Users\Katharina\Vorlagen
2014-07-16 22:41 - 2014-07-16 22:41 - 00000000 _SHDL () C:\Users\Katharina\Startmenü
2014-07-16 22:41 - 2014-07-16 22:41 - 00000000 _SHDL () C:\Users\Katharina\Netzwerkumgebung
2014-07-16 22:41 - 2014-07-16 22:41 - 00000000 _SHDL () C:\Users\Katharina\Lokale Einstellungen
2014-07-16 22:41 - 2014-07-16 22:41 - 00000000 _SHDL () C:\Users\Katharina\Eigene Dateien
2014-07-16 22:41 - 2014-07-16 22:41 - 00000000 _SHDL () C:\Users\Katharina\Druckumgebung
2014-07-16 22:41 - 2014-07-16 22:41 - 00000000 _SHDL () C:\Users\Katharina\Documents\Eigene Musik
2014-07-16 22:41 - 2014-07-16 22:41 - 00000000 _SHDL () C:\Users\Katharina\Documents\Eigene Bilder
2014-07-16 22:41 - 2014-07-16 22:41 - 00000000 _SHDL () C:\Users\Katharina\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-07-16 22:41 - 2014-07-16 22:41 - 00000000 _SHDL () C:\Users\Katharina\AppData\Local\Verlauf
2014-07-16 22:41 - 2014-07-16 22:41 - 00000000 _SHDL () C:\Users\Katharina\AppData\Local\Anwendungsdaten
2014-07-16 22:41 - 2014-07-16 22:41 - 00000000 _SHDL () C:\Users\Katharina\Anwendungsdaten
         

2014-07-16 22:41 - 2014-03-18 12:11 - 00000369 _____ () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk
2014-07-16 22:41 - 2014-03-18 12:11 - 00000369 _____ () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk
2014-07-16 22:41 - 2014-03-18 12:11 - 00000369 _____ () C:\Users\Katharina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk
2014-07-16 22:41 - 2014-03-18 12:11 - 00000369 _____ () C:\Users\Katharina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk
2014-07-16 22:41 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-07-16 22:41 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Katharina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-07-16 22:41 - 2013-08-22 17:36 - 00000000 ____D () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-07-16 22:41 - 2013-08-22 17:36 - 00000000 ____D () C:\Users\Katharina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-07-16 22:33 - 2014-07-16 22:43 - 00000000 ____D () C:\Program Files\Intel
2014-07-16 22:33 - 2014-07-16 22:33 - 00000264 _____ () C:\WINDOWS\Tasks\Synaptics TouchPad Enhancements.job
2014-07-16 22:33 - 2014-07-16 22:33 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2014-07-16 22:33 - 2014-07-16 22:33 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_Kernel_SynTP_01011.Wdf
2014-07-16 22:33 - 2014-07-16 22:33 - 00000000 ____D () C:\Program Files (x86)\USB Camera
2014-07-16 22:33 - 2013-06-11 18:42 - 00064000 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.DLL
2014-07-16 22:33 - 2013-06-11 18:42 - 00060416 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.DLL
2014-07-16 22:32 - 2014-07-16 22:32 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_Kernel_Smb_driver_Intel_01011.Wdf
2014-07-16 22:32 - 2014-07-16 22:32 - 00000000 ____D () C:\Program Files\Synaptics
2014-07-16 21:59 - 2014-07-17 06:49 - 00006580 _____ () C:\WINDOWS\comsetup.log
2014-07-16 13:42 - 2014-07-16 18:12 - 00014889 _____ () C:\Users\Katharina\Desktop\Vorratsliste.ods
2014-07-12 11:40 - 2014-07-21 16:26 - 00000000 ___SD () C:\WINDOWS\system32\CompatTel
2014-07-08 19:26 - 2014-07-08 20:17 - 00032202 _____ () C:\Users\Katharina\Desktop\Lipödem.odt
2014-07-05 21:44 - 2014-07-05 21:45 - 00001102 _____ () C:\DelFix.txt
2014-07-05 21:44 - 2014-07-05 21:44 - 00000000 ____D () C:\WINDOWS\ERUNT
2014-07-02 18:58 - 2014-07-02 18:58 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-07-02 18:57 - 2014-07-02 18:58 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Katharina\Downloads\mbam-setup-2.0.2.1012.exe
2014-07-01 18:30 - 2014-07-01 18:42 - 00017536 _____ () C:\Users\Katharina\Desktop\Menüpläne.odt
2014-07-01 09:39 - 2014-07-16 22:46 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDFCreator
2014-07-01 09:39 - 2014-07-01 09:39 - 00001046 _____ () C:\Users\Public\Desktop\PDFCreator.lnk
2014-07-01 09:39 - 2014-07-01 09:39 - 00000000 ____D () C:\ProgramData\PDF Architect 2
2014-07-01 09:38 - 2014-07-01 09:39 - 00000000 ____D () C:\Program Files (x86)\PDFCreator
2014-07-01 09:38 - 2014-04-25 17:44 - 00137000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSMAPI32.OCX
2014-07-01 09:38 - 2014-04-25 17:44 - 00110264 _____ (pdfforge GmbH) C:\WINDOWS\system32\pdfcmon.dll
2014-07-01 09:38 - 2014-04-25 17:44 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSMPIDE.DLL
2014-07-01 09:38 - 1998-07-06 18:56 - 00125712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VB6DE.DLL
2014-07-01 09:38 - 1998-07-06 18:55 - 00158208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSCMCDE.DLL
2014-07-01 09:38 - 1998-07-06 18:55 - 00064512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSCC2DE.DLL
2014-07-01 09:17 - 2013-09-01 12:59 - 01103872 _____ () C:\WINDOWS\SysWOW64\CBLCtlsU.ocx
2014-07-01 09:17 - 2013-07-13 12:15 - 00805376 _____ () C:\WINDOWS\SysWOW64\EditCtlsU.ocx
2014-07-01 09:17 - 2013-07-12 22:57 - 00539648 _____ () C:\WINDOWS\SysWOW64\LblCtlsU.ocx
2014-07-01 09:17 - 2013-04-05 13:55 - 00476160 _____ () C:\WINDOWS\SysWOW64\TabStripCtlU.ocx
2014-07-01 09:17 - 2013-03-28 23:13 - 00645632 _____ () C:\WINDOWS\SysWOW64\BtnCtlsU.ocx
2014-07-01 09:17 - 2013-03-03 14:37 - 01061888 _____ () C:\WINDOWS\SysWOW64\ExLvwU.ocx
2014-07-01 09:04 - 2014-07-01 09:04 - 00000000 ____D () C:\ProgramData\boost_interprocess
2014-06-30 20:56 - 2014-06-30 20:56 - 00000000 ____D () C:\Users\Katharina\dwhelper
2014-06-30 20:42 - 2014-07-16 22:46 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Free Audio Pack
2014-06-30 20:42 - 2014-06-30 20:42 - 00001329 _____ () C:\Users\Katharina\Desktop\Easy Audio Cutter.lnk
2014-06-30 20:42 - 2014-06-30 20:42 - 00001313 _____ () C:\Users\Katharina\Desktop\Free CD Ripper.lnk
2014-06-30 20:42 - 2014-06-30 20:42 - 00001311 _____ () C:\Users\Katharina\Desktop\Free Mp3 Wma Converter.lnk
2014-06-30 20:42 - 2014-06-30 20:42 - 00000000 ____D () C:\Users\Katharina\AppData\Roaming\FreeAudioPack
2014-06-30 20:42 - 2014-06-30 20:42 - 00000000 ____D () C:\Program Files (x86)\Free mp3 Wma Converter
2014-06-30 20:42 - 2014-04-25 17:44 - 01070152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSCOMCTL.OCX
2014-06-30 20:42 - 2011-09-29 14:20 - 02084864 _____ (NCT Company Ltd.) C:\WINDOWS\SysWOW64\AudDesign.dll
2014-06-30 20:42 - 2011-09-29 14:20 - 01986560 _____ (NCT Company Ltd.) C:\WINDOWS\SysWOW64\AudFile.dll
2014-06-30 20:42 - 2011-09-29 14:20 - 01212416 _____ (NCT Company Ltd.) C:\WINDOWS\SysWOW64\AudioInfos.dll
2014-06-30 20:42 - 2011-09-29 14:20 - 00484352 _____ () C:\WINDOWS\SysWOW64\lame_enc.dll
2014-06-30 20:42 - 2011-09-29 14:20 - 00479232 _____ (NCT Company Ltd.) C:\WINDOWS\SysWOW64\AudioVisu.dll
2014-06-30 20:42 - 2011-09-29 14:20 - 00458752 _____ (NCT Company Ltd.) C:\WINDOWS\SysWOW64\AudPlayer.dll
2014-06-30 20:42 - 2011-09-29 14:20 - 00454656 _____ (NCT Company Ltd.) C:\WINDOWS\SysWOW64\AudioRecord.dll
2014-06-30 20:42 - 2011-09-29 14:20 - 00417792 _____ (NCT Company Ltd.) C:\WINDOWS\SysWOW64\AudDisplay.dll
2014-06-30 20:42 - 2011-09-29 14:20 - 00348160 _____ (NCT Company Ltd.) C:\WINDOWS\SysWOW64\WMAFile.dll
2014-06-30 20:42 - 2011-09-29 14:20 - 00307200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcr70.dll
2014-06-30 20:42 - 2011-09-29 14:20 - 00164144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\COMCT232.OCX
2014-06-30 20:42 - 2011-09-29 14:20 - 00116296 _____ () C:\WINDOWS\SysWOW64\NCTWMAProfiles.prx
2014-06-30 20:42 - 2011-09-29 14:19 - 00662288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSCOMCT2.OCX
2014-06-30 20:42 - 2011-09-29 14:19 - 00224016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TABCTL32.OCX
2014-06-30 20:42 - 2011-09-29 14:19 - 00152848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\COMDLG32.OCX
2014-06-30 20:42 - 2011-09-29 14:19 - 00141312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSCMCFR.DLL
2014-06-30 20:42 - 2011-09-29 14:19 - 00119568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VB6FR.DLL
2014-06-30 20:42 - 2011-09-29 14:19 - 00115920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msinet.OCX
2014-06-30 20:42 - 2011-09-29 14:19 - 00101888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VB6STKIT.DLL
2014-06-30 20:42 - 2011-09-29 14:19 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Mscc2fr.dll
2014-06-30 20:42 - 2011-09-29 14:19 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CMDLGFR.DLL
2014-06-30 20:42 - 2011-09-29 14:19 - 00021504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TABCTFR.DLL
2014-06-30 20:42 - 2011-09-29 14:19 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetfr.DLL
2014-06-30 20:32 - 2014-06-30 20:32 - 00001163 _____ () C:\Users\Katharina\Desktop\Amazon Music.lnk
2014-06-30 20:31 - 2014-06-30 20:31 - 38534920 _____ (Amazon) C:\Users\Katharina\Downloads\AmazonMusicInstaller.exe
2014-06-30 20:26 - 2014-06-30 20:27 - 09659608 _____ () C:\Users\Katharina\Downloads\AmazonMusicImporterInstaller-2.1.0._V337128703_.exe
2014-06-30 17:25 - 2014-06-30 17:25 - 00015074 _____ () C:\Users\Katharina\Documents\Saisonkalender_Obst_Gemüse.odt
2014-06-30 16:28 - 2014-06-30 16:28 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf
2014-06-30 15:58 - 2014-07-23 22:16 - 01853538 _____ () C:\Users\Katharina\Documents\Unbenannt 1.odt
2014-06-29 09:34 - 2014-06-30 20:27 - 00000000 ____D () C:\Users\Katharina\AppData\Local\Adobe
2014-06-27 20:26 - 2014-06-27 20:26 - 00000000 ____D () C:\Users\Katharina\AppData\Local\Macromedia
2014-06-26 21:02 - 2014-06-26 21:02 - 00955246 _____ () C:\Users\Katharina\Desktop\Hochzeitstag 26082014.MVM
2014-06-26 20:59 - 2014-06-26 20:59 - 00000000 ____D () C:\Users\Katharina\AppData\Local\CrashDumps
2014-06-26 20:43 - 2014-06-26 20:43 - 00000000 ____D () C:\Users\Katharina\AppData\Roaming\WebApp
2014-06-26 20:40 - 2014-06-26 20:40 - 00000000 ____D () C:\Users\Katharina\Documents\Lenovo
2014-06-26 20:40 - 2014-06-26 20:40 - 00000000 ____D () C:\Users\Katharina\Documents\CyberLink
2014-06-26 20:40 - 2014-06-26 20:40 - 00000000 ____D () C:\Users\Katharina\AppData\Roaming\Lenovo
2014-06-26 20:40 - 2014-06-26 20:40 - 00000000 ____D () C:\Users\Katharina\AppData\Roaming\CyberLink
2014-06-26 13:32 - 2014-06-26 20:50 - 00023040 ___SH () C:\Users\Katharina\Downloads\Thumbs.db
2014-06-26 13:30 - 2014-07-16 22:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MAGIX
2014-06-26 13:30 - 2014-06-26 13:31 - 00000000 ____D () C:\ProgramData\MAGIX
2014-06-26 13:30 - 2014-06-26 13:30 - 00001051 _____ () C:\Users\Public\Desktop\MAGIX Slideshow Maker 2.lnk
2014-06-26 13:30 - 2014-06-26 13:30 - 00000000 ____D () C:\Users\Katharina\Documents\MAGIX
2014-06-26 13:30 - 2014-06-26 13:30 - 00000000 ____D () C:\Program Files (x86)\MAGIX
2014-06-26 13:27 - 2014-06-26 13:31 - 00000000 ____D () C:\Users\Katharina\AppData\Roaming\MAGIX
2014-06-26 13:09 - 2014-06-26 13:10 - 00000000 ____D () C:\Users\Katharina\AppData\Local\AquaSoft
2014-06-26 13:09 - 2014-06-26 13:09 - 00000000 ____D () C:\Users\Katharina\AppData\Roaming\AquaSoft
2014-06-24 17:24 - 2014-07-21 16:53 - 00167936 ___SH () C:\Users\Katharina\Desktop\Thumbs.db
2014-06-24 16:40 - 2014-06-24 16:40 - 00000000 ____D () C:\sources
2014-06-24 16:39 - 2014-07-10 09:53 - 00000000 ____D () C:\Users\UpdatusUser\AppData\Local\CrashDumps

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-07-24 21:34 - 2014-07-24 18:12 - 00015056 _____ () C:\Users\Katharina\Downloads\FRST.txt
2014-07-24 21:34 - 2014-07-24 18:11 - 00000000 ____D () C:\FRST
2014-07-24 21:32 - 2014-07-24 21:32 - 00003320 _____ () C:\Users\Katharina\Desktop\mbam.txt
2014-07-24 21:31 - 2014-03-18 12:03 - 01780340 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2014-07-24 21:31 - 2014-03-18 11:25 - 00766620 _____ () C:\WINDOWS\system32\perfh007.dat
2014-07-24 21:31 - 2014-03-18 11:25 - 00159902 _____ () C:\WINDOWS\system32\perfc007.dat
2014-07-24 21:28 - 2014-07-17 07:21 - 00000000 __RDO () C:\Users\Katharina\OneDrive
2014-07-24 21:27 - 2014-07-24 21:15 - 00122584 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2014-07-24 21:26 - 2014-03-18 03:50 - 00013646 _____ () C:\WINDOWS\PFRO.log
2014-07-24 21:26 - 2014-02-12 16:15 - 00002560 _____ () C:\WINDOWS\system32\VfService.trf
2014-07-24 21:26 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\Globalization
2014-07-24 21:26 - 2013-08-22 16:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2014-07-24 21:15 - 2014-07-24 21:15 - 00001129 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-07-24 21:15 - 2014-07-24 21:15 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-07-24 21:15 - 2014-07-24 21:14 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Katharina\Downloads\mbam-setup-2.0.2.1012(2).exe
2014-07-24 21:12 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\NDF
2014-07-24 21:11 - 2014-07-24 21:11 - 00000144 _____ () C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2014-07-24 21:10 - 2013-08-22 15:25 - 00262144 ___SH () C:\WINDOWS\system32\config\BBI
2014-07-24 21:09 - 2014-07-24 21:07 - 00000000 ____D () C:\AdwCleaner
2014-07-24 21:07 - 2014-07-24 21:07 - 01354223 _____ () C:\Users\Katharina\Downloads\adwcleaner_3.216.exe
2014-07-24 21:02 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\sru
2014-07-24 20:57 - 2014-07-24 18:12 - 00022408 _____ () C:\Users\Katharina\Downloads\Addition.txt
2014-07-24 20:39 - 2014-07-24 20:39 - 02093568 _____ (Farbar) C:\Users\Katharina\Downloads\FRST64(1).exe
2014-07-24 18:43 - 2014-06-21 19:34 - 00003600 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3349096550-3144467483-3537340833-1002
2014-07-24 18:38 - 2014-07-24 18:38 - 01084416 _____ (Farbar) C:\Users\Katharina\Downloads\FRST.exe
2014-07-24 18:21 - 2014-07-24 18:21 - 01110476 _____ () C:\Users\Katharina\Downloads\7z920.exe
2014-07-24 18:21 - 2014-07-17 06:49 - 01137003 _____ () C:\WINDOWS\WindowsUpdate.log
2014-07-24 18:10 - 2014-07-24 18:10 - 02093568 _____ (Farbar) C:\Users\Katharina\Downloads\FRST64.exe
2014-07-24 18:10 - 2014-07-24 18:10 - 00000017 _____ () C:\Users\Katharina\AppData\Local\resmon.resmoncfg
2014-07-24 17:58 - 2014-06-21 19:27 - 00000000 ____D () C:\Users\Katharina\Documents\Bluetooth Folder
2014-07-24 17:55 - 2013-08-22 15:25 - 00262144 ___SH () C:\WINDOWS\system32\config\ELAM
2014-07-24 17:46 - 2014-07-24 17:46 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Katharina\Downloads\mbam-setup-2.0.2.1012(1).exe
2014-07-24 17:43 - 2014-07-24 17:43 - 00000451 _____ () C:\WINDOWS\system32\{F33C3B9B-72AF-418A-B3FD-560646F7CDA2}.bat
2014-07-24 17:42 - 2014-06-21 19:45 - 00000000 ____D () C:\Program Files (x86)\Avira
2014-07-24 17:41 - 2014-06-21 19:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2014-07-24 17:30 - 2014-07-24 17:30 - 00000000 ____D () C:\Users\Katharina\AppData\Roaming\Digiarty
2014-07-24 17:29 - 2014-07-24 17:28 - 00000163 _____ () C:\WINDOWS\Reimage.ini
2014-07-24 17:28 - 2014-07-24 17:28 - 00000133 _____ () C:\Users\Katharina\Desktop\Amazon.de.url
2014-07-24 17:28 - 2014-07-24 17:28 - 00000000 ____D () C:\Users\Katharina\Downloads\winx-dvd-author
2014-07-24 17:28 - 2014-07-24 17:28 - 00000000 ____D () C:\Users\Katharina\AppData\Local\Google
2014-07-24 17:06 - 2014-07-16 22:41 - 00000000 ____D () C:\Users\Katharina
2014-07-23 22:16 - 2014-06-30 15:58 - 01853538 _____ () C:\Users\Katharina\Documents\Unbenannt 1.odt
2014-07-23 22:12 - 2014-07-23 22:12 - 01459302 _____ () C:\Users\Katharina\Desktop\Slideshow 2014-07-23.MVM
2014-07-23 21:59 - 2014-06-21 19:45 - 00001164 _____ () C:\Users\Public\Desktop\Avira.lnk
2014-07-23 21:59 - 2014-06-21 19:45 - 00000000 ____D () C:\ProgramData\Package Cache
2014-07-23 20:54 - 2014-07-23 20:51 - 00016384 ___SH () C:\Users\Katharina\Documents\Thumbs.db
2014-07-23 14:39 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\AppReadiness
2014-07-21 16:53 - 2014-06-24 17:24 - 00167936 ___SH () C:\Users\Katharina\Desktop\Thumbs.db
2014-07-21 16:42 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\rescache
2014-07-21 16:26 - 2014-07-12 11:40 - 00000000 ___SD () C:\WINDOWS\system32\CompatTel
2014-07-21 16:26 - 2012-07-26 09:59 - 00000000 ____D () C:\WINDOWS\CbsTemp
2014-07-20 16:50 - 2014-07-16 23:29 - 00000000 ____D () C:\Windows.old
2014-07-20 13:01 - 2014-07-20 13:01 - 00000000 ___RD () C:\WINDOWS\BrowserChoice
2014-07-20 13:01 - 2014-06-21 19:26 - 00000000 ____D () C:\Users\Katharina\AppData\Local\Packages
2014-07-20 13:00 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\restore
2014-07-18 21:34 - 2014-07-16 23:30 - 00000000 ___DC () C:\WINDOWS\Panther
2014-07-17 19:34 - 2013-08-22 16:46 - 00325967 _____ () C:\WINDOWS\setupact.log
2014-07-17 11:18 - 2014-07-17 11:18 - 00000000 ____D () C:\WINDOWS\SysWOW64\NV
2014-07-17 11:18 - 2014-07-17 11:18 - 00000000 ____D () C:\WINDOWS\system32\NV
2014-07-17 11:18 - 2014-07-17 11:18 - 00000000 ____D () C:\Program Files\Common Files\Atheros
2014-07-17 11:18 - 2014-02-12 15:53 - 00000000 ____D () C:\Program Files (x86)\Bluetooth Suite
2014-07-17 11:18 - 2014-02-12 15:48 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-07-17 11:18 - 2013-08-22 16:46 - 00000262 _____ () C:\WINDOWS\setuperr.log
2014-07-17 11:17 - 2014-02-12 15:47 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2014-07-17 07:19 - 2014-07-17 07:19 - 00001465 _____ () C:\Users\Katharina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-07-17 07:19 - 2014-07-17 07:19 - 00000020 ___SH () C:\Users\Katharina\ntuser.ini
2014-07-17 06:50 - 2014-07-17 06:50 - 00000000 _SHDL () C:\Users\Default\Vorlagen
2014-07-17 06:50 - 2014-07-17 06:50 - 00000000 _SHDL () C:\Users\Default\Startmenü
2014-07-17 06:50 - 2014-07-17 06:50 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung
2014-07-17 06:50 - 2014-07-17 06:50 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen
2014-07-17 06:50 - 2014-07-17 06:50 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien
2014-07-17 06:50 - 2014-07-17 06:50 - 00000000 _SHDL () C:\Users\Default\Druckumgebung
2014-07-17 06:50 - 2014-07-17 06:50 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik
2014-07-17 06:50 - 2014-07-17 06:50 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder
2014-07-17 06:50 - 2014-07-17 06:50 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-07-17 06:50 - 2014-07-17 06:50 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf
2014-07-17 06:50 - 2014-07-17 06:50 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten
2014-07-17 06:50 - 2014-07-17 06:50 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten
2014-07-17 06:50 - 2014-07-17 06:50 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik
2014-07-17 06:50 - 2014-07-17 06:50 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder
2014-07-17 06:50 - 2014-07-17 06:50 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-07-17 06:50 - 2014-07-17 06:50 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf
2014-07-17 06:50 - 2014-07-17 06:50 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten
2014-07-17 06:50 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files\Windows NT
2014-07-17 06:50 - 2013-08-22 15:36 - 00000000 __RHD () C:\Users\Default
2014-07-17 06:49 - 2014-07-17 06:49 - 00022960 _____ () C:\WINDOWS\system32\emptyregdb.dat
2014-07-17 06:49 - 2014-07-16 22:41 - 00032388 _____ () C:\WINDOWS\diagwrn.xml
2014-07-17 06:49 - 2014-07-16 22:41 - 00032388 _____ () C:\WINDOWS\diagerr.xml
2014-07-17 06:49 - 2014-07-16 21:59 - 00006580 _____ () C:\WINDOWS\comsetup.log
2014-07-17 06:49 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\Registration
2014-07-17 06:47 - 2014-02-12 15:50 - 01804472 _____ () C:\WINDOWS\SysWOW64\PerfStringBackup.INI
2014-07-17 06:46 - 2013-08-22 17:36 - 00000000 __RSD () C:\WINDOWS\Media
2014-07-17 06:46 - 2013-08-22 17:36 - 00000000 __RHD () C:\Users\Public\Libraries
2014-07-17 06:44 - 2014-07-17 06:44 - 00000020 ___SH () C:\Users\UpdatusUser\ntuser.ini
2014-07-16 23:29 - 2014-07-16 23:29 - 00308224 _____ (Microsoft Corporation) C:\WINDOWS\system32\wusa.exe
2014-07-16 23:29 - 2014-07-16 23:29 - 00305152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wusa.exe
2014-07-16 23:29 - 2013-08-22 17:36 - 00262144 _____ () C:\WINDOWS\system32\config\BCD-Template
2014-07-16 23:28 - 2014-07-16 23:28 - 03118080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Wpc.dll
2014-07-16 23:28 - 2014-07-16 23:28 - 03048904 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcMon.exe
2014-07-16 23:28 - 2014-07-16 23:28 - 02861056 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebSync.dll
2014-07-16 23:28 - 2014-07-16 23:28 - 02834944 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpccpl.dll
2014-07-16 23:28 - 2014-07-16 23:28 - 02344448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Wpc.dll
2014-07-16 23:28 - 2014-07-16 23:28 - 01336648 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll
2014-07-16 23:28 - 2014-07-16 23:28 - 01064448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll
2014-07-16 23:28 - 2014-07-16 23:28 - 00295424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ks.sys
2014-07-16 23:28 - 2014-07-16 23:28 - 00055328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wpcfltr.sys
2014-07-16 23:28 - 2013-08-22 17:36 - 00000000 ___RD () C:\WINDOWS\ToastData
2014-07-16 23:27 - 2014-07-16 23:27 - 23464448 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 17276416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 13527040 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 11742208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 05721088 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 04254720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 02768384 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 02266112 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 02179072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 02040832 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2014-07-16 23:27 - 2014-07-16 23:27 - 01964544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2014-07-16 23:27 - 2014-07-16 23:27 - 01791488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 01393664 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 01139200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 00846336 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 00752640 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 00704512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 00631808 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 00608768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2014-07-16 23:27 - 2014-07-16 23:27 - 00592896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 00526336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 00452608 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtmsft.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 00367616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtmsft.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 00292864 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 00250880 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 00239616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 00225280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 00195584 _____ (Microsoft Corporation) C:\WINDOWS\system32\msrating.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 00164864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrating.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 00139264 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieUnatt.exe
2014-07-16 23:27 - 2014-07-16 23:27 - 00112128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieUnatt.exe
2014-07-16 23:27 - 2014-07-16 23:27 - 00111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollector.exe
2014-07-16 23:27 - 2014-07-16 23:27 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesetup.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieetwproxystub.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwproxystub.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iernonce.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 00004096 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollectorres.dll
2014-07-16 23:27 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\setup
2014-07-16 23:26 - 2014-07-16 23:26 - 02900992 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 02641920 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 02479616 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmSvc.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 02373784 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2014-07-16 23:26 - 2014-07-16 23:26 - 02331000 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 02317824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 02270208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 02141912 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 02133504 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 02088160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2014-07-16 23:26 - 2014-07-16 23:26 - 02030080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WsmSvc.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 02013016 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2014-07-16 23:26 - 2014-07-16 23:26 - 01843712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Display.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 01816576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Display.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 01779800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 01764864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 01679128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 01656832 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 01557848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2014-07-16 23:26 - 2014-07-16 23:26 - 01542768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 01351168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 01306624 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 01291200 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel32.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 01112536 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 01095488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 01063424 _____ (Microsoft Corporation) C:\WINDOWS\system32\IKEEXT.DLL
2014-07-16 23:26 - 2014-07-16 23:26 - 01036288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kernel32.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 01015808 _____ (Microsoft Corporation) C:\WINDOWS\system32\aclui.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00950784 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgent.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00939520 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00924160 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00887296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aclui.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00836096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00834560 _____ (Microsoft Corporation) C:\WINDOWS\system32\netlogon.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00827392 _____ (Microsoft Corporation) C:\WINDOWS\system32\BFE.DLL
2014-07-16 23:26 - 2014-07-16 23:26 - 00800256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReAgent.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00755712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00717312 _____ (Microsoft Corporation) C:\WINDOWS\system32\nshwfp.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00688640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netlogon.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00669696 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasapi32.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00655360 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsapi.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00621568 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAgent.exe
2014-07-16 23:26 - 2014-07-16 23:26 - 00605184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasapi32.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00567296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nshwfp.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00542208 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.Printing.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00518552 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00512000 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidprov.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00494592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dnsapi.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00488280 _____ (Microsoft Corporation) C:\WINDOWS\system32\netcfgx.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00462336 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlangpui.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00412672 _____ (Microsoft Corporation) C:\WINDOWS\system32\FWPUCLNT.DLL
2014-07-16 23:26 - 2014-07-16 23:26 - 00406912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00402432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Graphics.Printing.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00390488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netcfgx.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00387210 _____ () C:\WINDOWS\system32\ApnDatabase.xml
2014-07-16 23:26 - 2014-07-16 23:26 - 00386560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlangpui.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00379224 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2014-07-16 23:26 - 2014-07-16 23:26 - 00376152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys
2014-07-16 23:26 - 2014-07-16 23:26 - 00360512 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfreadwrite.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00356864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlidprov.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00356848 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcomp.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00355832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfreadwrite.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00325632 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationApi.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00324096 _____ (Microsoft Corporation) C:\WINDOWS\system32\SessEnv.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00299008 _____ (Microsoft Corporation) C:\WINDOWS\system32\pdh.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00298496 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSDMon.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00291840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Sensors.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00283648 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb10.sys
2014-07-16 23:26 - 2014-07-16 23:26 - 00280576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SessEnv.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00274944 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmWmiPl.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00271872 _____ (Microsoft Corporation) C:\WINDOWS\system32\spp.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00264192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FWPUCLNT.DLL
2014-07-16 23:26 - 2014-07-16 23:26 - 00262656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LocationApi.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00254976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pdh.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00254464 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsrslvr.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00252928 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00247296 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsApi.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00226304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Sensors.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00222720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\spp.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00222720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dcomp.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00220160 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00212992 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdd.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00201216 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReInfo.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00197632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00192000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Scanners.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00186368 _____ (Microsoft Corporation) C:\WINDOWS\system32\dafWfdProvider.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00172544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReInfo.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00171008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SensorsApi.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00160768 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxAllUserStore.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00157016 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wof.sys
2014-07-16 23:26 - 2014-07-16 23:26 - 00151040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Scanners.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxdav.sys
2014-07-16 23:26 - 2014-07-16 23:26 - 00139776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxAllUserStore.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00136024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wfplwfs.sys
2014-07-16 23:26 - 2014-07-16 23:26 - 00134144 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dfsc.sys
2014-07-16 23:26 - 2014-07-16 23:26 - 00115200 _____ (Microsoft Corporation) C:\WINDOWS\system32\umpnpmgr.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00115200 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevPropMgr.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00113648 _____ (Microsoft Corporation) C:\WINDOWS\system32\userenv.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidclass.sys
2014-07-16 23:26 - 2014-07-16 23:26 - 00102912 _____ (Microsoft Corporation) C:\WINDOWS\system32\davclnt.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00094016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\userenv.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00086016 _____ (Microsoft Corporation) C:\WINDOWS\system32\RMapi.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\davclnt.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\sxproxy.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00079360 _____ (Microsoft Corporation) C:\WINDOWS\system32\w32tm.exe
2014-07-16 23:26 - 2014-07-16 23:26 - 00079360 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\IPMIDrv.sys
2014-07-16 23:26 - 2014-07-16 23:26 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\w32tm.exe
2014-07-16 23:26 - 2014-07-16 23:26 - 00069120 _____ (Microsoft Corporation) C:\WINDOWS\system32\l2gpstore.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\l2gpstore.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpipreg.sys
2014-07-16 23:26 - 2014-07-16 23:26 - 00040448 _____ (Microsoft Corporation) C:\WINDOWS\system32\SetNetworkLocation.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sxproxy.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidusb.sys
2014-07-16 23:26 - 2014-07-16 23:26 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredentialMigrationHandler.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredentialMigrationHandler.dll
2014-07-16 23:24 - 2014-07-16 23:24 - 16871936 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2014-07-16 23:24 - 2014-07-16 23:24 - 12711424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2014-07-16 23:24 - 2014-07-16 23:24 - 02518360 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2014-07-16 23:24 - 2014-07-16 23:24 - 01417216 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2014-07-16 23:24 - 2014-07-16 23:24 - 00735232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\adtschema.dll
2014-07-16 23:24 - 2014-07-16 23:24 - 00735232 _____ (Microsoft Corporation) C:\WINDOWS\system32\adtschema.dll
2014-07-16 23:24 - 2014-07-16 23:24 - 00565576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2014-07-16 23:24 - 2014-07-16 23:24 - 00467800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS
2014-07-16 23:24 - 2014-07-16 23:24 - 00440664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbport.sys
2014-07-16 23:24 - 2014-07-16 23:24 - 00436224 _____ (Microsoft Corporation) C:\WINDOWS\system32\certcli.dll
2014-07-16 23:24 - 2014-07-16 23:24 - 00423768 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll
2014-07-16 23:24 - 2014-07-16 23:24 - 00419672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbhub.sys
2014-07-16 23:24 - 2014-07-16 23:24 - 00323584 _____ (Microsoft Corporation) C:\WINDOWS\system32\DaOtpCredentialProvider.dll
2014-07-16 23:24 - 2014-07-16 23:24 - 00318976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certcli.dll
2014-07-16 23:24 - 2014-07-16 23:24 - 00284672 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUDFHost.exe
2014-07-16 23:24 - 2014-07-16 23:24 - 00270848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DaOtpCredentialProvider.dll
2014-07-16 23:24 - 2014-07-16 23:24 - 00227840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WUDFRd.sys
2014-07-16 23:24 - 2014-07-16 23:24 - 00216368 _____ (Microsoft Corporation) C:\WINDOWS\system32\rsaenh.dll
2014-07-16 23:24 - 2014-07-16 23:24 - 00209408 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUDFPlatform.dll
2014-07-16 23:24 - 2014-07-16 23:24 - 00189016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rsaenh.dll
2014-07-16 23:24 - 2014-07-16 23:24 - 00110592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WUDFPf.sys
2014-07-16 23:24 - 2014-07-16 23:24 - 00099840 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUDFSvc.dll
2014-07-16 23:24 - 2014-07-16 23:24 - 00089944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbehci.sys
2014-07-16 23:24 - 2014-07-16 23:24 - 00037376 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbuhci.sys
2014-07-16 23:24 - 2014-07-16 23:24 - 00027480 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbd.sys
2014-07-16 23:23 - 2014-07-16 23:23 - 13287936 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2014-07-16 23:23 - 2014-07-16 23:23 - 11792384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2014-07-16 23:23 - 2014-07-16 23:23 - 03463680 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2014-07-16 23:23 - 2014-07-16 23:23 - 01054208 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.appcore.dll
2014-07-16 23:23 - 2014-07-16 23:23 - 01018880 _____ (Microsoft Corporation) C:\WINDOWS\system32\termsrv.dll
2014-07-16 23:23 - 2014-07-16 23:23 - 00923136 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll
2014-07-16 23:23 - 2014-07-16 23:23 - 00828928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.appcore.dll
2014-07-16 23:23 - 2014-07-16 23:23 - 00827392 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2014-07-16 23:23 - 2014-07-16 23:23 - 00756224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll
2014-07-16 23:23 - 2014-07-16 23:23 - 00666624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2014-07-16 23:23 - 2014-07-16 23:23 - 00563200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\afd.sys
2014-07-16 23:23 - 2014-07-16 23:23 - 00555736 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.appcore.dll
2014-07-16 23:23 - 2014-07-16 23:23 - 00249344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2014-07-16 23:23 - 2014-07-16 23:23 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2014-07-16 23:23 - 2014-07-16 23:23 - 00093696 _____ (Microsoft Corporation) C:\WINDOWS\system32\wudriver.dll
2014-07-16 23:23 - 2014-07-16 23:23 - 00086688 _____ (Microsoft Corporation) C:\WINDOWS\system32\mrt_map.dll
2014-07-16 23:23 - 2014-07-16 23:23 - 00080896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wudriver.dll
2014-07-16 23:23 - 2014-07-16 23:23 - 00080032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mrt_map.dll
2014-07-16 23:23 - 2014-07-16 23:23 - 00054776 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2014-07-16 23:23 - 2014-07-16 23:23 - 00028320 _____ (Microsoft Corporation) C:\WINDOWS\system32\mrt100.dll
2014-07-16 23:23 - 2014-07-16 23:23 - 00026784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mrt100.dll
2014-07-16 23:23 - 2014-03-18 11:40 - 00000000 ____D () C:\Program Files\Windows Journal
2014-07-16 23:23 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\WinStore
2014-07-16 23:23 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\SecureBootUpdates
2014-07-16 23:22 - 2014-07-16 23:22 - 04190720 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2014-07-16 23:22 - 2014-07-16 23:22 - 03360256 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll
2014-07-16 23:22 - 2014-07-16 23:22 - 02151424 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3.dll
2014-07-16 23:22 - 2014-07-16 23:22 - 01975296 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWrite.dll
2014-07-16 23:22 - 2014-07-16 23:22 - 01509888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWrite.dll
2014-07-16 23:22 - 2014-07-16 23:22 - 01345536 _____ (Microsoft Corporation) C:\WINDOWS\system32\FntCache.dll
2014-07-16 23:22 - 2014-07-16 23:22 - 01312256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3.dll
2014-07-16 23:22 - 2014-07-16 23:22 - 00834048 _____ (Microsoft Corporation) C:\WINDOWS\system32\osk.exe
2014-07-16 23:22 - 2014-07-16 23:22 - 00779264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\osk.exe
2014-07-16 23:22 - 2014-07-16 23:22 - 00586240 _____ (Microsoft Corporation) C:\WINDOWS\system32\qedit.dll
2014-07-16 23:22 - 2014-07-16 23:22 - 00488960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qedit.dll
2014-07-16 23:22 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-07-16 23:22 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-07-16 23:21 - 2014-07-16 23:21 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2014-07-16 23:21 - 2014-07-16 23:21 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2014-07-16 23:21 - 2014-07-16 23:21 - 01705472 _____ (Microsoft Corporation) C:\WINDOWS\system32\wucltux.dll
2014-07-16 23:21 - 2014-07-16 23:21 - 00419928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.appcore.dll
2014-07-16 23:21 - 2014-07-16 23:21 - 00381440 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUSettingsProvider.dll
2014-07-16 23:21 - 2014-07-16 23:21 - 00201728 _____ (Microsoft Corporation) C:\WINDOWS\system32\ubpm.dll
2014-07-16 23:21 - 2014-07-16 23:21 - 00190976 _____ (Microsoft Corporation) C:\WINDOWS\system32\storewuauth.dll
2014-07-16 23:21 - 2014-07-16 23:21 - 00137728 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuwebv.dll
2014-07-16 23:21 - 2014-07-16 23:21 - 00123904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuwebv.dll
2014-07-16 23:21 - 2014-07-16 23:21 - 00079872 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSReset.exe
2014-07-16 23:21 - 2014-07-16 23:21 - 00056320 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups.dll
2014-07-16 23:21 - 2014-07-16 23:21 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapp.exe
2014-07-16 23:21 - 2014-07-16 23:21 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapp.exe
2014-07-16 23:21 - 2014-07-16 23:21 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wups.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 21268952 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 18755672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 08652800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 07425368 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2014-07-16 23:20 - 2014-07-16 23:20 - 07173120 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 06645248 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 05833216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Search.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 05774848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 05104640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 04269056 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncEngine.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 02688000 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 02144984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 02140888 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 02124840 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d9.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 02100736 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlowUI.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 01797896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d9.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 01584128 _____ (Microsoft Corporation) C:\WINDOWS\system32\workfolderssvc.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 01527296 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 01466856 _____ (Microsoft Corporation) C:\WINDOWS\system32\propsys.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 01436160 _____ (Microsoft Corporation) C:\WINDOWS\system32\VSSVC.exe
2014-07-16 23:20 - 2014-07-16 23:20 - 01403856 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 01379064 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpmde.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 01308160 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpsvc.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 01287168 _____ (Microsoft Corporation) C:\WINDOWS\system32\mispace.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 01230336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 01222656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Streaming.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 01209616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmde.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 01200288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\propsys.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 01200128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthport.sys
2014-07-16 23:20 - 2014-07-16 23:20 - 01126912 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFolder.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 01057280 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdvidcrl.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 01029120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mispace.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 01025024 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00982016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Streaming.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00955904 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00918528 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00888320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00881616 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00872448 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDrive.exe
2014-07-16 23:20 - 2014-07-16 23:20 - 00855552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdvidcrl.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00836608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchFolder.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00834048 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00805376 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00765408 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00761856 _____ (Microsoft Corporation) C:\WINDOWS\system32\WorkfoldersControl.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00721408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveTelemetry.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00718336 _____ (Microsoft Corporation) C:\WINDOWS\system32\swprv.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00707048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00677376 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys
2014-07-16 23:20 - 2014-07-16 23:20 - 00669856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00629760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmCoreR.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00609448 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00589656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fvevol.sys
2014-07-16 23:20 - 2014-07-16 23:20 - 00518544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00491744 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00491520 _____ (Microsoft Corporation) C:\WINDOWS\system32\GeofenceMonitorService.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00486912 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv
2014-07-16 23:20 - 2014-07-16 23:20 - 00467968 _____ (Microsoft Corporation) C:\WINDOWS\system32\srcore.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00467496 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00463256 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00462336 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsGdiConverter.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00449536 _____ (Microsoft Corporation) C:\WINDOWS\system32\defragsvc.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00443904 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansec.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00443904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\nwifi.sys
2014-07-16 23:20 - 2014-07-16 23:20 - 00428888 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS
2014-07-16 23:20 - 2014-07-16 23:20 - 00426496 _____ (Microsoft Corporation) C:\WINDOWS\system32\clusapi.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00407016 _____ (Microsoft Corporation) C:\WINDOWS\system32\services.exe
2014-07-16 23:20 - 2014-07-16 23:20 - 00406504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00402432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
2014-07-16 23:20 - 2014-07-16 23:20 - 00387896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00384856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spaceport.sys
2014-07-16 23:20 - 2014-07-16 23:20 - 00372568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storport.sys
2014-07-16 23:20 - 2014-07-16 23:20 - 00370176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv
2014-07-16 23:20 - 2014-07-16 23:20 - 00370176 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanmsm.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00364640 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00360792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fltMgr.sys
2014-07-16 23:20 - 2014-07-16 23:20 - 00357376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GeofenceMonitorService.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00337408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsGdiConverter.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00337240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Classpnp.sys
2014-07-16 23:20 - 2014-07-16 23:20 - 00335872 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDEServer.exe
2014-07-16 23:20 - 2014-07-16 23:20 - 00326024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00324888 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFCaptureEngine.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00323072 _____ (Microsoft Corporation) C:\WINDOWS\system32\srvsvc.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00313344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\clusapi.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00310616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\volsnap.sys
2014-07-16 23:20 - 2014-07-16 23:20 - 00307304 _____ (Microsoft Corporation) C:\WINDOWS\system32\wintrust.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00305768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00300544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanmsm.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00296960 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanapi.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00285144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFCaptureEngine.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00281600 _____ (Microsoft Corporation) C:\WINDOWS\system32\resutils.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00275800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msiscsi.sys
2014-07-16 23:20 - 2014-07-16 23:20 - 00271872 _____ (Microsoft Corporation) C:\WINDOWS\system32\rstrui.exe
2014-07-16 23:20 - 2014-07-16 23:20 - 00263424 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlows.exe
2014-07-16 23:20 - 2014-07-16 23:20 - 00257880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdFilter.sys
2014-07-16 23:20 - 2014-07-16 23:20 - 00250368 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpencom.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00246272 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srvnet.sys
2014-07-16 23:20 - 2014-07-16 23:20 - 00244880 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2014-07-16 23:20 - 2014-07-16 23:20 - 00233912 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00230808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wintrust.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanapi.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00219136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\resutils.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00209920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpencom.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00206848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys
2014-07-16 23:20 - 2014-07-16 23:20 - 00201920 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVideoDSP.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00201216 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00191488 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpchttp.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00186880 _____ (Microsoft Corporation) C:\WINDOWS\system32\WorkFoldersShell.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00180056 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2014-07-16 23:20 - 2014-07-16 23:20 - 00178184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVideoDSP.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00144384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpchttp.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00143872 _____ (Microsoft Corporation) C:\WINDOWS\system32\BootMenuUX.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00135168 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscsvc.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00130144 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpapi.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00125496 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmapi.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00123224 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdNisDrv.sys
2014-07-16 23:20 - 2014-07-16 23:20 - 00111528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gpapi.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00098584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmapi.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00077312 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hdaudbus.sys
2014-07-16 23:20 - 2014-07-16 23:20 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\system32\srclient.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsgqec.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\srclient.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00055296 _____ (Microsoft Corporation) C:\WINDOWS\system32\energyprov.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tsgqec.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00047616 _____ (Microsoft Corporation) C:\WINDOWS\system32\tlscsp.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00046592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tlscsp.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Shell.Search.UriHandler.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00035856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdBoot.sys
2014-07-16 23:20 - 2014-07-16 23:20 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Shell.Search.UriHandler.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00032600 _____ (Microsoft Corporation) C:\WINDOWS\system32\ploptin.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00028408 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfpmp.exe
2014-07-16 23:20 - 2014-07-16 23:20 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d8thk.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanhlp.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanhlp.dll
2014-07-16 23:20 - 2013-08-22 17:36 - 00000000 ___RD () C:\WINDOWS\ImmersiveControlPanel
2014-07-16 23:20 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-07-16 23:20 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-07-16 23:20 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files\Windows Defender
2014-07-16 23:20 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files (x86)\Windows Defender
2014-07-16 23:18 - 2014-07-16 23:18 - 00262144 _____ () C:\WINDOWS\system32\config\userdiff
2014-07-16 23:16 - 2014-07-16 23:16 - 00000000 ____D () C:\WINDOWS\SysWOW64\XPSViewer
2014-07-16 23:16 - 2014-07-16 23:16 - 00000000 ____D () C:\Program Files\Reference Assemblies
2014-07-16 23:16 - 2014-07-16 23:16 - 00000000 ____D () C:\Program Files\MSBuild
2014-07-16 23:16 - 2014-07-16 23:16 - 00000000 ____D () C:\Program Files (x86)\Reference Assemblies
2014-07-16 23:16 - 2014-07-16 23:16 - 00000000 ____D () C:\Program Files (x86)\MSBuild
2014-07-16 23:16 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\MUI
2014-07-16 23:16 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\MUI
2014-07-16 22:47 - 2013-08-22 16:44 - 00360464 _____ () C:\WINDOWS\system32\FNTCACHE.DAT
2014-07-16 22:46 - 2014-07-01 09:39 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDFCreator
2014-07-16 22:46 - 2014-06-30 20:42 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Free Audio Pack
2014-07-16 22:46 - 2014-06-21 19:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2014-07-16 22:46 - 2014-06-21 14:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\dm-Fotowelt
2014-07-16 22:46 - 2014-06-21 13:36 - 00000000 ___SD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.1.0
2014-07-16 22:46 - 2014-02-12 16:17 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneKey Recovery
2014-07-16 22:46 - 2014-02-12 16:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel AppUp(SM) center
2014-07-16 22:46 - 2014-02-12 16:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lenovo
2014-07-16 22:46 - 2014-02-12 15:52 - 00000000 ____D () C:\WINDOWS\SysWOW64\Atheros_L1e
2014-07-16 22:46 - 2014-02-12 15:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dolby
2014-07-16 22:46 - 2014-02-12 15:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2014-07-16 22:46 - 2014-02-12 15:44 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel
2014-07-16 22:46 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\system32\Sysprep
2014-07-16 22:44 - 2014-07-16 22:44 - 00001547 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2014-07-16 22:44 - 2014-07-16 22:44 - 00000000 ____D () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Lenovo
2014-07-16 22:44 - 2014-07-16 22:44 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Lenovo
2014-07-16 22:44 - 2014-06-26 13:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MAGIX
2014-07-16 22:44 - 2014-03-18 11:25 - 00000000 ____D () C:\WINDOWS\SysWOW64\WCN
2014-07-16 22:44 - 2014-03-18 11:25 - 00000000 ____D () C:\WINDOWS\SysWOW64\sysprep
2014-07-16 22:44 - 2014-03-18 11:25 - 00000000 ____D () C:\WINDOWS\system32\WCN
2014-07-16 22:44 - 2013-08-22 17:43 - 00000000 ____D () C:\WINDOWS\DigitalLocker
2014-07-16 22:44 - 2013-08-22 17:37 - 00004893 _____ () C:\WINDOWS\DtcInstall.log
2014-07-16 22:44 - 2013-08-22 17:36 - 00000000 __SHD () C:\Program Files (x86)\Windows Sidebar
2014-07-16 22:44 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\migwiz
2014-07-16 22:44 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\IME
2014-07-16 22:44 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\WinBioPlugIns
2014-07-16 22:44 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\spool
2014-07-16 22:44 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\IME
2014-07-16 22:44 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\IME
2014-07-16 22:44 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\Help
2014-07-16 22:44 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\SMI
2014-07-16 22:44 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\system32\oobe
2014-07-16 22:44 - 2013-03-25 23:03 - 00000000 ____D () C:\ProgramData\PRICache
2014-07-16 22:44 - 2012-07-26 07:37 - 00000000 ____D () C:\Users\Default.migrated
2014-07-16 22:43 - 2014-07-16 22:43 - 00000000 ____D () C:\WINDOWS\system32\config\bbimigrate
2014-07-16 22:43 - 2014-07-16 22:33 - 00000000 ____D () C:\Program Files\Intel
2014-07-16 22:43 - 2014-02-12 15:47 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2014-07-16 22:43 - 2013-08-22 17:36 - 00000000 __SHD () C:\Program Files\Windows Sidebar
2014-07-16 22:43 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\Recovery
2014-07-16 22:43 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared
2014-07-16 22:42 - 2014-07-16 22:41 - 00000000 ___RD () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-07-16 22:42 - 2014-07-16 22:41 - 00000000 ___RD () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-07-16 22:42 - 2014-07-16 22:41 - 00000000 ___RD () C:\Users\Katharina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-07-16 22:42 - 2014-07-16 22:41 - 00000000 ___RD () C:\Users\Katharina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-07-16 22:42 - 2014-06-21 19:26 - 00000000 ____D () C:\Users\Katharina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Lenovo
2014-07-16 22:42 - 2014-02-12 16:10 - 00000000 ____D () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Lenovo
2014-07-16 22:41 - 2014-07-16 22:41 - 00000000 _SHDL () C:\Users\UpdatusUser\Vorlagen
2014-07-16 22:41 - 2014-07-16 22:41 - 00000000 _SHDL () C:\Users\UpdatusUser\Startmenü
2014-07-16 22:41 - 2014-07-16 22:41 - 00000000 _SHDL () C:\Users\UpdatusUser\Netzwerkumgebung
2014-07-16 22:41 - 2014-07-16 22:41 - 00000000 _SHDL () C:\Users\UpdatusUser\Lokale Einstellungen
2014-07-16 22:41 - 2014-07-16 22:41 - 00000000 _SHDL () C:\Users\UpdatusUser\Eigene Dateien
2014-07-16 22:41 - 2014-07-16 22:41 - 00000000 _SHDL () C:\Users\UpdatusUser\Druckumgebung
2014-07-16 22:41 - 2014-07-16 22:41 - 00000000 _SHDL () C:\Users\UpdatusUser\Documents\Eigene Musik
2014-07-16 22:41 - 2014-07-16 22:41 - 00000000 _SHDL () C:\Users\UpdatusUser\Documents\Eigene Bilder
2014-07-16 22:41 - 2014-07-16 22:41 - 00000000 _SHDL () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-07-16 22:41 - 2014-07-16 22:41 - 00000000 _SHDL () C:\Users\UpdatusUser\AppData\Local\Verlauf
2014-07-16 22:41 - 2014-07-16 22:41 - 00000000 _SHDL () C:\Users\UpdatusUser\AppData\Local\Anwendungsdaten
2014-07-16 22:41 - 2014-07-16 22:41 - 00000000 _SHDL () C:\Users\UpdatusUser\Anwendungsdaten
2014-07-16 22:41 - 2014-07-16 22:41 - 00000000 _SHDL () C:\Users\Katharina\Vorlagen
2014-07-16 22:41 - 2014-07-16 22:41 - 00000000 _SHDL () C:\Users\Katharina\Startmenü
2014-07-16 22:41 - 2014-07-16 22:41 - 00000000 _SHDL () C:\Users\Katharina\Netzwerkumgebung
2014-07-16 22:41 - 2014-07-16 22:41 - 00000000 _SHDL () C:\Users\Katharina\Lokale Einstellungen
2014-07-16 22:41 - 2014-07-16 22:41 - 00000000 _SHDL () C:\Users\Katharina\Eigene Dateien
2014-07-16 22:41 - 2014-07-16 22:41 - 00000000 _SHDL () C:\Users\Katharina\Druckumgebung
2014-07-16 22:41 - 2014-07-16 22:41 - 00000000 _SHDL () C:\Users\Katharina\Documents\Eigene Musik
2014-07-16 22:41 - 2014-07-16 22:41 - 00000000 _SHDL () C:\Users\Katharina\Documents\Eigene Bilder
2014-07-16 22:41 - 2014-07-16 22:41 - 00000000 _SHDL () C:\Users\Katharina\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-07-16 22:41 - 2014-07-16 22:41 - 00000000 _SHDL () C:\Users\Katharina\AppData\Local\Verlauf
2014-07-16 22:41 - 2014-07-16 22:41 - 00000000 _SHDL () C:\Users\Katharina\AppData\Local\Anwendungsdaten
2014-07-16 22:41 - 2014-07-16 22:41 - 00000000 _SHDL () C:\Users\Katharina\Anwendungsdaten
2014-07-16 22:37 - 2014-07-16 23:15 - 00000000 ____D () C:\Recovery
2014-07-16 22:33 - 2014-07-16 22:33 - 00000264 _____ () C:\WINDOWS\Tasks\Synaptics TouchPad Enhancements.job
2014-07-16 22:33 - 2014-07-16 22:33 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2014-07-16 22:33 - 2014-07-16 22:33 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_Kernel_SynTP_01011.Wdf
2014-07-16 22:33 - 2014-07-16 22:33 - 00000000 ____D () C:\Program Files (x86)\USB Camera
2014-07-16 22:33 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\System
2014-07-16 22:32 - 2014-07-16 22:32 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_Kernel_Smb_driver_Intel_01011.Wdf
2014-07-16 22:32 - 2014-07-16 22:32 - 00000000 ____D () C:\Program Files\Synaptics
2014-07-16 22:04 - 2014-02-12 15:28 - 01061258 _____ () C:\WINDOWS\WindowsUpdate (1).log
2014-07-16 21:44 - 2012-07-26 10:12 - 00000000 ____D () C:\WINDOWS\AUInstallAgent
2014-07-16 18:12 - 2014-07-16 13:42 - 00014889 _____ () C:\Users\Katharina\Desktop\Vorratsliste.ods
2014-07-10 09:53 - 2014-06-24 16:39 - 00000000 ____D () C:\Users\UpdatusUser\AppData\Local\CrashDumps
2014-07-09 21:22 - 2014-06-22 11:38 - 00000000 ____D () C:\WINDOWS\system32\MRT
2014-07-09 21:21 - 2014-06-22 11:38 - 96441528 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2014-07-08 20:17 - 2014-07-08 19:26 - 00032202 _____ () C:\Users\Katharina\Desktop\Lipödem.odt
2014-07-05 21:45 - 2014-07-05 21:44 - 00001102 _____ () C:\DelFix.txt
2014-07-05 21:44 - 2014-07-05 21:44 - 00000000 ____D () C:\WINDOWS\ERUNT
2014-07-02 18:58 - 2014-07-02 18:58 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-07-02 18:58 - 2014-07-02 18:57 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Katharina\Downloads\mbam-setup-2.0.2.1012.exe
2014-07-02 11:37 - 2014-06-21 19:13 - 00000000 ____D () C:\Users\Katharina\AppData\Roaming\vlc
2014-07-01 18:42 - 2014-07-01 18:30 - 00017536 _____ () C:\Users\Katharina\Desktop\Menüpläne.odt
2014-07-01 09:39 - 2014-07-01 09:39 - 00001046 _____ () C:\Users\Public\Desktop\PDFCreator.lnk
2014-07-01 09:39 - 2014-07-01 09:39 - 00000000 ____D () C:\ProgramData\PDF Architect 2
2014-07-01 09:39 - 2014-07-01 09:38 - 00000000 ____D () C:\Program Files (x86)\PDFCreator
2014-07-01 09:04 - 2014-07-01 09:04 - 00000000 ____D () C:\ProgramData\boost_interprocess
2014-07-01 00:45 - 2014-07-20 16:21 - 00688128 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepdu.dll
2014-06-30 20:56 - 2014-06-30 20:56 - 00000000 ____D () C:\Users\Katharina\dwhelper
2014-06-30 20:42 - 2014-06-30 20:42 - 00001329 _____ () C:\Users\Katharina\Desktop\Easy Audio Cutter.lnk
2014-06-30 20:42 - 2014-06-30 20:42 - 00001313 _____ () C:\Users\Katharina\Desktop\Free CD Ripper.lnk
2014-06-30 20:42 - 2014-06-30 20:42 - 00001311 _____ () C:\Users\Katharina\Desktop\Free Mp3 Wma Converter.lnk
2014-06-30 20:42 - 2014-06-30 20:42 - 00000000 ____D () C:\Users\Katharina\AppData\Roaming\FreeAudioPack
2014-06-30 20:42 - 2014-06-30 20:42 - 00000000 ____D () C:\Program Files (x86)\Free mp3 Wma Converter
2014-06-30 20:42 - 2014-06-21 12:54 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-06-30 20:32 - 2014-06-30 20:32 - 00001163 _____ () C:\Users\Katharina\Desktop\Amazon Music.lnk
2014-06-30 20:31 - 2014-06-30 20:31 - 38534920 _____ (Amazon) C:\Users\Katharina\Downloads\AmazonMusicInstaller.exe
2014-06-30 20:27 - 2014-06-30 20:26 - 09659608 _____ () C:\Users\Katharina\Downloads\AmazonMusicImporterInstaller-2.1.0._V337128703_.exe
2014-06-30 20:27 - 2014-06-29 09:34 - 00000000 ____D () C:\Users\Katharina\AppData\Local\Adobe
2014-06-30 20:27 - 2014-06-21 19:26 - 00000000 ____D () C:\Users\Katharina\AppData\Roaming\Adobe
2014-06-30 17:25 - 2014-06-30 17:25 - 00015074 _____ () C:\Users\Katharina\Documents\Saisonkalender_Obst_Gemüse.odt
2014-06-30 16:28 - 2014-06-30 16:28 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf
2014-06-28 09:48 - 2014-07-20 16:21 - 00527360 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2014-06-28 09:07 - 2014-07-20 16:21 - 00385536 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2014-06-27 20:26 - 2014-06-27 20:26 - 00000000 ____D () C:\Users\Katharina\AppData\Local\Macromedia
2014-06-26 22:55 - 2013-08-22 17:38 - 00703968 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2014-06-26 22:55 - 2013-08-22 17:38 - 00105440 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2014-06-26 21:02 - 2014-06-26 21:02 - 00955246 _____ () C:\Users\Katharina\Desktop\Hochzeitstag 26082014.MVM
2014-06-26 20:59 - 2014-06-26 20:59 - 00000000 ____D () C:\Users\Katharina\AppData\Local\CrashDumps
2014-06-26 20:50 - 2014-06-26 13:32 - 00023040 ___SH () C:\Users\Katharina\Downloads\Thumbs.db
2014-06-26 20:43 - 2014-06-26 20:43 - 00000000 ____D () C:\Users\Katharina\AppData\Roaming\WebApp
2014-06-26 20:40 - 2014-06-26 20:40 - 00000000 ____D () C:\Users\Katharina\Documents\Lenovo
2014-06-26 20:40 - 2014-06-26 20:40 - 00000000 ____D () C:\Users\Katharina\Documents\CyberLink
2014-06-26 20:40 - 2014-06-26 20:40 - 00000000 ____D () C:\Users\Katharina\AppData\Roaming\Lenovo
2014-06-26 20:40 - 2014-06-26 20:40 - 00000000 ____D () C:\Users\Katharina\AppData\Roaming\CyberLink
2014-06-26 20:40 - 2014-02-12 16:15 - 00000000 ____D () C:\ProgramData\Lenovo
2014-06-26 20:40 - 2014-02-12 16:08 - 00000000 ____D () C:\ProgramData\CyberLink
2014-06-26 13:31 - 2014-06-26 13:30 - 00000000 ____D () C:\ProgramData\MAGIX
2014-06-26 13:31 - 2014-06-26 13:27 - 00000000 ____D () C:\Users\Katharina\AppData\Roaming\MAGIX
2014-06-26 13:30 - 2014-06-26 13:30 - 00001051 _____ () C:\Users\Public\Desktop\MAGIX Slideshow Maker 2.lnk
2014-06-26 13:30 - 2014-06-26 13:30 - 00000000 ____D () C:\Users\Katharina\Documents\MAGIX
2014-06-26 13:30 - 2014-06-26 13:30 - 00000000 ____D () C:\Program Files (x86)\MAGIX
2014-06-26 13:10 - 2014-06-26 13:09 - 00000000 ____D () C:\Users\Katharina\AppData\Local\AquaSoft
2014-06-26 13:09 - 2014-06-26 13:09 - 00000000 ____D () C:\Users\Katharina\AppData\Roaming\AquaSoft
2014-06-24 16:46 - 2014-06-21 13:05 - 00000000 ____D () C:\ProgramData\Adobe
2014-06-24 16:40 - 2014-06-24 16:40 - 00000000 ____D () C:\sources

Some content of TEMP:
====================
C:\Users\Katharina\AppData\Local\Temp\avgnt.exe
C:\Users\Katharina\AppData\Local\Temp\Quarantine.exe
C:\Users\Katharina\AppData\Local\Temp\ReimagePackage.exe
C:\Users\Katharina\AppData\Local\Temp\ReimageRepair.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-07-16 22:31

==================== End Of Log ============================
         

Hi

das MBam Logfile ist nicht das richtige...

Hat MBAM etwas gefunden?


Schritt 1:
Lade dir TFC (TempFileCleaner von Oldtimer) herunter und speichere es auf den Desktop.

• Öffne die TFC.exe.
  Vista und Win 7 User mit Rechtsklick "als Administrator starten".
• Schließe alle anderen Programme.
• Drücke auf den Button Start.
• Falls du zu einem Neustart aufgefordert wirst, bestätige diesen.

Schritt 2:

ESET Online Scanner

• Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
• Lade und starte Eset Online Scanner
• Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
• Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
• Klicke auf Starten.
• Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
• Klicke am Ende des Suchlaufs auf Fertig stellen.
• Schließe das Fenster von ESET.
• Explorer öffnen.
• C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
• Logfile hier posten.
• Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
• Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Hey Aneri,

hier nochmals das MBAM file

 Malwarebytes Anti-Malware 
www.malwarebytes.org

Suchlauf Datum: 27.07.2014
Suchlauf-Zeit: 15:24:48
Logdatei: mbam.txt
Administrator: Ja

Version: 2.00.2.1012
Malware Datenbank: v2014.07.27.05
Rootkit Datenbank: v2014.07.17.01
Lizenz: Testversion
Malware Schutz: Aktiviert
Bösartiger Webseiten Schutz: Aktiviert
Self-protection: Deaktiviert

Betriebssystem: Windows 8.1
CPU: x64
Dateisystem: NTFS
Benutzer: Katharina

Suchlauf-Art: Bedrohungs-Suchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 340166
Verstrichene Zeit: 13 Min, 30 Sek

Speicher: Aktiviert
Autostart: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Aktiviert
Heuristics: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

Prozesse: 0
(No malicious items detected)

Module: 0
(No malicious items detected)

Registrierungsschlüssel: 0
(No malicious items detected)

Registrierungswerte: 0
(No malicious items detected)

Registrierungsdaten: 0
(No malicious items detected)

Ordner: 0
(No malicious items detected)

Dateien: 0
(No malicious items detected)

Physische Sektoren: 0
(No malicious items detected)


(end)
         

ESETSmartInstaller@High as downloader log:
all ok
ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7623
# api_version=3.0.2
# EOSSerial=8c9ce0a8e6293a41941be3a8fdc1b998
# engine=19370
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2014-07-27 03:52:32
# local_time=2014-07-27 05:52:33 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1031
# osver=6.2.9200 NT 
# compatibility_mode_1=''
# compatibility_mode=5893 16776573 100 94 9611 2205806 0 0
# scanned=162437
# found=0
# cleaned=0
# scan_time=6606
         

ESETSmartInstaller@High as downloader log:
all ok
ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7623
# api_version=3.0.2
# EOSSerial=8c9ce0a8e6293a41941be3a8fdc1b998
# engine=19370
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2014-07-27 03:52:32
# local_time=2014-07-27 05:52:33 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1031
# osver=6.2.9200 NT 
# compatibility_mode_1=''
# compatibility_mode=5893 16776573 100 94 9611 2205806 0 0
# scanned=162437
# found=0
# cleaned=0
# scan_time=6606
         

Hallo Aneri,

sorry hier nochmals - mit deaktivierter Firewall - das Logfile.

Danke für Deine Hilfe!

ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7623
# api_version=3.0.2
# EOSSerial=8c9ce0a8e6293a41941be3a8fdc1b998
# engine=19370
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2014-07-27 05:09:14
# local_time=2014-07-27 07:09:14 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1031
# osver=6.2.9200 NT 
# compatibility_mode_1=''
# compatibility_mode=5893 16776573 100 94 14213 2210408 0 0
# scanned=162250
# found=0
# cleaned=0
# scan_time=3894
         

Hallo

besteht das Problem mit TroviSearch noch?

Schritt 1:
Downloade Dir bitte SecurityCheck und:

• Speichere es auf dem Desktop.
• Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
• Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.

Poste den Inhalt bitte hier.



Wenn hier alles gutaus sieht räumen wir noch auf und sichern das System ab.
Das Tool testet die wichtigsten Programme auf ihren aktuellen Stand

Hallo,

offensichtlich ist von Trovi nichts mehr zu sehen (es öffnet sich ganz normal Mozilla).

 Results of screen317's Security Check version 0.99.85  
   x64 (UAC is enabled)  
 Internet Explorer 11  
``````````````Antivirus/Firewall Check:`````````````` 
Windows Defender   
 WMI entry may not exist for antivirus; attempting automatic update. 
`````````Anti-malware/Other Utilities Check:````````` 
 Adobe Flash Player 	14.0.0.125  
 Adobe Reader XI  
 Mozilla Firefox (30.0) 
````````Process Check: objlist.exe by Laurent````````  
 Windows Defender MSMpEng.exe 
 Malwarebytes Anti-Malware mbamservice.exe  
 Malwarebytes Anti-Malware mbam.exe  
 Malwarebytes Anti-Malware mbamscheduler.exe   
 Windows Defender MpCmdRun.exe   
`````````````````System Health check````````````````` 
 Total Fragmentation on Drive C:  % 
````````````````````End of Log``````````````````````
         

Schritt 1:

Die Reihenfolge ist hier entscheidend.

1. Falls Defogger benutzt wurde: Defogger nochmal starten und auf re-enable klicken.
2. Falls Combofix benutzt wurde: (Alternativ in uninstall.exe umbenennen und starten)
   • Windowstaste + R > Combofix /Uninstall (eingeben) > OK
   • Alternative: Combofix.exe in uninstall.exe umbenennen und starten
   • Combofix wird jetzt starten, sich evtl updaten und dann alle Reste von sich selbst entfernen.
3. Downloade Dir bitte auf jeden Fall DelFix auf deinen Desktop:
   • Schließe alle offenen Programme.
   • Starte die delfix.exe mit einem Doppelklick.
   • Setze vor jede Funktion ein Häkchen.
   • Klicke auf Start.
   • Hinweis: DelFix entfernt u. a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst.
   • Starte deinen Rechner abschließend neu.
4. Sollten jetzt noch Programme aus unserer Bereinigung übrig sein kannst du sie bedenkenlos löschen.

zum Absichern:

Wunderbar dein System ist soweit ich das sehen kann sauber.

Hier noch ein paar Tipps zur Absicherung deines Systems.

Benutzerkonto Einstellungen:

Wir sehen immer wieder User mit Administratorrechten. Hier kann jeder Nutzer eines Windowsrechners schon die erste Türe schließen. Arbeite mit einem eingeschränkten Benutzerkonto anstelle eines Kontos mit Administratorrechten. Diese sind für das tägliche Arbeiten nicht nötig, und solltest du einmal Software installieren wollen wirst du im normalfall nach deinem Passwort gefragt.

Systemupdates:

Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.

• Bitte überprüfe ob dein System Windows Updates automatisch herunter lädt
• Windows Updates
  • Windows XP: Start --> Systemsteuerung --> Doppelklick auf Automatische Updates
  • Windows Vista / 7: Start --> Systemsteuerung --> System und Sicherheit --> Automatische Updates aktivieren oder deaktivieren
• Gehe sicher das die automatischen Updates aktiviert sind.
• Software Updates
  Installierte Software kann ebenfalls Sicherheitslücken haben, welche Malware nutzen kann, um dein System zu infizieren.
  Um deine Installierte Software up to date zu halten, empfehle ich dir Secunia Online Software.

Besonders Java erfährt zur Zeit regelmäßig sicherheitsrelevante Updates

Ältere Versionen enthalten Sicherheitslücken, die von Malware missbraucht werden können.

• Downloade dir bitte die neueste Java-Version von hier
• Speichere die jxpiinstall.exe
• Schließe alle laufenden Programme. Speziell deinen Browser.
• Starte die jxpiinstall.exe. Diese wird den Installer für die neueste Java Version ( Java 7 Update xx ) herunter laden.
• Entferne den Haken bei "Installieren Sie die Ask-Toolbar ..." während der Installation.
• Wenn die Installation beendet wurde
  Start --> Systemsteuerung --> Programme und deinstalliere alle älteren Java Versionen.
• Starte deinen Rechner neu sobald alle älteren Versionen deinstalliert wurden.

Nach dem Neustart

• Öffne erneut die Systemsteuerung --> Programme und klicke auf das Java Symbol.
• Im Reiter Allgemein, klicke unter Temporäre Internetdateien auf Einstellungen.
• Klicke auf Dateien löschen....
• Gehe sicher das überall ein Haken gesetzt ist und klicke OK.
• Klicke erneut OK.

schneller Plugin-Test: PluginCheck

Antivirensoftware

Anti- Viren Software

• Gehe sicher immer eine Anti Viren Software installiert zu haben und das diese auch up to date ist. Es ist nämlich nutzlos wenn diese out of date sind.

Zusätzlicher Schutz

• MalwareBytes Anti Malware
  Dies ist eines der besten Anti-Malware Tools auf dem Markt. Es ist ein On- Demond Scan Tool welches viele aktuelle Malware erkennt und auch entfernt.
  Update das Tool und lass es einmal in der Woche laufen. Die Kaufversion biete zudem noch einen Hintergrundwächter.
  Ein Tutorial zur Verwendung findest Du hier.
• WinPatrol
  Diese Software macht einen Snapshot deines Systems und warnt dich vor eventuellen Änderungen. Downloade dir die Freeware Version von hier.

Sicheres Browsen

• SpywareBlaster
  Eine kurze Einführung findest du Hier
• MVPs hosts file
  Ein Tutorial findest Du hier. Leider habe ich bis jetzt kein deutschsprachiges gefunden.
• WOT (Web of trust)
  Dieses AddOn warnt Dich bevor Du eine als schädlich gemeldete Seite besuchst.

alternatives Browsen

Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.

• Opera
• Mozilla Firefox.
  • Hinweis: Für diesen Browser habe ich hier ein paar nützliche Add Ons
  • NoScript
    Dieses AddOn blockt JavaScript, Java and Flash und andere Plugins. Sie werden nur dann ausgeführt wenn Du es bestätigst.
    
  • AdblockPlus
    Dieses AddOn blockt die meisten Werbung von selbst. Ein Rechtsklick auf den Banner um diesen zu AdBlockPlus hinzu zu fügen reicht und dieser wird nicht mehr geladen.
    Es spart ausserdem Downloadkapazität.

Performance
Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC
Halte dich fern von jedlichen Registry Cleanern.
Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links
Miekemoes Blogspot ( MVP )
Bill Castner ( MVP )

Don'ts

• Klicke nicht auf alles nur weil es Dich dazu auffordert und schön bunt ist.
• verwende keine peer to peer oder Filesharing Software (Emule, uTorrent,..)
• Lass die Finger von Cracks, Keygens, Serials oder anderer illegaler Software.
• Öffne keine Anhänge von Dir nicht bekannten Emails. Achte vor allem auf die Dateiendung wie zb deinFoto.jpg.exe

Nun bleibt mir nur noch dir viel Spass beim sicheren Surfen zu wünschen.

Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.


Wenn du möchtest, kannst du das Trojaner Board Forum mit einer kleinen Spende unterstützen.

Wenn du noch Zeit und Lust hast kannst du gern eine Rückmeldung im "Lob und Kritik" Forum loswerden