|
Log-Analyse und Auswertung: Malware nach Installation von MyPhoneExplorerWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
05.09.2014, 19:04 | #1 |
| Malware nach Installation von MyPhoneExplorer Hallo, ich habe heute die aktuelle Version von dem Programm "MyPhoneExplorer" installiert. Bei der Installation hat dann "GData Internet Security 2015" einen Virusfund gemeldet. Ich habe dann einfach mal den ESET Online Scanner ausgeführt, und siehe da er hat was gefunden. Wie sollte ich jetzt am besten mit der Beseitigung der Malware/Virus weitermachen? Anbei das Protokoll vom ESET Online Scanner und von GData. Code:
ATTFilter C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\4G68Q6WD\WajamChecker[1].exe Win32/Wajam.F evtl. unerwünschte Anwendung C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6S33D2ZL\2014090595185[1].exe Win32/InstallMonetizer.BC evtl. unerwünschte Anwendung C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\C9TPZHWV\Yawtix[1].exe Win32/BrowseFox.C evtl. unerwünschte Anwendung Code:
ATTFilter Beim Öffnen der Datei "C:\Users\Admin\AppData\Local\Temp\Yawtix\Yawtix_Setup.exe->(NSIS o)=>lzma_nsis0006" wurde der Virus "Gen:Variant.Adware.SwiftBrowse.1" entdeckt. Zugriff verweigert. Beim Öffnen der Datei "C:\Users\Admin\AppData\Local\Temp\Yawtix\Yawtix_Setup.exe" wurde der Virus "Gen:Variant.Adware.SwiftBrowse.1 (Engine A)" entdeckt. Zugriff verweigert. Beim Schließen der Datei "C:\Users\Admin\AppData\Local\Temp\Yawtix\Setup->(NSIS o)=>lzma_nsis0006" wurde der Virus "Gen:Variant.Adware.SwiftBrowse.1" entdeckt. Zugriff verweigert. Beim Schließen der Datei "C:\Users\Admin\AppData\Local\Temp\Yawtix\Setup" wurde der Virus "Gen:Variant.Adware.SwiftBrowse.1 (Engine A)" entdeckt. Zugriff verweigert. Matze Geändert von matzek (05.09.2014 um 19:15 Uhr) |
05.09.2014, 19:13 | #2 |
/// the machine /// TB-Ausbilder | Malware nach Installation von MyPhoneExplorer Hi,
__________________Logs bitte immer in den Thread posten. Zur Not aufteilen und mehrere Posts nutzen. Ich kann auf Arbeit keine Anhänge öffnen, danke. So funktioniert es: Posten in CODE-Tags Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert mir massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu gross für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit (Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
__________________ |
05.09.2014, 19:27 | #3 |
| Malware nach Installation von MyPhoneExplorer Danke für die schnelle Hilfe, hier die Ergebnisse:
__________________Teil 1. der FRST.TXT Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 03-09-2014 02 Ran by Admin (administrator) on PC-OFFICE on 05-09-2014 20:19:51 Running from C:\Users\Admin\Desktop Platform: Windows 7 Ultimate Service Pack 1 (X64) OS Language: Deutsch (Deutschland) Internet Explorer Version 11 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (G Data Software AG) C:\Program Files (x86)\Common Files\G Data\GDScan\GDScan.exe (G Data Software AG) C:\Program Files (x86)\G Data\InternetSecurity\AVK\AVKWCtlx64.exe (Intel Corporation) C:\Windows\System32\igfxCUIService.exe (G Data Software AG) C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKProxy.exe (G Data Software AG) C:\Program Files (x86)\G Data\InternetSecurity\AVK\AVKService.exe (Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (G Data Software AG) C:\Program Files (x86)\G Data\InternetSecurity\Firewall\GDFwSvcx64.exe (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE (G Data Software AG) C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKBap64.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe (G Data Software AG) C:\Program Files (x86)\G Data\InternetSecurity\AVKTray\AVKTray.exe (G Data Software AG) C:\Program Files (x86)\Common Files\G Data\AVKProxy\GdBgInx64.exe (G Data Software AG) C:\Program Files (x86)\Common Files\G Data\AVKProxy\GDKBFltExe32.exe (Intel Corporation) C:\Windows\System32\igfxEM.exe (Intel Corporation) C:\Windows\System32\igfxHK.exe (G Data Software AG) C:\Program Files (x86)\G Data\InternetSecurity\Firewall\GDFirewallTray.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe (CANON INC.) C:\Program Files (x86)\Canon\Canon IJ Network Scan Utility\CNMNSUT.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [287592 2013-08-07] (Intel Corporation) HKLM\...\Run: [BCSSync] => C:\Program Files\Microsoft Office\Office14\BCSSync.exe [108144 2012-11-05] (Microsoft Corporation) HKLM-x32\...\Run: [GDFirewallTray] => C:\Program Files (x86)\G Data\InternetSecurity\Firewall\GDFirewallTray.exe [1756792 2014-05-20] (G Data Software AG) HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [292848 2013-04-26] (Intel Corporation) HKLM-x32\...\Run: [IJNetworkScanUtility] => C:\Program Files (x86)\Canon\Canon IJ Network Scan Utility\CNMNSUT.exe [206240 2010-08-23] (CANON INC.) HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2014-05-08] (Adobe Systems Incorporated) HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896 2014-07-25] (Oracle Corporation) HKLM\...\Winlogon: [Userinit] C:\Windows\system32\userinit.exe,C:\Program Files (x86)\G Data\InternetSecurity\AVKTray\AVKTray.exe ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.de BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) Hosts: 127.0.0.1 validation.sls.microsoft.com Tcpip\Parameters: [DhcpNameServer] 192.168.178.1 FireFox: ======== FF ProfilePath: C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\kulit06d.default FF Homepage: www.google.de FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_14_0_0_179.dll () FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~3\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_179.dll () FF Plugin-x32: @java.com/DTPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: WOT - C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\kulit06d.default\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} [2014-09-01] FF Extension: Flagfox - C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\kulit06d.default\Extensions\{1018e4d6-728f-4b20-ad56-37578a4de76b}.xpi [2014-09-01] FF Extension: Adblock Plus - C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\kulit06d.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-09-01] Chrome: ======= ==================== Services (Whitelisted) ================= (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 AVKProxy; C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKProxy.exe [2250360 2014-07-30] (G Data Software AG) R2 AVKService; C:\Program Files (x86)\G Data\InternetSecurity\AVK\AVKService.exe [914552 2013-12-19] (G Data Software AG) R2 AVKWCtl; C:\Program Files (x86)\G Data\InternetSecurity\AVK\AVKWCtlx64.exe [2683760 2014-05-20] (G Data Software AG) R3 GDFwSvc; C:\Program Files (x86)\G Data\InternetSecurity\Firewall\GDFwSvcx64.exe [3227624 2014-08-06] (G Data Software AG) R3 GDScan; C:\Program Files (x86)\Common Files\G Data\GDScan\GDScan.exe [700536 2014-05-20] (G Data Software AG) R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15720 2013-08-07] (Intel Corporation) R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [324424 2014-08-14] (Intel Corporation) ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R3 AnyDVD; C:\Windows\System32\Drivers\AnyDVD.sys [138664 2014-04-24] (SlySoft, Inc.) R3 AnyDVD; C:\Windows\SysWOW64\Drivers\AnyDVD.sys [138664 2014-04-24] (SlySoft, Inc.) R3 DDBase; C:\Windows\System32\DRIVERS\DDBase.sys [33792 2014-04-15] (Digital Devices GmbH) R3 DDCapture; C:\Windows\System32\DRIVERS\DDCapture.sys [21504 2014-04-15] (Digital Devices GmbH) R3 DDTuner; C:\Windows\System32\DRIVERS\DDTuner.sys [214016 2014-04-15] (Digital Devices GmbH) R0 GDBehave; C:\Windows\System32\drivers\GDBehave.sys [55808 2014-08-25] (G Data Software AG) R1 GDKBFlt; C:\Windows\system32\drivers\GDKBFlt64.sys [20992 2014-08-25] (G Data Software AG) R1 GDMnIcpt; C:\Windows\system32\drivers\MiniIcpt.sys [142336 2014-08-25] (G Data Software AG) R3 GDPkIcpt; C:\Windows\system32\drivers\PktIcpt.sys [64000 2014-08-25] (G Data Software AG) R1 gdwfpcd; C:\Windows\System32\drivers\gdwfpcd64.sys [64000 2014-08-25] (G Data Software AG) R1 GRD; C:\Windows\system32\drivers\GRD.sys [106272 2014-09-01] (G Data Software) R1 HookCentre; C:\Windows\system32\drivers\HookCentre.sys [61440 2014-08-25] (G Data Software AG) R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [28008 2013-08-07] (Intel Corporation) R3 L1C; C:\Windows\System32\DRIVERS\L1C62x64.sys [129224 2013-07-18] (Qualcomm Atheros Co., Ltd.) S3 VGPU; System32\drivers\rdvgkmd.sys [X] ==================== NetSvcs (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.) ==================== One Month Created Files and Folders ======== (If an entry is included in the fixlist, the file\folder will be moved.) 2014-09-05 20:19 - 2014-09-05 20:20 - 00010384 _____ () C:\Users\Admin\Desktop\FRST.txt 2014-09-05 20:18 - 2014-09-05 20:19 - 00000000 ____D () C:\FRST 2014-09-05 20:17 - 2014-09-05 20:17 - 02104832 _____ (Farbar) C:\Users\Admin\Desktop\FRST64.exe 2014-09-05 20:07 - 2014-09-05 20:07 - 00000716 _____ () C:\Users\Admin\Desktop\G DATA Protokoll ID 35.txt 2014-09-05 15:47 - 2014-09-05 15:47 - 00000482 _____ () C:\Users\Admin\Desktop\eset_ergebniss.txt 2014-09-05 15:13 - 2014-09-05 15:13 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2014-09-05 15:12 - 2014-09-05 15:12 - 00000000 ____D () C:\Program Files (x86)\ESET 2014-09-05 15:11 - 2014-09-05 15:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MyPhoneExplorer 2014-09-05 15:11 - 2014-09-05 15:11 - 00000000 ____D () C:\Program Files (x86)\MyPhoneExplorer 2014-09-04 16:20 - 2014-09-04 16:20 - 00000000 ____D () C:\Users\Admin\Logitech 2014-09-04 16:19 - 2014-09-04 16:19 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\InstallShield 2014-09-04 16:19 - 2014-09-04 16:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logitech 2014-09-04 16:19 - 2014-09-04 16:19 - 00000000 ____D () C:\Program Files (x86)\Logitech 2014-09-04 16:10 - 2014-09-04 16:11 - 00000000 ____D () C:\Users\Admin\.gimp-2.8 2014-09-04 16:10 - 2014-09-04 16:10 - 00000909 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GIMP 2.lnk 2014-09-04 16:10 - 2014-09-04 16:10 - 00000000 ____D () C:\Users\Admin\AppData\Local\gegl-0.2 2014-09-04 16:09 - 2014-09-04 16:10 - 00000000 ____D () C:\Program Files\GIMP 2 2014-09-04 15:50 - 2014-09-04 15:50 - 00000000 ____D () C:\Users\Admin\AppData\Local\FreeCommanderXE 2014-09-04 15:50 - 2014-09-04 15:50 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FreeCommander XE 2014-09-04 15:50 - 2014-09-04 15:50 - 00000000 ____D () C:\Program Files (x86)\FreeCommander XE 2014-09-04 15:40 - 2014-09-04 15:41 - 00000000 ____D () C:\Program Files (x86)\Audiograbber 2014-09-04 15:40 - 2014-09-04 15:40 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audiograbber 2014-09-03 20:35 - 2014-09-04 15:19 - 00000000 ____D () C:\Program Files (x86)\Steam 2014-09-03 20:35 - 2014-09-03 20:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam 2014-09-03 20:26 - 2014-09-03 20:26 - 00084688 _____ () C:\Users\Matze\AppData\Local\GDIPFONTCACHEV1.DAT 2014-09-03 20:26 - 2014-09-03 20:26 - 00000000 ____D () C:\Users\Matze\AppData\Roaming\Intel Corporation 2014-09-03 20:25 - 2014-09-03 20:25 - 00000020 ___SH () C:\Users\Matze\ntuser.ini 2014-09-03 20:25 - 2014-09-03 20:25 - 00000000 _SHDL () C:\Users\Matze\Vorlagen 2014-09-03 20:25 - 2014-09-03 20:25 - 00000000 _SHDL () C:\Users\Matze\Startmenü 2014-09-03 20:25 - 2014-09-03 20:25 - 00000000 _SHDL () C:\Users\Matze\Netzwerkumgebung 2014-09-03 20:25 - 2014-09-03 20:25 - 00000000 _SHDL () C:\Users\Matze\Lokale Einstellungen 2014-09-03 20:25 - 2014-09-03 20:25 - 00000000 _SHDL () C:\Users\Matze\Eigene Dateien 2014-09-03 20:25 - 2014-09-03 20:25 - 00000000 _SHDL () C:\Users\Matze\Druckumgebung 2014-09-03 20:25 - 2014-09-03 20:25 - 00000000 _SHDL () C:\Users\Matze\Documents\Eigene Musik 2014-09-03 20:25 - 2014-09-03 20:25 - 00000000 _SHDL () C:\Users\Matze\Documents\Eigene Bilder 2014-09-03 20:25 - 2014-09-03 20:25 - 00000000 _SHDL () C:\Users\Matze\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-09-03 20:25 - 2014-09-03 20:25 - 00000000 _SHDL () C:\Users\Matze\AppData\Local\Verlauf 2014-09-03 20:25 - 2014-09-03 20:25 - 00000000 _SHDL () C:\Users\Matze\AppData\Local\Anwendungsdaten 2014-09-03 20:25 - 2014-09-03 20:25 - 00000000 _SHDL () C:\Users\Matze\Anwendungsdaten 2014-09-03 20:25 - 2014-09-03 20:25 - 00000000 ____D () C:\Users\Matze\AppData\Local\VirtualStore 2014-09-03 20:25 - 2014-09-03 20:25 - 00000000 ____D () C:\Users\Matze 2014-09-03 20:25 - 2014-08-26 11:40 - 00000000 ____D () C:\Users\Matze\AppData\Local\Microsoft Help 2014-09-03 20:25 - 2009-07-14 06:54 - 00000000 ___RD () C:\Users\Matze\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2014-09-03 20:25 - 2009-07-14 06:49 - 00000000 ___RD () C:\Users\Matze\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance 2014-09-03 20:24 - 2014-09-03 20:24 - 00000000 ____D () C:\Users\Admin\AppData\Local\Adobe 2014-09-03 20:20 - 2014-09-03 20:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sicherheit & Optimierung 2014-09-03 20:20 - 2014-09-03 20:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDF Tools 2014-09-03 20:19 - 2014-09-03 20:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla 2014-09-03 20:18 - 2014-09-03 20:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hardware 2014-09-03 20:17 - 2014-09-03 20:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Brennprogramme 2014-09-03 20:16 - 2014-09-03 20:18 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mediaplayer 2014-09-02 20:09 - 2014-09-04 21:27 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\vlc 2014-09-02 20:09 - 2014-09-02 20:09 - 00000000 ____D () C:\Program Files (x86)\VideoLAN 2014-09-02 20:05 - 2014-07-09 04:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDYAK.DLL 2014-09-02 20:05 - 2014-07-09 04:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDTAT.DLL 2014-09-02 20:05 - 2014-07-09 04:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU1.DLL 2014-09-02 20:05 - 2014-07-09 04:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDBASH.DLL 2014-09-02 20:05 - 2014-07-09 04:03 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU.DLL 2014-09-02 20:05 - 2014-07-09 03:31 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDYAK.DLL 2014-09-02 20:05 - 2014-07-09 03:31 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDTAT.DLL 2014-09-02 20:05 - 2014-07-09 03:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRU1.DLL 2014-09-02 20:05 - 2014-07-09 03:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRU.DLL 2014-09-02 20:05 - 2014-07-09 03:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDBASH.DLL 2014-09-02 20:05 - 2014-07-09 00:39 - 00419704 _____ () C:\Windows\system32\locale.nls 2014-09-02 20:05 - 2014-07-09 00:30 - 00419704 _____ () C:\Windows\SysWOW64\locale.nls 2014-09-02 18:42 - 2014-09-02 18:42 - 00010009 _____ () C:\Windows\DirectX.log 2014-09-02 18:42 - 2010-06-02 04:55 - 00527192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_7.dll 2014-09-02 18:42 - 2010-06-02 04:55 - 00518488 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_7.dll 2014-09-02 18:42 - 2010-06-02 04:55 - 00239960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_7.dll 2014-09-02 18:42 - 2010-06-02 04:55 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_7.dll 2014-09-02 18:42 - 2010-06-02 04:55 - 00077656 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_5.dll 2014-09-02 18:42 - 2010-06-02 04:55 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_5.dll 2014-09-02 18:42 - 2010-05-26 11:41 - 02526056 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_43.dll 2014-09-02 18:42 - 2010-05-26 11:41 - 02401112 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_43.dll 2014-09-02 18:42 - 2010-05-26 11:41 - 02106216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_43.dll 2014-09-02 18:42 - 2010-05-26 11:41 - 01998168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_43.dll 2014-09-02 18:42 - 2010-05-26 11:41 - 01907552 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_43.dll 2014-09-02 18:42 - 2010-05-26 11:41 - 01868128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_43.dll 2014-09-02 18:42 - 2010-05-26 11:41 - 00511328 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_43.dll 2014-09-02 18:42 - 2010-05-26 11:41 - 00470880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_43.dll 2014-09-02 18:42 - 2010-05-26 11:41 - 00276832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_43.dll 2014-09-02 18:42 - 2010-05-26 11:41 - 00248672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_43.dll 2014-09-02 18:42 - 2010-02-04 10:01 - 00530776 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_6.dll 2014-09-02 18:42 - 2010-02-04 10:01 - 00528216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_6.dll 2014-09-02 18:42 - 2010-02-04 10:01 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_6.dll 2014-09-02 18:42 - 2010-02-04 10:01 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_6.dll 2014-09-02 18:42 - 2010-02-04 10:01 - 00078680 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_4.dll 2014-09-02 18:42 - 2010-02-04 10:01 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_4.dll 2014-09-02 18:42 - 2010-02-04 10:01 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_7.dll 2014-09-02 18:42 - 2010-02-04 10:01 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_7.dll 2014-09-02 18:42 - 2009-09-04 17:44 - 00517960 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_5.dll 2014-09-02 18:42 - 2009-09-04 17:44 - 00515416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_5.dll 2014-09-02 18:42 - 2009-09-04 17:44 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_5.dll 2014-09-02 18:42 - 2009-09-04 17:44 - 00176968 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_5.dll 2014-09-02 18:42 - 2009-09-04 17:44 - 00073544 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_3.dll 2014-09-02 18:42 - 2009-09-04 17:44 - 00069464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_3.dll 2014-09-02 18:42 - 2009-09-04 17:29 - 05554512 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_42.dll 2014-09-02 18:42 - 2009-09-04 17:29 - 05501792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_42.dll 2014-09-02 18:42 - 2009-09-04 17:29 - 02582888 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_42.dll 2014-09-02 18:42 - 2009-09-04 17:29 - 02475352 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_42.dll 2014-09-02 18:42 - 2009-09-04 17:29 - 01974616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_42.dll 2014-09-02 18:42 - 2009-09-04 17:29 - 01892184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_42.dll 2014-09-02 18:42 - 2009-09-04 17:29 - 00523088 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_42.dll 2014-09-02 18:42 - 2009-09-04 17:29 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_42.dll 2014-09-02 18:42 - 2009-09-04 17:29 - 00285024 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_42.dll 2014-09-02 18:42 - 2009-09-04 17:29 - 00235344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_42.dll 2014-09-02 18:42 - 2009-03-16 14:18 - 00521560 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_4.dll 2014-09-02 18:42 - 2009-03-16 14:18 - 00517448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_4.dll 2014-09-02 18:42 - 2009-03-16 14:18 - 00235352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_4.dll 2014-09-02 18:42 - 2009-03-16 14:18 - 00174936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_4.dll 2014-09-02 18:42 - 2009-03-16 14:18 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_6.dll 2014-09-02 18:42 - 2009-03-16 14:18 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_6.dll 2014-09-02 18:42 - 2009-03-09 15:27 - 05425496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_41.dll 2014-09-02 18:42 - 2009-03-09 15:27 - 04178264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_41.dll 2014-09-02 18:42 - 2009-03-09 15:27 - 02430312 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_41.dll 2014-09-02 18:42 - 2009-03-09 15:27 - 01846632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_41.dll 2014-09-02 18:42 - 2009-03-09 15:27 - 00520544 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_41.dll 2014-09-02 18:42 - 2009-03-09 15:27 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_41.dll 2014-09-02 18:42 - 2008-10-27 10:04 - 00518480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_3.dll 2014-09-02 18:42 - 2008-10-27 10:04 - 00514384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_3.dll 2014-09-02 18:42 - 2008-10-27 10:04 - 00235856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_3.dll 2014-09-02 18:42 - 2008-10-27 10:04 - 00175440 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_3.dll 2014-09-02 18:42 - 2008-10-27 10:04 - 00074576 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_2.dll 2014-09-02 18:42 - 2008-10-27 10:04 - 00070992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_2.dll 2014-09-02 18:42 - 2008-10-27 10:04 - 00025936 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_5.dll 2014-09-02 18:42 - 2008-10-27 10:04 - 00023376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_5.dll 2014-09-02 18:42 - 2008-10-10 04:52 - 05631312 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_40.dll 2014-09-02 18:42 - 2008-10-10 04:52 - 04379984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_40.dll 2014-09-02 18:42 - 2008-10-10 04:52 - 02605920 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_40.dll 2014-09-02 18:42 - 2008-10-10 04:52 - 02036576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_40.dll 2014-09-02 18:42 - 2008-10-10 04:52 - 00519000 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_40.dll 2014-09-02 18:42 - 2008-10-10 04:52 - 00452440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_40.dll 2014-09-02 18:42 - 2008-07-31 10:41 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_2.dll 2014-09-02 18:42 - 2008-07-31 10:41 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_2.dll 2014-09-02 18:42 - 2008-07-31 10:41 - 00072200 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_1.dll 2014-09-02 18:42 - 2008-07-31 10:41 - 00068616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_1.dll 2014-09-02 18:42 - 2008-07-31 10:40 - 00513544 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_2.dll 2014-09-02 18:42 - 2008-07-31 10:40 - 00509448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_2.dll 2014-09-02 18:42 - 2008-07-10 11:01 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_39.dll 2014-09-02 18:42 - 2008-07-10 11:00 - 04992520 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_39.dll 2014-09-02 18:42 - 2008-07-10 11:00 - 03851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll 2014-09-02 18:42 - 2008-07-10 11:00 - 01942552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_39.dll 2014-09-02 18:42 - 2008-07-10 11:00 - 01493528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_39.dll 2014-09-02 18:42 - 2008-07-10 11:00 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_39.dll 2014-09-02 18:42 - 2008-05-30 14:19 - 00511496 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_1.dll 2014-09-02 18:42 - 2008-05-30 14:19 - 00507400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_1.dll 2014-09-02 18:42 - 2008-05-30 14:18 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_1.dll 2014-09-02 18:42 - 2008-05-30 14:18 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_1.dll 2014-09-02 18:42 - 2008-05-30 14:17 - 00068104 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_0.dll 2014-09-02 18:42 - 2008-05-30 14:17 - 00065032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_0.dll 2014-09-02 18:42 - 2008-05-30 14:17 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_4.dll 2014-09-02 18:42 - 2008-05-30 14:16 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_4.dll 2014-09-02 18:42 - 2008-05-30 14:11 - 04991496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_38.dll 2014-09-02 18:42 - 2008-05-30 14:11 - 03850760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_38.dll 2014-09-02 18:42 - 2008-05-30 14:11 - 01941528 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_38.dll 2014-09-02 18:42 - 2008-05-30 14:11 - 01491992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_38.dll 2014-09-02 18:42 - 2008-05-30 14:11 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_38.dll 2014-09-02 18:42 - 2008-05-30 14:11 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_38.dll 2014-09-02 18:42 - 2008-03-05 16:04 - 00489480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_0.dll 2014-09-02 18:42 - 2008-03-05 16:03 - 00479752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_0.dll 2014-09-02 18:42 - 2008-03-05 16:03 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_0.dll 2014-09-02 18:42 - 2008-03-05 16:03 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_0.dll 2014-09-02 18:42 - 2008-03-05 16:00 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_3.dll 2014-09-02 18:42 - 2008-03-05 16:00 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_3.dll 2014-09-02 18:42 - 2008-03-05 15:56 - 04910088 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_37.dll 2014-09-02 18:42 - 2008-03-05 15:56 - 03786760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_37.dll 2014-09-02 18:42 - 2008-03-05 15:56 - 01860120 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_37.dll 2014-09-02 18:42 - 2008-03-05 15:56 - 01420824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_37.dll 2014-09-02 18:42 - 2008-02-05 23:07 - 00529424 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_37.dll 2014-09-02 18:42 - 2008-02-05 23:07 - 00462864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_37.dll 2014-09-02 18:42 - 2007-10-22 03:40 - 00411656 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_10.dll 2014-09-02 18:42 - 2007-10-22 03:39 - 00267272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_10.dll 2014-09-02 18:42 - 2007-10-22 03:37 - 00021000 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_2.dll 2014-09-02 18:42 - 2007-10-22 03:37 - 00017928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_2.dll 2014-09-02 18:42 - 2007-10-12 15:14 - 05081608 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_36.dll 2014-09-02 18:42 - 2007-10-12 15:14 - 03734536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_36.dll 2014-09-02 18:42 - 2007-10-12 15:14 - 02006552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_36.dll 2014-09-02 18:42 - 2007-10-12 15:14 - 01374232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_36.dll 2014-09-02 18:42 - 2007-10-02 09:56 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_36.dll 2014-09-02 18:42 - 2007-10-02 09:56 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_36.dll 2014-09-02 18:42 - 2007-07-20 00:57 - 00411496 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_9.dll 2014-09-02 18:42 - 2007-07-20 00:57 - 00267112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_9.dll 2014-09-02 18:42 - 2007-07-19 18:14 - 05073256 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_35.dll 2014-09-02 18:42 - 2007-07-19 18:14 - 03727720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_35.dll 2014-09-02 18:42 - 2007-07-19 18:14 - 01985904 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_35.dll 2014-09-02 18:42 - 2007-07-19 18:14 - 01358192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_35.dll 2014-09-02 18:42 - 2007-07-19 18:14 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_35.dll 2014-09-02 18:42 - 2007-07-19 18:14 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_35.dll 2014-09-02 18:42 - 2007-06-20 20:49 - 00409960 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_8.dll 2014-09-02 18:42 - 2007-06-20 20:46 - 00266088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_8.dll 2014-09-02 18:42 - 2007-05-16 16:45 - 04496232 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_34.dll 2014-09-02 18:42 - 2007-05-16 16:45 - 03497832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_34.dll 2014-09-02 18:42 - 2007-05-16 16:45 - 01401200 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_34.dll 2014-09-02 18:42 - 2007-05-16 16:45 - 01124720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_34.dll 2014-09-02 18:42 - 2007-05-16 16:45 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_34.dll 2014-09-02 18:42 - 2007-05-16 16:45 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_34.dll 2014-09-02 18:42 - 2007-04-04 18:55 - 00403304 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_7.dll 2014-09-02 18:42 - 2007-04-04 18:55 - 00261480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_7.dll 2014-09-02 18:42 - 2007-04-04 18:54 - 00107368 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_3.dll 2014-09-02 18:42 - 2007-04-04 18:53 - 00081768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_3.dll 2014-09-02 18:42 - 2007-03-15 16:57 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_33.dll 2014-09-02 18:42 - 2007-03-15 16:57 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_33.dll 2014-09-02 18:42 - 2007-03-12 16:42 - 04494184 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_33.dll 2014-09-02 18:42 - 2007-03-12 16:42 - 03495784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_33.dll 2014-09-02 18:42 - 2007-03-12 16:42 - 01400176 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_33.dll 2014-09-02 18:42 - 2007-03-12 16:42 - 01123696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_33.dll 2014-09-02 18:42 - 2007-03-05 12:42 - 00017688 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_1.dll 2014-09-02 18:42 - 2007-03-05 12:42 - 00015128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_1.dll 2014-09-02 18:42 - 2007-01-24 15:27 - 00393576 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_6.dll 2014-09-02 18:42 - 2007-01-24 15:27 - 00255848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_6.dll 2014-09-02 18:42 - 2006-12-08 12:02 - 00251672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_5.dll 2014-09-02 18:42 - 2006-12-08 12:00 - 00390424 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_5.dll 2014-09-02 18:42 - 2006-11-29 13:06 - 04398360 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_32.dll 2014-09-02 18:42 - 2006-11-29 13:06 - 03426072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_32.dll 2014-09-02 18:42 - 2006-11-29 13:06 - 00469264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10.dll 2014-09-02 18:42 - 2006-11-29 13:06 - 00440080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10.dll 2014-09-02 18:42 - 2006-09-28 16:05 - 03977496 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_31.dll 2014-09-02 18:42 - 2006-09-28 16:05 - 02414360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_31.dll 2014-09-02 18:42 - 2006-09-28 16:05 - 00237848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_4.dll 2014-09-02 18:42 - 2006-09-28 16:04 - 00364824 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_4.dll 2014-09-02 18:42 - 2006-07-28 09:31 - 00083736 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_2.dll 2014-09-02 18:42 - 2006-07-28 09:30 - 00363288 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_3.dll 2014-09-02 18:42 - 2006-07-28 09:30 - 00236824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_3.dll 2014-09-02 18:42 - 2006-07-28 09:30 - 00062744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_2.dll 2014-09-02 18:42 - 2006-05-31 07:24 - 00230168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_2.dll 2014-09-02 18:42 - 2006-05-31 07:22 - 00354072 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_2.dll 2014-09-02 18:42 - 2006-03-31 12:41 - 03927248 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_30.dll 2014-09-02 18:42 - 2006-03-31 12:40 - 02388176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_30.dll 2014-09-02 18:42 - 2006-03-31 12:40 - 00352464 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_1.dll 2014-09-02 18:42 - 2006-03-31 12:39 - 00229584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_1.dll 2014-09-02 18:42 - 2006-03-31 12:39 - 00083664 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_1.dll 2014-09-02 18:42 - 2006-03-31 12:39 - 00062672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_1.dll 2014-09-02 18:42 - 2006-02-03 08:43 - 03830992 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_29.dll 2014-09-02 18:42 - 2006-02-03 08:43 - 02332368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_29.dll 2014-09-02 18:42 - 2006-02-03 08:42 - 00355536 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_0.dll 2014-09-02 18:42 - 2006-02-03 08:42 - 00230096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_0.dll 2014-09-02 18:42 - 2006-02-03 08:41 - 00016592 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_0.dll 2014-09-02 18:42 - 2006-02-03 08:41 - 00014032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_0.dll 2014-09-02 18:42 - 2005-12-05 18:09 - 03815120 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_28.dll 2014-09-02 18:42 - 2005-12-05 18:09 - 02323664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_28.dll 2014-09-02 18:42 - 2005-07-22 19:59 - 03807440 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_27.dll 2014-09-02 18:42 - 2005-07-22 19:59 - 02319568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_27.dll 2014-09-02 18:42 - 2005-05-26 15:34 - 03767504 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_26.dll 2014-09-02 18:42 - 2005-05-26 15:34 - 02297552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_26.dll 2014-09-02 18:42 - 2005-03-18 17:19 - 03823312 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_25.dll 2014-09-02 18:42 - 2005-03-18 17:19 - 02337488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_25.dll 2014-09-02 18:42 - 2005-02-05 19:45 - 03544272 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_24.dll 2014-09-02 18:42 - 2005-02-05 19:45 - 02222800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_24.dll 2014-09-02 18:40 - 2014-09-02 18:42 - 00000000 ___HD () C:\Windows\msdownld.tmp 2014-09-02 18:40 - 2014-09-02 18:42 - 00000000 ____D () C:\Windows\SysWOW64\directx 2014-09-02 18:34 - 2014-09-02 18:34 - 00000000 ____D () C:\Program Files (x86)\LAV Filters 2014-09-02 18:30 - 2014-09-02 18:35 - 00000000 ____D () C:\Program Files (x86)\DVBViewer 2014-09-02 18:30 - 2014-09-02 18:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVBViewer 2014-09-02 18:30 - 2014-09-02 18:30 - 00000000 ____D () C:\ProgramData\CMUV 2014-09-01 20:13 - 2014-09-01 20:13 - 00002410 _____ () C:\Windows\SysWOW64\cplLogon.tsk 2014-09-01 20:13 - 2014-09-01 20:13 - 00000000 ____D () C:\Program Files\Logon Screen 2014-09-01 19:56 - 2014-09-01 19:56 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\Canneverbe Limited 2014-09-01 19:56 - 2014-09-01 19:56 - 00000000 ____D () C:\ProgramData\Canneverbe Limited 2014-09-01 19:56 - 2014-09-01 19:56 - 00000000 ____D () C:\Program Files (x86)\CDBurnerXP 2014-09-01 19:52 - 2014-09-01 19:52 - 00000000 ____D () C:\Users\Admin\Documents\AnyDVDHD 2014-09-01 19:50 - 2014-09-01 19:50 - 00000040 ___SH () C:\ProgramData\.zreglib 2014-09-01 19:49 - 2014-09-01 19:49 - 00000000 ____D () C:\ProgramData\SlySoft 2014-09-01 19:49 - 2014-09-01 19:49 - 00000000 ____D () C:\Program Files (x86)\SlySoft 2014-09-01 19:43 - 2014-09-01 19:43 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\Oracle 2014-09-01 19:41 - 2014-09-01 19:41 - 00272808 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe 2014-09-01 19:41 - 2014-09-01 19:41 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe 2014-09-01 19:41 - 2014-09-01 19:41 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe 2014-09-01 19:41 - 2014-09-01 19:41 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll 2014-09-01 19:41 - 2014-09-01 19:41 - 00000000 ____D () C:\ProgramData\Sun 2014-09-01 19:41 - 2014-09-01 19:41 - 00000000 ____D () C:\ProgramData\Oracle 2014-09-01 19:41 - 2014-09-01 19:41 - 00000000 ____D () C:\Program Files (x86)\Java 2014-09-01 19:38 - 2014-09-05 19:57 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-09-01 19:38 - 2014-09-01 19:38 - 00699568 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2014-09-01 19:38 - 2014-09-01 19:38 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2014-09-01 19:38 - 2014-09-01 19:38 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater 2014-09-01 19:38 - 2014-09-01 19:38 - 00000000 ____D () C:\Windows\SysWOW64\Macromed 2014-09-01 19:38 - 2014-09-01 19:38 - 00000000 ____D () C:\Windows\system32\Macromed 2014-09-01 19:38 - 2014-09-01 19:38 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\Macromedia 2014-09-01 19:38 - 2014-09-01 19:38 - 00000000 ____D () C:\Users\Admin\AppData\Local\Macromedia 2014-09-01 19:36 - 2014-09-01 19:50 - 00000000 ____D () C:\ProgramData\Adobe 2014-09-01 19:36 - 2014-09-01 19:36 - 00000000 ____D () C:\Program Files (x86)\Adobe 2014-09-01 18:51 - 2014-09-01 18:51 - 00001436 _____ () C:\Users\Bine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2014-09-01 18:51 - 2014-09-01 18:51 - 00000000 ____D () C:\Users\Bine\AppData\Roaming\Mozilla 2014-09-01 18:51 - 2014-09-01 18:51 - 00000000 ____D () C:\Users\Bine\AppData\Roaming\Adobe 2014-09-01 18:51 - 2014-09-01 18:51 - 00000000 ____D () C:\Users\Bine\AppData\Local\Mozilla 2014-09-01 18:50 - 2014-09-01 18:51 - 00000000 ____D () C:\Users\Bine 2014-09-01 18:50 - 2014-09-01 18:50 - 00000020 ___SH () C:\Users\Bine\ntuser.ini 2014-09-01 18:50 - 2014-09-01 18:50 - 00000000 _SHDL () C:\Users\Bine\Vorlagen 2014-09-01 18:50 - 2014-09-01 18:50 - 00000000 _SHDL () C:\Users\Bine\Startmenü 2014-09-01 18:50 - 2014-09-01 18:50 - 00000000 _SHDL () C:\Users\Bine\Netzwerkumgebung 2014-09-01 18:50 - 2014-09-01 18:50 - 00000000 _SHDL () C:\Users\Bine\Lokale Einstellungen 2014-09-01 18:50 - 2014-09-01 18:50 - 00000000 _SHDL () C:\Users\Bine\Eigene Dateien 2014-09-01 18:50 - 2014-09-01 18:50 - 00000000 _SHDL () C:\Users\Bine\Druckumgebung 2014-09-01 18:50 - 2014-09-01 18:50 - 00000000 _SHDL () C:\Users\Bine\Documents\Eigene Musik 2014-09-01 18:50 - 2014-09-01 18:50 - 00000000 _SHDL () C:\Users\Bine\Documents\Eigene Bilder 2014-09-01 18:50 - 2014-09-01 18:50 - 00000000 _SHDL () C:\Users\Bine\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-09-01 18:50 - 2014-09-01 18:50 - 00000000 _SHDL () C:\Users\Bine\AppData\Local\Verlauf 2014-09-01 18:50 - 2014-09-01 18:50 - 00000000 _SHDL () C:\Users\Bine\AppData\Local\Anwendungsdaten 2014-09-01 18:50 - 2014-09-01 18:50 - 00000000 _SHDL () C:\Users\Bine\Anwendungsdaten 2014-09-01 18:50 - 2014-09-01 18:50 - 00000000 ____D () C:\Users\Bine\AppData\Local\VirtualStore 2014-09-01 18:50 - 2014-08-26 11:40 - 00000000 ____D () C:\Users\Bine\AppData\Local\Microsoft Help 2014-09-01 18:50 - 2009-07-14 06:54 - 00000000 ___RD () C:\Users\Bine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2014-09-01 18:50 - 2009-07-14 06:49 - 00000000 ___RD () C:\Users\Bine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance 2014-09-01 17:47 - 2014-09-01 17:47 - 00106272 _____ (G Data Software) C:\Windows\system32\Drivers\GRD.sys 2014-09-01 17:47 - 2014-09-01 17:47 - 00018160 _____ (G Data Software) C:\Windows\system32\Drivers\GdPhyMem.sys 2014-09-01 17:40 - 2014-09-01 17:40 - 00000000 ___HD () C:\ProgramData\CanonIJScan 2014-09-01 17:35 - 2014-09-01 17:40 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\Canon 2014-09-01 17:32 - 2014-09-01 17:35 - 00000000 ____D () C:\Program Files (x86)\Canon 2014-09-01 17:32 - 2014-09-01 17:32 - 00000000 ____D () C:\Windows\system32\STRING 2014-09-01 17:32 - 2014-09-01 17:32 - 00000000 ____D () C:\ProgramData\Canon IJ Network Tool 2014-09-01 17:32 - 2012-06-14 17:18 - 00366592 _____ (CANON INC.) C:\Windows\SysWOW64\CNMNPPM.DLL 2014-09-01 17:32 - 2012-06-14 17:18 - 00359936 _____ (CANON INC.) C:\Windows\system32\CNMN6PPM.DLL 2014-09-01 17:32 - 2012-06-14 17:18 - 00039424 _____ (CANON INC.) C:\Windows\system32\CNMN6UI.DLL 2014-09-01 17:32 - 2009-09-17 09:12 - 00303104 _____ (CANON INC.) C:\Windows\SysWOW64\CNC640L.dll 2014-09-01 17:32 - 2009-04-03 15:57 - 00106496 _____ (CANON INC.) C:\Windows\SysWOW64\CNC640U.dll 2014-09-01 17:32 - 2008-12-25 16:23 - 00013312 _____ () C:\Windows\SysWOW64\CNC173FD.TBL 2014-09-01 17:32 - 2008-08-25 18:02 - 00015872 _____ (CANON INC.) C:\Windows\SysWOW64\CNHMCA.dll 2014-09-01 17:31 - 2014-09-01 17:31 - 00000000 ___HD () C:\Windows\system32\CanonIJ Uninstaller Information 2014-09-01 17:31 - 2014-09-01 17:31 - 00000000 ___HD () C:\ProgramData\CanonBJ 2014-09-01 17:31 - 2010-04-24 05:00 - 00336896 _____ (CANON INC.) C:\Windows\system32\CNMLMA2.DLL 2014-09-01 17:30 - 2014-09-01 17:30 - 00000000 ___HD () C:\Program Files\CanonBJ 2014-09-01 17:30 - 2009-03-18 09:10 - 00244736 _____ (CANON INC.) C:\Windows\system32\CNMIUA2.DLL 2014-09-01 16:29 - 2014-09-01 16:29 - 00000000 ____D () C:\Users\Admin\AppData\Local\G DATA 2014-09-01 15:52 - 2014-09-01 15:52 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\Thunderbird 2014-09-01 15:52 - 2014-09-01 15:52 - 00000000 ____D () C:\Users\Admin\AppData\Local\Thunderbird 2014-09-01 15:52 - 2014-09-01 15:52 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird 2014-08-29 11:18 - 2014-08-29 11:18 - 00000000 ____D () C:\Wallpapers 2014-08-29 11:16 - 2014-08-29 11:16 - 00000000 ____D () C:\Users\Admin\AppData\Local\Apps\2.0 2014-08-29 11:07 - 2014-08-23 04:10 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll 2014-08-29 11:07 - 2014-08-23 03:45 - 00311296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll 2014-08-29 11:07 - 2014-08-23 02:59 - 03166720 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2014-08-26 11:40 - 2014-08-26 11:40 - 00000000 ____D () C:\Users\Default\AppData\Local\Microsoft Help 2014-08-26 11:40 - 2014-08-26 11:40 - 00000000 ____D () C:\Users\Default User\AppData\Local\Microsoft Help 2014-08-26 11:40 - 2014-08-26 11:40 - 00000000 ____D () C:\Program Files\Common Files\DESIGNER 2014-08-26 11:24 - 2014-09-05 15:10 - 00003758 _____ () C:\Windows\System32\Tasks\AutoKMS 2014-08-26 11:24 - 2014-08-26 11:28 - 00000000 ____D () C:\Windows\AutoKMS 2014-08-26 11:24 - 2014-08-26 11:24 - 00000000 ____D () C:\ProgramData\Microsoft Toolkit 2014-08-26 11:19 - 2014-08-26 11:19 - 00000000 ____D () C:\Windows\System32\Tasks\OfficeSoftwareProtectionPlatform 2014-08-26 11:18 - 2014-08-26 11:18 - 00000000 ____D () C:\Windows\PCHEALTH 2014-08-26 11:18 - 2014-08-26 11:18 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2014-08-26 11:18 - 2014-08-26 11:18 - 00000000 ____D () C:\Program Files\Microsoft Synchronization Services 2014-08-26 11:18 - 2014-08-26 11:18 - 00000000 ____D () C:\Program Files\Microsoft SQL Server Compact Edition 2014-08-26 11:18 - 2014-08-26 11:18 - 00000000 ____D () C:\Program Files\Microsoft Analysis Services 2014-08-26 11:18 - 2014-08-26 11:18 - 00000000 ____D () C:\Program Files (x86)\Microsoft Analysis Services 2014-08-26 11:17 - 2014-08-26 11:41 - 00000000 ____D () C:\ProgramData\Microsoft Help 2014-08-26 11:17 - 2014-08-26 11:18 - 00000000 ____D () C:\Program Files\Microsoft Office 2014-08-26 11:17 - 2014-08-26 11:17 - 00000000 __RHD () C:\MSOCache 2014-08-26 11:17 - 2014-08-26 11:17 - 00000000 ____D () C:\Users\Admin\AppData\Local\Microsoft Help 2014-08-26 11:17 - 2014-08-26 11:17 - 00000000 ____D () C:\Program Files (x86)\Microsoft Office 2014-08-26 10:57 - 2014-08-26 10:57 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip 2014-08-26 10:57 - 2014-08-26 10:57 - 00000000 ____D () C:\Program Files\7-Zip 2014-08-25 12:09 - 2014-08-25 12:09 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\Intel Corporation 2014-08-25 12:09 - 2014-08-25 12:09 - 00000000 ____D () C:\ProgramData\Intel 2014-08-25 12:08 - 2014-08-25 12:08 - 00000000 ____D () C:\Users\Admin\Intel 2014-08-25 11:58 - 2014-09-04 16:19 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information 2014-08-25 11:58 - 2014-08-25 11:58 - 00000000 ____D () C:\Windows\SysWOW64\Atheros_L1e 2014-08-25 11:58 - 2013-07-18 07:54 - 00129224 _____ (Qualcomm Atheros Co., Ltd.) C:\Windows\system32\Drivers\L1C62x64.sys 2014-08-25 11:52 - 2014-08-25 11:52 - 00000000 ____D () C:\Program Files\DigitalDevices 2014-08-25 11:49 - 2014-08-25 11:50 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\Mozilla 2014-08-25 11:49 - 2014-08-25 11:50 - 00000000 ____D () C:\Users\Admin\AppData\Local\Mozilla 2014-08-25 11:46 - 2014-08-25 11:46 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_iusb3hcs_01009.Wdf 2014-08-25 11:45 - 2013-04-26 10:24 - 00041984 _____ (Intel Corporation) C:\Windows\system32\Drivers\USB3Ver.dll 2014-08-25 11:39 - 2013-08-05 05:50 - 00053248 _____ (Windows XP Bundled build C-Centric Single User) C:\Windows\SysWOW64\CSVer.dll 2014-08-25 11:13 - 2014-08-25 11:13 - 00000000 ____D () C:\Program Files\Microsoft Silverlight 2014-08-25 11:13 - 2014-08-25 11:13 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight 2014-08-25 11:10 - 2014-08-25 11:10 - 00000000 ____D () C:\Users\Admin\AppData\Local\WindowsUpdate 2014-08-25 11:07 - 2014-01-09 04:22 - 05694464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll 2014-08-25 11:07 - 2014-01-04 00:44 - 06574592 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll 2014-08-25 11:02 - 2013-10-02 04:22 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys 2014-08-25 11:02 - 2013-10-02 04:11 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe 2014-08-25 11:02 - 2013-10-02 04:08 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll 2014-08-25 11:02 - 2013-10-02 03:48 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\MsRdpWebAccess.dll 2014-08-25 11:02 - 2013-10-02 03:48 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\wksprtPS.dll 2014-08-25 11:02 - 2013-10-02 03:29 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll 2014-08-25 11:02 - 2013-10-02 03:10 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll 2014-08-25 11:02 - 2013-10-02 02:15 - 01057280 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll 2014-08-25 11:02 - 2013-10-02 02:14 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MsRdpWebAccess.dll 2014-08-25 11:02 - 2013-10-02 02:14 - 00017920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wksprtPS.dll 2014-08-25 11:02 - 2013-10-02 02:08 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe 2014-08-25 11:02 - 2013-10-02 02:01 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe 2014-08-25 11:02 - 2013-10-02 01:58 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll 2014-08-25 11:02 - 2013-10-02 01:31 - 01147392 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe 2014-08-25 11:02 - 2013-10-02 01:08 - 00855552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll 2014-08-25 11:02 - 2013-10-02 00:34 - 01068544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe 2014-08-25 11:02 - 2013-09-25 04:23 - 01030144 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll 2014-08-25 11:02 - 2013-09-25 03:57 - 00792576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll 2014-08-25 10:57 - 2014-08-25 10:57 - 00000144 _____ () C:\Windows\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat 2014-08-25 10:53 - 2014-09-05 15:15 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service 2014-08-25 10:53 - 2014-08-25 10:53 - 00000000 ____D () C:\ProgramData\Mozilla 2014-08-25 10:52 - 2014-09-03 20:03 - 00000510 _____ () C:\Windows\system32\{F33C3B9B-72AF-418A-B3FD-560646F7CDA2}.bat 2014-08-25 10:52 - 2014-08-25 10:52 - 00003538 _____ () C:\Windows\System32\Tasks\CreateChoiceProcessTask 2014-08-25 10:52 - 2014-08-25 10:52 - 00000000 __SHD () C:\Users\Admin\AppData\Local\EmieUserList 2014-08-25 10:52 - 2014-08-25 10:52 - 00000000 __SHD () C:\Users\Admin\AppData\Local\EmieSiteList 2014-08-25 10:47 - 2014-08-25 12:09 - 01645874 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI 2014-08-25 10:41 - 2014-08-25 10:41 - 00000000 ____D () C:\Windows\system32\MRT 2014-08-25 10:41 - 2014-07-31 23:41 - 99218768 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2014-08-25 10:40 - 2010-02-23 10:16 - 00294912 _____ (Microsoft Corporation) C:\Windows\system32\browserchoice.exe 2014-08-25 10:39 - 2014-09-03 20:03 - 00000000 ____D () C:\Intel 2014-08-25 10:39 - 2014-08-25 12:09 - 00000000 ____D () C:\Program Files\Intel 2014-08-25 10:39 - 2014-08-25 11:45 - 00000000 ____D () C:\Program Files (x86)\Intel 2014-08-25 10:39 - 2014-08-14 00:24 - 00082432 _____ (Khronos Group) C:\Windows\system32\OpenCL.DLL 2014-08-25 10:39 - 2014-08-14 00:24 - 00074752 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.DLL 2014-08-25 10:35 - 2014-08-25 10:35 - 00000000 ___SD () C:\Windows\system32\CompatTel 2014-08-25 10:35 - 2014-08-01 01:41 - 00348856 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2014-08-25 10:35 - 2014-08-01 01:16 - 00307384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2014-08-25 10:35 - 2014-07-25 16:52 - 23645696 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-08-25 10:35 - 2014-07-25 16:02 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-08-25 10:35 - 2014-07-25 16:01 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2014-08-25 10:35 - 2014-07-25 15:51 - 17524224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-08-25 10:35 - 2014-07-25 15:30 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-08-25 10:35 - 2014-07-25 15:28 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2014-08-25 10:35 - 2014-07-25 15:28 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2014-08-25 10:35 - 2014-07-25 15:25 - 02774528 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-08-25 10:35 - 2014-07-25 15:25 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2014-08-25 10:35 - 2014-07-25 15:11 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-08-25 10:35 - 2014-07-25 15:10 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-08-25 10:35 - 2014-07-25 15:04 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2014-08-25 10:35 - 2014-07-25 15:03 - 00598016 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-08-25 10:35 - 2014-07-25 15:00 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2014-08-25 10:35 - 2014-07-25 15:00 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2014-08-25 10:35 - 2014-07-25 14:59 - 00758272 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2014-08-25 10:35 - 2014-07-25 14:47 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2014-08-25 10:35 - 2014-07-25 14:40 - 00452096 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2014-08-25 10:35 - 2014-07-25 14:34 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2014-08-25 10:35 - 2014-07-25 14:34 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2014-08-25 10:35 - 2014-07-25 14:33 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2014-08-25 10:35 - 2014-07-25 14:30 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2014-08-25 10:35 - 2014-07-25 14:28 - 05824512 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-08-25 10:35 - 2014-07-25 14:28 - 00072704 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2014-08-25 10:35 - 2014-07-25 14:21 - 02184704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2014-08-25 10:35 - 2014-07-25 14:19 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-08-25 10:35 - 2014-07-25 14:18 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2014-08-25 10:35 - 2014-07-25 14:17 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2014-08-25 10:35 - 2014-07-25 14:17 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2014-08-25 10:35 - 2014-07-25 14:12 - 00438784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2014-08-25 10:35 - 2014-07-25 14:10 - 00292864 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2014-08-25 10:35 - 2014-07-25 14:10 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2014-08-25 10:35 - 2014-07-25 14:08 - 00597504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2014-08-25 10:35 - 2014-07-25 14:06 - 04204032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2014-08-25 10:35 - 2014-07-25 13:52 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2014-08-25 10:35 - 2014-07-25 13:47 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-08-25 10:35 - 2014-07-25 13:43 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2014-08-25 10:35 - 2014-07-25 13:42 - 00692736 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-08-25 10:35 - 2014-07-25 13:39 - 02087936 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-08-25 10:35 - 2014-07-25 13:39 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2014-08-25 10:35 - 2014-07-25 13:36 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2014-08-25 10:35 - 2014-07-25 13:34 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2014-08-25 10:35 - 2014-07-25 13:29 - 00239616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2014-08-25 10:35 - 2014-07-25 13:23 - 13547008 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-08-25 10:35 - 2014-07-25 13:13 - 00526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2014-08-25 10:35 - 2014-07-25 13:07 - 02001920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2014-08-25 10:35 - 2014-07-25 13:07 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2014-08-25 10:35 - 2014-07-25 13:03 - 11772928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2014-08-25 10:35 - 2014-07-25 12:52 - 02266624 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-08-25 10:35 - 2014-07-25 12:26 - 01431040 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-08-25 10:35 - 2014-07-25 12:17 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2014-08-25 10:35 - 2014-07-25 12:09 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2014-08-25 10:35 - 2014-07-25 12:05 - 01792512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2014-08-25 10:35 - 2014-07-25 12:00 - 01169920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2014-08-25 10:35 - 2014-07-16 05:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll 2014-08-25 10:35 - 2014-07-16 04:46 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll 2014-08-25 10:35 - 2014-07-01 00:24 - 00008856 _____ (Microsoft Corporation) C:\Windows\system32\icardres.dll 2014-08-25 10:35 - 2014-07-01 00:14 - 00008856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardres.dll 2014-08-25 10:35 - 2014-06-25 04:06 - 14179328 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll 2014-08-25 10:35 - 2014-06-25 03:37 - 12877312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll 2014-08-25 10:35 - 2014-06-18 04:18 - 00692736 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe 2014-08-25 10:35 - 2014-06-18 03:51 - 00646144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\osk.exe 2014-08-25 10:35 - 2014-06-06 12:10 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll 2014-08-25 10:35 - 2014-06-06 11:44 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll 2014-08-25 10:35 - 2014-06-06 08:16 - 00035480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TsWpfWrp.exe 2014-08-25 10:35 - 2014-06-06 08:12 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe 2014-08-25 10:35 - 2014-06-03 12:02 - 03241984 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll 2014-08-25 10:35 - 2014-06-03 12:02 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll 2014-08-25 10:35 - 2014-06-03 11:29 - 02363392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll 2014-08-25 10:35 - 2014-06-03 11:29 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll 2014-08-25 10:35 - 2014-06-03 04:42 - 01942016 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll 2014-08-25 10:35 - 2014-06-03 04:42 - 00112576 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe 2014-08-25 10:35 - 2014-06-03 04:13 - 01806336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll 2014-08-25 10:35 - 2014-05-08 11:32 - 03178496 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll 2014-08-25 10:35 - 2014-05-08 11:32 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\RdpGroupPolicyExtension.dll 2014-08-25 10:35 - 2014-04-12 04:32 - 01164800 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll 2014-08-25 10:35 - 2014-04-12 04:32 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll 2014-08-25 10:35 - 2014-04-12 04:32 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll 2014-08-25 10:35 - 2014-04-12 04:32 - 00215552 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll 2014-08-25 10:35 - 2014-04-12 04:32 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll 2014-08-25 10:35 - 2014-04-12 04:32 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll 2014-08-25 10:35 - 2014-04-12 04:31 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe 2014-08-25 10:35 - 2014-04-12 04:31 - 00148480 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe 2014-08-25 10:35 - 2014-04-12 04:31 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe 2014-08-25 10:35 - 2014-04-12 04:31 - 00058368 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll 2014-08-25 10:35 - 2014-04-12 04:31 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll 2014-08-25 10:35 - 2014-04-12 04:31 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll 2014-08-25 10:35 - 2014-04-12 04:31 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe 2014-08-25 10:35 - 2014-04-12 04:28 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll 2014-08-25 10:35 - 2014-04-12 04:28 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 04:28 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 04:28 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 04:28 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 04:28 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 04:28 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 04:28 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 04:28 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 04:28 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 04:28 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 04:28 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 04:28 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 04:28 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 04:28 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 04:28 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 04:28 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 04:28 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 04:28 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 04:28 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 04:28 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 04:28 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 04:28 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 04:28 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 04:28 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 04:28 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 04:28 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 04:28 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 04:28 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 04:06 - 00050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll 2014-08-25 10:35 - 2014-04-12 04:06 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe 2014-08-25 10:35 - 2014-04-12 04:06 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll 2014-08-25 10:35 - 2014-04-12 04:05 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll 2014-08-25 10:35 - 2014-04-12 04:05 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll 2014-08-25 10:35 - 2014-04-12 04:03 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll 2014-08-25 10:35 - 2014-04-12 04:03 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 04:03 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 04:03 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 04:03 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 04:03 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 04:03 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 04:03 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 04:03 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 04:03 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 04:03 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 04:03 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 04:03 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 04:03 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 04:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 04:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 04:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 04:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 04:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 04:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 04:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 04:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 04:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 04:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 04:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 03:34 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys 2014-08-25 10:35 - 2014-04-12 03:03 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe 2014-08-25 10:35 - 2014-04-12 03:03 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe 2014-08-25 10:35 - 2014-04-12 03:00 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 03:00 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 03:00 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 03:00 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll 2014-08-25 10:35 - 2014-04-05 04:37 - 01897408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys 2014-08-25 10:35 - 2014-04-05 04:37 - 00376768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys 2014-08-25 10:35 - 2014-04-05 04:37 - 00288192 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS 2014-08-25 10:35 - 2014-03-26 16:44 - 01882112 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll 2014-08-25 10:35 - 2014-03-26 16:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll 2014-08-25 10:35 - 2014-03-26 16:27 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll 2014-08-25 10:35 - 2014-03-26 16:25 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll 2014-08-25 10:35 - 2014-03-26 04:39 - 02001920 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll 2014-08-25 10:35 - 2014-03-26 04:36 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll 2014-08-25 10:35 - 2014-03-26 04:13 - 01388544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll 2014-08-25 10:35 - 2014-03-26 04:10 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6r.dll 2014-08-25 10:35 - 2014-03-09 23:48 - 01389208 _____ (Microsoft Corporation) C:\Windows\system32\icardagt.exe 2014-08-25 10:35 - 2014-03-09 23:48 - 00171160 _____ (Microsoft Corporation) C:\Windows\system32\infocardapi.dll 2014-08-25 10:35 - 2014-03-09 23:47 - 00619672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardagt.exe 2014-08-25 10:35 - 2014-03-09 23:47 - 00099480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\infocardapi.dll 2014-08-25 10:35 - 2014-03-04 13:11 - 05553088 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2014-08-25 10:35 - 2014-03-04 13:08 - 00455680 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe 2014-08-25 10:35 - 2014-03-04 13:08 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\cngprovider.dll 2014-08-25 10:35 - 2014-03-04 13:08 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\capiprovider.dll 2014-08-25 10:35 - 2014-03-04 13:08 - 00058880 _____ (Microsoft Corporation) C:\Windows\system32\adprovider.dll 2014-08-25 10:35 - 2014-03-04 13:08 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\dpapiprovider.dll 2014-08-25 10:35 - 2014-03-04 13:08 - 00046592 _____ (Microsoft Corporation) C:\Windows\system32\dimsroam.dll 2014-08-25 10:35 - 2014-03-04 13:08 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\wincredprovider.dll 2014-08-25 10:35 - 2014-03-04 12:42 - 03974080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe 2014-08-25 10:35 - 2014-03-04 12:42 - 03918784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe 2014-08-25 10:35 - 2014-03-04 12:39 - 00056320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cngprovider.dll 2014-08-25 10:35 - 2014-03-04 12:39 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\capiprovider.dll 2014-08-25 10:35 - 2014-03-04 12:39 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adprovider.dll 2014-08-25 10:35 - 2014-03-04 12:39 - 00049152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpapiprovider.dll 2014-08-25 10:35 - 2014-03-04 12:39 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dimsroam.dll 2014-08-25 10:35 - 2014-03-04 12:39 - 00038912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wincredprovider.dll 2014-08-25 10:35 - 2014-03-04 11:44 - 00722944 _____ (Microsoft Corporation) C:\Windows\system32\objsel.dll 2014-08-25 10:35 - 2014-03-04 11:17 - 00538112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\objsel.dll 2014-08-25 10:35 - 2014-02-04 04:35 - 00274880 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys 2014-08-25 10:35 - 2014-02-04 04:35 - 00190912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys 2014-08-25 10:35 - 2014-02-04 04:35 - 00027584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys 2014-08-25 10:35 - 2014-02-04 04:28 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\iologmsg.dll 2014-08-25 10:35 - 2014-02-04 04:00 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iologmsg.dll 2014-08-25 10:35 - 2013-12-25 01:09 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll 2014-08-25 10:35 - 2013-12-25 00:48 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll 2014-08-25 10:35 - 2013-12-04 04:27 - 00488448 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll 2014-08-25 10:35 - 2013-12-04 04:27 - 00485888 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll 2014-08-25 10:35 - 2013-12-04 04:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll 2014-08-25 10:35 - 2013-12-04 04:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll 2014-08-25 10:35 - 2013-12-04 04:26 - 00528384 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll 2014-08-25 10:35 - 2013-12-04 04:16 - 00658432 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe 2014-08-25 10:35 - 2013-12-04 04:16 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe 2014-08-25 10:35 - 2013-12-04 04:16 - 00553984 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe 2014-08-25 10:35 - 2013-12-04 04:16 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe 2014-08-25 10:35 - 2013-12-04 04:03 - 00428032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc.dll 2014-08-25 10:35 - 2013-12-04 04:03 - 00423936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_isv.dll 2014-08-25 10:35 - 2013-12-04 04:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp_isv.dll 2014-08-25 10:35 - 2013-12-04 04:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp.dll 2014-08-25 10:35 - 2013-12-04 04:02 - 00390144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdrm.dll 2014-08-25 10:35 - 2013-12-04 03:54 - 00594944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_isv.exe 2014-08-25 10:35 - 2013-12-04 03:54 - 00572416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate.exe 2014-08-25 10:35 - 2013-12-04 03:54 - 00510976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp.exe 2014-08-25 10:35 - 2013-12-04 03:54 - 00508928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp_isv.exe 2014-08-25 10:35 - 2013-11-26 10:16 - 03419136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll 2014-08-25 10:35 - 2013-11-23 00:48 - 03928064 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll 2014-08-25 10:35 - 2011-04-09 08:58 - 00142336 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe 2014-08-25 10:35 - 2011-04-09 07:56 - 00123904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe 2014-08-25 10:34 - 2014-06-16 04:10 - 00985536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys 2014-08-25 10:34 - 2014-05-30 08:45 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys 2014-08-25 10:34 - 2014-04-25 04:27 - 00801792 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll 2014-08-25 10:34 - 2014-04-25 03:58 - 00626688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usp10.dll 2014-08-25 10:34 - 2014-03-04 13:08 - 00421376 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll 2014-08-25 10:34 - 2014-03-04 12:38 - 00275456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll 2014-08-25 10:34 - 2014-01-29 04:32 - 00484864 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll 2014-08-25 10:34 - 2014-01-29 04:06 - 00381440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll 2014-08-25 10:34 - 2014-01-28 04:32 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll 2014-08-25 10:34 - 2014-01-24 04:40 - 01684416 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys 2014-08-25 10:34 - 2013-11-27 03:41 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys 2014-08-25 10:34 - 2013-11-27 03:41 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys 2014-08-25 10:34 - 2013-11-27 03:41 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys 2014-08-25 10:34 - 2013-11-27 03:41 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys 2014-08-25 10:34 - 2013-11-27 03:41 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys 2014-08-25 10:33 - 2014-06-05 16:44 - 01462272 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2014-08-25 10:33 - 2014-06-05 16:44 - 00463872 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll 2014-08-25 10:33 - 2014-06-05 16:44 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2014-08-25 10:33 - 2014-06-05 16:16 - 00342528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll 2014-08-25 10:33 - 2014-06-05 16:16 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll 2014-08-25 10:33 - 2014-06-05 16:16 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll 2014-08-25 10:33 - 2014-06-05 16:15 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll 2014-08-25 10:33 - 2014-04-12 04:34 - 00155072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys 2014-08-25 10:33 - 2014-04-12 04:34 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys 2014-08-25 10:33 - 2014-04-12 04:32 - 00307712 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll 2014-08-25 10:33 - 2014-04-12 04:32 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll 2014-08-25 10:33 - 2014-04-12 04:32 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll 2014-08-25 10:33 - 2014-04-12 04:32 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll 2014-08-25 10:33 - 2014-04-12 04:31 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe 2014-08-25 10:33 - 2014-04-12 04:31 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe 2014-08-25 10:33 - 2014-04-12 04:30 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll 2014-08-25 10:33 - 2014-04-12 04:29 - 00145920 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll 2014-08-25 10:33 - 2014-04-12 04:28 - 00685056 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll 2014-08-25 10:33 - 2014-04-12 04:06 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll 2014-08-25 10:33 - 2014-04-12 04:06 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe 2014-08-25 10:33 - 2014-04-12 04:04 - 00145920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll 2014-08-25 10:33 - 2014-04-12 04:04 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll 2014-08-25 10:33 - 2014-04-12 04:03 - 00685056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll 2014-08-25 10:33 - 2014-03-04 13:08 - 00729088 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll 2014-08-25 10:33 - 2014-03-04 13:08 - 00315904 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll 2014-08-25 10:33 - 2014-03-04 13:08 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll 2014-08-25 10:33 - 2014-03-04 13:08 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll 2014-08-25 10:33 - 2014-03-04 13:08 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll 2014-08-25 10:33 - 2014-03-04 12:39 - 00551424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll 2014-08-25 10:33 - 2014-03-04 12:39 - 00260096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll 2014-08-25 10:33 - 2014-03-04 12:39 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll 2014-08-25 10:33 - 2014-03-04 12:39 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll 2014-08-25 10:33 - 2014-03-04 12:39 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll 2014-08-25 10:33 - 2014-02-04 04:32 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll 2014-08-25 10:33 - 2014-02-04 04:04 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll 2014-08-25 10:32 - 2014-08-07 04:06 - 00529920 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2014-08-25 10:32 - 2014-08-07 04:01 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2014-08-25 10:32 - 2014-07-14 03:52 - 01215488 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll 2014-08-25 10:32 - 2014-07-14 03:52 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll 2014-08-25 10:32 - 2014-07-14 03:42 - 00141312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpchttp.dll 2014-08-25 10:32 - 2014-07-14 03:41 - 00665088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll 2014-08-25 10:25 - 2014-09-04 16:19 - 00009734 _____ () C:\Windows\DPINST.LOG 2014-08-25 10:25 - 2014-08-25 10:56 - 00142336 _____ (G Data Software AG) C:\Windows\system32\Drivers\MiniIcpt.sys 2014-08-25 10:25 - 2014-08-25 10:56 - 00064000 _____ (G Data Software AG) C:\Windows\system32\Drivers\PktIcpt.sys 2014-08-25 10:25 - 2014-08-25 10:56 - 00064000 _____ (G Data Software AG) C:\Windows\system32\Drivers\gdwfpcd64.sys 2014-08-25 10:25 - 2014-08-25 10:56 - 00061440 _____ (G Data Software AG) C:\Windows\system32\Drivers\HookCentre.sys 2014-08-25 10:25 - 2014-08-25 10:56 - 00055808 _____ (G Data Software AG) C:\Windows\system32\Drivers\GDBehave.sys 2014-08-25 10:25 - 2014-08-25 10:56 - 00020992 _____ (G Data Software AG) C:\Windows\system32\Drivers\GDKBFlt64.sys 2014-08-25 10:25 - 2014-08-25 10:25 - 00000779 _____ () C:\Users\Admin\AppData\Roaming\gdscan.log 2014-08-25 10:25 - 2014-08-25 10:25 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_GDKBFlt64_01007.Wdf 2014-08-25 10:25 - 2014-08-25 10:25 - 00000000 ____D () C:\Program Files (x86)\G Data 2014-08-25 10:25 - 2014-08-25 10:25 - 00000000 _____ () C:\Users\Admin\AppData\Roaming\gdfw.log 2014-08-25 10:24 - 2014-08-25 10:49 - 00000000 ____D () C:\ProgramData\G Data 2014-08-25 10:23 - 2014-05-14 18:23 - 02477536 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll 2014-08-25 10:23 - 2014-05-14 18:23 - 00700384 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll 2014-08-25 10:23 - 2014-05-14 18:23 - 00581600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll 2014-08-25 10:23 - 2014-05-14 18:23 - 00058336 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe 2014-08-25 10:23 - 2014-05-14 18:23 - 00044512 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll 2014-08-25 10:23 - 2014-05-14 18:23 - 00038880 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll 2014-08-25 10:23 - 2014-05-14 18:23 - 00036320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll 2014-08-25 10:23 - 2014-05-14 18:21 - 02620928 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll 2014-08-25 10:23 - 2014-05-14 18:20 - 00097792 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll 2014-08-25 10:23 - 2014-05-14 18:17 - 00092672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll 2014-08-25 10:23 - 2014-05-14 09:23 - 00198600 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll 2014-08-25 10:23 - 2014-05-14 09:23 - 00179656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll 2014-08-25 10:23 - 2014-05-14 09:20 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe 2014-08-25 10:23 - 2014-05-14 09:17 - 00033792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe 2014-08-25 09:42 - 2014-09-04 15:42 - 00000000 ____D () C:\Users\Admin\AppData\Local\VirtualStore 2014-08-25 09:33 - 2014-08-26 11:24 - 00084688 _____ () C:\Users\Admin\AppData\Local\GDIPFONTCACHEV1.DAT 2014-08-25 09:08 - 2014-08-25 08:13 - 00000000 ____D () C:\Windows\Panther 2014-08-25 08:13 - 2014-09-04 16:20 - 00000000 ____D () C:\Users\Admin 2014-08-25 08:13 - 2014-09-03 20:24 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\Adobe 2014-08-25 08:13 - 2014-08-25 08:13 - 00000020 ___SH () C:\Users\Admin\ntuser.ini 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Musik 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Bilder 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Default\Vorlagen 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Default\Startmenü 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Default\Druckumgebung 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Admin\Vorlagen 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Admin\Startmenü 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Admin\Netzwerkumgebung 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Admin\Lokale Einstellungen 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Admin\Eigene Dateien 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Admin\Druckumgebung 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Admin\Documents\Eigene Musik 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Admin\Documents\Eigene Bilder 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Admin\AppData\Local\Verlauf 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Admin\AppData\Local\Anwendungsdaten 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Admin\Anwendungsdaten 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Programme 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\ProgramData\Vorlagen 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\ProgramData\Startmenü 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\ProgramData\Microsoft\Windows\Start Menu\Programme 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\ProgramData\Favoriten 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\ProgramData\Dokumente 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\ProgramData\Anwendungsdaten 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Program Files\Gemeinsame Dateien 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Dokumente und Einstellungen 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 __SHD () C:\Recovery 2014-08-25 08:13 - 2009-07-14 06:54 - 00000000 ___RD () C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2014-08-25 08:13 - 2009-07-14 06:49 - 00000000 ___RD () C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance 2014-08-25 08:10 - 2014-09-05 20:19 - 01268186 _____ () C:\Windows\WindowsUpdate.log 2014-08-25 08:10 - 2014-08-25 11:39 - 00000000 ____D () C:\Program Files\WinRAR 2014-08-25 08:10 - 2014-08-25 08:10 - 00001355 _____ () C:\Windows\TSSysprep.log 2014-08-25 08:09 - 2014-08-25 08:09 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdFs_01_09_00.Wdf 2014-08-21 12:58 - 2013-04-26 10:24 - 01721576 _____ (Microsoft Corporation) C:\Windows\system32\WdfCoInstaller01009.dll 2014-08-21 12:58 - 2013-04-26 10:24 - 00786416 _____ (Intel Corporation) C:\Windows\system32\Drivers\iusb3xhc.sys 2014-08-21 12:58 - 2013-04-26 10:24 - 00368112 _____ (Intel Corporation) C:\Windows\system32\Drivers\iusb3hub.sys 2014-08-21 12:58 - 2013-04-26 10:24 - 00020464 _____ (Intel Corporation) C:\Windows\system32\Drivers\iusb3hcs.sys 2014-08-20 16:00 - 2013-07-16 09:21 - 00121032 _____ (Qualcomm Atheros Co., Ltd.) C:\Windows\system32\Drivers\L1C60x64.sys 2014-08-14 00:24 - 2014-08-14 00:24 - 20068496 _____ (Intel Corporation) C:\Windows\system32\igdumdim64.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 04575208 _____ (Intel Corporation) C:\Windows\SysWOW64\igdusc32.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 01365504 _____ (Intel Corporation) C:\Windows\system32\igfxcmjit64.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 01137080 _____ (Intel Corporation) C:\Windows\system32\iglhsip64.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 01132960 _____ (Intel Corporation) C:\Windows\SysWOW64\iglhsip32.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 01061376 _____ (Intel Corporation) C:\Windows\SysWOW64\igfxcmjit32.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00734720 _____ (Intel Corporation) C:\Windows\system32\MetroIntelGenericUIFramework.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00453448 _____ () C:\Windows\system32\igfxTray.exe 2014-08-14 00:24 - 2014-08-14 00:24 - 00372736 _____ (Intel Corporation) C:\Windows\system32\igfxOSP.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00372224 _____ (Intel Corporation) C:\Windows\system32\IntelOpenCL64.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00304128 _____ (Intel Corporation) C:\Windows\SysWOW64\IntelOpenCL32.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00276808 _____ (Intel Corporation) C:\Windows\SysWOW64\IntelCpHeciSvc.exe 2014-08-14 00:24 - 2014-08-14 00:24 - 00254976 _____ () C:\Windows\system32\igfxCPL.cpl 2014-08-14 00:24 - 2014-08-14 00:24 - 00222720 _____ (Intel Corporation) C:\Windows\system32\igfxDTCM.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00220392 _____ (Intel Corporation) C:\Windows\system32\iglhcp64.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00212660 _____ () C:\Windows\system32\resTHA.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00207496 _____ (Intel Corporation) C:\Windows\system32\igfxcmrt64.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00206848 _____ (Intel Corporation) C:\Windows\system32\igfx11cmrt64.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00203812 _____ () C:\Windows\system32\resELL.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00199652 _____ () C:\Windows\system32\resRUS.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00191816 _____ (Intel Corporation) C:\Windows\system32\igfxext.exe 2014-08-14 00:24 - 2014-08-14 00:24 - 00184312 _____ (Intel Corporation) C:\Windows\SysWOW64\iglhcp32.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00182784 _____ (Intel Corporation) C:\Windows\system32\igfxCoIn_v3907.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00182356 _____ () C:\Windows\system32\resARA.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00181828 _____ () C:\Windows\system32\resJPN.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00181364 _____ () C:\Windows\system32\resHEB.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00176116 _____ () C:\Windows\system32\resFRA.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00176052 _____ () C:\Windows\system32\resHUN.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00175024 _____ (Intel Corporation) C:\Windows\SysWOW64\igfxcmrt32.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00174592 _____ (Intel Corporation) C:\Windows\SysWOW64\igfx11cmrt32.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00174340 _____ () C:\Windows\system32\resKOR.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00174004 _____ () C:\Windows\system32\resDEU.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00173748 _____ () C:\Windows\system32\resITA.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00173492 _____ () C:\Windows\system32\resROM.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00173460 _____ () C:\Windows\system32\resESN.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00173444 _____ () C:\Windows\system32\resSKY.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00173044 _____ () C:\Windows\system32\resPLK.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00172676 _____ () C:\Windows\system32\resNLD.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00171876 _____ () C:\Windows\system32\resPTB.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00171860 _____ () C:\Windows\system32\resTRK.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00171796 _____ () C:\Windows\system32\resCSY.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00171332 _____ () C:\Windows\system32\resPTG.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00171156 _____ () C:\Windows\system32\resFIN.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00170548 _____ () C:\Windows\system32\resHRV.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00170020 _____ () C:\Windows\system32\resSLV.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00170004 _____ () C:\Windows\system32\resSVE.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00168788 _____ () C:\Windows\system32\resNOR.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00168132 _____ () C:\Windows\system32\resDAN.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00166660 _____ () C:\Windows\system32\resENU.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00164836 _____ () C:\Windows\system32\resCHT.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00163652 _____ () C:\Windows\system32\resCHS.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00082432 _____ (Khronos Group) C:\Windows\system32\Intel_OpenCL_ICD64.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00074752 _____ (Khronos Group) C:\Windows\SysWOW64\Intel_OpenCL_ICD32.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00069632 _____ () C:\Windows\system32\igfxCUIServicePS.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00069632 _____ ( ) C:\Windows\system32\igfxDHLibv2_0.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00058880 _____ ( ) C:\Windows\system32\igfxDHLib.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00031408 _____ (Intel Corporation) C:\Windows\system32\igfxexps.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00030720 _____ (Intel Corporation) C:\Windows\SysWOW64\igfxexps32.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00010752 _____ ( ) C:\Windows\system32\igfxDILib.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00010240 _____ ( ) C:\Windows\system32\igfxEMLibv2_0.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00010240 _____ ( ) C:\Windows\system32\igfxEMLib.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00010240 _____ ( ) C:\Windows\system32\igfxDILibv2_0.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00005120 _____ ( ) C:\Windows\system32\igfxLHMLibv2_0.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00005120 _____ ( ) C:\Windows\system32\igfxLHMLib.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00003920 _____ () C:\Windows\system32\iglhxs64.vp 2014-08-14 00:23 - 2014-08-14 00:23 - 23686656 _____ (Intel Corporation) C:\Windows\system32\igdfcl64.dll 2014-08-14 00:23 - 2014-08-14 00:23 - 19298568 _____ (Intel Corporation) C:\Windows\SysWOW64\igdumdim32.dll 2014-08-14 00:23 - 2014-08-14 00:23 - 18558976 _____ (Intel Corporation) C:\Windows\SysWOW64\igdfcl32.dll 2014-08-14 00:23 - 2014-08-14 00:23 - 13199432 _____ () C:\Windows\system32\igd11dxva64.dll 2014-08-14 00:23 - 2014-08-14 00:23 - 12728192 _____ () C:\Windows\SysWOW64\igd11dxva32.dll 2014-08-14 00:23 - 2014-08-14 00:23 - 08841728 _____ (Intel Corporation) C:\Windows\system32\ig75icd64.dll 2014-08-14 00:23 - 2014-08-14 00:23 - 08237056 _____ (Intel Corporation) C:\Windows\system32\igdrcl64.dll 2014-08-14 00:23 - 2014-08-14 00:23 - 07679488 _____ (Intel Corporation) C:\Windows\SysWOW64\igdrcl32.dll 2014-08-14 00:23 - 2014-08-14 00:23 - 06970976 _____ (Intel Corporation) C:\Windows\SysWOW64\igd10iumd32.dll 2014-08-14 00:23 - 2014-08-14 00:23 - 06946816 _____ (Intel Corporation) C:\Windows\SysWOW64\ig75icd32.dll 2014-08-14 00:23 - 2014-08-14 00:23 - 04786544 _____ (Intel Corporation) C:\Windows\system32\Drivers\igdkmd64.sys 2014-08-14 00:23 - 2014-08-14 00:23 - 03399496 _____ (Intel Corporation) C:\Windows\system32\Gfxv4_0.exe 2014-08-14 00:23 - 2014-08-14 00:23 - 03395912 _____ (Intel Corporation) C:\Windows\system32\Gfxv2_0.exe 2014-08-14 00:23 - 2014-08-14 00:23 - 00929608 _____ (Intel Corporation) C:\Windows\system32\GfxUIEx.exe 2014-08-14 00:23 - 2014-08-14 00:23 - 00604552 _____ (Intel Corporation) C:\Windows\system32\igdmd64.dll 2014-08-14 00:23 - 2014-08-14 00:23 - 00543560 _____ (Intel Corporation) C:\Windows\system32\DPTopologyApp.exe 2014-08-14 00:23 - 2014-08-14 00:23 - 00543048 _____ (Intel Corporation) C:\Windows\system32\DPTopologyAppv2_0.exe 2014-08-14 00:23 - 2014-08-14 00:23 - 00483000 _____ (Intel Corporation) C:\Windows\SysWOW64\igdmd32.dll 2014-08-14 00:23 - 2014-08-14 00:23 - 00393728 _____ (Intel Corporation) C:\Windows\system32\igdbcl64.dll 2014-08-14 00:23 - 2014-08-14 00:23 - 00346112 _____ (Intel Corporation) C:\Windows\SysWOW64\igdbcl32.dll 2014-08-14 00:23 - 2014-08-14 00:23 - 00225792 _____ () C:\Windows\system32\igdde64.dll 2014-08-14 00:23 - 2014-08-14 00:23 - 00186368 _____ () C:\Windows\SysWOW64\igdde32.dll 2014-08-14 00:23 - 2014-08-14 00:23 - 00162304 _____ (Intel Corporation) C:\Windows\system32\igdail64.dll 2014-08-14 00:23 - 2014-08-14 00:23 - 00152392 _____ (Intel Corporation) C:\Windows\system32\difx64.exe 2014-08-14 00:23 - 2014-08-14 00:23 - 00144896 _____ (Intel Corporation) C:\Windows\SysWOW64\igdail32.dll |
05.09.2014, 19:28 | #4 |
| Malware nach Installation von MyPhoneExplorer Teil 2. der FRST.TXT Code:
ATTFilter ==================== One Month Modified Files and Folders ======= (If an entry is included in the fixlist, the file\folder will be moved.) 2014-09-05 20:20 - 2014-09-05 20:19 - 00010384 _____ () C:\Users\Admin\Desktop\FRST.txt 2014-09-05 20:19 - 2014-09-05 20:18 - 00000000 ____D () C:\FRST 2014-09-05 20:19 - 2014-08-25 08:10 - 01268186 _____ () C:\Windows\WindowsUpdate.log 2014-09-05 20:17 - 2014-09-05 20:17 - 02104832 _____ (Farbar) C:\Users\Admin\Desktop\FRST64.exe 2014-09-05 20:07 - 2014-09-05 20:07 - 00000716 _____ () C:\Users\Admin\Desktop\G DATA Protokoll ID 35.txt 2014-09-05 19:57 - 2014-09-01 19:38 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-09-05 15:47 - 2014-09-05 15:47 - 00000482 _____ () C:\Users\Admin\Desktop\eset_ergebniss.txt 2014-09-05 15:17 - 2011-04-12 09:43 - 00699726 _____ () C:\Windows\system32\perfh007.dat 2014-09-05 15:17 - 2011-04-12 09:43 - 00149364 _____ () C:\Windows\system32\perfc007.dat 2014-09-05 15:17 - 2009-07-14 07:13 - 01621742 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-09-05 15:15 - 2014-08-25 10:53 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service 2014-09-05 15:15 - 2009-07-14 06:45 - 00031584 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-09-05 15:15 - 2009-07-14 06:45 - 00031584 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-09-05 15:13 - 2014-09-05 15:13 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2014-09-05 15:12 - 2014-09-05 15:12 - 00000000 ____D () C:\Program Files (x86)\ESET 2014-09-05 15:11 - 2014-09-05 15:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MyPhoneExplorer 2014-09-05 15:11 - 2014-09-05 15:11 - 00000000 ____D () C:\Program Files (x86)\MyPhoneExplorer 2014-09-05 15:10 - 2014-08-26 11:24 - 00003758 _____ () C:\Windows\System32\Tasks\AutoKMS 2014-09-05 15:10 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-09-05 15:10 - 2009-07-14 06:51 - 00029706 _____ () C:\Windows\setupact.log 2014-09-04 21:27 - 2014-09-02 20:09 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\vlc 2014-09-04 16:20 - 2014-09-04 16:20 - 00000000 ____D () C:\Users\Admin\Logitech 2014-09-04 16:20 - 2014-08-25 08:13 - 00000000 ____D () C:\Users\Admin 2014-09-04 16:19 - 2014-09-04 16:19 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\InstallShield 2014-09-04 16:19 - 2014-09-04 16:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logitech 2014-09-04 16:19 - 2014-09-04 16:19 - 00000000 ____D () C:\Program Files (x86)\Logitech 2014-09-04 16:19 - 2014-08-25 11:58 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information 2014-09-04 16:19 - 2014-08-25 10:25 - 00009734 _____ () C:\Windows\DPINST.LOG 2014-09-04 16:11 - 2014-09-04 16:10 - 00000000 ____D () C:\Users\Admin\.gimp-2.8 2014-09-04 16:10 - 2014-09-04 16:10 - 00000909 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GIMP 2.lnk 2014-09-04 16:10 - 2014-09-04 16:10 - 00000000 ____D () C:\Users\Admin\AppData\Local\gegl-0.2 2014-09-04 16:10 - 2014-09-04 16:09 - 00000000 ____D () C:\Program Files\GIMP 2 2014-09-04 15:50 - 2014-09-04 15:50 - 00000000 ____D () C:\Users\Admin\AppData\Local\FreeCommanderXE 2014-09-04 15:50 - 2014-09-04 15:50 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FreeCommander XE 2014-09-04 15:50 - 2014-09-04 15:50 - 00000000 ____D () C:\Program Files (x86)\FreeCommander XE 2014-09-04 15:42 - 2014-08-25 09:42 - 00000000 ____D () C:\Users\Admin\AppData\Local\VirtualStore 2014-09-04 15:41 - 2014-09-04 15:40 - 00000000 ____D () C:\Program Files (x86)\Audiograbber 2014-09-04 15:40 - 2014-09-04 15:40 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audiograbber 2014-09-04 15:19 - 2014-09-03 20:35 - 00000000 ____D () C:\Program Files (x86)\Steam 2014-09-03 20:35 - 2014-09-03 20:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam 2014-09-03 20:26 - 2014-09-03 20:26 - 00084688 _____ () C:\Users\Matze\AppData\Local\GDIPFONTCACHEV1.DAT 2014-09-03 20:26 - 2014-09-03 20:26 - 00000000 ____D () C:\Users\Matze\AppData\Roaming\Intel Corporation 2014-09-03 20:25 - 2014-09-03 20:25 - 00000020 ___SH () C:\Users\Matze\ntuser.ini 2014-09-03 20:25 - 2014-09-03 20:25 - 00000000 _SHDL () C:\Users\Matze\Vorlagen 2014-09-03 20:25 - 2014-09-03 20:25 - 00000000 _SHDL () C:\Users\Matze\Startmenü 2014-09-03 20:25 - 2014-09-03 20:25 - 00000000 _SHDL () C:\Users\Matze\Netzwerkumgebung 2014-09-03 20:25 - 2014-09-03 20:25 - 00000000 _SHDL () C:\Users\Matze\Lokale Einstellungen 2014-09-03 20:25 - 2014-09-03 20:25 - 00000000 _SHDL () C:\Users\Matze\Eigene Dateien 2014-09-03 20:25 - 2014-09-03 20:25 - 00000000 _SHDL () C:\Users\Matze\Druckumgebung 2014-09-03 20:25 - 2014-09-03 20:25 - 00000000 _SHDL () C:\Users\Matze\Documents\Eigene Musik 2014-09-03 20:25 - 2014-09-03 20:25 - 00000000 _SHDL () C:\Users\Matze\Documents\Eigene Bilder 2014-09-03 20:25 - 2014-09-03 20:25 - 00000000 _SHDL () C:\Users\Matze\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-09-03 20:25 - 2014-09-03 20:25 - 00000000 _SHDL () C:\Users\Matze\AppData\Local\Verlauf 2014-09-03 20:25 - 2014-09-03 20:25 - 00000000 _SHDL () C:\Users\Matze\AppData\Local\Anwendungsdaten 2014-09-03 20:25 - 2014-09-03 20:25 - 00000000 _SHDL () C:\Users\Matze\Anwendungsdaten 2014-09-03 20:25 - 2014-09-03 20:25 - 00000000 ____D () C:\Users\Matze\AppData\Local\VirtualStore 2014-09-03 20:25 - 2014-09-03 20:25 - 00000000 ____D () C:\Users\Matze 2014-09-03 20:24 - 2014-09-03 20:24 - 00000000 ____D () C:\Users\Admin\AppData\Local\Adobe 2014-09-03 20:24 - 2014-08-25 08:13 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\Adobe 2014-09-03 20:21 - 2014-09-03 20:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sicherheit & Optimierung 2014-09-03 20:20 - 2014-09-03 20:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDF Tools 2014-09-03 20:20 - 2014-09-03 20:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla 2014-09-03 20:20 - 2014-09-03 20:18 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hardware 2014-09-03 20:18 - 2014-09-03 20:16 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mediaplayer 2014-09-03 20:17 - 2014-09-03 20:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Brennprogramme 2014-09-03 20:17 - 2009-07-14 05:20 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories 2014-09-03 20:03 - 2014-08-25 10:52 - 00000510 _____ () C:\Windows\system32\{F33C3B9B-72AF-418A-B3FD-560646F7CDA2}.bat 2014-09-03 20:03 - 2014-08-25 10:39 - 00000000 ____D () C:\Intel 2014-09-03 19:35 - 2009-07-14 06:45 - 00340720 _____ () C:\Windows\system32\FNTCACHE.DAT 2014-09-02 20:09 - 2014-09-02 20:09 - 00000000 ____D () C:\Program Files (x86)\VideoLAN 2014-09-02 18:42 - 2014-09-02 18:42 - 00010009 _____ () C:\Windows\DirectX.log 2014-09-02 18:42 - 2014-09-02 18:40 - 00000000 ___HD () C:\Windows\msdownld.tmp 2014-09-02 18:42 - 2014-09-02 18:40 - 00000000 ____D () C:\Windows\SysWOW64\directx 2014-09-02 18:35 - 2014-09-02 18:30 - 00000000 ____D () C:\Program Files (x86)\DVBViewer 2014-09-02 18:34 - 2014-09-02 18:34 - 00000000 ____D () C:\Program Files (x86)\LAV Filters 2014-09-02 18:34 - 2014-09-02 18:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVBViewer 2014-09-02 18:30 - 2014-09-02 18:30 - 00000000 ____D () C:\ProgramData\CMUV 2014-09-01 20:15 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\oobe 2014-09-01 20:13 - 2014-09-01 20:13 - 00002410 _____ () C:\Windows\SysWOW64\cplLogon.tsk 2014-09-01 20:13 - 2014-09-01 20:13 - 00000000 ____D () C:\Program Files\Logon Screen 2014-09-01 20:01 - 2009-07-14 07:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games 2014-09-01 20:01 - 2009-07-14 07:32 - 00000000 ____D () C:\Program Files\Microsoft Games 2014-09-01 20:01 - 2009-07-14 07:32 - 00000000 ____D () C:\Program Files\DVD Maker 2014-09-01 19:56 - 2014-09-01 19:56 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\Canneverbe Limited 2014-09-01 19:56 - 2014-09-01 19:56 - 00000000 ____D () C:\ProgramData\Canneverbe Limited 2014-09-01 19:56 - 2014-09-01 19:56 - 00000000 ____D () C:\Program Files (x86)\CDBurnerXP 2014-09-01 19:52 - 2014-09-01 19:52 - 00000000 ____D () C:\Users\Admin\Documents\AnyDVDHD 2014-09-01 19:50 - 2014-09-01 19:50 - 00000040 ___SH () C:\ProgramData\.zreglib 2014-09-01 19:50 - 2014-09-01 19:36 - 00000000 ____D () C:\ProgramData\Adobe 2014-09-01 19:49 - 2014-09-01 19:49 - 00000000 ____D () C:\ProgramData\SlySoft 2014-09-01 19:49 - 2014-09-01 19:49 - 00000000 ____D () C:\Program Files (x86)\SlySoft 2014-09-01 19:43 - 2014-09-01 19:43 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\Oracle 2014-09-01 19:41 - 2014-09-01 19:41 - 00272808 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe 2014-09-01 19:41 - 2014-09-01 19:41 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe 2014-09-01 19:41 - 2014-09-01 19:41 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe 2014-09-01 19:41 - 2014-09-01 19:41 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll 2014-09-01 19:41 - 2014-09-01 19:41 - 00000000 ____D () C:\ProgramData\Sun 2014-09-01 19:41 - 2014-09-01 19:41 - 00000000 ____D () C:\ProgramData\Oracle 2014-09-01 19:41 - 2014-09-01 19:41 - 00000000 ____D () C:\Program Files (x86)\Java 2014-09-01 19:38 - 2014-09-01 19:38 - 00699568 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2014-09-01 19:38 - 2014-09-01 19:38 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2014-09-01 19:38 - 2014-09-01 19:38 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater 2014-09-01 19:38 - 2014-09-01 19:38 - 00000000 ____D () C:\Windows\SysWOW64\Macromed 2014-09-01 19:38 - 2014-09-01 19:38 - 00000000 ____D () C:\Windows\system32\Macromed 2014-09-01 19:38 - 2014-09-01 19:38 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\Macromedia 2014-09-01 19:38 - 2014-09-01 19:38 - 00000000 ____D () C:\Users\Admin\AppData\Local\Macromedia 2014-09-01 19:36 - 2014-09-01 19:36 - 00000000 ____D () C:\Program Files (x86)\Adobe 2014-09-01 18:51 - 2014-09-01 18:51 - 00001436 _____ () C:\Users\Bine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2014-09-01 18:51 - 2014-09-01 18:51 - 00000000 ____D () C:\Users\Bine\AppData\Roaming\Mozilla 2014-09-01 18:51 - 2014-09-01 18:51 - 00000000 ____D () C:\Users\Bine\AppData\Roaming\Adobe 2014-09-01 18:51 - 2014-09-01 18:51 - 00000000 ____D () C:\Users\Bine\AppData\Local\Mozilla 2014-09-01 18:51 - 2014-09-01 18:50 - 00000000 ____D () C:\Users\Bine 2014-09-01 18:50 - 2014-09-01 18:50 - 00000020 ___SH () C:\Users\Bine\ntuser.ini 2014-09-01 18:50 - 2014-09-01 18:50 - 00000000 _SHDL () C:\Users\Bine\Vorlagen 2014-09-01 18:50 - 2014-09-01 18:50 - 00000000 _SHDL () C:\Users\Bine\Startmenü 2014-09-01 18:50 - 2014-09-01 18:50 - 00000000 _SHDL () C:\Users\Bine\Netzwerkumgebung 2014-09-01 18:50 - 2014-09-01 18:50 - 00000000 _SHDL () C:\Users\Bine\Lokale Einstellungen 2014-09-01 18:50 - 2014-09-01 18:50 - 00000000 _SHDL () C:\Users\Bine\Eigene Dateien 2014-09-01 18:50 - 2014-09-01 18:50 - 00000000 _SHDL () C:\Users\Bine\Druckumgebung 2014-09-01 18:50 - 2014-09-01 18:50 - 00000000 _SHDL () C:\Users\Bine\Documents\Eigene Musik 2014-09-01 18:50 - 2014-09-01 18:50 - 00000000 _SHDL () C:\Users\Bine\Documents\Eigene Bilder 2014-09-01 18:50 - 2014-09-01 18:50 - 00000000 _SHDL () C:\Users\Bine\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-09-01 18:50 - 2014-09-01 18:50 - 00000000 _SHDL () C:\Users\Bine\AppData\Local\Verlauf 2014-09-01 18:50 - 2014-09-01 18:50 - 00000000 _SHDL () C:\Users\Bine\AppData\Local\Anwendungsdaten 2014-09-01 18:50 - 2014-09-01 18:50 - 00000000 _SHDL () C:\Users\Bine\Anwendungsdaten 2014-09-01 18:50 - 2014-09-01 18:50 - 00000000 ____D () C:\Users\Bine\AppData\Local\VirtualStore 2014-09-01 17:57 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF 2014-09-01 17:47 - 2014-09-01 17:47 - 00106272 _____ (G Data Software) C:\Windows\system32\Drivers\GRD.sys 2014-09-01 17:47 - 2014-09-01 17:47 - 00018160 _____ (G Data Software) C:\Windows\system32\Drivers\GdPhyMem.sys 2014-09-01 17:40 - 2014-09-01 17:40 - 00000000 ___HD () C:\ProgramData\CanonIJScan 2014-09-01 17:40 - 2014-09-01 17:35 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\Canon 2014-09-01 17:35 - 2014-09-01 17:32 - 00000000 ____D () C:\Program Files (x86)\Canon 2014-09-01 17:32 - 2014-09-01 17:32 - 00000000 ____D () C:\Windows\system32\STRING 2014-09-01 17:32 - 2014-09-01 17:32 - 00000000 ____D () C:\ProgramData\Canon IJ Network Tool 2014-09-01 17:32 - 2009-07-14 05:20 - 00000000 __RSD () C:\Windows\Media 2014-09-01 17:31 - 2014-09-01 17:31 - 00000000 ___HD () C:\Windows\system32\CanonIJ Uninstaller Information 2014-09-01 17:31 - 2014-09-01 17:31 - 00000000 ___HD () C:\ProgramData\CanonBJ 2014-09-01 17:30 - 2014-09-01 17:30 - 00000000 ___HD () C:\Program Files\CanonBJ 2014-09-01 16:29 - 2014-09-01 16:29 - 00000000 ____D () C:\Users\Admin\AppData\Local\G DATA 2014-09-01 15:52 - 2014-09-01 15:52 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\Thunderbird 2014-09-01 15:52 - 2014-09-01 15:52 - 00000000 ____D () C:\Users\Admin\AppData\Local\Thunderbird 2014-09-01 15:52 - 2014-09-01 15:52 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird 2014-08-29 11:18 - 2014-08-29 11:18 - 00000000 ____D () C:\Wallpapers 2014-08-29 11:16 - 2014-08-29 11:16 - 00000000 ____D () C:\Users\Admin\AppData\Local\Apps\2.0 2014-08-26 12:02 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache 2014-08-26 11:41 - 2014-08-26 11:17 - 00000000 ____D () C:\ProgramData\Microsoft Help 2014-08-26 11:40 - 2014-09-03 20:25 - 00000000 ____D () C:\Users\Matze\AppData\Local\Microsoft Help 2014-08-26 11:40 - 2014-09-01 18:50 - 00000000 ____D () C:\Users\Bine\AppData\Local\Microsoft Help 2014-08-26 11:40 - 2014-08-26 11:40 - 00000000 ____D () C:\Users\Default\AppData\Local\Microsoft Help 2014-08-26 11:40 - 2014-08-26 11:40 - 00000000 ____D () C:\Users\Default User\AppData\Local\Microsoft Help 2014-08-26 11:40 - 2014-08-26 11:40 - 00000000 ____D () C:\Program Files\Common Files\DESIGNER 2014-08-26 11:28 - 2014-08-26 11:24 - 00000000 ____D () C:\Windows\AutoKMS 2014-08-26 11:24 - 2014-08-26 11:24 - 00000000 ____D () C:\ProgramData\Microsoft Toolkit 2014-08-26 11:24 - 2014-08-25 09:33 - 00084688 _____ () C:\Users\Admin\AppData\Local\GDIPFONTCACHEV1.DAT 2014-08-26 11:19 - 2014-08-26 11:19 - 00000000 ____D () C:\Windows\System32\Tasks\OfficeSoftwareProtectionPlatform 2014-08-26 11:18 - 2014-08-26 11:18 - 00000000 ____D () C:\Windows\PCHEALTH 2014-08-26 11:18 - 2014-08-26 11:18 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2014-08-26 11:18 - 2014-08-26 11:18 - 00000000 ____D () C:\Program Files\Microsoft Synchronization Services 2014-08-26 11:18 - 2014-08-26 11:18 - 00000000 ____D () C:\Program Files\Microsoft SQL Server Compact Edition 2014-08-26 11:18 - 2014-08-26 11:18 - 00000000 ____D () C:\Program Files\Microsoft Analysis Services 2014-08-26 11:18 - 2014-08-26 11:18 - 00000000 ____D () C:\Program Files (x86)\Microsoft Analysis Services 2014-08-26 11:18 - 2014-08-26 11:17 - 00000000 ____D () C:\Program Files\Microsoft Office 2014-08-26 11:18 - 2011-04-12 09:54 - 00000000 ____D () C:\Windows\ShellNew 2014-08-26 11:18 - 2009-07-14 05:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared 2014-08-26 11:17 - 2014-08-26 11:17 - 00000000 __RHD () C:\MSOCache 2014-08-26 11:17 - 2014-08-26 11:17 - 00000000 ____D () C:\Users\Admin\AppData\Local\Microsoft Help 2014-08-26 11:17 - 2014-08-26 11:17 - 00000000 ____D () C:\Program Files (x86)\Microsoft Office 2014-08-26 10:57 - 2014-08-26 10:57 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip 2014-08-26 10:57 - 2014-08-26 10:57 - 00000000 ____D () C:\Program Files\7-Zip 2014-08-25 12:09 - 2014-08-25 12:09 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\Intel Corporation 2014-08-25 12:09 - 2014-08-25 12:09 - 00000000 ____D () C:\ProgramData\Intel 2014-08-25 12:09 - 2014-08-25 10:47 - 01645874 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI 2014-08-25 12:09 - 2014-08-25 10:39 - 00000000 ____D () C:\Program Files\Intel 2014-08-25 12:08 - 2014-08-25 12:08 - 00000000 ____D () C:\Users\Admin\Intel 2014-08-25 11:58 - 2014-08-25 11:58 - 00000000 ____D () C:\Windows\SysWOW64\Atheros_L1e 2014-08-25 11:52 - 2014-08-25 11:52 - 00000000 ____D () C:\Program Files\DigitalDevices 2014-08-25 11:50 - 2014-08-25 11:49 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\Mozilla 2014-08-25 11:50 - 2014-08-25 11:49 - 00000000 ____D () C:\Users\Admin\AppData\Local\Mozilla 2014-08-25 11:46 - 2014-08-25 11:46 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_iusb3hcs_01009.Wdf 2014-08-25 11:45 - 2014-08-25 10:39 - 00000000 ____D () C:\Program Files (x86)\Intel 2014-08-25 11:39 - 2014-08-25 08:10 - 00000000 ____D () C:\Program Files\WinRAR 2014-08-25 11:13 - 2014-08-25 11:13 - 00000000 ____D () C:\Program Files\Microsoft Silverlight 2014-08-25 11:13 - 2014-08-25 11:13 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight 2014-08-25 11:10 - 2014-08-25 11:10 - 00000000 ____D () C:\Users\Admin\AppData\Local\WindowsUpdate 2014-08-25 10:57 - 2014-08-25 10:57 - 00000144 _____ () C:\Windows\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat 2014-08-25 10:56 - 2014-08-25 10:25 - 00142336 _____ (G Data Software AG) C:\Windows\system32\Drivers\MiniIcpt.sys 2014-08-25 10:56 - 2014-08-25 10:25 - 00064000 _____ (G Data Software AG) C:\Windows\system32\Drivers\PktIcpt.sys 2014-08-25 10:56 - 2014-08-25 10:25 - 00064000 _____ (G Data Software AG) C:\Windows\system32\Drivers\gdwfpcd64.sys 2014-08-25 10:56 - 2014-08-25 10:25 - 00061440 _____ (G Data Software AG) C:\Windows\system32\Drivers\HookCentre.sys 2014-08-25 10:56 - 2014-08-25 10:25 - 00055808 _____ (G Data Software AG) C:\Windows\system32\Drivers\GDBehave.sys 2014-08-25 10:56 - 2014-08-25 10:25 - 00020992 _____ (G Data Software AG) C:\Windows\system32\Drivers\GDKBFlt64.sys 2014-08-25 10:53 - 2014-08-25 10:53 - 00000000 ____D () C:\ProgramData\Mozilla 2014-08-25 10:52 - 2014-08-25 10:52 - 00003538 _____ () C:\Windows\System32\Tasks\CreateChoiceProcessTask 2014-08-25 10:52 - 2014-08-25 10:52 - 00000000 __SHD () C:\Users\Admin\AppData\Local\EmieUserList 2014-08-25 10:52 - 2014-08-25 10:52 - 00000000 __SHD () C:\Users\Admin\AppData\Local\EmieSiteList 2014-08-25 10:50 - 2011-04-12 09:54 - 00000000 ____D () C:\Program Files\Windows Journal 2014-08-25 10:50 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\Dism 2014-08-25 10:50 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\Dism 2014-08-25 10:50 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions 2014-08-25 10:49 - 2014-08-25 10:24 - 00000000 ____D () C:\ProgramData\G Data 2014-08-25 10:41 - 2014-08-25 10:41 - 00000000 ____D () C:\Windows\system32\MRT 2014-08-25 10:35 - 2014-08-25 10:35 - 00000000 ___SD () C:\Windows\system32\CompatTel 2014-08-25 10:25 - 2014-08-25 10:25 - 00000779 _____ () C:\Users\Admin\AppData\Roaming\gdscan.log 2014-08-25 10:25 - 2014-08-25 10:25 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_GDKBFlt64_01007.Wdf 2014-08-25 10:25 - 2014-08-25 10:25 - 00000000 ____D () C:\Program Files (x86)\G Data 2014-08-25 10:25 - 2014-08-25 10:25 - 00000000 _____ () C:\Users\Admin\AppData\Roaming\gdfw.log 2014-08-25 10:23 - 2009-07-14 07:32 - 00000000 ____D () C:\Windows\system32\restore 2014-08-25 10:22 - 2009-07-14 05:20 - 00000000 __RHD () C:\Users\Public\Libraries 2014-08-25 09:08 - 2009-07-14 07:38 - 00025600 ___SH () C:\Windows\system32\config\BCD-Template.LOG 2014-08-25 09:08 - 2009-07-14 07:32 - 00028672 _____ () C:\Windows\system32\config\BCD-Template 2014-08-25 08:13 - 2014-08-25 09:08 - 00000000 ____D () C:\Windows\Panther 2014-08-25 08:13 - 2014-08-25 08:13 - 00000020 ___SH () C:\Users\Admin\ntuser.ini 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Musik 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Bilder 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Default\Vorlagen 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Default\Startmenü 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Default\Druckumgebung 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Admin\Vorlagen 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Admin\Startmenü 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Admin\Netzwerkumgebung 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Admin\Lokale Einstellungen 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Admin\Eigene Dateien 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Admin\Druckumgebung 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Admin\Documents\Eigene Musik 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Admin\Documents\Eigene Bilder 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Admin\AppData\Local\Verlauf 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Admin\AppData\Local\Anwendungsdaten 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Admin\Anwendungsdaten 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Programme 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\ProgramData\Vorlagen 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\ProgramData\Startmenü 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\ProgramData\Microsoft\Windows\Start Menu\Programme 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\ProgramData\Favoriten 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\ProgramData\Dokumente 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\ProgramData\Anwendungsdaten 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Program Files\Gemeinsame Dateien 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Dokumente und Einstellungen 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 __SHD () C:\Recovery 2014-08-25 08:13 - 2009-07-14 05:20 - 00000000 __RHD () C:\Users\Default 2014-08-25 08:13 - 2009-07-14 05:20 - 00000000 ____D () C:\Program Files\Windows NT 2014-08-25 08:11 - 2010-11-21 05:47 - 00006542 _____ () C:\Windows\PFRO.log 2014-08-25 08:10 - 2014-08-25 08:10 - 00001355 _____ () C:\Windows\TSSysprep.log 2014-08-25 08:10 - 2009-07-14 06:46 - 00002814 _____ () C:\Windows\DtcInstall.log 2014-08-25 08:10 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\sysprep 2014-08-25 08:09 - 2014-08-25 08:09 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdFs_01_09_00.Wdf 2014-08-25 08:09 - 2011-04-12 09:54 - 00000000 ____D () C:\Windows\CSC 2014-08-23 04:10 - 2014-08-29 11:07 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll 2014-08-23 03:45 - 2014-08-29 11:07 - 00311296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll 2014-08-23 02:59 - 2014-08-29 11:07 - 03166720 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2014-08-14 00:24 - 2014-08-25 10:39 - 00082432 _____ (Khronos Group) C:\Windows\system32\OpenCL.DLL 2014-08-14 00:24 - 2014-08-25 10:39 - 00074752 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.DLL 2014-08-14 00:24 - 2014-08-14 00:24 - 20068496 _____ (Intel Corporation) C:\Windows\system32\igdumdim64.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 04575208 _____ (Intel Corporation) C:\Windows\SysWOW64\igdusc32.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 01365504 _____ (Intel Corporation) C:\Windows\system32\igfxcmjit64.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 01137080 _____ (Intel Corporation) C:\Windows\system32\iglhsip64.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 01132960 _____ (Intel Corporation) C:\Windows\SysWOW64\iglhsip32.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 01061376 _____ (Intel Corporation) C:\Windows\SysWOW64\igfxcmjit32.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00734720 _____ (Intel Corporation) C:\Windows\system32\MetroIntelGenericUIFramework.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00453448 _____ () C:\Windows\system32\igfxTray.exe 2014-08-14 00:24 - 2014-08-14 00:24 - 00372736 _____ (Intel Corporation) C:\Windows\system32\igfxOSP.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00372224 _____ (Intel Corporation) C:\Windows\system32\IntelOpenCL64.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00304128 _____ (Intel Corporation) C:\Windows\SysWOW64\IntelOpenCL32.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00276808 _____ (Intel Corporation) C:\Windows\SysWOW64\IntelCpHeciSvc.exe 2014-08-14 00:24 - 2014-08-14 00:24 - 00254976 _____ () C:\Windows\system32\igfxCPL.cpl 2014-08-14 00:24 - 2014-08-14 00:24 - 00222720 _____ (Intel Corporation) C:\Windows\system32\igfxDTCM.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00220392 _____ (Intel Corporation) C:\Windows\system32\iglhcp64.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00212660 _____ () C:\Windows\system32\resTHA.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00207496 _____ (Intel Corporation) C:\Windows\system32\igfxcmrt64.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00206848 _____ (Intel Corporation) C:\Windows\system32\igfx11cmrt64.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00203812 _____ () C:\Windows\system32\resELL.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00199652 _____ () C:\Windows\system32\resRUS.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00191816 _____ (Intel Corporation) C:\Windows\system32\igfxext.exe 2014-08-14 00:24 - 2014-08-14 00:24 - 00184312 _____ (Intel Corporation) C:\Windows\SysWOW64\iglhcp32.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00182784 _____ (Intel Corporation) C:\Windows\system32\igfxCoIn_v3907.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00182356 _____ () C:\Windows\system32\resARA.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00181828 _____ () C:\Windows\system32\resJPN.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00181364 _____ () C:\Windows\system32\resHEB.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00176116 _____ () C:\Windows\system32\resFRA.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00176052 _____ () C:\Windows\system32\resHUN.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00175024 _____ (Intel Corporation) C:\Windows\SysWOW64\igfxcmrt32.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00174592 _____ (Intel Corporation) C:\Windows\SysWOW64\igfx11cmrt32.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00174340 _____ () C:\Windows\system32\resKOR.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00174004 _____ () C:\Windows\system32\resDEU.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00173748 _____ () C:\Windows\system32\resITA.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00173492 _____ () C:\Windows\system32\resROM.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00173460 _____ () C:\Windows\system32\resESN.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00173444 _____ () C:\Windows\system32\resSKY.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00173044 _____ () C:\Windows\system32\resPLK.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00172676 _____ () C:\Windows\system32\resNLD.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00171876 _____ () C:\Windows\system32\resPTB.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00171860 _____ () C:\Windows\system32\resTRK.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00171796 _____ () C:\Windows\system32\resCSY.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00171332 _____ () C:\Windows\system32\resPTG.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00171156 _____ () C:\Windows\system32\resFIN.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00170548 _____ () C:\Windows\system32\resHRV.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00170020 _____ () C:\Windows\system32\resSLV.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00170004 _____ () C:\Windows\system32\resSVE.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00168788 _____ () C:\Windows\system32\resNOR.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00168132 _____ () C:\Windows\system32\resDAN.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00166660 _____ () C:\Windows\system32\resENU.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00164836 _____ () C:\Windows\system32\resCHT.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00163652 _____ () C:\Windows\system32\resCHS.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00082432 _____ (Khronos Group) C:\Windows\system32\Intel_OpenCL_ICD64.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00074752 _____ (Khronos Group) C:\Windows\SysWOW64\Intel_OpenCL_ICD32.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00069632 _____ () C:\Windows\system32\igfxCUIServicePS.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00069632 _____ ( ) C:\Windows\system32\igfxDHLibv2_0.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00058880 _____ ( ) C:\Windows\system32\igfxDHLib.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00031408 _____ (Intel Corporation) C:\Windows\system32\igfxexps.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00030720 _____ (Intel Corporation) C:\Windows\SysWOW64\igfxexps32.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00010752 _____ ( ) C:\Windows\system32\igfxDILib.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00010240 _____ ( ) C:\Windows\system32\igfxEMLibv2_0.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00010240 _____ ( ) C:\Windows\system32\igfxEMLib.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00010240 _____ ( ) C:\Windows\system32\igfxDILibv2_0.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00005120 _____ ( ) C:\Windows\system32\igfxLHMLibv2_0.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00005120 _____ ( ) C:\Windows\system32\igfxLHMLib.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00003920 _____ () C:\Windows\system32\iglhxs64.vp 2014-08-14 00:24 - 2014-05-21 00:33 - 05801408 _____ (Intel Corporation) C:\Windows\system32\igdusc64.dll 2014-08-14 00:24 - 2014-05-21 00:33 - 00670720 _____ (Intel Corporation) C:\Windows\system32\igfxDH.dll 2014-08-14 00:24 - 2014-05-21 00:33 - 00324424 _____ (Intel Corporation) C:\Windows\system32\igfxCUIService.exe 2014-08-14 00:24 - 2014-05-21 00:33 - 00301896 _____ (Intel Corporation) C:\Windows\system32\igfxEM.exe 2014-08-14 00:24 - 2014-05-21 00:33 - 00271872 _____ (Intel Corporation) C:\Windows\system32\igfxDI.dll 2014-08-14 00:24 - 2014-05-21 00:33 - 00250368 _____ (Intel Corporation) C:\Windows\system32\igfxLHM.dll 2014-08-14 00:24 - 2014-05-21 00:33 - 00243528 _____ (Intel Corporation) C:\Windows\system32\igfxHK.exe 2014-08-14 00:23 - 2014-08-14 00:23 - 23686656 _____ (Intel Corporation) C:\Windows\system32\igdfcl64.dll 2014-08-14 00:23 - 2014-08-14 00:23 - 19298568 _____ (Intel Corporation) C:\Windows\SysWOW64\igdumdim32.dll 2014-08-14 00:23 - 2014-08-14 00:23 - 18558976 _____ (Intel Corporation) C:\Windows\SysWOW64\igdfcl32.dll 2014-08-14 00:23 - 2014-08-14 00:23 - 13199432 _____ () C:\Windows\system32\igd11dxva64.dll 2014-08-14 00:23 - 2014-08-14 00:23 - 12728192 _____ () C:\Windows\SysWOW64\igd11dxva32.dll 2014-08-14 00:23 - 2014-08-14 00:23 - 08841728 _____ (Intel Corporation) C:\Windows\system32\ig75icd64.dll 2014-08-14 00:23 - 2014-08-14 00:23 - 08237056 _____ (Intel Corporation) C:\Windows\system32\igdrcl64.dll 2014-08-14 00:23 - 2014-08-14 00:23 - 07679488 _____ (Intel Corporation) C:\Windows\SysWOW64\igdrcl32.dll 2014-08-14 00:23 - 2014-08-14 00:23 - 06970976 _____ (Intel Corporation) C:\Windows\SysWOW64\igd10iumd32.dll 2014-08-14 00:23 - 2014-08-14 00:23 - 06946816 _____ (Intel Corporation) C:\Windows\SysWOW64\ig75icd32.dll 2014-08-14 00:23 - 2014-08-14 00:23 - 04786544 _____ (Intel Corporation) C:\Windows\system32\Drivers\igdkmd64.sys 2014-08-14 00:23 - 2014-08-14 00:23 - 03399496 _____ (Intel Corporation) C:\Windows\system32\Gfxv4_0.exe 2014-08-14 00:23 - 2014-08-14 00:23 - 03395912 _____ (Intel Corporation) C:\Windows\system32\Gfxv2_0.exe 2014-08-14 00:23 - 2014-08-14 00:23 - 00929608 _____ (Intel Corporation) C:\Windows\system32\GfxUIEx.exe 2014-08-14 00:23 - 2014-08-14 00:23 - 00604552 _____ (Intel Corporation) C:\Windows\system32\igdmd64.dll 2014-08-14 00:23 - 2014-08-14 00:23 - 00543560 _____ (Intel Corporation) C:\Windows\system32\DPTopologyApp.exe 2014-08-14 00:23 - 2014-08-14 00:23 - 00543048 _____ (Intel Corporation) C:\Windows\system32\DPTopologyAppv2_0.exe 2014-08-14 00:23 - 2014-08-14 00:23 - 00483000 _____ (Intel Corporation) C:\Windows\SysWOW64\igdmd32.dll 2014-08-14 00:23 - 2014-08-14 00:23 - 00393728 _____ (Intel Corporation) C:\Windows\system32\igdbcl64.dll 2014-08-14 00:23 - 2014-08-14 00:23 - 00346112 _____ (Intel Corporation) C:\Windows\SysWOW64\igdbcl32.dll 2014-08-14 00:23 - 2014-08-14 00:23 - 00225792 _____ () C:\Windows\system32\igdde64.dll 2014-08-14 00:23 - 2014-08-14 00:23 - 00186368 _____ () C:\Windows\SysWOW64\igdde32.dll 2014-08-14 00:23 - 2014-08-14 00:23 - 00162304 _____ (Intel Corporation) C:\Windows\system32\igdail64.dll 2014-08-14 00:23 - 2014-08-14 00:23 - 00152392 _____ (Intel Corporation) C:\Windows\system32\difx64.exe 2014-08-14 00:23 - 2014-08-14 00:23 - 00144896 _____ (Intel Corporation) C:\Windows\SysWOW64\igdail32.dll 2014-08-14 00:23 - 2014-05-21 00:33 - 07682736 _____ (Intel Corporation) C:\Windows\system32\igd10iumd64.dll 2014-08-07 04:06 - 2014-08-25 10:32 - 00529920 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2014-08-07 04:01 - 2014-08-25 10:32 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll Some content of TEMP: ==================== C:\Users\Admin\AppData\Local\Temp\DD_PCIeUpdateLibrary.dll ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\System32\winlogon.exe => File is digitally signed C:\Windows\System32\wininit.exe => File is digitally signed C:\Windows\SysWOW64\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\System32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\System32\services.exe => File is digitally signed C:\Windows\System32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\System32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\System32\rpcss.dll => File is digitally signed C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2014-09-01 19:13 ==================== End Of Log ============================ Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 03-09-2014 02 Ran by Admin at 2014-09-05 20:20:19 Running from C:\Users\Admin\Desktop Boot Mode: Normal ========================================================== ==================== Security Center ======================== (If an entry is included in the fixlist, it will be removed.) AV: G DATA INTERNET SECURITY (Enabled - Up to date) {545C8713-0744-B079-87F8-349A6D5C8CF0} AS: G DATA INTERNET SECURITY (Enabled - Up to date) {EF3D66F7-217E-BFF7-BD48-0FE816DBC64D} AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} FW: G DATA Personal Firewall (Enabled) {6C670636-4D2B-B121-ACA7-9DAF938FCB8B} ==================== Installed Programs ====================== (Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) 7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov) Adobe Flash Player 14 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 14.0.0.179 - Adobe Systems Incorporated) Adobe Reader XI (11.0.08) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.08 - Adobe Systems Incorporated) AnyDVD (HKLM-x32\...\AnyDVD) (Version: 7.5.1.0 - SlySoft) Audiograbber 1.83 SE (HKLM-x32\...\Audiograbber) (Version: 1.83 SE - Audiograbber Deutschland) Audiograbber MP3-Plugin (HKLM-x32\...\Audiograbber-Lame) (Version: 1.0 - AG) Canon IJ Network Scan Utility (HKLM-x32\...\Canon_IJ_Network_Scan_UTILITY) (Version: - ) Canon IJ Network Tool (HKLM-x32\...\Canon_IJ_Network_UTILITY) (Version: 3.1.1 - Canon Inc.) Canon MP Navigator EX 3.0 (HKLM-x32\...\MP Navigator EX 3.0) (Version: - ) Canon MP640 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP640_series) (Version: - Canon Inc.) CDBurnerXP (HKLM-x32\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.4.5000 - CDBurnerXP) Definition Update for Microsoft Office 2010 (KB982726) 64-Bit Edition (HKLM\...\{90140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUS_{2A07A3D4-F6CA-4EEB-9576-3A6AC8A736CE}) (Version: - Microsoft) Digital Devices DVB Driver 2.5.3.92 (HKLM\...\{42BD4A82-7EC8-473F-922A-EE1EBB9519C2}) (Version: 2.5.3.92 - Digital Devices GmbH) DVBViewer Pro (HKLM-x32\...\DVBViewer Pro_is1) (Version: 5.3.1 - CM&V) ESET Online Scanner v3 (HKLM-x32\...\ESET Online Scanner) (Version: - ) FreeCommander XE (HKLM-x32\...\FreeCommander XE_is1) (Version: Preview - Marek Jasinski) G DATA INTERNET SECURITY (HKLM-x32\...\{85203592-3610-4FB9-AA11-15B2255B5A12}) (Version: 25.0.2.1 - G DATA Software AG) GIMP 2.8.14 (HKLM\...\GIMP-2_is1) (Version: 2.8.14 - The GIMP Team) Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3907 - Intel Corporation) Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.8.0.1016 - Intel Corporation) Intel(R) Rapid Storage Technology (Version: 12.8.0.1016 - Intel Corporation) Hidden Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 2.5.0.19 - Intel Corporation) Java 7 Update 67 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F03217067FF}) (Version: 7.0.670 - Oracle) Java Auto Updater (x32 Version: 2.1.67.1 - Oracle, Inc.) Hidden LAV Filters 0.61.2 (HKLM-x32\...\lavfilters_is1) (Version: 0.61.2 - Hendrik Leppkes) Left 4 Dead 2 (HKLM-x32\...\Steam App 550) (Version: - Valve) Logitech Harmony Remote Software 7 (HKLM-x32\...\{5C6F884D-680C-448B-B4C9-22296EE1B206}) (Version: 7.7.0.0 - Logitech) Logitech Harmony Remote Software 7 (x32 Version: 7.7.0.0 - Logitech) Hidden Logon Screen (HKLM\...\{1730D13B-7517-4321-A88B-64627CF67CDC}_is1) (Version: - Daniel Rebelo) Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden Microsoft Office Access MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Excel MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Groove MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office InfoPath MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Office 32-bit Components 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office OneNote MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Outlook MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office PowerPoint MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Professional Plus 2010 (HKLM\...\Office14.PROPLUS) (Version: 14.0.7015.1000 - Microsoft Corporation) Microsoft Office Professional Plus 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (English) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (French) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (Italian) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Proofing (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Publisher MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Shared 32-bit MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Shared MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Word MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319 (HKLM-x32\...\{196BB40D-1578-3D01-B289-BEFC77A11A1E}) (Version: 10.0.30319 - Microsoft Corporation) Mozilla Firefox 32.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 32.0 (x86 de)) (Version: 32.0 - Mozilla) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 31.0 - Mozilla) Mozilla Thunderbird 31.0 (x86 de) (HKLM-x32\...\Mozilla Thunderbird 31.0 (x86 de)) (Version: 31.0 - Mozilla) MyPhoneExplorer (HKLM-x32\...\MPE) (Version: 1.8.6 - F.J. Wechselberger) Qualcomm Atheros Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (HKLM-x32\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 2.1.0.21 - Qualcomm Atheros Inc.) Remote Control USB Driver (HKLM-x32\...\{8471021C-F529-43DE-84DF-3612E10F58C4}) (Version: 2.3.2.317 - ) Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (HKLM\...\{90140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUS_{A3364707-2F53-4C83-8F68-C9877A9080C7}) (Version: - Microsoft) Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (Version: - Microsoft) Hidden Steam (HKLM-x32\...\Steam) (Version: - Valve Corporation) Update for Microsoft Access 2010 (KB2553446) 64-Bit Edition (HKLM\...\{90140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUS_{FEF4C57D-0975-4D3C-ACC7-DCD038C3788F}) (Version: - Microsoft) Update for Microsoft Excel 2010 (KB2837600) 64-Bit Edition (HKLM\...\{90140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUS_{17815BC8-062D-49BE-B40C-B54149C85CE3}) (Version: - Microsoft) Update for Microsoft Filter Pack 2.0 (KB2878281) 64-Bit Edition (HKLM\...\{90140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUS_{84B191B5-5319-463A-A305-8C4D53B1D20A}) (Version: - Microsoft) Update for Microsoft InfoPath 2010 (KB2817369) 64-Bit Edition (HKLM\...\{90140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUS_{DB0B0CDF-77EC-47B0-94E2-4738573A1E58}) (Version: - Microsoft) Update for Microsoft InfoPath 2010 (KB2817396) 64-Bit Edition (HKLM\...\{90140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUS_{1AA82E2E-7DB7-4C70-910C-BBB657A6B3A5}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2553092) (HKLM\...\{90140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUS_{E636FE63-842B-4F4B-9884-DA189ACC0B91}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2553092) (HKLM\...\{90140000-0044-0407-1000-0000000FF1CE}_Office14.PROPLUS_{E636FE63-842B-4F4B-9884-DA189ACC0B91}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2589298) 64-Bit Edition (HKLM\...\{90140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUS_{79C725A1-3964-421C-A528-78C1C083C7C7}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2589352) 64-Bit Edition (HKLM\...\{90140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUS_{95BE5D45-A3DD-4CB1-8C35-D75DD7B4D862}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2589352) 64-Bit Edition (HKLM\...\{90140000-0043-0000-1000-0000000FF1CE}_Office14.PROPLUS_{95BE5D45-A3DD-4CB1-8C35-D75DD7B4D862}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2589375) 64-Bit Edition (HKLM\...\{90140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUS_{EBD18DE5-BC84-4B57-9A30-097044871F9A}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2597087) 64-Bit Edition (HKLM\...\{90140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUS_{4AD36582-256B-433D-8593-F31773A15CA4}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2597087) 64-Bit Edition (HKLM\...\{90140000-0043-0000-1000-0000000FF1CE}_Office14.PROPLUS_{4AD36582-256B-433D-8593-F31773A15CA4}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2687502) 64-Bit Edition (HKLM\...\{90140000-001F-0409-1000-0000000FF1CE}_Office14.PROPLUS_{B114A387-8A14-4C43-AE51-82F17EB81D49}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2760598) 64-Bit Edition (HKLM\...\{90140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUS_{F216169C-2B40-429B-8370-B5BA06EC5423}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2760598) 64-Bit Edition (HKLM\...\{90140000-0043-0000-1000-0000000FF1CE}_Office14.PROPLUS_{F216169C-2B40-429B-8370-B5BA06EC5423}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2794737) 64-Bit Edition (HKLM\...\{90140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUS_{07DC9C6C-E916-4F42-8677-716930ED0393}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2825635) 64-Bit Edition (HKLM\...\{90140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUS_{6E760BBA-B83F-4C2D-918F-5F91EF6C9861}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2825640) 64-Bit Edition (HKLM\...\{90140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUS_{43F59F4D-7179-497E-BE99-BC6F7D1DDCBA}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2825640) 64-Bit Edition (HKLM\...\{90140000-0044-0407-1000-0000000FF1CE}_Office14.PROPLUS_{43F59F4D-7179-497E-BE99-BC6F7D1DDCBA}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2837581) 64-Bit Edition (HKLM\...\{90140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUS_{D1F3B526-7EB2-4701-92DB-0784988D78DE}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2837606) 64-Bit Edition (HKLM\...\{90140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUS_{52BEF8AE-9324-40A1-9A92-E5A8FB63A475}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2878252) 64-Bit Edition (HKLM\...\{90140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUS_{56551B9F-2FE1-4705-ACF0-8FA920535E18}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2878252) 64-Bit Edition (HKLM\...\{90140000-0043-0000-1000-0000000FF1CE}_Office14.PROPLUS_{56551B9F-2FE1-4705-ACF0-8FA920535E18}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2881028) 64-Bit Edition (HKLM\...\{90140000-001F-0407-1000-0000000FF1CE}_Office14.PROPLUS_{8F699D53-05FB-488E-B7D3-E4E47257BE5D}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2881028) 64-Bit Edition (HKLM\...\{90140000-001F-040C-1000-0000000FF1CE}_Office14.PROPLUS_{4B9B2BAF-EE1F-4B60-A4D9-17B7BEEB13A1}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2881028) 64-Bit Edition (HKLM\...\{90140000-001F-0410-1000-0000000FF1CE}_Office14.PROPLUS_{B2508D75-61CF-4CC0-84C0-CF257219201D}) (Version: - Microsoft) Update for Microsoft OneNote 2010 (KB2837595) 64-Bit Edition (HKLM\...\{90140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUS_{3029C408-1DD1-4273-8E58-87CB1B638FC8}) (Version: - Microsoft) Update for Microsoft OneNote 2010 (KB2837595) 64-Bit Edition (HKLM\...\{90140000-0043-0000-1000-0000000FF1CE}_Office14.PROPLUS_{3029C408-1DD1-4273-8E58-87CB1B638FC8}) (Version: - Microsoft) Update for Microsoft Outlook 2010 (KB2687567) 64-Bit Edition (HKLM\...\{90140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUS_{DDDC32A5-9528-4771-B91A-97A8E1D7957B}) (Version: - Microsoft) Update for Microsoft Outlook 2010 (KB2687567) 64-Bit Edition (HKLM\...\{90140000-001A-0407-1000-0000000FF1CE}_Office14.PROPLUS_{6164E0E5-C903-488C-93AF-1B7AF7EBC331}) (Version: - Microsoft) Update for Microsoft PowerPoint 2010 (KB2837579) 64-Bit Edition (HKLM\...\{90140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUS_{A20A650C-F820-4CE4-AEA5-EC140192FAFB}) (Version: - Microsoft) Update for Microsoft PowerPoint 2010 (KB2837579) 64-Bit Edition (HKLM\...\{90140000-0018-0407-1000-0000000FF1CE}_Office14.PROPLUS_{FD360122-6829-4497-97C1-1BF578EF695B}) (Version: - Microsoft) Update for Microsoft SharePoint Workspace 2010 (KB2760601) 64-Bit Edition (HKLM\...\{90140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUS_{77374F16-2DC6-4EEF-AFAD-C59FDA2E010D}) (Version: - Microsoft) Update for Microsoft SharePoint Workspace 2010 (KB2760601) 64-Bit Edition (HKLM\...\{90140000-0043-0000-1000-0000000FF1CE}_Office14.PROPLUS_{77374F16-2DC6-4EEF-AFAD-C59FDA2E010D}) (Version: - Microsoft) Update for Microsoft Visio 2010 (KB2880526) 64-Bit Edition (HKLM\...\{90140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUS_{F6F342A1-530B-4D48-A468-1E3F70928984}) (Version: - Microsoft) Update for Microsoft Visio Viewer 2010 (KB2837587) 64-Bit Edition (HKLM\...\{90140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUS_{C950A55F-82E3-4CC8-8FA2-E8A2A0F651F3}) (Version: - Microsoft) Update for Microsoft Word 2010 (KB2880529) 64-Bit Edition (HKLM\...\{90140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUS_{89FDC8D9-FB84-4EFE-950D-AF4EECC3B64C}) (Version: - Microsoft) VLC media player (HKLM-x32\...\VLC media player) (Version: 2.1.5 - VideoLAN) ==================== Custom CLSID (selected items): ========================== (If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.) CustomCLSID: HKU\S-1-5-21-4061983081-2103967945-257631493-1000_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 -> C:\Windows\system32\igfxEM.exe (Intel Corporation) ==================== Restore Points ========================= 25-08-2014 10:09:03 IIF_MSI 26-08-2014 08:57:19 Installed 7-Zip 9.20 (x64 edition) 26-08-2014 09:17:39 Installed Microsoft Office Professional Plus 2010 26-08-2014 09:38:33 Windows Update 29-08-2014 09:07:07 Windows Update 01-09-2014 17:41:39 Installed Java 7 Update 67 01-09-2014 17:59:26 Windows Modules Installer 02-09-2014 16:01:12 Windows Update 02-09-2014 16:42:10 DirectX wurde installiert 02-09-2014 18:05:06 Windows Update 03-09-2014 18:01:08 Windows Update 04-09-2014 14:19:27 Installed Remote Control USB Driver 04-09-2014 14:19:34 Installiert Logitech Harmony Remote Software 7 ==================== Hosts content: ========================== (If needed Hosts: directive could be included in the fixlist to reset Hosts.) 2009-07-14 04:34 - 2014-08-25 09:42 - 00000864 ____A C:\Windows\system32\Drivers\etc\hosts 127.0.0.1 validation.sls.microsoft.com ==================== Scheduled Tasks (whitelisted) ============= (If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.) Task: {1A83C26A-5382-4547-8329-E99DCD323D90} - System32\Tasks\AutoKMS => C:\Windows\AutoKMS\AutoKMS.exe [2014-08-26] () Task: {89A05359-DFA3-4548-917F-647783DB817F} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-09-01] (Adobe Systems Incorporated) Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe ==================== Loaded Modules (whitelisted) ============= 2014-05-20 03:38 - 2014-05-20 03:38 - 00340088 ____N () C:\Program Files (x86)\Common Files\G Data\AVKProxy\PktIcpt2x64.dll 2014-09-05 15:13 - 2014-09-05 15:13 - 03715184 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll ==================== Alternate Data Streams (whitelisted) ========= (If an entry is included in the fixlist, only the Alternate Data Streams will be removed.) ==================== Safe Mode (whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.) ==================== EXE Association (whitelisted) ============= (If an entry is included in the fixlist, the default will be restored. None default entries will be removed.) ==================== MSCONFIG/TASK MANAGER disabled items ========= (Currently there is no automatic fix for this section.) ==================== Faulty Device Manager Devices ============= ==================== Event log errors: ========================= Application errors: ================== Error: (09/05/2014 03:55:32 PM) (Source: SideBySide) (EventID: 80) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest. Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest. Error: (09/05/2014 03:48:02 PM) (Source: SideBySide) (EventID: 80) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest. Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest. Error: (09/05/2014 03:48:00 PM) (Source: SideBySide) (EventID: 80) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest. Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest. Error: (09/05/2014 03:47:59 PM) (Source: SideBySide) (EventID: 80) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest. Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest. Error: (09/05/2014 03:12:35 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (09/05/2014 03:12:09 PM) (Source: SideBySide) (EventID: 80) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest. Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest. Error: (09/05/2014 03:12:06 PM) (Source: SideBySide) (EventID: 80) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest. Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest. Error: (09/05/2014 03:12:06 PM) (Source: SideBySide) (EventID: 80) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest. Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest. Error: (09/05/2014 03:03:11 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (09/04/2014 02:54:11 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 System errors: ============= Error: (09/05/2014 03:10:41 PM) (Source: Service Control Manager) (EventID: 7026) (User: ) Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: GDKBFlt Error: (09/05/2014 03:01:17 PM) (Source: Service Control Manager) (EventID: 7026) (User: ) Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: GDKBFlt Error: (09/04/2014 09:27:53 PM) (Source: DCOM) (EventID: 10010) (User: ) Description: {995C996E-D918-4A8C-A302-45719A6F4EA7} Error: (09/04/2014 02:52:17 PM) (Source: Service Control Manager) (EventID: 7026) (User: ) Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: GDKBFlt Error: (09/03/2014 10:57:37 PM) (Source: DCOM) (EventID: 10010) (User: ) Description: {995C996E-D918-4A8C-A302-45719A6F4EA7} Error: (09/03/2014 08:36:31 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Der Dienst "Steam Client Service" wurde aufgrund folgenden Fehlers nicht gestartet: %%1053 Error: (09/03/2014 08:36:31 PM) (Source: Service Control Manager) (EventID: 7009) (User: ) Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Steam Client Service erreicht. Error: (09/03/2014 08:02:43 PM) (Source: Service Control Manager) (EventID: 7026) (User: ) Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: GDKBFlt Error: (09/02/2014 08:59:39 PM) (Source: DCOM) (EventID: 10010) (User: ) Description: {995C996E-D918-4A8C-A302-45719A6F4EA7} Error: (09/02/2014 08:05:57 PM) (Source: Service Control Manager) (EventID: 7026) (User: ) Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: GDKBFlt Microsoft Office Sessions: ========================= Error: (09/05/2014 03:55:32 PM) (Source: SideBySide) (EventID: 80) (User: ) Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Program Files (x86)\ESET\ESET Online Scanner\ESETSmartInstaller.exe Error: (09/05/2014 03:48:02 PM) (Source: SideBySide) (EventID: 80) (User: ) Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestD:\esetsmartinstaller_deu.exe Error: (09/05/2014 03:48:00 PM) (Source: SideBySide) (EventID: 80) (User: ) Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestD:\esetsmartinstaller_deu.exe Error: (09/05/2014 03:47:59 PM) (Source: SideBySide) (EventID: 80) (User: ) Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestD:\esetsmartinstaller_deu.exe Error: (09/05/2014 03:12:35 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (09/05/2014 03:12:09 PM) (Source: SideBySide) (EventID: 80) (User: ) Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestD:\esetsmartinstaller_deu.exe Error: (09/05/2014 03:12:06 PM) (Source: SideBySide) (EventID: 80) (User: ) Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestD:\esetsmartinstaller_deu.exe Error: (09/05/2014 03:12:06 PM) (Source: SideBySide) (EventID: 80) (User: ) Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestD:\esetsmartinstaller_deu.exe Error: (09/05/2014 03:03:11 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (09/04/2014 02:54:11 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 ==================== Memory info =========================== Processor: Intel(R) Core(TM) i3-4130 CPU @ 3.40GHz Percentage of memory in use: 21% Total physical RAM: 7845.29 MB Available physical RAM: 6193.52 MB Total Pagefile: 15688.77 MB Available Pagefile: 13147.73 MB Total Virtual: 8192 MB Available Virtual: 8191.82 MB ==================== Drives ================================ Drive c: (Windows 7 64bit) (Fixed) (Total:175.68 GB) (Free:113.67 GB) NTFS Drive d: (Daten) (Fixed) (Total:62.69 GB) (Free:62.55 GB) NTFS Drive m: () (Network) (Total:1829.35 GB) (Free:1148.41 GB) Drive n: () (Network) (Total:1829.35 GB) (Free:1148.41 GB) Drive o: () (Network) (Total:1829.35 GB) (Free:1148.41 GB) ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 238.5 GB) (Disk ID: 00E2162E) Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=175.7 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=62.7 GB) - (Type=07 NTFS) ==================== End Of Log ============================ |
06.09.2014, 13:55 | #5 |
/// the machine /// TB-Ausbilder | Malware nach Installation von MyPhoneExplorer Downloade Dir bitte Malwarebytes Anti-Malware
Downloade Dir bitte AdwCleaner auf deinen Desktop.
Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
und ein frisches FRST log bitte.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
06.09.2014, 15:11 | #6 |
| Malware nach Installation von MyPhoneExplorer so, hier die nächsten Protokolle: Code:
ATTFilter Malwarebytes Anti-Malware www.malwarebytes.org Suchlauf Datum: 06.09.2014 Suchlauf-Zeit: 15:28:30 Logdatei: mbam.txt Administrator: Ja Version: 2.00.2.1012 Malware Datenbank: v2014.09.06.02 Rootkit Datenbank: v2014.08.21.01 Lizenz: Kostenlos Malware Schutz: Deaktiviert Bösartiger Webseiten Schutz: Deaktiviert Self-protection: Deaktiviert Betriebssystem: Windows 7 Service Pack 1 CPU: x64 Dateisystem: NTFS Benutzer: Admin Suchlauf-Art: Bedrohungs-Suchlauf Ergebnis: Abgeschlossen Durchsuchte Objekte: 375872 Verstrichene Zeit: 3 Min, 15 Sek Speicher: Aktiviert Autostart: Aktiviert Dateisystem: Aktiviert Archive: Aktiviert Rootkits: Deaktiviert Heuristics: Aktiviert PUP: Aktiviert PUM: Aktiviert Prozesse: 0 (No malicious items detected) Module: 0 (No malicious items detected) Registrierungsschlüssel: 0 (No malicious items detected) Registrierungswerte: 0 (No malicious items detected) Registrierungsdaten: 0 (No malicious items detected) Ordner: 0 (No malicious items detected) Dateien: 0 (No malicious items detected) Physische Sektoren: 0 (No malicious items detected) (end) Code:
ATTFilter # AdwCleaner v3.309 - Bericht erstellt am 06/09/2014 um 15:48:09 # Aktualisiert 02/09/2014 von Xplode # Betriebssystem : Windows 7 Ultimate Service Pack 1 (64 bits) # Benutzername : Admin - PC-OFFICE # Gestartet von : C:\Users\Admin\Desktop\adwcleaner_3.309.exe # Option : Löschen ***** [ Dienste ] ***** ***** [ Dateien / Ordner ] ***** [/!\] Nicht Gelöscht ( Junction ) : C:\Program Files\Gemeinsame Dateien Ordner Gelöscht : C:\Users\Admin\AppData\Local\Temp\Yawtix ***** [ Tasks ] ***** ***** [ Verknüpfungen ] ***** ***** [ Registrierungsdatenbank ] ***** ***** [ Browser ] ***** -\\ Internet Explorer v0.0.0.0 -\\ Mozilla Firefox v32.0 (x86 de) [ Datei : C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\kulit06d.default\prefs.js ] [ Datei : C:\Users\Bine\AppData\Roaming\Mozilla\Firefox\Profiles\kisgoa7p.default\prefs.js ] [ Datei : C:\Users\Matze\AppData\Roaming\Mozilla\Firefox\Profiles\xrssz4rx.default\prefs.js ] ************************* AdwCleaner[R0].txt - [1143 octets] - [06/09/2014 15:36:49] AdwCleaner[S0].txt - [1082 octets] - [06/09/2014 15:48:09] ########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [1142 octets] ########## Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Junkware Removal Tool (JRT) by Thisisu Version: 6.1.4 (04.06.2014:1) OS: Windows 7 Ultimate x64 Ran by Admin on 06.09.2014 at 15:51:03,14 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~ Services ~~~ Registry Values Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Default_Page_URL ~~~ Registry Keys ~~~ Files ~~~ Folders ~~~ Event Viewer Logs were cleared ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Scan was completed on 06.09.2014 at 15:58:37,42 End of JRT log ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 03-09-2014 02 Ran by Admin (administrator) on PC-OFFICE on 06-09-2014 15:59:19 Running from C:\Users\Admin\Desktop Platform: Windows 7 Ultimate Service Pack 1 (X64) OS Language: Deutsch (Deutschland) Internet Explorer Version 11 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (G Data Software AG) C:\Program Files (x86)\Common Files\G Data\GDScan\GDScan.exe (G Data Software AG) C:\Program Files (x86)\G Data\InternetSecurity\AVK\AVKWCtlx64.exe (Intel Corporation) C:\Windows\System32\igfxCUIService.exe (G Data Software AG) C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKProxy.exe (G Data Software AG) C:\Program Files (x86)\G Data\InternetSecurity\AVK\AVKService.exe (Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (G Data Software AG) C:\Program Files (x86)\G Data\InternetSecurity\Firewall\GDFwSvcx64.exe (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE (G Data Software AG) C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKBap64.exe (G Data Software AG) C:\Program Files (x86)\G Data\InternetSecurity\AVKTray\AVKTray.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe (G Data Software AG) C:\Program Files (x86)\Common Files\G Data\AVKProxy\GdBgInx64.exe (G Data Software AG) C:\Program Files (x86)\Common Files\G Data\AVKProxy\GDKBFltExe32.exe (Intel Corporation) C:\Windows\System32\igfxEM.exe (Intel Corporation) C:\Windows\System32\igfxHK.exe (G Data Software AG) C:\Program Files (x86)\G Data\InternetSecurity\Firewall\GDFirewallTray.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe (CANON INC.) C:\Program Files (x86)\Canon\Canon IJ Network Scan Utility\CNMNSUT.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [287592 2013-08-07] (Intel Corporation) HKLM\...\Run: [BCSSync] => C:\Program Files\Microsoft Office\Office14\BCSSync.exe [108144 2012-11-05] (Microsoft Corporation) HKLM-x32\...\Run: [GDFirewallTray] => C:\Program Files (x86)\G Data\InternetSecurity\Firewall\GDFirewallTray.exe [1756792 2014-05-20] (G Data Software AG) HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [292848 2013-04-26] (Intel Corporation) HKLM-x32\...\Run: [IJNetworkScanUtility] => C:\Program Files (x86)\Canon\Canon IJ Network Scan Utility\CNMNSUT.exe [206240 2010-08-23] (CANON INC.) HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2014-05-08] (Adobe Systems Incorporated) HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896 2014-07-25] (Oracle Corporation) HKLM\...\Winlogon: [Userinit] C:\Windows\system32\userinit.exe,C:\Program Files (x86)\G Data\InternetSecurity\AVKTray\AVKTray.exe ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.de BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) Hosts: 127.0.0.1 validation.sls.microsoft.com Tcpip\Parameters: [DhcpNameServer] 192.168.178.1 FireFox: ======== FF ProfilePath: C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\kulit06d.default FF Homepage: www.google.de FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_14_0_0_179.dll () FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~3\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_179.dll () FF Plugin-x32: @java.com/DTPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: WOT - C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\kulit06d.default\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} [2014-09-01] FF Extension: Flagfox - C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\kulit06d.default\Extensions\{1018e4d6-728f-4b20-ad56-37578a4de76b}.xpi [2014-09-01] FF Extension: Adblock Plus - C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\kulit06d.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-09-01] Chrome: ======= ==================== Services (Whitelisted) ================= (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 AVKProxy; C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKProxy.exe [2250360 2014-07-30] (G Data Software AG) R2 AVKService; C:\Program Files (x86)\G Data\InternetSecurity\AVK\AVKService.exe [914552 2013-12-19] (G Data Software AG) R2 AVKWCtl; C:\Program Files (x86)\G Data\InternetSecurity\AVK\AVKWCtlx64.exe [2683760 2014-05-20] (G Data Software AG) R3 GDFwSvc; C:\Program Files (x86)\G Data\InternetSecurity\Firewall\GDFwSvcx64.exe [3227624 2014-08-06] (G Data Software AG) R3 GDScan; C:\Program Files (x86)\Common Files\G Data\GDScan\GDScan.exe [700536 2014-05-20] (G Data Software AG) R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15720 2013-08-07] (Intel Corporation) R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [324424 2014-08-14] (Intel Corporation) ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R3 AnyDVD; C:\Windows\System32\Drivers\AnyDVD.sys [138664 2014-04-24] (SlySoft, Inc.) R3 AnyDVD; C:\Windows\SysWOW64\Drivers\AnyDVD.sys [138664 2014-04-24] (SlySoft, Inc.) R3 DDBase; C:\Windows\System32\DRIVERS\DDBase.sys [33792 2014-04-15] (Digital Devices GmbH) R3 DDCapture; C:\Windows\System32\DRIVERS\DDCapture.sys [21504 2014-04-15] (Digital Devices GmbH) R3 DDTuner; C:\Windows\System32\DRIVERS\DDTuner.sys [214016 2014-04-15] (Digital Devices GmbH) R0 GDBehave; C:\Windows\System32\drivers\GDBehave.sys [55808 2014-08-25] (G Data Software AG) R1 GDKBFlt; C:\Windows\system32\drivers\GDKBFlt64.sys [20992 2014-08-25] (G Data Software AG) R1 GDMnIcpt; C:\Windows\system32\drivers\MiniIcpt.sys [142336 2014-08-25] (G Data Software AG) R3 GDPkIcpt; C:\Windows\system32\drivers\PktIcpt.sys [64000 2014-08-25] (G Data Software AG) R1 gdwfpcd; C:\Windows\System32\drivers\gdwfpcd64.sys [64000 2014-08-25] (G Data Software AG) R1 GRD; C:\Windows\system32\drivers\GRD.sys [106272 2014-09-01] (G Data Software) R1 HookCentre; C:\Windows\system32\drivers\HookCentre.sys [61440 2014-08-25] (G Data Software AG) R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [28008 2013-08-07] (Intel Corporation) R3 L1C; C:\Windows\System32\DRIVERS\L1C62x64.sys [129224 2013-07-18] (Qualcomm Atheros Co., Ltd.) S3 VGPU; System32\drivers\rdvgkmd.sys [X] ==================== NetSvcs (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.) ==================== One Month Created Files and Folders ======== (If an entry is included in the fixlist, the file\folder will be moved.) 2014-09-06 15:59 - 2014-09-06 15:59 - 00010310 _____ () C:\Users\Admin\Desktop\FRST.txt 2014-09-06 15:58 - 2014-09-06 15:58 - 00000755 _____ () C:\Users\Admin\Desktop\JRT.txt 2014-09-06 15:50 - 2014-09-06 15:50 - 00000000 ____D () C:\Windows\ERUNT 2014-09-06 15:49 - 2014-09-06 15:49 - 00001222 _____ () C:\Users\Admin\Desktop\AdwCleaner[S0].txt 2014-09-06 15:35 - 2014-09-06 15:48 - 00000000 ____D () C:\AdwCleaner 2014-09-06 15:34 - 2014-09-06 15:34 - 00001158 _____ () C:\Users\Admin\Desktop\mbam.txt 2014-09-06 15:27 - 2014-09-06 15:27 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2014-09-06 15:27 - 2014-09-06 15:27 - 00001117 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-09-06 15:27 - 2014-09-06 15:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2014-09-06 15:27 - 2014-09-06 15:27 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-09-06 15:27 - 2014-09-06 15:27 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 2014-09-06 15:27 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys 2014-09-06 15:27 - 2014-05-12 07:26 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys 2014-09-06 15:27 - 2014-05-12 07:25 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2014-09-06 15:26 - 2014-09-06 15:22 - 01016261 _____ (Thisisu) C:\Users\Admin\Desktop\JRT.exe 2014-09-06 15:26 - 2014-09-06 15:21 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Admin\Desktop\mbam-setup-2.0.2.1012.exe 2014-09-06 15:26 - 2014-09-06 15:21 - 01370483 _____ () C:\Users\Admin\Desktop\adwcleaner_3.309.exe 2014-09-05 20:46 - 2014-09-05 20:46 - 00000000 ____D () C:\Users\Matze\AppData\Roaming\Macromedia 2014-09-05 20:46 - 2014-09-05 20:46 - 00000000 ____D () C:\Users\Matze\AppData\Roaming\Adobe 2014-09-05 20:46 - 2014-09-05 20:46 - 00000000 ____D () C:\Users\Matze\AppData\Local\Macromedia 2014-09-05 20:39 - 2014-09-05 20:39 - 00000000 ____D () C:\Users\Matze\AppData\Local\G DATA 2014-09-05 20:34 - 2014-09-05 20:34 - 00000000 ____D () C:\Users\Matze\AppData\Roaming\Thunderbird 2014-09-05 20:34 - 2014-09-05 20:34 - 00000000 ____D () C:\Users\Matze\AppData\Local\Thunderbird 2014-09-05 20:33 - 2014-09-05 20:33 - 00000000 ____D () C:\Users\Matze\AppData\Roaming\Mozilla 2014-09-05 20:33 - 2014-09-05 20:33 - 00000000 ____D () C:\Users\Matze\AppData\Local\Mozilla 2014-09-05 20:18 - 2014-09-06 15:59 - 00000000 ____D () C:\FRST 2014-09-05 20:17 - 2014-09-05 20:17 - 02104832 _____ (Farbar) C:\Users\Admin\Desktop\FRST64.exe 2014-09-05 15:13 - 2014-09-05 15:13 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2014-09-05 15:11 - 2014-09-05 15:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MyPhoneExplorer 2014-09-05 15:11 - 2014-09-05 15:11 - 00000000 ____D () C:\Program Files (x86)\MyPhoneExplorer 2014-09-04 16:20 - 2014-09-04 16:20 - 00000000 ____D () C:\Users\Admin\Logitech 2014-09-04 16:19 - 2014-09-04 16:19 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\InstallShield 2014-09-04 16:19 - 2014-09-04 16:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logitech 2014-09-04 16:19 - 2014-09-04 16:19 - 00000000 ____D () C:\Program Files (x86)\Logitech 2014-09-04 16:10 - 2014-09-04 16:11 - 00000000 ____D () C:\Users\Admin\.gimp-2.8 2014-09-04 16:10 - 2014-09-04 16:10 - 00000909 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GIMP 2.lnk 2014-09-04 16:10 - 2014-09-04 16:10 - 00000000 ____D () C:\Users\Admin\AppData\Local\gegl-0.2 2014-09-04 16:09 - 2014-09-04 16:10 - 00000000 ____D () C:\Program Files\GIMP 2 2014-09-04 15:50 - 2014-09-04 15:50 - 00000000 ____D () C:\Users\Admin\AppData\Local\FreeCommanderXE 2014-09-04 15:50 - 2014-09-04 15:50 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FreeCommander XE 2014-09-04 15:50 - 2014-09-04 15:50 - 00000000 ____D () C:\Program Files (x86)\FreeCommander XE 2014-09-04 15:40 - 2014-09-04 15:41 - 00000000 ____D () C:\Program Files (x86)\Audiograbber 2014-09-04 15:40 - 2014-09-04 15:40 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audiograbber 2014-09-03 20:35 - 2014-09-04 15:19 - 00000000 ____D () C:\Program Files (x86)\Steam 2014-09-03 20:35 - 2014-09-03 20:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam 2014-09-03 20:26 - 2014-09-03 20:26 - 00084688 _____ () C:\Users\Matze\AppData\Local\GDIPFONTCACHEV1.DAT 2014-09-03 20:26 - 2014-09-03 20:26 - 00000000 ____D () C:\Users\Matze\AppData\Roaming\Intel Corporation 2014-09-03 20:25 - 2014-09-03 20:25 - 00000020 ___SH () C:\Users\Matze\ntuser.ini 2014-09-03 20:25 - 2014-09-03 20:25 - 00000000 _SHDL () C:\Users\Matze\Vorlagen 2014-09-03 20:25 - 2014-09-03 20:25 - 00000000 _SHDL () C:\Users\Matze\Startmenü 2014-09-03 20:25 - 2014-09-03 20:25 - 00000000 _SHDL () C:\Users\Matze\Netzwerkumgebung 2014-09-03 20:25 - 2014-09-03 20:25 - 00000000 _SHDL () C:\Users\Matze\Lokale Einstellungen 2014-09-03 20:25 - 2014-09-03 20:25 - 00000000 _SHDL () C:\Users\Matze\Eigene Dateien 2014-09-03 20:25 - 2014-09-03 20:25 - 00000000 _SHDL () C:\Users\Matze\Druckumgebung 2014-09-03 20:25 - 2014-09-03 20:25 - 00000000 _SHDL () C:\Users\Matze\Documents\Eigene Musik 2014-09-03 20:25 - 2014-09-03 20:25 - 00000000 _SHDL () C:\Users\Matze\Documents\Eigene Bilder 2014-09-03 20:25 - 2014-09-03 20:25 - 00000000 _SHDL () C:\Users\Matze\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-09-03 20:25 - 2014-09-03 20:25 - 00000000 _SHDL () C:\Users\Matze\AppData\Local\Verlauf 2014-09-03 20:25 - 2014-09-03 20:25 - 00000000 _SHDL () C:\Users\Matze\AppData\Local\Anwendungsdaten 2014-09-03 20:25 - 2014-09-03 20:25 - 00000000 _SHDL () C:\Users\Matze\Anwendungsdaten 2014-09-03 20:25 - 2014-09-03 20:25 - 00000000 ____D () C:\Users\Matze\AppData\Local\VirtualStore 2014-09-03 20:25 - 2014-09-03 20:25 - 00000000 ____D () C:\Users\Matze 2014-09-03 20:25 - 2014-08-26 11:40 - 00000000 ____D () C:\Users\Matze\AppData\Local\Microsoft Help 2014-09-03 20:25 - 2009-07-14 06:54 - 00000000 ___RD () C:\Users\Matze\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2014-09-03 20:25 - 2009-07-14 06:49 - 00000000 ___RD () C:\Users\Matze\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance 2014-09-03 20:24 - 2014-09-03 20:24 - 00000000 ____D () C:\Users\Admin\AppData\Local\Adobe 2014-09-03 20:20 - 2014-09-03 20:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sicherheit & Optimierung 2014-09-03 20:20 - 2014-09-03 20:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDF Tools 2014-09-03 20:19 - 2014-09-03 20:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla 2014-09-03 20:18 - 2014-09-03 20:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hardware 2014-09-03 20:17 - 2014-09-03 20:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Brennprogramme 2014-09-03 20:16 - 2014-09-03 20:18 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mediaplayer 2014-09-02 20:09 - 2014-09-04 21:27 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\vlc 2014-09-02 20:09 - 2014-09-02 20:09 - 00000000 ____D () C:\Program Files (x86)\VideoLAN 2014-09-02 20:05 - 2014-07-09 04:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDYAK.DLL 2014-09-02 20:05 - 2014-07-09 04:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDTAT.DLL 2014-09-02 20:05 - 2014-07-09 04:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU1.DLL 2014-09-02 20:05 - 2014-07-09 04:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDBASH.DLL 2014-09-02 20:05 - 2014-07-09 04:03 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU.DLL 2014-09-02 20:05 - 2014-07-09 03:31 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDYAK.DLL 2014-09-02 20:05 - 2014-07-09 03:31 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDTAT.DLL 2014-09-02 20:05 - 2014-07-09 03:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRU1.DLL 2014-09-02 20:05 - 2014-07-09 03:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRU.DLL 2014-09-02 20:05 - 2014-07-09 03:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDBASH.DLL 2014-09-02 20:05 - 2014-07-09 00:39 - 00419704 _____ () C:\Windows\system32\locale.nls 2014-09-02 20:05 - 2014-07-09 00:30 - 00419704 _____ () C:\Windows\SysWOW64\locale.nls 2014-09-02 18:42 - 2014-09-02 18:42 - 00010009 _____ () C:\Windows\DirectX.log 2014-09-02 18:42 - 2010-06-02 04:55 - 00527192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_7.dll 2014-09-02 18:42 - 2010-06-02 04:55 - 00518488 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_7.dll 2014-09-02 18:42 - 2010-06-02 04:55 - 00239960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_7.dll 2014-09-02 18:42 - 2010-06-02 04:55 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_7.dll 2014-09-02 18:42 - 2010-06-02 04:55 - 00077656 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_5.dll 2014-09-02 18:42 - 2010-06-02 04:55 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_5.dll 2014-09-02 18:42 - 2010-05-26 11:41 - 02526056 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_43.dll 2014-09-02 18:42 - 2010-05-26 11:41 - 02401112 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_43.dll 2014-09-02 18:42 - 2010-05-26 11:41 - 02106216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_43.dll 2014-09-02 18:42 - 2010-05-26 11:41 - 01998168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_43.dll 2014-09-02 18:42 - 2010-05-26 11:41 - 01907552 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_43.dll 2014-09-02 18:42 - 2010-05-26 11:41 - 01868128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_43.dll 2014-09-02 18:42 - 2010-05-26 11:41 - 00511328 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_43.dll 2014-09-02 18:42 - 2010-05-26 11:41 - 00470880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_43.dll 2014-09-02 18:42 - 2010-05-26 11:41 - 00276832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_43.dll 2014-09-02 18:42 - 2010-05-26 11:41 - 00248672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_43.dll 2014-09-02 18:42 - 2010-02-04 10:01 - 00530776 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_6.dll 2014-09-02 18:42 - 2010-02-04 10:01 - 00528216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_6.dll 2014-09-02 18:42 - 2010-02-04 10:01 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_6.dll 2014-09-02 18:42 - 2010-02-04 10:01 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_6.dll 2014-09-02 18:42 - 2010-02-04 10:01 - 00078680 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_4.dll 2014-09-02 18:42 - 2010-02-04 10:01 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_4.dll 2014-09-02 18:42 - 2010-02-04 10:01 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_7.dll 2014-09-02 18:42 - 2010-02-04 10:01 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_7.dll 2014-09-02 18:42 - 2009-09-04 17:44 - 00517960 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_5.dll 2014-09-02 18:42 - 2009-09-04 17:44 - 00515416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_5.dll 2014-09-02 18:42 - 2009-09-04 17:44 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_5.dll 2014-09-02 18:42 - 2009-09-04 17:44 - 00176968 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_5.dll 2014-09-02 18:42 - 2009-09-04 17:44 - 00073544 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_3.dll 2014-09-02 18:42 - 2009-09-04 17:44 - 00069464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_3.dll 2014-09-02 18:42 - 2009-09-04 17:29 - 05554512 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_42.dll 2014-09-02 18:42 - 2009-09-04 17:29 - 05501792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_42.dll 2014-09-02 18:42 - 2009-09-04 17:29 - 02582888 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_42.dll 2014-09-02 18:42 - 2009-09-04 17:29 - 02475352 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_42.dll 2014-09-02 18:42 - 2009-09-04 17:29 - 01974616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_42.dll 2014-09-02 18:42 - 2009-09-04 17:29 - 01892184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_42.dll 2014-09-02 18:42 - 2009-09-04 17:29 - 00523088 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_42.dll 2014-09-02 18:42 - 2009-09-04 17:29 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_42.dll 2014-09-02 18:42 - 2009-09-04 17:29 - 00285024 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_42.dll 2014-09-02 18:42 - 2009-09-04 17:29 - 00235344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_42.dll 2014-09-02 18:42 - 2009-03-16 14:18 - 00521560 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_4.dll 2014-09-02 18:42 - 2009-03-16 14:18 - 00517448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_4.dll 2014-09-02 18:42 - 2009-03-16 14:18 - 00235352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_4.dll 2014-09-02 18:42 - 2009-03-16 14:18 - 00174936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_4.dll 2014-09-02 18:42 - 2009-03-16 14:18 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_6.dll 2014-09-02 18:42 - 2009-03-16 14:18 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_6.dll 2014-09-02 18:42 - 2009-03-09 15:27 - 05425496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_41.dll 2014-09-02 18:42 - 2009-03-09 15:27 - 04178264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_41.dll 2014-09-02 18:42 - 2009-03-09 15:27 - 02430312 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_41.dll 2014-09-02 18:42 - 2009-03-09 15:27 - 01846632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_41.dll 2014-09-02 18:42 - 2009-03-09 15:27 - 00520544 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_41.dll 2014-09-02 18:42 - 2009-03-09 15:27 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_41.dll 2014-09-02 18:42 - 2008-10-27 10:04 - 00518480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_3.dll 2014-09-02 18:42 - 2008-10-27 10:04 - 00514384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_3.dll 2014-09-02 18:42 - 2008-10-27 10:04 - 00235856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_3.dll 2014-09-02 18:42 - 2008-10-27 10:04 - 00175440 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_3.dll 2014-09-02 18:42 - 2008-10-27 10:04 - 00074576 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_2.dll 2014-09-02 18:42 - 2008-10-27 10:04 - 00070992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_2.dll 2014-09-02 18:42 - 2008-10-27 10:04 - 00025936 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_5.dll 2014-09-02 18:42 - 2008-10-27 10:04 - 00023376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_5.dll 2014-09-02 18:42 - 2008-10-10 04:52 - 05631312 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_40.dll 2014-09-02 18:42 - 2008-10-10 04:52 - 04379984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_40.dll 2014-09-02 18:42 - 2008-10-10 04:52 - 02605920 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_40.dll 2014-09-02 18:42 - 2008-10-10 04:52 - 02036576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_40.dll 2014-09-02 18:42 - 2008-10-10 04:52 - 00519000 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_40.dll 2014-09-02 18:42 - 2008-10-10 04:52 - 00452440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_40.dll 2014-09-02 18:42 - 2008-07-31 10:41 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_2.dll 2014-09-02 18:42 - 2008-07-31 10:41 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_2.dll 2014-09-02 18:42 - 2008-07-31 10:41 - 00072200 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_1.dll 2014-09-02 18:42 - 2008-07-31 10:41 - 00068616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_1.dll 2014-09-02 18:42 - 2008-07-31 10:40 - 00513544 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_2.dll 2014-09-02 18:42 - 2008-07-31 10:40 - 00509448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_2.dll 2014-09-02 18:42 - 2008-07-10 11:01 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_39.dll 2014-09-02 18:42 - 2008-07-10 11:00 - 04992520 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_39.dll 2014-09-02 18:42 - 2008-07-10 11:00 - 03851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll 2014-09-02 18:42 - 2008-07-10 11:00 - 01942552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_39.dll 2014-09-02 18:42 - 2008-07-10 11:00 - 01493528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_39.dll 2014-09-02 18:42 - 2008-07-10 11:00 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_39.dll 2014-09-02 18:42 - 2008-05-30 14:19 - 00511496 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_1.dll 2014-09-02 18:42 - 2008-05-30 14:19 - 00507400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_1.dll 2014-09-02 18:42 - 2008-05-30 14:18 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_1.dll 2014-09-02 18:42 - 2008-05-30 14:18 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_1.dll 2014-09-02 18:42 - 2008-05-30 14:17 - 00068104 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_0.dll 2014-09-02 18:42 - 2008-05-30 14:17 - 00065032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_0.dll 2014-09-02 18:42 - 2008-05-30 14:17 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_4.dll 2014-09-02 18:42 - 2008-05-30 14:16 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_4.dll 2014-09-02 18:42 - 2008-05-30 14:11 - 04991496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_38.dll 2014-09-02 18:42 - 2008-05-30 14:11 - 03850760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_38.dll 2014-09-02 18:42 - 2008-05-30 14:11 - 01941528 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_38.dll 2014-09-02 18:42 - 2008-05-30 14:11 - 01491992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_38.dll 2014-09-02 18:42 - 2008-05-30 14:11 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_38.dll 2014-09-02 18:42 - 2008-05-30 14:11 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_38.dll 2014-09-02 18:42 - 2008-03-05 16:04 - 00489480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_0.dll 2014-09-02 18:42 - 2008-03-05 16:03 - 00479752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_0.dll 2014-09-02 18:42 - 2008-03-05 16:03 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_0.dll 2014-09-02 18:42 - 2008-03-05 16:03 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_0.dll 2014-09-02 18:42 - 2008-03-05 16:00 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_3.dll 2014-09-02 18:42 - 2008-03-05 16:00 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_3.dll 2014-09-02 18:42 - 2008-03-05 15:56 - 04910088 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_37.dll 2014-09-02 18:42 - 2008-03-05 15:56 - 03786760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_37.dll 2014-09-02 18:42 - 2008-03-05 15:56 - 01860120 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_37.dll 2014-09-02 18:42 - 2008-03-05 15:56 - 01420824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_37.dll 2014-09-02 18:42 - 2008-02-05 23:07 - 00529424 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_37.dll 2014-09-02 18:42 - 2008-02-05 23:07 - 00462864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_37.dll 2014-09-02 18:42 - 2007-10-22 03:40 - 00411656 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_10.dll 2014-09-02 18:42 - 2007-10-22 03:39 - 00267272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_10.dll 2014-09-02 18:42 - 2007-10-22 03:37 - 00021000 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_2.dll 2014-09-02 18:42 - 2007-10-22 03:37 - 00017928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_2.dll 2014-09-02 18:42 - 2007-10-12 15:14 - 05081608 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_36.dll 2014-09-02 18:42 - 2007-10-12 15:14 - 03734536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_36.dll 2014-09-02 18:42 - 2007-10-12 15:14 - 02006552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_36.dll 2014-09-02 18:42 - 2007-10-12 15:14 - 01374232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_36.dll 2014-09-02 18:42 - 2007-10-02 09:56 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_36.dll 2014-09-02 18:42 - 2007-10-02 09:56 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_36.dll 2014-09-02 18:42 - 2007-07-20 00:57 - 00411496 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_9.dll 2014-09-02 18:42 - 2007-07-20 00:57 - 00267112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_9.dll 2014-09-02 18:42 - 2007-07-19 18:14 - 05073256 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_35.dll 2014-09-02 18:42 - 2007-07-19 18:14 - 03727720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_35.dll 2014-09-02 18:42 - 2007-07-19 18:14 - 01985904 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_35.dll 2014-09-02 18:42 - 2007-07-19 18:14 - 01358192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_35.dll 2014-09-02 18:42 - 2007-07-19 18:14 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_35.dll 2014-09-02 18:42 - 2007-07-19 18:14 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_35.dll 2014-09-02 18:42 - 2007-06-20 20:49 - 00409960 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_8.dll 2014-09-02 18:42 - 2007-06-20 20:46 - 00266088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_8.dll 2014-09-02 18:42 - 2007-05-16 16:45 - 04496232 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_34.dll 2014-09-02 18:42 - 2007-05-16 16:45 - 03497832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_34.dll 2014-09-02 18:42 - 2007-05-16 16:45 - 01401200 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_34.dll 2014-09-02 18:42 - 2007-05-16 16:45 - 01124720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_34.dll 2014-09-02 18:42 - 2007-05-16 16:45 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_34.dll 2014-09-02 18:42 - 2007-05-16 16:45 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_34.dll 2014-09-02 18:42 - 2007-04-04 18:55 - 00403304 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_7.dll 2014-09-02 18:42 - 2007-04-04 18:55 - 00261480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_7.dll 2014-09-02 18:42 - 2007-04-04 18:54 - 00107368 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_3.dll 2014-09-02 18:42 - 2007-04-04 18:53 - 00081768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_3.dll 2014-09-02 18:42 - 2007-03-15 16:57 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_33.dll 2014-09-02 18:42 - 2007-03-15 16:57 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_33.dll 2014-09-02 18:42 - 2007-03-12 16:42 - 04494184 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_33.dll 2014-09-02 18:42 - 2007-03-12 16:42 - 03495784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_33.dll 2014-09-02 18:42 - 2007-03-12 16:42 - 01400176 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_33.dll 2014-09-02 18:42 - 2007-03-12 16:42 - 01123696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_33.dll 2014-09-02 18:42 - 2007-03-05 12:42 - 00017688 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_1.dll 2014-09-02 18:42 - 2007-03-05 12:42 - 00015128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_1.dll 2014-09-02 18:42 - 2007-01-24 15:27 - 00393576 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_6.dll 2014-09-02 18:42 - 2007-01-24 15:27 - 00255848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_6.dll 2014-09-02 18:42 - 2006-12-08 12:02 - 00251672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_5.dll 2014-09-02 18:42 - 2006-12-08 12:00 - 00390424 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_5.dll 2014-09-02 18:42 - 2006-11-29 13:06 - 04398360 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_32.dll 2014-09-02 18:42 - 2006-11-29 13:06 - 03426072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_32.dll 2014-09-02 18:42 - 2006-11-29 13:06 - 00469264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10.dll 2014-09-02 18:42 - 2006-11-29 13:06 - 00440080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10.dll 2014-09-02 18:42 - 2006-09-28 16:05 - 03977496 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_31.dll 2014-09-02 18:42 - 2006-09-28 16:05 - 02414360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_31.dll 2014-09-02 18:42 - 2006-09-28 16:05 - 00237848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_4.dll 2014-09-02 18:42 - 2006-09-28 16:04 - 00364824 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_4.dll 2014-09-02 18:42 - 2006-07-28 09:31 - 00083736 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_2.dll 2014-09-02 18:42 - 2006-07-28 09:30 - 00363288 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_3.dll 2014-09-02 18:42 - 2006-07-28 09:30 - 00236824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_3.dll 2014-09-02 18:42 - 2006-07-28 09:30 - 00062744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_2.dll 2014-09-02 18:42 - 2006-05-31 07:24 - 00230168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_2.dll 2014-09-02 18:42 - 2006-05-31 07:22 - 00354072 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_2.dll 2014-09-02 18:42 - 2006-03-31 12:41 - 03927248 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_30.dll 2014-09-02 18:42 - 2006-03-31 12:40 - 02388176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_30.dll 2014-09-02 18:42 - 2006-03-31 12:40 - 00352464 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_1.dll 2014-09-02 18:42 - 2006-03-31 12:39 - 00229584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_1.dll 2014-09-02 18:42 - 2006-03-31 12:39 - 00083664 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_1.dll 2014-09-02 18:42 - 2006-03-31 12:39 - 00062672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_1.dll 2014-09-02 18:42 - 2006-02-03 08:43 - 03830992 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_29.dll 2014-09-02 18:42 - 2006-02-03 08:43 - 02332368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_29.dll 2014-09-02 18:42 - 2006-02-03 08:42 - 00355536 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_0.dll 2014-09-02 18:42 - 2006-02-03 08:42 - 00230096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_0.dll 2014-09-02 18:42 - 2006-02-03 08:41 - 00016592 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_0.dll 2014-09-02 18:42 - 2006-02-03 08:41 - 00014032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_0.dll 2014-09-02 18:42 - 2005-12-05 18:09 - 03815120 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_28.dll 2014-09-02 18:42 - 2005-12-05 18:09 - 02323664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_28.dll 2014-09-02 18:42 - 2005-07-22 19:59 - 03807440 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_27.dll 2014-09-02 18:42 - 2005-07-22 19:59 - 02319568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_27.dll 2014-09-02 18:42 - 2005-05-26 15:34 - 03767504 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_26.dll 2014-09-02 18:42 - 2005-05-26 15:34 - 02297552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_26.dll 2014-09-02 18:42 - 2005-03-18 17:19 - 03823312 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_25.dll 2014-09-02 18:42 - 2005-03-18 17:19 - 02337488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_25.dll 2014-09-02 18:42 - 2005-02-05 19:45 - 03544272 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_24.dll 2014-09-02 18:42 - 2005-02-05 19:45 - 02222800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_24.dll 2014-09-02 18:40 - 2014-09-02 18:42 - 00000000 ___HD () C:\Windows\msdownld.tmp 2014-09-02 18:40 - 2014-09-02 18:42 - 00000000 ____D () C:\Windows\SysWOW64\directx 2014-09-02 18:34 - 2014-09-02 18:34 - 00000000 ____D () C:\Program Files (x86)\LAV Filters 2014-09-02 18:30 - 2014-09-02 18:35 - 00000000 ____D () C:\Program Files (x86)\DVBViewer 2014-09-02 18:30 - 2014-09-02 18:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVBViewer 2014-09-02 18:30 - 2014-09-02 18:30 - 00000000 ____D () C:\ProgramData\CMUV 2014-09-01 20:13 - 2014-09-01 20:13 - 00002410 _____ () C:\Windows\SysWOW64\cplLogon.tsk 2014-09-01 20:13 - 2014-09-01 20:13 - 00000000 ____D () C:\Program Files\Logon Screen 2014-09-01 19:56 - 2014-09-01 19:56 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\Canneverbe Limited 2014-09-01 19:56 - 2014-09-01 19:56 - 00000000 ____D () C:\ProgramData\Canneverbe Limited 2014-09-01 19:56 - 2014-09-01 19:56 - 00000000 ____D () C:\Program Files (x86)\CDBurnerXP 2014-09-01 19:52 - 2014-09-01 19:52 - 00000000 ____D () C:\Users\Admin\Documents\AnyDVDHD 2014-09-01 19:50 - 2014-09-01 19:50 - 00000040 ___SH () C:\ProgramData\.zreglib 2014-09-01 19:49 - 2014-09-01 19:49 - 00000000 ____D () C:\ProgramData\SlySoft 2014-09-01 19:49 - 2014-09-01 19:49 - 00000000 ____D () C:\Program Files (x86)\SlySoft 2014-09-01 19:43 - 2014-09-01 19:43 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\Oracle 2014-09-01 19:41 - 2014-09-01 19:41 - 00272808 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe 2014-09-01 19:41 - 2014-09-01 19:41 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe 2014-09-01 19:41 - 2014-09-01 19:41 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe 2014-09-01 19:41 - 2014-09-01 19:41 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll 2014-09-01 19:41 - 2014-09-01 19:41 - 00000000 ____D () C:\ProgramData\Sun 2014-09-01 19:41 - 2014-09-01 19:41 - 00000000 ____D () C:\ProgramData\Oracle 2014-09-01 19:41 - 2014-09-01 19:41 - 00000000 ____D () C:\Program Files (x86)\Java 2014-09-01 19:38 - 2014-09-06 15:57 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-09-01 19:38 - 2014-09-01 19:38 - 00699568 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2014-09-01 19:38 - 2014-09-01 19:38 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2014-09-01 19:38 - 2014-09-01 19:38 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater 2014-09-01 19:38 - 2014-09-01 19:38 - 00000000 ____D () C:\Windows\SysWOW64\Macromed 2014-09-01 19:38 - 2014-09-01 19:38 - 00000000 ____D () C:\Windows\system32\Macromed 2014-09-01 19:38 - 2014-09-01 19:38 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\Macromedia 2014-09-01 19:38 - 2014-09-01 19:38 - 00000000 ____D () C:\Users\Admin\AppData\Local\Macromedia 2014-09-01 19:36 - 2014-09-01 19:50 - 00000000 ____D () C:\ProgramData\Adobe 2014-09-01 19:36 - 2014-09-01 19:36 - 00000000 ____D () C:\Program Files (x86)\Adobe 2014-09-01 18:51 - 2014-09-01 18:51 - 00001436 _____ () C:\Users\Bine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2014-09-01 18:51 - 2014-09-01 18:51 - 00000000 ____D () C:\Users\Bine\AppData\Roaming\Mozilla 2014-09-01 18:51 - 2014-09-01 18:51 - 00000000 ____D () C:\Users\Bine\AppData\Roaming\Adobe 2014-09-01 18:51 - 2014-09-01 18:51 - 00000000 ____D () C:\Users\Bine\AppData\Local\Mozilla 2014-09-01 18:50 - 2014-09-01 18:51 - 00000000 ____D () C:\Users\Bine 2014-09-01 18:50 - 2014-09-01 18:50 - 00000020 ___SH () C:\Users\Bine\ntuser.ini 2014-09-01 18:50 - 2014-09-01 18:50 - 00000000 _SHDL () C:\Users\Bine\Vorlagen 2014-09-01 18:50 - 2014-09-01 18:50 - 00000000 _SHDL () C:\Users\Bine\Startmenü 2014-09-01 18:50 - 2014-09-01 18:50 - 00000000 _SHDL () C:\Users\Bine\Netzwerkumgebung 2014-09-01 18:50 - 2014-09-01 18:50 - 00000000 _SHDL () C:\Users\Bine\Lokale Einstellungen 2014-09-01 18:50 - 2014-09-01 18:50 - 00000000 _SHDL () C:\Users\Bine\Eigene Dateien 2014-09-01 18:50 - 2014-09-01 18:50 - 00000000 _SHDL () C:\Users\Bine\Druckumgebung 2014-09-01 18:50 - 2014-09-01 18:50 - 00000000 _SHDL () C:\Users\Bine\Documents\Eigene Musik 2014-09-01 18:50 - 2014-09-01 18:50 - 00000000 _SHDL () C:\Users\Bine\Documents\Eigene Bilder 2014-09-01 18:50 - 2014-09-01 18:50 - 00000000 _SHDL () C:\Users\Bine\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-09-01 18:50 - 2014-09-01 18:50 - 00000000 _SHDL () C:\Users\Bine\AppData\Local\Verlauf 2014-09-01 18:50 - 2014-09-01 18:50 - 00000000 _SHDL () C:\Users\Bine\AppData\Local\Anwendungsdaten 2014-09-01 18:50 - 2014-09-01 18:50 - 00000000 _SHDL () C:\Users\Bine\Anwendungsdaten 2014-09-01 18:50 - 2014-09-01 18:50 - 00000000 ____D () C:\Users\Bine\AppData\Local\VirtualStore 2014-09-01 18:50 - 2014-08-26 11:40 - 00000000 ____D () C:\Users\Bine\AppData\Local\Microsoft Help 2014-09-01 18:50 - 2009-07-14 06:54 - 00000000 ___RD () C:\Users\Bine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2014-09-01 18:50 - 2009-07-14 06:49 - 00000000 ___RD () C:\Users\Bine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance 2014-09-01 17:47 - 2014-09-01 17:47 - 00106272 _____ (G Data Software) C:\Windows\system32\Drivers\GRD.sys 2014-09-01 17:47 - 2014-09-01 17:47 - 00018160 _____ (G Data Software) C:\Windows\system32\Drivers\GdPhyMem.sys 2014-09-01 17:40 - 2014-09-01 17:40 - 00000000 ___HD () C:\ProgramData\CanonIJScan 2014-09-01 17:35 - 2014-09-01 17:40 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\Canon 2014-09-01 17:32 - 2014-09-01 17:35 - 00000000 ____D () C:\Program Files (x86)\Canon 2014-09-01 17:32 - 2014-09-01 17:32 - 00000000 ____D () C:\Windows\system32\STRING 2014-09-01 17:32 - 2014-09-01 17:32 - 00000000 ____D () C:\ProgramData\Canon IJ Network Tool 2014-09-01 17:32 - 2012-06-14 17:18 - 00366592 _____ (CANON INC.) C:\Windows\SysWOW64\CNMNPPM.DLL 2014-09-01 17:32 - 2012-06-14 17:18 - 00359936 _____ (CANON INC.) C:\Windows\system32\CNMN6PPM.DLL 2014-09-01 17:32 - 2012-06-14 17:18 - 00039424 _____ (CANON INC.) C:\Windows\system32\CNMN6UI.DLL 2014-09-01 17:32 - 2009-09-17 09:12 - 00303104 _____ (CANON INC.) C:\Windows\SysWOW64\CNC640L.dll 2014-09-01 17:32 - 2009-04-03 15:57 - 00106496 _____ (CANON INC.) C:\Windows\SysWOW64\CNC640U.dll 2014-09-01 17:32 - 2008-12-25 16:23 - 00013312 _____ () C:\Windows\SysWOW64\CNC173FD.TBL 2014-09-01 17:32 - 2008-08-25 18:02 - 00015872 _____ (CANON INC.) C:\Windows\SysWOW64\CNHMCA.dll 2014-09-01 17:31 - 2014-09-01 17:31 - 00000000 ___HD () C:\Windows\system32\CanonIJ Uninstaller Information 2014-09-01 17:31 - 2014-09-01 17:31 - 00000000 ___HD () C:\ProgramData\CanonBJ 2014-09-01 17:31 - 2010-04-24 05:00 - 00336896 _____ (CANON INC.) C:\Windows\system32\CNMLMA2.DLL 2014-09-01 17:30 - 2014-09-01 17:30 - 00000000 ___HD () C:\Program Files\CanonBJ 2014-09-01 17:30 - 2009-03-18 09:10 - 00244736 _____ (CANON INC.) C:\Windows\system32\CNMIUA2.DLL 2014-09-01 16:29 - 2014-09-01 16:29 - 00000000 ____D () C:\Users\Admin\AppData\Local\G DATA 2014-09-01 15:52 - 2014-09-01 15:52 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\Thunderbird 2014-09-01 15:52 - 2014-09-01 15:52 - 00000000 ____D () C:\Users\Admin\AppData\Local\Thunderbird 2014-09-01 15:52 - 2014-09-01 15:52 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird 2014-08-29 11:18 - 2014-08-29 11:18 - 00000000 ____D () C:\Wallpapers 2014-08-29 11:16 - 2014-08-29 11:16 - 00000000 ____D () C:\Users\Admin\AppData\Local\Apps\2.0 2014-08-29 11:07 - 2014-08-23 04:10 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll 2014-08-29 11:07 - 2014-08-23 03:45 - 00311296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll 2014-08-29 11:07 - 2014-08-23 02:59 - 03166720 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2014-08-26 11:40 - 2014-08-26 11:40 - 00000000 ____D () C:\Users\Default\AppData\Local\Microsoft Help 2014-08-26 11:40 - 2014-08-26 11:40 - 00000000 ____D () C:\Users\Default User\AppData\Local\Microsoft Help 2014-08-26 11:40 - 2014-08-26 11:40 - 00000000 ____D () C:\Program Files\Common Files\DESIGNER 2014-08-26 11:24 - 2014-09-06 15:49 - 00003758 _____ () C:\Windows\System32\Tasks\AutoKMS 2014-08-26 11:24 - 2014-08-26 11:28 - 00000000 ____D () C:\Windows\AutoKMS 2014-08-26 11:24 - 2014-08-26 11:24 - 00000000 ____D () C:\ProgramData\Microsoft Toolkit 2014-08-26 11:19 - 2014-08-26 11:19 - 00000000 ____D () C:\Windows\System32\Tasks\OfficeSoftwareProtectionPlatform 2014-08-26 11:18 - 2014-08-26 11:18 - 00000000 ____D () C:\Windows\PCHEALTH 2014-08-26 11:18 - 2014-08-26 11:18 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2014-08-26 11:18 - 2014-08-26 11:18 - 00000000 ____D () C:\Program Files\Microsoft Synchronization Services 2014-08-26 11:18 - 2014-08-26 11:18 - 00000000 ____D () C:\Program Files\Microsoft SQL Server Compact Edition 2014-08-26 11:18 - 2014-08-26 11:18 - 00000000 ____D () C:\Program Files\Microsoft Analysis Services 2014-08-26 11:18 - 2014-08-26 11:18 - 00000000 ____D () C:\Program Files (x86)\Microsoft Analysis Services 2014-08-26 11:17 - 2014-08-26 11:41 - 00000000 ____D () C:\ProgramData\Microsoft Help 2014-08-26 11:17 - 2014-08-26 11:18 - 00000000 ____D () C:\Program Files\Microsoft Office 2014-08-26 11:17 - 2014-08-26 11:17 - 00000000 __RHD () C:\MSOCache 2014-08-26 11:17 - 2014-08-26 11:17 - 00000000 ____D () C:\Users\Admin\AppData\Local\Microsoft Help 2014-08-26 11:17 - 2014-08-26 11:17 - 00000000 ____D () C:\Program Files (x86)\Microsoft Office 2014-08-26 10:57 - 2014-08-26 10:57 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip 2014-08-26 10:57 - 2014-08-26 10:57 - 00000000 ____D () C:\Program Files\7-Zip 2014-08-25 12:09 - 2014-08-25 12:09 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\Intel Corporation 2014-08-25 12:09 - 2014-08-25 12:09 - 00000000 ____D () C:\ProgramData\Intel 2014-08-25 12:08 - 2014-08-25 12:08 - 00000000 ____D () C:\Users\Admin\Intel 2014-08-25 11:58 - 2014-09-04 16:19 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information 2014-08-25 11:58 - 2014-08-25 11:58 - 00000000 ____D () C:\Windows\SysWOW64\Atheros_L1e 2014-08-25 11:58 - 2013-07-18 07:54 - 00129224 _____ (Qualcomm Atheros Co., Ltd.) C:\Windows\system32\Drivers\L1C62x64.sys 2014-08-25 11:52 - 2014-08-25 11:52 - 00000000 ____D () C:\Program Files\DigitalDevices 2014-08-25 11:49 - 2014-08-25 11:50 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\Mozilla 2014-08-25 11:49 - 2014-08-25 11:50 - 00000000 ____D () C:\Users\Admin\AppData\Local\Mozilla 2014-08-25 11:46 - 2014-08-25 11:46 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_iusb3hcs_01009.Wdf 2014-08-25 11:45 - 2013-04-26 10:24 - 00041984 _____ (Intel Corporation) C:\Windows\system32\Drivers\USB3Ver.dll 2014-08-25 11:39 - 2013-08-05 05:50 - 00053248 _____ (Windows XP Bundled build C-Centric Single User) C:\Windows\SysWOW64\CSVer.dll 2014-08-25 11:13 - 2014-08-25 11:13 - 00000000 ____D () C:\Program Files\Microsoft Silverlight 2014-08-25 11:13 - 2014-08-25 11:13 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight 2014-08-25 11:10 - 2014-08-25 11:10 - 00000000 ____D () C:\Users\Admin\AppData\Local\WindowsUpdate 2014-08-25 11:07 - 2014-01-09 04:22 - 05694464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll 2014-08-25 11:07 - 2014-01-04 00:44 - 06574592 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll 2014-08-25 11:02 - 2013-10-02 04:22 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys 2014-08-25 11:02 - 2013-10-02 04:11 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe 2014-08-25 11:02 - 2013-10-02 04:08 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll 2014-08-25 11:02 - 2013-10-02 03:48 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\MsRdpWebAccess.dll 2014-08-25 11:02 - 2013-10-02 03:48 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\wksprtPS.dll 2014-08-25 11:02 - 2013-10-02 03:29 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll 2014-08-25 11:02 - 2013-10-02 03:10 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll 2014-08-25 11:02 - 2013-10-02 02:15 - 01057280 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll 2014-08-25 11:02 - 2013-10-02 02:14 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MsRdpWebAccess.dll 2014-08-25 11:02 - 2013-10-02 02:14 - 00017920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wksprtPS.dll 2014-08-25 11:02 - 2013-10-02 02:08 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe 2014-08-25 11:02 - 2013-10-02 02:01 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe 2014-08-25 11:02 - 2013-10-02 01:58 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll 2014-08-25 11:02 - 2013-10-02 01:31 - 01147392 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe 2014-08-25 11:02 - 2013-10-02 01:08 - 00855552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll 2014-08-25 11:02 - 2013-10-02 00:34 - 01068544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe 2014-08-25 11:02 - 2013-09-25 04:23 - 01030144 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll 2014-08-25 11:02 - 2013-09-25 03:57 - 00792576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll 2014-08-25 10:57 - 2014-08-25 10:57 - 00000144 _____ () C:\Windows\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat 2014-08-25 10:53 - 2014-09-06 15:19 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service 2014-08-25 10:53 - 2014-08-25 10:53 - 00000000 ____D () C:\ProgramData\Mozilla 2014-08-25 10:52 - 2014-09-03 20:03 - 00000510 _____ () C:\Windows\system32\{F33C3B9B-72AF-418A-B3FD-560646F7CDA2}.bat 2014-08-25 10:52 - 2014-08-25 10:52 - 00003538 _____ () C:\Windows\System32\Tasks\CreateChoiceProcessTask 2014-08-25 10:52 - 2014-08-25 10:52 - 00000000 __SHD () C:\Users\Admin\AppData\Local\EmieUserList 2014-08-25 10:52 - 2014-08-25 10:52 - 00000000 __SHD () C:\Users\Admin\AppData\Local\EmieSiteList 2014-08-25 10:47 - 2014-08-25 12:09 - 01645874 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI 2014-08-25 10:41 - 2014-08-25 10:41 - 00000000 ____D () C:\Windows\system32\MRT 2014-08-25 10:41 - 2014-07-31 23:41 - 99218768 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2014-08-25 10:40 - 2010-02-23 10:16 - 00294912 _____ (Microsoft Corporation) C:\Windows\system32\browserchoice.exe 2014-08-25 10:39 - 2014-09-03 20:03 - 00000000 ____D () C:\Intel 2014-08-25 10:39 - 2014-08-25 12:09 - 00000000 ____D () C:\Program Files\Intel 2014-08-25 10:39 - 2014-08-25 11:45 - 00000000 ____D () C:\Program Files (x86)\Intel 2014-08-25 10:39 - 2014-08-14 00:24 - 00082432 _____ (Khronos Group) C:\Windows\system32\OpenCL.DLL 2014-08-25 10:39 - 2014-08-14 00:24 - 00074752 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.DLL 2014-08-25 10:35 - 2014-08-25 10:35 - 00000000 ___SD () C:\Windows\system32\CompatTel 2014-08-25 10:35 - 2014-08-01 01:41 - 00348856 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2014-08-25 10:35 - 2014-08-01 01:16 - 00307384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2014-08-25 10:35 - 2014-07-25 16:52 - 23645696 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-08-25 10:35 - 2014-07-25 16:02 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-08-25 10:35 - 2014-07-25 16:01 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2014-08-25 10:35 - 2014-07-25 15:51 - 17524224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-08-25 10:35 - 2014-07-25 15:30 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-08-25 10:35 - 2014-07-25 15:28 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2014-08-25 10:35 - 2014-07-25 15:28 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2014-08-25 10:35 - 2014-07-25 15:25 - 02774528 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-08-25 10:35 - 2014-07-25 15:25 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2014-08-25 10:35 - 2014-07-25 15:11 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-08-25 10:35 - 2014-07-25 15:10 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-08-25 10:35 - 2014-07-25 15:04 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2014-08-25 10:35 - 2014-07-25 15:03 - 00598016 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-08-25 10:35 - 2014-07-25 15:00 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2014-08-25 10:35 - 2014-07-25 15:00 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2014-08-25 10:35 - 2014-07-25 14:59 - 00758272 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2014-08-25 10:35 - 2014-07-25 14:47 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2014-08-25 10:35 - 2014-07-25 14:40 - 00452096 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2014-08-25 10:35 - 2014-07-25 14:34 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2014-08-25 10:35 - 2014-07-25 14:34 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2014-08-25 10:35 - 2014-07-25 14:33 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2014-08-25 10:35 - 2014-07-25 14:30 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2014-08-25 10:35 - 2014-07-25 14:28 - 05824512 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-08-25 10:35 - 2014-07-25 14:28 - 00072704 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2014-08-25 10:35 - 2014-07-25 14:21 - 02184704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2014-08-25 10:35 - 2014-07-25 14:19 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-08-25 10:35 - 2014-07-25 14:18 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2014-08-25 10:35 - 2014-07-25 14:17 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2014-08-25 10:35 - 2014-07-25 14:17 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2014-08-25 10:35 - 2014-07-25 14:12 - 00438784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2014-08-25 10:35 - 2014-07-25 14:10 - 00292864 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2014-08-25 10:35 - 2014-07-25 14:10 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2014-08-25 10:35 - 2014-07-25 14:08 - 00597504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2014-08-25 10:35 - 2014-07-25 14:06 - 04204032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2014-08-25 10:35 - 2014-07-25 13:52 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2014-08-25 10:35 - 2014-07-25 13:47 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-08-25 10:35 - 2014-07-25 13:43 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2014-08-25 10:35 - 2014-07-25 13:42 - 00692736 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-08-25 10:35 - 2014-07-25 13:39 - 02087936 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-08-25 10:35 - 2014-07-25 13:39 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2014-08-25 10:35 - 2014-07-25 13:36 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2014-08-25 10:35 - 2014-07-25 13:34 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2014-08-25 10:35 - 2014-07-25 13:29 - 00239616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2014-08-25 10:35 - 2014-07-25 13:23 - 13547008 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-08-25 10:35 - 2014-07-25 13:13 - 00526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2014-08-25 10:35 - 2014-07-25 13:07 - 02001920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2014-08-25 10:35 - 2014-07-25 13:07 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2014-08-25 10:35 - 2014-07-25 13:03 - 11772928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2014-08-25 10:35 - 2014-07-25 12:52 - 02266624 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-08-25 10:35 - 2014-07-25 12:26 - 01431040 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-08-25 10:35 - 2014-07-25 12:17 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2014-08-25 10:35 - 2014-07-25 12:09 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2014-08-25 10:35 - 2014-07-25 12:05 - 01792512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2014-08-25 10:35 - 2014-07-25 12:00 - 01169920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2014-08-25 10:35 - 2014-07-16 05:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll 2014-08-25 10:35 - 2014-07-16 04:46 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll 2014-08-25 10:35 - 2014-07-01 00:24 - 00008856 _____ (Microsoft Corporation) C:\Windows\system32\icardres.dll 2014-08-25 10:35 - 2014-07-01 00:14 - 00008856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardres.dll 2014-08-25 10:35 - 2014-06-25 04:06 - 14179328 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll 2014-08-25 10:35 - 2014-06-25 03:37 - 12877312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll 2014-08-25 10:35 - 2014-06-18 04:18 - 00692736 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe 2014-08-25 10:35 - 2014-06-18 03:51 - 00646144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\osk.exe 2014-08-25 10:35 - 2014-06-06 12:10 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll 2014-08-25 10:35 - 2014-06-06 11:44 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll 2014-08-25 10:35 - 2014-06-06 08:16 - 00035480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TsWpfWrp.exe 2014-08-25 10:35 - 2014-06-06 08:12 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe 2014-08-25 10:35 - 2014-06-03 12:02 - 03241984 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll 2014-08-25 10:35 - 2014-06-03 12:02 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll 2014-08-25 10:35 - 2014-06-03 11:29 - 02363392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll 2014-08-25 10:35 - 2014-06-03 11:29 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll 2014-08-25 10:35 - 2014-06-03 04:42 - 01942016 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll 2014-08-25 10:35 - 2014-06-03 04:42 - 00112576 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe 2014-08-25 10:35 - 2014-06-03 04:13 - 01806336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll 2014-08-25 10:35 - 2014-05-08 11:32 - 03178496 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll 2014-08-25 10:35 - 2014-05-08 11:32 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\RdpGroupPolicyExtension.dll 2014-08-25 10:35 - 2014-04-12 04:32 - 01164800 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll 2014-08-25 10:35 - 2014-04-12 04:32 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll 2014-08-25 10:35 - 2014-04-12 04:32 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll 2014-08-25 10:35 - 2014-04-12 04:32 - 00215552 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll 2014-08-25 10:35 - 2014-04-12 04:32 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll 2014-08-25 10:35 - 2014-04-12 04:32 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll 2014-08-25 10:35 - 2014-04-12 04:31 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe 2014-08-25 10:35 - 2014-04-12 04:31 - 00148480 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe 2014-08-25 10:35 - 2014-04-12 04:31 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe 2014-08-25 10:35 - 2014-04-12 04:31 - 00058368 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll 2014-08-25 10:35 - 2014-04-12 04:31 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll 2014-08-25 10:35 - 2014-04-12 04:31 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll 2014-08-25 10:35 - 2014-04-12 04:31 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe 2014-08-25 10:35 - 2014-04-12 04:28 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll 2014-08-25 10:35 - 2014-04-12 04:28 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 04:28 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 04:28 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 04:28 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 04:28 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 04:28 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 04:28 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 04:28 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 04:28 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 04:28 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 04:28 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 04:28 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 04:28 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 04:28 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 04:28 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 04:28 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 04:28 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 04:28 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 04:28 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 04:28 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 04:28 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 04:28 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 04:28 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 04:28 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 04:28 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 04:28 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 04:28 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 04:28 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 04:06 - 00050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll 2014-08-25 10:35 - 2014-04-12 04:06 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe 2014-08-25 10:35 - 2014-04-12 04:06 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll 2014-08-25 10:35 - 2014-04-12 04:05 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll 2014-08-25 10:35 - 2014-04-12 04:05 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll 2014-08-25 10:35 - 2014-04-12 04:03 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll 2014-08-25 10:35 - 2014-04-12 04:03 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 04:03 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 04:03 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 04:03 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 04:03 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 04:03 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 04:03 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 04:03 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 04:03 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 04:03 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 04:03 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 04:03 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 04:03 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 04:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 04:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 04:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 04:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 04:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 04:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 04:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 04:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 04:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 04:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 04:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 03:34 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys 2014-08-25 10:35 - 2014-04-12 03:03 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe 2014-08-25 10:35 - 2014-04-12 03:03 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe 2014-08-25 10:35 - 2014-04-12 03:00 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 03:00 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 03:00 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 03:00 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll 2014-08-25 10:35 - 2014-04-05 04:37 - 01897408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys 2014-08-25 10:35 - 2014-04-05 04:37 - 00376768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys 2014-08-25 10:35 - 2014-04-05 04:37 - 00288192 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS 2014-08-25 10:35 - 2014-03-26 16:44 - 01882112 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll 2014-08-25 10:35 - 2014-03-26 16:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll 2014-08-25 10:35 - 2014-03-26 16:27 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll 2014-08-25 10:35 - 2014-03-26 16:25 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll 2014-08-25 10:35 - 2014-03-26 04:39 - 02001920 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll 2014-08-25 10:35 - 2014-03-26 04:36 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll 2014-08-25 10:35 - 2014-03-26 04:13 - 01388544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll 2014-08-25 10:35 - 2014-03-26 04:10 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6r.dll 2014-08-25 10:35 - 2014-03-09 23:48 - 01389208 _____ (Microsoft Corporation) C:\Windows\system32\icardagt.exe 2014-08-25 10:35 - 2014-03-09 23:48 - 00171160 _____ (Microsoft Corporation) C:\Windows\system32\infocardapi.dll 2014-08-25 10:35 - 2014-03-09 23:47 - 00619672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardagt.exe 2014-08-25 10:35 - 2014-03-09 23:47 - 00099480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\infocardapi.dll 2014-08-25 10:35 - 2014-03-04 13:11 - 05553088 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2014-08-25 10:35 - 2014-03-04 13:08 - 00455680 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe 2014-08-25 10:35 - 2014-03-04 13:08 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\cngprovider.dll 2014-08-25 10:35 - 2014-03-04 13:08 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\capiprovider.dll 2014-08-25 10:35 - 2014-03-04 13:08 - 00058880 _____ (Microsoft Corporation) C:\Windows\system32\adprovider.dll 2014-08-25 10:35 - 2014-03-04 13:08 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\dpapiprovider.dll 2014-08-25 10:35 - 2014-03-04 13:08 - 00046592 _____ (Microsoft Corporation) C:\Windows\system32\dimsroam.dll 2014-08-25 10:35 - 2014-03-04 13:08 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\wincredprovider.dll 2014-08-25 10:35 - 2014-03-04 12:42 - 03974080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe 2014-08-25 10:35 - 2014-03-04 12:42 - 03918784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe 2014-08-25 10:35 - 2014-03-04 12:39 - 00056320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cngprovider.dll 2014-08-25 10:35 - 2014-03-04 12:39 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\capiprovider.dll 2014-08-25 10:35 - 2014-03-04 12:39 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adprovider.dll 2014-08-25 10:35 - 2014-03-04 12:39 - 00049152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpapiprovider.dll 2014-08-25 10:35 - 2014-03-04 12:39 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dimsroam.dll 2014-08-25 10:35 - 2014-03-04 12:39 - 00038912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wincredprovider.dll 2014-08-25 10:35 - 2014-03-04 11:44 - 00722944 _____ (Microsoft Corporation) C:\Windows\system32\objsel.dll 2014-08-25 10:35 - 2014-03-04 11:17 - 00538112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\objsel.dll 2014-08-25 10:35 - 2014-02-04 04:35 - 00274880 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys 2014-08-25 10:35 - 2014-02-04 04:35 - 00190912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys 2014-08-25 10:35 - 2014-02-04 04:35 - 00027584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys 2014-08-25 10:35 - 2014-02-04 04:28 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\iologmsg.dll 2014-08-25 10:35 - 2014-02-04 04:00 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iologmsg.dll 2014-08-25 10:35 - 2013-12-25 01:09 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll 2014-08-25 10:35 - 2013-12-25 00:48 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll 2014-08-25 10:35 - 2013-12-04 04:27 - 00488448 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll 2014-08-25 10:35 - 2013-12-04 04:27 - 00485888 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll 2014-08-25 10:35 - 2013-12-04 04:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll 2014-08-25 10:35 - 2013-12-04 04:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll 2014-08-25 10:35 - 2013-12-04 04:26 - 00528384 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll 2014-08-25 10:35 - 2013-12-04 04:16 - 00658432 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe 2014-08-25 10:35 - 2013-12-04 04:16 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe 2014-08-25 10:35 - 2013-12-04 04:16 - 00553984 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe 2014-08-25 10:35 - 2013-12-04 04:16 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe 2014-08-25 10:35 - 2013-12-04 04:03 - 00428032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc.dll 2014-08-25 10:35 - 2013-12-04 04:03 - 00423936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_isv.dll 2014-08-25 10:35 - 2013-12-04 04:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp_isv.dll 2014-08-25 10:35 - 2013-12-04 04:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp.dll 2014-08-25 10:35 - 2013-12-04 04:02 - 00390144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdrm.dll 2014-08-25 10:35 - 2013-12-04 03:54 - 00594944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_isv.exe 2014-08-25 10:35 - 2013-12-04 03:54 - 00572416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate.exe 2014-08-25 10:35 - 2013-12-04 03:54 - 00510976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp.exe 2014-08-25 10:35 - 2013-12-04 03:54 - 00508928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp_isv.exe 2014-08-25 10:35 - 2013-11-26 10:16 - 03419136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll 2014-08-25 10:35 - 2013-11-23 00:48 - 03928064 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll 2014-08-25 10:35 - 2011-04-09 08:58 - 00142336 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe 2014-08-25 10:35 - 2011-04-09 07:56 - 00123904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe 2014-08-25 10:34 - 2014-06-16 04:10 - 00985536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys 2014-08-25 10:34 - 2014-05-30 08:45 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys 2014-08-25 10:34 - 2014-04-25 04:27 - 00801792 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll 2014-08-25 10:34 - 2014-04-25 03:58 - 00626688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usp10.dll 2014-08-25 10:34 - 2014-03-04 13:08 - 00421376 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll 2014-08-25 10:34 - 2014-03-04 12:38 - 00275456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll 2014-08-25 10:34 - 2014-01-29 04:32 - 00484864 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll 2014-08-25 10:34 - 2014-01-29 04:06 - 00381440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll 2014-08-25 10:34 - 2014-01-28 04:32 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll 2014-08-25 10:34 - 2014-01-24 04:40 - 01684416 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys 2014-08-25 10:34 - 2013-11-27 03:41 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys 2014-08-25 10:34 - 2013-11-27 03:41 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys 2014-08-25 10:34 - 2013-11-27 03:41 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys 2014-08-25 10:34 - 2013-11-27 03:41 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys 2014-08-25 10:34 - 2013-11-27 03:41 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys 2014-08-25 10:33 - 2014-06-05 16:44 - 01462272 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2014-08-25 10:33 - 2014-06-05 16:44 - 00463872 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll 2014-08-25 10:33 - 2014-06-05 16:44 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2014-08-25 10:33 - 2014-06-05 16:16 - 00342528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll 2014-08-25 10:33 - 2014-06-05 16:16 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll 2014-08-25 10:33 - 2014-06-05 16:16 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll 2014-08-25 10:33 - 2014-06-05 16:15 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll 2014-08-25 10:33 - 2014-04-12 04:34 - 00155072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys 2014-08-25 10:33 - 2014-04-12 04:34 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys 2014-08-25 10:33 - 2014-04-12 04:32 - 00307712 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll 2014-08-25 10:33 - 2014-04-12 04:32 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll 2014-08-25 10:33 - 2014-04-12 04:32 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll 2014-08-25 10:33 - 2014-04-12 04:32 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll 2014-08-25 10:33 - 2014-04-12 04:31 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe 2014-08-25 10:33 - 2014-04-12 04:31 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe 2014-08-25 10:33 - 2014-04-12 04:30 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll 2014-08-25 10:33 - 2014-04-12 04:29 - 00145920 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll 2014-08-25 10:33 - 2014-04-12 04:28 - 00685056 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll 2014-08-25 10:33 - 2014-04-12 04:06 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll 2014-08-25 10:33 - 2014-04-12 04:06 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe 2014-08-25 10:33 - 2014-04-12 04:04 - 00145920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll 2014-08-25 10:33 - 2014-04-12 04:04 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll 2014-08-25 10:33 - 2014-04-12 04:03 - 00685056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll 2014-08-25 10:33 - 2014-03-04 13:08 - 00729088 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll 2014-08-25 10:33 - 2014-03-04 13:08 - 00315904 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll 2014-08-25 10:33 - 2014-03-04 13:08 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll 2014-08-25 10:33 - 2014-03-04 13:08 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll 2014-08-25 10:33 - 2014-03-04 13:08 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll 2014-08-25 10:33 - 2014-03-04 12:39 - 00551424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll 2014-08-25 10:33 - 2014-03-04 12:39 - 00260096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll 2014-08-25 10:33 - 2014-03-04 12:39 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll 2014-08-25 10:33 - 2014-03-04 12:39 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll 2014-08-25 10:33 - 2014-03-04 12:39 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll 2014-08-25 10:33 - 2014-02-04 04:32 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll 2014-08-25 10:33 - 2014-02-04 04:04 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll 2014-08-25 10:32 - 2014-08-07 04:06 - 00529920 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2014-08-25 10:32 - 2014-08-07 04:01 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2014-08-25 10:32 - 2014-07-14 03:52 - 01215488 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll 2014-08-25 10:32 - 2014-07-14 03:52 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll 2014-08-25 10:32 - 2014-07-14 03:42 - 00141312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpchttp.dll 2014-08-25 10:32 - 2014-07-14 03:41 - 00665088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll 2014-08-25 10:25 - 2014-09-04 16:19 - 00009734 _____ () C:\Windows\DPINST.LOG 2014-08-25 10:25 - 2014-08-25 10:56 - 00142336 _____ (G Data Software AG) C:\Windows\system32\Drivers\MiniIcpt.sys 2014-08-25 10:25 - 2014-08-25 10:56 - 00064000 _____ (G Data Software AG) C:\Windows\system32\Drivers\PktIcpt.sys 2014-08-25 10:25 - 2014-08-25 10:56 - 00064000 _____ (G Data Software AG) C:\Windows\system32\Drivers\gdwfpcd64.sys 2014-08-25 10:25 - 2014-08-25 10:56 - 00061440 _____ (G Data Software AG) C:\Windows\system32\Drivers\HookCentre.sys 2014-08-25 10:25 - 2014-08-25 10:56 - 00055808 _____ (G Data Software AG) C:\Windows\system32\Drivers\GDBehave.sys 2014-08-25 10:25 - 2014-08-25 10:56 - 00020992 _____ (G Data Software AG) C:\Windows\system32\Drivers\GDKBFlt64.sys 2014-08-25 10:25 - 2014-08-25 10:25 - 00000779 _____ () C:\Users\Admin\AppData\Roaming\gdscan.log 2014-08-25 10:25 - 2014-08-25 10:25 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_GDKBFlt64_01007.Wdf 2014-08-25 10:25 - 2014-08-25 10:25 - 00000000 ____D () C:\Program Files (x86)\G Data 2014-08-25 10:25 - 2014-08-25 10:25 - 00000000 _____ () C:\Users\Admin\AppData\Roaming\gdfw.log 2014-08-25 10:24 - 2014-08-25 10:49 - 00000000 ____D () C:\ProgramData\G Data 2014-08-25 10:23 - 2014-05-14 18:23 - 02477536 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll 2014-08-25 10:23 - 2014-05-14 18:23 - 00700384 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll 2014-08-25 10:23 - 2014-05-14 18:23 - 00581600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll 2014-08-25 10:23 - 2014-05-14 18:23 - 00058336 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe 2014-08-25 10:23 - 2014-05-14 18:23 - 00044512 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll 2014-08-25 10:23 - 2014-05-14 18:23 - 00038880 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll 2014-08-25 10:23 - 2014-05-14 18:23 - 00036320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll 2014-08-25 10:23 - 2014-05-14 18:21 - 02620928 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll 2014-08-25 10:23 - 2014-05-14 18:20 - 00097792 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll 2014-08-25 10:23 - 2014-05-14 18:17 - 00092672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll 2014-08-25 10:23 - 2014-05-14 09:23 - 00198600 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll 2014-08-25 10:23 - 2014-05-14 09:23 - 00179656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll 2014-08-25 10:23 - 2014-05-14 09:20 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe 2014-08-25 10:23 - 2014-05-14 09:17 - 00033792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe 2014-08-25 09:42 - 2014-09-04 15:42 - 00000000 ____D () C:\Users\Admin\AppData\Local\VirtualStore 2014-08-25 09:33 - 2014-08-26 11:24 - 00084688 _____ () C:\Users\Admin\AppData\Local\GDIPFONTCACHEV1.DAT 2014-08-25 09:08 - 2014-08-25 08:13 - 00000000 ____D () C:\Windows\Panther 2014-08-25 08:13 - 2014-09-04 16:20 - 00000000 ____D () C:\Users\Admin 2014-08-25 08:13 - 2014-09-03 20:24 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\Adobe 2014-08-25 08:13 - 2014-08-25 08:13 - 00000020 ___SH () C:\Users\Admin\ntuser.ini 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Musik 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Bilder 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Default\Vorlagen 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Default\Startmenü 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Default\Druckumgebung 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Admin\Vorlagen 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Admin\Startmenü 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Admin\Netzwerkumgebung 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Admin\Lokale Einstellungen 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Admin\Eigene Dateien 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Admin\Druckumgebung 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Admin\Documents\Eigene Musik 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Admin\Documents\Eigene Bilder 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Admin\AppData\Local\Verlauf 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Admin\AppData\Local\Anwendungsdaten 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Admin\Anwendungsdaten 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Programme 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\ProgramData\Vorlagen 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\ProgramData\Startmenü 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\ProgramData\Microsoft\Windows\Start Menu\Programme 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\ProgramData\Favoriten 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\ProgramData\Dokumente 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\ProgramData\Anwendungsdaten 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Program Files\Gemeinsame Dateien 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Dokumente und Einstellungen 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 __SHD () C:\Recovery 2014-08-25 08:13 - 2009-07-14 06:54 - 00000000 ___RD () C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2014-08-25 08:13 - 2009-07-14 06:49 - 00000000 ___RD () C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance 2014-08-25 08:10 - 2014-09-06 15:48 - 01313386 _____ () C:\Windows\WindowsUpdate.log 2014-08-25 08:10 - 2014-08-25 11:39 - 00000000 ____D () C:\Program Files\WinRAR 2014-08-25 08:10 - 2014-08-25 08:10 - 00001355 _____ () C:\Windows\TSSysprep.log 2014-08-25 08:09 - 2014-08-25 08:09 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdFs_01_09_00.Wdf 2014-08-21 12:58 - 2013-04-26 10:24 - 01721576 _____ (Microsoft Corporation) C:\Windows\system32\WdfCoInstaller01009.dll 2014-08-21 12:58 - 2013-04-26 10:24 - 00786416 _____ (Intel Corporation) C:\Windows\system32\Drivers\iusb3xhc.sys 2014-08-21 12:58 - 2013-04-26 10:24 - 00368112 _____ (Intel Corporation) C:\Windows\system32\Drivers\iusb3hub.sys 2014-08-21 12:58 - 2013-04-26 10:24 - 00020464 _____ (Intel Corporation) C:\Windows\system32\Drivers\iusb3hcs.sys 2014-08-20 16:00 - 2013-07-16 09:21 - 00121032 _____ (Qualcomm Atheros Co., Ltd.) C:\Windows\system32\Drivers\L1C60x64.sys 2014-08-14 00:24 - 2014-08-14 00:24 - 20068496 _____ (Intel Corporation) C:\Windows\system32\igdumdim64.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 04575208 _____ (Intel Corporation) C:\Windows\SysWOW64\igdusc32.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 01365504 _____ (Intel Corporation) C:\Windows\system32\igfxcmjit64.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 01137080 _____ (Intel Corporation) C:\Windows\system32\iglhsip64.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 01132960 _____ (Intel Corporation) C:\Windows\SysWOW64\iglhsip32.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 01061376 _____ (Intel Corporation) C:\Windows\SysWOW64\igfxcmjit32.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00734720 _____ (Intel Corporation) C:\Windows\system32\MetroIntelGenericUIFramework.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00453448 _____ () C:\Windows\system32\igfxTray.exe 2014-08-14 00:24 - 2014-08-14 00:24 - 00372736 _____ (Intel Corporation) C:\Windows\system32\igfxOSP.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00372224 _____ (Intel Corporation) C:\Windows\system32\IntelOpenCL64.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00304128 _____ (Intel Corporation) C:\Windows\SysWOW64\IntelOpenCL32.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00276808 _____ (Intel Corporation) C:\Windows\SysWOW64\IntelCpHeciSvc.exe 2014-08-14 00:24 - 2014-08-14 00:24 - 00254976 _____ () C:\Windows\system32\igfxCPL.cpl 2014-08-14 00:24 - 2014-08-14 00:24 - 00222720 _____ (Intel Corporation) C:\Windows\system32\igfxDTCM.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00220392 _____ (Intel Corporation) C:\Windows\system32\iglhcp64.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00212660 _____ () C:\Windows\system32\resTHA.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00207496 _____ (Intel Corporation) C:\Windows\system32\igfxcmrt64.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00206848 _____ (Intel Corporation) C:\Windows\system32\igfx11cmrt64.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00203812 _____ () C:\Windows\system32\resELL.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00199652 _____ () C:\Windows\system32\resRUS.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00191816 _____ (Intel Corporation) C:\Windows\system32\igfxext.exe 2014-08-14 00:24 - 2014-08-14 00:24 - 00184312 _____ (Intel Corporation) C:\Windows\SysWOW64\iglhcp32.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00182784 _____ (Intel Corporation) C:\Windows\system32\igfxCoIn_v3907.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00182356 _____ () C:\Windows\system32\resARA.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00181828 _____ () C:\Windows\system32\resJPN.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00181364 _____ () C:\Windows\system32\resHEB.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00176116 _____ () C:\Windows\system32\resFRA.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00176052 _____ () C:\Windows\system32\resHUN.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00175024 _____ (Intel Corporation) C:\Windows\SysWOW64\igfxcmrt32.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00174592 _____ (Intel Corporation) C:\Windows\SysWOW64\igfx11cmrt32.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00174340 _____ () C:\Windows\system32\resKOR.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00174004 _____ () C:\Windows\system32\resDEU.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00173748 _____ () C:\Windows\system32\resITA.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00173492 _____ () C:\Windows\system32\resROM.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00173460 _____ () C:\Windows\system32\resESN.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00173444 _____ () C:\Windows\system32\resSKY.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00173044 _____ () C:\Windows\system32\resPLK.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00172676 _____ () C:\Windows\system32\resNLD.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00171876 _____ () C:\Windows\system32\resPTB.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00171860 _____ () C:\Windows\system32\resTRK.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00171796 _____ () C:\Windows\system32\resCSY.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00171332 _____ () C:\Windows\system32\resPTG.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00171156 _____ () C:\Windows\system32\resFIN.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00170548 _____ () C:\Windows\system32\resHRV.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00170020 _____ () C:\Windows\system32\resSLV.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00170004 _____ () C:\Windows\system32\resSVE.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00168788 _____ () C:\Windows\system32\resNOR.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00168132 _____ () C:\Windows\system32\resDAN.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00166660 _____ () C:\Windows\system32\resENU.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00164836 _____ () C:\Windows\system32\resCHT.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00163652 _____ () C:\Windows\system32\resCHS.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00082432 _____ (Khronos Group) C:\Windows\system32\Intel_OpenCL_ICD64.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00074752 _____ (Khronos Group) C:\Windows\SysWOW64\Intel_OpenCL_ICD32.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00069632 _____ () C:\Windows\system32\igfxCUIServicePS.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00069632 _____ ( ) C:\Windows\system32\igfxDHLibv2_0.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00058880 _____ ( ) C:\Windows\system32\igfxDHLib.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00031408 _____ (Intel Corporation) C:\Windows\system32\igfxexps.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00030720 _____ (Intel Corporation) C:\Windows\SysWOW64\igfxexps32.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00010752 _____ ( ) C:\Windows\system32\igfxDILib.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00010240 _____ ( ) C:\Windows\system32\igfxEMLibv2_0.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00010240 _____ ( ) C:\Windows\system32\igfxEMLib.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00010240 _____ ( ) C:\Windows\system32\igfxDILibv2_0.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00005120 _____ ( ) C:\Windows\system32\igfxLHMLibv2_0.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00005120 _____ ( ) C:\Windows\system32\igfxLHMLib.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00003920 _____ () C:\Windows\system32\iglhxs64.vp 2014-08-14 00:23 - 2014-08-14 00:23 - 23686656 _____ (Intel Corporation) C:\Windows\system32\igdfcl64.dll 2014-08-14 00:23 - 2014-08-14 00:23 - 19298568 _____ (Intel Corporation) C:\Windows\SysWOW64\igdumdim32.dll 2014-08-14 00:23 - 2014-08-14 00:23 - 18558976 _____ (Intel Corporation) C:\Windows\SysWOW64\igdfcl32.dll 2014-08-14 00:23 - 2014-08-14 00:23 - 13199432 _____ () C:\Windows\system32\igd11dxva64.dll 2014-08-14 00:23 - 2014-08-14 00:23 - 12728192 _____ () C:\Windows\SysWOW64\igd11dxva32.dll 2014-08-14 00:23 - 2014-08-14 00:23 - 08841728 _____ (Intel Corporation) C:\Windows\system32\ig75icd64.dll 2014-08-14 00:23 - 2014-08-14 00:23 - 08237056 _____ (Intel Corporation) C:\Windows\system32\igdrcl64.dll 2014-08-14 00:23 - 2014-08-14 00:23 - 07679488 _____ (Intel Corporation) C:\Windows\SysWOW64\igdrcl32.dll 2014-08-14 00:23 - 2014-08-14 00:23 - 06970976 _____ (Intel Corporation) C:\Windows\SysWOW64\igd10iumd32.dll 2014-08-14 00:23 - 2014-08-14 00:23 - 06946816 _____ (Intel Corporation) C:\Windows\SysWOW64\ig75icd32.dll 2014-08-14 00:23 - 2014-08-14 00:23 - 04786544 _____ (Intel Corporation) C:\Windows\system32\Drivers\igdkmd64.sys 2014-08-14 00:23 - 2014-08-14 00:23 - 03399496 _____ (Intel Corporation) C:\Windows\system32\Gfxv4_0.exe 2014-08-14 00:23 - 2014-08-14 00:23 - 03395912 _____ (Intel Corporation) C:\Windows\system32\Gfxv2_0.exe 2014-08-14 00:23 - 2014-08-14 00:23 - 00929608 _____ (Intel Corporation) C:\Windows\system32\GfxUIEx.exe 2014-08-14 00:23 - 2014-08-14 00:23 - 00604552 _____ (Intel Corporation) C:\Windows\system32\igdmd64.dll 2014-08-14 00:23 - 2014-08-14 00:23 - 00543560 _____ (Intel Corporation) C:\Windows\system32\DPTopologyApp.exe 2014-08-14 00:23 - 2014-08-14 00:23 - 00543048 _____ (Intel Corporation) C:\Windows\system32\DPTopologyAppv2_0.exe 2014-08-14 00:23 - 2014-08-14 00:23 - 00483000 _____ (Intel Corporation) C:\Windows\SysWOW64\igdmd32.dll 2014-08-14 00:23 - 2014-08-14 00:23 - 00393728 _____ (Intel Corporation) C:\Windows\system32\igdbcl64.dll 2014-08-14 00:23 - 2014-08-14 00:23 - 00346112 _____ (Intel Corporation) C:\Windows\SysWOW64\igdbcl32.dll 2014-08-14 00:23 - 2014-08-14 00:23 - 00225792 _____ () C:\Windows\system32\igdde64.dll 2014-08-14 00:23 - 2014-08-14 00:23 - 00186368 _____ () C:\Windows\SysWOW64\igdde32.dll 2014-08-14 00:23 - 2014-08-14 00:23 - 00162304 _____ (Intel Corporation) C:\Windows\system32\igdail64.dll 2014-08-14 00:23 - 2014-08-14 00:23 - 00152392 _____ (Intel Corporation) C:\Windows\system32\difx64.exe 2014-08-14 00:23 - 2014-08-14 00:23 - 00144896 _____ (Intel Corporation) C:\Windows\SysWOW64\igdail32.dll |
06.09.2014, 15:12 | #7 |
| Malware nach Installation von MyPhoneExplorer Teil 2 FRST.TXT: Code:
ATTFilter ==================== One Month Modified Files and Folders ======= (If an entry is included in the fixlist, the file\folder will be moved.) 2014-09-06 15:59 - 2014-09-06 15:59 - 00010310 _____ () C:\Users\Admin\Desktop\FRST.txt 2014-09-06 15:59 - 2014-09-05 20:18 - 00000000 ____D () C:\FRST 2014-09-06 15:58 - 2014-09-06 15:58 - 00000755 _____ () C:\Users\Admin\Desktop\JRT.txt 2014-09-06 15:57 - 2014-09-01 19:38 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-09-06 15:56 - 2011-04-12 09:43 - 00699726 _____ () C:\Windows\system32\perfh007.dat 2014-09-06 15:56 - 2011-04-12 09:43 - 00149364 _____ () C:\Windows\system32\perfc007.dat 2014-09-06 15:56 - 2009-07-14 07:13 - 01621742 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-09-06 15:54 - 2009-07-14 06:45 - 00031584 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-09-06 15:54 - 2009-07-14 06:45 - 00031584 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-09-06 15:52 - 2014-08-25 08:10 - 01313386 _____ () C:\Windows\WindowsUpdate.log 2014-09-06 15:50 - 2014-09-06 15:50 - 00000000 ____D () C:\Windows\ERUNT 2014-09-06 15:49 - 2014-09-06 15:49 - 00001222 _____ () C:\Users\Admin\Desktop\AdwCleaner[S0].txt 2014-09-06 15:49 - 2014-08-26 11:24 - 00003758 _____ () C:\Windows\System32\Tasks\AutoKMS 2014-09-06 15:49 - 2010-11-21 05:47 - 00006852 _____ () C:\Windows\PFRO.log 2014-09-06 15:49 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-09-06 15:49 - 2009-07-14 06:51 - 00029818 _____ () C:\Windows\setupact.log 2014-09-06 15:48 - 2014-09-06 15:35 - 00000000 ____D () C:\AdwCleaner 2014-09-06 15:34 - 2014-09-06 15:34 - 00001158 _____ () C:\Users\Admin\Desktop\mbam.txt 2014-09-06 15:27 - 2014-09-06 15:27 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2014-09-06 15:27 - 2014-09-06 15:27 - 00001117 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-09-06 15:27 - 2014-09-06 15:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2014-09-06 15:27 - 2014-09-06 15:27 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-09-06 15:27 - 2014-09-06 15:27 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 2014-09-06 15:22 - 2014-09-06 15:26 - 01016261 _____ (Thisisu) C:\Users\Admin\Desktop\JRT.exe 2014-09-06 15:21 - 2014-09-06 15:26 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Admin\Desktop\mbam-setup-2.0.2.1012.exe 2014-09-06 15:21 - 2014-09-06 15:26 - 01370483 _____ () C:\Users\Admin\Desktop\adwcleaner_3.309.exe 2014-09-06 15:19 - 2014-08-25 10:53 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service 2014-09-05 20:46 - 2014-09-05 20:46 - 00000000 ____D () C:\Users\Matze\AppData\Roaming\Macromedia 2014-09-05 20:46 - 2014-09-05 20:46 - 00000000 ____D () C:\Users\Matze\AppData\Roaming\Adobe 2014-09-05 20:46 - 2014-09-05 20:46 - 00000000 ____D () C:\Users\Matze\AppData\Local\Macromedia 2014-09-05 20:39 - 2014-09-05 20:39 - 00000000 ____D () C:\Users\Matze\AppData\Local\G DATA 2014-09-05 20:34 - 2014-09-05 20:34 - 00000000 ____D () C:\Users\Matze\AppData\Roaming\Thunderbird 2014-09-05 20:34 - 2014-09-05 20:34 - 00000000 ____D () C:\Users\Matze\AppData\Local\Thunderbird 2014-09-05 20:33 - 2014-09-05 20:33 - 00000000 ____D () C:\Users\Matze\AppData\Roaming\Mozilla 2014-09-05 20:33 - 2014-09-05 20:33 - 00000000 ____D () C:\Users\Matze\AppData\Local\Mozilla 2014-09-05 20:17 - 2014-09-05 20:17 - 02104832 _____ (Farbar) C:\Users\Admin\Desktop\FRST64.exe 2014-09-05 15:13 - 2014-09-05 15:13 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2014-09-05 15:11 - 2014-09-05 15:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MyPhoneExplorer 2014-09-05 15:11 - 2014-09-05 15:11 - 00000000 ____D () C:\Program Files (x86)\MyPhoneExplorer 2014-09-04 21:27 - 2014-09-02 20:09 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\vlc 2014-09-04 16:20 - 2014-09-04 16:20 - 00000000 ____D () C:\Users\Admin\Logitech 2014-09-04 16:20 - 2014-08-25 08:13 - 00000000 ____D () C:\Users\Admin 2014-09-04 16:19 - 2014-09-04 16:19 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\InstallShield 2014-09-04 16:19 - 2014-09-04 16:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logitech 2014-09-04 16:19 - 2014-09-04 16:19 - 00000000 ____D () C:\Program Files (x86)\Logitech 2014-09-04 16:19 - 2014-08-25 11:58 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information 2014-09-04 16:19 - 2014-08-25 10:25 - 00009734 _____ () C:\Windows\DPINST.LOG 2014-09-04 16:11 - 2014-09-04 16:10 - 00000000 ____D () C:\Users\Admin\.gimp-2.8 2014-09-04 16:10 - 2014-09-04 16:10 - 00000909 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GIMP 2.lnk 2014-09-04 16:10 - 2014-09-04 16:10 - 00000000 ____D () C:\Users\Admin\AppData\Local\gegl-0.2 2014-09-04 16:10 - 2014-09-04 16:09 - 00000000 ____D () C:\Program Files\GIMP 2 2014-09-04 15:50 - 2014-09-04 15:50 - 00000000 ____D () C:\Users\Admin\AppData\Local\FreeCommanderXE 2014-09-04 15:50 - 2014-09-04 15:50 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FreeCommander XE 2014-09-04 15:50 - 2014-09-04 15:50 - 00000000 ____D () C:\Program Files (x86)\FreeCommander XE 2014-09-04 15:42 - 2014-08-25 09:42 - 00000000 ____D () C:\Users\Admin\AppData\Local\VirtualStore 2014-09-04 15:41 - 2014-09-04 15:40 - 00000000 ____D () C:\Program Files (x86)\Audiograbber 2014-09-04 15:40 - 2014-09-04 15:40 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audiograbber 2014-09-04 15:19 - 2014-09-03 20:35 - 00000000 ____D () C:\Program Files (x86)\Steam 2014-09-03 20:35 - 2014-09-03 20:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam 2014-09-03 20:26 - 2014-09-03 20:26 - 00084688 _____ () C:\Users\Matze\AppData\Local\GDIPFONTCACHEV1.DAT 2014-09-03 20:26 - 2014-09-03 20:26 - 00000000 ____D () C:\Users\Matze\AppData\Roaming\Intel Corporation 2014-09-03 20:25 - 2014-09-03 20:25 - 00000020 ___SH () C:\Users\Matze\ntuser.ini 2014-09-03 20:25 - 2014-09-03 20:25 - 00000000 _SHDL () C:\Users\Matze\Vorlagen 2014-09-03 20:25 - 2014-09-03 20:25 - 00000000 _SHDL () C:\Users\Matze\Startmenü 2014-09-03 20:25 - 2014-09-03 20:25 - 00000000 _SHDL () C:\Users\Matze\Netzwerkumgebung 2014-09-03 20:25 - 2014-09-03 20:25 - 00000000 _SHDL () C:\Users\Matze\Lokale Einstellungen 2014-09-03 20:25 - 2014-09-03 20:25 - 00000000 _SHDL () C:\Users\Matze\Eigene Dateien 2014-09-03 20:25 - 2014-09-03 20:25 - 00000000 _SHDL () C:\Users\Matze\Druckumgebung 2014-09-03 20:25 - 2014-09-03 20:25 - 00000000 _SHDL () C:\Users\Matze\Documents\Eigene Musik 2014-09-03 20:25 - 2014-09-03 20:25 - 00000000 _SHDL () C:\Users\Matze\Documents\Eigene Bilder 2014-09-03 20:25 - 2014-09-03 20:25 - 00000000 _SHDL () C:\Users\Matze\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-09-03 20:25 - 2014-09-03 20:25 - 00000000 _SHDL () C:\Users\Matze\AppData\Local\Verlauf 2014-09-03 20:25 - 2014-09-03 20:25 - 00000000 _SHDL () C:\Users\Matze\AppData\Local\Anwendungsdaten 2014-09-03 20:25 - 2014-09-03 20:25 - 00000000 _SHDL () C:\Users\Matze\Anwendungsdaten 2014-09-03 20:25 - 2014-09-03 20:25 - 00000000 ____D () C:\Users\Matze\AppData\Local\VirtualStore 2014-09-03 20:25 - 2014-09-03 20:25 - 00000000 ____D () C:\Users\Matze 2014-09-03 20:24 - 2014-09-03 20:24 - 00000000 ____D () C:\Users\Admin\AppData\Local\Adobe 2014-09-03 20:24 - 2014-08-25 08:13 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\Adobe 2014-09-03 20:21 - 2014-09-03 20:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sicherheit & Optimierung 2014-09-03 20:20 - 2014-09-03 20:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDF Tools 2014-09-03 20:20 - 2014-09-03 20:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla 2014-09-03 20:20 - 2014-09-03 20:18 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hardware 2014-09-03 20:18 - 2014-09-03 20:16 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mediaplayer 2014-09-03 20:17 - 2014-09-03 20:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Brennprogramme 2014-09-03 20:17 - 2009-07-14 05:20 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories 2014-09-03 20:03 - 2014-08-25 10:52 - 00000510 _____ () C:\Windows\system32\{F33C3B9B-72AF-418A-B3FD-560646F7CDA2}.bat 2014-09-03 20:03 - 2014-08-25 10:39 - 00000000 ____D () C:\Intel 2014-09-03 19:35 - 2009-07-14 06:45 - 00340720 _____ () C:\Windows\system32\FNTCACHE.DAT 2014-09-02 20:09 - 2014-09-02 20:09 - 00000000 ____D () C:\Program Files (x86)\VideoLAN 2014-09-02 18:42 - 2014-09-02 18:42 - 00010009 _____ () C:\Windows\DirectX.log 2014-09-02 18:42 - 2014-09-02 18:40 - 00000000 ___HD () C:\Windows\msdownld.tmp 2014-09-02 18:42 - 2014-09-02 18:40 - 00000000 ____D () C:\Windows\SysWOW64\directx 2014-09-02 18:35 - 2014-09-02 18:30 - 00000000 ____D () C:\Program Files (x86)\DVBViewer 2014-09-02 18:34 - 2014-09-02 18:34 - 00000000 ____D () C:\Program Files (x86)\LAV Filters 2014-09-02 18:34 - 2014-09-02 18:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVBViewer 2014-09-02 18:30 - 2014-09-02 18:30 - 00000000 ____D () C:\ProgramData\CMUV 2014-09-01 20:15 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\oobe 2014-09-01 20:13 - 2014-09-01 20:13 - 00002410 _____ () C:\Windows\SysWOW64\cplLogon.tsk 2014-09-01 20:13 - 2014-09-01 20:13 - 00000000 ____D () C:\Program Files\Logon Screen 2014-09-01 20:01 - 2009-07-14 07:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games 2014-09-01 20:01 - 2009-07-14 07:32 - 00000000 ____D () C:\Program Files\Microsoft Games 2014-09-01 20:01 - 2009-07-14 07:32 - 00000000 ____D () C:\Program Files\DVD Maker 2014-09-01 19:56 - 2014-09-01 19:56 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\Canneverbe Limited 2014-09-01 19:56 - 2014-09-01 19:56 - 00000000 ____D () C:\ProgramData\Canneverbe Limited 2014-09-01 19:56 - 2014-09-01 19:56 - 00000000 ____D () C:\Program Files (x86)\CDBurnerXP 2014-09-01 19:52 - 2014-09-01 19:52 - 00000000 ____D () C:\Users\Admin\Documents\AnyDVDHD 2014-09-01 19:50 - 2014-09-01 19:50 - 00000040 ___SH () C:\ProgramData\.zreglib 2014-09-01 19:50 - 2014-09-01 19:36 - 00000000 ____D () C:\ProgramData\Adobe 2014-09-01 19:49 - 2014-09-01 19:49 - 00000000 ____D () C:\ProgramData\SlySoft 2014-09-01 19:49 - 2014-09-01 19:49 - 00000000 ____D () C:\Program Files (x86)\SlySoft 2014-09-01 19:43 - 2014-09-01 19:43 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\Oracle 2014-09-01 19:41 - 2014-09-01 19:41 - 00272808 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe 2014-09-01 19:41 - 2014-09-01 19:41 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe 2014-09-01 19:41 - 2014-09-01 19:41 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe 2014-09-01 19:41 - 2014-09-01 19:41 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll 2014-09-01 19:41 - 2014-09-01 19:41 - 00000000 ____D () C:\ProgramData\Sun 2014-09-01 19:41 - 2014-09-01 19:41 - 00000000 ____D () C:\ProgramData\Oracle 2014-09-01 19:41 - 2014-09-01 19:41 - 00000000 ____D () C:\Program Files (x86)\Java 2014-09-01 19:38 - 2014-09-01 19:38 - 00699568 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2014-09-01 19:38 - 2014-09-01 19:38 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2014-09-01 19:38 - 2014-09-01 19:38 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater 2014-09-01 19:38 - 2014-09-01 19:38 - 00000000 ____D () C:\Windows\SysWOW64\Macromed 2014-09-01 19:38 - 2014-09-01 19:38 - 00000000 ____D () C:\Windows\system32\Macromed 2014-09-01 19:38 - 2014-09-01 19:38 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\Macromedia 2014-09-01 19:38 - 2014-09-01 19:38 - 00000000 ____D () C:\Users\Admin\AppData\Local\Macromedia 2014-09-01 19:36 - 2014-09-01 19:36 - 00000000 ____D () C:\Program Files (x86)\Adobe 2014-09-01 18:51 - 2014-09-01 18:51 - 00001436 _____ () C:\Users\Bine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2014-09-01 18:51 - 2014-09-01 18:51 - 00000000 ____D () C:\Users\Bine\AppData\Roaming\Mozilla 2014-09-01 18:51 - 2014-09-01 18:51 - 00000000 ____D () C:\Users\Bine\AppData\Roaming\Adobe 2014-09-01 18:51 - 2014-09-01 18:51 - 00000000 ____D () C:\Users\Bine\AppData\Local\Mozilla 2014-09-01 18:51 - 2014-09-01 18:50 - 00000000 ____D () C:\Users\Bine 2014-09-01 18:50 - 2014-09-01 18:50 - 00000020 ___SH () C:\Users\Bine\ntuser.ini 2014-09-01 18:50 - 2014-09-01 18:50 - 00000000 _SHDL () C:\Users\Bine\Vorlagen 2014-09-01 18:50 - 2014-09-01 18:50 - 00000000 _SHDL () C:\Users\Bine\Startmenü 2014-09-01 18:50 - 2014-09-01 18:50 - 00000000 _SHDL () C:\Users\Bine\Netzwerkumgebung 2014-09-01 18:50 - 2014-09-01 18:50 - 00000000 _SHDL () C:\Users\Bine\Lokale Einstellungen 2014-09-01 18:50 - 2014-09-01 18:50 - 00000000 _SHDL () C:\Users\Bine\Eigene Dateien 2014-09-01 18:50 - 2014-09-01 18:50 - 00000000 _SHDL () C:\Users\Bine\Druckumgebung 2014-09-01 18:50 - 2014-09-01 18:50 - 00000000 _SHDL () C:\Users\Bine\Documents\Eigene Musik 2014-09-01 18:50 - 2014-09-01 18:50 - 00000000 _SHDL () C:\Users\Bine\Documents\Eigene Bilder 2014-09-01 18:50 - 2014-09-01 18:50 - 00000000 _SHDL () C:\Users\Bine\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-09-01 18:50 - 2014-09-01 18:50 - 00000000 _SHDL () C:\Users\Bine\AppData\Local\Verlauf 2014-09-01 18:50 - 2014-09-01 18:50 - 00000000 _SHDL () C:\Users\Bine\AppData\Local\Anwendungsdaten 2014-09-01 18:50 - 2014-09-01 18:50 - 00000000 _SHDL () C:\Users\Bine\Anwendungsdaten 2014-09-01 18:50 - 2014-09-01 18:50 - 00000000 ____D () C:\Users\Bine\AppData\Local\VirtualStore 2014-09-01 17:57 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF 2014-09-01 17:47 - 2014-09-01 17:47 - 00106272 _____ (G Data Software) C:\Windows\system32\Drivers\GRD.sys 2014-09-01 17:47 - 2014-09-01 17:47 - 00018160 _____ (G Data Software) C:\Windows\system32\Drivers\GdPhyMem.sys 2014-09-01 17:40 - 2014-09-01 17:40 - 00000000 ___HD () C:\ProgramData\CanonIJScan 2014-09-01 17:40 - 2014-09-01 17:35 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\Canon 2014-09-01 17:35 - 2014-09-01 17:32 - 00000000 ____D () C:\Program Files (x86)\Canon 2014-09-01 17:32 - 2014-09-01 17:32 - 00000000 ____D () C:\Windows\system32\STRING 2014-09-01 17:32 - 2014-09-01 17:32 - 00000000 ____D () C:\ProgramData\Canon IJ Network Tool 2014-09-01 17:32 - 2009-07-14 05:20 - 00000000 __RSD () C:\Windows\Media 2014-09-01 17:31 - 2014-09-01 17:31 - 00000000 ___HD () C:\Windows\system32\CanonIJ Uninstaller Information 2014-09-01 17:31 - 2014-09-01 17:31 - 00000000 ___HD () C:\ProgramData\CanonBJ 2014-09-01 17:30 - 2014-09-01 17:30 - 00000000 ___HD () C:\Program Files\CanonBJ 2014-09-01 16:29 - 2014-09-01 16:29 - 00000000 ____D () C:\Users\Admin\AppData\Local\G DATA 2014-09-01 15:52 - 2014-09-01 15:52 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\Thunderbird 2014-09-01 15:52 - 2014-09-01 15:52 - 00000000 ____D () C:\Users\Admin\AppData\Local\Thunderbird 2014-09-01 15:52 - 2014-09-01 15:52 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird 2014-08-29 11:18 - 2014-08-29 11:18 - 00000000 ____D () C:\Wallpapers 2014-08-29 11:16 - 2014-08-29 11:16 - 00000000 ____D () C:\Users\Admin\AppData\Local\Apps\2.0 2014-08-26 12:02 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache 2014-08-26 11:41 - 2014-08-26 11:17 - 00000000 ____D () C:\ProgramData\Microsoft Help 2014-08-26 11:40 - 2014-09-03 20:25 - 00000000 ____D () C:\Users\Matze\AppData\Local\Microsoft Help 2014-08-26 11:40 - 2014-09-01 18:50 - 00000000 ____D () C:\Users\Bine\AppData\Local\Microsoft Help 2014-08-26 11:40 - 2014-08-26 11:40 - 00000000 ____D () C:\Users\Default\AppData\Local\Microsoft Help 2014-08-26 11:40 - 2014-08-26 11:40 - 00000000 ____D () C:\Users\Default User\AppData\Local\Microsoft Help 2014-08-26 11:40 - 2014-08-26 11:40 - 00000000 ____D () C:\Program Files\Common Files\DESIGNER 2014-08-26 11:28 - 2014-08-26 11:24 - 00000000 ____D () C:\Windows\AutoKMS 2014-08-26 11:24 - 2014-08-26 11:24 - 00000000 ____D () C:\ProgramData\Microsoft Toolkit 2014-08-26 11:24 - 2014-08-25 09:33 - 00084688 _____ () C:\Users\Admin\AppData\Local\GDIPFONTCACHEV1.DAT 2014-08-26 11:19 - 2014-08-26 11:19 - 00000000 ____D () C:\Windows\System32\Tasks\OfficeSoftwareProtectionPlatform 2014-08-26 11:18 - 2014-08-26 11:18 - 00000000 ____D () C:\Windows\PCHEALTH 2014-08-26 11:18 - 2014-08-26 11:18 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2014-08-26 11:18 - 2014-08-26 11:18 - 00000000 ____D () C:\Program Files\Microsoft Synchronization Services 2014-08-26 11:18 - 2014-08-26 11:18 - 00000000 ____D () C:\Program Files\Microsoft SQL Server Compact Edition 2014-08-26 11:18 - 2014-08-26 11:18 - 00000000 ____D () C:\Program Files\Microsoft Analysis Services 2014-08-26 11:18 - 2014-08-26 11:18 - 00000000 ____D () C:\Program Files (x86)\Microsoft Analysis Services 2014-08-26 11:18 - 2014-08-26 11:17 - 00000000 ____D () C:\Program Files\Microsoft Office 2014-08-26 11:18 - 2011-04-12 09:54 - 00000000 ____D () C:\Windows\ShellNew 2014-08-26 11:18 - 2009-07-14 05:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared 2014-08-26 11:17 - 2014-08-26 11:17 - 00000000 __RHD () C:\MSOCache 2014-08-26 11:17 - 2014-08-26 11:17 - 00000000 ____D () C:\Users\Admin\AppData\Local\Microsoft Help 2014-08-26 11:17 - 2014-08-26 11:17 - 00000000 ____D () C:\Program Files (x86)\Microsoft Office 2014-08-26 10:57 - 2014-08-26 10:57 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip 2014-08-26 10:57 - 2014-08-26 10:57 - 00000000 ____D () C:\Program Files\7-Zip 2014-08-25 12:09 - 2014-08-25 12:09 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\Intel Corporation 2014-08-25 12:09 - 2014-08-25 12:09 - 00000000 ____D () C:\ProgramData\Intel 2014-08-25 12:09 - 2014-08-25 10:47 - 01645874 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI 2014-08-25 12:09 - 2014-08-25 10:39 - 00000000 ____D () C:\Program Files\Intel 2014-08-25 12:08 - 2014-08-25 12:08 - 00000000 ____D () C:\Users\Admin\Intel 2014-08-25 11:58 - 2014-08-25 11:58 - 00000000 ____D () C:\Windows\SysWOW64\Atheros_L1e 2014-08-25 11:52 - 2014-08-25 11:52 - 00000000 ____D () C:\Program Files\DigitalDevices 2014-08-25 11:50 - 2014-08-25 11:49 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\Mozilla 2014-08-25 11:50 - 2014-08-25 11:49 - 00000000 ____D () C:\Users\Admin\AppData\Local\Mozilla 2014-08-25 11:46 - 2014-08-25 11:46 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_iusb3hcs_01009.Wdf 2014-08-25 11:45 - 2014-08-25 10:39 - 00000000 ____D () C:\Program Files (x86)\Intel 2014-08-25 11:39 - 2014-08-25 08:10 - 00000000 ____D () C:\Program Files\WinRAR 2014-08-25 11:13 - 2014-08-25 11:13 - 00000000 ____D () C:\Program Files\Microsoft Silverlight 2014-08-25 11:13 - 2014-08-25 11:13 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight 2014-08-25 11:10 - 2014-08-25 11:10 - 00000000 ____D () C:\Users\Admin\AppData\Local\WindowsUpdate 2014-08-25 10:57 - 2014-08-25 10:57 - 00000144 _____ () C:\Windows\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat 2014-08-25 10:56 - 2014-08-25 10:25 - 00142336 _____ (G Data Software AG) C:\Windows\system32\Drivers\MiniIcpt.sys 2014-08-25 10:56 - 2014-08-25 10:25 - 00064000 _____ (G Data Software AG) C:\Windows\system32\Drivers\PktIcpt.sys 2014-08-25 10:56 - 2014-08-25 10:25 - 00064000 _____ (G Data Software AG) C:\Windows\system32\Drivers\gdwfpcd64.sys 2014-08-25 10:56 - 2014-08-25 10:25 - 00061440 _____ (G Data Software AG) C:\Windows\system32\Drivers\HookCentre.sys 2014-08-25 10:56 - 2014-08-25 10:25 - 00055808 _____ (G Data Software AG) C:\Windows\system32\Drivers\GDBehave.sys 2014-08-25 10:56 - 2014-08-25 10:25 - 00020992 _____ (G Data Software AG) C:\Windows\system32\Drivers\GDKBFlt64.sys 2014-08-25 10:53 - 2014-08-25 10:53 - 00000000 ____D () C:\ProgramData\Mozilla 2014-08-25 10:52 - 2014-08-25 10:52 - 00003538 _____ () C:\Windows\System32\Tasks\CreateChoiceProcessTask 2014-08-25 10:52 - 2014-08-25 10:52 - 00000000 __SHD () C:\Users\Admin\AppData\Local\EmieUserList 2014-08-25 10:52 - 2014-08-25 10:52 - 00000000 __SHD () C:\Users\Admin\AppData\Local\EmieSiteList 2014-08-25 10:50 - 2011-04-12 09:54 - 00000000 ____D () C:\Program Files\Windows Journal 2014-08-25 10:50 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\Dism 2014-08-25 10:50 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\Dism 2014-08-25 10:50 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions 2014-08-25 10:49 - 2014-08-25 10:24 - 00000000 ____D () C:\ProgramData\G Data 2014-08-25 10:41 - 2014-08-25 10:41 - 00000000 ____D () C:\Windows\system32\MRT 2014-08-25 10:35 - 2014-08-25 10:35 - 00000000 ___SD () C:\Windows\system32\CompatTel 2014-08-25 10:25 - 2014-08-25 10:25 - 00000779 _____ () C:\Users\Admin\AppData\Roaming\gdscan.log 2014-08-25 10:25 - 2014-08-25 10:25 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_GDKBFlt64_01007.Wdf 2014-08-25 10:25 - 2014-08-25 10:25 - 00000000 ____D () C:\Program Files (x86)\G Data 2014-08-25 10:25 - 2014-08-25 10:25 - 00000000 _____ () C:\Users\Admin\AppData\Roaming\gdfw.log 2014-08-25 10:23 - 2009-07-14 07:32 - 00000000 ____D () C:\Windows\system32\restore 2014-08-25 10:22 - 2009-07-14 05:20 - 00000000 __RHD () C:\Users\Public\Libraries 2014-08-25 09:08 - 2009-07-14 07:38 - 00025600 ___SH () C:\Windows\system32\config\BCD-Template.LOG 2014-08-25 09:08 - 2009-07-14 07:32 - 00028672 _____ () C:\Windows\system32\config\BCD-Template 2014-08-25 08:13 - 2014-08-25 09:08 - 00000000 ____D () C:\Windows\Panther 2014-08-25 08:13 - 2014-08-25 08:13 - 00000020 ___SH () C:\Users\Admin\ntuser.ini 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Musik 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Bilder 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Default\Vorlagen 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Default\Startmenü 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Default\Druckumgebung 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Admin\Vorlagen 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Admin\Startmenü 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Admin\Netzwerkumgebung 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Admin\Lokale Einstellungen 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Admin\Eigene Dateien 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Admin\Druckumgebung 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Admin\Documents\Eigene Musik 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Admin\Documents\Eigene Bilder 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Admin\AppData\Local\Verlauf 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Admin\AppData\Local\Anwendungsdaten 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Admin\Anwendungsdaten 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Programme 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\ProgramData\Vorlagen 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\ProgramData\Startmenü 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\ProgramData\Microsoft\Windows\Start Menu\Programme 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\ProgramData\Favoriten 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\ProgramData\Dokumente 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\ProgramData\Anwendungsdaten 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Program Files\Gemeinsame Dateien 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Dokumente und Einstellungen 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 __SHD () C:\Recovery 2014-08-25 08:13 - 2009-07-14 05:20 - 00000000 __RHD () C:\Users\Default 2014-08-25 08:13 - 2009-07-14 05:20 - 00000000 ____D () C:\Program Files\Windows NT 2014-08-25 08:10 - 2014-08-25 08:10 - 00001355 _____ () C:\Windows\TSSysprep.log 2014-08-25 08:10 - 2009-07-14 06:46 - 00002814 _____ () C:\Windows\DtcInstall.log 2014-08-25 08:10 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\sysprep 2014-08-25 08:09 - 2014-08-25 08:09 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdFs_01_09_00.Wdf 2014-08-25 08:09 - 2011-04-12 09:54 - 00000000 ____D () C:\Windows\CSC 2014-08-23 04:10 - 2014-08-29 11:07 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll 2014-08-23 03:45 - 2014-08-29 11:07 - 00311296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll 2014-08-23 02:59 - 2014-08-29 11:07 - 03166720 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2014-08-14 00:24 - 2014-08-25 10:39 - 00082432 _____ (Khronos Group) C:\Windows\system32\OpenCL.DLL 2014-08-14 00:24 - 2014-08-25 10:39 - 00074752 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.DLL 2014-08-14 00:24 - 2014-08-14 00:24 - 20068496 _____ (Intel Corporation) C:\Windows\system32\igdumdim64.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 04575208 _____ (Intel Corporation) C:\Windows\SysWOW64\igdusc32.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 01365504 _____ (Intel Corporation) C:\Windows\system32\igfxcmjit64.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 01137080 _____ (Intel Corporation) C:\Windows\system32\iglhsip64.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 01132960 _____ (Intel Corporation) C:\Windows\SysWOW64\iglhsip32.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 01061376 _____ (Intel Corporation) C:\Windows\SysWOW64\igfxcmjit32.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00734720 _____ (Intel Corporation) C:\Windows\system32\MetroIntelGenericUIFramework.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00453448 _____ () C:\Windows\system32\igfxTray.exe 2014-08-14 00:24 - 2014-08-14 00:24 - 00372736 _____ (Intel Corporation) C:\Windows\system32\igfxOSP.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00372224 _____ (Intel Corporation) C:\Windows\system32\IntelOpenCL64.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00304128 _____ (Intel Corporation) C:\Windows\SysWOW64\IntelOpenCL32.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00276808 _____ (Intel Corporation) C:\Windows\SysWOW64\IntelCpHeciSvc.exe 2014-08-14 00:24 - 2014-08-14 00:24 - 00254976 _____ () C:\Windows\system32\igfxCPL.cpl 2014-08-14 00:24 - 2014-08-14 00:24 - 00222720 _____ (Intel Corporation) C:\Windows\system32\igfxDTCM.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00220392 _____ (Intel Corporation) C:\Windows\system32\iglhcp64.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00212660 _____ () C:\Windows\system32\resTHA.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00207496 _____ (Intel Corporation) C:\Windows\system32\igfxcmrt64.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00206848 _____ (Intel Corporation) C:\Windows\system32\igfx11cmrt64.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00203812 _____ () C:\Windows\system32\resELL.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00199652 _____ () C:\Windows\system32\resRUS.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00191816 _____ (Intel Corporation) C:\Windows\system32\igfxext.exe 2014-08-14 00:24 - 2014-08-14 00:24 - 00184312 _____ (Intel Corporation) C:\Windows\SysWOW64\iglhcp32.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00182784 _____ (Intel Corporation) C:\Windows\system32\igfxCoIn_v3907.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00182356 _____ () C:\Windows\system32\resARA.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00181828 _____ () C:\Windows\system32\resJPN.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00181364 _____ () C:\Windows\system32\resHEB.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00176116 _____ () C:\Windows\system32\resFRA.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00176052 _____ () C:\Windows\system32\resHUN.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00175024 _____ (Intel Corporation) C:\Windows\SysWOW64\igfxcmrt32.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00174592 _____ (Intel Corporation) C:\Windows\SysWOW64\igfx11cmrt32.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00174340 _____ () C:\Windows\system32\resKOR.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00174004 _____ () C:\Windows\system32\resDEU.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00173748 _____ () C:\Windows\system32\resITA.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00173492 _____ () C:\Windows\system32\resROM.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00173460 _____ () C:\Windows\system32\resESN.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00173444 _____ () C:\Windows\system32\resSKY.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00173044 _____ () C:\Windows\system32\resPLK.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00172676 _____ () C:\Windows\system32\resNLD.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00171876 _____ () C:\Windows\system32\resPTB.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00171860 _____ () C:\Windows\system32\resTRK.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00171796 _____ () C:\Windows\system32\resCSY.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00171332 _____ () C:\Windows\system32\resPTG.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00171156 _____ () C:\Windows\system32\resFIN.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00170548 _____ () C:\Windows\system32\resHRV.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00170020 _____ () C:\Windows\system32\resSLV.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00170004 _____ () C:\Windows\system32\resSVE.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00168788 _____ () C:\Windows\system32\resNOR.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00168132 _____ () C:\Windows\system32\resDAN.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00166660 _____ () C:\Windows\system32\resENU.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00164836 _____ () C:\Windows\system32\resCHT.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00163652 _____ () C:\Windows\system32\resCHS.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00082432 _____ (Khronos Group) C:\Windows\system32\Intel_OpenCL_ICD64.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00074752 _____ (Khronos Group) C:\Windows\SysWOW64\Intel_OpenCL_ICD32.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00069632 _____ () C:\Windows\system32\igfxCUIServicePS.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00069632 _____ ( ) C:\Windows\system32\igfxDHLibv2_0.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00058880 _____ ( ) C:\Windows\system32\igfxDHLib.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00031408 _____ (Intel Corporation) C:\Windows\system32\igfxexps.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00030720 _____ (Intel Corporation) C:\Windows\SysWOW64\igfxexps32.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00010752 _____ ( ) C:\Windows\system32\igfxDILib.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00010240 _____ ( ) C:\Windows\system32\igfxEMLibv2_0.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00010240 _____ ( ) C:\Windows\system32\igfxEMLib.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00010240 _____ ( ) C:\Windows\system32\igfxDILibv2_0.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00005120 _____ ( ) C:\Windows\system32\igfxLHMLibv2_0.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00005120 _____ ( ) C:\Windows\system32\igfxLHMLib.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00003920 _____ () C:\Windows\system32\iglhxs64.vp 2014-08-14 00:24 - 2014-05-21 00:33 - 05801408 _____ (Intel Corporation) C:\Windows\system32\igdusc64.dll 2014-08-14 00:24 - 2014-05-21 00:33 - 00670720 _____ (Intel Corporation) C:\Windows\system32\igfxDH.dll 2014-08-14 00:24 - 2014-05-21 00:33 - 00324424 _____ (Intel Corporation) C:\Windows\system32\igfxCUIService.exe 2014-08-14 00:24 - 2014-05-21 00:33 - 00301896 _____ (Intel Corporation) C:\Windows\system32\igfxEM.exe 2014-08-14 00:24 - 2014-05-21 00:33 - 00271872 _____ (Intel Corporation) C:\Windows\system32\igfxDI.dll 2014-08-14 00:24 - 2014-05-21 00:33 - 00250368 _____ (Intel Corporation) C:\Windows\system32\igfxLHM.dll 2014-08-14 00:24 - 2014-05-21 00:33 - 00243528 _____ (Intel Corporation) C:\Windows\system32\igfxHK.exe 2014-08-14 00:23 - 2014-08-14 00:23 - 23686656 _____ (Intel Corporation) C:\Windows\system32\igdfcl64.dll 2014-08-14 00:23 - 2014-08-14 00:23 - 19298568 _____ (Intel Corporation) C:\Windows\SysWOW64\igdumdim32.dll 2014-08-14 00:23 - 2014-08-14 00:23 - 18558976 _____ (Intel Corporation) C:\Windows\SysWOW64\igdfcl32.dll 2014-08-14 00:23 - 2014-08-14 00:23 - 13199432 _____ () C:\Windows\system32\igd11dxva64.dll 2014-08-14 00:23 - 2014-08-14 00:23 - 12728192 _____ () C:\Windows\SysWOW64\igd11dxva32.dll 2014-08-14 00:23 - 2014-08-14 00:23 - 08841728 _____ (Intel Corporation) C:\Windows\system32\ig75icd64.dll 2014-08-14 00:23 - 2014-08-14 00:23 - 08237056 _____ (Intel Corporation) C:\Windows\system32\igdrcl64.dll 2014-08-14 00:23 - 2014-08-14 00:23 - 07679488 _____ (Intel Corporation) C:\Windows\SysWOW64\igdrcl32.dll 2014-08-14 00:23 - 2014-08-14 00:23 - 06970976 _____ (Intel Corporation) C:\Windows\SysWOW64\igd10iumd32.dll 2014-08-14 00:23 - 2014-08-14 00:23 - 06946816 _____ (Intel Corporation) C:\Windows\SysWOW64\ig75icd32.dll 2014-08-14 00:23 - 2014-08-14 00:23 - 04786544 _____ (Intel Corporation) C:\Windows\system32\Drivers\igdkmd64.sys 2014-08-14 00:23 - 2014-08-14 00:23 - 03399496 _____ (Intel Corporation) C:\Windows\system32\Gfxv4_0.exe 2014-08-14 00:23 - 2014-08-14 00:23 - 03395912 _____ (Intel Corporation) C:\Windows\system32\Gfxv2_0.exe 2014-08-14 00:23 - 2014-08-14 00:23 - 00929608 _____ (Intel Corporation) C:\Windows\system32\GfxUIEx.exe 2014-08-14 00:23 - 2014-08-14 00:23 - 00604552 _____ (Intel Corporation) C:\Windows\system32\igdmd64.dll 2014-08-14 00:23 - 2014-08-14 00:23 - 00543560 _____ (Intel Corporation) C:\Windows\system32\DPTopologyApp.exe 2014-08-14 00:23 - 2014-08-14 00:23 - 00543048 _____ (Intel Corporation) C:\Windows\system32\DPTopologyAppv2_0.exe 2014-08-14 00:23 - 2014-08-14 00:23 - 00483000 _____ (Intel Corporation) C:\Windows\SysWOW64\igdmd32.dll 2014-08-14 00:23 - 2014-08-14 00:23 - 00393728 _____ (Intel Corporation) C:\Windows\system32\igdbcl64.dll 2014-08-14 00:23 - 2014-08-14 00:23 - 00346112 _____ (Intel Corporation) C:\Windows\SysWOW64\igdbcl32.dll 2014-08-14 00:23 - 2014-08-14 00:23 - 00225792 _____ () C:\Windows\system32\igdde64.dll 2014-08-14 00:23 - 2014-08-14 00:23 - 00186368 _____ () C:\Windows\SysWOW64\igdde32.dll 2014-08-14 00:23 - 2014-08-14 00:23 - 00162304 _____ (Intel Corporation) C:\Windows\system32\igdail64.dll 2014-08-14 00:23 - 2014-08-14 00:23 - 00152392 _____ (Intel Corporation) C:\Windows\system32\difx64.exe 2014-08-14 00:23 - 2014-08-14 00:23 - 00144896 _____ (Intel Corporation) C:\Windows\SysWOW64\igdail32.dll 2014-08-14 00:23 - 2014-05-21 00:33 - 07682736 _____ (Intel Corporation) C:\Windows\system32\igd10iumd64.dll 2014-08-07 04:06 - 2014-08-25 10:32 - 00529920 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2014-08-07 04:01 - 2014-08-25 10:32 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll Some content of TEMP: ==================== C:\Users\Admin\AppData\Local\Temp\DD_PCIeUpdateLibrary.dll C:\Users\Admin\AppData\Local\Temp\Quarantine.exe ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\System32\winlogon.exe => File is digitally signed C:\Windows\System32\wininit.exe => File is digitally signed C:\Windows\SysWOW64\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\System32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\System32\services.exe => File is digitally signed C:\Windows\System32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\System32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\System32\rpcss.dll => File is digitally signed C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2014-09-01 19:13 ==================== End Of Log ============================ |
07.09.2014, 12:22 | #8 |
/// the machine /// TB-Ausbilder | Malware nach Installation von MyPhoneExplorerESET Online Scanner
Downloade Dir bitte SecurityCheck und:
und ein frisches FRST log bitte. Noch Probleme?
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
08.09.2014, 12:02 | #9 |
| Malware nach Installation von MyPhoneExplorerCode:
ATTFilter C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\4G68Q6WD\WajamChecker[1].exe Win32/Wajam.F evtl. unerwünschte Anwendung C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6S33D2ZL\2014090595185[1].exe Win32/InstallMonetizer.BC evtl. unerwünschte Anwendung C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\C9TPZHWV\Yawtix[1].exe Win32/BrowseFox.C evtl. unerwünschte Anwendung \\Nas\Backup\TV Mom & Dad\UE37D5700\Kanal-Editor\Samsung-Channel-List-PC-Editor-lnstall.exe Win32/WinloadSDA.E evtl. unerwünschte Anwendung \\Nas\Programme - Setup\Brennprogramme\Isobuster\isobuster28_all_lang.exe Variante von Win32/Toolbar.Conduit.B evtl. unerwünschte Anwendung \\Nas\Programme - Setup\PDF Tools\PDF Creator\PDFCreator-1_2_1_setup.exe Win32/Toolbar.Widgi evtl. unerwünschte Anwendung Code:
ATTFilter Results of screen317's Security Check version 0.99.87 Windows 7 Service Pack 1 x64 (UAC is enabled) Internet Explorer 11 ``````````````Antivirus/Firewall Check:`````````````` G DATA INTERNET SECURITY Antivirus up to date! `````````Anti-malware/Other Utilities Check:````````` Java 7 Update 67 Adobe Flash Player 14.0.0.179 Adobe Reader XI Mozilla Firefox (32.0) Mozilla Thunderbird (31.0.) ````````Process Check: objlist.exe by Laurent```````` G Data InternetSecurity Firewall GDFwSvcx64.exe G Data InternetSecurity Firewall GDFirewallTray.exe `````````````````System Health check````````````````` Total Fragmentation on Drive C: ````````````````````End of Log`````````````````````` Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 07-09-2014 01 Ran by Admin (administrator) on PC-OFFICE on 07-09-2014 20:21:55 Running from C:\Users\Admin\Desktop Platform: Windows 7 Ultimate Service Pack 1 (X64) OS Language: Deutsch (Deutschland) Internet Explorer Version 11 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (G Data Software AG) C:\Program Files (x86)\Common Files\G Data\GDScan\GDScan.exe (G Data Software AG) C:\Program Files (x86)\G Data\InternetSecurity\AVK\AVKWCtlx64.exe (Intel Corporation) C:\Windows\System32\igfxCUIService.exe (G Data Software AG) C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKProxy.exe (G Data Software AG) C:\Program Files (x86)\G Data\InternetSecurity\AVK\AVKService.exe (Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (G Data Software AG) C:\Program Files (x86)\G Data\InternetSecurity\Firewall\GDFwSvcx64.exe (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE (G Data Software AG) C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKBap64.exe (G Data Software AG) C:\Program Files (x86)\G Data\InternetSecurity\AVKTray\AVKTray.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe (G Data Software AG) C:\Program Files (x86)\Common Files\G Data\AVKProxy\GdBgInx64.exe (G Data Software AG) C:\Program Files (x86)\Common Files\G Data\AVKProxy\GDKBFltExe32.exe (Intel Corporation) C:\Windows\System32\igfxEM.exe (Intel Corporation) C:\Windows\System32\igfxHK.exe (G Data Software AG) C:\Program Files (x86)\G Data\InternetSecurity\Firewall\GDFirewallTray.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe (CANON INC.) C:\Program Files (x86)\Canon\Canon IJ Network Scan Utility\CNMNSUT.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [287592 2013-08-07] (Intel Corporation) HKLM\...\Run: [BCSSync] => C:\Program Files\Microsoft Office\Office14\BCSSync.exe [108144 2012-11-05] (Microsoft Corporation) HKLM-x32\...\Run: [GDFirewallTray] => C:\Program Files (x86)\G Data\InternetSecurity\Firewall\GDFirewallTray.exe [1756792 2014-05-20] (G Data Software AG) HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [292848 2013-04-26] (Intel Corporation) HKLM-x32\...\Run: [IJNetworkScanUtility] => C:\Program Files (x86)\Canon\Canon IJ Network Scan Utility\CNMNSUT.exe [206240 2010-08-23] (CANON INC.) HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2014-05-08] (Adobe Systems Incorporated) HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896 2014-07-25] (Oracle Corporation) HKLM\...\Winlogon: [Userinit] C:\Windows\system32\userinit.exe,C:\Program Files (x86)\G Data\InternetSecurity\AVKTray\AVKTray.exe ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.de BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) Hosts: 127.0.0.1 validation.sls.microsoft.com Tcpip\Parameters: [DhcpNameServer] 192.168.178.1 FireFox: ======== FF ProfilePath: C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\kulit06d.default FF Homepage: www.google.de FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_14_0_0_179.dll () FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~3\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_179.dll () FF Plugin-x32: @java.com/DTPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: WOT - C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\kulit06d.default\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} [2014-09-01] FF Extension: Flagfox - C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\kulit06d.default\Extensions\{1018e4d6-728f-4b20-ad56-37578a4de76b}.xpi [2014-09-01] FF Extension: Adblock Plus - C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\kulit06d.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-09-01] Chrome: ======= ==================== Services (Whitelisted) ================= (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 AVKProxy; C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKProxy.exe [2250360 2014-07-30] (G Data Software AG) R2 AVKService; C:\Program Files (x86)\G Data\InternetSecurity\AVK\AVKService.exe [914552 2013-12-19] (G Data Software AG) R2 AVKWCtl; C:\Program Files (x86)\G Data\InternetSecurity\AVK\AVKWCtlx64.exe [2683760 2014-05-20] (G Data Software AG) R3 GDFwSvc; C:\Program Files (x86)\G Data\InternetSecurity\Firewall\GDFwSvcx64.exe [3227624 2014-08-06] (G Data Software AG) R3 GDScan; C:\Program Files (x86)\Common Files\G Data\GDScan\GDScan.exe [700536 2014-05-20] (G Data Software AG) R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15720 2013-08-07] (Intel Corporation) R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [324424 2014-08-14] (Intel Corporation) ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R3 AnyDVD; C:\Windows\System32\Drivers\AnyDVD.sys [138664 2014-04-24] (SlySoft, Inc.) R3 AnyDVD; C:\Windows\SysWOW64\Drivers\AnyDVD.sys [138664 2014-04-24] (SlySoft, Inc.) R3 DDBase; C:\Windows\System32\DRIVERS\DDBase.sys [33792 2014-04-15] (Digital Devices GmbH) R3 DDCapture; C:\Windows\System32\DRIVERS\DDCapture.sys [21504 2014-04-15] (Digital Devices GmbH) R3 DDTuner; C:\Windows\System32\DRIVERS\DDTuner.sys [214016 2014-04-15] (Digital Devices GmbH) R0 GDBehave; C:\Windows\System32\drivers\GDBehave.sys [55808 2014-08-25] (G Data Software AG) R1 GDKBFlt; C:\Windows\system32\drivers\GDKBFlt64.sys [20992 2014-08-25] (G Data Software AG) R1 GDMnIcpt; C:\Windows\system32\drivers\MiniIcpt.sys [142336 2014-08-25] (G Data Software AG) R3 GDPkIcpt; C:\Windows\system32\drivers\PktIcpt.sys [64000 2014-08-25] (G Data Software AG) R1 gdwfpcd; C:\Windows\System32\drivers\gdwfpcd64.sys [64000 2014-08-25] (G Data Software AG) R1 GRD; C:\Windows\system32\drivers\GRD.sys [106272 2014-09-01] (G Data Software) R1 HookCentre; C:\Windows\system32\drivers\HookCentre.sys [61440 2014-08-25] (G Data Software AG) R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [28008 2013-08-07] (Intel Corporation) R3 L1C; C:\Windows\System32\DRIVERS\L1C62x64.sys [129224 2013-07-18] (Qualcomm Atheros Co., Ltd.) S3 VGPU; System32\drivers\rdvgkmd.sys [X] ==================== NetSvcs (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.) ==================== One Month Created Files and Folders ======== (If an entry is included in the fixlist, the file\folder will be moved.) 2014-09-07 20:21 - 2014-09-07 20:21 - 00000813 _____ () C:\Users\Admin\Desktop\checkup.txt 2014-09-07 20:21 - 2014-09-07 20:21 - 00000000 ____D () C:\Users\Admin\Desktop\FRST-OlderVersion 2014-09-07 20:16 - 2014-09-07 20:16 - 00854417 _____ () C:\Users\Admin\Desktop\SecurityCheck.exe 2014-09-07 20:12 - 2014-09-07 20:12 - 00000887 _____ () C:\Users\Admin\Desktop\ESET Online Scanner.txt 2014-09-06 15:59 - 2014-09-07 20:21 - 00010367 _____ () C:\Users\Admin\Desktop\FRST.txt 2014-09-06 15:58 - 2014-09-06 15:58 - 00000755 _____ () C:\Users\Admin\Desktop\JRT.txt 2014-09-06 15:50 - 2014-09-06 15:50 - 00000000 ____D () C:\Windows\ERUNT 2014-09-06 15:49 - 2014-09-06 15:49 - 00001222 _____ () C:\Users\Admin\Desktop\AdwCleaner[S0].txt 2014-09-06 15:35 - 2014-09-06 15:48 - 00000000 ____D () C:\AdwCleaner 2014-09-06 15:34 - 2014-09-06 15:34 - 00001158 _____ () C:\Users\Admin\Desktop\mbam.txt 2014-09-06 15:27 - 2014-09-06 15:27 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2014-09-06 15:27 - 2014-09-06 15:27 - 00001117 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-09-06 15:27 - 2014-09-06 15:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2014-09-06 15:27 - 2014-09-06 15:27 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-09-06 15:27 - 2014-09-06 15:27 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 2014-09-06 15:27 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys 2014-09-06 15:27 - 2014-05-12 07:26 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys 2014-09-06 15:27 - 2014-05-12 07:25 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2014-09-06 15:26 - 2014-09-06 15:22 - 01016261 _____ (Thisisu) C:\Users\Admin\Desktop\JRT.exe 2014-09-06 15:26 - 2014-09-06 15:21 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Admin\Desktop\mbam-setup-2.0.2.1012.exe 2014-09-06 15:26 - 2014-09-06 15:21 - 01370483 _____ () C:\Users\Admin\Desktop\adwcleaner_3.309.exe 2014-09-05 20:46 - 2014-09-05 20:46 - 00000000 ____D () C:\Users\Matze\AppData\Roaming\Macromedia 2014-09-05 20:46 - 2014-09-05 20:46 - 00000000 ____D () C:\Users\Matze\AppData\Roaming\Adobe 2014-09-05 20:46 - 2014-09-05 20:46 - 00000000 ____D () C:\Users\Matze\AppData\Local\Macromedia 2014-09-05 20:39 - 2014-09-05 20:39 - 00000000 ____D () C:\Users\Matze\AppData\Local\G DATA 2014-09-05 20:34 - 2014-09-05 20:34 - 00000000 ____D () C:\Users\Matze\AppData\Roaming\Thunderbird 2014-09-05 20:34 - 2014-09-05 20:34 - 00000000 ____D () C:\Users\Matze\AppData\Local\Thunderbird 2014-09-05 20:33 - 2014-09-05 20:33 - 00000000 ____D () C:\Users\Matze\AppData\Roaming\Mozilla 2014-09-05 20:33 - 2014-09-05 20:33 - 00000000 ____D () C:\Users\Matze\AppData\Local\Mozilla 2014-09-05 20:18 - 2014-09-07 20:21 - 00000000 ____D () C:\FRST 2014-09-05 20:17 - 2014-09-07 20:21 - 02105344 _____ (Farbar) C:\Users\Admin\Desktop\FRST64.exe 2014-09-05 15:13 - 2014-09-05 15:13 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2014-09-05 15:11 - 2014-09-05 15:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MyPhoneExplorer 2014-09-05 15:11 - 2014-09-05 15:11 - 00000000 ____D () C:\Program Files (x86)\MyPhoneExplorer 2014-09-04 16:20 - 2014-09-04 16:20 - 00000000 ____D () C:\Users\Admin\Logitech 2014-09-04 16:19 - 2014-09-04 16:19 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\InstallShield 2014-09-04 16:19 - 2014-09-04 16:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logitech 2014-09-04 16:19 - 2014-09-04 16:19 - 00000000 ____D () C:\Program Files (x86)\Logitech 2014-09-04 16:10 - 2014-09-04 16:11 - 00000000 ____D () C:\Users\Admin\.gimp-2.8 2014-09-04 16:10 - 2014-09-04 16:10 - 00000909 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GIMP 2.lnk 2014-09-04 16:10 - 2014-09-04 16:10 - 00000000 ____D () C:\Users\Admin\AppData\Local\gegl-0.2 2014-09-04 16:09 - 2014-09-04 16:10 - 00000000 ____D () C:\Program Files\GIMP 2 2014-09-04 15:50 - 2014-09-04 15:50 - 00000000 ____D () C:\Users\Admin\AppData\Local\FreeCommanderXE 2014-09-04 15:50 - 2014-09-04 15:50 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FreeCommander XE 2014-09-04 15:50 - 2014-09-04 15:50 - 00000000 ____D () C:\Program Files (x86)\FreeCommander XE 2014-09-04 15:40 - 2014-09-04 15:41 - 00000000 ____D () C:\Program Files (x86)\Audiograbber 2014-09-04 15:40 - 2014-09-04 15:40 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audiograbber 2014-09-03 20:35 - 2014-09-04 15:19 - 00000000 ____D () C:\Program Files (x86)\Steam 2014-09-03 20:35 - 2014-09-03 20:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam 2014-09-03 20:26 - 2014-09-03 20:26 - 00084688 _____ () C:\Users\Matze\AppData\Local\GDIPFONTCACHEV1.DAT 2014-09-03 20:26 - 2014-09-03 20:26 - 00000000 ____D () C:\Users\Matze\AppData\Roaming\Intel Corporation 2014-09-03 20:25 - 2014-09-03 20:25 - 00000020 ___SH () C:\Users\Matze\ntuser.ini 2014-09-03 20:25 - 2014-09-03 20:25 - 00000000 _SHDL () C:\Users\Matze\Vorlagen 2014-09-03 20:25 - 2014-09-03 20:25 - 00000000 _SHDL () C:\Users\Matze\Startmenü 2014-09-03 20:25 - 2014-09-03 20:25 - 00000000 _SHDL () C:\Users\Matze\Netzwerkumgebung 2014-09-03 20:25 - 2014-09-03 20:25 - 00000000 _SHDL () C:\Users\Matze\Lokale Einstellungen 2014-09-03 20:25 - 2014-09-03 20:25 - 00000000 _SHDL () C:\Users\Matze\Eigene Dateien 2014-09-03 20:25 - 2014-09-03 20:25 - 00000000 _SHDL () C:\Users\Matze\Druckumgebung 2014-09-03 20:25 - 2014-09-03 20:25 - 00000000 _SHDL () C:\Users\Matze\Documents\Eigene Musik 2014-09-03 20:25 - 2014-09-03 20:25 - 00000000 _SHDL () C:\Users\Matze\Documents\Eigene Bilder 2014-09-03 20:25 - 2014-09-03 20:25 - 00000000 _SHDL () C:\Users\Matze\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-09-03 20:25 - 2014-09-03 20:25 - 00000000 _SHDL () C:\Users\Matze\AppData\Local\Verlauf 2014-09-03 20:25 - 2014-09-03 20:25 - 00000000 _SHDL () C:\Users\Matze\AppData\Local\Anwendungsdaten 2014-09-03 20:25 - 2014-09-03 20:25 - 00000000 _SHDL () C:\Users\Matze\Anwendungsdaten 2014-09-03 20:25 - 2014-09-03 20:25 - 00000000 ____D () C:\Users\Matze\AppData\Local\VirtualStore 2014-09-03 20:25 - 2014-09-03 20:25 - 00000000 ____D () C:\Users\Matze 2014-09-03 20:25 - 2014-08-26 11:40 - 00000000 ____D () C:\Users\Matze\AppData\Local\Microsoft Help 2014-09-03 20:25 - 2009-07-14 06:54 - 00000000 ___RD () C:\Users\Matze\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2014-09-03 20:25 - 2009-07-14 06:49 - 00000000 ___RD () C:\Users\Matze\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance 2014-09-03 20:24 - 2014-09-03 20:24 - 00000000 ____D () C:\Users\Admin\AppData\Local\Adobe 2014-09-03 20:20 - 2014-09-03 20:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sicherheit & Optimierung 2014-09-03 20:20 - 2014-09-03 20:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDF Tools 2014-09-03 20:19 - 2014-09-03 20:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla 2014-09-03 20:18 - 2014-09-03 20:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hardware 2014-09-03 20:17 - 2014-09-03 20:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Brennprogramme 2014-09-03 20:16 - 2014-09-03 20:18 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mediaplayer 2014-09-02 20:09 - 2014-09-04 21:27 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\vlc 2014-09-02 20:09 - 2014-09-02 20:09 - 00000000 ____D () C:\Program Files (x86)\VideoLAN 2014-09-02 20:05 - 2014-07-09 04:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDYAK.DLL 2014-09-02 20:05 - 2014-07-09 04:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDTAT.DLL 2014-09-02 20:05 - 2014-07-09 04:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU1.DLL 2014-09-02 20:05 - 2014-07-09 04:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDBASH.DLL 2014-09-02 20:05 - 2014-07-09 04:03 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU.DLL 2014-09-02 20:05 - 2014-07-09 03:31 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDYAK.DLL 2014-09-02 20:05 - 2014-07-09 03:31 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDTAT.DLL 2014-09-02 20:05 - 2014-07-09 03:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRU1.DLL 2014-09-02 20:05 - 2014-07-09 03:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRU.DLL 2014-09-02 20:05 - 2014-07-09 03:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDBASH.DLL 2014-09-02 20:05 - 2014-07-09 00:39 - 00419704 _____ () C:\Windows\system32\locale.nls 2014-09-02 20:05 - 2014-07-09 00:30 - 00419704 _____ () C:\Windows\SysWOW64\locale.nls 2014-09-02 18:42 - 2014-09-02 18:42 - 00010009 _____ () C:\Windows\DirectX.log 2014-09-02 18:42 - 2010-06-02 04:55 - 00527192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_7.dll 2014-09-02 18:42 - 2010-06-02 04:55 - 00518488 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_7.dll 2014-09-02 18:42 - 2010-06-02 04:55 - 00239960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_7.dll 2014-09-02 18:42 - 2010-06-02 04:55 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_7.dll 2014-09-02 18:42 - 2010-06-02 04:55 - 00077656 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_5.dll 2014-09-02 18:42 - 2010-06-02 04:55 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_5.dll 2014-09-02 18:42 - 2010-05-26 11:41 - 02526056 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_43.dll 2014-09-02 18:42 - 2010-05-26 11:41 - 02401112 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_43.dll 2014-09-02 18:42 - 2010-05-26 11:41 - 02106216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_43.dll 2014-09-02 18:42 - 2010-05-26 11:41 - 01998168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_43.dll 2014-09-02 18:42 - 2010-05-26 11:41 - 01907552 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_43.dll 2014-09-02 18:42 - 2010-05-26 11:41 - 01868128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_43.dll 2014-09-02 18:42 - 2010-05-26 11:41 - 00511328 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_43.dll 2014-09-02 18:42 - 2010-05-26 11:41 - 00470880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_43.dll 2014-09-02 18:42 - 2010-05-26 11:41 - 00276832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_43.dll 2014-09-02 18:42 - 2010-05-26 11:41 - 00248672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_43.dll 2014-09-02 18:42 - 2010-02-04 10:01 - 00530776 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_6.dll 2014-09-02 18:42 - 2010-02-04 10:01 - 00528216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_6.dll 2014-09-02 18:42 - 2010-02-04 10:01 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_6.dll 2014-09-02 18:42 - 2010-02-04 10:01 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_6.dll 2014-09-02 18:42 - 2010-02-04 10:01 - 00078680 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_4.dll 2014-09-02 18:42 - 2010-02-04 10:01 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_4.dll 2014-09-02 18:42 - 2010-02-04 10:01 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_7.dll 2014-09-02 18:42 - 2010-02-04 10:01 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_7.dll 2014-09-02 18:42 - 2009-09-04 17:44 - 00517960 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_5.dll 2014-09-02 18:42 - 2009-09-04 17:44 - 00515416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_5.dll 2014-09-02 18:42 - 2009-09-04 17:44 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_5.dll 2014-09-02 18:42 - 2009-09-04 17:44 - 00176968 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_5.dll 2014-09-02 18:42 - 2009-09-04 17:44 - 00073544 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_3.dll 2014-09-02 18:42 - 2009-09-04 17:44 - 00069464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_3.dll 2014-09-02 18:42 - 2009-09-04 17:29 - 05554512 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_42.dll 2014-09-02 18:42 - 2009-09-04 17:29 - 05501792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_42.dll 2014-09-02 18:42 - 2009-09-04 17:29 - 02582888 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_42.dll 2014-09-02 18:42 - 2009-09-04 17:29 - 02475352 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_42.dll 2014-09-02 18:42 - 2009-09-04 17:29 - 01974616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_42.dll 2014-09-02 18:42 - 2009-09-04 17:29 - 01892184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_42.dll 2014-09-02 18:42 - 2009-09-04 17:29 - 00523088 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_42.dll 2014-09-02 18:42 - 2009-09-04 17:29 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_42.dll 2014-09-02 18:42 - 2009-09-04 17:29 - 00285024 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_42.dll 2014-09-02 18:42 - 2009-09-04 17:29 - 00235344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_42.dll 2014-09-02 18:42 - 2009-03-16 14:18 - 00521560 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_4.dll 2014-09-02 18:42 - 2009-03-16 14:18 - 00517448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_4.dll 2014-09-02 18:42 - 2009-03-16 14:18 - 00235352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_4.dll 2014-09-02 18:42 - 2009-03-16 14:18 - 00174936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_4.dll 2014-09-02 18:42 - 2009-03-16 14:18 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_6.dll 2014-09-02 18:42 - 2009-03-16 14:18 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_6.dll 2014-09-02 18:42 - 2009-03-09 15:27 - 05425496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_41.dll 2014-09-02 18:42 - 2009-03-09 15:27 - 04178264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_41.dll 2014-09-02 18:42 - 2009-03-09 15:27 - 02430312 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_41.dll 2014-09-02 18:42 - 2009-03-09 15:27 - 01846632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_41.dll 2014-09-02 18:42 - 2009-03-09 15:27 - 00520544 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_41.dll 2014-09-02 18:42 - 2009-03-09 15:27 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_41.dll 2014-09-02 18:42 - 2008-10-27 10:04 - 00518480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_3.dll 2014-09-02 18:42 - 2008-10-27 10:04 - 00514384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_3.dll 2014-09-02 18:42 - 2008-10-27 10:04 - 00235856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_3.dll 2014-09-02 18:42 - 2008-10-27 10:04 - 00175440 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_3.dll 2014-09-02 18:42 - 2008-10-27 10:04 - 00074576 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_2.dll 2014-09-02 18:42 - 2008-10-27 10:04 - 00070992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_2.dll 2014-09-02 18:42 - 2008-10-27 10:04 - 00025936 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_5.dll 2014-09-02 18:42 - 2008-10-27 10:04 - 00023376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_5.dll 2014-09-02 18:42 - 2008-10-10 04:52 - 05631312 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_40.dll 2014-09-02 18:42 - 2008-10-10 04:52 - 04379984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_40.dll 2014-09-02 18:42 - 2008-10-10 04:52 - 02605920 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_40.dll 2014-09-02 18:42 - 2008-10-10 04:52 - 02036576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_40.dll 2014-09-02 18:42 - 2008-10-10 04:52 - 00519000 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_40.dll 2014-09-02 18:42 - 2008-10-10 04:52 - 00452440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_40.dll 2014-09-02 18:42 - 2008-07-31 10:41 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_2.dll 2014-09-02 18:42 - 2008-07-31 10:41 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_2.dll 2014-09-02 18:42 - 2008-07-31 10:41 - 00072200 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_1.dll 2014-09-02 18:42 - 2008-07-31 10:41 - 00068616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_1.dll 2014-09-02 18:42 - 2008-07-31 10:40 - 00513544 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_2.dll 2014-09-02 18:42 - 2008-07-31 10:40 - 00509448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_2.dll 2014-09-02 18:42 - 2008-07-10 11:01 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_39.dll 2014-09-02 18:42 - 2008-07-10 11:00 - 04992520 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_39.dll 2014-09-02 18:42 - 2008-07-10 11:00 - 03851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll 2014-09-02 18:42 - 2008-07-10 11:00 - 01942552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_39.dll 2014-09-02 18:42 - 2008-07-10 11:00 - 01493528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_39.dll 2014-09-02 18:42 - 2008-07-10 11:00 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_39.dll 2014-09-02 18:42 - 2008-05-30 14:19 - 00511496 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_1.dll 2014-09-02 18:42 - 2008-05-30 14:19 - 00507400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_1.dll 2014-09-02 18:42 - 2008-05-30 14:18 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_1.dll 2014-09-02 18:42 - 2008-05-30 14:18 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_1.dll 2014-09-02 18:42 - 2008-05-30 14:17 - 00068104 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_0.dll 2014-09-02 18:42 - 2008-05-30 14:17 - 00065032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_0.dll 2014-09-02 18:42 - 2008-05-30 14:17 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_4.dll 2014-09-02 18:42 - 2008-05-30 14:16 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_4.dll 2014-09-02 18:42 - 2008-05-30 14:11 - 04991496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_38.dll 2014-09-02 18:42 - 2008-05-30 14:11 - 03850760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_38.dll 2014-09-02 18:42 - 2008-05-30 14:11 - 01941528 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_38.dll 2014-09-02 18:42 - 2008-05-30 14:11 - 01491992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_38.dll 2014-09-02 18:42 - 2008-05-30 14:11 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_38.dll 2014-09-02 18:42 - 2008-05-30 14:11 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_38.dll 2014-09-02 18:42 - 2008-03-05 16:04 - 00489480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_0.dll 2014-09-02 18:42 - 2008-03-05 16:03 - 00479752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_0.dll 2014-09-02 18:42 - 2008-03-05 16:03 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_0.dll 2014-09-02 18:42 - 2008-03-05 16:03 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_0.dll 2014-09-02 18:42 - 2008-03-05 16:00 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_3.dll 2014-09-02 18:42 - 2008-03-05 16:00 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_3.dll 2014-09-02 18:42 - 2008-03-05 15:56 - 04910088 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_37.dll 2014-09-02 18:42 - 2008-03-05 15:56 - 03786760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_37.dll 2014-09-02 18:42 - 2008-03-05 15:56 - 01860120 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_37.dll 2014-09-02 18:42 - 2008-03-05 15:56 - 01420824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_37.dll 2014-09-02 18:42 - 2008-02-05 23:07 - 00529424 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_37.dll 2014-09-02 18:42 - 2008-02-05 23:07 - 00462864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_37.dll 2014-09-02 18:42 - 2007-10-22 03:40 - 00411656 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_10.dll 2014-09-02 18:42 - 2007-10-22 03:39 - 00267272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_10.dll 2014-09-02 18:42 - 2007-10-22 03:37 - 00021000 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_2.dll 2014-09-02 18:42 - 2007-10-22 03:37 - 00017928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_2.dll 2014-09-02 18:42 - 2007-10-12 15:14 - 05081608 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_36.dll 2014-09-02 18:42 - 2007-10-12 15:14 - 03734536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_36.dll 2014-09-02 18:42 - 2007-10-12 15:14 - 02006552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_36.dll 2014-09-02 18:42 - 2007-10-12 15:14 - 01374232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_36.dll 2014-09-02 18:42 - 2007-10-02 09:56 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_36.dll 2014-09-02 18:42 - 2007-10-02 09:56 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_36.dll 2014-09-02 18:42 - 2007-07-20 00:57 - 00411496 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_9.dll 2014-09-02 18:42 - 2007-07-20 00:57 - 00267112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_9.dll 2014-09-02 18:42 - 2007-07-19 18:14 - 05073256 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_35.dll 2014-09-02 18:42 - 2007-07-19 18:14 - 03727720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_35.dll 2014-09-02 18:42 - 2007-07-19 18:14 - 01985904 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_35.dll 2014-09-02 18:42 - 2007-07-19 18:14 - 01358192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_35.dll 2014-09-02 18:42 - 2007-07-19 18:14 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_35.dll 2014-09-02 18:42 - 2007-07-19 18:14 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_35.dll 2014-09-02 18:42 - 2007-06-20 20:49 - 00409960 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_8.dll 2014-09-02 18:42 - 2007-06-20 20:46 - 00266088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_8.dll 2014-09-02 18:42 - 2007-05-16 16:45 - 04496232 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_34.dll 2014-09-02 18:42 - 2007-05-16 16:45 - 03497832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_34.dll 2014-09-02 18:42 - 2007-05-16 16:45 - 01401200 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_34.dll 2014-09-02 18:42 - 2007-05-16 16:45 - 01124720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_34.dll 2014-09-02 18:42 - 2007-05-16 16:45 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_34.dll 2014-09-02 18:42 - 2007-05-16 16:45 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_34.dll 2014-09-02 18:42 - 2007-04-04 18:55 - 00403304 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_7.dll 2014-09-02 18:42 - 2007-04-04 18:55 - 00261480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_7.dll 2014-09-02 18:42 - 2007-04-04 18:54 - 00107368 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_3.dll 2014-09-02 18:42 - 2007-04-04 18:53 - 00081768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_3.dll 2014-09-02 18:42 - 2007-03-15 16:57 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_33.dll 2014-09-02 18:42 - 2007-03-15 16:57 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_33.dll 2014-09-02 18:42 - 2007-03-12 16:42 - 04494184 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_33.dll 2014-09-02 18:42 - 2007-03-12 16:42 - 03495784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_33.dll 2014-09-02 18:42 - 2007-03-12 16:42 - 01400176 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_33.dll 2014-09-02 18:42 - 2007-03-12 16:42 - 01123696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_33.dll 2014-09-02 18:42 - 2007-03-05 12:42 - 00017688 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_1.dll 2014-09-02 18:42 - 2007-03-05 12:42 - 00015128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_1.dll 2014-09-02 18:42 - 2007-01-24 15:27 - 00393576 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_6.dll 2014-09-02 18:42 - 2007-01-24 15:27 - 00255848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_6.dll 2014-09-02 18:42 - 2006-12-08 12:02 - 00251672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_5.dll 2014-09-02 18:42 - 2006-12-08 12:00 - 00390424 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_5.dll 2014-09-02 18:42 - 2006-11-29 13:06 - 04398360 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_32.dll 2014-09-02 18:42 - 2006-11-29 13:06 - 03426072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_32.dll 2014-09-02 18:42 - 2006-11-29 13:06 - 00469264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10.dll 2014-09-02 18:42 - 2006-11-29 13:06 - 00440080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10.dll 2014-09-02 18:42 - 2006-09-28 16:05 - 03977496 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_31.dll 2014-09-02 18:42 - 2006-09-28 16:05 - 02414360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_31.dll 2014-09-02 18:42 - 2006-09-28 16:05 - 00237848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_4.dll 2014-09-02 18:42 - 2006-09-28 16:04 - 00364824 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_4.dll 2014-09-02 18:42 - 2006-07-28 09:31 - 00083736 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_2.dll 2014-09-02 18:42 - 2006-07-28 09:30 - 00363288 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_3.dll 2014-09-02 18:42 - 2006-07-28 09:30 - 00236824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_3.dll 2014-09-02 18:42 - 2006-07-28 09:30 - 00062744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_2.dll 2014-09-02 18:42 - 2006-05-31 07:24 - 00230168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_2.dll 2014-09-02 18:42 - 2006-05-31 07:22 - 00354072 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_2.dll 2014-09-02 18:42 - 2006-03-31 12:41 - 03927248 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_30.dll 2014-09-02 18:42 - 2006-03-31 12:40 - 02388176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_30.dll 2014-09-02 18:42 - 2006-03-31 12:40 - 00352464 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_1.dll 2014-09-02 18:42 - 2006-03-31 12:39 - 00229584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_1.dll 2014-09-02 18:42 - 2006-03-31 12:39 - 00083664 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_1.dll 2014-09-02 18:42 - 2006-03-31 12:39 - 00062672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_1.dll 2014-09-02 18:42 - 2006-02-03 08:43 - 03830992 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_29.dll 2014-09-02 18:42 - 2006-02-03 08:43 - 02332368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_29.dll 2014-09-02 18:42 - 2006-02-03 08:42 - 00355536 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_0.dll 2014-09-02 18:42 - 2006-02-03 08:42 - 00230096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_0.dll 2014-09-02 18:42 - 2006-02-03 08:41 - 00016592 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_0.dll 2014-09-02 18:42 - 2006-02-03 08:41 - 00014032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_0.dll 2014-09-02 18:42 - 2005-12-05 18:09 - 03815120 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_28.dll 2014-09-02 18:42 - 2005-12-05 18:09 - 02323664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_28.dll 2014-09-02 18:42 - 2005-07-22 19:59 - 03807440 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_27.dll 2014-09-02 18:42 - 2005-07-22 19:59 - 02319568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_27.dll 2014-09-02 18:42 - 2005-05-26 15:34 - 03767504 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_26.dll 2014-09-02 18:42 - 2005-05-26 15:34 - 02297552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_26.dll 2014-09-02 18:42 - 2005-03-18 17:19 - 03823312 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_25.dll 2014-09-02 18:42 - 2005-03-18 17:19 - 02337488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_25.dll 2014-09-02 18:42 - 2005-02-05 19:45 - 03544272 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_24.dll 2014-09-02 18:42 - 2005-02-05 19:45 - 02222800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_24.dll 2014-09-02 18:40 - 2014-09-02 18:42 - 00000000 ___HD () C:\Windows\msdownld.tmp 2014-09-02 18:40 - 2014-09-02 18:42 - 00000000 ____D () C:\Windows\SysWOW64\directx 2014-09-02 18:34 - 2014-09-02 18:34 - 00000000 ____D () C:\Program Files (x86)\LAV Filters 2014-09-02 18:30 - 2014-09-02 18:35 - 00000000 ____D () C:\Program Files (x86)\DVBViewer 2014-09-02 18:30 - 2014-09-02 18:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVBViewer 2014-09-02 18:30 - 2014-09-02 18:30 - 00000000 ____D () C:\ProgramData\CMUV 2014-09-01 20:13 - 2014-09-01 20:13 - 00002410 _____ () C:\Windows\SysWOW64\cplLogon.tsk 2014-09-01 20:13 - 2014-09-01 20:13 - 00000000 ____D () C:\Program Files\Logon Screen 2014-09-01 19:56 - 2014-09-01 19:56 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\Canneverbe Limited 2014-09-01 19:56 - 2014-09-01 19:56 - 00000000 ____D () C:\ProgramData\Canneverbe Limited 2014-09-01 19:56 - 2014-09-01 19:56 - 00000000 ____D () C:\Program Files (x86)\CDBurnerXP 2014-09-01 19:52 - 2014-09-01 19:52 - 00000000 ____D () C:\Users\Admin\Documents\AnyDVDHD 2014-09-01 19:50 - 2014-09-01 19:50 - 00000040 ___SH () C:\ProgramData\.zreglib 2014-09-01 19:49 - 2014-09-01 19:49 - 00000000 ____D () C:\ProgramData\SlySoft 2014-09-01 19:49 - 2014-09-01 19:49 - 00000000 ____D () C:\Program Files (x86)\SlySoft 2014-09-01 19:43 - 2014-09-01 19:43 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\Oracle 2014-09-01 19:41 - 2014-09-01 19:41 - 00272808 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe 2014-09-01 19:41 - 2014-09-01 19:41 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe 2014-09-01 19:41 - 2014-09-01 19:41 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe 2014-09-01 19:41 - 2014-09-01 19:41 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll 2014-09-01 19:41 - 2014-09-01 19:41 - 00000000 ____D () C:\ProgramData\Sun 2014-09-01 19:41 - 2014-09-01 19:41 - 00000000 ____D () C:\ProgramData\Oracle 2014-09-01 19:41 - 2014-09-01 19:41 - 00000000 ____D () C:\Program Files (x86)\Java 2014-09-01 19:38 - 2014-09-07 19:57 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-09-01 19:38 - 2014-09-01 19:38 - 00699568 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2014-09-01 19:38 - 2014-09-01 19:38 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2014-09-01 19:38 - 2014-09-01 19:38 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater 2014-09-01 19:38 - 2014-09-01 19:38 - 00000000 ____D () C:\Windows\SysWOW64\Macromed 2014-09-01 19:38 - 2014-09-01 19:38 - 00000000 ____D () C:\Windows\system32\Macromed 2014-09-01 19:38 - 2014-09-01 19:38 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\Macromedia 2014-09-01 19:38 - 2014-09-01 19:38 - 00000000 ____D () C:\Users\Admin\AppData\Local\Macromedia 2014-09-01 19:36 - 2014-09-01 19:50 - 00000000 ____D () C:\ProgramData\Adobe 2014-09-01 19:36 - 2014-09-01 19:36 - 00000000 ____D () C:\Program Files (x86)\Adobe 2014-09-01 18:51 - 2014-09-01 18:51 - 00001436 _____ () C:\Users\Bine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2014-09-01 18:51 - 2014-09-01 18:51 - 00000000 ____D () C:\Users\Bine\AppData\Roaming\Mozilla 2014-09-01 18:51 - 2014-09-01 18:51 - 00000000 ____D () C:\Users\Bine\AppData\Roaming\Adobe 2014-09-01 18:51 - 2014-09-01 18:51 - 00000000 ____D () C:\Users\Bine\AppData\Local\Mozilla 2014-09-01 18:50 - 2014-09-01 18:51 - 00000000 ____D () C:\Users\Bine 2014-09-01 18:50 - 2014-09-01 18:50 - 00000020 ___SH () C:\Users\Bine\ntuser.ini 2014-09-01 18:50 - 2014-09-01 18:50 - 00000000 _SHDL () C:\Users\Bine\Vorlagen 2014-09-01 18:50 - 2014-09-01 18:50 - 00000000 _SHDL () C:\Users\Bine\Startmenü 2014-09-01 18:50 - 2014-09-01 18:50 - 00000000 _SHDL () C:\Users\Bine\Netzwerkumgebung 2014-09-01 18:50 - 2014-09-01 18:50 - 00000000 _SHDL () C:\Users\Bine\Lokale Einstellungen 2014-09-01 18:50 - 2014-09-01 18:50 - 00000000 _SHDL () C:\Users\Bine\Eigene Dateien 2014-09-01 18:50 - 2014-09-01 18:50 - 00000000 _SHDL () C:\Users\Bine\Druckumgebung 2014-09-01 18:50 - 2014-09-01 18:50 - 00000000 _SHDL () C:\Users\Bine\Documents\Eigene Musik 2014-09-01 18:50 - 2014-09-01 18:50 - 00000000 _SHDL () C:\Users\Bine\Documents\Eigene Bilder 2014-09-01 18:50 - 2014-09-01 18:50 - 00000000 _SHDL () C:\Users\Bine\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-09-01 18:50 - 2014-09-01 18:50 - 00000000 _SHDL () C:\Users\Bine\AppData\Local\Verlauf 2014-09-01 18:50 - 2014-09-01 18:50 - 00000000 _SHDL () C:\Users\Bine\AppData\Local\Anwendungsdaten 2014-09-01 18:50 - 2014-09-01 18:50 - 00000000 _SHDL () C:\Users\Bine\Anwendungsdaten 2014-09-01 18:50 - 2014-09-01 18:50 - 00000000 ____D () C:\Users\Bine\AppData\Local\VirtualStore 2014-09-01 18:50 - 2014-08-26 11:40 - 00000000 ____D () C:\Users\Bine\AppData\Local\Microsoft Help 2014-09-01 18:50 - 2009-07-14 06:54 - 00000000 ___RD () C:\Users\Bine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2014-09-01 18:50 - 2009-07-14 06:49 - 00000000 ___RD () C:\Users\Bine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance 2014-09-01 17:47 - 2014-09-01 17:47 - 00106272 _____ (G Data Software) C:\Windows\system32\Drivers\GRD.sys 2014-09-01 17:47 - 2014-09-01 17:47 - 00018160 _____ (G Data Software) C:\Windows\system32\Drivers\GdPhyMem.sys 2014-09-01 17:40 - 2014-09-01 17:40 - 00000000 ___HD () C:\ProgramData\CanonIJScan 2014-09-01 17:35 - 2014-09-01 17:40 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\Canon 2014-09-01 17:32 - 2014-09-01 17:35 - 00000000 ____D () C:\Program Files (x86)\Canon 2014-09-01 17:32 - 2014-09-01 17:32 - 00000000 ____D () C:\Windows\system32\STRING 2014-09-01 17:32 - 2014-09-01 17:32 - 00000000 ____D () C:\ProgramData\Canon IJ Network Tool 2014-09-01 17:32 - 2012-06-14 17:18 - 00366592 _____ (CANON INC.) C:\Windows\SysWOW64\CNMNPPM.DLL 2014-09-01 17:32 - 2012-06-14 17:18 - 00359936 _____ (CANON INC.) C:\Windows\system32\CNMN6PPM.DLL 2014-09-01 17:32 - 2012-06-14 17:18 - 00039424 _____ (CANON INC.) C:\Windows\system32\CNMN6UI.DLL 2014-09-01 17:32 - 2009-09-17 09:12 - 00303104 _____ (CANON INC.) C:\Windows\SysWOW64\CNC640L.dll 2014-09-01 17:32 - 2009-04-03 15:57 - 00106496 _____ (CANON INC.) C:\Windows\SysWOW64\CNC640U.dll 2014-09-01 17:32 - 2008-12-25 16:23 - 00013312 _____ () C:\Windows\SysWOW64\CNC173FD.TBL 2014-09-01 17:32 - 2008-08-25 18:02 - 00015872 _____ (CANON INC.) C:\Windows\SysWOW64\CNHMCA.dll 2014-09-01 17:31 - 2014-09-01 17:31 - 00000000 ___HD () C:\Windows\system32\CanonIJ Uninstaller Information 2014-09-01 17:31 - 2014-09-01 17:31 - 00000000 ___HD () C:\ProgramData\CanonBJ 2014-09-01 17:31 - 2010-04-24 05:00 - 00336896 _____ (CANON INC.) C:\Windows\system32\CNMLMA2.DLL 2014-09-01 17:30 - 2014-09-01 17:30 - 00000000 ___HD () C:\Program Files\CanonBJ 2014-09-01 17:30 - 2009-03-18 09:10 - 00244736 _____ (CANON INC.) C:\Windows\system32\CNMIUA2.DLL 2014-09-01 16:29 - 2014-09-01 16:29 - 00000000 ____D () C:\Users\Admin\AppData\Local\G DATA 2014-09-01 15:52 - 2014-09-01 15:52 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\Thunderbird 2014-09-01 15:52 - 2014-09-01 15:52 - 00000000 ____D () C:\Users\Admin\AppData\Local\Thunderbird 2014-09-01 15:52 - 2014-09-01 15:52 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird 2014-08-29 11:18 - 2014-08-29 11:18 - 00000000 ____D () C:\Wallpapers 2014-08-29 11:16 - 2014-08-29 11:16 - 00000000 ____D () C:\Users\Admin\AppData\Local\Apps\2.0 2014-08-29 11:07 - 2014-08-23 04:10 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll 2014-08-29 11:07 - 2014-08-23 03:45 - 00311296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll 2014-08-29 11:07 - 2014-08-23 02:59 - 03166720 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2014-08-26 11:40 - 2014-08-26 11:40 - 00000000 ____D () C:\Users\Default\AppData\Local\Microsoft Help 2014-08-26 11:40 - 2014-08-26 11:40 - 00000000 ____D () C:\Users\Default User\AppData\Local\Microsoft Help 2014-08-26 11:40 - 2014-08-26 11:40 - 00000000 ____D () C:\Program Files\Common Files\DESIGNER 2014-08-26 11:24 - 2014-09-07 15:35 - 00003758 _____ () C:\Windows\System32\Tasks\AutoKMS 2014-08-26 11:24 - 2014-08-26 11:28 - 00000000 ____D () C:\Windows\AutoKMS 2014-08-26 11:24 - 2014-08-26 11:24 - 00000000 ____D () C:\ProgramData\Microsoft Toolkit 2014-08-26 11:19 - 2014-08-26 11:19 - 00000000 ____D () C:\Windows\System32\Tasks\OfficeSoftwareProtectionPlatform 2014-08-26 11:18 - 2014-08-26 11:18 - 00000000 ____D () C:\Windows\PCHEALTH 2014-08-26 11:18 - 2014-08-26 11:18 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2014-08-26 11:18 - 2014-08-26 11:18 - 00000000 ____D () C:\Program Files\Microsoft Synchronization Services 2014-08-26 11:18 - 2014-08-26 11:18 - 00000000 ____D () C:\Program Files\Microsoft SQL Server Compact Edition 2014-08-26 11:18 - 2014-08-26 11:18 - 00000000 ____D () C:\Program Files\Microsoft Analysis Services 2014-08-26 11:18 - 2014-08-26 11:18 - 00000000 ____D () C:\Program Files (x86)\Microsoft Analysis Services 2014-08-26 11:17 - 2014-08-26 11:41 - 00000000 ____D () C:\ProgramData\Microsoft Help 2014-08-26 11:17 - 2014-08-26 11:18 - 00000000 ____D () C:\Program Files\Microsoft Office 2014-08-26 11:17 - 2014-08-26 11:17 - 00000000 __RHD () C:\MSOCache 2014-08-26 11:17 - 2014-08-26 11:17 - 00000000 ____D () C:\Users\Admin\AppData\Local\Microsoft Help 2014-08-26 11:17 - 2014-08-26 11:17 - 00000000 ____D () C:\Program Files (x86)\Microsoft Office 2014-08-26 10:57 - 2014-08-26 10:57 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip 2014-08-26 10:57 - 2014-08-26 10:57 - 00000000 ____D () C:\Program Files\7-Zip 2014-08-25 12:09 - 2014-08-25 12:09 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\Intel Corporation 2014-08-25 12:09 - 2014-08-25 12:09 - 00000000 ____D () C:\ProgramData\Intel 2014-08-25 12:08 - 2014-08-25 12:08 - 00000000 ____D () C:\Users\Admin\Intel 2014-08-25 11:58 - 2014-09-04 16:19 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information 2014-08-25 11:58 - 2014-08-25 11:58 - 00000000 ____D () C:\Windows\SysWOW64\Atheros_L1e 2014-08-25 11:58 - 2013-07-18 07:54 - 00129224 _____ (Qualcomm Atheros Co., Ltd.) C:\Windows\system32\Drivers\L1C62x64.sys 2014-08-25 11:52 - 2014-08-25 11:52 - 00000000 ____D () C:\Program Files\DigitalDevices 2014-08-25 11:49 - 2014-08-25 11:50 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\Mozilla 2014-08-25 11:49 - 2014-08-25 11:50 - 00000000 ____D () C:\Users\Admin\AppData\Local\Mozilla 2014-08-25 11:46 - 2014-08-25 11:46 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_iusb3hcs_01009.Wdf 2014-08-25 11:45 - 2013-04-26 10:24 - 00041984 _____ (Intel Corporation) C:\Windows\system32\Drivers\USB3Ver.dll 2014-08-25 11:39 - 2013-08-05 05:50 - 00053248 _____ (Windows XP Bundled build C-Centric Single User) C:\Windows\SysWOW64\CSVer.dll 2014-08-25 11:13 - 2014-08-25 11:13 - 00000000 ____D () C:\Program Files\Microsoft Silverlight 2014-08-25 11:13 - 2014-08-25 11:13 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight 2014-08-25 11:10 - 2014-08-25 11:10 - 00000000 ____D () C:\Users\Admin\AppData\Local\WindowsUpdate 2014-08-25 11:07 - 2014-01-09 04:22 - 05694464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll 2014-08-25 11:07 - 2014-01-04 00:44 - 06574592 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll 2014-08-25 11:02 - 2013-10-02 04:22 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys 2014-08-25 11:02 - 2013-10-02 04:11 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe 2014-08-25 11:02 - 2013-10-02 04:08 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll 2014-08-25 11:02 - 2013-10-02 03:48 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\MsRdpWebAccess.dll 2014-08-25 11:02 - 2013-10-02 03:48 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\wksprtPS.dll 2014-08-25 11:02 - 2013-10-02 03:29 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll 2014-08-25 11:02 - 2013-10-02 03:10 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll 2014-08-25 11:02 - 2013-10-02 02:15 - 01057280 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll 2014-08-25 11:02 - 2013-10-02 02:14 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MsRdpWebAccess.dll 2014-08-25 11:02 - 2013-10-02 02:14 - 00017920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wksprtPS.dll 2014-08-25 11:02 - 2013-10-02 02:08 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe 2014-08-25 11:02 - 2013-10-02 02:01 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe 2014-08-25 11:02 - 2013-10-02 01:58 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll 2014-08-25 11:02 - 2013-10-02 01:31 - 01147392 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe 2014-08-25 11:02 - 2013-10-02 01:08 - 00855552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll 2014-08-25 11:02 - 2013-10-02 00:34 - 01068544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe 2014-08-25 11:02 - 2013-09-25 04:23 - 01030144 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll 2014-08-25 11:02 - 2013-09-25 03:57 - 00792576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll 2014-08-25 10:57 - 2014-08-25 10:57 - 00000144 _____ () C:\Windows\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat 2014-08-25 10:53 - 2014-09-06 15:19 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service 2014-08-25 10:53 - 2014-08-25 10:53 - 00000000 ____D () C:\ProgramData\Mozilla 2014-08-25 10:52 - 2014-09-03 20:03 - 00000510 _____ () C:\Windows\system32\{F33C3B9B-72AF-418A-B3FD-560646F7CDA2}.bat 2014-08-25 10:52 - 2014-08-25 10:52 - 00003538 _____ () C:\Windows\System32\Tasks\CreateChoiceProcessTask 2014-08-25 10:52 - 2014-08-25 10:52 - 00000000 __SHD () C:\Users\Admin\AppData\Local\EmieUserList 2014-08-25 10:52 - 2014-08-25 10:52 - 00000000 __SHD () C:\Users\Admin\AppData\Local\EmieSiteList 2014-08-25 10:47 - 2014-08-25 12:09 - 01645874 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI 2014-08-25 10:41 - 2014-08-25 10:41 - 00000000 ____D () C:\Windows\system32\MRT 2014-08-25 10:41 - 2014-07-31 23:41 - 99218768 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2014-08-25 10:40 - 2010-02-23 10:16 - 00294912 _____ (Microsoft Corporation) C:\Windows\system32\browserchoice.exe 2014-08-25 10:39 - 2014-09-03 20:03 - 00000000 ____D () C:\Intel 2014-08-25 10:39 - 2014-08-25 12:09 - 00000000 ____D () C:\Program Files\Intel 2014-08-25 10:39 - 2014-08-25 11:45 - 00000000 ____D () C:\Program Files (x86)\Intel 2014-08-25 10:39 - 2014-08-14 00:24 - 00082432 _____ (Khronos Group) C:\Windows\system32\OpenCL.DLL 2014-08-25 10:39 - 2014-08-14 00:24 - 00074752 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.DLL 2014-08-25 10:35 - 2014-08-25 10:35 - 00000000 ___SD () C:\Windows\system32\CompatTel 2014-08-25 10:35 - 2014-08-01 01:41 - 00348856 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2014-08-25 10:35 - 2014-08-01 01:16 - 00307384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2014-08-25 10:35 - 2014-07-25 16:52 - 23645696 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-08-25 10:35 - 2014-07-25 16:02 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-08-25 10:35 - 2014-07-25 16:01 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2014-08-25 10:35 - 2014-07-25 15:51 - 17524224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-08-25 10:35 - 2014-07-25 15:30 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-08-25 10:35 - 2014-07-25 15:28 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2014-08-25 10:35 - 2014-07-25 15:28 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2014-08-25 10:35 - 2014-07-25 15:25 - 02774528 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-08-25 10:35 - 2014-07-25 15:25 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2014-08-25 10:35 - 2014-07-25 15:11 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-08-25 10:35 - 2014-07-25 15:10 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-08-25 10:35 - 2014-07-25 15:04 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2014-08-25 10:35 - 2014-07-25 15:03 - 00598016 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-08-25 10:35 - 2014-07-25 15:00 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2014-08-25 10:35 - 2014-07-25 15:00 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2014-08-25 10:35 - 2014-07-25 14:59 - 00758272 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2014-08-25 10:35 - 2014-07-25 14:47 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2014-08-25 10:35 - 2014-07-25 14:40 - 00452096 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2014-08-25 10:35 - 2014-07-25 14:34 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2014-08-25 10:35 - 2014-07-25 14:34 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2014-08-25 10:35 - 2014-07-25 14:33 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2014-08-25 10:35 - 2014-07-25 14:30 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2014-08-25 10:35 - 2014-07-25 14:28 - 05824512 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-08-25 10:35 - 2014-07-25 14:28 - 00072704 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2014-08-25 10:35 - 2014-07-25 14:21 - 02184704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2014-08-25 10:35 - 2014-07-25 14:19 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-08-25 10:35 - 2014-07-25 14:18 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2014-08-25 10:35 - 2014-07-25 14:17 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2014-08-25 10:35 - 2014-07-25 14:17 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2014-08-25 10:35 - 2014-07-25 14:12 - 00438784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2014-08-25 10:35 - 2014-07-25 14:10 - 00292864 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2014-08-25 10:35 - 2014-07-25 14:10 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2014-08-25 10:35 - 2014-07-25 14:08 - 00597504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2014-08-25 10:35 - 2014-07-25 14:06 - 04204032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2014-08-25 10:35 - 2014-07-25 13:52 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2014-08-25 10:35 - 2014-07-25 13:47 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-08-25 10:35 - 2014-07-25 13:43 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2014-08-25 10:35 - 2014-07-25 13:42 - 00692736 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-08-25 10:35 - 2014-07-25 13:39 - 02087936 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-08-25 10:35 - 2014-07-25 13:39 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2014-08-25 10:35 - 2014-07-25 13:36 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2014-08-25 10:35 - 2014-07-25 13:34 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2014-08-25 10:35 - 2014-07-25 13:29 - 00239616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2014-08-25 10:35 - 2014-07-25 13:23 - 13547008 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-08-25 10:35 - 2014-07-25 13:13 - 00526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2014-08-25 10:35 - 2014-07-25 13:07 - 02001920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2014-08-25 10:35 - 2014-07-25 13:07 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2014-08-25 10:35 - 2014-07-25 13:03 - 11772928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2014-08-25 10:35 - 2014-07-25 12:52 - 02266624 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-08-25 10:35 - 2014-07-25 12:26 - 01431040 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-08-25 10:35 - 2014-07-25 12:17 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2014-08-25 10:35 - 2014-07-25 12:09 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2014-08-25 10:35 - 2014-07-25 12:05 - 01792512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2014-08-25 10:35 - 2014-07-25 12:00 - 01169920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2014-08-25 10:35 - 2014-07-16 05:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll 2014-08-25 10:35 - 2014-07-16 04:46 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll 2014-08-25 10:35 - 2014-07-01 00:24 - 00008856 _____ (Microsoft Corporation) C:\Windows\system32\icardres.dll 2014-08-25 10:35 - 2014-07-01 00:14 - 00008856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardres.dll 2014-08-25 10:35 - 2014-06-25 04:06 - 14179328 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll 2014-08-25 10:35 - 2014-06-25 03:37 - 12877312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll 2014-08-25 10:35 - 2014-06-18 04:18 - 00692736 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe 2014-08-25 10:35 - 2014-06-18 03:51 - 00646144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\osk.exe 2014-08-25 10:35 - 2014-06-06 12:10 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll 2014-08-25 10:35 - 2014-06-06 11:44 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll 2014-08-25 10:35 - 2014-06-06 08:16 - 00035480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TsWpfWrp.exe 2014-08-25 10:35 - 2014-06-06 08:12 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe 2014-08-25 10:35 - 2014-06-03 12:02 - 03241984 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll 2014-08-25 10:35 - 2014-06-03 12:02 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll 2014-08-25 10:35 - 2014-06-03 11:29 - 02363392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll 2014-08-25 10:35 - 2014-06-03 11:29 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll 2014-08-25 10:35 - 2014-06-03 04:42 - 01942016 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll 2014-08-25 10:35 - 2014-06-03 04:42 - 00112576 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe 2014-08-25 10:35 - 2014-06-03 04:13 - 01806336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll 2014-08-25 10:35 - 2014-05-08 11:32 - 03178496 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll 2014-08-25 10:35 - 2014-05-08 11:32 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\RdpGroupPolicyExtension.dll 2014-08-25 10:35 - 2014-04-12 04:32 - 01164800 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll 2014-08-25 10:35 - 2014-04-12 04:32 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll 2014-08-25 10:35 - 2014-04-12 04:32 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll 2014-08-25 10:35 - 2014-04-12 04:32 - 00215552 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll 2014-08-25 10:35 - 2014-04-12 04:32 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll 2014-08-25 10:35 - 2014-04-12 04:32 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll 2014-08-25 10:35 - 2014-04-12 04:31 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe 2014-08-25 10:35 - 2014-04-12 04:31 - 00148480 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe 2014-08-25 10:35 - 2014-04-12 04:31 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe 2014-08-25 10:35 - 2014-04-12 04:31 - 00058368 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll 2014-08-25 10:35 - 2014-04-12 04:31 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll 2014-08-25 10:35 - 2014-04-12 04:31 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll 2014-08-25 10:35 - 2014-04-12 04:31 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe 2014-08-25 10:35 - 2014-04-12 04:28 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll 2014-08-25 10:35 - 2014-04-12 04:28 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 04:28 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 04:28 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 04:28 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 04:28 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 04:28 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 04:28 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 04:28 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 04:28 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 04:28 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 04:28 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 04:28 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 04:28 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 04:28 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 04:28 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 04:28 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 04:28 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 04:28 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 04:28 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 04:28 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 04:28 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 04:28 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 04:28 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 04:28 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 04:28 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 04:28 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 04:28 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 04:28 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 04:06 - 00050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll 2014-08-25 10:35 - 2014-04-12 04:06 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe 2014-08-25 10:35 - 2014-04-12 04:06 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll 2014-08-25 10:35 - 2014-04-12 04:05 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll 2014-08-25 10:35 - 2014-04-12 04:05 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll 2014-08-25 10:35 - 2014-04-12 04:03 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll 2014-08-25 10:35 - 2014-04-12 04:03 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 04:03 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 04:03 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 04:03 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 04:03 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 04:03 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 04:03 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 04:03 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 04:03 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 04:03 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 04:03 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 04:03 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 04:03 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 04:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 04:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 04:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 04:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 04:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 04:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 04:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 04:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 04:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 04:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 04:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 03:34 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys 2014-08-25 10:35 - 2014-04-12 03:03 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe 2014-08-25 10:35 - 2014-04-12 03:03 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe 2014-08-25 10:35 - 2014-04-12 03:00 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 03:00 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 03:00 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll 2014-08-25 10:35 - 2014-04-12 03:00 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll 2014-08-25 10:35 - 2014-04-05 04:37 - 01897408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys 2014-08-25 10:35 - 2014-04-05 04:37 - 00376768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys 2014-08-25 10:35 - 2014-04-05 04:37 - 00288192 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS 2014-08-25 10:35 - 2014-03-26 16:44 - 01882112 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll 2014-08-25 10:35 - 2014-03-26 16:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll 2014-08-25 10:35 - 2014-03-26 16:27 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll 2014-08-25 10:35 - 2014-03-26 16:25 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll 2014-08-25 10:35 - 2014-03-26 04:39 - 02001920 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll 2014-08-25 10:35 - 2014-03-26 04:36 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll 2014-08-25 10:35 - 2014-03-26 04:13 - 01388544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll 2014-08-25 10:35 - 2014-03-26 04:10 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6r.dll 2014-08-25 10:35 - 2014-03-09 23:48 - 01389208 _____ (Microsoft Corporation) C:\Windows\system32\icardagt.exe 2014-08-25 10:35 - 2014-03-09 23:48 - 00171160 _____ (Microsoft Corporation) C:\Windows\system32\infocardapi.dll 2014-08-25 10:35 - 2014-03-09 23:47 - 00619672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardagt.exe 2014-08-25 10:35 - 2014-03-09 23:47 - 00099480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\infocardapi.dll 2014-08-25 10:35 - 2014-03-04 13:11 - 05553088 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2014-08-25 10:35 - 2014-03-04 13:08 - 00455680 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe 2014-08-25 10:35 - 2014-03-04 13:08 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\cngprovider.dll 2014-08-25 10:35 - 2014-03-04 13:08 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\capiprovider.dll 2014-08-25 10:35 - 2014-03-04 13:08 - 00058880 _____ (Microsoft Corporation) C:\Windows\system32\adprovider.dll 2014-08-25 10:35 - 2014-03-04 13:08 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\dpapiprovider.dll 2014-08-25 10:35 - 2014-03-04 13:08 - 00046592 _____ (Microsoft Corporation) C:\Windows\system32\dimsroam.dll 2014-08-25 10:35 - 2014-03-04 13:08 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\wincredprovider.dll 2014-08-25 10:35 - 2014-03-04 12:42 - 03974080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe 2014-08-25 10:35 - 2014-03-04 12:42 - 03918784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe 2014-08-25 10:35 - 2014-03-04 12:39 - 00056320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cngprovider.dll 2014-08-25 10:35 - 2014-03-04 12:39 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\capiprovider.dll 2014-08-25 10:35 - 2014-03-04 12:39 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adprovider.dll 2014-08-25 10:35 - 2014-03-04 12:39 - 00049152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpapiprovider.dll 2014-08-25 10:35 - 2014-03-04 12:39 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dimsroam.dll 2014-08-25 10:35 - 2014-03-04 12:39 - 00038912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wincredprovider.dll 2014-08-25 10:35 - 2014-03-04 11:44 - 00722944 _____ (Microsoft Corporation) C:\Windows\system32\objsel.dll 2014-08-25 10:35 - 2014-03-04 11:17 - 00538112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\objsel.dll 2014-08-25 10:35 - 2014-02-04 04:35 - 00274880 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys 2014-08-25 10:35 - 2014-02-04 04:35 - 00190912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys 2014-08-25 10:35 - 2014-02-04 04:35 - 00027584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys 2014-08-25 10:35 - 2014-02-04 04:28 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\iologmsg.dll 2014-08-25 10:35 - 2014-02-04 04:00 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iologmsg.dll 2014-08-25 10:35 - 2013-12-25 01:09 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll 2014-08-25 10:35 - 2013-12-25 00:48 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll 2014-08-25 10:35 - 2013-12-04 04:27 - 00488448 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll 2014-08-25 10:35 - 2013-12-04 04:27 - 00485888 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll 2014-08-25 10:35 - 2013-12-04 04:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll 2014-08-25 10:35 - 2013-12-04 04:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll 2014-08-25 10:35 - 2013-12-04 04:26 - 00528384 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll 2014-08-25 10:35 - 2013-12-04 04:16 - 00658432 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe 2014-08-25 10:35 - 2013-12-04 04:16 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe 2014-08-25 10:35 - 2013-12-04 04:16 - 00553984 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe 2014-08-25 10:35 - 2013-12-04 04:16 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe 2014-08-25 10:35 - 2013-12-04 04:03 - 00428032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc.dll 2014-08-25 10:35 - 2013-12-04 04:03 - 00423936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_isv.dll 2014-08-25 10:35 - 2013-12-04 04:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp_isv.dll 2014-08-25 10:35 - 2013-12-04 04:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp.dll 2014-08-25 10:35 - 2013-12-04 04:02 - 00390144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdrm.dll 2014-08-25 10:35 - 2013-12-04 03:54 - 00594944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_isv.exe 2014-08-25 10:35 - 2013-12-04 03:54 - 00572416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate.exe 2014-08-25 10:35 - 2013-12-04 03:54 - 00510976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp.exe 2014-08-25 10:35 - 2013-12-04 03:54 - 00508928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp_isv.exe 2014-08-25 10:35 - 2013-11-26 10:16 - 03419136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll 2014-08-25 10:35 - 2013-11-23 00:48 - 03928064 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll 2014-08-25 10:35 - 2011-04-09 08:58 - 00142336 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe 2014-08-25 10:35 - 2011-04-09 07:56 - 00123904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe 2014-08-25 10:34 - 2014-06-16 04:10 - 00985536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys 2014-08-25 10:34 - 2014-05-30 08:45 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys 2014-08-25 10:34 - 2014-04-25 04:27 - 00801792 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll 2014-08-25 10:34 - 2014-04-25 03:58 - 00626688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usp10.dll 2014-08-25 10:34 - 2014-03-04 13:08 - 00421376 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll 2014-08-25 10:34 - 2014-03-04 12:38 - 00275456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll 2014-08-25 10:34 - 2014-01-29 04:32 - 00484864 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll 2014-08-25 10:34 - 2014-01-29 04:06 - 00381440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll 2014-08-25 10:34 - 2014-01-28 04:32 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll 2014-08-25 10:34 - 2014-01-24 04:40 - 01684416 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys 2014-08-25 10:34 - 2013-11-27 03:41 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys 2014-08-25 10:34 - 2013-11-27 03:41 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys 2014-08-25 10:34 - 2013-11-27 03:41 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys 2014-08-25 10:34 - 2013-11-27 03:41 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys 2014-08-25 10:34 - 2013-11-27 03:41 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys 2014-08-25 10:33 - 2014-06-05 16:44 - 01462272 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2014-08-25 10:33 - 2014-06-05 16:44 - 00463872 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll 2014-08-25 10:33 - 2014-06-05 16:44 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2014-08-25 10:33 - 2014-06-05 16:16 - 00342528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll 2014-08-25 10:33 - 2014-06-05 16:16 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll 2014-08-25 10:33 - 2014-06-05 16:16 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll 2014-08-25 10:33 - 2014-06-05 16:15 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll 2014-08-25 10:33 - 2014-04-12 04:34 - 00155072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys 2014-08-25 10:33 - 2014-04-12 04:34 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys 2014-08-25 10:33 - 2014-04-12 04:32 - 00307712 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll 2014-08-25 10:33 - 2014-04-12 04:32 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll 2014-08-25 10:33 - 2014-04-12 04:32 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll 2014-08-25 10:33 - 2014-04-12 04:32 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll 2014-08-25 10:33 - 2014-04-12 04:31 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe 2014-08-25 10:33 - 2014-04-12 04:31 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe 2014-08-25 10:33 - 2014-04-12 04:30 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll 2014-08-25 10:33 - 2014-04-12 04:29 - 00145920 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll 2014-08-25 10:33 - 2014-04-12 04:28 - 00685056 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll 2014-08-25 10:33 - 2014-04-12 04:06 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll 2014-08-25 10:33 - 2014-04-12 04:06 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe 2014-08-25 10:33 - 2014-04-12 04:04 - 00145920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll 2014-08-25 10:33 - 2014-04-12 04:04 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll 2014-08-25 10:33 - 2014-04-12 04:03 - 00685056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll 2014-08-25 10:33 - 2014-03-04 13:08 - 00729088 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll 2014-08-25 10:33 - 2014-03-04 13:08 - 00315904 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll 2014-08-25 10:33 - 2014-03-04 13:08 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll 2014-08-25 10:33 - 2014-03-04 13:08 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll 2014-08-25 10:33 - 2014-03-04 13:08 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll 2014-08-25 10:33 - 2014-03-04 12:39 - 00551424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll 2014-08-25 10:33 - 2014-03-04 12:39 - 00260096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll 2014-08-25 10:33 - 2014-03-04 12:39 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll 2014-08-25 10:33 - 2014-03-04 12:39 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll 2014-08-25 10:33 - 2014-03-04 12:39 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll 2014-08-25 10:33 - 2014-02-04 04:32 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll 2014-08-25 10:33 - 2014-02-04 04:04 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll 2014-08-25 10:32 - 2014-08-07 04:06 - 00529920 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2014-08-25 10:32 - 2014-08-07 04:01 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2014-08-25 10:32 - 2014-07-14 03:52 - 01215488 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll 2014-08-25 10:32 - 2014-07-14 03:52 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll 2014-08-25 10:32 - 2014-07-14 03:42 - 00141312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpchttp.dll 2014-08-25 10:32 - 2014-07-14 03:41 - 00665088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll 2014-08-25 10:25 - 2014-09-04 16:19 - 00009734 _____ () C:\Windows\DPINST.LOG 2014-08-25 10:25 - 2014-08-25 10:56 - 00142336 _____ (G Data Software AG) C:\Windows\system32\Drivers\MiniIcpt.sys 2014-08-25 10:25 - 2014-08-25 10:56 - 00064000 _____ (G Data Software AG) C:\Windows\system32\Drivers\PktIcpt.sys 2014-08-25 10:25 - 2014-08-25 10:56 - 00064000 _____ (G Data Software AG) C:\Windows\system32\Drivers\gdwfpcd64.sys 2014-08-25 10:25 - 2014-08-25 10:56 - 00061440 _____ (G Data Software AG) C:\Windows\system32\Drivers\HookCentre.sys 2014-08-25 10:25 - 2014-08-25 10:56 - 00055808 _____ (G Data Software AG) C:\Windows\system32\Drivers\GDBehave.sys 2014-08-25 10:25 - 2014-08-25 10:56 - 00020992 _____ (G Data Software AG) C:\Windows\system32\Drivers\GDKBFlt64.sys 2014-08-25 10:25 - 2014-08-25 10:25 - 00000779 _____ () C:\Users\Admin\AppData\Roaming\gdscan.log 2014-08-25 10:25 - 2014-08-25 10:25 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_GDKBFlt64_01007.Wdf 2014-08-25 10:25 - 2014-08-25 10:25 - 00000000 ____D () C:\Program Files (x86)\G Data 2014-08-25 10:25 - 2014-08-25 10:25 - 00000000 _____ () C:\Users\Admin\AppData\Roaming\gdfw.log 2014-08-25 10:24 - 2014-08-25 10:49 - 00000000 ____D () C:\ProgramData\G Data 2014-08-25 10:23 - 2014-05-14 18:23 - 02477536 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll 2014-08-25 10:23 - 2014-05-14 18:23 - 00700384 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll 2014-08-25 10:23 - 2014-05-14 18:23 - 00581600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll 2014-08-25 10:23 - 2014-05-14 18:23 - 00058336 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe 2014-08-25 10:23 - 2014-05-14 18:23 - 00044512 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll 2014-08-25 10:23 - 2014-05-14 18:23 - 00038880 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll 2014-08-25 10:23 - 2014-05-14 18:23 - 00036320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll 2014-08-25 10:23 - 2014-05-14 18:21 - 02620928 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll 2014-08-25 10:23 - 2014-05-14 18:20 - 00097792 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll 2014-08-25 10:23 - 2014-05-14 18:17 - 00092672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll 2014-08-25 10:23 - 2014-05-14 09:23 - 00198600 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll 2014-08-25 10:23 - 2014-05-14 09:23 - 00179656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll 2014-08-25 10:23 - 2014-05-14 09:20 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe 2014-08-25 10:23 - 2014-05-14 09:17 - 00033792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe 2014-08-25 09:42 - 2014-09-04 15:42 - 00000000 ____D () C:\Users\Admin\AppData\Local\VirtualStore 2014-08-25 09:33 - 2014-08-26 11:24 - 00084688 _____ () C:\Users\Admin\AppData\Local\GDIPFONTCACHEV1.DAT 2014-08-25 09:08 - 2014-08-25 08:13 - 00000000 ____D () C:\Windows\Panther 2014-08-25 08:13 - 2014-09-04 16:20 - 00000000 ____D () C:\Users\Admin 2014-08-25 08:13 - 2014-09-03 20:24 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\Adobe 2014-08-25 08:13 - 2014-08-25 08:13 - 00000020 ___SH () C:\Users\Admin\ntuser.ini 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Musik 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Bilder 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Default\Vorlagen 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Default\Startmenü 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Default\Druckumgebung 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Admin\Vorlagen 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Admin\Startmenü 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Admin\Netzwerkumgebung 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Admin\Lokale Einstellungen 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Admin\Eigene Dateien 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Admin\Druckumgebung 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Admin\Documents\Eigene Musik 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Admin\Documents\Eigene Bilder 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Admin\AppData\Local\Verlauf 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Admin\AppData\Local\Anwendungsdaten 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Admin\Anwendungsdaten 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Programme 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\ProgramData\Vorlagen 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\ProgramData\Startmenü 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\ProgramData\Microsoft\Windows\Start Menu\Programme 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\ProgramData\Favoriten 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\ProgramData\Dokumente 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\ProgramData\Anwendungsdaten 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Program Files\Gemeinsame Dateien 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Dokumente und Einstellungen 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 __SHD () C:\Recovery 2014-08-25 08:13 - 2009-07-14 06:54 - 00000000 ___RD () C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2014-08-25 08:13 - 2009-07-14 06:49 - 00000000 ___RD () C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance 2014-08-25 08:10 - 2014-09-07 15:39 - 01343686 _____ () C:\Windows\WindowsUpdate.log 2014-08-25 08:10 - 2014-08-25 11:39 - 00000000 ____D () C:\Program Files\WinRAR 2014-08-25 08:10 - 2014-08-25 08:10 - 00001355 _____ () C:\Windows\TSSysprep.log 2014-08-25 08:09 - 2014-08-25 08:09 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdFs_01_09_00.Wdf 2014-08-21 12:58 - 2013-04-26 10:24 - 01721576 _____ (Microsoft Corporation) C:\Windows\system32\WdfCoInstaller01009.dll 2014-08-21 12:58 - 2013-04-26 10:24 - 00786416 _____ (Intel Corporation) C:\Windows\system32\Drivers\iusb3xhc.sys 2014-08-21 12:58 - 2013-04-26 10:24 - 00368112 _____ (Intel Corporation) C:\Windows\system32\Drivers\iusb3hub.sys 2014-08-21 12:58 - 2013-04-26 10:24 - 00020464 _____ (Intel Corporation) C:\Windows\system32\Drivers\iusb3hcs.sys 2014-08-20 16:00 - 2013-07-16 09:21 - 00121032 _____ (Qualcomm Atheros Co., Ltd.) C:\Windows\system32\Drivers\L1C60x64.sys 2014-08-14 00:24 - 2014-08-14 00:24 - 20068496 _____ (Intel Corporation) C:\Windows\system32\igdumdim64.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 04575208 _____ (Intel Corporation) C:\Windows\SysWOW64\igdusc32.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 01365504 _____ (Intel Corporation) C:\Windows\system32\igfxcmjit64.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 01137080 _____ (Intel Corporation) C:\Windows\system32\iglhsip64.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 01132960 _____ (Intel Corporation) C:\Windows\SysWOW64\iglhsip32.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 01061376 _____ (Intel Corporation) C:\Windows\SysWOW64\igfxcmjit32.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00734720 _____ (Intel Corporation) C:\Windows\system32\MetroIntelGenericUIFramework.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00453448 _____ () C:\Windows\system32\igfxTray.exe 2014-08-14 00:24 - 2014-08-14 00:24 - 00372736 _____ (Intel Corporation) C:\Windows\system32\igfxOSP.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00372224 _____ (Intel Corporation) C:\Windows\system32\IntelOpenCL64.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00304128 _____ (Intel Corporation) C:\Windows\SysWOW64\IntelOpenCL32.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00276808 _____ (Intel Corporation) C:\Windows\SysWOW64\IntelCpHeciSvc.exe 2014-08-14 00:24 - 2014-08-14 00:24 - 00254976 _____ () C:\Windows\system32\igfxCPL.cpl 2014-08-14 00:24 - 2014-08-14 00:24 - 00222720 _____ (Intel Corporation) C:\Windows\system32\igfxDTCM.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00220392 _____ (Intel Corporation) C:\Windows\system32\iglhcp64.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00212660 _____ () C:\Windows\system32\resTHA.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00207496 _____ (Intel Corporation) C:\Windows\system32\igfxcmrt64.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00206848 _____ (Intel Corporation) C:\Windows\system32\igfx11cmrt64.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00203812 _____ () C:\Windows\system32\resELL.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00199652 _____ () C:\Windows\system32\resRUS.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00191816 _____ (Intel Corporation) C:\Windows\system32\igfxext.exe 2014-08-14 00:24 - 2014-08-14 00:24 - 00184312 _____ (Intel Corporation) C:\Windows\SysWOW64\iglhcp32.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00182784 _____ (Intel Corporation) C:\Windows\system32\igfxCoIn_v3907.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00182356 _____ () C:\Windows\system32\resARA.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00181828 _____ () C:\Windows\system32\resJPN.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00181364 _____ () C:\Windows\system32\resHEB.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00176116 _____ () C:\Windows\system32\resFRA.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00176052 _____ () C:\Windows\system32\resHUN.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00175024 _____ (Intel Corporation) C:\Windows\SysWOW64\igfxcmrt32.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00174592 _____ (Intel Corporation) C:\Windows\SysWOW64\igfx11cmrt32.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00174340 _____ () C:\Windows\system32\resKOR.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00174004 _____ () C:\Windows\system32\resDEU.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00173748 _____ () C:\Windows\system32\resITA.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00173492 _____ () C:\Windows\system32\resROM.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00173460 _____ () C:\Windows\system32\resESN.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00173444 _____ () C:\Windows\system32\resSKY.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00173044 _____ () C:\Windows\system32\resPLK.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00172676 _____ () C:\Windows\system32\resNLD.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00171876 _____ () C:\Windows\system32\resPTB.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00171860 _____ () C:\Windows\system32\resTRK.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00171796 _____ () C:\Windows\system32\resCSY.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00171332 _____ () C:\Windows\system32\resPTG.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00171156 _____ () C:\Windows\system32\resFIN.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00170548 _____ () C:\Windows\system32\resHRV.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00170020 _____ () C:\Windows\system32\resSLV.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00170004 _____ () C:\Windows\system32\resSVE.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00168788 _____ () C:\Windows\system32\resNOR.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00168132 _____ () C:\Windows\system32\resDAN.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00166660 _____ () C:\Windows\system32\resENU.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00164836 _____ () C:\Windows\system32\resCHT.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00163652 _____ () C:\Windows\system32\resCHS.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00082432 _____ (Khronos Group) C:\Windows\system32\Intel_OpenCL_ICD64.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00074752 _____ (Khronos Group) C:\Windows\SysWOW64\Intel_OpenCL_ICD32.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00069632 _____ () C:\Windows\system32\igfxCUIServicePS.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00069632 _____ ( ) C:\Windows\system32\igfxDHLibv2_0.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00058880 _____ ( ) C:\Windows\system32\igfxDHLib.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00031408 _____ (Intel Corporation) C:\Windows\system32\igfxexps.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00030720 _____ (Intel Corporation) C:\Windows\SysWOW64\igfxexps32.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00010752 _____ ( ) C:\Windows\system32\igfxDILib.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00010240 _____ ( ) C:\Windows\system32\igfxEMLibv2_0.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00010240 _____ ( ) C:\Windows\system32\igfxEMLib.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00010240 _____ ( ) C:\Windows\system32\igfxDILibv2_0.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00005120 _____ ( ) C:\Windows\system32\igfxLHMLibv2_0.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00005120 _____ ( ) C:\Windows\system32\igfxLHMLib.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00003920 _____ () C:\Windows\system32\iglhxs64.vp 2014-08-14 00:23 - 2014-08-14 00:23 - 23686656 _____ (Intel Corporation) C:\Windows\system32\igdfcl64.dll 2014-08-14 00:23 - 2014-08-14 00:23 - 19298568 _____ (Intel Corporation) C:\Windows\SysWOW64\igdumdim32.dll 2014-08-14 00:23 - 2014-08-14 00:23 - 18558976 _____ (Intel Corporation) C:\Windows\SysWOW64\igdfcl32.dll 2014-08-14 00:23 - 2014-08-14 00:23 - 13199432 _____ () C:\Windows\system32\igd11dxva64.dll 2014-08-14 00:23 - 2014-08-14 00:23 - 12728192 _____ () C:\Windows\SysWOW64\igd11dxva32.dll 2014-08-14 00:23 - 2014-08-14 00:23 - 08841728 _____ (Intel Corporation) C:\Windows\system32\ig75icd64.dll 2014-08-14 00:23 - 2014-08-14 00:23 - 08237056 _____ (Intel Corporation) C:\Windows\system32\igdrcl64.dll 2014-08-14 00:23 - 2014-08-14 00:23 - 07679488 _____ (Intel Corporation) C:\Windows\SysWOW64\igdrcl32.dll 2014-08-14 00:23 - 2014-08-14 00:23 - 06970976 _____ (Intel Corporation) C:\Windows\SysWOW64\igd10iumd32.dll 2014-08-14 00:23 - 2014-08-14 00:23 - 06946816 _____ (Intel Corporation) C:\Windows\SysWOW64\ig75icd32.dll 2014-08-14 00:23 - 2014-08-14 00:23 - 04786544 _____ (Intel Corporation) C:\Windows\system32\Drivers\igdkmd64.sys 2014-08-14 00:23 - 2014-08-14 00:23 - 03399496 _____ (Intel Corporation) C:\Windows\system32\Gfxv4_0.exe 2014-08-14 00:23 - 2014-08-14 00:23 - 03395912 _____ (Intel Corporation) C:\Windows\system32\Gfxv2_0.exe 2014-08-14 00:23 - 2014-08-14 00:23 - 00929608 _____ (Intel Corporation) C:\Windows\system32\GfxUIEx.exe 2014-08-14 00:23 - 2014-08-14 00:23 - 00604552 _____ (Intel Corporation) C:\Windows\system32\igdmd64.dll 2014-08-14 00:23 - 2014-08-14 00:23 - 00543560 _____ (Intel Corporation) C:\Windows\system32\DPTopologyApp.exe 2014-08-14 00:23 - 2014-08-14 00:23 - 00543048 _____ (Intel Corporation) C:\Windows\system32\DPTopologyAppv2_0.exe 2014-08-14 00:23 - 2014-08-14 00:23 - 00483000 _____ (Intel Corporation) C:\Windows\SysWOW64\igdmd32.dll 2014-08-14 00:23 - 2014-08-14 00:23 - 00393728 _____ (Intel Corporation) C:\Windows\system32\igdbcl64.dll 2014-08-14 00:23 - 2014-08-14 00:23 - 00346112 _____ (Intel Corporation) C:\Windows\SysWOW64\igdbcl32.dll 2014-08-14 00:23 - 2014-08-14 00:23 - 00225792 _____ () C:\Windows\system32\igdde64.dll 2014-08-14 00:23 - 2014-08-14 00:23 - 00186368 _____ () C:\Windows\SysWOW64\igdde32.dll 2014-08-14 00:23 - 2014-08-14 00:23 - 00162304 _____ (Intel Corporation) C:\Windows\system32\igdail64.dll 2014-08-14 00:23 - 2014-08-14 00:23 - 00152392 _____ (Intel Corporation) C:\Windows\system32\difx64.exe 2014-08-14 00:23 - 2014-08-14 00:23 - 00144896 _____ (Intel Corporation) C:\Windows\SysWOW64\igdail32.dll |
08.09.2014, 12:03 | #10 |
| Malware nach Installation von MyPhoneExplorer FRST.TXT Teil 2: Code:
ATTFilter ==================== One Month Modified Files and Folders ======= (If an entry is included in the fixlist, the file\folder will be moved.) 2014-09-07 20:22 - 2014-09-06 15:59 - 00010367 _____ () C:\Users\Admin\Desktop\FRST.txt 2014-09-07 20:21 - 2014-09-07 20:21 - 00000813 _____ () C:\Users\Admin\Desktop\checkup.txt 2014-09-07 20:21 - 2014-09-07 20:21 - 00000000 ____D () C:\Users\Admin\Desktop\FRST-OlderVersion 2014-09-07 20:21 - 2014-09-05 20:18 - 00000000 ____D () C:\FRST 2014-09-07 20:21 - 2014-09-05 20:17 - 02105344 _____ (Farbar) C:\Users\Admin\Desktop\FRST64.exe 2014-09-07 20:16 - 2014-09-07 20:16 - 00854417 _____ () C:\Users\Admin\Desktop\SecurityCheck.exe 2014-09-07 20:12 - 2014-09-07 20:12 - 00000887 _____ () C:\Users\Admin\Desktop\ESET Online Scanner.txt 2014-09-07 19:57 - 2014-09-01 19:38 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-09-07 19:24 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache 2014-09-07 15:40 - 2009-07-14 06:45 - 00031584 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-09-07 15:40 - 2009-07-14 06:45 - 00031584 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-09-07 15:39 - 2014-08-25 08:10 - 01343686 _____ () C:\Windows\WindowsUpdate.log 2014-09-07 15:39 - 2011-04-12 09:43 - 00699726 _____ () C:\Windows\system32\perfh007.dat 2014-09-07 15:39 - 2011-04-12 09:43 - 00149364 _____ () C:\Windows\system32\perfc007.dat 2014-09-07 15:39 - 2009-07-14 07:13 - 01621742 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-09-07 15:36 - 2009-07-14 06:51 - 00029986 _____ () C:\Windows\setupact.log 2014-09-07 15:35 - 2014-08-26 11:24 - 00003758 _____ () C:\Windows\System32\Tasks\AutoKMS 2014-09-07 15:35 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-09-06 15:58 - 2014-09-06 15:58 - 00000755 _____ () C:\Users\Admin\Desktop\JRT.txt 2014-09-06 15:50 - 2014-09-06 15:50 - 00000000 ____D () C:\Windows\ERUNT 2014-09-06 15:49 - 2014-09-06 15:49 - 00001222 _____ () C:\Users\Admin\Desktop\AdwCleaner[S0].txt 2014-09-06 15:49 - 2010-11-21 05:47 - 00006852 _____ () C:\Windows\PFRO.log 2014-09-06 15:48 - 2014-09-06 15:35 - 00000000 ____D () C:\AdwCleaner 2014-09-06 15:34 - 2014-09-06 15:34 - 00001158 _____ () C:\Users\Admin\Desktop\mbam.txt 2014-09-06 15:27 - 2014-09-06 15:27 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2014-09-06 15:27 - 2014-09-06 15:27 - 00001117 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-09-06 15:27 - 2014-09-06 15:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2014-09-06 15:27 - 2014-09-06 15:27 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-09-06 15:27 - 2014-09-06 15:27 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 2014-09-06 15:22 - 2014-09-06 15:26 - 01016261 _____ (Thisisu) C:\Users\Admin\Desktop\JRT.exe 2014-09-06 15:21 - 2014-09-06 15:26 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Admin\Desktop\mbam-setup-2.0.2.1012.exe 2014-09-06 15:21 - 2014-09-06 15:26 - 01370483 _____ () C:\Users\Admin\Desktop\adwcleaner_3.309.exe 2014-09-06 15:19 - 2014-08-25 10:53 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service 2014-09-05 20:46 - 2014-09-05 20:46 - 00000000 ____D () C:\Users\Matze\AppData\Roaming\Macromedia 2014-09-05 20:46 - 2014-09-05 20:46 - 00000000 ____D () C:\Users\Matze\AppData\Roaming\Adobe 2014-09-05 20:46 - 2014-09-05 20:46 - 00000000 ____D () C:\Users\Matze\AppData\Local\Macromedia 2014-09-05 20:39 - 2014-09-05 20:39 - 00000000 ____D () C:\Users\Matze\AppData\Local\G DATA 2014-09-05 20:34 - 2014-09-05 20:34 - 00000000 ____D () C:\Users\Matze\AppData\Roaming\Thunderbird 2014-09-05 20:34 - 2014-09-05 20:34 - 00000000 ____D () C:\Users\Matze\AppData\Local\Thunderbird 2014-09-05 20:33 - 2014-09-05 20:33 - 00000000 ____D () C:\Users\Matze\AppData\Roaming\Mozilla 2014-09-05 20:33 - 2014-09-05 20:33 - 00000000 ____D () C:\Users\Matze\AppData\Local\Mozilla 2014-09-05 15:13 - 2014-09-05 15:13 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2014-09-05 15:11 - 2014-09-05 15:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MyPhoneExplorer 2014-09-05 15:11 - 2014-09-05 15:11 - 00000000 ____D () C:\Program Files (x86)\MyPhoneExplorer 2014-09-04 21:27 - 2014-09-02 20:09 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\vlc 2014-09-04 16:20 - 2014-09-04 16:20 - 00000000 ____D () C:\Users\Admin\Logitech 2014-09-04 16:20 - 2014-08-25 08:13 - 00000000 ____D () C:\Users\Admin 2014-09-04 16:19 - 2014-09-04 16:19 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\InstallShield 2014-09-04 16:19 - 2014-09-04 16:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logitech 2014-09-04 16:19 - 2014-09-04 16:19 - 00000000 ____D () C:\Program Files (x86)\Logitech 2014-09-04 16:19 - 2014-08-25 11:58 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information 2014-09-04 16:19 - 2014-08-25 10:25 - 00009734 _____ () C:\Windows\DPINST.LOG 2014-09-04 16:11 - 2014-09-04 16:10 - 00000000 ____D () C:\Users\Admin\.gimp-2.8 2014-09-04 16:10 - 2014-09-04 16:10 - 00000909 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GIMP 2.lnk 2014-09-04 16:10 - 2014-09-04 16:10 - 00000000 ____D () C:\Users\Admin\AppData\Local\gegl-0.2 2014-09-04 16:10 - 2014-09-04 16:09 - 00000000 ____D () C:\Program Files\GIMP 2 2014-09-04 15:50 - 2014-09-04 15:50 - 00000000 ____D () C:\Users\Admin\AppData\Local\FreeCommanderXE 2014-09-04 15:50 - 2014-09-04 15:50 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FreeCommander XE 2014-09-04 15:50 - 2014-09-04 15:50 - 00000000 ____D () C:\Program Files (x86)\FreeCommander XE 2014-09-04 15:42 - 2014-08-25 09:42 - 00000000 ____D () C:\Users\Admin\AppData\Local\VirtualStore 2014-09-04 15:41 - 2014-09-04 15:40 - 00000000 ____D () C:\Program Files (x86)\Audiograbber 2014-09-04 15:40 - 2014-09-04 15:40 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audiograbber 2014-09-04 15:19 - 2014-09-03 20:35 - 00000000 ____D () C:\Program Files (x86)\Steam 2014-09-03 20:35 - 2014-09-03 20:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam 2014-09-03 20:26 - 2014-09-03 20:26 - 00084688 _____ () C:\Users\Matze\AppData\Local\GDIPFONTCACHEV1.DAT 2014-09-03 20:26 - 2014-09-03 20:26 - 00000000 ____D () C:\Users\Matze\AppData\Roaming\Intel Corporation 2014-09-03 20:25 - 2014-09-03 20:25 - 00000020 ___SH () C:\Users\Matze\ntuser.ini 2014-09-03 20:25 - 2014-09-03 20:25 - 00000000 _SHDL () C:\Users\Matze\Vorlagen 2014-09-03 20:25 - 2014-09-03 20:25 - 00000000 _SHDL () C:\Users\Matze\Startmenü 2014-09-03 20:25 - 2014-09-03 20:25 - 00000000 _SHDL () C:\Users\Matze\Netzwerkumgebung 2014-09-03 20:25 - 2014-09-03 20:25 - 00000000 _SHDL () C:\Users\Matze\Lokale Einstellungen 2014-09-03 20:25 - 2014-09-03 20:25 - 00000000 _SHDL () C:\Users\Matze\Eigene Dateien 2014-09-03 20:25 - 2014-09-03 20:25 - 00000000 _SHDL () C:\Users\Matze\Druckumgebung 2014-09-03 20:25 - 2014-09-03 20:25 - 00000000 _SHDL () C:\Users\Matze\Documents\Eigene Musik 2014-09-03 20:25 - 2014-09-03 20:25 - 00000000 _SHDL () C:\Users\Matze\Documents\Eigene Bilder 2014-09-03 20:25 - 2014-09-03 20:25 - 00000000 _SHDL () C:\Users\Matze\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-09-03 20:25 - 2014-09-03 20:25 - 00000000 _SHDL () C:\Users\Matze\AppData\Local\Verlauf 2014-09-03 20:25 - 2014-09-03 20:25 - 00000000 _SHDL () C:\Users\Matze\AppData\Local\Anwendungsdaten 2014-09-03 20:25 - 2014-09-03 20:25 - 00000000 _SHDL () C:\Users\Matze\Anwendungsdaten 2014-09-03 20:25 - 2014-09-03 20:25 - 00000000 ____D () C:\Users\Matze\AppData\Local\VirtualStore 2014-09-03 20:25 - 2014-09-03 20:25 - 00000000 ____D () C:\Users\Matze 2014-09-03 20:24 - 2014-09-03 20:24 - 00000000 ____D () C:\Users\Admin\AppData\Local\Adobe 2014-09-03 20:24 - 2014-08-25 08:13 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\Adobe 2014-09-03 20:21 - 2014-09-03 20:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sicherheit & Optimierung 2014-09-03 20:20 - 2014-09-03 20:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDF Tools 2014-09-03 20:20 - 2014-09-03 20:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla 2014-09-03 20:20 - 2014-09-03 20:18 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hardware 2014-09-03 20:18 - 2014-09-03 20:16 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mediaplayer 2014-09-03 20:17 - 2014-09-03 20:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Brennprogramme 2014-09-03 20:17 - 2009-07-14 05:20 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories 2014-09-03 20:03 - 2014-08-25 10:52 - 00000510 _____ () C:\Windows\system32\{F33C3B9B-72AF-418A-B3FD-560646F7CDA2}.bat 2014-09-03 20:03 - 2014-08-25 10:39 - 00000000 ____D () C:\Intel 2014-09-03 19:35 - 2009-07-14 06:45 - 00340720 _____ () C:\Windows\system32\FNTCACHE.DAT 2014-09-02 20:09 - 2014-09-02 20:09 - 00000000 ____D () C:\Program Files (x86)\VideoLAN 2014-09-02 18:42 - 2014-09-02 18:42 - 00010009 _____ () C:\Windows\DirectX.log 2014-09-02 18:42 - 2014-09-02 18:40 - 00000000 ___HD () C:\Windows\msdownld.tmp 2014-09-02 18:42 - 2014-09-02 18:40 - 00000000 ____D () C:\Windows\SysWOW64\directx 2014-09-02 18:35 - 2014-09-02 18:30 - 00000000 ____D () C:\Program Files (x86)\DVBViewer 2014-09-02 18:34 - 2014-09-02 18:34 - 00000000 ____D () C:\Program Files (x86)\LAV Filters 2014-09-02 18:34 - 2014-09-02 18:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVBViewer 2014-09-02 18:30 - 2014-09-02 18:30 - 00000000 ____D () C:\ProgramData\CMUV 2014-09-01 20:15 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\oobe 2014-09-01 20:13 - 2014-09-01 20:13 - 00002410 _____ () C:\Windows\SysWOW64\cplLogon.tsk 2014-09-01 20:13 - 2014-09-01 20:13 - 00000000 ____D () C:\Program Files\Logon Screen 2014-09-01 20:01 - 2009-07-14 07:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games 2014-09-01 20:01 - 2009-07-14 07:32 - 00000000 ____D () C:\Program Files\Microsoft Games 2014-09-01 20:01 - 2009-07-14 07:32 - 00000000 ____D () C:\Program Files\DVD Maker 2014-09-01 19:56 - 2014-09-01 19:56 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\Canneverbe Limited 2014-09-01 19:56 - 2014-09-01 19:56 - 00000000 ____D () C:\ProgramData\Canneverbe Limited 2014-09-01 19:56 - 2014-09-01 19:56 - 00000000 ____D () C:\Program Files (x86)\CDBurnerXP 2014-09-01 19:52 - 2014-09-01 19:52 - 00000000 ____D () C:\Users\Admin\Documents\AnyDVDHD 2014-09-01 19:50 - 2014-09-01 19:50 - 00000040 ___SH () C:\ProgramData\.zreglib 2014-09-01 19:50 - 2014-09-01 19:36 - 00000000 ____D () C:\ProgramData\Adobe 2014-09-01 19:49 - 2014-09-01 19:49 - 00000000 ____D () C:\ProgramData\SlySoft 2014-09-01 19:49 - 2014-09-01 19:49 - 00000000 ____D () C:\Program Files (x86)\SlySoft 2014-09-01 19:43 - 2014-09-01 19:43 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\Oracle 2014-09-01 19:41 - 2014-09-01 19:41 - 00272808 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe 2014-09-01 19:41 - 2014-09-01 19:41 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe 2014-09-01 19:41 - 2014-09-01 19:41 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe 2014-09-01 19:41 - 2014-09-01 19:41 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll 2014-09-01 19:41 - 2014-09-01 19:41 - 00000000 ____D () C:\ProgramData\Sun 2014-09-01 19:41 - 2014-09-01 19:41 - 00000000 ____D () C:\ProgramData\Oracle 2014-09-01 19:41 - 2014-09-01 19:41 - 00000000 ____D () C:\Program Files (x86)\Java 2014-09-01 19:38 - 2014-09-01 19:38 - 00699568 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2014-09-01 19:38 - 2014-09-01 19:38 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2014-09-01 19:38 - 2014-09-01 19:38 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater 2014-09-01 19:38 - 2014-09-01 19:38 - 00000000 ____D () C:\Windows\SysWOW64\Macromed 2014-09-01 19:38 - 2014-09-01 19:38 - 00000000 ____D () C:\Windows\system32\Macromed 2014-09-01 19:38 - 2014-09-01 19:38 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\Macromedia 2014-09-01 19:38 - 2014-09-01 19:38 - 00000000 ____D () C:\Users\Admin\AppData\Local\Macromedia 2014-09-01 19:36 - 2014-09-01 19:36 - 00000000 ____D () C:\Program Files (x86)\Adobe 2014-09-01 18:51 - 2014-09-01 18:51 - 00001436 _____ () C:\Users\Bine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2014-09-01 18:51 - 2014-09-01 18:51 - 00000000 ____D () C:\Users\Bine\AppData\Roaming\Mozilla 2014-09-01 18:51 - 2014-09-01 18:51 - 00000000 ____D () C:\Users\Bine\AppData\Roaming\Adobe 2014-09-01 18:51 - 2014-09-01 18:51 - 00000000 ____D () C:\Users\Bine\AppData\Local\Mozilla 2014-09-01 18:51 - 2014-09-01 18:50 - 00000000 ____D () C:\Users\Bine 2014-09-01 18:50 - 2014-09-01 18:50 - 00000020 ___SH () C:\Users\Bine\ntuser.ini 2014-09-01 18:50 - 2014-09-01 18:50 - 00000000 _SHDL () C:\Users\Bine\Vorlagen 2014-09-01 18:50 - 2014-09-01 18:50 - 00000000 _SHDL () C:\Users\Bine\Startmenü 2014-09-01 18:50 - 2014-09-01 18:50 - 00000000 _SHDL () C:\Users\Bine\Netzwerkumgebung 2014-09-01 18:50 - 2014-09-01 18:50 - 00000000 _SHDL () C:\Users\Bine\Lokale Einstellungen 2014-09-01 18:50 - 2014-09-01 18:50 - 00000000 _SHDL () C:\Users\Bine\Eigene Dateien 2014-09-01 18:50 - 2014-09-01 18:50 - 00000000 _SHDL () C:\Users\Bine\Druckumgebung 2014-09-01 18:50 - 2014-09-01 18:50 - 00000000 _SHDL () C:\Users\Bine\Documents\Eigene Musik 2014-09-01 18:50 - 2014-09-01 18:50 - 00000000 _SHDL () C:\Users\Bine\Documents\Eigene Bilder 2014-09-01 18:50 - 2014-09-01 18:50 - 00000000 _SHDL () C:\Users\Bine\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-09-01 18:50 - 2014-09-01 18:50 - 00000000 _SHDL () C:\Users\Bine\AppData\Local\Verlauf 2014-09-01 18:50 - 2014-09-01 18:50 - 00000000 _SHDL () C:\Users\Bine\AppData\Local\Anwendungsdaten 2014-09-01 18:50 - 2014-09-01 18:50 - 00000000 _SHDL () C:\Users\Bine\Anwendungsdaten 2014-09-01 18:50 - 2014-09-01 18:50 - 00000000 ____D () C:\Users\Bine\AppData\Local\VirtualStore 2014-09-01 17:57 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF 2014-09-01 17:47 - 2014-09-01 17:47 - 00106272 _____ (G Data Software) C:\Windows\system32\Drivers\GRD.sys 2014-09-01 17:47 - 2014-09-01 17:47 - 00018160 _____ (G Data Software) C:\Windows\system32\Drivers\GdPhyMem.sys 2014-09-01 17:40 - 2014-09-01 17:40 - 00000000 ___HD () C:\ProgramData\CanonIJScan 2014-09-01 17:40 - 2014-09-01 17:35 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\Canon 2014-09-01 17:35 - 2014-09-01 17:32 - 00000000 ____D () C:\Program Files (x86)\Canon 2014-09-01 17:32 - 2014-09-01 17:32 - 00000000 ____D () C:\Windows\system32\STRING 2014-09-01 17:32 - 2014-09-01 17:32 - 00000000 ____D () C:\ProgramData\Canon IJ Network Tool 2014-09-01 17:32 - 2009-07-14 05:20 - 00000000 __RSD () C:\Windows\Media 2014-09-01 17:31 - 2014-09-01 17:31 - 00000000 ___HD () C:\Windows\system32\CanonIJ Uninstaller Information 2014-09-01 17:31 - 2014-09-01 17:31 - 00000000 ___HD () C:\ProgramData\CanonBJ 2014-09-01 17:30 - 2014-09-01 17:30 - 00000000 ___HD () C:\Program Files\CanonBJ 2014-09-01 16:29 - 2014-09-01 16:29 - 00000000 ____D () C:\Users\Admin\AppData\Local\G DATA 2014-09-01 15:52 - 2014-09-01 15:52 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\Thunderbird 2014-09-01 15:52 - 2014-09-01 15:52 - 00000000 ____D () C:\Users\Admin\AppData\Local\Thunderbird 2014-09-01 15:52 - 2014-09-01 15:52 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird 2014-08-29 11:18 - 2014-08-29 11:18 - 00000000 ____D () C:\Wallpapers 2014-08-29 11:16 - 2014-08-29 11:16 - 00000000 ____D () C:\Users\Admin\AppData\Local\Apps\2.0 2014-08-26 11:41 - 2014-08-26 11:17 - 00000000 ____D () C:\ProgramData\Microsoft Help 2014-08-26 11:40 - 2014-09-03 20:25 - 00000000 ____D () C:\Users\Matze\AppData\Local\Microsoft Help 2014-08-26 11:40 - 2014-09-01 18:50 - 00000000 ____D () C:\Users\Bine\AppData\Local\Microsoft Help 2014-08-26 11:40 - 2014-08-26 11:40 - 00000000 ____D () C:\Users\Default\AppData\Local\Microsoft Help 2014-08-26 11:40 - 2014-08-26 11:40 - 00000000 ____D () C:\Users\Default User\AppData\Local\Microsoft Help 2014-08-26 11:40 - 2014-08-26 11:40 - 00000000 ____D () C:\Program Files\Common Files\DESIGNER 2014-08-26 11:28 - 2014-08-26 11:24 - 00000000 ____D () C:\Windows\AutoKMS 2014-08-26 11:24 - 2014-08-26 11:24 - 00000000 ____D () C:\ProgramData\Microsoft Toolkit 2014-08-26 11:24 - 2014-08-25 09:33 - 00084688 _____ () C:\Users\Admin\AppData\Local\GDIPFONTCACHEV1.DAT 2014-08-26 11:19 - 2014-08-26 11:19 - 00000000 ____D () C:\Windows\System32\Tasks\OfficeSoftwareProtectionPlatform 2014-08-26 11:18 - 2014-08-26 11:18 - 00000000 ____D () C:\Windows\PCHEALTH 2014-08-26 11:18 - 2014-08-26 11:18 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2014-08-26 11:18 - 2014-08-26 11:18 - 00000000 ____D () C:\Program Files\Microsoft Synchronization Services 2014-08-26 11:18 - 2014-08-26 11:18 - 00000000 ____D () C:\Program Files\Microsoft SQL Server Compact Edition 2014-08-26 11:18 - 2014-08-26 11:18 - 00000000 ____D () C:\Program Files\Microsoft Analysis Services 2014-08-26 11:18 - 2014-08-26 11:18 - 00000000 ____D () C:\Program Files (x86)\Microsoft Analysis Services 2014-08-26 11:18 - 2014-08-26 11:17 - 00000000 ____D () C:\Program Files\Microsoft Office 2014-08-26 11:18 - 2011-04-12 09:54 - 00000000 ____D () C:\Windows\ShellNew 2014-08-26 11:18 - 2009-07-14 05:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared 2014-08-26 11:17 - 2014-08-26 11:17 - 00000000 __RHD () C:\MSOCache 2014-08-26 11:17 - 2014-08-26 11:17 - 00000000 ____D () C:\Users\Admin\AppData\Local\Microsoft Help 2014-08-26 11:17 - 2014-08-26 11:17 - 00000000 ____D () C:\Program Files (x86)\Microsoft Office 2014-08-26 10:57 - 2014-08-26 10:57 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip 2014-08-26 10:57 - 2014-08-26 10:57 - 00000000 ____D () C:\Program Files\7-Zip 2014-08-25 12:09 - 2014-08-25 12:09 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\Intel Corporation 2014-08-25 12:09 - 2014-08-25 12:09 - 00000000 ____D () C:\ProgramData\Intel 2014-08-25 12:09 - 2014-08-25 10:47 - 01645874 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI 2014-08-25 12:09 - 2014-08-25 10:39 - 00000000 ____D () C:\Program Files\Intel 2014-08-25 12:08 - 2014-08-25 12:08 - 00000000 ____D () C:\Users\Admin\Intel 2014-08-25 11:58 - 2014-08-25 11:58 - 00000000 ____D () C:\Windows\SysWOW64\Atheros_L1e 2014-08-25 11:52 - 2014-08-25 11:52 - 00000000 ____D () C:\Program Files\DigitalDevices 2014-08-25 11:50 - 2014-08-25 11:49 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\Mozilla 2014-08-25 11:50 - 2014-08-25 11:49 - 00000000 ____D () C:\Users\Admin\AppData\Local\Mozilla 2014-08-25 11:46 - 2014-08-25 11:46 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_iusb3hcs_01009.Wdf 2014-08-25 11:45 - 2014-08-25 10:39 - 00000000 ____D () C:\Program Files (x86)\Intel 2014-08-25 11:39 - 2014-08-25 08:10 - 00000000 ____D () C:\Program Files\WinRAR 2014-08-25 11:13 - 2014-08-25 11:13 - 00000000 ____D () C:\Program Files\Microsoft Silverlight 2014-08-25 11:13 - 2014-08-25 11:13 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight 2014-08-25 11:10 - 2014-08-25 11:10 - 00000000 ____D () C:\Users\Admin\AppData\Local\WindowsUpdate 2014-08-25 10:57 - 2014-08-25 10:57 - 00000144 _____ () C:\Windows\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat 2014-08-25 10:56 - 2014-08-25 10:25 - 00142336 _____ (G Data Software AG) C:\Windows\system32\Drivers\MiniIcpt.sys 2014-08-25 10:56 - 2014-08-25 10:25 - 00064000 _____ (G Data Software AG) C:\Windows\system32\Drivers\PktIcpt.sys 2014-08-25 10:56 - 2014-08-25 10:25 - 00064000 _____ (G Data Software AG) C:\Windows\system32\Drivers\gdwfpcd64.sys 2014-08-25 10:56 - 2014-08-25 10:25 - 00061440 _____ (G Data Software AG) C:\Windows\system32\Drivers\HookCentre.sys 2014-08-25 10:56 - 2014-08-25 10:25 - 00055808 _____ (G Data Software AG) C:\Windows\system32\Drivers\GDBehave.sys 2014-08-25 10:56 - 2014-08-25 10:25 - 00020992 _____ (G Data Software AG) C:\Windows\system32\Drivers\GDKBFlt64.sys 2014-08-25 10:53 - 2014-08-25 10:53 - 00000000 ____D () C:\ProgramData\Mozilla 2014-08-25 10:52 - 2014-08-25 10:52 - 00003538 _____ () C:\Windows\System32\Tasks\CreateChoiceProcessTask 2014-08-25 10:52 - 2014-08-25 10:52 - 00000000 __SHD () C:\Users\Admin\AppData\Local\EmieUserList 2014-08-25 10:52 - 2014-08-25 10:52 - 00000000 __SHD () C:\Users\Admin\AppData\Local\EmieSiteList 2014-08-25 10:50 - 2011-04-12 09:54 - 00000000 ____D () C:\Program Files\Windows Journal 2014-08-25 10:50 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\Dism 2014-08-25 10:50 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\Dism 2014-08-25 10:50 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions 2014-08-25 10:49 - 2014-08-25 10:24 - 00000000 ____D () C:\ProgramData\G Data 2014-08-25 10:41 - 2014-08-25 10:41 - 00000000 ____D () C:\Windows\system32\MRT 2014-08-25 10:35 - 2014-08-25 10:35 - 00000000 ___SD () C:\Windows\system32\CompatTel 2014-08-25 10:25 - 2014-08-25 10:25 - 00000779 _____ () C:\Users\Admin\AppData\Roaming\gdscan.log 2014-08-25 10:25 - 2014-08-25 10:25 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_GDKBFlt64_01007.Wdf 2014-08-25 10:25 - 2014-08-25 10:25 - 00000000 ____D () C:\Program Files (x86)\G Data 2014-08-25 10:25 - 2014-08-25 10:25 - 00000000 _____ () C:\Users\Admin\AppData\Roaming\gdfw.log 2014-08-25 10:23 - 2009-07-14 07:32 - 00000000 ____D () C:\Windows\system32\restore 2014-08-25 10:22 - 2009-07-14 05:20 - 00000000 __RHD () C:\Users\Public\Libraries 2014-08-25 09:08 - 2009-07-14 07:38 - 00025600 ___SH () C:\Windows\system32\config\BCD-Template.LOG 2014-08-25 09:08 - 2009-07-14 07:32 - 00028672 _____ () C:\Windows\system32\config\BCD-Template 2014-08-25 08:13 - 2014-08-25 09:08 - 00000000 ____D () C:\Windows\Panther 2014-08-25 08:13 - 2014-08-25 08:13 - 00000020 ___SH () C:\Users\Admin\ntuser.ini 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Musik 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Bilder 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Default\Vorlagen 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Default\Startmenü 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Default\Druckumgebung 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Admin\Vorlagen 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Admin\Startmenü 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Admin\Netzwerkumgebung 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Admin\Lokale Einstellungen 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Admin\Eigene Dateien 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Admin\Druckumgebung 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Admin\Documents\Eigene Musik 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Admin\Documents\Eigene Bilder 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Admin\AppData\Local\Verlauf 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Admin\AppData\Local\Anwendungsdaten 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Users\Admin\Anwendungsdaten 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Programme 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\ProgramData\Vorlagen 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\ProgramData\Startmenü 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\ProgramData\Microsoft\Windows\Start Menu\Programme 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\ProgramData\Favoriten 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\ProgramData\Dokumente 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\ProgramData\Anwendungsdaten 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Program Files\Gemeinsame Dateien 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 _SHDL () C:\Dokumente und Einstellungen 2014-08-25 08:13 - 2014-08-25 08:13 - 00000000 __SHD () C:\Recovery 2014-08-25 08:13 - 2009-07-14 05:20 - 00000000 __RHD () C:\Users\Default 2014-08-25 08:13 - 2009-07-14 05:20 - 00000000 ____D () C:\Program Files\Windows NT 2014-08-25 08:10 - 2014-08-25 08:10 - 00001355 _____ () C:\Windows\TSSysprep.log 2014-08-25 08:10 - 2009-07-14 06:46 - 00002814 _____ () C:\Windows\DtcInstall.log 2014-08-25 08:10 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\sysprep 2014-08-25 08:09 - 2014-08-25 08:09 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdFs_01_09_00.Wdf 2014-08-25 08:09 - 2011-04-12 09:54 - 00000000 ____D () C:\Windows\CSC 2014-08-23 04:10 - 2014-08-29 11:07 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll 2014-08-23 03:45 - 2014-08-29 11:07 - 00311296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll 2014-08-23 02:59 - 2014-08-29 11:07 - 03166720 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2014-08-14 00:24 - 2014-08-25 10:39 - 00082432 _____ (Khronos Group) C:\Windows\system32\OpenCL.DLL 2014-08-14 00:24 - 2014-08-25 10:39 - 00074752 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.DLL 2014-08-14 00:24 - 2014-08-14 00:24 - 20068496 _____ (Intel Corporation) C:\Windows\system32\igdumdim64.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 04575208 _____ (Intel Corporation) C:\Windows\SysWOW64\igdusc32.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 01365504 _____ (Intel Corporation) C:\Windows\system32\igfxcmjit64.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 01137080 _____ (Intel Corporation) C:\Windows\system32\iglhsip64.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 01132960 _____ (Intel Corporation) C:\Windows\SysWOW64\iglhsip32.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 01061376 _____ (Intel Corporation) C:\Windows\SysWOW64\igfxcmjit32.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00734720 _____ (Intel Corporation) C:\Windows\system32\MetroIntelGenericUIFramework.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00453448 _____ () C:\Windows\system32\igfxTray.exe 2014-08-14 00:24 - 2014-08-14 00:24 - 00372736 _____ (Intel Corporation) C:\Windows\system32\igfxOSP.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00372224 _____ (Intel Corporation) C:\Windows\system32\IntelOpenCL64.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00304128 _____ (Intel Corporation) C:\Windows\SysWOW64\IntelOpenCL32.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00276808 _____ (Intel Corporation) C:\Windows\SysWOW64\IntelCpHeciSvc.exe 2014-08-14 00:24 - 2014-08-14 00:24 - 00254976 _____ () C:\Windows\system32\igfxCPL.cpl 2014-08-14 00:24 - 2014-08-14 00:24 - 00222720 _____ (Intel Corporation) C:\Windows\system32\igfxDTCM.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00220392 _____ (Intel Corporation) C:\Windows\system32\iglhcp64.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00212660 _____ () C:\Windows\system32\resTHA.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00207496 _____ (Intel Corporation) C:\Windows\system32\igfxcmrt64.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00206848 _____ (Intel Corporation) C:\Windows\system32\igfx11cmrt64.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00203812 _____ () C:\Windows\system32\resELL.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00199652 _____ () C:\Windows\system32\resRUS.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00191816 _____ (Intel Corporation) C:\Windows\system32\igfxext.exe 2014-08-14 00:24 - 2014-08-14 00:24 - 00184312 _____ (Intel Corporation) C:\Windows\SysWOW64\iglhcp32.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00182784 _____ (Intel Corporation) C:\Windows\system32\igfxCoIn_v3907.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00182356 _____ () C:\Windows\system32\resARA.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00181828 _____ () C:\Windows\system32\resJPN.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00181364 _____ () C:\Windows\system32\resHEB.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00176116 _____ () C:\Windows\system32\resFRA.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00176052 _____ () C:\Windows\system32\resHUN.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00175024 _____ (Intel Corporation) C:\Windows\SysWOW64\igfxcmrt32.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00174592 _____ (Intel Corporation) C:\Windows\SysWOW64\igfx11cmrt32.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00174340 _____ () C:\Windows\system32\resKOR.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00174004 _____ () C:\Windows\system32\resDEU.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00173748 _____ () C:\Windows\system32\resITA.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00173492 _____ () C:\Windows\system32\resROM.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00173460 _____ () C:\Windows\system32\resESN.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00173444 _____ () C:\Windows\system32\resSKY.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00173044 _____ () C:\Windows\system32\resPLK.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00172676 _____ () C:\Windows\system32\resNLD.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00171876 _____ () C:\Windows\system32\resPTB.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00171860 _____ () C:\Windows\system32\resTRK.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00171796 _____ () C:\Windows\system32\resCSY.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00171332 _____ () C:\Windows\system32\resPTG.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00171156 _____ () C:\Windows\system32\resFIN.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00170548 _____ () C:\Windows\system32\resHRV.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00170020 _____ () C:\Windows\system32\resSLV.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00170004 _____ () C:\Windows\system32\resSVE.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00168788 _____ () C:\Windows\system32\resNOR.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00168132 _____ () C:\Windows\system32\resDAN.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00166660 _____ () C:\Windows\system32\resENU.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00164836 _____ () C:\Windows\system32\resCHT.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00163652 _____ () C:\Windows\system32\resCHS.cui 2014-08-14 00:24 - 2014-08-14 00:24 - 00082432 _____ (Khronos Group) C:\Windows\system32\Intel_OpenCL_ICD64.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00074752 _____ (Khronos Group) C:\Windows\SysWOW64\Intel_OpenCL_ICD32.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00069632 _____ () C:\Windows\system32\igfxCUIServicePS.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00069632 _____ ( ) C:\Windows\system32\igfxDHLibv2_0.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00058880 _____ ( ) C:\Windows\system32\igfxDHLib.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00031408 _____ (Intel Corporation) C:\Windows\system32\igfxexps.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00030720 _____ (Intel Corporation) C:\Windows\SysWOW64\igfxexps32.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00010752 _____ ( ) C:\Windows\system32\igfxDILib.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00010240 _____ ( ) C:\Windows\system32\igfxEMLibv2_0.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00010240 _____ ( ) C:\Windows\system32\igfxEMLib.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00010240 _____ ( ) C:\Windows\system32\igfxDILibv2_0.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00005120 _____ ( ) C:\Windows\system32\igfxLHMLibv2_0.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00005120 _____ ( ) C:\Windows\system32\igfxLHMLib.dll 2014-08-14 00:24 - 2014-08-14 00:24 - 00003920 _____ () C:\Windows\system32\iglhxs64.vp 2014-08-14 00:24 - 2014-05-21 00:33 - 05801408 _____ (Intel Corporation) C:\Windows\system32\igdusc64.dll 2014-08-14 00:24 - 2014-05-21 00:33 - 00670720 _____ (Intel Corporation) C:\Windows\system32\igfxDH.dll 2014-08-14 00:24 - 2014-05-21 00:33 - 00324424 _____ (Intel Corporation) C:\Windows\system32\igfxCUIService.exe 2014-08-14 00:24 - 2014-05-21 00:33 - 00301896 _____ (Intel Corporation) C:\Windows\system32\igfxEM.exe 2014-08-14 00:24 - 2014-05-21 00:33 - 00271872 _____ (Intel Corporation) C:\Windows\system32\igfxDI.dll 2014-08-14 00:24 - 2014-05-21 00:33 - 00250368 _____ (Intel Corporation) C:\Windows\system32\igfxLHM.dll 2014-08-14 00:24 - 2014-05-21 00:33 - 00243528 _____ (Intel Corporation) C:\Windows\system32\igfxHK.exe 2014-08-14 00:23 - 2014-08-14 00:23 - 23686656 _____ (Intel Corporation) C:\Windows\system32\igdfcl64.dll 2014-08-14 00:23 - 2014-08-14 00:23 - 19298568 _____ (Intel Corporation) C:\Windows\SysWOW64\igdumdim32.dll 2014-08-14 00:23 - 2014-08-14 00:23 - 18558976 _____ (Intel Corporation) C:\Windows\SysWOW64\igdfcl32.dll 2014-08-14 00:23 - 2014-08-14 00:23 - 13199432 _____ () C:\Windows\system32\igd11dxva64.dll 2014-08-14 00:23 - 2014-08-14 00:23 - 12728192 _____ () C:\Windows\SysWOW64\igd11dxva32.dll 2014-08-14 00:23 - 2014-08-14 00:23 - 08841728 _____ (Intel Corporation) C:\Windows\system32\ig75icd64.dll 2014-08-14 00:23 - 2014-08-14 00:23 - 08237056 _____ (Intel Corporation) C:\Windows\system32\igdrcl64.dll 2014-08-14 00:23 - 2014-08-14 00:23 - 07679488 _____ (Intel Corporation) C:\Windows\SysWOW64\igdrcl32.dll 2014-08-14 00:23 - 2014-08-14 00:23 - 06970976 _____ (Intel Corporation) C:\Windows\SysWOW64\igd10iumd32.dll 2014-08-14 00:23 - 2014-08-14 00:23 - 06946816 _____ (Intel Corporation) C:\Windows\SysWOW64\ig75icd32.dll 2014-08-14 00:23 - 2014-08-14 00:23 - 04786544 _____ (Intel Corporation) C:\Windows\system32\Drivers\igdkmd64.sys 2014-08-14 00:23 - 2014-08-14 00:23 - 03399496 _____ (Intel Corporation) C:\Windows\system32\Gfxv4_0.exe 2014-08-14 00:23 - 2014-08-14 00:23 - 03395912 _____ (Intel Corporation) C:\Windows\system32\Gfxv2_0.exe 2014-08-14 00:23 - 2014-08-14 00:23 - 00929608 _____ (Intel Corporation) C:\Windows\system32\GfxUIEx.exe 2014-08-14 00:23 - 2014-08-14 00:23 - 00604552 _____ (Intel Corporation) C:\Windows\system32\igdmd64.dll 2014-08-14 00:23 - 2014-08-14 00:23 - 00543560 _____ (Intel Corporation) C:\Windows\system32\DPTopologyApp.exe 2014-08-14 00:23 - 2014-08-14 00:23 - 00543048 _____ (Intel Corporation) C:\Windows\system32\DPTopologyAppv2_0.exe 2014-08-14 00:23 - 2014-08-14 00:23 - 00483000 _____ (Intel Corporation) C:\Windows\SysWOW64\igdmd32.dll 2014-08-14 00:23 - 2014-08-14 00:23 - 00393728 _____ (Intel Corporation) C:\Windows\system32\igdbcl64.dll 2014-08-14 00:23 - 2014-08-14 00:23 - 00346112 _____ (Intel Corporation) C:\Windows\SysWOW64\igdbcl32.dll 2014-08-14 00:23 - 2014-08-14 00:23 - 00225792 _____ () C:\Windows\system32\igdde64.dll 2014-08-14 00:23 - 2014-08-14 00:23 - 00186368 _____ () C:\Windows\SysWOW64\igdde32.dll 2014-08-14 00:23 - 2014-08-14 00:23 - 00162304 _____ (Intel Corporation) C:\Windows\system32\igdail64.dll 2014-08-14 00:23 - 2014-08-14 00:23 - 00152392 _____ (Intel Corporation) C:\Windows\system32\difx64.exe 2014-08-14 00:23 - 2014-08-14 00:23 - 00144896 _____ (Intel Corporation) C:\Windows\SysWOW64\igdail32.dll 2014-08-14 00:23 - 2014-05-21 00:33 - 07682736 _____ (Intel Corporation) C:\Windows\system32\igd10iumd64.dll Some content of TEMP: ==================== C:\Users\Admin\AppData\Local\Temp\DD_PCIeUpdateLibrary.dll C:\Users\Admin\AppData\Local\Temp\Quarantine.exe ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\System32\winlogon.exe => File is digitally signed C:\Windows\System32\wininit.exe => File is digitally signed C:\Windows\SysWOW64\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\System32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\System32\services.exe => File is digitally signed C:\Windows\System32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\System32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\System32\rpcss.dll => File is digitally signed C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2014-09-07 19:17 ==================== End Of Log ============================ |
08.09.2014, 19:17 | #11 |
/// the machine /// TB-Ausbilder | Malware nach Installation von MyPhoneExplorer Fertig Die Reihenfolge ist hier entscheidend.
Falls Du Lob oder Kritik abgeben möchtest kannst Du das hier tun Hier noch ein paar Tipps zur Absicherung deines Systems. Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.
Anti- Viren Software
Zusätzlicher Schutz
Sicheres Browsen
Alternative Browser Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.
Performance Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC Halte dich fern von jedlichen Registry Cleanern. Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links Miekemoes Blogspot ( MVP ) Bill Castner ( MVP ) Don'ts
Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
10.09.2014, 12:29 | #12 |
| Malware nach Installation von MyPhoneExplorer Hallo schrauber, vielen Dank für deine Hilfe !!!! Gruss Matze |
11.09.2014, 11:02 | #13 |
/// the machine /// TB-Ausbilder | Malware nach Installation von MyPhoneExplorer Gern Geschehen
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
Themen zu Malware nach Installation von MyPhoneExplorer |
aktuelle, ausgeführt, beseitigung, einfach, gefunde, installation, installier, interne, internet, internet security, malware, online, programm, protokoll, scan, scanner, security, version, virusfund, win32/browsefox.c, win32/installmonetizer.bc, win32/toolbar.conduit.b, win32/toolbar.widgi, win32/wajam.f, win32/winloadsda.e |