Hallo,

wenn Windwows startet, erscheint nur ein weißer Bildschirm. Oben in der Mitte wird das Bild der Webcam angezeigt, die automatisch eingeschaltet wird.

Hier das Logfile:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 01-02-2015
Ran by SYSTEM on MININT-V3ICVEE on 04-02-2015 08:20:29
Running from h:\
Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: Englisch (USA)
Internet Explorer Version 11
Boot Mode: Recovery

The current controlset is ControlSet001
ATTENTION!:=====> If the system is bootable FRST must be run from normal or Safe mode to create a complete log.

Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [287592 2013-09-27] (Intel Corporation)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7574896 2014-04-16] (Realtek Semiconductor)
HKLM\...\Run: [BtServer] => C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTServer.exe [226008 2014-07-03] (Realtek Semiconductor Corporation)
HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [1331288 2014-08-22] (Microsoft Corporation)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2863344 2015-01-19] (Synaptics Incorporated)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [169768 2015-01-26] (Apple Inc.)
HKLM-x32\...\Run: [QLBController] => C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\QLBController.exe [419512 2014-04-01] (Hewlett-Packard Company)
HKLM-x32\...\Run: [HPConnectionManager] => c:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\HPCMDelayStart.exe [185144 2014-04-09] (Hewlett-Packard Development Company, L.P.)
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [292848 2014-04-09] (Intel Corporation)
HKLM-x32\...\Run: [StartCCC] => c:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [767200 2014-04-06] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [AccelerometerSysTrayApplet] => C:\Program Files (x86)\Hewlett-Packard\HP 3D DriveGuard\AccelerometerST.exe [126240 2014-04-01] (Hewlett-Packard Company)
HKLM-x32\...\Run: [HP Camera Driver_Monitor] => "C:\Program Files (x86)\HP Camera Driver\monitor.exe"
HKLM-x32\...\Run: [YouCam Mirage] => "c:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe"
HKLM-x32\...\Run: [YouCam Tray] => c:\Program Files (x86)\CyberLink\YouCam\YouCamTray.exe [167488 2013-09-16] (CyberLink Corp.)
HKLM-x32\...\Run: [CLMLServer_For_P2G8] => c:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe [111576 2013-08-04] (CyberLink)
HKLM-x32\...\Run: [CLVirtualDrive] => c:\Program Files (x86)\CyberLink\Power2Go8\VirtualDrive.exe [490760 2013-08-06] (CyberLink Corp.)
HKLM-x32\...\Run: [HP File Sanitizer] => C:\Program Files (x86)\Hewlett-Packard\File Sanitizer\Coreshredder.exe [2213592 2014-02-05] (Hewlett-Packard)
HKLM-x32\...\Run: [DriveUtilitiesHelper] => C:\Program Files (x86)\Western Digital\WD Utilities\WDDriveUtilitiesHelper.exe [1852264 2014-05-23] (Western Digital Technologies, Inc.)
HKLM-x32\...\Run: [WD Drive Unlocker] => C:\Program Files (x86)\Western Digital\WD Security\WDDriveAutoUnlock.exe [1694048 2014-10-23] (Western Digital Technologies, Inc.)
HKLM-x32\...\Run: [WD Quick View] => C:\Program Files (x86)\Western Digital\WD Quick View\WDDMStatus.exe [5562736 2014-12-02] (Western Digital Technologies, Inc.)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard)
HKLM-x32\...\Run: [] => [X]
HKLM\...\RunOnce: [NCPluginUpdater] => C:\Program Files (x86)\Hewlett-Packard\HP Health Check\ActiveCheck\product_line\NCPluginUpdater.exe [21720 2015-01-28] (Hewlett-Packard)
HKLM\...\Winlogon: [Userinit] C:\Windows\system32\userinit.exe,C:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DPAgent.exe,
HKU\HP ProBook 470 G2\...\Run: [HP Officejet 6600 (NET)] => C:\Program Files\HP\HP Officejet 6600\Bin\ScanToPCActivationApp.exe [2573416 2012-10-16] (Hewlett-Packard Co.)
HKU\HP ProBook 470 G2\...\Winlogon: [Userinit] C:\Users\HP ProBook 470 G2\AppData\Roaming\loadit.exe [605378 2015-02-03] ()
HKU\HP ProBook 470 G2\...\Winlogon: [Shell] C:\Users\HP ProBook 470 G2\AppData\Roaming\loadit.exe [605378 2015-02-03] () <==== ATTENTION 
Lsa: [Notification Packages] DPPassFilter scecli
Startup: C:\Users\HP ProBook 470 G2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\An OneNote senden.lnk
ShortcutTarget: An OneNote senden.lnk -> C:\Program Files\Microsoft Office 15\root\office15\ONENOTEM.EXE (Microsoft Corporation)
Startup: C:\Users\HP ProBook 470 G2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\AutoStarter.lnk
ShortcutTarget: AutoStarter.lnk ->  (No File)
Startup: C:\Users\HP ProBook 470 G2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ja.lnk
ShortcutTarget: ja.lnk ->  (No File)

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S2 AAV UpdateService; C:\Program Files (x86)\Akademische Arbeitsgemeinschaft\AAVUpdateManager\aavus.exe [128296 2008-10-24] ()
S2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [77128 2015-01-19] (Apple Inc.)
S2 AvrcpService; C:\Program Files (x86)\REALTEK\Realtek Bluetooth\AvrcpService.exe [43224 2014-07-03] (Realtek Semiconductor Corporation)
S2 BTDevManager; C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTDevMgr.exe [98816 2014-10-11] ()
S2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390176 2014-07-14] (Microsoft Corporation)
S2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1767520 2014-07-14] (Microsoft Corporation)
S2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2449592 2014-11-11] (Microsoft Corporation)
S2 CtAgentService; C:\Program Files (x86)\Hewlett-Packard\HP Theft Recovery\CtService.exe [7168 2014-03-31] ()
S2 DpHost; C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpHostW.exe [500048 2014-07-28] (DigitalPersona, Inc.)
S3 FLCDLOCK; c:\windows\SysWOW64\flcdlock.exe [567608 2013-11-20] (Hewlett-Packard Company)
S2 HpDamServiceHost; c:\Program Files (x86)\Hewlett-Packard\HP Device Access Manager\HP.ProtectTools.DeviceAccessManager.ServiceHost.exe [18232 2013-11-15] (Hewlett-Packard Development Company)
S2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15720 2013-09-27] (Intel Corporation)
S2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [282072 2014-03-10] (Intel Corporation)
S3 Intel(R) Capability Licensing Service TCP IP Interface; c:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [828376 2013-08-27] (Intel(R) Corporation)
S2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [131544 2013-12-09] (Intel Corporation)
S2 ISCTAgent; c:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe [198120 2013-09-06] ()
S2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-12-09] (Intel Corporation)
S2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [23784 2014-08-22] (Microsoft Corporation)
S3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [368624 2014-08-22] (Microsoft Corporation)
S2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [290520 2014-01-08] (Realtek Semiconductor)
S2 RtkBleServ; C:\Program Files (x86)\REALTEK\Realtek Bluetooth\RtkBleServ.exe [50392 2014-07-03] (Realtek Semiconductor Corporation)
S2 WDBackup; C:\Program Files (x86)\Western Digital\WD SmartWare\WDBackupEngine.exe [1042808 2014-12-02] (Western Digital Technologies, Inc.)
S2 WDDriveService; C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe [296312 2014-05-23] (Western Digital Technologies, Inc.)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-12-03] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S0 amdkmpfd; C:\Windows\System32\drivers\amdkmpfd.sys [36608 2013-12-13] (Advanced Micro Devices, Inc.)
S1 CLVirtualDrive; C:\Windows\System32\DRIVERS\CLVirtualDrive.sys [90608 2011-12-26] (CyberLink)
S3 DAMDrv; C:\Windows\System32\DRIVERS\DAMDrv64.sys [65752 2013-10-07] (Hewlett-Packard Company)
S0 iaStorF; C:\Windows\System32\drivers\iaStorF.sys [28008 2013-09-27] (Intel Corporation)
S3 ikbevent; C:\Windows\System32\DRIVERS\ikbevent.sys [21408 2013-08-08] ()
S3 imsevent; C:\Windows\System32\DRIVERS\imsevent.sys [21920 2013-08-08] ()
S3 INETMON; C:\windows\System32\Drivers\INETMON.sys [29088 2013-08-07] ()
S3 ISCT; C:\Windows\system32\drivers\ISCTD64.sys [46568 2013-08-07] ()
S3 MEIx64; C:\Windows\system32\drivers\TeeDriverx64.sys [100312 2013-12-09] (Intel Corporation)
S0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [269008 2014-07-17] (Microsoft Corporation)
S2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [125584 2014-07-17] (Microsoft Corporation)
S0 PinFile; C:\Windows\System32\DRIVERS\PinFile.sys [49856 2014-02-03] (WinMagic Inc.)
S3 RtkAvrcp; C:\Windows\system32\drivers\RtkAvrcp.sys [61152 2012-12-28] (Realtek Semiconductor Corporation)
S3 RtkBtFilter; C:\Windows\System32\DRIVERS\RtkBtfilter.sys [585944 2014-12-30] (Realtek Semiconductor Corporation)
S3 RTSPER; C:\Windows\System32\DRIVERS\RtsPer.sys [476888 2014-03-21] (Realsil Semiconductor Corporation)
S3 RTWlanE; C:\Windows\System32\DRIVERS\rtwlane.sys [3603672 2015-01-19] (Realtek Semiconductor Corporation                           )
S0 SDDisk2K; C:\Windows\System32\DRIVERS\SDDisk2K.sys [228544 2014-02-03] (WinMagic Inc.)
S0 SDDToki; C:\Windows\System32\DRIVERS\SDDToki.sys [131264 2014-02-03] (WinMagic Inc.)
S3 SmbDrv; C:\Windows\system32\drivers\Smb_driver_AMDASF.sys [30448 2014-04-07] (Synaptics Incorporated)
S3 SmbDrvI; C:\Windows\system32\drivers\Smb_driver_Intel.sys [31472 2014-04-07] (Synaptics Incorporated)
S3 SPUVCbv; C:\Windows\System32\Drivers\SPUVCbv_x64.sys [674592 2015-01-19] (Sunplus)

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-02-04 08:19 - 2015-02-04 08:20 - 00000000 ____D () C:\FRST
2015-02-03 23:04 - 2015-02-03 23:04 - 00605378 _____ () C:\Users\HP ProBook 470 G2\AppData\Roaming\loadit.exe
2015-02-03 23:04 - 2015-02-03 23:04 - 00000032 _____ () C:\Users\HP ProBook 470 G2\AppData\Roaming\url.txt
2015-02-03 22:59 - 2015-01-13 03:55 - 82599352 _____ () C:\Users\HP ProBook 470 G2\AppData\Roaming\autostarter.exe
2015-02-03 22:38 - 2015-02-03 22:38 - 00001760 _____ () C:\Users\Public\Desktop\iTunes.lnk
2015-02-03 22:37 - 2015-02-03 22:38 - 00000000 ____D () C:\ProgramData\E1864A66-75E3-486a-BD95-D1B7D99A84A7
2015-02-03 22:37 - 2015-02-03 22:38 - 00000000 ____D () C:\Program Files\iTunes
2015-02-03 22:37 - 2015-02-03 22:37 - 00000000 ____D () C:\Program Files\iPod
2015-02-03 22:37 - 2015-02-03 22:37 - 00000000 ____D () C:\Program Files (x86)\iTunes
2015-02-01 08:26 - 2015-02-01 10:29 - 00000380 _____ () C:\Windows\Tasks\HPCeeScheduleForHP ProBook 470 G2.job
2015-02-01 08:26 - 2015-02-01 08:26 - 00003258 _____ () C:\Windows\System32\Tasks\HPCeeScheduleForHP ProBook 470 G2
2015-01-30 05:58 - 2015-02-03 22:10 - 00008192 _____ () C:\Windows\SysWOW64\WDPABKP.dat
2015-01-29 22:15 - 2015-01-29 22:15 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Local\CrashDumps
2015-01-29 07:42 - 2015-01-29 07:42 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Roaming\SMSout
2015-01-29 02:23 - 2015-01-29 02:23 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2015-01-29 02:08 - 2015-01-30 05:22 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Roaming\SuperMailer
2015-01-29 02:07 - 2015-01-29 03:43 - 00000000 ____D () C:\Program Files\SuperMailer
2015-01-29 02:07 - 2015-01-29 02:07 - 00000804 _____ () C:\Users\HP ProBook 470 G2\Desktop\SuperMailer.lnk
2015-01-26 08:17 - 2015-01-26 08:17 - 00000000 __SHD () C:\Users\HP ProBook 470 G2\AppData\Local\EmieBrowserModeList
2015-01-26 06:54 - 2015-02-03 23:04 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Roaming\UseNeXT
2015-01-26 06:54 - 2015-02-03 22:58 - 00000000 ____D () C:\Users\HP ProBook 470 G2\Documents\UseNeXT
2015-01-26 06:54 - 2015-01-26 06:54 - 00001868 _____ () C:\Users\HP ProBook 470 G2\Desktop\UseNeXT by Tangysoft.lnk
2015-01-26 06:54 - 2015-01-26 06:54 - 00000000 ____D () C:\Program Files (x86)\UseNeXT
2015-01-26 06:53 - 2015-01-26 06:54 - 05270008 _____ (Tangysoft Ltd. ) C:\Users\HP ProBook 470 G2\Downloads\UseNeXTSetup_5.64.exe
2015-01-26 06:29 - 2015-01-30 00:23 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Roaming\Skype
2015-01-26 06:29 - 2015-01-26 06:29 - 00002699 _____ () C:\Users\Public\Desktop\Skype.lnk
2015-01-26 06:29 - 2015-01-26 06:29 - 00000000 ___RD () C:\Program Files (x86)\Skype
2015-01-26 06:29 - 2015-01-26 06:29 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Local\Skype
2015-01-26 06:28 - 2015-01-26 06:28 - 01548384 _____ (Skype Technologies S.A.) C:\Users\HP ProBook 470 G2\Downloads\SkypeSetup.exe
2015-01-25 03:46 - 2015-01-25 03:46 - 00000000 __RHD () C:\MSOCache
2015-01-25 03:29 - 2015-01-25 03:29 - 00000329 _____ () C:\Users\HP ProBook 470 G2\Desktop\HP Druckerdiagnosetools.url
2015-01-24 01:34 - 2015-01-24 01:34 - 04372480 _____ () C:\Users\HP ProBook 470 G2\Downloads\fritz.wlan_repeater_ng_68.04.88.image
2015-01-22 23:41 - 2015-01-22 23:41 - 00000000 ____D () C:\Program Files\Western Digital
2015-01-22 23:41 - 2015-01-22 23:41 - 00000000 ____D () C:\Program Files\Common Files\Western Digital
2015-01-22 07:05 - 2015-01-22 07:05 - 00001665 _____ () C:\Users\HP ProBook 470 G2\Desktop\Mitgliederliste_V2015_V1 - Verknüpfung.lnk
2015-01-22 07:05 - 2015-01-22 07:05 - 00001572 _____ () C:\Users\HP ProBook 470 G2\Desktop\zugang_werder - Verknüpfung.lnk
2015-01-22 07:05 - 2015-01-22 07:05 - 00001569 _____ () C:\Users\HP ProBook 470 G2\Desktop\Zugangsdaten - Verknüpfung.lnk
2015-01-22 07:04 - 2015-01-22 07:04 - 00001606 _____ () C:\Users\HP ProBook 470 G2\Desktop\Anmeldungen_2015 - Verknüpfung.lnk
2015-01-22 03:05 - 2015-01-22 03:05 - 00001179 _____ () C:\Users\Public\Desktop\WD Security.lnk
2015-01-22 03:03 - 2015-01-22 03:03 - 00000000 ____D () C:\Windows\System32\Tasks\Western Digital
2015-01-22 03:01 - 2015-01-22 03:01 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Local\Western Digital
2015-01-22 02:57 - 2015-01-22 02:57 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Local\Western_Digital_Technolog
2015-01-22 02:56 - 2015-01-22 23:41 - 00000000 ____D () C:\Program Files (x86)\Western Digital
2015-01-22 02:56 - 2015-01-22 02:56 - 00001124 _____ () C:\Users\Public\Desktop\WD Drive Utilities.lnk
2015-01-22 02:55 - 2015-01-22 23:41 - 00000000 ____D () C:\ProgramData\Western Digital
2015-01-19 08:17 - 2015-01-19 08:17 - 00000000 ____D () C:\Program Files (x86)\FileZilla FTP Client
2015-01-19 08:16 - 2015-01-19 08:17 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Roaming\FileZilla
2015-01-19 08:16 - 2015-01-19 08:16 - 06381120 _____ (Tim Kosse) C:\Users\HP ProBook 470 G2\Downloads\FileZilla_3.10.0.2_win32-setup.exe
2015-01-19 08:16 - 2015-01-19 08:16 - 00000000 ____D () C:\Users\HP ProBook 470 G2\Downloads\FileZilla_3.10.0.1_win32
2015-01-19 08:14 - 2015-01-19 08:14 - 09511863 _____ () C:\Users\HP ProBook 470 G2\Downloads\FileZilla_3.10.0.1_win32.zip
2015-01-19 08:13 - 2015-01-19 08:13 - 01179936 _____ () C:\Users\HP ProBook 470 G2\Downloads\FileZilla - CHIP-Installer.exe
2015-01-19 08:07 - 2015-01-19 08:08 - 00000000 ____D () C:\Program Files (x86)\Ipswitch
2015-01-19 08:07 - 2015-01-19 08:07 - 00000000 ____D () C:\Windows\SysWOW64\E177E04D548C4006A465EEB92D3DE021
2015-01-19 08:07 - 2005-02-28 03:37 - 00606293 ____N (Stardock.Net, Inc) C:\Windows\SysWOW64\wbocx.ocx
2015-01-19 08:07 - 2005-02-28 03:37 - 00050688 ____N (Stardock.Net, Inc) C:\Windows\SysWOW64\wbhelp2.dll
2015-01-19 08:07 - 2004-12-06 05:26 - 00348160 ____N (Microsoft Corporation) C:\Windows\SysWOW64\msvcr71.dll
2015-01-19 08:07 - 2004-09-17 02:09 - 01060864 ____N (Microsoft Corporation) C:\Windows\SysWOW64\MFC71.dll
2015-01-19 08:07 - 2004-02-12 08:16 - 00499712 ____N (Microsoft Corporation) C:\Windows\SysWOW64\msvcp71.dll
2015-01-19 08:06 - 2015-01-19 08:08 - 00000023 _____ () C:\Windows\setup.log
2015-01-19 08:06 - 2015-01-19 08:06 - 09893377 _____ (InstallShield Software Corporation) C:\Users\HP ProBook 470 G2\Downloads\WSFTP_HomeT40_Install.exe
2015-01-19 07:57 - 2015-02-03 08:08 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Roaming\vlc
2015-01-19 07:55 - 2015-01-29 02:31 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Roaming\Foxit Software
2015-01-19 07:52 - 2015-01-19 07:52 - 00001077 _____ () C:\Users\Public\Desktop\VLC media player.lnk
2015-01-19 07:52 - 2015-01-19 07:52 - 00000000 ____D () C:\Program Files (x86)\VideoLAN
2015-01-19 07:51 - 2015-01-19 07:51 - 24743106 _____ () C:\Users\HP ProBook 470 G2\Downloads\vlc-2.1.5-win32.exe
2015-01-19 05:39 - 2015-01-28 04:58 - 00701616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-01-19 05:39 - 2015-01-28 04:58 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-01-19 05:39 - 2015-01-19 05:39 - 00000000 ____D () C:\Windows\System32\Macromed
2015-01-19 05:39 - 2015-01-19 05:39 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Roaming\Macromedia
2015-01-19 05:39 - 2015-01-19 05:39 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Local\Macromedia
2015-01-19 05:22 - 2015-01-19 05:22 - 00002297 _____ () C:\Users\Public\Desktop\Vereine und Ehrenamt.LNK
2015-01-19 05:22 - 2015-01-19 05:22 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Roaming\AAV
2015-01-19 05:11 - 2015-01-21 08:13 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Roaming\Apple Computer
2015-01-19 05:11 - 2015-01-19 05:11 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Local\Apple Computer
2015-01-19 05:11 - 2012-10-03 07:14 - 00033240 _____ (GEAR Software Inc.) C:\Windows\System32\Drivers\GEARAspiWDM.sys
2015-01-19 05:09 - 2015-02-03 22:37 - 00000000 ____D () C:\Program Files\Common Files\Apple
2015-01-19 05:09 - 2015-01-19 05:09 - 00000000 ____D () C:\Windows\System32\Tasks\Apple
2015-01-19 05:09 - 2015-01-19 05:09 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Local\Apple
2015-01-19 05:09 - 2015-01-19 05:09 - 00000000 ____D () C:\ProgramData\Apple Computer
2015-01-19 05:09 - 2015-01-19 05:09 - 00000000 ____D () C:\Program Files (x86)\Apple Software Update
2015-01-19 05:06 - 2015-01-19 05:08 - 122418480 _____ (Apple Inc.) C:\Users\HP ProBook 470 G2\Downloads\iTunes64Setup.exe
2015-01-19 01:32 - 2015-01-19 01:32 - 00000000 ____D () C:\HPSDM
2015-01-19 01:14 - 2015-01-19 01:13 - 03603672 _____ (Realtek Semiconductor Corporation ) C:\Windows\System32\Drivers\rtwlane.sys
2015-01-19 01:05 - 2015-01-19 01:06 - 00001588 _____ () C:\HPCamDrv.log
2015-01-19 01:05 - 2015-01-19 01:06 - 00000382 _____ () C:\camera.log
2015-01-19 01:05 - 2015-01-19 01:05 - 00384672 _____ (SunplusIT) C:\Windows\System32\VCamPPage_x64.dll
2015-01-19 01:05 - 2015-01-19 01:05 - 00321184 _____ (SunplusIT) C:\Windows\SysWOW64\VCamPPage.dll
2015-01-19 01:03 - 2015-01-19 01:03 - 00001117 _____ () C:\Users\Public\Desktop\Picasa 3.lnk
2015-01-19 01:03 - 2015-01-19 01:03 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Local\Google
2015-01-19 01:03 - 2015-01-19 01:03 - 00000000 ____D () C:\Program Files (x86)\Google
2015-01-19 01:02 - 2015-01-19 01:02 - 17385800 _____ (Google Inc.) C:\Users\HP ProBook 470 G2\Downloads\picasa39-setup.exe
2015-01-19 01:00 - 2015-01-19 01:00 - 00003148 _____ () C:\Windows\System32\Tasks\SidebarExecute
2015-01-19 01:00 - 2015-01-19 01:00 - 00000000 ____D () C:\Windows\SysWOW64\zh-Hant
2015-01-19 01:00 - 2015-01-19 01:00 - 00000000 ____D () C:\Windows\SysWOW64\zh-Hans
2015-01-19 01:00 - 2015-01-19 01:00 - 00000000 ____D () C:\Windows\SysWOW64\tr
2015-01-19 01:00 - 2015-01-19 01:00 - 00000000 ____D () C:\Windows\SysWOW64\th
2015-01-19 01:00 - 2015-01-19 01:00 - 00000000 ____D () C:\Windows\SysWOW64\sv
2015-01-19 01:00 - 2015-01-19 01:00 - 00000000 ____D () C:\Windows\SysWOW64\sr
2015-01-19 01:00 - 2015-01-19 01:00 - 00000000 ____D () C:\Windows\SysWOW64\sl
2015-01-19 01:00 - 2015-01-19 01:00 - 00000000 ____D () C:\Windows\SysWOW64\sk
2015-01-19 01:00 - 2015-01-19 01:00 - 00000000 ____D () C:\Windows\SysWOW64\ru
2015-01-19 01:00 - 2015-01-19 01:00 - 00000000 ____D () C:\Windows\SysWOW64\ro
2015-01-19 01:00 - 2015-01-19 01:00 - 00000000 ____D () C:\Windows\SysWOW64\pl
2015-01-19 01:00 - 2015-01-19 01:00 - 00000000 ____D () C:\Windows\SysWOW64\no
2015-01-19 01:00 - 2015-01-19 01:00 - 00000000 ____D () C:\Windows\SysWOW64\nl
2015-01-19 01:00 - 2015-01-19 01:00 - 00000000 ____D () C:\Windows\SysWOW64\lv
2015-01-19 01:00 - 2015-01-19 01:00 - 00000000 ____D () C:\Windows\SysWOW64\lt
2015-01-19 01:00 - 2015-01-19 01:00 - 00000000 ____D () C:\Windows\SysWOW64\ko
2015-01-19 01:00 - 2015-01-19 01:00 - 00000000 ____D () C:\Windows\SysWOW64\ja
2015-01-19 01:00 - 2015-01-19 01:00 - 00000000 ____D () C:\Windows\SysWOW64\it
2015-01-19 01:00 - 2015-01-19 01:00 - 00000000 ____D () C:\Windows\SysWOW64\hu
2015-01-19 01:00 - 2015-01-19 01:00 - 00000000 ____D () C:\Windows\SysWOW64\hr
2015-01-19 01:00 - 2015-01-19 01:00 - 00000000 ____D () C:\Windows\SysWOW64\he
2015-01-19 01:00 - 2015-01-19 01:00 - 00000000 ____D () C:\Windows\SysWOW64\fr
2015-01-19 01:00 - 2015-01-19 01:00 - 00000000 ____D () C:\Windows\SysWOW64\fi
2015-01-19 01:00 - 2015-01-19 01:00 - 00000000 ____D () C:\Windows\SysWOW64\et
2015-01-19 01:00 - 2015-01-19 01:00 - 00000000 ____D () C:\Windows\SysWOW64\es
2015-01-19 01:00 - 2015-01-19 01:00 - 00000000 ____D () C:\Windows\SysWOW64\el
2015-01-19 01:00 - 2015-01-19 01:00 - 00000000 ____D () C:\Windows\SysWOW64\da
2015-01-19 01:00 - 2015-01-19 01:00 - 00000000 ____D () C:\Windows\SysWOW64\cs
2015-01-19 01:00 - 2015-01-19 01:00 - 00000000 ____D () C:\Windows\SysWOW64\bg
2015-01-19 01:00 - 2015-01-19 01:00 - 00000000 ____D () C:\Windows\SysWOW64\ar
2015-01-19 01:00 - 2015-01-19 01:00 - 00000000 ____D () C:\Windows\System32\zh-Hant
2015-01-19 01:00 - 2015-01-19 01:00 - 00000000 ____D () C:\Windows\System32\zh-Hans
2015-01-19 01:00 - 2015-01-19 01:00 - 00000000 ____D () C:\Windows\System32\tr
2015-01-19 01:00 - 2015-01-19 01:00 - 00000000 ____D () C:\Windows\System32\th
2015-01-19 01:00 - 2015-01-19 01:00 - 00000000 ____D () C:\Windows\System32\sv
2015-01-19 01:00 - 2015-01-19 01:00 - 00000000 ____D () C:\Windows\System32\sr
2015-01-19 01:00 - 2015-01-19 01:00 - 00000000 ____D () C:\Windows\System32\sl
2015-01-19 01:00 - 2015-01-19 01:00 - 00000000 ____D () C:\Windows\System32\sk
2015-01-19 01:00 - 2015-01-19 01:00 - 00000000 ____D () C:\Windows\System32\ru
2015-01-19 01:00 - 2015-01-19 01:00 - 00000000 ____D () C:\Windows\System32\ro
2015-01-19 01:00 - 2015-01-19 01:00 - 00000000 ____D () C:\Windows\System32\pl
2015-01-19 01:00 - 2015-01-19 01:00 - 00000000 ____D () C:\Windows\System32\no
2015-01-19 01:00 - 2015-01-19 01:00 - 00000000 ____D () C:\Windows\System32\nl
2015-01-19 01:00 - 2015-01-19 01:00 - 00000000 ____D () C:\Windows\System32\lv
2015-01-19 01:00 - 2015-01-19 01:00 - 00000000 ____D () C:\Windows\System32\lt
2015-01-19 01:00 - 2015-01-19 01:00 - 00000000 ____D () C:\Windows\System32\ko
2015-01-19 01:00 - 2015-01-19 01:00 - 00000000 ____D () C:\Windows\System32\ja
2015-01-19 01:00 - 2015-01-19 01:00 - 00000000 ____D () C:\Windows\System32\it
2015-01-19 01:00 - 2015-01-19 01:00 - 00000000 ____D () C:\Windows\System32\hu
2015-01-19 01:00 - 2015-01-19 01:00 - 00000000 ____D () C:\Windows\System32\hr
2015-01-19 01:00 - 2015-01-19 01:00 - 00000000 ____D () C:\Windows\System32\he
2015-01-19 01:00 - 2015-01-19 01:00 - 00000000 ____D () C:\Windows\System32\fr
2015-01-19 01:00 - 2015-01-19 01:00 - 00000000 ____D () C:\Windows\System32\fi
2015-01-19 01:00 - 2015-01-19 01:00 - 00000000 ____D () C:\Windows\System32\et
2015-01-19 01:00 - 2015-01-19 01:00 - 00000000 ____D () C:\Windows\System32\es
2015-01-19 01:00 - 2015-01-19 01:00 - 00000000 ____D () C:\Windows\System32\el
2015-01-19 01:00 - 2015-01-19 01:00 - 00000000 ____D () C:\Windows\System32\da
2015-01-19 01:00 - 2015-01-19 01:00 - 00000000 ____D () C:\Windows\System32\cs
2015-01-19 01:00 - 2015-01-19 01:00 - 00000000 ____D () C:\Windows\System32\bg
2015-01-19 01:00 - 2015-01-19 01:00 - 00000000 ____D () C:\Windows\System32\ar
2015-01-19 01:00 - 2015-01-19 01:00 - 00000000 ____D () C:\Windows\DPDrv
2015-01-19 00:50 - 2015-01-19 00:50 - 00000000 ____D () C:\ProgramData\Synaptics
2015-01-19 00:50 - 2015-01-19 00:49 - 00753392 _____ (Synaptics Incorporated) C:\Windows\System32\SynCOM.dll
2015-01-19 00:50 - 2015-01-19 00:49 - 00580336 _____ (Synaptics Incorporated) C:\Windows\System32\Drivers\SynTP.sys
2015-01-19 00:50 - 2015-01-19 00:49 - 00409328 _____ (Synaptics Incorporated) C:\Windows\SysWOW64\SynCom.dll
2015-01-19 00:50 - 2015-01-19 00:49 - 00256240 _____ (Synaptics Incorporated) C:\Windows\System32\SynTPAPI.dll
2015-01-19 00:50 - 2015-01-19 00:49 - 00212208 _____ (Synaptics Incorporated) C:\Windows\System32\SynTPCo20.dll
2015-01-19 00:50 - 2015-01-19 00:49 - 00195784 _____ () C:\Windows\System32\pca-manta.bin
2015-01-19 00:22 - 2015-01-19 00:22 - 00001674 _____ () C:\Users\HP ProBook 470 G2\Desktop\Rechnung5.lnk
2015-01-19 00:22 - 2015-01-19 00:22 - 00000000 ____D () C:\Softwarenetz
2015-01-19 00:22 - 2014-06-12 00:28 - 00181952 _____ (SoftwareNetz) C:\Windows\snui.exe
2015-01-18 23:29 - 2015-01-18 23:29 - 00002212 _____ () C:\Users\Public\Desktop\SteuerSparErklärung 2015.lnk
2015-01-18 23:29 - 2015-01-18 23:29 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Local\AAV
2015-01-18 23:28 - 2015-01-19 05:22 - 00000000 ____D () C:\Program Files (x86)\Akademische Arbeitsgemeinschaft
2015-01-18 23:25 - 2015-01-19 05:20 - 00000000 ____D () C:\ProgramData\AAV
2015-01-18 23:14 - 2015-01-18 23:19 - 205257056 _____ () C:\Users\HP ProBook 470 G2\Downloads\SSEStandard_20.25.123.exe
2015-01-18 22:34 - 2015-02-01 08:26 - 00000052 _____ () C:\Windows\SysWOW64\DOErrors.log
2015-01-18 22:33 - 2015-02-01 08:25 - 00000000 _____ () C:\Windows\System32\HP_ActiveX_Patch_NOT_DETECTED.txt
2015-01-18 06:32 - 2015-01-18 06:32 - 00000000 ___SD () C:\Users\HP ProBook 470 G2\Documents\Meine Datenquellen
2015-01-18 06:31 - 2015-01-18 06:31 - 00000000 ____D () C:\Users\HP ProBook 470 G2\Documents\Benutzerdefinierte Office-Vorlagen
2015-01-18 06:06 - 2015-01-18 06:06 - 00000000 ____D () C:\Users\HP ProBook 470 G2\Documents\OneNote-Notizbücher
2015-01-18 05:58 - 2015-01-18 06:02 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Roaming\Steganos
2015-01-18 05:58 - 2015-01-18 05:58 - 00001246 _____ () C:\Users\HP ProBook 470 G2\Desktop\Passwort-Manager.lnk
2015-01-18 05:58 - 2015-01-18 05:58 - 00000000 ____D () C:\Program Files (x86)\Steganos Password Manager Free 11
2015-01-18 05:57 - 2015-01-19 05:39 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Local\Adobe
2015-01-18 05:52 - 2015-01-18 05:52 - 00000000 ____D () C:\ProgramData\FLEXnet
2015-01-18 05:50 - 2015-01-18 05:50 - 08275369 _____ (Steganos GmbH) C:\Users\HP ProBook 470 G2\Downloads\spm2009freeint.exe
2015-01-18 05:50 - 2015-01-18 05:50 - 00000000 ____D () C:\ProgramData\Adobe
2015-01-18 05:45 - 2015-01-18 05:45 - 00000000 ____D () C:\Windows\SysWOW64\spool
2015-01-18 05:45 - 2015-01-18 05:45 - 00000000 ____D () C:\Windows\SysWOW64\Macromed
2015-01-18 05:42 - 2015-01-18 05:50 - 00000000 ____D () C:\Program Files (x86)\Adobe
2015-01-18 03:45 - 2015-01-18 03:45 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Roaming\My Bluetooth
2015-01-18 03:32 - 2015-01-26 06:16 - 00000000 ____D () C:\Users\HP ProBook 470 G2\Documents\Outlook-Dateien
2015-01-18 03:07 - 2015-01-18 22:26 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Roaming\Windows Live Writer
2015-01-18 03:07 - 2015-01-18 03:07 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Local\Windows Live Writer
2015-01-18 03:04 - 2015-01-18 03:04 - 00002498 _____ () C:\Users\HP ProBook 470 G2\Desktop\Word 2013.lnk
2015-01-18 03:04 - 2015-01-18 03:04 - 00002494 _____ () C:\Users\HP ProBook 470 G2\Desktop\Excel 2013.lnk
2015-01-18 03:04 - 2015-01-18 03:04 - 00002449 _____ () C:\Users\HP ProBook 470 G2\Desktop\Lync 2013.lnk
2015-01-18 03:04 - 2015-01-18 03:04 - 00002412 _____ () C:\Users\HP ProBook 470 G2\Desktop\OneNote 2013.lnk
2015-01-18 03:02 - 2015-01-18 03:02 - 00003214 _____ () C:\Windows\System32\Tasks\HP Officejet 6600.exe_{F24B9D44-93E3-4130-BAC4-774FFE8E795B}
2015-01-18 02:59 - 2015-02-01 05:21 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Roaming\HpUpdate
2015-01-18 02:59 - 2015-01-18 02:59 - 00002159 _____ () C:\Users\Public\Desktop\HP Officejet 6600.lnk
2015-01-18 02:59 - 2012-10-16 19:31 - 00741480 ____N (Hewlett-Packard Co.) C:\Windows\System32\HPDiscoPM5D12.dll
2015-01-18 02:58 - 2015-01-19 01:32 - 00000000 ____D () C:\ProgramData\HP
2015-01-18 02:58 - 2015-01-18 02:59 - 00000000 ____D () C:\Program Files (x86)\HP
2015-01-18 02:58 - 2015-01-18 02:58 - 00000000 ____D () C:\Program Files\HP
2015-01-18 02:57 - 2015-01-18 02:57 - 00000057 _____ () C:\ProgramData\Ament.ini
2015-01-18 02:56 - 2015-01-18 03:02 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Local\HP
2015-01-18 01:46 - 2014-12-12 21:09 - 00144384 _____ (Microsoft Corporation) C:\Windows\System32\ieUnatt.exe
2015-01-18 01:46 - 2014-12-12 19:33 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2015-01-18 01:46 - 2014-12-11 09:47 - 00087040 _____ (Microsoft Corporation) C:\Windows\System32\TSWbPrxy.exe
2015-01-18 01:46 - 2014-07-08 18:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\System32\KBDYAK.DLL
2015-01-18 01:46 - 2014-07-08 18:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\System32\KBDTAT.DLL
2015-01-18 01:46 - 2014-07-08 18:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\System32\KBDRU1.DLL
2015-01-18 01:46 - 2014-07-08 18:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\System32\KBDBASH.DLL
2015-01-18 01:46 - 2014-07-08 18:03 - 00006656 _____ (Microsoft Corporation) C:\Windows\System32\KBDRU.DLL
2015-01-18 01:46 - 2014-07-08 17:31 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDYAK.DLL
2015-01-18 01:46 - 2014-07-08 17:31 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDTAT.DLL
2015-01-18 01:46 - 2014-07-08 17:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRU1.DLL
2015-01-18 01:46 - 2014-07-08 17:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRU.DLL
2015-01-18 01:46 - 2014-07-08 17:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDBASH.DLL
2015-01-18 01:46 - 2014-07-08 14:38 - 00419992 _____ () C:\Windows\System32\locale.nls
2015-01-18 01:46 - 2014-07-08 14:30 - 00419992 _____ () C:\Windows\SysWOW64\locale.nls
2015-01-18 01:08 - 2014-08-28 18:07 - 03179520 _____ (Microsoft Corporation) C:\Windows\System32\rdpcorets.dll
2015-01-18 01:08 - 2014-05-08 01:32 - 00016384 _____ (Microsoft Corporation) C:\Windows\System32\RdpGroupPolicyExtension.dll
2015-01-18 01:07 - 2014-09-04 18:11 - 06584320 _____ (Microsoft Corporation) C:\Windows\System32\mstscax.dll
2015-01-18 01:07 - 2014-09-04 17:52 - 05703168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2015-01-18 00:58 - 2015-01-18 00:58 - 00000000 ____D () C:\Windows\de
2015-01-18 00:57 - 2015-01-18 00:57 - 00000000 ____D () C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2015-01-18 00:56 - 2015-01-18 00:56 - 00000000 ____D () C:\Windows\PCHEALTH
2015-01-18 00:56 - 2015-01-18 00:56 - 00000000 ____D () C:\Program Files\Windows Live
2015-01-18 00:55 - 2015-01-18 00:57 - 00000000 ____D () C:\Program Files (x86)\Windows Live
2015-01-18 00:54 - 2010-06-01 19:55 - 00527192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_7.dll
2015-01-18 00:54 - 2010-06-01 19:55 - 00518488 _____ (Microsoft Corporation) C:\Windows\System32\XAudio2_7.dll
2015-01-18 00:54 - 2010-06-01 19:55 - 00077656 _____ (Microsoft Corporation) C:\Windows\System32\XAPOFX1_5.dll
2015-01-18 00:54 - 2010-06-01 19:55 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_5.dll
2015-01-18 00:54 - 2010-05-26 02:41 - 02526056 _____ (Microsoft Corporation) C:\Windows\System32\D3DCompiler_43.dll
2015-01-18 00:54 - 2010-05-26 02:41 - 02106216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_43.dll
2015-01-18 00:54 - 2010-05-26 02:41 - 00276832 _____ (Microsoft Corporation) C:\Windows\System32\d3dx11_43.dll
2015-01-18 00:54 - 2010-05-26 02:41 - 00248672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_43.dll
2015-01-18 00:53 - 2009-09-04 08:29 - 00523088 _____ (Microsoft Corporation) C:\Windows\System32\d3dx10_42.dll
2015-01-18 00:53 - 2009-09-04 08:29 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_42.dll
2015-01-18 00:52 - 2015-01-18 00:52 - 00000199 _____ () C:\Windows\DirectX.log
2015-01-18 00:52 - 2006-11-29 04:06 - 04398360 _____ (Microsoft Corporation) C:\Windows\System32\d3dx9_32.dll
2015-01-18 00:52 - 2006-11-29 04:06 - 03426072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_32.dll
2015-01-18 00:50 - 2015-01-21 01:09 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Local\Windows Live
2015-01-18 00:48 - 2015-01-18 00:49 - 01245384 _____ (Microsoft Corporation) C:\Users\HP ProBook 470 G2\Downloads\wlsetup-web.exe
2015-01-18 00:48 - 2015-01-18 00:48 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Local\Intel_Corporation
2015-01-18 00:04 - 2015-01-18 00:04 - 00000000 ____D () C:\Windows\System32\Tasks\OfficeSoftwareProtectionPlatform
2015-01-18 00:04 - 2015-01-18 00:04 - 00000000 ____D () C:\Program Files (x86)\Microsoft Office
2015-01-18 00:01 - 2015-01-18 02:48 - 00000000 ____D () C:\Program Files\Microsoft Office 15
2015-01-17 09:48 - 2013-10-01 18:22 - 00056832 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\TsUsbFlt.sys
2015-01-17 09:48 - 2013-10-01 18:11 - 00013824 _____ (Microsoft Corporation) C:\Windows\System32\TsUsbRedirectionGroupPolicyControl.exe
2015-01-17 09:48 - 2013-10-01 18:08 - 00012800 _____ (Microsoft Corporation) C:\Windows\System32\TsUsbRedirectionGroupPolicyExtension.dll
2015-01-17 09:48 - 2013-10-01 17:48 - 00056832 _____ (Microsoft Corporation) C:\Windows\System32\MsRdpWebAccess.dll
2015-01-17 09:48 - 2013-10-01 17:48 - 00018944 _____ (Microsoft Corporation) C:\Windows\System32\wksprtPS.dll
2015-01-17 09:48 - 2013-10-01 17:29 - 00062976 _____ (Microsoft Corporation) C:\Windows\System32\tsgqec.dll
2015-01-17 09:48 - 2013-10-01 17:10 - 00044544 _____ (Microsoft Corporation) C:\Windows\System32\TsUsbGDCoInstaller.dll
2015-01-17 09:48 - 2013-10-01 16:15 - 01057280 _____ (Microsoft Corporation) C:\Windows\System32\rdvidcrl.dll
2015-01-17 09:48 - 2013-10-01 16:14 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MsRdpWebAccess.dll
2015-01-17 09:48 - 2013-10-01 16:14 - 00017920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wksprtPS.dll
2015-01-17 09:48 - 2013-10-01 16:01 - 00420864 _____ (Microsoft Corporation) C:\Windows\System32\wksprt.exe
2015-01-17 09:48 - 2013-10-01 15:58 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll
2015-01-17 09:48 - 2013-10-01 15:31 - 01147392 _____ (Microsoft Corporation) C:\Windows\System32\mstsc.exe
2015-01-17 09:48 - 2013-10-01 15:08 - 00855552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll
2015-01-17 09:48 - 2013-10-01 14:34 - 01068544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe
2015-01-17 09:42 - 2012-08-23 06:13 - 00243200 _____ (Microsoft Corporation) C:\Windows\System32\rdpudd.dll
2015-01-17 09:42 - 2012-08-23 06:10 - 00019456 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\rdpvideominiport.sys
2015-01-17 09:42 - 2012-08-23 06:08 - 00030208 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\TsUsbGD.sys
2015-01-17 09:42 - 2012-08-23 03:12 - 00192000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpendp_winip.dll
2015-01-17 09:42 - 2012-08-23 02:51 - 00228864 _____ (Microsoft Corporation) C:\Windows\System32\rdpendp_winip.dll
2015-01-17 09:40 - 2015-01-17 09:40 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2015-01-17 09:40 - 2015-01-17 09:40 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2015-01-17 09:37 - 2014-10-17 18:05 - 04121600 _____ (Microsoft Corporation) C:\Windows\System32\mf.dll
2015-01-17 09:37 - 2014-10-17 17:33 - 03209728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll
2015-01-17 09:37 - 2014-07-06 18:06 - 00206848 _____ (Microsoft Corporation) C:\Windows\System32\mfps.dll
2015-01-17 09:37 - 2014-07-06 18:06 - 00055808 _____ (Microsoft Corporation) C:\Windows\System32\rrinstaller.exe
2015-01-17 09:37 - 2014-07-06 18:06 - 00024576 _____ (Microsoft Corporation) C:\Windows\System32\mfpmp.exe
2015-01-17 09:37 - 2014-07-06 18:02 - 00002048 _____ (Microsoft Corporation) C:\Windows\System32\mferror.dll
2015-01-17 09:37 - 2014-07-06 17:40 - 00103424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfps.dll
2015-01-17 09:37 - 2014-07-06 17:39 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rrinstaller.exe
2015-01-17 09:37 - 2014-07-06 17:39 - 00023040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfpmp.exe
2015-01-17 09:37 - 2014-07-06 17:37 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mferror.dll
2015-01-17 09:37 - 2012-07-25 19:08 - 00744448 _____ (Microsoft Corporation) C:\Windows\System32\WUDFx.dll
2015-01-17 09:37 - 2012-07-25 19:08 - 00229888 _____ (Microsoft Corporation) C:\Windows\System32\WUDFHost.exe
2015-01-17 09:37 - 2012-07-25 19:08 - 00194048 _____ (Microsoft Corporation) C:\Windows\System32\WUDFPlatform.dll
2015-01-17 09:37 - 2012-07-25 19:08 - 00084992 _____ (Microsoft Corporation) C:\Windows\System32\WUDFSvc.dll
2015-01-17 09:37 - 2012-07-25 19:08 - 00045056 _____ (Microsoft Corporation) C:\Windows\System32\WUDFCoinstaller.dll
2015-01-17 09:37 - 2012-07-25 18:26 - 00198656 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\WUDFRd.sys
2015-01-17 09:37 - 2012-07-25 18:26 - 00087040 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\WUDFPf.sys
2015-01-17 09:37 - 2012-06-02 06:57 - 00000003 _____ () C:\Windows\System32\Drivers\MsftWdf_User_01_11_00_Inbox_Critical.Wdf
2015-01-17 09:35 - 2014-06-26 18:08 - 02777088 _____ (Microsoft Corporation) C:\Windows\System32\msmpeg2vdec.dll
2015-01-17 09:35 - 2014-06-26 17:45 - 02285056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2015-01-17 09:32 - 2015-01-17 09:32 - 00000000 ____D () C:\Users\Public\Documents\CyberLink
2015-01-17 09:32 - 2015-01-17 09:32 - 00000000 ____D () C:\Users\HP ProBook 470 G2\Documents\CyberLink
2015-01-17 09:32 - 2015-01-17 09:32 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Roaming\CyberLink
2015-01-17 09:32 - 2014-11-07 19:16 - 00002048 _____ (Microsoft Corporation) C:\Windows\System32\tzres.dll
2015-01-17 09:32 - 2014-11-07 18:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2015-01-17 09:32 - 2014-10-13 18:13 - 03241984 _____ (Microsoft Corporation) C:\Windows\System32\msi.dll
2015-01-17 09:32 - 2014-10-13 17:50 - 02363904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2015-01-17 09:32 - 2014-09-24 18:08 - 00371712 _____ (Microsoft Corporation) C:\Windows\System32\qdvd.dll
2015-01-17 09:32 - 2014-09-24 17:40 - 00519680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll
2015-01-17 09:32 - 2014-08-01 03:53 - 01031168 _____ (Microsoft Corporation) C:\Windows\System32\TSWorkspace.dll
2015-01-17 09:32 - 2014-08-01 03:35 - 00793600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll
2015-01-17 09:32 - 2014-06-23 19:29 - 02565120 _____ (Microsoft Corporation) C:\Windows\System32\d3d10warp.dll
2015-01-17 09:32 - 2014-06-23 18:59 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2015-01-17 09:31 - 2015-01-17 09:31 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Local\CyberLink
2015-01-17 09:31 - 2014-11-10 17:46 - 00119296 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\tdx.sys
2015-01-17 09:31 - 2014-10-29 18:03 - 00165888 _____ (Microsoft Corporation) C:\Windows\System32\charmap.exe
2015-01-17 09:31 - 2014-10-29 17:45 - 00155136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\charmap.exe
2015-01-17 09:31 - 2014-06-24 18:05 - 14175744 _____ (Microsoft Corporation) C:\Windows\System32\shell32.dll
2015-01-17 09:31 - 2014-06-24 17:41 - 12874240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2015-01-17 09:31 - 2014-02-03 18:35 - 00274880 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\msiscsi.sys
2015-01-17 09:31 - 2014-02-03 18:35 - 00190912 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\storport.sys
2015-01-17 09:31 - 2014-02-03 18:35 - 00027584 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\Diskdump.sys
2015-01-17 09:31 - 2014-02-03 18:28 - 00002048 _____ (Microsoft Corporation) C:\Windows\System32\iologmsg.dll
2015-01-17 09:31 - 2014-02-03 18:00 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iologmsg.dll
2015-01-17 09:31 - 2014-01-27 18:32 - 00228864 _____ (Microsoft Corporation) C:\Windows\System32\wwansvc.dll
2015-01-17 09:31 - 2014-01-23 18:37 - 01684928 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\ntfs.sys
2015-01-17 09:27 - 2014-10-02 18:12 - 02020352 _____ (Microsoft Corporation) C:\Windows\System32\WsmSvc.dll
2015-01-17 09:27 - 2014-10-02 18:12 - 00346624 _____ (Microsoft Corporation) C:\Windows\System32\WSManMigrationPlugin.dll
2015-01-17 09:27 - 2014-10-02 18:12 - 00310272 _____ (Microsoft Corporation) C:\Windows\System32\WsmWmiPl.dll
2015-01-17 09:27 - 2014-10-02 18:12 - 00181248 _____ (Microsoft Corporation) C:\Windows\System32\WsmAuto.dll
2015-01-17 09:27 - 2014-10-02 18:11 - 00266240 _____ (Microsoft Corporation) C:\Windows\System32\WSManHTTPConfig.exe
2015-01-17 09:27 - 2014-10-02 17:45 - 01177088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmSvc.dll
2015-01-17 09:27 - 2014-10-02 17:45 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSManMigrationPlugin.dll
2015-01-17 09:27 - 2014-10-02 17:45 - 00214016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmWmiPl.dll
2015-01-17 09:27 - 2014-10-02 17:45 - 00145920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmAuto.dll
2015-01-17 09:27 - 2014-10-02 17:44 - 00198656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSManHTTPConfig.exe
2015-01-17 09:13 - 2015-02-03 05:04 - 00003854 _____ () C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1421514790
2015-01-17 09:13 - 2015-01-17 09:13 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Roaming\Opera Software
2015-01-17 09:13 - 2015-01-17 09:13 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Local\Opera Software
2015-01-17 09:12 - 2015-02-03 05:04 - 00000000 ____D () C:\Program Files (x86)\Opera
2015-01-17 09:12 - 2015-01-17 09:12 - 00683664 _____ (Opera Software) C:\Users\HP ProBook 470 G2\Downloads\Opera_NI_stable.exe
2015-01-17 09:08 - 2015-01-29 22:13 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2015-01-17 09:08 - 2015-01-17 09:09 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Roaming\Mozilla
2015-01-17 09:08 - 2015-01-17 09:09 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Local\Mozilla
2015-01-17 09:08 - 2015-01-17 09:08 - 00001158 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2015-01-17 09:08 - 2015-01-17 09:08 - 00000000 ____D () C:\ProgramData\Mozilla
2015-01-17 09:07 - 2015-01-17 09:07 - 00243728 _____ () C:\Users\HP ProBook 470 G2\Downloads\Firefox Setup Stub 35.0.exe
2015-01-17 09:05 - 2015-01-17 09:05 - 00000000 __SHD () C:\Users\HP ProBook 470 G2\AppData\Local\EmieUserList
2015-01-17 09:05 - 2015-01-17 09:05 - 00000000 __SHD () C:\Users\HP ProBook 470 G2\AppData\Local\EmieSiteList
2015-01-17 09:02 - 2015-01-17 09:02 - 00001228 _____ () C:\Users\HP ProBook 470 G2\Desktop\Windows Explorer.lnk
2015-01-17 06:41 - 2015-01-17 06:42 - 00000000 ____D () C:\Windows\System32\MRT
2015-01-17 06:41 - 2014-12-31 04:12 - 113365784 _____ (Microsoft Corporation) C:\Windows\System32\MRT.exe
2015-01-17 06:40 - 2014-06-30 14:24 - 00008856 _____ (Microsoft Corporation) C:\Windows\System32\icardres.dll
2015-01-17 06:40 - 2014-06-30 14:14 - 00008856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardres.dll
2015-01-17 06:40 - 2014-03-09 13:48 - 01389208 _____ (Microsoft Corporation) C:\Windows\System32\icardagt.exe
2015-01-17 06:40 - 2014-03-09 13:48 - 00171160 _____ (Microsoft Corporation) C:\Windows\System32\infocardapi.dll
2015-01-17 06:40 - 2014-03-09 13:47 - 00619672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardagt.exe
2015-01-17 06:40 - 2014-03-09 13:47 - 00099480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\infocardapi.dll
2015-01-17 06:39 - 2014-11-26 17:43 - 00389296 _____ (Microsoft Corporation) C:\Windows\System32\iedkcs32.dll
2015-01-17 06:39 - 2014-11-26 17:10 - 00342200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-01-17 06:39 - 2014-11-21 19:13 - 25059840 _____ (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2015-01-17 06:39 - 2014-11-21 19:06 - 02724864 _____ (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2015-01-17 06:39 - 2014-11-21 19:06 - 00004096 _____ (Microsoft Corporation) C:\Windows\System32\ieetwcollectorres.dll
2015-01-17 06:39 - 2014-11-21 18:50 - 00580096 _____ (Microsoft Corporation) C:\Windows\System32\vbscript.dll
2015-01-17 06:39 - 2014-11-21 18:50 - 00066560 _____ (Microsoft Corporation) C:\Windows\System32\iesetup.dll
2015-01-17 06:39 - 2014-11-21 18:49 - 02885120 _____ (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2015-01-17 06:39 - 2014-11-21 18:49 - 00048640 _____ (Microsoft Corporation) C:\Windows\System32\ieetwproxystub.dll
2015-01-17 06:39 - 2014-11-21 18:48 - 00088064 _____ (Microsoft Corporation) C:\Windows\System32\MshtmlDac.dll
2015-01-17 06:39 - 2014-11-21 18:41 - 00054784 _____ (Microsoft Corporation) C:\Windows\System32\jsproxy.dll
2015-01-17 06:39 - 2014-11-21 18:40 - 00034304 _____ (Microsoft Corporation) C:\Windows\System32\iernonce.dll
2015-01-17 06:39 - 2014-11-21 18:37 - 00633856 _____ (Microsoft Corporation) C:\Windows\System32\ieui.dll
2015-01-17 06:39 - 2014-11-21 18:35 - 00114688 _____ (Microsoft Corporation) C:\Windows\System32\ieetwcollector.exe
2015-01-17 06:39 - 2014-11-21 18:34 - 06039552 _____ (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2015-01-17 06:39 - 2014-11-21 18:34 - 00814080 _____ (Microsoft Corporation) C:\Windows\System32\jscript9diag.dll
2015-01-17 06:39 - 2014-11-21 18:26 - 00968704 _____ (Microsoft Corporation) C:\Windows\System32\MsSpellCheckingFacility.exe
2015-01-17 06:39 - 2014-11-21 18:22 - 19749376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-01-17 06:39 - 2014-11-21 18:22 - 00490496 _____ (Microsoft Corporation) C:\Windows\System32\dxtmsft.dll
2015-01-17 06:39 - 2014-11-21 18:20 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2015-01-17 06:39 - 2014-11-21 18:14 - 00077824 _____ (Microsoft Corporation) C:\Windows\System32\JavaScriptCollectionAgent.dll
2015-01-17 06:39 - 2014-11-21 18:09 - 00199680 _____ (Microsoft Corporation) C:\Windows\System32\msrating.dll
2015-01-17 06:39 - 2014-11-21 18:08 - 00092160 _____ (Microsoft Corporation) C:\Windows\System32\mshtmled.dll
2015-01-17 06:39 - 2014-11-21 18:07 - 00501248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-01-17 06:39 - 2014-11-21 18:07 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-01-17 06:39 - 2014-11-21 18:06 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2015-01-17 06:39 - 2014-11-21 18:05 - 00316928 _____ (Microsoft Corporation) C:\Windows\System32\dxtrans.dll
2015-01-17 06:39 - 2014-11-21 18:05 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-01-17 06:39 - 2014-11-21 18:01 - 02277888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-01-17 06:39 - 2014-11-21 17:59 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-01-17 06:39 - 2014-11-21 17:58 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-01-17 06:39 - 2014-11-21 17:56 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-01-17 06:39 - 2014-11-21 17:54 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2015-01-17 06:39 - 2014-11-21 17:49 - 00800768 _____ (Microsoft Corporation) C:\Windows\System32\msfeeds.dll
2015-01-17 06:39 - 2014-11-21 17:49 - 00718848 _____ (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe
2015-01-17 06:39 - 2014-11-21 17:47 - 01359360 _____ (Microsoft Corporation) C:\Windows\System32\mshtmlmedia.dll
2015-01-17 06:39 - 2014-11-21 17:46 - 02125312 _____ (Microsoft Corporation) C:\Windows\System32\inetcpl.cpl
2015-01-17 06:39 - 2014-11-21 17:45 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-01-17 06:39 - 2014-11-21 17:43 - 14412800 _____ (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2015-01-17 06:39 - 2014-11-21 17:40 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-01-17 06:39 - 2014-11-21 17:36 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-01-17 06:39 - 2014-11-21 17:35 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-01-17 06:39 - 2014-11-21 17:33 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-01-17 06:39 - 2014-11-21 17:29 - 04299264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-01-17 06:39 - 2014-11-21 17:28 - 02358272 _____ (Microsoft Corporation) C:\Windows\System32\wininet.dll
2015-01-17 06:39 - 2014-11-21 17:23 - 00688640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-01-17 06:39 - 2014-11-21 17:22 - 02052096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-01-17 06:39 - 2014-11-21 17:21 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2015-01-17 06:39 - 2014-11-21 17:15 - 01548288 _____ (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2015-01-17 06:39 - 2014-11-21 17:13 - 12836864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-01-17 06:39 - 2014-11-21 17:03 - 00800768 _____ (Microsoft Corporation) C:\Windows\System32\ieapfltr.dll
2015-01-17 06:39 - 2014-11-21 17:00 - 01888256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-01-17 06:39 - 2014-11-21 16:56 - 01307136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-01-17 06:39 - 2014-11-21 16:54 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-01-17 06:39 - 2014-06-05 22:16 - 00035480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TsWpfWrp.exe
2015-01-17 06:39 - 2014-06-05 22:12 - 00035480 _____ (Microsoft Corporation) C:\Windows\System32\TsWpfWrp.exe
2015-01-17 06:38 - 2014-09-19 01:42 - 00342016 _____ (Microsoft Corporation) C:\Windows\System32\schannel.dll
2015-01-17 06:38 - 2014-09-19 01:42 - 00314880 _____ (Microsoft Corporation) C:\Windows\System32\msv1_0.dll
2015-01-17 06:38 - 2014-09-19 01:42 - 00309760 _____ (Microsoft Corporation) C:\Windows\System32\ncrypt.dll
2015-01-17 06:38 - 2014-09-19 01:42 - 00210944 _____ (Microsoft Corporation) C:\Windows\System32\wdigest.dll
2015-01-17 06:38 - 2014-09-19 01:42 - 00086528 _____ (Microsoft Corporation) C:\Windows\System32\TSpkg.dll
2015-01-17 06:38 - 2014-09-19 01:42 - 00022016 _____ (Microsoft Corporation) C:\Windows\System32\credssp.dll
2015-01-17 06:38 - 2014-09-19 01:23 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2015-01-17 06:38 - 2014-09-19 01:23 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-01-17 06:38 - 2014-09-19 01:23 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2015-01-17 06:38 - 2014-09-19 01:23 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2015-01-17 06:38 - 2014-09-19 01:23 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2015-01-17 06:38 - 2014-09-19 01:23 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2015-01-17 06:38 - 2014-07-16 18:07 - 00455168 _____ (Microsoft Corporation) C:\Windows\System32\winlogon.exe
2015-01-17 06:38 - 2014-07-16 18:07 - 00235520 _____ (Microsoft Corporation) C:\Windows\System32\winsta.dll
2015-01-17 06:38 - 2014-07-16 18:07 - 00150528 _____ (Microsoft Corporation) C:\Windows\System32\rdpcorekmts.dll
2015-01-17 06:38 - 2014-07-16 17:40 - 00157696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winsta.dll
2015-01-17 06:38 - 2014-07-16 17:21 - 00212480 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\rdpwd.sys
2015-01-17 06:38 - 2014-07-16 17:21 - 00039936 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\tssecsrv.sys
2015-01-17 06:38 - 2014-04-24 18:34 - 00801280 _____ (Microsoft Corporation) C:\Windows\System32\usp10.dll
2015-01-17 06:38 - 2014-04-24 18:06 - 00626688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usp10.dll
2015-01-17 06:38 - 2014-03-04 01:44 - 01163264 _____ (Microsoft Corporation) C:\Windows\System32\kernel32.dll
2015-01-17 06:38 - 2014-03-04 01:44 - 00722944 _____ (Microsoft Corporation) C:\Windows\System32\objsel.dll
2015-01-17 06:38 - 2014-03-04 01:44 - 00424960 _____ (Microsoft Corporation) C:\Windows\System32\KernelBase.dll
2015-01-17 06:38 - 2014-03-04 01:44 - 00362496 _____ (Microsoft Corporation) C:\Windows\System32\wow64win.dll
2015-01-17 06:38 - 2014-03-04 01:44 - 00243712 _____ (Microsoft Corporation) C:\Windows\System32\wow64.dll
2015-01-17 06:38 - 2014-03-04 01:44 - 00039936 _____ (Microsoft Corporation) C:\Windows\System32\wincredprovider.dll
2015-01-17 06:38 - 2014-03-04 01:44 - 00016384 _____ (Microsoft Corporation) C:\Windows\System32\ntvdm64.dll
2015-01-17 06:38 - 2014-03-04 01:44 - 00013312 _____ (Microsoft Corporation) C:\Windows\System32\wow64cpu.dll
2015-01-17 06:38 - 2014-03-04 01:43 - 00057344 _____ (Microsoft Corporation) C:\Windows\System32\cngprovider.dll
2015-01-17 06:38 - 2014-03-04 01:43 - 00056832 _____ (Microsoft Corporation) C:\Windows\System32\adprovider.dll
2015-01-17 06:38 - 2014-03-04 01:43 - 00053760 _____ (Microsoft Corporation) C:\Windows\System32\capiprovider.dll
2015-01-17 06:38 - 2014-03-04 01:43 - 00052736 _____ (Microsoft Corporation) C:\Windows\System32\dpapiprovider.dll
2015-01-17 06:38 - 2014-03-04 01:43 - 00044544 _____ (Microsoft Corporation) C:\Windows\System32\dimsroam.dll
2015-01-17 06:38 - 2014-03-04 01:17 - 00538112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\objsel.dll
2015-01-17 06:38 - 2014-03-04 01:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cngprovider.dll
2015-01-17 06:38 - 2014-03-04 01:17 - 00049664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adprovider.dll
2015-01-17 06:38 - 2014-03-04 01:17 - 00048128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\capiprovider.dll
2015-01-17 06:38 - 2014-03-04 01:17 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpapiprovider.dll
2015-01-17 06:38 - 2014-03-04 01:17 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dimsroam.dll
2015-01-17 06:38 - 2014-03-04 01:17 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wincredprovider.dll
2015-01-17 06:38 - 2014-03-04 01:17 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2015-01-17 06:38 - 2014-03-04 01:16 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2015-01-17 06:38 - 2014-03-04 01:16 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2015-01-17 06:38 - 2014-03-04 01:16 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2015-01-17 06:38 - 2014-03-04 01:16 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2015-01-17 06:38 - 2014-03-04 00:09 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2015-01-17 06:38 - 2014-03-04 00:09 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2015-01-17 06:38 - 2011-04-08 22:58 - 00142336 _____ (Microsoft Corporation) C:\Windows\System32\poqexec.exe
2015-01-17 06:38 - 2011-04-08 21:56 - 00123904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe
2015-01-17 06:37 - 2014-12-18 17:46 - 00141312 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\mrxdav.sys
2015-01-17 06:37 - 2014-12-11 21:35 - 05553592 _____ (Microsoft Corporation) C:\Windows\System32\ntoskrnl.exe
2015-01-17 06:37 - 2014-12-11 21:31 - 00503808 _____ (Microsoft Corporation) C:\Windows\System32\srcore.dll
2015-01-17 06:37 - 2014-12-11 21:31 - 00296960 _____ (Microsoft Corporation) C:\Windows\System32\rstrui.exe
2015-01-17 06:37 - 2014-12-11 21:31 - 00050176 _____ (Microsoft Corporation) C:\Windows\System32\srclient.dll
2015-01-17 06:37 - 2014-12-11 21:11 - 03971512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2015-01-17 06:37 - 2014-12-11 21:11 - 03916728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2015-01-17 06:37 - 2014-12-11 21:07 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2015-01-17 06:37 - 2014-11-10 19:09 - 01424384 _____ (Microsoft Corporation) C:\Windows\System32\WindowsCodecs.dll
2015-01-17 06:37 - 2014-11-10 19:08 - 00728064 _____ (Microsoft Corporation) C:\Windows\System32\kerberos.dll
2015-01-17 06:37 - 2014-11-10 19:08 - 00241152 _____ (Microsoft Corporation) C:\Windows\System32\pku2u.dll
2015-01-17 06:37 - 2014-11-10 18:44 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2015-01-17 06:37 - 2014-11-10 18:44 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-01-17 06:37 - 2014-11-10 18:44 - 00186880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pku2u.dll
2015-01-17 06:37 - 2014-10-13 18:16 - 00155064 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\ksecpkg.sys
2015-01-17 06:37 - 2014-10-13 18:13 - 00683520 _____ (Microsoft Corporation) C:\Windows\System32\termsrv.dll
2015-01-17 06:37 - 2014-10-13 18:12 - 01460736 _____ (Microsoft Corporation) C:\Windows\System32\lsasrv.dll
2015-01-17 06:37 - 2014-10-13 18:09 - 00146432 _____ (Microsoft Corporation) C:\Windows\System32\msaudite.dll
2015-01-17 06:37 - 2014-10-13 18:07 - 00681984 _____ (Microsoft Corporation) C:\Windows\System32\adtschema.dll
2015-01-17 06:37 - 2014-10-13 17:50 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2015-01-17 06:37 - 2014-10-13 17:49 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2015-01-17 06:37 - 2014-10-13 17:47 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2015-01-17 06:37 - 2014-10-13 17:46 - 00681984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2015-01-17 06:37 - 2014-10-09 16:57 - 03198976 _____ (Microsoft Corporation) C:\Windows\System32\win32k.sys
2015-01-17 06:37 - 2014-08-20 22:43 - 01882624 _____ (Microsoft Corporation) C:\Windows\System32\msxml3.dll
2015-01-17 06:37 - 2014-08-20 22:40 - 00002048 _____ (Microsoft Corporation) C:\Windows\System32\msxml3r.dll
2015-01-17 06:37 - 2014-08-20 22:26 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2015-01-17 06:37 - 2014-08-20 22:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2015-01-17 06:37 - 2014-08-11 18:02 - 00878080 _____ (Microsoft Corporation) C:\Windows\System32\IMJP10K.DLL
2015-01-17 06:37 - 2014-08-11 17:36 - 00701440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IMJP10K.DLL
2015-01-17 06:37 - 2014-06-17 18:18 - 00692736 _____ (Microsoft Corporation) C:\Windows\System32\osk.exe
2015-01-17 06:37 - 2014-06-17 17:51 - 00646144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\osk.exe
2015-01-17 06:37 - 2014-06-11 23:52 - 00986560 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\dxgkrnl.sys
2015-01-17 06:37 - 2014-06-03 02:02 - 01941504 _____ (Microsoft Corporation) C:\Windows\System32\authui.dll
2015-01-17 06:37 - 2014-06-03 02:02 - 00504320 _____ (Microsoft Corporation) C:\Windows\System32\msihnd.dll
2015-01-17 06:37 - 2014-06-03 02:02 - 00112064 _____ (Microsoft Corporation) C:\Windows\System32\consent.exe
2015-01-17 06:37 - 2014-06-03 01:29 - 01805824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2015-01-17 06:37 - 2014-06-03 01:29 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll
2015-01-17 06:37 - 2014-04-11 18:22 - 00095680 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\ksecdd.sys
2015-01-17 06:37 - 2014-04-11 18:19 - 00136192 _____ (Microsoft Corporation) C:\Windows\System32\sspicli.dll
2015-01-17 06:37 - 2014-04-11 18:19 - 00031232 _____ (Microsoft Corporation) C:\Windows\System32\lsass.exe
2015-01-17 06:37 - 2014-04-11 18:19 - 00029184 _____ (Microsoft Corporation) C:\Windows\System32\sspisrv.dll
2015-01-17 06:37 - 2014-04-11 18:19 - 00028160 _____ (Microsoft Corporation) C:\Windows\System32\secur32.dll
2015-01-17 06:37 - 2014-04-04 18:47 - 01903552 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\tcpip.sys
2015-01-17 06:37 - 2014-04-04 18:47 - 00288192 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\FWPKCLNT.SYS
2015-01-17 06:37 - 2014-03-26 06:44 - 02002432 _____ (Microsoft Corporation) C:\Windows\System32\msxml6.dll
2015-01-17 06:37 - 2014-03-26 06:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\System32\msxml6r.dll
2015-01-17 06:37 - 2014-03-26 06:27 - 01389056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
2015-01-17 06:37 - 2014-03-26 06:25 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6r.dll
2015-01-17 06:37 - 2011-11-16 22:35 - 00395776 _____ (Microsoft Corporation) C:\Windows\System32\webio.dll
2015-01-17 06:37 - 2011-11-16 21:35 - 00314880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webio.dll
2015-01-17 06:36 - 2014-12-18 19:06 - 00210432 _____ (Microsoft Corporation) C:\Windows\System32\profsvc.dll
2015-01-17 06:36 - 2014-12-05 20:17 - 00303616 _____ (Microsoft Corporation) C:\Windows\System32\nlasvc.dll
2015-01-17 06:36 - 2014-12-05 19:50 - 00156672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncsi.dll
2015-01-17 06:36 - 2014-12-05 19:50 - 00052224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nlaapi.dll
2015-01-17 06:36 - 2014-10-24 17:57 - 00077824 _____ (Microsoft Corporation) C:\Windows\System32\packager.dll
2015-01-17 06:36 - 2014-10-24 17:32 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll
2015-01-17 06:36 - 2014-10-17 18:05 - 00861696 _____ (Microsoft Corporation) C:\Windows\System32\oleaut32.dll
2015-01-17 06:36 - 2014-10-17 17:33 - 00571904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2015-01-17 06:36 - 2014-10-02 18:12 - 00500224 _____ (Microsoft Corporation) C:\Windows\System32\AUDIOKSE.dll
2015-01-17 06:36 - 2014-10-02 18:11 - 00680960 _____ (Microsoft Corporation) C:\Windows\System32\audiosrv.dll
2015-01-17 06:36 - 2014-10-02 18:11 - 00440832 _____ (Microsoft Corporation) C:\Windows\System32\AudioEng.dll
2015-01-17 06:36 - 2014-10-02 18:11 - 00296448 _____ (Microsoft Corporation) C:\Windows\System32\AudioSes.dll
2015-01-17 06:36 - 2014-10-02 18:11 - 00284672 _____ (Microsoft Corporation) C:\Windows\System32\EncDump.dll
2015-01-17 06:36 - 2014-10-02 17:44 - 00442880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll
2015-01-17 06:36 - 2014-10-02 17:44 - 00374784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll
2015-01-17 06:36 - 2014-10-02 17:44 - 00195584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll
2015-01-17 06:36 - 2014-09-03 21:23 - 00424448 _____ (Microsoft Corporation) C:\Windows\System32\rastls.dll
2015-01-17 06:36 - 2014-09-03 21:04 - 00372736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rastls.dll
2015-01-17 06:36 - 2014-06-18 14:23 - 01943696 _____ (Microsoft Corporation) C:\Windows\System32\dfshim.dll
2015-01-17 06:36 - 2014-06-18 14:23 - 01131664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dfshim.dll
2015-01-17 06:36 - 2014-06-18 14:23 - 00156824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscorier.dll
2015-01-17 06:36 - 2014-06-18 14:23 - 00156312 _____ (Microsoft Corporation) C:\Windows\System32\mscorier.dll
2015-01-17 06:36 - 2014-06-18 14:23 - 00081560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscories.dll
2015-01-17 06:36 - 2014-06-18 14:23 - 00073880 _____ (Microsoft Corporation) C:\Windows\System32\mscories.dll
2015-01-17 06:36 - 2014-06-06 02:10 - 00624128 _____ (Microsoft Corporation) C:\Windows\System32\qedit.dll
2015-01-17 06:36 - 2014-06-06 01:44 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2015-01-17 06:36 - 2014-05-29 22:45 - 00497152 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\afd.sys
2015-01-17 06:36 - 2014-01-28 18:32 - 00484864 _____ (Microsoft Corporation) C:\Windows\System32\wer.dll
2015-01-17 06:36 - 2014-01-28 18:06 - 00381440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll
2015-01-17 06:36 - 2013-07-20 02:33 - 00124112 _____ (Microsoft Corporation) C:\Windows\System32\PresentationCFFRasterizerNative_v0300.dll
2015-01-17 06:36 - 2013-07-20 02:33 - 00102608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2015-01-17 06:35 - 2014-08-22 18:07 - 00404480 _____ (Microsoft Corporation) C:\Windows\System32\gdi32.dll
2015-01-17 06:35 - 2014-08-22 17:45 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2015-01-17 06:35 - 2011-02-22 20:55 - 00090624 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\bowser.sys
2015-01-17 06:26 - 2014-07-13 18:02 - 01216000 _____ (Microsoft Corporation) C:\Windows\System32\rpcrt4.dll
2015-01-17 06:26 - 2014-07-13 17:40 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2015-01-17 05:57 - 2015-01-17 05:57 - 00000000 ____D () C:\Windows\System32\appmgmt
2015-01-17 05:32 - 2012-02-16 22:38 - 01031680 _____ (Microsoft Corporation) C:\Windows\System32\rdpcore.dll
2015-01-17 05:32 - 2012-02-16 21:34 - 00826880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpcore.dll
2015-01-17 05:32 - 2012-02-16 20:57 - 00023552 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\tdtcp.sys
2015-01-17 05:29 - 2015-02-01 08:26 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Local\Hewlett-Packard
2015-01-17 05:24 - 2014-05-14 08:23 - 02477536 _____ (Microsoft Corporation) C:\Windows\System32\wuaueng.dll
2015-01-17 05:24 - 2014-05-14 08:23 - 00700384 _____ (Microsoft Corporation) C:\Windows\System32\wuapi.dll
2015-01-17 05:24 - 2014-05-14 08:23 - 00581600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2015-01-17 05:24 - 2014-05-14 08:23 - 00058336 _____ (Microsoft Corporation) C:\Windows\System32\wuauclt.exe
2015-01-17 05:24 - 2014-05-14 08:23 - 00044512 _____ (Microsoft Corporation) C:\Windows\System32\wups2.dll
2015-01-17 05:24 - 2014-05-14 08:23 - 00038880 _____ (Microsoft Corporation) C:\Windows\System32\wups.dll
2015-01-17 05:24 - 2014-05-14 08:23 - 00036320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2015-01-17 05:24 - 2014-05-14 08:21 - 02620928 _____ (Microsoft Corporation) C:\Windows\System32\wucltux.dll
2015-01-17 05:24 - 2014-05-14 08:20 - 00097792 _____ (Microsoft Corporation) C:\Windows\System32\wudriver.dll
2015-01-17 05:24 - 2014-05-14 08:17 - 00092672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2015-01-17 05:24 - 2014-05-14 00:23 - 00198600 _____ (Microsoft Corporation) C:\Windows\System32\wuwebv.dll
2015-01-17 05:24 - 2014-05-14 00:23 - 00179656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2015-01-17 05:24 - 2014-05-14 00:20 - 00036864 _____ (Microsoft Corporation) C:\Windows\System32\wuapp.exe
2015-01-17 05:24 - 2014-05-14 00:17 - 00033792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2015-01-17 05:23 - 2015-01-18 23:50 - 00111448 _____ () C:\Users\HP ProBook 470 G2\AppData\Local\GDIPFONTCACHEV1.DAT
2015-01-17 05:23 - 2015-01-17 05:23 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Roaming\Intel Corporation
2015-01-17 05:23 - 2015-01-17 05:23 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Roaming\ATI
2015-01-17 05:23 - 2015-01-17 05:23 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Local\ATI
2015-01-17 05:22 - 2015-01-28 05:08 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Roaming\Hewlett-Packard
2015-01-17 05:22 - 2015-01-19 00:59 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Roaming\hpqLog
2015-01-17 05:22 - 2015-01-17 05:22 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Local\Power2Go8
2015-01-17 05:21 - 2015-02-03 07:06 - 00003982 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{A3EC1CE9-D038-490D-8706-1AC18333F6A4}
2015-01-17 05:21 - 2015-01-19 05:26 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Local\VirtualStore
2015-01-17 05:21 - 2015-01-18 05:57 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Roaming\Adobe
2015-01-17 05:21 - 2015-01-17 05:21 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Local\RemEngine
2015-01-17 05:21 - 2015-01-17 05:21 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Local\Hewlett-Packard_Company
2015-01-17 05:20 - 2015-02-03 23:04 - 00064910 _____ () C:\Users\HP ProBook 470 G2\AppData\Local\BTServer.log
2015-01-17 05:20 - 2015-01-17 05:21 - 00000000 ____D () C:\users\HP ProBook 470 G2
2015-01-17 05:20 - 2015-01-17 05:20 - 00000180 _____ () C:\Windows\System32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2015-01-17 05:20 - 2015-01-17 05:20 - 00000020 ___SH () C:\Users\HP ProBook 470 G2\ntuser.ini
2015-01-17 05:20 - 2015-01-17 05:20 - 00000000 _SHDL () C:\Users\HP ProBook 470 G2\Vorlagen
2015-01-17 05:20 - 2015-01-17 05:20 - 00000000 _SHDL () C:\Users\HP ProBook 470 G2\Startmenü
2015-01-17 05:20 - 2015-01-17 05:20 - 00000000 _SHDL () C:\Users\HP ProBook 470 G2\Netzwerkumgebung
2015-01-17 05:20 - 2015-01-17 05:20 - 00000000 _SHDL () C:\Users\HP ProBook 470 G2\Lokale Einstellungen
2015-01-17 05:20 - 2015-01-17 05:20 - 00000000 _SHDL () C:\Users\HP ProBook 470 G2\Eigene Dateien
2015-01-17 05:20 - 2015-01-17 05:20 - 00000000 _SHDL () C:\Users\HP ProBook 470 G2\Druckumgebung
2015-01-17 05:20 - 2015-01-17 05:20 - 00000000 _SHDL () C:\Users\HP ProBook 470 G2\Documents\Eigene Musik
2015-01-17 05:20 - 2015-01-17 05:20 - 00000000 _SHDL () C:\Users\HP ProBook 470 G2\Documents\Eigene Bilder
2015-01-17 05:20 - 2015-01-17 05:20 - 00000000 _SHDL () C:\Users\HP ProBook 470 G2\AppData\Local\Verlauf
2015-01-17 05:20 - 2015-01-17 05:20 - 00000000 _SHDL () C:\Users\HP ProBook 470 G2\AppData\Local\Anwendungsdaten
2015-01-17 05:20 - 2015-01-17 05:20 - 00000000 _SHDL () C:\Users\HP ProBook 470 G2\Anwendungsdaten
2015-01-17 05:20 - 2015-01-17 05:20 - 00000000 __RSH () C:\Windows\SysWOW64\Drivers\103C_HP_bNB_ProBook 470 G2_Y5336AN_0U_QCND43650KK_E14WWR4AW602_4A_I2249_SHP_V67.22_BM74 01.03_T140707_W748-1_L407_M8065_J750_7Intel_8651_92.60_#140522_N10EC8168;10ECB723_(G6W69EA#ABD)_XMOBILE_CN10_Z.MRK
2015-01-17 05:20 - 2015-01-17 05:20 - 00000000 __RSH () C:\Windows\System32\Drivers\103C_HP_bNB_ProBook 470 G2_Y5336AN_0U_QCND43650KK_E14WWR4AW602_4A_I2249_SHP_V67.22_BM74 01.03_T140707_W748-1_L407_M8065_J750_7Intel_8651_92.60_#140522_N10EC8168;10ECB723_(G6W69EA#ABD)_XMOBILE_CN10_Z.MRK
2015-01-17 05:20 - 2015-01-17 05:20 - 00000000 ____D () C:\Users\HP ProBook 470 G2\Documents\My Bluetooth
2015-01-17 05:20 - 2015-01-17 05:20 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Roaming\DigitalPersona
2015-01-17 05:20 - 2015-01-17 05:20 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Local\DigitalPersona
2015-01-17 05:20 - 2014-09-09 11:22 - 00000000 ___HD () C:\Users\HP ProBook 470 G2\Documents\hp.system.package.metadata
2015-01-17 05:17 - 2015-02-03 23:04 - 01451336 _____ () C:\Windows\WindowsUpdate.log

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-02-03 23:10 - 2009-07-13 20:51 - 00089341 _____ () C:\Windows\setupact.log
2015-02-03 23:08 - 2009-07-13 21:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-02-03 22:17 - 2009-07-13 20:45 - 00026608 ____H () C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-02-03 22:17 - 2009-07-13 20:45 - 00026608 ____H () C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-02-02 08:13 - 2014-09-09 12:04 - 00700380 _____ () C:\Windows\System32\perfh007.dat
2015-02-02 08:13 - 2014-09-09 12:04 - 00149986 _____ () C:\Windows\System32\perfc007.dat
2015-02-02 08:13 - 2009-07-13 21:13 - 01622706 _____ () C:\Windows\System32\PerfStringBackup.INI
2015-02-01 05:20 - 2014-09-09 11:51 - 00000000 ____D () C:\Windows\Hewlett-Packard
2015-01-30 05:57 - 2010-11-20 19:47 - 00917220 _____ () C:\Windows\PFRO.log
2015-01-26 06:29 - 2014-09-09 11:39 - 00000000 ____D () C:\ProgramData\Skype
2015-01-22 23:42 - 2014-09-09 11:21 - 00114410 _____ () C:\Windows\DPINST.LOG
2015-01-22 23:38 - 2013-12-03 11:34 - 00000000 ____D () C:\ProgramData\Package Cache
2015-01-19 08:07 - 2014-05-22 04:25 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2015-01-19 05:09 - 2014-09-09 11:41 - 00000000 ____D () C:\ProgramData\Apple
2015-01-19 01:27 - 2009-07-13 20:45 - 02363080 _____ () C:\Windows\System32\FNTCACHE.DAT
2015-01-19 01:13 - 2014-09-09 11:23 - 00000000 ____D () C:\Program Files (x86)\Realtek
2015-01-19 01:13 - 2014-03-28 15:26 - 00000000 ____D () C:\SWSETUP
2015-01-19 01:08 - 2014-09-09 11:36 - 00000000 ____D () C:\ProgramData\Realtek
2015-01-19 01:05 - 2014-09-09 11:38 - 00674592 _____ (Sunplus) C:\Windows\System32\Drivers\SPUVCBv_x64.sys
2015-01-19 01:05 - 2014-09-09 11:38 - 00068984 _____ (Dext5xx) C:\Windows\System32\DextUVCB_x64.ax
2015-01-19 01:05 - 2014-09-09 11:38 - 00063864 _____ (Dext5xx) C:\Windows\SysWOW64\DextUVCB.ax
2015-01-19 01:05 - 2014-09-09 11:38 - 00004096 _____ (Hewlett-Packard Company) C:\Windows\SysWOW64\sigfile.exe
2015-01-19 01:05 - 2014-09-09 11:38 - 00003962 _____ () C:\Windows\Dext_21.ini
2015-01-19 01:05 - 2014-09-09 11:38 - 00003958 _____ () C:\Windows\Dext_12.ini
2015-01-19 01:05 - 2014-09-09 11:38 - 00003942 _____ () C:\Windows\Dext_27.ini
2015-01-19 01:05 - 2014-09-09 11:38 - 00003940 _____ () C:\Windows\Dext_25.ini
2015-01-19 01:05 - 2014-09-09 11:38 - 00003876 _____ () C:\Windows\Dext_05.ini
2015-01-19 01:05 - 2014-09-09 11:38 - 00003850 _____ () C:\Windows\Dext_14.ini
2015-01-19 01:05 - 2014-09-09 11:38 - 00003762 _____ () C:\Windows\Dext_10.ini
2015-01-19 01:05 - 2014-09-09 11:38 - 00003752 _____ () C:\Windows\Dext_16.ini
2015-01-19 01:05 - 2014-09-09 11:38 - 00003720 _____ () C:\Windows\Dext_36.ini
2015-01-19 01:05 - 2014-09-09 11:38 - 00003696 _____ () C:\Windows\Dext_22.ini
2015-01-19 01:05 - 2014-09-09 11:38 - 00003688 _____ () C:\Windows\Dext_1046.ini
2015-01-19 01:05 - 2014-09-09 11:38 - 00003684 _____ () C:\Windows\Dext_08.ini
2015-01-19 01:05 - 2014-09-09 11:38 - 00003640 _____ () C:\Windows\Dext_20.ini
2015-01-19 01:05 - 2014-09-09 11:38 - 00003630 _____ () C:\Windows\Dext_07.ini
2015-01-19 01:05 - 2014-09-09 11:38 - 00003630 _____ () C:\Windows\Dext_06.ini
2015-01-19 01:05 - 2014-09-09 11:38 - 00003598 _____ () C:\Windows\Dext_19.ini
2015-01-19 01:05 - 2014-09-09 11:38 - 00003586 _____ () C:\Windows\Dext_24.ini
2015-01-19 01:05 - 2014-09-09 11:38 - 00003580 _____ () C:\Windows\Dext_02.ini
2015-01-19 01:05 - 2014-09-09 11:38 - 00003536 _____ () C:\Windows\Dext_29.ini
2015-01-19 01:05 - 2014-09-09 11:38 - 00003412 _____ () C:\Windows\Dext_13.ini
2015-01-19 01:05 - 2014-09-09 11:38 - 00000000 ____D () C:\Program Files (x86)\HP Camera Driver
2015-01-19 01:02 - 2014-09-09 11:19 - 14956922 _____ () C:\ProgramData\hpcsmmsilogs.log
2015-01-19 01:01 - 2014-05-22 04:24 - 00000000 ____D () C:\Program Files\Hewlett-Packard
2015-01-19 01:01 - 2014-05-22 04:24 - 00000000 ____D () C:\Program Files (x86)\Hewlett-Packard
2015-01-19 01:00 - 2014-09-09 12:03 - 00000000 ____D () C:\Windows\SysWOW64\de
2015-01-19 01:00 - 2014-09-09 12:03 - 00000000 ____D () C:\Windows\System32\de
2015-01-19 00:58 - 2014-09-09 11:21 - 00000000 ____D () C:\ProgramData\HPQLOG
2015-01-19 00:51 - 2014-09-09 11:30 - 00001336 _____ () C:\Windows\Synaptics.log
2015-01-18 02:08 - 2009-07-13 19:20 - 00000000 ____D () C:\Windows\rescache
2015-01-18 01:13 - 2013-12-03 11:37 - 01596986 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2015-01-18 00:56 - 2009-07-13 19:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared
2015-01-17 12:11 - 2014-05-22 04:25 - 00000000 ____D () C:\ProgramData\Hewlett-Packard
2015-01-17 09:49 - 2009-07-13 19:20 - 00000000 ____D () C:\Windows\SysWOW64\Dism
2015-01-17 09:49 - 2009-07-13 19:20 - 00000000 ____D () C:\Windows\System32\Dism
2015-01-17 09:49 - 2009-07-13 19:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2015-01-17 09:32 - 2014-09-09 11:41 - 00000000 ____D () C:\ProgramData\CyberLink
2015-01-17 09:12 - 2014-05-22 04:28 - 00001912 _____ () C:\Windows\epplauncher.mif
2015-01-17 09:12 - 2014-05-22 04:27 - 00000000 ____D () C:\Program Files\Microsoft Security Client
2015-01-17 09:12 - 2014-05-22 04:27 - 00000000 ____D () C:\Program Files (x86)\Microsoft Security Client
2015-01-17 08:47 - 2009-07-13 21:32 - 00000000 ____D () C:\Windows\System32\restore
2015-01-17 08:43 - 2014-09-09 11:41 - 00000000 ____D () C:\Program Files\Windows Journal
2015-01-17 08:43 - 2010-11-20 23:06 - 00000000 ____D () C:\Windows\SysWOW64\winrm
2015-01-17 08:43 - 2010-11-20 23:06 - 00000000 ____D () C:\Windows\SysWOW64\WCN
2015-01-17 08:43 - 2010-11-20 23:06 - 00000000 ____D () C:\Windows\SysWOW64\sysprep
2015-01-17 08:43 - 2010-11-20 23:06 - 00000000 ____D () C:\Windows\SysWOW64\slmgr
2015-01-17 08:43 - 2010-11-20 23:06 - 00000000 ____D () C:\Windows\SysWOW64\Printing_Admin_Scripts
2015-01-17 08:43 - 2010-11-20 23:06 - 00000000 ____D () C:\Windows\System32\winrm
2015-01-17 08:43 - 2010-11-20 23:06 - 00000000 ____D () C:\Windows\System32\WCN
2015-01-17 08:43 - 2010-11-20 23:06 - 00000000 ____D () C:\Windows\System32\slmgr
2015-01-17 08:43 - 2010-11-20 23:06 - 00000000 ____D () C:\Windows\System32\Printing_Admin_Scripts
2015-01-17 08:43 - 2009-07-13 21:37 - 00000000 ____D () C:\Windows\DigitalLocker
2015-01-17 08:43 - 2009-07-13 21:32 - 00000000 ____D () C:\Program Files (x86)\Windows Sidebar
2015-01-17 08:43 - 2009-07-13 21:32 - 00000000 ____D () C:\Program Files (x86)\Windows Defender
2015-01-17 08:43 - 2009-07-13 19:20 - 00000000 ____D () C:\Windows\SysWOW64\oobe
2015-01-17 08:43 - 2009-07-13 19:20 - 00000000 ____D () C:\Windows\SysWOW64\MUI
2015-01-17 08:43 - 2009-07-13 19:20 - 00000000 ____D () C:\Windows\System32\sysprep
2015-01-17 08:43 - 2009-07-13 19:20 - 00000000 ____D () C:\Windows\System32\oobe
2015-01-17 08:43 - 2009-07-13 19:20 - 00000000 ____D () C:\Windows\System32\MUI
2015-01-17 08:43 - 2009-07-13 19:20 - 00000000 ____D () C:\Windows\IME
2015-01-17 08:43 - 2009-07-13 19:20 - 00000000 ____D () C:\Program Files\Common Files\System
2015-01-17 05:21 - 2014-09-09 11:39 - 00000000 ___RD () C:\Program Files (x86)\Online Services
2015-01-17 05:21 - 2013-12-03 15:39 - 00000000 _RSHD () C:\SYSTEM.SAV
2015-01-17 05:20 - 2013-12-03 11:29 - 00000000 ____D () C:\Windows\Panther
2015-01-17 05:17 - 2009-07-13 19:20 - 00000000 __RHD () C:\Users\Public\Libraries

Some content of TEMP:
====================
C:\Users\HP ProBook 470 G2\AppData\Local\Temp\Extract.exe
C:\Users\HP ProBook 470 G2\AppData\Local\Temp\Foxit PhantomPDF Updater.exe
C:\Users\HP ProBook 470 G2\AppData\Local\Temp\SP68157.exe
C:\Users\HP ProBook 470 G2\AppData\Local\Temp\SP69843.exe
C:\Users\HP ProBook 470 G2\AppData\Local\Temp\SP69888.exe
C:\Users\HP ProBook 470 G2\AppData\Local\Temp\SP69896.exe
C:\Users\HP ProBook 470 G2\AppData\Local\Temp\SP69926.exe


==================== Known DLLs (Whitelisted) ================


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit

==================== Restore Points  =========================

Restore point made on: 2015-01-29 22:57:57
Restore point made on: 2015-02-01 05:21:01
Restore point made on: 2015-02-01 05:23:16

==================== Memory info =========================== 

Percentage of memory in use: 12%
Total physical RAM: 8064.11 MB
Available physical RAM: 7042.67 MB
Total Pagefile: 8062.31 MB
Available Pagefile: 7038.03 MB
Total Virtual: 8192 MB
Available Virtual: 8191.89 MB

==================== Drives ================================

Drive c: (Windows) (Fixed) (Total:682.42 GB) (Free:611.46 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive e: (HP_RECOVERY) (Fixed) (Total:13.21 GB) (Free:1.46 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive f: (HP_TOOLS) (Fixed) (Total:1.99 GB) (Free:1.61 GB) FAT32
Drive h: () (Removable) (Total:7.51 GB) (Free:6.02 GB) FAT32
Drive x: (Boot) (Fixed) (Total:0.12 GB) (Free:0.12 GB) NTFS
Drive y: (SYSTEM ) (Fixed) (Total:1 GB) (Free:0.62 GB) NTFS ==>[System with boot components (obtained from reading drive)]

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 698.6 GB) (Disk ID: 75916FA3)
Partition 1: (Active) - (Size=1 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=682.4 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=13.2 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=2 GB) - (Type=0B)

========================================================
Disk: 1 (Size: 7.5 GB) (Disk ID: 2C6B7369)
No partition Table on disk 1.


LastRegBack: 2015-02-02 23:55

==================== End Of Log ============================
         

Vielen Danke für die Hilfe!

Hi, guten Morgen

Mein Name ist Heiko und ich werde dir helfen...

Drücke bitte die + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

HKU\HP ProBook 470 G2\...\Winlogon: [Userinit] C:\Users\HP ProBook 470 G2\AppData\Roaming\loadit.exe [605378 2015-02-03] ()
HKU\HP ProBook 470 G2\...\Winlogon: [Shell] C:\Users\HP ProBook 470 G2\AppData\Roaming\loadit.exe [605378 2015-02-03] () <==== ATTENTION
C:\Users\HP ProBook 470 G2\AppData\Roaming\loadit.exe
C:\Users\HP ProBook 470 G2\AppData\Roaming\url.txt
C:\Users\HP ProBook 470 G2\AppData\Roaming\autostarter.exe
         

Speichere diese bitte als Fixlist.txt auf deinem USB Stick.

• Starte deinen Rechner erneut in die Reparaturoptionen
• Starte nun die FRST.exe erneut und klicke den Entfernen Button.

Das Tool erstellt eine Fixlog.txt auf deinem USB Stick. Poste den Inhalt bitte hier.



versuche das System neu (Normalmodus) zu starten. Wenn alles klappt erstelle ein FRST logfile und poste es hier

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

• Starte jetzt FRST.
• Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
• Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
• Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

Hier ist die Fixlog.txt
Hier nun die zweite Datei nach der Überarbeitung:

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 01-02-2015
Ran by SYSTEM at 2015-02-04 09:40:25 Run:3
Running from h:\
Boot Mode: Recovery
==============================================

Content of fixlist:
*****************
HKU\HP ProBook 470 G2\...\Winlogon: [Userinit] C:\Users\HP ProBook 470 G2\AppData\Roaming\loadit.exe [605378 2015-02-03] ()
HKU\HP ProBook 470 G2\...\Winlogon: [Shell] C:\Users\HP ProBook 470 G2\AppData\Roaming\loadit.exe [605378 2015-02-03] () <==== ATTENTION
C:\Users\HP ProBook 470 G2\AppData\Roaming\loadit.exe
C:\Users\HP ProBook 470 G2\AppData\Roaming\url.txt
C:\Users\HP ProBook 470 G2\AppData\Roaming\autostarter.exe
         
*****************

HKU\HP ProBook 470 G2\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\\Userinit => Value not found.
HKU\HP ProBook 470 G2\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\\Shell => Value not found.
"C:\Users\HP ProBook 470 G2\AppData\Roaming\loadit.exe" => File/Directory not found.
"C:\Users\HP ProBook 470 G2\AppData\Roaming\url.txt" => File/Directory not found.
C:\Users\HP ProBook 470 G2\AppData\Roaming\autostarter.exe => Moved successfully.

==== End of Fixlog 09:40:26 ====
         

Und hier die neue FRST.txt


FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 01-02-2015
Ran by SYSTEM on MININT-81VHOFE on 04-02-2015 09:47:23
Running from h:\
Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: Englisch (USA)
Internet Explorer Version 11
Boot Mode: Recovery

The current controlset is ControlSet001
ATTENTION!:=====> If the system is bootable FRST must be run from normal or Safe mode to create a complete log.

Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [287592 2013-09-27] (Intel Corporation)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7574896 2014-04-16] (Realtek Semiconductor)
HKLM\...\Run: [BtServer] => C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTServer.exe [226008 2014-07-03] (Realtek Semiconductor Corporation)
HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [1331288 2014-08-22] (Microsoft Corporation)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2863344 2015-01-19] (Synaptics Incorporated)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [169768 2015-01-26] (Apple Inc.)
HKLM-x32\...\Run: [QLBController] => C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\QLBController.exe [419512 2014-04-01] (Hewlett-Packard Company)
HKLM-x32\...\Run: [HPConnectionManager] => c:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\HPCMDelayStart.exe [185144 2014-04-09] (Hewlett-Packard Development Company, L.P.)
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [292848 2014-04-09] (Intel Corporation)
HKLM-x32\...\Run: [StartCCC] => c:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [767200 2014-04-06] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [AccelerometerSysTrayApplet] => C:\Program Files (x86)\Hewlett-Packard\HP 3D DriveGuard\AccelerometerST.exe [126240 2014-04-01] (Hewlett-Packard Company)
HKLM-x32\...\Run: [HP Camera Driver_Monitor] => "C:\Program Files (x86)\HP Camera Driver\monitor.exe"
HKLM-x32\...\Run: [YouCam Mirage] => "c:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe"
HKLM-x32\...\Run: [YouCam Tray] => c:\Program Files (x86)\CyberLink\YouCam\YouCamTray.exe [167488 2013-09-16] (CyberLink Corp.)
HKLM-x32\...\Run: [CLMLServer_For_P2G8] => c:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe [111576 2013-08-04] (CyberLink)
HKLM-x32\...\Run: [CLVirtualDrive] => c:\Program Files (x86)\CyberLink\Power2Go8\VirtualDrive.exe [490760 2013-08-06] (CyberLink Corp.)
HKLM-x32\...\Run: [HP File Sanitizer] => C:\Program Files (x86)\Hewlett-Packard\File Sanitizer\Coreshredder.exe [2213592 2014-02-05] (Hewlett-Packard)
HKLM-x32\...\Run: [DriveUtilitiesHelper] => C:\Program Files (x86)\Western Digital\WD Utilities\WDDriveUtilitiesHelper.exe [1852264 2014-05-23] (Western Digital Technologies, Inc.)
HKLM-x32\...\Run: [WD Drive Unlocker] => C:\Program Files (x86)\Western Digital\WD Security\WDDriveAutoUnlock.exe [1694048 2014-10-23] (Western Digital Technologies, Inc.)
HKLM-x32\...\Run: [WD Quick View] => C:\Program Files (x86)\Western Digital\WD Quick View\WDDMStatus.exe [5562736 2014-12-02] (Western Digital Technologies, Inc.)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard)
HKLM-x32\...\Run: [] => [X]
HKLM\...\RunOnce: [NCPluginUpdater] => C:\Program Files (x86)\Hewlett-Packard\HP Health Check\ActiveCheck\product_line\NCPluginUpdater.exe [21720 2015-01-28] (Hewlett-Packard)
HKLM\...\Winlogon: [Userinit] C:\Windows\system32\userinit.exe,C:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DPAgent.exe,
HKU\HP ProBook 470 G2\...\Run: [HP Officejet 6600 (NET)] => C:\Program Files\HP\HP Officejet 6600\Bin\ScanToPCActivationApp.exe [2573416 2012-10-16] (Hewlett-Packard Co.)
Lsa: [Notification Packages] DPPassFilter scecli
Startup: C:\Users\HP ProBook 470 G2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\An OneNote senden.lnk
ShortcutTarget: An OneNote senden.lnk -> C:\Program Files\Microsoft Office 15\root\office15\ONENOTEM.EXE (Microsoft Corporation)
Startup: C:\Users\HP ProBook 470 G2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\AutoStarter.lnk
ShortcutTarget: AutoStarter.lnk ->  (No File)
Startup: C:\Users\HP ProBook 470 G2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ja.lnk
ShortcutTarget: ja.lnk ->  (No File)

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S2 AAV UpdateService; C:\Program Files (x86)\Akademische Arbeitsgemeinschaft\AAVUpdateManager\aavus.exe [128296 2008-10-24] ()
S2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [77128 2015-01-19] (Apple Inc.)
S2 AvrcpService; C:\Program Files (x86)\REALTEK\Realtek Bluetooth\AvrcpService.exe [43224 2014-07-03] (Realtek Semiconductor Corporation)
S2 BTDevManager; C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTDevMgr.exe [98816 2014-10-11] ()
S2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390176 2014-07-14] (Microsoft Corporation)
S2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1767520 2014-07-14] (Microsoft Corporation)
S2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2449592 2014-11-11] (Microsoft Corporation)
S2 CtAgentService; C:\Program Files (x86)\Hewlett-Packard\HP Theft Recovery\CtService.exe [7168 2014-03-31] ()
S2 DpHost; C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpHostW.exe [500048 2014-07-28] (DigitalPersona, Inc.)
S3 FLCDLOCK; c:\windows\SysWOW64\flcdlock.exe [567608 2013-11-20] (Hewlett-Packard Company)
S2 HpDamServiceHost; c:\Program Files (x86)\Hewlett-Packard\HP Device Access Manager\HP.ProtectTools.DeviceAccessManager.ServiceHost.exe [18232 2013-11-15] (Hewlett-Packard Development Company)
S2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15720 2013-09-27] (Intel Corporation)
S2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [282072 2014-03-10] (Intel Corporation)
S3 Intel(R) Capability Licensing Service TCP IP Interface; c:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [828376 2013-08-27] (Intel(R) Corporation)
S2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [131544 2013-12-09] (Intel Corporation)
S2 ISCTAgent; c:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe [198120 2013-09-06] ()
S2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-12-09] (Intel Corporation)
S2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [23784 2014-08-22] (Microsoft Corporation)
S3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [368624 2014-08-22] (Microsoft Corporation)
S2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [290520 2014-01-08] (Realtek Semiconductor)
S2 RtkBleServ; C:\Program Files (x86)\REALTEK\Realtek Bluetooth\RtkBleServ.exe [50392 2014-07-03] (Realtek Semiconductor Corporation)
S2 WDBackup; C:\Program Files (x86)\Western Digital\WD SmartWare\WDBackupEngine.exe [1042808 2014-12-02] (Western Digital Technologies, Inc.)
S2 WDDriveService; C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe [296312 2014-05-23] (Western Digital Technologies, Inc.)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-12-03] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S0 amdkmpfd; C:\Windows\System32\drivers\amdkmpfd.sys [36608 2013-12-13] (Advanced Micro Devices, Inc.)
S1 CLVirtualDrive; C:\Windows\System32\DRIVERS\CLVirtualDrive.sys [90608 2011-12-26] (CyberLink)
S3 DAMDrv; C:\Windows\System32\DRIVERS\DAMDrv64.sys [65752 2013-10-07] (Hewlett-Packard Company)
S0 iaStorF; C:\Windows\System32\drivers\iaStorF.sys [28008 2013-09-27] (Intel Corporation)
S3 ikbevent; C:\Windows\System32\DRIVERS\ikbevent.sys [21408 2013-08-08] ()
S3 imsevent; C:\Windows\System32\DRIVERS\imsevent.sys [21920 2013-08-08] ()
S3 INETMON; C:\windows\System32\Drivers\INETMON.sys [29088 2013-08-07] ()
S3 ISCT; C:\Windows\system32\drivers\ISCTD64.sys [46568 2013-08-07] ()
S3 MEIx64; C:\Windows\system32\drivers\TeeDriverx64.sys [100312 2013-12-09] (Intel Corporation)
S0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [269008 2014-07-17] (Microsoft Corporation)
S2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [125584 2014-07-17] (Microsoft Corporation)
S0 PinFile; C:\Windows\System32\DRIVERS\PinFile.sys [49856 2014-02-03] (WinMagic Inc.)
S3 RtkAvrcp; C:\Windows\system32\drivers\RtkAvrcp.sys [61152 2012-12-28] (Realtek Semiconductor Corporation)
S3 RtkBtFilter; C:\Windows\System32\DRIVERS\RtkBtfilter.sys [585944 2014-12-30] (Realtek Semiconductor Corporation)
S3 RTSPER; C:\Windows\System32\DRIVERS\RtsPer.sys [476888 2014-03-21] (Realsil Semiconductor Corporation)
S3 RTWlanE; C:\Windows\System32\DRIVERS\rtwlane.sys [3603672 2015-01-19] (Realtek Semiconductor Corporation                           )
S0 SDDisk2K; C:\Windows\System32\DRIVERS\SDDisk2K.sys [228544 2014-02-03] (WinMagic Inc.)
S0 SDDToki; C:\Windows\System32\DRIVERS\SDDToki.sys [131264 2014-02-03] (WinMagic Inc.)
S3 SmbDrv; C:\Windows\system32\drivers\Smb_driver_AMDASF.sys [30448 2014-04-07] (Synaptics Incorporated)
S3 SmbDrvI; C:\Windows\system32\drivers\Smb_driver_Intel.sys [31472 2014-04-07] (Synaptics Incorporated)
S3 SPUVCbv; C:\Windows\System32\Drivers\SPUVCbv_x64.sys [674592 2015-01-19] (Sunplus)

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-02-04 08:19 - 2015-02-04 09:47 - 00000000 ____D () C:\FRST
2015-02-03 22:38 - 2015-02-03 22:38 - 00001760 _____ () C:\Users\Public\Desktop\iTunes.lnk
2015-02-03 22:37 - 2015-02-03 22:38 - 00000000 ____D () C:\ProgramData\E1864A66-75E3-486a-BD95-D1B7D99A84A7
2015-02-03 22:37 - 2015-02-03 22:38 - 00000000 ____D () C:\Program Files\iTunes
2015-02-03 22:37 - 2015-02-03 22:37 - 00000000 ____D () C:\Program Files\iPod
2015-02-03 22:37 - 2015-02-03 22:37 - 00000000 ____D () C:\Program Files (x86)\iTunes
2015-02-01 08:26 - 2015-02-01 10:29 - 00000380 _____ () C:\Windows\Tasks\HPCeeScheduleForHP ProBook 470 G2.job
2015-02-01 08:26 - 2015-02-01 08:26 - 00003258 _____ () C:\Windows\System32\Tasks\HPCeeScheduleForHP ProBook 470 G2
2015-01-30 05:58 - 2015-02-03 22:10 - 00008192 _____ () C:\Windows\SysWOW64\WDPABKP.dat
2015-01-29 22:15 - 2015-01-29 22:15 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Local\CrashDumps
2015-01-29 07:42 - 2015-01-29 07:42 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Roaming\SMSout
2015-01-29 02:23 - 2015-01-29 02:23 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2015-01-29 02:08 - 2015-01-30 05:22 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Roaming\SuperMailer
2015-01-29 02:07 - 2015-01-29 03:43 - 00000000 ____D () C:\Program Files\SuperMailer
2015-01-29 02:07 - 2015-01-29 02:07 - 00000804 _____ () C:\Users\HP ProBook 470 G2\Desktop\SuperMailer.lnk
2015-01-26 08:17 - 2015-01-26 08:17 - 00000000 __SHD () C:\Users\HP ProBook 470 G2\AppData\Local\EmieBrowserModeList
2015-01-26 06:54 - 2015-02-03 23:04 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Roaming\UseNeXT
2015-01-26 06:54 - 2015-02-03 22:58 - 00000000 ____D () C:\Users\HP ProBook 470 G2\Documents\UseNeXT
2015-01-26 06:54 - 2015-01-26 06:54 - 00001868 _____ () C:\Users\HP ProBook 470 G2\Desktop\UseNeXT by Tangysoft.lnk
2015-01-26 06:54 - 2015-01-26 06:54 - 00000000 ____D () C:\Program Files (x86)\UseNeXT
2015-01-26 06:53 - 2015-01-26 06:54 - 05270008 _____ (Tangysoft Ltd. ) C:\Users\HP ProBook 470 G2\Downloads\UseNeXTSetup_5.64.exe
2015-01-26 06:29 - 2015-01-30 00:23 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Roaming\Skype
2015-01-26 06:29 - 2015-01-26 06:29 - 00002699 _____ () C:\Users\Public\Desktop\Skype.lnk
2015-01-26 06:29 - 2015-01-26 06:29 - 00000000 ___RD () C:\Program Files (x86)\Skype
2015-01-26 06:29 - 2015-01-26 06:29 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Local\Skype
2015-01-26 06:28 - 2015-01-26 06:28 - 01548384 _____ (Skype Technologies S.A.) C:\Users\HP ProBook 470 G2\Downloads\SkypeSetup.exe
2015-01-25 03:46 - 2015-01-25 03:46 - 00000000 __RHD () C:\MSOCache
2015-01-25 03:29 - 2015-01-25 03:29 - 00000329 _____ () C:\Users\HP ProBook 470 G2\Desktop\HP Druckerdiagnosetools.url
2015-01-24 01:34 - 2015-01-24 01:34 - 04372480 _____ () C:\Users\HP ProBook 470 G2\Downloads\fritz.wlan_repeater_ng_68.04.88.image
2015-01-22 23:41 - 2015-01-22 23:41 - 00000000 ____D () C:\Program Files\Western Digital
2015-01-22 23:41 - 2015-01-22 23:41 - 00000000 ____D () C:\Program Files\Common Files\Western Digital
2015-01-22 07:05 - 2015-01-22 07:05 - 00001665 _____ () C:\Users\HP ProBook 470 G2\Desktop\Mitgliederliste_V2015_V1 - Verknüpfung.lnk
2015-01-22 07:05 - 2015-01-22 07:05 - 00001572 _____ () C:\Users\HP ProBook 470 G2\Desktop\zugang_werder - Verknüpfung.lnk
2015-01-22 07:05 - 2015-01-22 07:05 - 00001569 _____ () C:\Users\HP ProBook 470 G2\Desktop\Zugangsdaten - Verknüpfung.lnk
2015-01-22 07:04 - 2015-01-22 07:04 - 00001606 _____ () C:\Users\HP ProBook 470 G2\Desktop\Anmeldungen_2015 - Verknüpfung.lnk
2015-01-22 03:05 - 2015-01-22 03:05 - 00001179 _____ () C:\Users\Public\Desktop\WD Security.lnk
2015-01-22 03:03 - 2015-01-22 03:03 - 00000000 ____D () C:\Windows\System32\Tasks\Western Digital
2015-01-22 03:01 - 2015-01-22 03:01 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Local\Western Digital
2015-01-22 02:57 - 2015-01-22 02:57 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Local\Western_Digital_Technolog
2015-01-22 02:56 - 2015-01-22 23:41 - 00000000 ____D () C:\Program Files (x86)\Western Digital
2015-01-22 02:56 - 2015-01-22 02:56 - 00001124 _____ () C:\Users\Public\Desktop\WD Drive Utilities.lnk
2015-01-22 02:55 - 2015-01-22 23:41 - 00000000 ____D () C:\ProgramData\Western Digital
2015-01-19 08:17 - 2015-01-19 08:17 - 00000000 ____D () C:\Program Files (x86)\FileZilla FTP Client
2015-01-19 08:16 - 2015-01-19 08:17 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Roaming\FileZilla
2015-01-19 08:16 - 2015-01-19 08:16 - 06381120 _____ (Tim Kosse) C:\Users\HP ProBook 470 G2\Downloads\FileZilla_3.10.0.2_win32-setup.exe
2015-01-19 08:16 - 2015-01-19 08:16 - 00000000 ____D () C:\Users\HP ProBook 470 G2\Downloads\FileZilla_3.10.0.1_win32
2015-01-19 08:14 - 2015-01-19 08:14 - 09511863 _____ () C:\Users\HP ProBook 470 G2\Downloads\FileZilla_3.10.0.1_win32.zip
2015-01-19 08:13 - 2015-01-19 08:13 - 01179936 _____ () C:\Users\HP ProBook 470 G2\Downloads\FileZilla - CHIP-Installer.exe
2015-01-19 08:07 - 2015-01-19 08:08 - 00000000 ____D () C:\Program Files (x86)\Ipswitch
2015-01-19 08:07 - 2015-01-19 08:07 - 00000000 ____D () C:\Windows\SysWOW64\E177E04D548C4006A465EEB92D3DE021
2015-01-19 08:07 - 2005-02-28 03:37 - 00606293 ____N (Stardock.Net, Inc) C:\Windows\SysWOW64\wbocx.ocx
2015-01-19 08:07 - 2005-02-28 03:37 - 00050688 ____N (Stardock.Net, Inc) C:\Windows\SysWOW64\wbhelp2.dll
2015-01-19 08:07 - 2004-12-06 05:26 - 00348160 ____N (Microsoft Corporation) C:\Windows\SysWOW64\msvcr71.dll
2015-01-19 08:07 - 2004-09-17 02:09 - 01060864 ____N (Microsoft Corporation) C:\Windows\SysWOW64\MFC71.dll
2015-01-19 08:07 - 2004-02-12 08:16 - 00499712 ____N (Microsoft Corporation) C:\Windows\SysWOW64\msvcp71.dll
2015-01-19 08:06 - 2015-01-19 08:08 - 00000023 _____ () C:\Windows\setup.log
2015-01-19 08:06 - 2015-01-19 08:06 - 09893377 _____ (InstallShield Software Corporation) C:\Users\HP ProBook 470 G2\Downloads\WSFTP_HomeT40_Install.exe
2015-01-19 07:57 - 2015-02-03 08:08 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Roaming\vlc
2015-01-19 07:55 - 2015-01-29 02:31 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Roaming\Foxit Software
2015-01-19 07:52 - 2015-01-19 07:52 - 00001077 _____ () C:\Users\Public\Desktop\VLC media player.lnk
2015-01-19 07:52 - 2015-01-19 07:52 - 00000000 ____D () C:\Program Files (x86)\VideoLAN
2015-01-19 07:51 - 2015-01-19 07:51 - 24743106 _____ () C:\Users\HP ProBook 470 G2\Downloads\vlc-2.1.5-win32.exe
2015-01-19 05:39 - 2015-01-28 04:58 - 00701616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-01-19 05:39 - 2015-01-28 04:58 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-01-19 05:39 - 2015-01-19 05:39 - 00000000 ____D () C:\Windows\System32\Macromed
2015-01-19 05:39 - 2015-01-19 05:39 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Roaming\Macromedia
2015-01-19 05:39 - 2015-01-19 05:39 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Local\Macromedia
2015-01-19 05:22 - 2015-01-19 05:22 - 00002297 _____ () C:\Users\Public\Desktop\Vereine und Ehrenamt.LNK
2015-01-19 05:22 - 2015-01-19 05:22 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Roaming\AAV
2015-01-19 05:11 - 2015-01-21 08:13 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Roaming\Apple Computer
2015-01-19 05:11 - 2015-01-19 05:11 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Local\Apple Computer
2015-01-19 05:11 - 2012-10-03 07:14 - 00033240 _____ (GEAR Software Inc.) C:\Windows\System32\Drivers\GEARAspiWDM.sys
2015-01-19 05:09 - 2015-02-03 22:37 - 00000000 ____D () C:\Program Files\Common Files\Apple
2015-01-19 05:09 - 2015-01-19 05:09 - 00000000 ____D () C:\Windows\System32\Tasks\Apple
2015-01-19 05:09 - 2015-01-19 05:09 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Local\Apple
2015-01-19 05:09 - 2015-01-19 05:09 - 00000000 ____D () C:\ProgramData\Apple Computer
2015-01-19 05:09 - 2015-01-19 05:09 - 00000000 ____D () C:\Program Files (x86)\Apple Software Update
2015-01-19 05:06 - 2015-01-19 05:08 - 122418480 _____ (Apple Inc.) C:\Users\HP ProBook 470 G2\Downloads\iTunes64Setup.exe
2015-01-19 01:32 - 2015-01-19 01:32 - 00000000 ____D () C:\HPSDM
2015-01-19 01:14 - 2015-01-19 01:13 - 03603672 _____ (Realtek Semiconductor Corporation ) C:\Windows\System32\Drivers\rtwlane.sys
2015-01-19 01:05 - 2015-01-19 01:06 - 00001588 _____ () C:\HPCamDrv.log
2015-01-19 01:05 - 2015-01-19 01:06 - 00000382 _____ () C:\camera.log
2015-01-19 01:05 - 2015-01-19 01:05 - 00384672 _____ (SunplusIT) C:\Windows\System32\VCamPPage_x64.dll
2015-01-19 01:05 - 2015-01-19 01:05 - 00321184 _____ (SunplusIT) C:\Windows\SysWOW64\VCamPPage.dll
2015-01-19 01:03 - 2015-01-19 01:03 - 00001117 _____ () C:\Users\Public\Desktop\Picasa 3.lnk
2015-01-19 01:03 - 2015-01-19 01:03 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Local\Google
2015-01-19 01:03 - 2015-01-19 01:03 - 00000000 ____D () C:\Program Files (x86)\Google
2015-01-19 01:02 - 2015-01-19 01:02 - 17385800 _____ (Google Inc.) C:\Users\HP ProBook 470 G2\Downloads\picasa39-setup.exe
2015-01-19 01:00 - 2015-01-19 01:00 - 00003148 _____ () C:\Windows\System32\Tasks\SidebarExecute
2015-01-19 01:00 - 2015-01-19 01:00 - 00000000 ____D () C:\Windows\SysWOW64\zh-Hant
2015-01-19 01:00 - 2015-01-19 01:00 - 00000000 ____D () C:\Windows\SysWOW64\zh-Hans
2015-01-19 01:00 - 2015-01-19 01:00 - 00000000 ____D () C:\Windows\SysWOW64\tr
2015-01-19 01:00 - 2015-01-19 01:00 - 00000000 ____D () C:\Windows\SysWOW64\th
2015-01-19 01:00 - 2015-01-19 01:00 - 00000000 ____D () C:\Windows\SysWOW64\sv
2015-01-19 01:00 - 2015-01-19 01:00 - 00000000 ____D () C:\Windows\SysWOW64\sr
2015-01-19 01:00 - 2015-01-19 01:00 - 00000000 ____D () C:\Windows\SysWOW64\sl
2015-01-19 01:00 - 2015-01-19 01:00 - 00000000 ____D () C:\Windows\SysWOW64\sk
2015-01-19 01:00 - 2015-01-19 01:00 - 00000000 ____D () C:\Windows\SysWOW64\ru
2015-01-19 01:00 - 2015-01-19 01:00 - 00000000 ____D () C:\Windows\SysWOW64\ro
2015-01-19 01:00 - 2015-01-19 01:00 - 00000000 ____D () C:\Windows\SysWOW64\pl
2015-01-19 01:00 - 2015-01-19 01:00 - 00000000 ____D () C:\Windows\SysWOW64\no
2015-01-19 01:00 - 2015-01-19 01:00 - 00000000 ____D () C:\Windows\SysWOW64\nl
2015-01-19 01:00 - 2015-01-19 01:00 - 00000000 ____D () C:\Windows\SysWOW64\lv
2015-01-19 01:00 - 2015-01-19 01:00 - 00000000 ____D () C:\Windows\SysWOW64\lt
2015-01-19 01:00 - 2015-01-19 01:00 - 00000000 ____D () C:\Windows\SysWOW64\ko
2015-01-19 01:00 - 2015-01-19 01:00 - 00000000 ____D () C:\Windows\SysWOW64\ja
2015-01-19 01:00 - 2015-01-19 01:00 - 00000000 ____D () C:\Windows\SysWOW64\it
2015-01-19 01:00 - 2015-01-19 01:00 - 00000000 ____D () C:\Windows\SysWOW64\hu
2015-01-19 01:00 - 2015-01-19 01:00 - 00000000 ____D () C:\Windows\SysWOW64\hr
2015-01-19 01:00 - 2015-01-19 01:00 - 00000000 ____D () C:\Windows\SysWOW64\he
2015-01-19 01:00 - 2015-01-19 01:00 - 00000000 ____D () C:\Windows\SysWOW64\fr
2015-01-19 01:00 - 2015-01-19 01:00 - 00000000 ____D () C:\Windows\SysWOW64\fi
2015-01-19 01:00 - 2015-01-19 01:00 - 00000000 ____D () C:\Windows\SysWOW64\et
2015-01-19 01:00 - 2015-01-19 01:00 - 00000000 ____D () C:\Windows\SysWOW64\es
2015-01-19 01:00 - 2015-01-19 01:00 - 00000000 ____D () C:\Windows\SysWOW64\el
2015-01-19 01:00 - 2015-01-19 01:00 - 00000000 ____D () C:\Windows\SysWOW64\da
2015-01-19 01:00 - 2015-01-19 01:00 - 00000000 ____D () C:\Windows\SysWOW64\cs
2015-01-19 01:00 - 2015-01-19 01:00 - 00000000 ____D () C:\Windows\SysWOW64\bg
2015-01-19 01:00 - 2015-01-19 01:00 - 00000000 ____D () C:\Windows\SysWOW64\ar
2015-01-19 01:00 - 2015-01-19 01:00 - 00000000 ____D () C:\Windows\System32\zh-Hant
2015-01-19 01:00 - 2015-01-19 01:00 - 00000000 ____D () C:\Windows\System32\zh-Hans
2015-01-19 01:00 - 2015-01-19 01:00 - 00000000 ____D () C:\Windows\System32\tr
2015-01-19 01:00 - 2015-01-19 01:00 - 00000000 ____D () C:\Windows\System32\th
2015-01-19 01:00 - 2015-01-19 01:00 - 00000000 ____D () C:\Windows\System32\sv
2015-01-19 01:00 - 2015-01-19 01:00 - 00000000 ____D () C:\Windows\System32\sr
2015-01-19 01:00 - 2015-01-19 01:00 - 00000000 ____D () C:\Windows\System32\sl
2015-01-19 01:00 - 2015-01-19 01:00 - 00000000 ____D () C:\Windows\System32\sk
2015-01-19 01:00 - 2015-01-19 01:00 - 00000000 ____D () C:\Windows\System32\ru
2015-01-19 01:00 - 2015-01-19 01:00 - 00000000 ____D () C:\Windows\System32\ro
2015-01-19 01:00 - 2015-01-19 01:00 - 00000000 ____D () C:\Windows\System32\pl
2015-01-19 01:00 - 2015-01-19 01:00 - 00000000 ____D () C:\Windows\System32\no
2015-01-19 01:00 - 2015-01-19 01:00 - 00000000 ____D () C:\Windows\System32\nl
2015-01-19 01:00 - 2015-01-19 01:00 - 00000000 ____D () C:\Windows\System32\lv
2015-01-19 01:00 - 2015-01-19 01:00 - 00000000 ____D () C:\Windows\System32\lt
2015-01-19 01:00 - 2015-01-19 01:00 - 00000000 ____D () C:\Windows\System32\ko
2015-01-19 01:00 - 2015-01-19 01:00 - 00000000 ____D () C:\Windows\System32\ja
2015-01-19 01:00 - 2015-01-19 01:00 - 00000000 ____D () C:\Windows\System32\it
2015-01-19 01:00 - 2015-01-19 01:00 - 00000000 ____D () C:\Windows\System32\hu
2015-01-19 01:00 - 2015-01-19 01:00 - 00000000 ____D () C:\Windows\System32\hr
2015-01-19 01:00 - 2015-01-19 01:00 - 00000000 ____D () C:\Windows\System32\he
2015-01-19 01:00 - 2015-01-19 01:00 - 00000000 ____D () C:\Windows\System32\fr
2015-01-19 01:00 - 2015-01-19 01:00 - 00000000 ____D () C:\Windows\System32\fi
2015-01-19 01:00 - 2015-01-19 01:00 - 00000000 ____D () C:\Windows\System32\et
2015-01-19 01:00 - 2015-01-19 01:00 - 00000000 ____D () C:\Windows\System32\es
2015-01-19 01:00 - 2015-01-19 01:00 - 00000000 ____D () C:\Windows\System32\el
2015-01-19 01:00 - 2015-01-19 01:00 - 00000000 ____D () C:\Windows\System32\da
2015-01-19 01:00 - 2015-01-19 01:00 - 00000000 ____D () C:\Windows\System32\cs
2015-01-19 01:00 - 2015-01-19 01:00 - 00000000 ____D () C:\Windows\System32\bg
2015-01-19 01:00 - 2015-01-19 01:00 - 00000000 ____D () C:\Windows\System32\ar
2015-01-19 01:00 - 2015-01-19 01:00 - 00000000 ____D () C:\Windows\DPDrv
2015-01-19 00:50 - 2015-01-19 00:50 - 00000000 ____D () C:\ProgramData\Synaptics
2015-01-19 00:50 - 2015-01-19 00:49 - 00753392 _____ (Synaptics Incorporated) C:\Windows\System32\SynCOM.dll
2015-01-19 00:50 - 2015-01-19 00:49 - 00580336 _____ (Synaptics Incorporated) C:\Windows\System32\Drivers\SynTP.sys
2015-01-19 00:50 - 2015-01-19 00:49 - 00409328 _____ (Synaptics Incorporated) C:\Windows\SysWOW64\SynCom.dll
2015-01-19 00:50 - 2015-01-19 00:49 - 00256240 _____ (Synaptics Incorporated) C:\Windows\System32\SynTPAPI.dll
2015-01-19 00:50 - 2015-01-19 00:49 - 00212208 _____ (Synaptics Incorporated) C:\Windows\System32\SynTPCo20.dll
2015-01-19 00:50 - 2015-01-19 00:49 - 00195784 _____ () C:\Windows\System32\pca-manta.bin
2015-01-19 00:22 - 2015-01-19 00:22 - 00001674 _____ () C:\Users\HP ProBook 470 G2\Desktop\Rechnung5.lnk
2015-01-19 00:22 - 2015-01-19 00:22 - 00000000 ____D () C:\Softwarenetz
2015-01-19 00:22 - 2014-06-12 00:28 - 00181952 _____ (SoftwareNetz) C:\Windows\snui.exe
2015-01-18 23:29 - 2015-01-18 23:29 - 00002212 _____ () C:\Users\Public\Desktop\SteuerSparErklärung 2015.lnk
2015-01-18 23:29 - 2015-01-18 23:29 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Local\AAV
2015-01-18 23:28 - 2015-01-19 05:22 - 00000000 ____D () C:\Program Files (x86)\Akademische Arbeitsgemeinschaft
2015-01-18 23:25 - 2015-01-19 05:20 - 00000000 ____D () C:\ProgramData\AAV
2015-01-18 23:14 - 2015-01-18 23:19 - 205257056 _____ () C:\Users\HP ProBook 470 G2\Downloads\SSEStandard_20.25.123.exe
2015-01-18 22:34 - 2015-02-01 08:26 - 00000052 _____ () C:\Windows\SysWOW64\DOErrors.log
2015-01-18 22:33 - 2015-02-01 08:25 - 00000000 _____ () C:\Windows\System32\HP_ActiveX_Patch_NOT_DETECTED.txt
2015-01-18 06:32 - 2015-01-18 06:32 - 00000000 ___SD () C:\Users\HP ProBook 470 G2\Documents\Meine Datenquellen
2015-01-18 06:31 - 2015-01-18 06:31 - 00000000 ____D () C:\Users\HP ProBook 470 G2\Documents\Benutzerdefinierte Office-Vorlagen
2015-01-18 06:06 - 2015-01-18 06:06 - 00000000 ____D () C:\Users\HP ProBook 470 G2\Documents\OneNote-Notizbücher
2015-01-18 05:58 - 2015-01-18 06:02 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Roaming\Steganos
2015-01-18 05:58 - 2015-01-18 05:58 - 00001246 _____ () C:\Users\HP ProBook 470 G2\Desktop\Passwort-Manager.lnk
2015-01-18 05:58 - 2015-01-18 05:58 - 00000000 ____D () C:\Program Files (x86)\Steganos Password Manager Free 11
2015-01-18 05:57 - 2015-01-19 05:39 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Local\Adobe
2015-01-18 05:52 - 2015-01-18 05:52 - 00000000 ____D () C:\ProgramData\FLEXnet
2015-01-18 05:50 - 2015-01-18 05:50 - 08275369 _____ (Steganos GmbH) C:\Users\HP ProBook 470 G2\Downloads\spm2009freeint.exe
2015-01-18 05:50 - 2015-01-18 05:50 - 00000000 ____D () C:\ProgramData\Adobe
2015-01-18 05:45 - 2015-01-18 05:45 - 00000000 ____D () C:\Windows\SysWOW64\spool
2015-01-18 05:45 - 2015-01-18 05:45 - 00000000 ____D () C:\Windows\SysWOW64\Macromed
2015-01-18 05:42 - 2015-01-18 05:50 - 00000000 ____D () C:\Program Files (x86)\Adobe
2015-01-18 03:45 - 2015-01-18 03:45 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Roaming\My Bluetooth
2015-01-18 03:32 - 2015-01-26 06:16 - 00000000 ____D () C:\Users\HP ProBook 470 G2\Documents\Outlook-Dateien
2015-01-18 03:07 - 2015-01-18 22:26 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Roaming\Windows Live Writer
2015-01-18 03:07 - 2015-01-18 03:07 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Local\Windows Live Writer
2015-01-18 03:04 - 2015-01-18 03:04 - 00002498 _____ () C:\Users\HP ProBook 470 G2\Desktop\Word 2013.lnk
2015-01-18 03:04 - 2015-01-18 03:04 - 00002494 _____ () C:\Users\HP ProBook 470 G2\Desktop\Excel 2013.lnk
2015-01-18 03:04 - 2015-01-18 03:04 - 00002449 _____ () C:\Users\HP ProBook 470 G2\Desktop\Lync 2013.lnk
2015-01-18 03:04 - 2015-01-18 03:04 - 00002412 _____ () C:\Users\HP ProBook 470 G2\Desktop\OneNote 2013.lnk
2015-01-18 03:02 - 2015-01-18 03:02 - 00003214 _____ () C:\Windows\System32\Tasks\HP Officejet 6600.exe_{F24B9D44-93E3-4130-BAC4-774FFE8E795B}
2015-01-18 02:59 - 2015-02-01 05:21 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Roaming\HpUpdate
2015-01-18 02:59 - 2015-01-18 02:59 - 00002159 _____ () C:\Users\Public\Desktop\HP Officejet 6600.lnk
2015-01-18 02:59 - 2012-10-16 19:31 - 00741480 ____N (Hewlett-Packard Co.) C:\Windows\System32\HPDiscoPM5D12.dll
2015-01-18 02:58 - 2015-01-19 01:32 - 00000000 ____D () C:\ProgramData\HP
2015-01-18 02:58 - 2015-01-18 02:59 - 00000000 ____D () C:\Program Files (x86)\HP
2015-01-18 02:58 - 2015-01-18 02:58 - 00000000 ____D () C:\Program Files\HP
2015-01-18 02:57 - 2015-01-18 02:57 - 00000057 _____ () C:\ProgramData\Ament.ini
2015-01-18 02:56 - 2015-01-18 03:02 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Local\HP
2015-01-18 01:46 - 2014-12-12 21:09 - 00144384 _____ (Microsoft Corporation) C:\Windows\System32\ieUnatt.exe
2015-01-18 01:46 - 2014-12-12 19:33 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2015-01-18 01:46 - 2014-12-11 09:47 - 00087040 _____ (Microsoft Corporation) C:\Windows\System32\TSWbPrxy.exe
2015-01-18 01:46 - 2014-07-08 18:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\System32\KBDYAK.DLL
2015-01-18 01:46 - 2014-07-08 18:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\System32\KBDTAT.DLL
2015-01-18 01:46 - 2014-07-08 18:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\System32\KBDRU1.DLL
2015-01-18 01:46 - 2014-07-08 18:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\System32\KBDBASH.DLL
2015-01-18 01:46 - 2014-07-08 18:03 - 00006656 _____ (Microsoft Corporation) C:\Windows\System32\KBDRU.DLL
2015-01-18 01:46 - 2014-07-08 17:31 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDYAK.DLL
2015-01-18 01:46 - 2014-07-08 17:31 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDTAT.DLL
2015-01-18 01:46 - 2014-07-08 17:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRU1.DLL
2015-01-18 01:46 - 2014-07-08 17:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRU.DLL
2015-01-18 01:46 - 2014-07-08 17:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDBASH.DLL
2015-01-18 01:46 - 2014-07-08 14:38 - 00419992 _____ () C:\Windows\System32\locale.nls
2015-01-18 01:46 - 2014-07-08 14:30 - 00419992 _____ () C:\Windows\SysWOW64\locale.nls
2015-01-18 01:08 - 2014-08-28 18:07 - 03179520 _____ (Microsoft Corporation) C:\Windows\System32\rdpcorets.dll
2015-01-18 01:08 - 2014-05-08 01:32 - 00016384 _____ (Microsoft Corporation) C:\Windows\System32\RdpGroupPolicyExtension.dll
2015-01-18 01:07 - 2014-09-04 18:11 - 06584320 _____ (Microsoft Corporation) C:\Windows\System32\mstscax.dll
2015-01-18 01:07 - 2014-09-04 17:52 - 05703168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2015-01-18 00:58 - 2015-01-18 00:58 - 00000000 ____D () C:\Windows\de
2015-01-18 00:57 - 2015-01-18 00:57 - 00000000 ____D () C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2015-01-18 00:56 - 2015-01-18 00:56 - 00000000 ____D () C:\Windows\PCHEALTH
2015-01-18 00:56 - 2015-01-18 00:56 - 00000000 ____D () C:\Program Files\Windows Live
2015-01-18 00:55 - 2015-01-18 00:57 - 00000000 ____D () C:\Program Files (x86)\Windows Live
2015-01-18 00:54 - 2010-06-01 19:55 - 00527192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_7.dll
2015-01-18 00:54 - 2010-06-01 19:55 - 00518488 _____ (Microsoft Corporation) C:\Windows\System32\XAudio2_7.dll
2015-01-18 00:54 - 2010-06-01 19:55 - 00077656 _____ (Microsoft Corporation) C:\Windows\System32\XAPOFX1_5.dll
2015-01-18 00:54 - 2010-06-01 19:55 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_5.dll
2015-01-18 00:54 - 2010-05-26 02:41 - 02526056 _____ (Microsoft Corporation) C:\Windows\System32\D3DCompiler_43.dll
2015-01-18 00:54 - 2010-05-26 02:41 - 02106216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_43.dll
2015-01-18 00:54 - 2010-05-26 02:41 - 00276832 _____ (Microsoft Corporation) C:\Windows\System32\d3dx11_43.dll
2015-01-18 00:54 - 2010-05-26 02:41 - 00248672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_43.dll
2015-01-18 00:53 - 2009-09-04 08:29 - 00523088 _____ (Microsoft Corporation) C:\Windows\System32\d3dx10_42.dll
2015-01-18 00:53 - 2009-09-04 08:29 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_42.dll
2015-01-18 00:52 - 2015-01-18 00:52 - 00000199 _____ () C:\Windows\DirectX.log
2015-01-18 00:52 - 2006-11-29 04:06 - 04398360 _____ (Microsoft Corporation) C:\Windows\System32\d3dx9_32.dll
2015-01-18 00:52 - 2006-11-29 04:06 - 03426072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_32.dll
2015-01-18 00:50 - 2015-01-21 01:09 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Local\Windows Live
2015-01-18 00:48 - 2015-01-18 00:49 - 01245384 _____ (Microsoft Corporation) C:\Users\HP ProBook 470 G2\Downloads\wlsetup-web.exe
2015-01-18 00:48 - 2015-01-18 00:48 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Local\Intel_Corporation
2015-01-18 00:04 - 2015-01-18 00:04 - 00000000 ____D () C:\Windows\System32\Tasks\OfficeSoftwareProtectionPlatform
2015-01-18 00:04 - 2015-01-18 00:04 - 00000000 ____D () C:\Program Files (x86)\Microsoft Office
2015-01-18 00:01 - 2015-01-18 02:48 - 00000000 ____D () C:\Program Files\Microsoft Office 15
2015-01-17 09:48 - 2013-10-01 18:22 - 00056832 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\TsUsbFlt.sys
2015-01-17 09:48 - 2013-10-01 18:11 - 00013824 _____ (Microsoft Corporation) C:\Windows\System32\TsUsbRedirectionGroupPolicyControl.exe
2015-01-17 09:48 - 2013-10-01 18:08 - 00012800 _____ (Microsoft Corporation) C:\Windows\System32\TsUsbRedirectionGroupPolicyExtension.dll
2015-01-17 09:48 - 2013-10-01 17:48 - 00056832 _____ (Microsoft Corporation) C:\Windows\System32\MsRdpWebAccess.dll
2015-01-17 09:48 - 2013-10-01 17:48 - 00018944 _____ (Microsoft Corporation) C:\Windows\System32\wksprtPS.dll
2015-01-17 09:48 - 2013-10-01 17:29 - 00062976 _____ (Microsoft Corporation) C:\Windows\System32\tsgqec.dll
2015-01-17 09:48 - 2013-10-01 17:10 - 00044544 _____ (Microsoft Corporation) C:\Windows\System32\TsUsbGDCoInstaller.dll
2015-01-17 09:48 - 2013-10-01 16:15 - 01057280 _____ (Microsoft Corporation) C:\Windows\System32\rdvidcrl.dll
2015-01-17 09:48 - 2013-10-01 16:14 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MsRdpWebAccess.dll
2015-01-17 09:48 - 2013-10-01 16:14 - 00017920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wksprtPS.dll
2015-01-17 09:48 - 2013-10-01 16:01 - 00420864 _____ (Microsoft Corporation) C:\Windows\System32\wksprt.exe
2015-01-17 09:48 - 2013-10-01 15:58 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll
2015-01-17 09:48 - 2013-10-01 15:31 - 01147392 _____ (Microsoft Corporation) C:\Windows\System32\mstsc.exe
2015-01-17 09:48 - 2013-10-01 15:08 - 00855552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll
2015-01-17 09:48 - 2013-10-01 14:34 - 01068544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe
2015-01-17 09:42 - 2012-08-23 06:13 - 00243200 _____ (Microsoft Corporation) C:\Windows\System32\rdpudd.dll
2015-01-17 09:42 - 2012-08-23 06:10 - 00019456 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\rdpvideominiport.sys
2015-01-17 09:42 - 2012-08-23 06:08 - 00030208 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\TsUsbGD.sys
2015-01-17 09:42 - 2012-08-23 03:12 - 00192000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpendp_winip.dll
2015-01-17 09:42 - 2012-08-23 02:51 - 00228864 _____ (Microsoft Corporation) C:\Windows\System32\rdpendp_winip.dll
2015-01-17 09:40 - 2015-01-17 09:40 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2015-01-17 09:40 - 2015-01-17 09:40 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2015-01-17 09:37 - 2014-10-17 18:05 - 04121600 _____ (Microsoft Corporation) C:\Windows\System32\mf.dll
2015-01-17 09:37 - 2014-10-17 17:33 - 03209728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll
2015-01-17 09:37 - 2014-07-06 18:06 - 00206848 _____ (Microsoft Corporation) C:\Windows\System32\mfps.dll
2015-01-17 09:37 - 2014-07-06 18:06 - 00055808 _____ (Microsoft Corporation) C:\Windows\System32\rrinstaller.exe
2015-01-17 09:37 - 2014-07-06 18:06 - 00024576 _____ (Microsoft Corporation) C:\Windows\System32\mfpmp.exe
2015-01-17 09:37 - 2014-07-06 18:02 - 00002048 _____ (Microsoft Corporation) C:\Windows\System32\mferror.dll
2015-01-17 09:37 - 2014-07-06 17:40 - 00103424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfps.dll
2015-01-17 09:37 - 2014-07-06 17:39 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rrinstaller.exe
2015-01-17 09:37 - 2014-07-06 17:39 - 00023040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfpmp.exe
2015-01-17 09:37 - 2014-07-06 17:37 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mferror.dll
2015-01-17 09:37 - 2012-07-25 19:08 - 00744448 _____ (Microsoft Corporation) C:\Windows\System32\WUDFx.dll
2015-01-17 09:37 - 2012-07-25 19:08 - 00229888 _____ (Microsoft Corporation) C:\Windows\System32\WUDFHost.exe
2015-01-17 09:37 - 2012-07-25 19:08 - 00194048 _____ (Microsoft Corporation) C:\Windows\System32\WUDFPlatform.dll
2015-01-17 09:37 - 2012-07-25 19:08 - 00084992 _____ (Microsoft Corporation) C:\Windows\System32\WUDFSvc.dll
2015-01-17 09:37 - 2012-07-25 19:08 - 00045056 _____ (Microsoft Corporation) C:\Windows\System32\WUDFCoinstaller.dll
2015-01-17 09:37 - 2012-07-25 18:26 - 00198656 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\WUDFRd.sys
2015-01-17 09:37 - 2012-07-25 18:26 - 00087040 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\WUDFPf.sys
2015-01-17 09:37 - 2012-06-02 06:57 - 00000003 _____ () C:\Windows\System32\Drivers\MsftWdf_User_01_11_00_Inbox_Critical.Wdf
2015-01-17 09:35 - 2014-06-26 18:08 - 02777088 _____ (Microsoft Corporation) C:\Windows\System32\msmpeg2vdec.dll
2015-01-17 09:35 - 2014-06-26 17:45 - 02285056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2015-01-17 09:32 - 2015-01-17 09:32 - 00000000 ____D () C:\Users\Public\Documents\CyberLink
2015-01-17 09:32 - 2015-01-17 09:32 - 00000000 ____D () C:\Users\HP ProBook 470 G2\Documents\CyberLink
2015-01-17 09:32 - 2015-01-17 09:32 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Roaming\CyberLink
2015-01-17 09:32 - 2014-11-07 19:16 - 00002048 _____ (Microsoft Corporation) C:\Windows\System32\tzres.dll
2015-01-17 09:32 - 2014-11-07 18:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2015-01-17 09:32 - 2014-10-13 18:13 - 03241984 _____ (Microsoft Corporation) C:\Windows\System32\msi.dll
2015-01-17 09:32 - 2014-10-13 17:50 - 02363904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2015-01-17 09:32 - 2014-09-24 18:08 - 00371712 _____ (Microsoft Corporation) C:\Windows\System32\qdvd.dll
2015-01-17 09:32 - 2014-09-24 17:40 - 00519680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll
2015-01-17 09:32 - 2014-08-01 03:53 - 01031168 _____ (Microsoft Corporation) C:\Windows\System32\TSWorkspace.dll
2015-01-17 09:32 - 2014-08-01 03:35 - 00793600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll
2015-01-17 09:32 - 2014-06-23 19:29 - 02565120 _____ (Microsoft Corporation) C:\Windows\System32\d3d10warp.dll
2015-01-17 09:32 - 2014-06-23 18:59 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2015-01-17 09:31 - 2015-01-17 09:31 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Local\CyberLink
2015-01-17 09:31 - 2014-11-10 17:46 - 00119296 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\tdx.sys
2015-01-17 09:31 - 2014-10-29 18:03 - 00165888 _____ (Microsoft Corporation) C:\Windows\System32\charmap.exe
2015-01-17 09:31 - 2014-10-29 17:45 - 00155136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\charmap.exe
2015-01-17 09:31 - 2014-06-24 18:05 - 14175744 _____ (Microsoft Corporation) C:\Windows\System32\shell32.dll
2015-01-17 09:31 - 2014-06-24 17:41 - 12874240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2015-01-17 09:31 - 2014-02-03 18:35 - 00274880 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\msiscsi.sys
2015-01-17 09:31 - 2014-02-03 18:35 - 00190912 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\storport.sys
2015-01-17 09:31 - 2014-02-03 18:35 - 00027584 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\Diskdump.sys
2015-01-17 09:31 - 2014-02-03 18:28 - 00002048 _____ (Microsoft Corporation) C:\Windows\System32\iologmsg.dll
2015-01-17 09:31 - 2014-02-03 18:00 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iologmsg.dll
2015-01-17 09:31 - 2014-01-27 18:32 - 00228864 _____ (Microsoft Corporation) C:\Windows\System32\wwansvc.dll
2015-01-17 09:31 - 2014-01-23 18:37 - 01684928 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\ntfs.sys
2015-01-17 09:27 - 2014-10-02 18:12 - 02020352 _____ (Microsoft Corporation) C:\Windows\System32\WsmSvc.dll
2015-01-17 09:27 - 2014-10-02 18:12 - 00346624 _____ (Microsoft Corporation) C:\Windows\System32\WSManMigrationPlugin.dll
2015-01-17 09:27 - 2014-10-02 18:12 - 00310272 _____ (Microsoft Corporation) C:\Windows\System32\WsmWmiPl.dll
2015-01-17 09:27 - 2014-10-02 18:12 - 00181248 _____ (Microsoft Corporation) C:\Windows\System32\WsmAuto.dll
2015-01-17 09:27 - 2014-10-02 18:11 - 00266240 _____ (Microsoft Corporation) C:\Windows\System32\WSManHTTPConfig.exe
2015-01-17 09:27 - 2014-10-02 17:45 - 01177088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmSvc.dll
2015-01-17 09:27 - 2014-10-02 17:45 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSManMigrationPlugin.dll
2015-01-17 09:27 - 2014-10-02 17:45 - 00214016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmWmiPl.dll
2015-01-17 09:27 - 2014-10-02 17:45 - 00145920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmAuto.dll
2015-01-17 09:27 - 2014-10-02 17:44 - 00198656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSManHTTPConfig.exe
2015-01-17 09:13 - 2015-02-03 05:04 - 00003854 _____ () C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1421514790
2015-01-17 09:13 - 2015-01-17 09:13 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Roaming\Opera Software
2015-01-17 09:13 - 2015-01-17 09:13 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Local\Opera Software
2015-01-17 09:12 - 2015-02-03 05:04 - 00000000 ____D () C:\Program Files (x86)\Opera
2015-01-17 09:12 - 2015-01-17 09:12 - 00683664 _____ (Opera Software) C:\Users\HP ProBook 470 G2\Downloads\Opera_NI_stable.exe
2015-01-17 09:08 - 2015-01-29 22:13 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2015-01-17 09:08 - 2015-01-17 09:09 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Roaming\Mozilla
2015-01-17 09:08 - 2015-01-17 09:09 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Local\Mozilla
2015-01-17 09:08 - 2015-01-17 09:08 - 00001158 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2015-01-17 09:08 - 2015-01-17 09:08 - 00000000 ____D () C:\ProgramData\Mozilla
2015-01-17 09:07 - 2015-01-17 09:07 - 00243728 _____ () C:\Users\HP ProBook 470 G2\Downloads\Firefox Setup Stub 35.0.exe
2015-01-17 09:05 - 2015-01-17 09:05 - 00000000 __SHD () C:\Users\HP ProBook 470 G2\AppData\Local\EmieUserList
2015-01-17 09:05 - 2015-01-17 09:05 - 00000000 __SHD () C:\Users\HP ProBook 470 G2\AppData\Local\EmieSiteList
2015-01-17 09:02 - 2015-01-17 09:02 - 00001228 _____ () C:\Users\HP ProBook 470 G2\Desktop\Windows Explorer.lnk
2015-01-17 06:41 - 2015-01-17 06:42 - 00000000 ____D () C:\Windows\System32\MRT
2015-01-17 06:41 - 2014-12-31 04:12 - 113365784 _____ (Microsoft Corporation) C:\Windows\System32\MRT.exe
2015-01-17 06:40 - 2014-06-30 14:24 - 00008856 _____ (Microsoft Corporation) C:\Windows\System32\icardres.dll
2015-01-17 06:40 - 2014-06-30 14:14 - 00008856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardres.dll
2015-01-17 06:40 - 2014-03-09 13:48 - 01389208 _____ (Microsoft Corporation) C:\Windows\System32\icardagt.exe
2015-01-17 06:40 - 2014-03-09 13:48 - 00171160 _____ (Microsoft Corporation) C:\Windows\System32\infocardapi.dll
2015-01-17 06:40 - 2014-03-09 13:47 - 00619672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardagt.exe
2015-01-17 06:40 - 2014-03-09 13:47 - 00099480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\infocardapi.dll
2015-01-17 06:39 - 2014-11-26 17:43 - 00389296 _____ (Microsoft Corporation) C:\Windows\System32\iedkcs32.dll
2015-01-17 06:39 - 2014-11-26 17:10 - 00342200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-01-17 06:39 - 2014-11-21 19:13 - 25059840 _____ (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2015-01-17 06:39 - 2014-11-21 19:06 - 02724864 _____ (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2015-01-17 06:39 - 2014-11-21 19:06 - 00004096 _____ (Microsoft Corporation) C:\Windows\System32\ieetwcollectorres.dll
2015-01-17 06:39 - 2014-11-21 18:50 - 00580096 _____ (Microsoft Corporation) C:\Windows\System32\vbscript.dll
2015-01-17 06:39 - 2014-11-21 18:50 - 00066560 _____ (Microsoft Corporation) C:\Windows\System32\iesetup.dll
2015-01-17 06:39 - 2014-11-21 18:49 - 02885120 _____ (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2015-01-17 06:39 - 2014-11-21 18:49 - 00048640 _____ (Microsoft Corporation) C:\Windows\System32\ieetwproxystub.dll
2015-01-17 06:39 - 2014-11-21 18:48 - 00088064 _____ (Microsoft Corporation) C:\Windows\System32\MshtmlDac.dll
2015-01-17 06:39 - 2014-11-21 18:41 - 00054784 _____ (Microsoft Corporation) C:\Windows\System32\jsproxy.dll
2015-01-17 06:39 - 2014-11-21 18:40 - 00034304 _____ (Microsoft Corporation) C:\Windows\System32\iernonce.dll
2015-01-17 06:39 - 2014-11-21 18:37 - 00633856 _____ (Microsoft Corporation) C:\Windows\System32\ieui.dll
2015-01-17 06:39 - 2014-11-21 18:35 - 00114688 _____ (Microsoft Corporation) C:\Windows\System32\ieetwcollector.exe
2015-01-17 06:39 - 2014-11-21 18:34 - 06039552 _____ (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2015-01-17 06:39 - 2014-11-21 18:34 - 00814080 _____ (Microsoft Corporation) C:\Windows\System32\jscript9diag.dll
2015-01-17 06:39 - 2014-11-21 18:26 - 00968704 _____ (Microsoft Corporation) C:\Windows\System32\MsSpellCheckingFacility.exe
2015-01-17 06:39 - 2014-11-21 18:22 - 19749376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-01-17 06:39 - 2014-11-21 18:22 - 00490496 _____ (Microsoft Corporation) C:\Windows\System32\dxtmsft.dll
2015-01-17 06:39 - 2014-11-21 18:20 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2015-01-17 06:39 - 2014-11-21 18:14 - 00077824 _____ (Microsoft Corporation) C:\Windows\System32\JavaScriptCollectionAgent.dll
2015-01-17 06:39 - 2014-11-21 18:09 - 00199680 _____ (Microsoft Corporation) C:\Windows\System32\msrating.dll
2015-01-17 06:39 - 2014-11-21 18:08 - 00092160 _____ (Microsoft Corporation) C:\Windows\System32\mshtmled.dll
2015-01-17 06:39 - 2014-11-21 18:07 - 00501248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-01-17 06:39 - 2014-11-21 18:07 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-01-17 06:39 - 2014-11-21 18:06 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2015-01-17 06:39 - 2014-11-21 18:05 - 00316928 _____ (Microsoft Corporation) C:\Windows\System32\dxtrans.dll
2015-01-17 06:39 - 2014-11-21 18:05 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-01-17 06:39 - 2014-11-21 18:01 - 02277888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-01-17 06:39 - 2014-11-21 17:59 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-01-17 06:39 - 2014-11-21 17:58 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-01-17 06:39 - 2014-11-21 17:56 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-01-17 06:39 - 2014-11-21 17:54 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2015-01-17 06:39 - 2014-11-21 17:49 - 00800768 _____ (Microsoft Corporation) C:\Windows\System32\msfeeds.dll
2015-01-17 06:39 - 2014-11-21 17:49 - 00718848 _____ (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe
2015-01-17 06:39 - 2014-11-21 17:47 - 01359360 _____ (Microsoft Corporation) C:\Windows\System32\mshtmlmedia.dll
2015-01-17 06:39 - 2014-11-21 17:46 - 02125312 _____ (Microsoft Corporation) C:\Windows\System32\inetcpl.cpl
2015-01-17 06:39 - 2014-11-21 17:45 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-01-17 06:39 - 2014-11-21 17:43 - 14412800 _____ (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2015-01-17 06:39 - 2014-11-21 17:40 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-01-17 06:39 - 2014-11-21 17:36 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-01-17 06:39 - 2014-11-21 17:35 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-01-17 06:39 - 2014-11-21 17:33 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-01-17 06:39 - 2014-11-21 17:29 - 04299264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-01-17 06:39 - 2014-11-21 17:28 - 02358272 _____ (Microsoft Corporation) C:\Windows\System32\wininet.dll
2015-01-17 06:39 - 2014-11-21 17:23 - 00688640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-01-17 06:39 - 2014-11-21 17:22 - 02052096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-01-17 06:39 - 2014-11-21 17:21 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2015-01-17 06:39 - 2014-11-21 17:15 - 01548288 _____ (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2015-01-17 06:39 - 2014-11-21 17:13 - 12836864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-01-17 06:39 - 2014-11-21 17:03 - 00800768 _____ (Microsoft Corporation) C:\Windows\System32\ieapfltr.dll
2015-01-17 06:39 - 2014-11-21 17:00 - 01888256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-01-17 06:39 - 2014-11-21 16:56 - 01307136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-01-17 06:39 - 2014-11-21 16:54 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-01-17 06:39 - 2014-06-05 22:16 - 00035480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TsWpfWrp.exe
2015-01-17 06:39 - 2014-06-05 22:12 - 00035480 _____ (Microsoft Corporation) C:\Windows\System32\TsWpfWrp.exe
2015-01-17 06:38 - 2014-09-19 01:42 - 00342016 _____ (Microsoft Corporation) C:\Windows\System32\schannel.dll
2015-01-17 06:38 - 2014-09-19 01:42 - 00314880 _____ (Microsoft Corporation) C:\Windows\System32\msv1_0.dll
2015-01-17 06:38 - 2014-09-19 01:42 - 00309760 _____ (Microsoft Corporation) C:\Windows\System32\ncrypt.dll
2015-01-17 06:38 - 2014-09-19 01:42 - 00210944 _____ (Microsoft Corporation) C:\Windows\System32\wdigest.dll
2015-01-17 06:38 - 2014-09-19 01:42 - 00086528 _____ (Microsoft Corporation) C:\Windows\System32\TSpkg.dll
2015-01-17 06:38 - 2014-09-19 01:42 - 00022016 _____ (Microsoft Corporation) C:\Windows\System32\credssp.dll
2015-01-17 06:38 - 2014-09-19 01:23 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2015-01-17 06:38 - 2014-09-19 01:23 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-01-17 06:38 - 2014-09-19 01:23 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2015-01-17 06:38 - 2014-09-19 01:23 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2015-01-17 06:38 - 2014-09-19 01:23 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2015-01-17 06:38 - 2014-09-19 01:23 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2015-01-17 06:38 - 2014-07-16 18:07 - 00455168 _____ (Microsoft Corporation) C:\Windows\System32\winlogon.exe
2015-01-17 06:38 - 2014-07-16 18:07 - 00235520 _____ (Microsoft Corporation) C:\Windows\System32\winsta.dll
2015-01-17 06:38 - 2014-07-16 18:07 - 00150528 _____ (Microsoft Corporation) C:\Windows\System32\rdpcorekmts.dll
2015-01-17 06:38 - 2014-07-16 17:40 - 00157696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winsta.dll
2015-01-17 06:38 - 2014-07-16 17:21 - 00212480 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\rdpwd.sys
2015-01-17 06:38 - 2014-07-16 17:21 - 00039936 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\tssecsrv.sys
2015-01-17 06:38 - 2014-04-24 18:34 - 00801280 _____ (Microsoft Corporation) C:\Windows\System32\usp10.dll
2015-01-17 06:38 - 2014-04-24 18:06 - 00626688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usp10.dll
2015-01-17 06:38 - 2014-03-04 01:44 - 01163264 _____ (Microsoft Corporation) C:\Windows\System32\kernel32.dll
2015-01-17 06:38 - 2014-03-04 01:44 - 00722944 _____ (Microsoft Corporation) C:\Windows\System32\objsel.dll
2015-01-17 06:38 - 2014-03-04 01:44 - 00424960 _____ (Microsoft Corporation) C:\Windows\System32\KernelBase.dll
2015-01-17 06:38 - 2014-03-04 01:44 - 00362496 _____ (Microsoft Corporation) C:\Windows\System32\wow64win.dll
2015-01-17 06:38 - 2014-03-04 01:44 - 00243712 _____ (Microsoft Corporation) C:\Windows\System32\wow64.dll
2015-01-17 06:38 - 2014-03-04 01:44 - 00039936 _____ (Microsoft Corporation) C:\Windows\System32\wincredprovider.dll
2015-01-17 06:38 - 2014-03-04 01:44 - 00016384 _____ (Microsoft Corporation) C:\Windows\System32\ntvdm64.dll
2015-01-17 06:38 - 2014-03-04 01:44 - 00013312 _____ (Microsoft Corporation) C:\Windows\System32\wow64cpu.dll
2015-01-17 06:38 - 2014-03-04 01:43 - 00057344 _____ (Microsoft Corporation) C:\Windows\System32\cngprovider.dll
2015-01-17 06:38 - 2014-03-04 01:43 - 00056832 _____ (Microsoft Corporation) C:\Windows\System32\adprovider.dll
2015-01-17 06:38 - 2014-03-04 01:43 - 00053760 _____ (Microsoft Corporation) C:\Windows\System32\capiprovider.dll
2015-01-17 06:38 - 2014-03-04 01:43 - 00052736 _____ (Microsoft Corporation) C:\Windows\System32\dpapiprovider.dll
2015-01-17 06:38 - 2014-03-04 01:43 - 00044544 _____ (Microsoft Corporation) C:\Windows\System32\dimsroam.dll
2015-01-17 06:38 - 2014-03-04 01:17 - 00538112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\objsel.dll
2015-01-17 06:38 - 2014-03-04 01:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cngprovider.dll
2015-01-17 06:38 - 2014-03-04 01:17 - 00049664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adprovider.dll
2015-01-17 06:38 - 2014-03-04 01:17 - 00048128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\capiprovider.dll
2015-01-17 06:38 - 2014-03-04 01:17 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpapiprovider.dll
2015-01-17 06:38 - 2014-03-04 01:17 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dimsroam.dll
2015-01-17 06:38 - 2014-03-04 01:17 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wincredprovider.dll
2015-01-17 06:38 - 2014-03-04 01:17 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2015-01-17 06:38 - 2014-03-04 01:16 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2015-01-17 06:38 - 2014-03-04 01:16 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2015-01-17 06:38 - 2014-03-04 01:16 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2015-01-17 06:38 - 2014-03-04 01:16 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2015-01-17 06:38 - 2014-03-04 00:09 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2015-01-17 06:38 - 2014-03-04 00:09 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2015-01-17 06:38 - 2011-04-08 22:58 - 00142336 _____ (Microsoft Corporation) C:\Windows\System32\poqexec.exe
2015-01-17 06:38 - 2011-04-08 21:56 - 00123904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe
2015-01-17 06:37 - 2014-12-18 17:46 - 00141312 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\mrxdav.sys
2015-01-17 06:37 - 2014-12-11 21:35 - 05553592 _____ (Microsoft Corporation) C:\Windows\System32\ntoskrnl.exe
2015-01-17 06:37 - 2014-12-11 21:31 - 00503808 _____ (Microsoft Corporation) C:\Windows\System32\srcore.dll
2015-01-17 06:37 - 2014-12-11 21:31 - 00296960 _____ (Microsoft Corporation) C:\Windows\System32\rstrui.exe
2015-01-17 06:37 - 2014-12-11 21:31 - 00050176 _____ (Microsoft Corporation) C:\Windows\System32\srclient.dll
2015-01-17 06:37 - 2014-12-11 21:11 - 03971512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2015-01-17 06:37 - 2014-12-11 21:11 - 03916728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2015-01-17 06:37 - 2014-12-11 21:07 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2015-01-17 06:37 - 2014-11-10 19:09 - 01424384 _____ (Microsoft Corporation) C:\Windows\System32\WindowsCodecs.dll
2015-01-17 06:37 - 2014-11-10 19:08 - 00728064 _____ (Microsoft Corporation) C:\Windows\System32\kerberos.dll
2015-01-17 06:37 - 2014-11-10 19:08 - 00241152 _____ (Microsoft Corporation) C:\Windows\System32\pku2u.dll
2015-01-17 06:37 - 2014-11-10 18:44 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2015-01-17 06:37 - 2014-11-10 18:44 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-01-17 06:37 - 2014-11-10 18:44 - 00186880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pku2u.dll
2015-01-17 06:37 - 2014-10-13 18:16 - 00155064 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\ksecpkg.sys
2015-01-17 06:37 - 2014-10-13 18:13 - 00683520 _____ (Microsoft Corporation) C:\Windows\System32\termsrv.dll
2015-01-17 06:37 - 2014-10-13 18:12 - 01460736 _____ (Microsoft Corporation) C:\Windows\System32\lsasrv.dll
2015-01-17 06:37 - 2014-10-13 18:09 - 00146432 _____ (Microsoft Corporation) C:\Windows\System32\msaudite.dll
2015-01-17 06:37 - 2014-10-13 18:07 - 00681984 _____ (Microsoft Corporation) C:\Windows\System32\adtschema.dll
2015-01-17 06:37 - 2014-10-13 17:50 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2015-01-17 06:37 - 2014-10-13 17:49 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2015-01-17 06:37 - 2014-10-13 17:47 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2015-01-17 06:37 - 2014-10-13 17:46 - 00681984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2015-01-17 06:37 - 2014-10-09 16:57 - 03198976 _____ (Microsoft Corporation) C:\Windows\System32\win32k.sys
2015-01-17 06:37 - 2014-08-20 22:43 - 01882624 _____ (Microsoft Corporation) C:\Windows\System32\msxml3.dll
2015-01-17 06:37 - 2014-08-20 22:40 - 00002048 _____ (Microsoft Corporation) C:\Windows\System32\msxml3r.dll
2015-01-17 06:37 - 2014-08-20 22:26 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2015-01-17 06:37 - 2014-08-20 22:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2015-01-17 06:37 - 2014-08-11 18:02 - 00878080 _____ (Microsoft Corporation) C:\Windows\System32\IMJP10K.DLL
2015-01-17 06:37 - 2014-08-11 17:36 - 00701440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IMJP10K.DLL
2015-01-17 06:37 - 2014-06-17 18:18 - 00692736 _____ (Microsoft Corporation) C:\Windows\System32\osk.exe
2015-01-17 06:37 - 2014-06-17 17:51 - 00646144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\osk.exe
2015-01-17 06:37 - 2014-06-11 23:52 - 00986560 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\dxgkrnl.sys
2015-01-17 06:37 - 2014-06-03 02:02 - 01941504 _____ (Microsoft Corporation) C:\Windows\System32\authui.dll
2015-01-17 06:37 - 2014-06-03 02:02 - 00504320 _____ (Microsoft Corporation) C:\Windows\System32\msihnd.dll
2015-01-17 06:37 - 2014-06-03 02:02 - 00112064 _____ (Microsoft Corporation) C:\Windows\System32\consent.exe
2015-01-17 06:37 - 2014-06-03 01:29 - 01805824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2015-01-17 06:37 - 2014-06-03 01:29 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll
2015-01-17 06:37 - 2014-04-11 18:22 - 00095680 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\ksecdd.sys
2015-01-17 06:37 - 2014-04-11 18:19 - 00136192 _____ (Microsoft Corporation) C:\Windows\System32\sspicli.dll
2015-01-17 06:37 - 2014-04-11 18:19 - 00031232 _____ (Microsoft Corporation) C:\Windows\System32\lsass.exe
2015-01-17 06:37 - 2014-04-11 18:19 - 00029184 _____ (Microsoft Corporation) C:\Windows\System32\sspisrv.dll
2015-01-17 06:37 - 2014-04-11 18:19 - 00028160 _____ (Microsoft Corporation) C:\Windows\System32\secur32.dll
2015-01-17 06:37 - 2014-04-04 18:47 - 01903552 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\tcpip.sys
2015-01-17 06:37 - 2014-04-04 18:47 - 00288192 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\FWPKCLNT.SYS
2015-01-17 06:37 - 2014-03-26 06:44 - 02002432 _____ (Microsoft Corporation) C:\Windows\System32\msxml6.dll
2015-01-17 06:37 - 2014-03-26 06:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\System32\msxml6r.dll
2015-01-17 06:37 - 2014-03-26 06:27 - 01389056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
2015-01-17 06:37 - 2014-03-26 06:25 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6r.dll
2015-01-17 06:37 - 2011-11-16 22:35 - 00395776 _____ (Microsoft Corporation) C:\Windows\System32\webio.dll
2015-01-17 06:37 - 2011-11-16 21:35 - 00314880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webio.dll
2015-01-17 06:36 - 2014-12-18 19:06 - 00210432 _____ (Microsoft Corporation) C:\Windows\System32\profsvc.dll
2015-01-17 06:36 - 2014-12-05 20:17 - 00303616 _____ (Microsoft Corporation) C:\Windows\System32\nlasvc.dll
2015-01-17 06:36 - 2014-12-05 19:50 - 00156672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncsi.dll
2015-01-17 06:36 - 2014-12-05 19:50 - 00052224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nlaapi.dll
2015-01-17 06:36 - 2014-10-24 17:57 - 00077824 _____ (Microsoft Corporation) C:\Windows\System32\packager.dll
2015-01-17 06:36 - 2014-10-24 17:32 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll
2015-01-17 06:36 - 2014-10-17 18:05 - 00861696 _____ (Microsoft Corporation) C:\Windows\System32\oleaut32.dll
2015-01-17 06:36 - 2014-10-17 17:33 - 00571904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2015-01-17 06:36 - 2014-10-02 18:12 - 00500224 _____ (Microsoft Corporation) C:\Windows\System32\AUDIOKSE.dll
2015-01-17 06:36 - 2014-10-02 18:11 - 00680960 _____ (Microsoft Corporation) C:\Windows\System32\audiosrv.dll
2015-01-17 06:36 - 2014-10-02 18:11 - 00440832 _____ (Microsoft Corporation) C:\Windows\System32\AudioEng.dll
2015-01-17 06:36 - 2014-10-02 18:11 - 00296448 _____ (Microsoft Corporation) C:\Windows\System32\AudioSes.dll
2015-01-17 06:36 - 2014-10-02 18:11 - 00284672 _____ (Microsoft Corporation) C:\Windows\System32\EncDump.dll
2015-01-17 06:36 - 2014-10-02 17:44 - 00442880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll
2015-01-17 06:36 - 2014-10-02 17:44 - 00374784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll
2015-01-17 06:36 - 2014-10-02 17:44 - 00195584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll
2015-01-17 06:36 - 2014-09-03 21:23 - 00424448 _____ (Microsoft Corporation) C:\Windows\System32\rastls.dll
2015-01-17 06:36 - 2014-09-03 21:04 - 00372736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rastls.dll
2015-01-17 06:36 - 2014-06-18 14:23 - 01943696 _____ (Microsoft Corporation) C:\Windows\System32\dfshim.dll
2015-01-17 06:36 - 2014-06-18 14:23 - 01131664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dfshim.dll
2015-01-17 06:36 - 2014-06-18 14:23 - 00156824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscorier.dll
2015-01-17 06:36 - 2014-06-18 14:23 - 00156312 _____ (Microsoft Corporation) C:\Windows\System32\mscorier.dll
2015-01-17 06:36 - 2014-06-18 14:23 - 00081560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscories.dll
2015-01-17 06:36 - 2014-06-18 14:23 - 00073880 _____ (Microsoft Corporation) C:\Windows\System32\mscories.dll
2015-01-17 06:36 - 2014-06-06 02:10 - 00624128 _____ (Microsoft Corporation) C:\Windows\System32\qedit.dll
2015-01-17 06:36 - 2014-06-06 01:44 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2015-01-17 06:36 - 2014-05-29 22:45 - 00497152 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\afd.sys
2015-01-17 06:36 - 2014-01-28 18:32 - 00484864 _____ (Microsoft Corporation) C:\Windows\System32\wer.dll
2015-01-17 06:36 - 2014-01-28 18:06 - 00381440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll
2015-01-17 06:36 - 2013-07-20 02:33 - 00124112 _____ (Microsoft Corporation) C:\Windows\System32\PresentationCFFRasterizerNative_v0300.dll
2015-01-17 06:36 - 2013-07-20 02:33 - 00102608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2015-01-17 06:35 - 2014-08-22 18:07 - 00404480 _____ (Microsoft Corporation) C:\Windows\System32\gdi32.dll
2015-01-17 06:35 - 2014-08-22 17:45 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2015-01-17 06:35 - 2011-02-22 20:55 - 00090624 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\bowser.sys
2015-01-17 06:26 - 2014-07-13 18:02 - 01216000 _____ (Microsoft Corporation) C:\Windows\System32\rpcrt4.dll
2015-01-17 06:26 - 2014-07-13 17:40 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2015-01-17 05:57 - 2015-01-17 05:57 - 00000000 ____D () C:\Windows\System32\appmgmt
2015-01-17 05:32 - 2012-02-16 22:38 - 01031680 _____ (Microsoft Corporation) C:\Windows\System32\rdpcore.dll
2015-01-17 05:32 - 2012-02-16 21:34 - 00826880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpcore.dll
2015-01-17 05:32 - 2012-02-16 20:57 - 00023552 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\tdtcp.sys
2015-01-17 05:29 - 2015-02-01 08:26 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Local\Hewlett-Packard
2015-01-17 05:24 - 2014-05-14 08:23 - 02477536 _____ (Microsoft Corporation) C:\Windows\System32\wuaueng.dll
2015-01-17 05:24 - 2014-05-14 08:23 - 00700384 _____ (Microsoft Corporation) C:\Windows\System32\wuapi.dll
2015-01-17 05:24 - 2014-05-14 08:23 - 00581600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2015-01-17 05:24 - 2014-05-14 08:23 - 00058336 _____ (Microsoft Corporation) C:\Windows\System32\wuauclt.exe
2015-01-17 05:24 - 2014-05-14 08:23 - 00044512 _____ (Microsoft Corporation) C:\Windows\System32\wups2.dll
2015-01-17 05:24 - 2014-05-14 08:23 - 00038880 _____ (Microsoft Corporation) C:\Windows\System32\wups.dll
2015-01-17 05:24 - 2014-05-14 08:23 - 00036320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2015-01-17 05:24 - 2014-05-14 08:21 - 02620928 _____ (Microsoft Corporation) C:\Windows\System32\wucltux.dll
2015-01-17 05:24 - 2014-05-14 08:20 - 00097792 _____ (Microsoft Corporation) C:\Windows\System32\wudriver.dll
2015-01-17 05:24 - 2014-05-14 08:17 - 00092672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2015-01-17 05:24 - 2014-05-14 00:23 - 00198600 _____ (Microsoft Corporation) C:\Windows\System32\wuwebv.dll
2015-01-17 05:24 - 2014-05-14 00:23 - 00179656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2015-01-17 05:24 - 2014-05-14 00:20 - 00036864 _____ (Microsoft Corporation) C:\Windows\System32\wuapp.exe
2015-01-17 05:24 - 2014-05-14 00:17 - 00033792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2015-01-17 05:23 - 2015-01-18 23:50 - 00111448 _____ () C:\Users\HP ProBook 470 G2\AppData\Local\GDIPFONTCACHEV1.DAT
2015-01-17 05:23 - 2015-01-17 05:23 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Roaming\Intel Corporation
2015-01-17 05:23 - 2015-01-17 05:23 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Roaming\ATI
2015-01-17 05:23 - 2015-01-17 05:23 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Local\ATI
2015-01-17 05:22 - 2015-01-28 05:08 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Roaming\Hewlett-Packard
2015-01-17 05:22 - 2015-01-19 00:59 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Roaming\hpqLog
2015-01-17 05:22 - 2015-01-17 05:22 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Local\Power2Go8
2015-01-17 05:21 - 2015-02-03 07:06 - 00003982 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{A3EC1CE9-D038-490D-8706-1AC18333F6A4}
2015-01-17 05:21 - 2015-01-19 05:26 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Local\VirtualStore
2015-01-17 05:21 - 2015-01-18 05:57 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Roaming\Adobe
2015-01-17 05:21 - 2015-01-17 05:21 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Local\RemEngine
2015-01-17 05:21 - 2015-01-17 05:21 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Local\Hewlett-Packard_Company
2015-01-17 05:20 - 2015-02-03 23:04 - 00064910 _____ () C:\Users\HP ProBook 470 G2\AppData\Local\BTServer.log
2015-01-17 05:20 - 2015-01-17 05:21 - 00000000 ____D () C:\users\HP ProBook 470 G2
2015-01-17 05:20 - 2015-01-17 05:20 - 00000180 _____ () C:\Windows\System32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2015-01-17 05:20 - 2015-01-17 05:20 - 00000020 ___SH () C:\Users\HP ProBook 470 G2\ntuser.ini
2015-01-17 05:20 - 2015-01-17 05:20 - 00000000 _SHDL () C:\Users\HP ProBook 470 G2\Vorlagen
2015-01-17 05:20 - 2015-01-17 05:20 - 00000000 _SHDL () C:\Users\HP ProBook 470 G2\Startmenü
2015-01-17 05:20 - 2015-01-17 05:20 - 00000000 _SHDL () C:\Users\HP ProBook 470 G2\Netzwerkumgebung
2015-01-17 05:20 - 2015-01-17 05:20 - 00000000 _SHDL () C:\Users\HP ProBook 470 G2\Lokale Einstellungen
2015-01-17 05:20 - 2015-01-17 05:20 - 00000000 _SHDL () C:\Users\HP ProBook 470 G2\Eigene Dateien
2015-01-17 05:20 - 2015-01-17 05:20 - 00000000 _SHDL () C:\Users\HP ProBook 470 G2\Druckumgebung
2015-01-17 05:20 - 2015-01-17 05:20 - 00000000 _SHDL () C:\Users\HP ProBook 470 G2\Documents\Eigene Musik
2015-01-17 05:20 - 2015-01-17 05:20 - 00000000 _SHDL () C:\Users\HP ProBook 470 G2\Documents\Eigene Bilder
2015-01-17 05:20 - 2015-01-17 05:20 - 00000000 _SHDL () C:\Users\HP ProBook 470 G2\AppData\Local\Verlauf
2015-01-17 05:20 - 2015-01-17 05:20 - 00000000 _SHDL () C:\Users\HP ProBook 470 G2\AppData\Local\Anwendungsdaten
2015-01-17 05:20 - 2015-01-17 05:20 - 00000000 _SHDL () C:\Users\HP ProBook 470 G2\Anwendungsdaten
2015-01-17 05:20 - 2015-01-17 05:20 - 00000000 __RSH () C:\Windows\SysWOW64\Drivers\103C_HP_bNB_ProBook 470 G2_Y5336AN_0U_QCND43650KK_E14WWR4AW602_4A_I2249_SHP_V67.22_BM74 01.03_T140707_W748-1_L407_M8065_J750_7Intel_8651_92.60_#140522_N10EC8168;10ECB723_(G6W69EA#ABD)_XMOBILE_CN10_Z.MRK
2015-01-17 05:20 - 2015-01-17 05:20 - 00000000 __RSH () C:\Windows\System32\Drivers\103C_HP_bNB_ProBook 470 G2_Y5336AN_0U_QCND43650KK_E14WWR4AW602_4A_I2249_SHP_V67.22_BM74 01.03_T140707_W748-1_L407_M8065_J750_7Intel_8651_92.60_#140522_N10EC8168;10ECB723_(G6W69EA#ABD)_XMOBILE_CN10_Z.MRK
2015-01-17 05:20 - 2015-01-17 05:20 - 00000000 ____D () C:\Users\HP ProBook 470 G2\Documents\My Bluetooth
2015-01-17 05:20 - 2015-01-17 05:20 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Roaming\DigitalPersona
2015-01-17 05:20 - 2015-01-17 05:20 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Local\DigitalPersona
2015-01-17 05:20 - 2014-09-09 11:22 - 00000000 ___HD () C:\Users\HP ProBook 470 G2\Documents\hp.system.package.metadata
2015-01-17 05:17 - 2015-02-03 23:04 - 01451336 _____ () C:\Windows\WindowsUpdate.log

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-02-03 23:10 - 2009-07-13 20:51 - 00089341 _____ () C:\Windows\setupact.log
2015-02-03 23:08 - 2009-07-13 21:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-02-03 22:17 - 2009-07-13 20:45 - 00026608 ____H () C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-02-03 22:17 - 2009-07-13 20:45 - 00026608 ____H () C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-02-02 08:13 - 2014-09-09 12:04 - 00700380 _____ () C:\Windows\System32\perfh007.dat
2015-02-02 08:13 - 2014-09-09 12:04 - 00149986 _____ () C:\Windows\System32\perfc007.dat
2015-02-02 08:13 - 2009-07-13 21:13 - 01622706 _____ () C:\Windows\System32\PerfStringBackup.INI
2015-02-01 05:20 - 2014-09-09 11:51 - 00000000 ____D () C:\Windows\Hewlett-Packard
2015-01-30 05:57 - 2010-11-20 19:47 - 00917220 _____ () C:\Windows\PFRO.log
2015-01-26 06:29 - 2014-09-09 11:39 - 00000000 ____D () C:\ProgramData\Skype
2015-01-22 23:42 - 2014-09-09 11:21 - 00114410 _____ () C:\Windows\DPINST.LOG
2015-01-22 23:38 - 2013-12-03 11:34 - 00000000 ____D () C:\ProgramData\Package Cache
2015-01-19 08:07 - 2014-05-22 04:25 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2015-01-19 05:09 - 2014-09-09 11:41 - 00000000 ____D () C:\ProgramData\Apple
2015-01-19 01:27 - 2009-07-13 20:45 - 02363080 _____ () C:\Windows\System32\FNTCACHE.DAT
2015-01-19 01:13 - 2014-09-09 11:23 - 00000000 ____D () C:\Program Files (x86)\Realtek
2015-01-19 01:13 - 2014-03-28 15:26 - 00000000 ____D () C:\SWSETUP
2015-01-19 01:08 - 2014-09-09 11:36 - 00000000 ____D () C:\ProgramData\Realtek
2015-01-19 01:05 - 2014-09-09 11:38 - 00674592 _____ (Sunplus) C:\Windows\System32\Drivers\SPUVCBv_x64.sys
2015-01-19 01:05 - 2014-09-09 11:38 - 00068984 _____ (Dext5xx) C:\Windows\System32\DextUVCB_x64.ax
2015-01-19 01:05 - 2014-09-09 11:38 - 00063864 _____ (Dext5xx) C:\Windows\SysWOW64\DextUVCB.ax
2015-01-19 01:05 - 2014-09-09 11:38 - 00004096 _____ (Hewlett-Packard Company) C:\Windows\SysWOW64\sigfile.exe
2015-01-19 01:05 - 2014-09-09 11:38 - 00003962 _____ () C:\Windows\Dext_21.ini
2015-01-19 01:05 - 2014-09-09 11:38 - 00003958 _____ () C:\Windows\Dext_12.ini
2015-01-19 01:05 - 2014-09-09 11:38 - 00003942 _____ () C:\Windows\Dext_27.ini
2015-01-19 01:05 - 2014-09-09 11:38 - 00003940 _____ () C:\Windows\Dext_25.ini
2015-01-19 01:05 - 2014-09-09 11:38 - 00003876 _____ () C:\Windows\Dext_05.ini
2015-01-19 01:05 - 2014-09-09 11:38 - 00003850 _____ () C:\Windows\Dext_14.ini
2015-01-19 01:05 - 2014-09-09 11:38 - 00003762 _____ () C:\Windows\Dext_10.ini
2015-01-19 01:05 - 2014-09-09 11:38 - 00003752 _____ () C:\Windows\Dext_16.ini
2015-01-19 01:05 - 2014-09-09 11:38 - 00003720 _____ () C:\Windows\Dext_36.ini
2015-01-19 01:05 - 2014-09-09 11:38 - 00003696 _____ () C:\Windows\Dext_22.ini
2015-01-19 01:05 - 2014-09-09 11:38 - 00003688 _____ () C:\Windows\Dext_1046.ini
2015-01-19 01:05 - 2014-09-09 11:38 - 00003684 _____ () C:\Windows\Dext_08.ini
2015-01-19 01:05 - 2014-09-09 11:38 - 00003640 _____ () C:\Windows\Dext_20.ini
2015-01-19 01:05 - 2014-09-09 11:38 - 00003630 _____ () C:\Windows\Dext_07.ini
2015-01-19 01:05 - 2014-09-09 11:38 - 00003630 _____ () C:\Windows\Dext_06.ini
2015-01-19 01:05 - 2014-09-09 11:38 - 00003598 _____ () C:\Windows\Dext_19.ini
2015-01-19 01:05 - 2014-09-09 11:38 - 00003586 _____ () C:\Windows\Dext_24.ini
2015-01-19 01:05 - 2014-09-09 11:38 - 00003580 _____ () C:\Windows\Dext_02.ini
2015-01-19 01:05 - 2014-09-09 11:38 - 00003536 _____ () C:\Windows\Dext_29.ini
2015-01-19 01:05 - 2014-09-09 11:38 - 00003412 _____ () C:\Windows\Dext_13.ini
2015-01-19 01:05 - 2014-09-09 11:38 - 00000000 ____D () C:\Program Files (x86)\HP Camera Driver
2015-01-19 01:02 - 2014-09-09 11:19 - 14956922 _____ () C:\ProgramData\hpcsmmsilogs.log
2015-01-19 01:01 - 2014-05-22 04:24 - 00000000 ____D () C:\Program Files\Hewlett-Packard
2015-01-19 01:01 - 2014-05-22 04:24 - 00000000 ____D () C:\Program Files (x86)\Hewlett-Packard
2015-01-19 01:00 - 2014-09-09 12:03 - 00000000 ____D () C:\Windows\SysWOW64\de
2015-01-19 01:00 - 2014-09-09 12:03 - 00000000 ____D () C:\Windows\System32\de
2015-01-19 00:58 - 2014-09-09 11:21 - 00000000 ____D () C:\ProgramData\HPQLOG
2015-01-19 00:51 - 2014-09-09 11:30 - 00001336 _____ () C:\Windows\Synaptics.log
2015-01-18 02:08 - 2009-07-13 19:20 - 00000000 ____D () C:\Windows\rescache
2015-01-18 01:13 - 2013-12-03 11:37 - 01596986 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2015-01-18 00:56 - 2009-07-13 19:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared
2015-01-17 12:11 - 2014-05-22 04:25 - 00000000 ____D () C:\ProgramData\Hewlett-Packard
2015-01-17 09:49 - 2009-07-13 19:20 - 00000000 ____D () C:\Windows\SysWOW64\Dism
2015-01-17 09:49 - 2009-07-13 19:20 - 00000000 ____D () C:\Windows\System32\Dism
2015-01-17 09:49 - 2009-07-13 19:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2015-01-17 09:32 - 2014-09-09 11:41 - 00000000 ____D () C:\ProgramData\CyberLink
2015-01-17 09:12 - 2014-05-22 04:28 - 00001912 _____ () C:\Windows\epplauncher.mif
2015-01-17 09:12 - 2014-05-22 04:27 - 00000000 ____D () C:\Program Files\Microsoft Security Client
2015-01-17 09:12 - 2014-05-22 04:27 - 00000000 ____D () C:\Program Files (x86)\Microsoft Security Client
2015-01-17 08:47 - 2009-07-13 21:32 - 00000000 ____D () C:\Windows\System32\restore
2015-01-17 08:43 - 2014-09-09 11:41 - 00000000 ____D () C:\Program Files\Windows Journal
2015-01-17 08:43 - 2010-11-20 23:06 - 00000000 ____D () C:\Windows\SysWOW64\winrm
2015-01-17 08:43 - 2010-11-20 23:06 - 00000000 ____D () C:\Windows\SysWOW64\WCN
2015-01-17 08:43 - 2010-11-20 23:06 - 00000000 ____D () C:\Windows\SysWOW64\sysprep
2015-01-17 08:43 - 2010-11-20 23:06 - 00000000 ____D () C:\Windows\SysWOW64\slmgr
2015-01-17 08:43 - 2010-11-20 23:06 - 00000000 ____D () C:\Windows\SysWOW64\Printing_Admin_Scripts
2015-01-17 08:43 - 2010-11-20 23:06 - 00000000 ____D () C:\Windows\System32\winrm
2015-01-17 08:43 - 2010-11-20 23:06 - 00000000 ____D () C:\Windows\System32\WCN
2015-01-17 08:43 - 2010-11-20 23:06 - 00000000 ____D () C:\Windows\System32\slmgr
2015-01-17 08:43 - 2010-11-20 23:06 - 00000000 ____D () C:\Windows\System32\Printing_Admin_Scripts
2015-01-17 08:43 - 2009-07-13 21:37 - 00000000 ____D () C:\Windows\DigitalLocker
2015-01-17 08:43 - 2009-07-13 21:32 - 00000000 ____D () C:\Program Files (x86)\Windows Sidebar
2015-01-17 08:43 - 2009-07-13 21:32 - 00000000 ____D () C:\Program Files (x86)\Windows Defender
2015-01-17 08:43 - 2009-07-13 19:20 - 00000000 ____D () C:\Windows\SysWOW64\oobe
2015-01-17 08:43 - 2009-07-13 19:20 - 00000000 ____D () C:\Windows\SysWOW64\MUI
2015-01-17 08:43 - 2009-07-13 19:20 - 00000000 ____D () C:\Windows\System32\sysprep
2015-01-17 08:43 - 2009-07-13 19:20 - 00000000 ____D () C:\Windows\System32\oobe
2015-01-17 08:43 - 2009-07-13 19:20 - 00000000 ____D () C:\Windows\System32\MUI
2015-01-17 08:43 - 2009-07-13 19:20 - 00000000 ____D () C:\Windows\IME
2015-01-17 08:43 - 2009-07-13 19:20 - 00000000 ____D () C:\Program Files\Common Files\System
2015-01-17 05:21 - 2014-09-09 11:39 - 00000000 ___RD () C:\Program Files (x86)\Online Services
2015-01-17 05:21 - 2013-12-03 15:39 - 00000000 _RSHD () C:\SYSTEM.SAV
2015-01-17 05:20 - 2013-12-03 11:29 - 00000000 ____D () C:\Windows\Panther
2015-01-17 05:17 - 2009-07-13 19:20 - 00000000 __RHD () C:\Users\Public\Libraries

Some content of TEMP:
====================
C:\Users\HP ProBook 470 G2\AppData\Local\Temp\Extract.exe
C:\Users\HP ProBook 470 G2\AppData\Local\Temp\Foxit PhantomPDF Updater.exe
C:\Users\HP ProBook 470 G2\AppData\Local\Temp\SP68157.exe
C:\Users\HP ProBook 470 G2\AppData\Local\Temp\SP69843.exe
C:\Users\HP ProBook 470 G2\AppData\Local\Temp\SP69888.exe
C:\Users\HP ProBook 470 G2\AppData\Local\Temp\SP69896.exe
C:\Users\HP ProBook 470 G2\AppData\Local\Temp\SP69926.exe


==================== Known DLLs (Whitelisted) ================


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit

==================== Restore Points  =========================

Restore point made on: 2015-01-29 22:57:57
Restore point made on: 2015-02-01 05:21:01
Restore point made on: 2015-02-01 05:23:16

==================== Memory info =========================== 

Percentage of memory in use: 12%
Total physical RAM: 8064.11 MB
Available physical RAM: 7031.22 MB
Total Pagefile: 8062.31 MB
Available Pagefile: 7026.77 MB
Total Virtual: 8192 MB
Available Virtual: 8191.89 MB

==================== Drives ================================

Drive c: (Windows) (Fixed) (Total:682.42 GB) (Free:611.46 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive e: (HP_RECOVERY) (Fixed) (Total:13.21 GB) (Free:1.46 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive f: (HP_TOOLS) (Fixed) (Total:1.99 GB) (Free:1.61 GB) FAT32
Drive h: () (Removable) (Total:7.51 GB) (Free:6.02 GB) FAT32
Drive x: (Boot) (Fixed) (Total:0.12 GB) (Free:0.12 GB) NTFS
Drive y: (SYSTEM ) (Fixed) (Total:1 GB) (Free:0.62 GB) NTFS ==>[System with boot components (obtained from reading drive)]

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 698.6 GB) (Disk ID: 75916FA3)
Partition 1: (Active) - (Size=1 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=682.4 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=13.2 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=2 GB) - (Type=0B)

========================================================
Disk: 1 (Size: 7.5 GB) (Disk ID: 2C6B7369)
No partition Table on disk 1.


LastRegBack: 2015-02-02 23:55

==================== End Of Log ============================
         

--- --- ---

[/CODE]

startet das System nicht im normalen Modus?

Addition.txt

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 01-02-2015
Ran by HP ProBook 470 G2 at 2015-02-04 09:57:58
Running from G:\
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Microsoft Security Essentials (Enabled - Up to date) {4F35CFC4-45A3-FC37-EF17-759A02E39AB1}
AS: Microsoft Security Essentials (Enabled - Up to date) {F4542E20-6399-F3B9-D5A7-4EE87964D00C}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

AAVUpdateManager (HKLM-x32\...\{AFA42FE1-A5C3-485F-9180-BFCF5BF1F1C3}) (Version: 18.00.0000 - Wolters Kluwer Deutschland GmbH)
Adobe Flash Player 16 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 16.0.0.296 - Adobe Systems Incorporated)
Adobe Photoshop CS3 (HKLM-x32\...\Adobe_5f143314a5d434c8511097393d17397) (Version: 10.0 - Adobe Systems Incorporated)
AMD Catalyst Install Manager (HKLM\...\{5E40C3AD-A3D5-B349-1B9F-EBAC0F9EE510}) (Version: 8.0.916.0 - Advanced Micro Devices, Inc.)
Apple Application Support (32-Bit) (HKLM-x32\...\{2FE00055-C4F3-4F7A-AEDD-E198D54CF12F}) (Version: 3.1.1 - Apple Inc.)
Apple Application Support (64-Bit) (HKLM\...\{28791292-D18D-42FA-AE66-3D3D20AA8618}) (Version: 3.1.1 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{5ED7462B-EF58-4757-B609-53755021EC34}) (Version: 8.1.0.18 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
Cisco EAP-FAST Module (HKLM-x32\...\{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}) (Version: 2.2.14 - Cisco Systems, Inc.)
Cisco LEAP Module (HKLM-x32\...\{AF312B06-5C5C-468E-89B3-BE6DE2645722}) (Version: 1.0.19 - Cisco Systems, Inc.)
Cisco PEAP Module (HKLM-x32\...\{0A4EF0E6-A912-4CDE-A7F3-6E56E7C13A2F}) (Version: 1.1.6 - Cisco Systems, Inc.)
CyberLink Power2Go 8 (HKLM-x32\...\InstallShield_{2A87D48D-3FDF-41fd-97CD-A1E370EFFFE2}) (Version: 8.0.3.3207 - CyberLink Corp.)
CyberLink PowerDVD 12 (HKLM-x32\...\InstallShield_{B46BEA36-0B71-4A4E-AE41-87241643FA0A}) (Version: 12.0.3.3920 - CyberLink Corp.)
CyberLink YouCam (HKLM-x32\...\InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}) (Version: 4.2.1.4513 - CyberLink Corp.)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Energy Star (HKLM-x32\...\{FC0ADA4D-8FA5-4452-8AFF-F0A0BAC97EF7}) (Version: 1.0.9 - Hewlett-Packard Company)
FileZilla Client 3.10.0.2 (HKLM-x32\...\FileZilla Client) (Version: 3.10.0.2 - Tim Kosse)
Fotogalerie (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Foxit PhantomPDF (HKLM-x32\...\{5F3E0897-97AA-4FC2-A0A9-130A39D0FDFB}) (Version: 6.0.16.324 - Foxit Corporation)
Hewlett-Packard ACLM.NET v1.2.2.3 (x32 Version: 1.00.0000 - Hewlett-Packard Company) Hidden
HP 3D DriveGuard (HKLM-x32\...\{13133E99-B0D5-4143-B832-AAD55C62A41C}) (Version: 6.0.19.1 - Hewlett-Packard Company)
HP Client Security Manager (HKLM\...\HPProtectTools) (Version: 8.3.7.1864 - Hewlett-Packard Company)
HP Connection Manager (HKLM-x32\...\{C0ED9561-8312-457C-BB1B-BDC7EE034CED}) (Version: 4.7.4.1 - Hewlett-Packard Company)
HP Device Access Manager (HKLM\...\{DBE16A07-DDFF-4453-807A-212EF93916E0}) (Version: 8.3.2.0 - Hewlett-Packard Company)
HP Documentation (HKLM-x32\...\{53AE55F3-8E99-4776-A347-06222894ECD3}) (Version: 1.1.0.0 - Hewlett-Packard)
HP Drive Encryption (HKLM\...\HPDriveEncryption) (Version: 8.6.7.27 - Hewlett-Packard Company)
HP ESU for Microsoft Windows 7 (HKLM-x32\...\{240B2BF7-E7E6-425C-A2A4-A3149189BF7F}) (Version: 2.3.1 - Hewlett-Packard Company)
HP File Sanitizer (HKLM-x32\...\{6349342F-9CEF-4A70-995A-2CF3704C2603}) (Version: 8.4.20.1 - Hewlett-Packard Company)
HP FWUpdateEDO2 (HKLM-x32\...\{415FA9AD-DA10-4ABE-97B6-5051D4795C90}) (Version: 1.2.0.0 - Hewlett-Packard)
HP HD Webcam Driver (HKLM-x32\...\Sunplus SPUVCb) (Version: 3.4.8.48 - SunplusIT)
HP Hotkey Support (HKLM-x32\...\{88D3964A-59BE-412B-B61F-6EF5FBB33707}) (Version: 6.0.12.1 - Hewlett-Packard Company)
HP Officejet 6600 - Grundlegende Software für das Gerät (HKLM\...\{F58934BD-F483-43EB-B307-CFFD88B18455}) (Version: 28.0.1315.0 - Hewlett-Packard Co.)
HP PageLift (HKLM-x32\...\{59202086-BEA1-411A-8AA4-A5DCD28FF537}) (Version: 1.0.13.1 - Hewlett-Packard Company)
HP Setup (HKLM-x32\...\{438363A8-F486-4C37-834C-4955773CB3D3}) (Version: 9.1.15453.4066 - Hewlett-Packard Company)
HP SoftPaq Download Manager (HKLM-x32\...\{34FF930E-DBF9-4858-BAB5-BAC957BF616E}) (Version: 3.5.1.0 - Hewlett-Packard Company)
HP Software Setup (HKLM-x32\...\{F6D61EC9-347B-4019-9F8E-E24169F7C330}) (Version: 8.7.5 - Hewlett-Packard Company)
HP Support Assistant (HKLM-x32\...\{8C696B4B-6AB1-44BC-9416-96EAC474CABE}) (Version: 7.5.2.12 - Hewlett-Packard Company)
HP Support Information (HKLM-x32\...\{B2B7B1C8-7C8B-476C-BE2C-049731C55992}) (Version: 13.00.0000 - Hewlett-Packard)
HP System Default Settings (HKLM-x32\...\{B5BEF5F8-BD76-4174-A47D-05A06EA62615}) (Version: 2.7.1 - Hewlett-Packard Company)
HP Theft Recovery (HKLM-x32\...\InstallShield_{B1E569B6-A5EB-4C97-9F93-9ED2AA99AF0E}) (Version: 8.3.0.7 - Hewlett-Packard Company)
HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)
HPDiagnosticAlert (x32 Version: 1.00.0001 - Microsoft) Hidden
InfoBibliothek 2 (HKLM-x32\...\{78D7D7CD-A06B-4514-ACBD-8055BF945A8E}) (Version: 1.08.03.00 - Akademische Arbeitsgemeinschaft Verlag Wolters Kluwer GmbH)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.5.23.1766 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3496 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.8.6.1000 - Intel Corporation)
Intel(R) Smart Connect Technology (HKLM\...\{978B5476-EAF9-4EB0-AD34-92689249A016}) (Version: 4.2.41.2499 - Intel Corporation)
Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 2.5.4.40 - Intel Corporation)
iTunes (HKLM\...\{7B8D4E8A-EA2B-4A71-BFEB-A4AAAB87C5D0}) (Version: 12.1.0.71 - Apple Inc.)
Junk Mail filter update (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.2 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft Office Professional Plus 2013 - de-de (HKLM\...\ProPlusRetail - de-de) (Version: 15.0.4675.1003 - Microsoft Corporation)
Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.6.305.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.51106 (HKLM-x32\...\{6e8f74e0-43bd-4dce-8477-6ff6828acc07}) (Version: 11.0.51106.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.51106 (HKLM-x32\...\{8e70e4e1-06d7-470b-9f74-a51bef21088e}) (Version: 11.0.51106.1 - Microsoft Corporation)
Movie Maker (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Mozilla Firefox 35.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 35.0.1 (x86 de)) (Version: 35.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 35.0 - Mozilla)
OEM Application Profile (HKLM-x32\...\{FA2905FA-6EB6-F61A-D565-30634F5F673E}) (Version: 1.00.0000 - Advanced Micro Devices, Inc.)
Office 15 Click-to-Run Extensibility Component (x32 Version: 15.0.4675.1003 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Licensing Component (Version: 15.0.4675.1003 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Localization Component (x32 Version: 15.0.4675.1003 - Microsoft Corporation) Hidden
opensource (x32 Version: 1.0.14960.3876 - Your Company Name) Hidden
Opera Stable 27.0.1689.66 (HKLM-x32\...\Opera 27.0.1689.66) (Version: 27.0.1689.66 - Opera Software ASA)
PDF Settings (x32 Version: 1.0 - Adobe Systems Incorporated) Hidden
Picasa 3 (HKLM-x32\...\Picasa 3) (Version: 3.9 - Google, Inc.)
PX Profile Update (x32 Version: 1.00.1. - AMD) Hidden
REALTEK Bluetooth Driver (HKLM-x32\...\{9D3D8C60-A5EF-4123-B2B9-172095903AB}) (Version: 1.0.0.26 - REALTEK Semiconductor Corp.)
Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 6.3.273.43 - Realtek Semiconductor Corp.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.83.328.2014 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7225 - Realtek Semiconductor Corp.)
REALTEK Wireless LAN Driver (HKLM-x32\...\{A5107464-AA9B-4177-8129-5FF2F42DD322}) (Version: 1.0.0.41 - REALTEK Semiconductor Corp.)
Skype Click to Call (HKLM-x32\...\{6D1221A9-17BF-4EC0-81F2-27D30EC30701}) (Version: 7.3.16540.9015 - Microsoft Corporation)
Skype™ 7.0 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.0.102 - Skype Technologies S.A.)
Softwarenetz Rechnung5 (HKLM-x32\...\Rechnung5) (Version:  - Softwarenetz)
Steganos Password Manager Free (HKLM-x32\...\{6C9FCAE4-E4D5-4465-AAD5-8E1245485E63}) (Version: 11.1 - Steganos GmbH)
SteuerSparErklärung 2015 (HKLM-x32\...\{312C0E08-8F94-4536-AAF6-3413F784AC5F}) (Version: 20.25.123 - Akademische Arbeitsgemeinschaft)
SuperMailer 8.20 (HKLM\...\Newsletter Software SuperMailer (x64)_is1) (Version: 8.20 - Mirko Boeer Softwareentwicklungen)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 18.1.37.3 - Synaptics Incorporated)
UseNeXT by Tangysoft (HKLM-x32\...\UseNeXT by Tangysoft_is1) (Version:  - Tangysoft Ltd.)
Validity Fingerprint Sensor Driver (HKLM\...\{ADAA7361-54B8-4FC8-804E-94EC6C11ED68}) (Version: 4.5.133.0 - Validity Sensors, Inc.)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.1.5 - VideoLAN)
WD Drive Utilities (HKLM-x32\...\{59E0381C-1047-45A3-B68A-57F586EAF3C2}) (Version: 1.1.0.51 - Western Digital Technologies, Inc.)
WD Quick View (HKLM-x32\...\{C58994CF-D15D-41E3-A03B-587B39EAA903}) (Version: 2.4.6.3 - Western Digital Technologies, Inc.)
WD Security (HKLM-x32\...\{DEE2025E-D6C0-47E2-8657-AA57857FEEDA}) (Version: 1.1.1.3 - Western Digital Technologies, Inc.)
WD SmartWare (HKLM\...\{142D42E3-07A9-4AAC-BD3B-636392891706}) (Version: 2.4.6.3 - Western Digital Technologies, Inc.)
WD SmartWare Installer (HKLM-x32\...\{1891b882-48f7-442d-98d0-c1ce533f25bd}) (Version: 2.4.6.3 - Western Digital Technologies, Inc.)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

CustomCLSID: HKU\S-1-5-21-3292273767-2171407329-2624488104-1001_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 -> C:\windows\system32\igfxEM.exe (Intel Corporation)

==================== Restore Points  =========================

30-01-2015 07:57:48 Geplanter Prüfpunkt
01-02-2015 14:20:47 Installed HP Update.
01-02-2015 14:23:13 Windows Update

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {2B1B5025-A701-490E-B968-9C132F51F0FA} - System32\Tasks\Opera scheduled Autoupdate 1421514790 => C:\Program Files (x86)\Opera\launcher.exe [2015-02-02] (Opera Software)
Task: {7BA09264-8A5F-4218-8034-B2671EABE03F} - System32\Tasks\HP Officejet 6600.exe_{F24B9D44-93E3-4130-BAC4-774FFE8E795B} => C:\Program Files\HP\HP Officejet 6600\Bin\HP Officejet 6600.exe [2012-10-17] (Hewlett-Packard Co.)
Task: {8185D8C8-08D7-4A2A-98BA-6871C0C1E522} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2014-01-13] (Hewlett-Packard Company)
Task: {87E77D42-D9EB-4BB3-B328-B840BB96938D} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {88AB64F5-637F-444E-82A4-63B62859839E} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2014-11-04] (Microsoft Corporation)
Task: {9B79D1B2-AD17-416A-87C8-993AF67D1101} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc
Task: {B72F8259-34F8-4C58-A98D-D674955D06FE} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Update Check => C:\ProgramData\Hewlett-Packard\HP Support Framework\Resources\Updater7\HPSFUpdater.exe [2014-05-12] (Hewlett-Packard Company)
Task: {D5AA7D1F-D174-4D98-8778-19131FF363A5} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office 15\root\Office15\msoia.exe [2015-01-18] (Microsoft Corporation)
Task: {E1D983E9-D41D-4D1A-AC4D-CBC8B4F7F279} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office 15\root\Office15\msoia.exe [2015-01-18] (Microsoft Corporation)
Task: {F3C757C8-9C9A-4E4D-8DE8-F8B7885E7A74} - System32\Tasks\HPCeeScheduleForHP ProBook 470 G2 => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2011-07-15] (Hewlett-Packard)
Task: {F8B9A466-02D1-48A0-97B1-FA820F9F8A88} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2014-01-13] (Hewlett-Packard Company)
Task: C:\windows\Tasks\HPCeeScheduleForHP ProBook 470 G2.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe

==================== Loaded Modules (whitelisted) =============

2014-05-28 09:14 - 2014-05-28 09:14 - 00336056 _____ () C:\Program Files\Hewlett-Packard\Pre-Boot Security for HP ProtectTools\BIOSDomainPlugin.dll
2014-12-08 11:10 - 2014-12-08 11:10 - 00102176 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext_64.dll
2008-10-24 16:35 - 2008-10-24 16:35 - 00128296 _____ () C:\Program Files (x86)\Akademische Arbeitsgemeinschaft\AAVUpdateManager\aavus.exe
2015-01-20 22:35 - 2015-01-20 22:35 - 00085832 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2015-01-20 22:35 - 2015-01-20 22:35 - 01346344 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2014-09-09 20:37 - 2014-10-11 10:24 - 00098816 _____ () C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTDevMgr.exe
2015-01-18 09:01 - 2014-05-20 08:19 - 00105640 _____ () C:\Program Files\Microsoft Office 15\ClientX64\ApiClient.dll
2014-03-31 21:28 - 2014-03-31 21:28 - 00007168 _____ () C:\Program Files (x86)\Hewlett-Packard\HP Theft Recovery\CtService.exe
2013-09-07 01:06 - 2013-09-07 01:06 - 00198120 _____ () c:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe
2013-09-07 01:06 - 2013-09-07 01:06 - 00054760 _____ () c:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\NetworkHeuristic.dll
2013-09-07 01:05 - 2013-09-07 01:05 - 00034792 _____ () c:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\ISCTNetMon.dll
2014-09-09 20:43 - 2013-08-05 08:49 - 00627672 _____ () C:\Program Files (x86)\CyberLink\Power2Go8\CLMediaLibrary.dll
2013-08-05 23:48 - 2013-08-05 23:48 - 00016856 _____ () c:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvcPS.dll
2014-09-09 20:36 - 2013-12-10 02:27 - 01242584 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll
2014-03-19 16:00 - 2014-03-19 16:00 - 00514570 _____ () c:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\sqlite3.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)


==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (whitelisted) =============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== MSCONFIG/TASK MANAGER disabled items =========

(Currently there is no automatic fix for this section.)


========================= Accounts: ==========================

Administrator (S-1-5-21-3292273767-2171407329-2624488104-500 - Administrator - Disabled)
Gast (S-1-5-21-3292273767-2171407329-2624488104-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-3292273767-2171407329-2624488104-1003 - Limited - Enabled)
HP ProBook 470 G2 (S-1-5-21-3292273767-2171407329-2624488104-1001 - Administrator - Enabled) => C:\Users\HP ProBook 470 G2

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (02/04/2015 09:54:12 AM) (Source: ATIeRecord) (EventID: 16386) (User: )
Description: ATI EEU Client has failed to start

Error: (02/04/2015 08:08:39 AM) (Source: ATIeRecord) (EventID: 16386) (User: )
Description: ATI EEU Client has failed to start

Error: (02/04/2015 08:05:45 AM) (Source: ATIeRecord) (EventID: 16386) (User: )
Description: ATI EEU Client has failed to start

Error: (02/04/2015 07:38:34 AM) (Source: SideBySide) (EventID: 35) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "UccApi,processorArchitecture="AMD64",type="win32",version="15.0.0.0"1". Fehler in Manifest- oder Richtliniendatei "UccApi,processorArchitecture="AMD64",type="win32",version="15.0.0.0"2" in Zeile  UccApi,processorArchitecture="AMD64",type="win32",version="15.0.0.0"3.
Die im Manifest gefundene Komponenten-ID stimmt nicht mit der ID der angeforderten Komponente überein.
Verweis: UccApi,processorArchitecture="AMD64",type="win32",version="15.0.0.0".
Definition: UccApi,processorArchitecture="x86",type="win32",version="15.0.0.0".
Verwenden Sie das Programm "sxstrace.exe" für eine detaillierte Diagnose.

Error: (02/04/2015 07:09:26 AM) (Source: ATIeRecord) (EventID: 16386) (User: )
Description: ATI EEU Client has failed to start

Error: (02/03/2015 05:38:45 PM) (Source: ATIeRecord) (EventID: 16386) (User: )
Description: ATI EEU Client has failed to start

Error: (02/03/2015 10:34:18 AM) (Source: ATIeRecord) (EventID: 16386) (User: )
Description: ATI EEU Client has failed to start

Error: (02/03/2015 08:57:51 AM) (Source: SideBySide) (EventID: 35) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "UccApi,processorArchitecture="AMD64",type="win32",version="15.0.0.0"1". Fehler in Manifest- oder Richtliniendatei "UccApi,processorArchitecture="AMD64",type="win32",version="15.0.0.0"2" in Zeile  UccApi,processorArchitecture="AMD64",type="win32",version="15.0.0.0"3.
Die im Manifest gefundene Komponenten-ID stimmt nicht mit der ID der angeforderten Komponente überein.
Verweis: UccApi,processorArchitecture="AMD64",type="win32",version="15.0.0.0".
Definition: UccApi,processorArchitecture="x86",type="win32",version="15.0.0.0".
Verwenden Sie das Programm "sxstrace.exe" für eine detaillierte Diagnose.

Error: (02/03/2015 08:26:16 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: HPFSService.exe, Version: 8.4.20.1, Zeitstempel: 0x52f279a7
Name des fehlerhaften Moduls: HPFSService.exe, Version: 8.4.20.1, Zeitstempel: 0x52f279a7
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0012ece4
ID des fehlerhaften Prozesses: 0xba8
Startzeit der fehlerhaften Anwendung: 0xHPFSService.exe0
Pfad der fehlerhaften Anwendung: HPFSService.exe1
Pfad des fehlerhaften Moduls: HPFSService.exe2
Berichtskennung: HPFSService.exe3

Error: (02/03/2015 08:25:46 AM) (Source: ATIeRecord) (EventID: 16386) (User: )
Description: ATI EEU Client has failed to start


System errors:
=============
Error: (02/04/2015 08:10:29 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1068

Error: (02/04/2015 08:10:29 AM) (Source: DCOM) (EventID: 10005) (User: )
Description: 1068netprofm{A47979D2-C419-11D9-A5B4-001185AD2B89}

Error: (02/04/2015 08:10:20 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1068

Error: (02/04/2015 08:10:20 AM) (Source: DCOM) (EventID: 10005) (User: )
Description: 1068netprofm{A47979D2-C419-11D9-A5B4-001185AD2B89}

Error: (02/04/2015 08:10:09 AM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: 
AFD
CLVirtualDrive
CSC
DfsC
discache
MpFilter
NetBIOS
NetBT
nsiproxy
Psched
rdbss
spldr
tdx
vwififlt
Wanarpv6
WfpLwf

Error: (02/04/2015 08:10:09 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "NLA (Network Location Awareness)" ist vom Dienst "Netzwerkspeicher-Schnittstellendienst" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1068

Error: (02/04/2015 08:10:09 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Microsoft Network Inspection System" ist vom Dienst "Microsoft Malware Protection Driver" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%31

Error: (02/04/2015 08:10:09 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "SMB 2.0-Miniredirector" ist vom Dienst "SMB-Miniredirector-Wrapper und -Modul" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1068

Error: (02/04/2015 08:10:09 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "SMB 1.x-Miniredirector" ist vom Dienst "SMB-Miniredirector-Wrapper und -Modul" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1068

Error: (02/04/2015 08:10:09 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "SMB-Miniredirector-Wrapper und -Modul" ist vom Dienst "Umgeleitetes Puffersubsystem" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%31


Microsoft Office Sessions:
=========================
Error: (02/04/2015 09:54:12 AM) (Source: ATIeRecord) (EventID: 16386) (User: )
Description: 

Error: (02/04/2015 08:08:39 AM) (Source: ATIeRecord) (EventID: 16386) (User: )
Description: 

Error: (02/04/2015 08:05:45 AM) (Source: ATIeRecord) (EventID: 16386) (User: )
Description: 

Error: (02/04/2015 07:38:34 AM) (Source: SideBySide) (EventID: 35) (User: )
Description: UccApi,processorArchitecture="AMD64",type="win32",version="15.0.0.0"UccApi,processorArchitecture="x86",type="win32",version="15.0.0.0"C:\Program Files\Microsoft Office 15\root\office15\lync.exe.ManifestC:\Program Files\Microsoft Office 15\root\office15\UccApi.DLL1

Error: (02/04/2015 07:09:26 AM) (Source: ATIeRecord) (EventID: 16386) (User: )
Description: 

Error: (02/03/2015 05:38:45 PM) (Source: ATIeRecord) (EventID: 16386) (User: )
Description: 

Error: (02/03/2015 10:34:18 AM) (Source: ATIeRecord) (EventID: 16386) (User: )
Description: 

Error: (02/03/2015 08:57:51 AM) (Source: SideBySide) (EventID: 35) (User: )
Description: UccApi,processorArchitecture="AMD64",type="win32",version="15.0.0.0"UccApi,processorArchitecture="x86",type="win32",version="15.0.0.0"c:\program files\microsoft office 15\root\office15\lync.exe.Manifestc:\program files\microsoft office 15\root\office15\UccApi.DLL1

Error: (02/03/2015 08:26:16 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: HPFSService.exe8.4.20.152f279a7HPFSService.exe8.4.20.152f279a7c00000050012ece4ba801d03f82a8ea857aC:\Program Files (x86)\Hewlett-Packard\File Sanitizer\HPFSService.exeC:\Program Files (x86)\Hewlett-Packard\File Sanitizer\HPFSService.exef0476a37-ab75-11e4-a79b-38b1dbc5c8e7

Error: (02/03/2015 08:25:46 AM) (Source: ATIeRecord) (EventID: 16386) (User: )
Description: 


==================== Memory info =========================== 

Processor: Intel(R) Core(TM) i7-4510U CPU @ 2.00GHz
Percentage of memory in use: 25%
Total physical RAM: 8064.11 MB
Available physical RAM: 6017.08 MB
Total Pagefile: 16126.4 MB
Available Pagefile: 13761.5 MB
Total Virtual: 8192 MB
Available Virtual: 8191.83 MB

==================== Drives ================================

Drive c: (Windows) (Fixed) (Total:682.42 GB) (Free:611.44 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive d: (HP_RECOVERY) (Fixed) (Total:13.21 GB) (Free:1.46 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive e: (HP_TOOLS) (Fixed) (Total:1.99 GB) (Free:1.61 GB) FAT32
Drive g: () (Removable) (Total:7.51 GB) (Free:6.02 GB) FAT32

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 698.6 GB) (Disk ID: 75916FA3)
Partition 1: (Active) - (Size=1 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=682.4 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=13.2 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=2 GB) - (Type=0B)

========================================================
Disk: 1 (Size: 7.5 GB) (Disk ID: 2C6B7369)
No partition Table on disk 1.

==================== End Of Log ============================
         

Und die neue FST.txt

FRST Logfile:

FRST Logfile:

	
	
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 01-02-2015
Ran by HP ProBook 470 G2 (administrator) on HPPROBOOK on 04-02-2015 09:55:54
Running from G:\
Loaded Profiles: HP ProBook 470 G2 (Available profiles: HP ProBook 470 G2)
Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(DigitalPersona, Inc.) C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpHostW.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Hewlett-Packard Company) C:\Windows\System32\hpservice.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Validity Sensors, Inc.) C:\Windows\System32\vcsFPService.exe
(DigitalPersona, Inc.) C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpCardEngine.exe
(DigitalPersona, Inc.) C:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DPAgent.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
() C:\Program Files (x86)\Akademische Arbeitsgemeinschaft\AAVUpdateManager\aavus.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Realtek Semiconductor Corporation) C:\Program Files (x86)\Realtek\REALTEK Bluetooth\AvrcpService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
() C:\Program Files (x86)\Realtek\REALTEK Bluetooth\BTDevMgr.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe
() C:\Program Files (x86)\Hewlett-Packard\HP Theft Recovery\CtService.exe
(Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\File Sanitizer\HPFSService.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
() C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe
(Realtek Semiconductor Corporation) C:\Program Files (x86)\Realtek\REALTEK Bluetooth\RtkBleServ.exe
(Skype Technologies) C:\Program Files (x86)\Skype\Updater\Updater.exe
(Western Digital Technologies, Inc.) C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Hewlett-Packard Development Company) C:\Program Files (x86)\Hewlett-Packard\HP Device Access Manager\HP.ProtectTools.DeviceAccessManager.ServiceHost.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(DigitalPersona, Inc.) C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpAgent.exe
(Western Digital Technologies, Inc.) C:\Program Files (x86)\Western Digital\WD SmartWare\WDBackupEngine.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
(Intel Corporation) C:\Windows\System32\igfxTray.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Realtek Semiconductor Corporation) C:\Program Files (x86)\Realtek\REALTEK Bluetooth\BTServer.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(Hewlett-Packard Co.) C:\Program Files\HP\HP Officejet 6600\Bin\ScanToPCActivationApp.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\QLBController.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\HPCMDelayStart.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(Advanced Micro Devices, Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP 3D DriveGuard\AccelerometerSt.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTsysTray8.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\File Sanitizer\CORESHREDDER.exe
(Western Digital Technologies, Inc.) C:\Program Files (x86)\Western Digital\WD Utilities\WDDriveUtilitiesHelper.exe
(Western Digital Technologies, Inc.) C:\Program Files (x86)\Western Digital\WD Security\WDDriveAutoUnlock.exe
(Western Digital Technologies, Inc.) C:\Program Files (x86)\Western Digital\WD Quick View\WDDMStatus.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [287592 2013-09-27] (Intel Corporation)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7574896 2014-04-16] (Realtek Semiconductor)
HKLM\...\Run: [BtServer] => C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTServer.exe [226008 2014-07-03] (Realtek Semiconductor Corporation)
HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [1331288 2014-08-22] (Microsoft Corporation)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2863344 2015-01-19] (Synaptics Incorporated)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [169768 2015-01-27] (Apple Inc.)
HKLM-x32\...\Run: [QLBController] => C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\QLBController.exe [419512 2014-04-01] (Hewlett-Packard Company)
HKLM-x32\...\Run: [HPConnectionManager] => c:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\HPCMDelayStart.exe [185144 2014-04-09] (Hewlett-Packard Development Company, L.P.)
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [292848 2014-04-10] (Intel Corporation)
HKLM-x32\...\Run: [StartCCC] => c:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [767200 2014-04-07] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [AccelerometerSysTrayApplet] => C:\Program Files (x86)\Hewlett-Packard\HP 3D DriveGuard\AccelerometerST.exe [126240 2014-04-01] (Hewlett-Packard Company)
HKLM-x32\...\Run: [HP Camera Driver_Monitor] => "C:\Program Files (x86)\HP Camera Driver\monitor.exe"
HKLM-x32\...\Run: [YouCam Mirage] => "c:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe"
HKLM-x32\...\Run: [YouCam Tray] => c:\Program Files (x86)\CyberLink\YouCam\YouCamTray.exe [167488 2013-09-16] (CyberLink Corp.)
HKLM-x32\...\Run: [CLMLServer_For_P2G8] => c:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe [111576 2013-08-05] (CyberLink)
HKLM-x32\...\Run: [CLVirtualDrive] => c:\Program Files (x86)\CyberLink\Power2Go8\VirtualDrive.exe [490760 2013-08-07] (CyberLink Corp.)
HKLM-x32\...\Run: [HP File Sanitizer] => C:\Program Files (x86)\Hewlett-Packard\File Sanitizer\Coreshredder.exe [2213592 2014-02-05] (Hewlett-Packard)
HKLM-x32\...\Run: [DriveUtilitiesHelper] => C:\Program Files (x86)\Western Digital\WD Utilities\WDDriveUtilitiesHelper.exe [1852264 2014-05-23] (Western Digital Technologies, Inc.)
HKLM-x32\...\Run: [WD Drive Unlocker] => C:\Program Files (x86)\Western Digital\WD Security\WDDriveAutoUnlock.exe [1694048 2014-10-23] (Western Digital Technologies, Inc.)
HKLM-x32\...\Run: [WD Quick View] => C:\Program Files (x86)\Western Digital\WD Quick View\WDDMStatus.exe [5562736 2014-12-02] (Western Digital Technologies, Inc.)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard)
HKLM-x32\...\Run: [] => [X]
HKLM\...\RunOnce: [NCPluginUpdater] => C:\Program Files (x86)\Hewlett-Packard\HP Health Check\ActiveCheck\product_line\NCPluginUpdater.exe [21720 2015-01-28] (Hewlett-Packard)
HKLM\...\Winlogon: [Userinit] C:\Windows\system32\userinit.exe,C:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DPAgent.exe,
HKU\S-1-5-21-3292273767-2171407329-2624488104-1001\...\Run: [HP Officejet 6600 (NET)] => C:\Program Files\HP\HP Officejet 6600\Bin\ScanToPCActivationApp.exe [2573416 2012-10-17] (Hewlett-Packard Co.)
Lsa: [Notification Packages] DPPassFilter scecli
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\ISCTSystray.lnk
ShortcutTarget: ISCTSystray.lnk -> C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTsysTray8.exe (Intel Corporation)
Startup: C:\Users\HP ProBook 470 G2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\An OneNote senden.lnk
ShortcutTarget: An OneNote senden.lnk -> C:\Program Files\Microsoft Office 15\root\office15\ONENOTEM.EXE (Microsoft Corporation)
Startup: C:\Users\HP ProBook 470 G2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\AutoStarter.lnk
ShortcutTarget: AutoStarter.lnk -> C:\Users\HP ProBook 470 G2\AppData\Roaming\autostarter.exe (No File)
Startup: C:\Users\HP ProBook 470 G2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ja.lnk
ShortcutTarget: ja.lnk -> C:\Users\HP ProBook 470 G2\AppData\Roaming\loadit.exe (No File)
ShellIconOverlayIdentifiers-x32: [ SkyDrivePro1 (ErrorConflict)] -> {8BA85C75-763B-4103-94EB-9470F12FE0F7} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ SkyDrivePro2 (SyncInProgress)] -> {CD55129A-B1A1-438E-A425-CEBC7DC684EE} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ SkyDrivePro3 (InSync)] -> {E768CD3B-BDDC-436D-9C13-E1B39CA257B1} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL (Microsoft Corporation)
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://g.uk.msn.com/HPCOM14/10
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://g.uk.msn.com/HPCOM14/10
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.uk.msn.com/HPCOM14/10
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.uk.msn.com/HPCOM14/10
HKU\S-1-5-21-3292273767-2171407329-2624488104-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://g.uk.msn.com/HPCOM14/10
HKU\S-1-5-21-3292273767-2171407329-2624488104-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.uk.msn.com/HPCOM14/10
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll (Hewlett-Packard)
BHO-x32: HP File Sanitizer -> {3134413B-49B4-425C-98A5-893C1F195601} -> C:\Program Files (x86)\Hewlett-Packard\File Sanitizer\IEBHO.dll (Hewlett-Packard)
BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\Office15\OCHelper.dll (Microsoft Corporation)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office 15\root\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll (Hewlett-Packard)
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL (Microsoft Corporation)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)

FireFox:
========
FF ProfilePath: C:\Users\HP ProBook 470 G2\AppData\Roaming\Mozilla\Firefox\Profiles\a6bnzvty.default
FF DefaultSearchEngine: DuckDuckGo
FF Homepage: https://duckduckgo.com/
FF Plugin: @adobe.com/FlashPlayer -> C:\windows\system32\Macromed\Flash\NPSWF64_16_0_0_296.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_296.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/pdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll ()
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.fdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll ()
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: digitalpersona.com/ChromeDPAgent -> C:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\BrowserExt\components\npChromeDPAgent.dll (DigitalPersona, Inc.)
FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2015-01-29]
FF HKLM-x32\...\Firefox\Extensions: [dpmaxz_ng@jetpack] - C:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\BrowserExt\dpchrome
FF Extension: HP Client Security Manager - C:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\BrowserExt\dpchrome [2015-01-19]

Chrome: 
=======
CHR HKLM-x32\...\Chrome\Extension: [ncffjdbbodifgldkcbhmiiljfcnbgjab] - C:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\BrowserExt\dpchrome.crx [2014-06-26]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AAV UpdateService; C:\Program Files (x86)\Akademische Arbeitsgemeinschaft\AAVUpdateManager\aavus.exe [128296 2008-10-24] ()
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [77128 2015-01-19] (Apple Inc.)
R2 AvrcpService; C:\Program Files (x86)\REALTEK\Realtek Bluetooth\AvrcpService.exe [43224 2014-07-03] (Realtek Semiconductor Corporation)
R2 BTDevManager; C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTDevMgr.exe [98816 2014-10-11] () [File not signed]
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390176 2014-07-14] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1767520 2014-07-14] (Microsoft Corporation)
R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2449592 2014-11-12] (Microsoft Corporation)
R2 CtAgentService; C:\Program Files (x86)\Hewlett-Packard\HP Theft Recovery\CtService.exe [7168 2014-03-31] () [File not signed]
R2 DpHost; C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpHostW.exe [500048 2014-07-28] (DigitalPersona, Inc.)
S3 FLCDLOCK; c:\windows\SysWOW64\flcdlock.exe [567608 2013-11-20] (Hewlett-Packard Company)
S3 FLEXnet Licensing Service; C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [654848 2015-01-18] (Macrovision Europe Ltd.) [File not signed]
S2 HP Support Assistant Service; C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe [92160 2014-01-13] (Hewlett-Packard Company) [File not signed]
R2 HpDamServiceHost; c:\Program Files (x86)\Hewlett-Packard\HP Device Access Manager\HP.ProtectTools.DeviceAccessManager.ServiceHost.exe [18232 2013-11-15] (Hewlett-Packard Development Company)
S2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15720 2013-09-27] (Intel Corporation)
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [282072 2014-03-11] (Intel Corporation)
R2 Intel(R) Capability Licensing Service Interface; c:\Program Files\Intel\iCLS Client\HeciServer.exe [747520 2013-08-27] (Intel(R) Corporation) [File not signed]
S3 Intel(R) Capability Licensing Service TCP IP Interface; c:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [828376 2013-08-27] (Intel(R) Corporation)
S2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [131544 2013-12-10] (Intel Corporation)
R2 ISCTAgent; c:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe [198120 2013-09-07] ()
S2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-12-10] (Intel Corporation)
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [23784 2014-08-22] (Microsoft Corporation)
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [368624 2014-08-22] (Microsoft Corporation)
R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [290520 2014-01-08] (Realtek Semiconductor)
R2 RtkBleServ; C:\Program Files (x86)\REALTEK\Realtek Bluetooth\RtkBleServ.exe [50392 2014-07-03] (Realtek Semiconductor Corporation)
R2 WDBackup; C:\Program Files (x86)\Western Digital\WD SmartWare\WDBackupEngine.exe [1042808 2014-12-02] (Western Digital Technologies, Inc.)
R2 WDDriveService; C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe [296312 2014-05-23] (Western Digital Technologies, Inc.)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-12-04] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R0 amdkmpfd; C:\Windows\System32\drivers\amdkmpfd.sys [36608 2013-12-13] (Advanced Micro Devices, Inc.)
R1 CLVirtualDrive; C:\Windows\System32\DRIVERS\CLVirtualDrive.sys [90608 2011-12-27] (CyberLink)
S3 DAMDrv; C:\Windows\System32\DRIVERS\DAMDrv64.sys [65752 2013-10-07] (Hewlett-Packard Company)
R0 iaStorF; C:\Windows\System32\drivers\iaStorF.sys [28008 2013-09-27] (Intel Corporation)
R3 ikbevent; C:\Windows\System32\DRIVERS\ikbevent.sys [21408 2013-08-09] ()
R3 imsevent; C:\Windows\System32\DRIVERS\imsevent.sys [21920 2013-08-09] ()
R3 INETMON; C:\windows\System32\Drivers\INETMON.sys [29088 2013-08-08] ()
R3 ISCT; C:\Windows\system32\drivers\ISCTD64.sys [46568 2013-08-08] ()
R3 MEIx64; C:\Windows\system32\drivers\TeeDriverx64.sys [100312 2013-12-10] (Intel Corporation)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [269008 2014-07-17] (Microsoft Corporation)
R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [125584 2014-07-17] (Microsoft Corporation)
R0 PinFile; C:\Windows\System32\DRIVERS\PinFile.sys [49856 2014-02-03] (WinMagic Inc.)
S3 RtkAvrcp; C:\Windows\system32\drivers\RtkAvrcp.sys [61152 2012-12-28] (Realtek Semiconductor Corporation)
S3 RtkBtFilter; C:\Windows\System32\DRIVERS\RtkBtfilter.sys [585944 2014-12-31] (Realtek Semiconductor Corporation)
S3 RTSPER; C:\Windows\System32\DRIVERS\RtsPer.sys [476888 2014-03-21] (Realsil Semiconductor Corporation)
R3 RTWlanE; C:\Windows\System32\DRIVERS\rtwlane.sys [3603672 2015-01-19] (Realtek Semiconductor Corporation                           )
R0 SDDisk2K; C:\Windows\System32\DRIVERS\SDDisk2K.sys [228544 2014-02-03] (WinMagic Inc.)
R0 SDDToki; C:\Windows\System32\DRIVERS\SDDToki.sys [131264 2014-02-03] (WinMagic Inc.)
S3 SmbDrv; C:\Windows\system32\drivers\Smb_driver_AMDASF.sys [30448 2014-04-08] (Synaptics Incorporated)
S3 SmbDrvI; C:\Windows\system32\drivers\Smb_driver_Intel.sys [31472 2014-04-08] (Synaptics Incorporated)
R3 SPUVCbv; C:\Windows\System32\Drivers\SPUVCbv_x64.sys [674592 2015-01-19] (Sunplus)

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-02-04 17:19 - 2015-02-04 09:56 - 00000000 ____D () C:\FRST
2015-02-04 09:54 - 2015-02-04 09:55 - 00001078 _____ () C:\windows\system32dbgraw.bmp
2015-02-04 07:38 - 2015-02-04 07:38 - 00001760 _____ () C:\Users\Public\Desktop\iTunes.lnk
2015-02-04 07:38 - 2015-02-04 07:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2015-02-04 07:37 - 2015-02-04 07:38 - 00000000 ____D () C:\ProgramData\E1864A66-75E3-486a-BD95-D1B7D99A84A7
2015-02-04 07:37 - 2015-02-04 07:38 - 00000000 ____D () C:\Program Files\iTunes
2015-02-04 07:37 - 2015-02-04 07:37 - 00000000 ____D () C:\Program Files\iPod
2015-02-04 07:37 - 2015-02-04 07:37 - 00000000 ____D () C:\Program Files (x86)\iTunes
2015-02-01 17:26 - 2015-02-01 19:29 - 00000380 _____ () C:\windows\Tasks\HPCeeScheduleForHP ProBook 470 G2.job
2015-02-01 17:26 - 2015-02-01 17:26 - 00003258 _____ () C:\windows\System32\Tasks\HPCeeScheduleForHP ProBook 470 G2
2015-01-30 14:58 - 2015-02-04 09:55 - 00008192 _____ () C:\windows\SysWOW64\WDPABKP.dat
2015-01-30 07:15 - 2015-01-30 07:15 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Local\CrashDumps
2015-01-29 16:42 - 2015-01-29 16:42 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Roaming\SMSout
2015-01-29 11:23 - 2015-01-29 11:23 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2015-01-29 11:08 - 2015-01-30 14:22 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Roaming\SuperMailer
2015-01-29 11:07 - 2015-01-29 12:43 - 00000000 ____D () C:\Program Files\SuperMailer
2015-01-29 11:07 - 2015-01-29 11:07 - 00000804 _____ () C:\Users\HP ProBook 470 G2\Desktop\SuperMailer.lnk
2015-01-29 11:07 - 2015-01-29 11:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SuperMailer
2015-01-26 17:17 - 2015-01-26 17:17 - 00000000 __SHD () C:\Users\HP ProBook 470 G2\AppData\Local\EmieBrowserModeList
2015-01-26 15:54 - 2015-02-04 08:04 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Roaming\UseNeXT
2015-01-26 15:54 - 2015-02-04 07:58 - 00000000 ____D () C:\Users\HP ProBook 470 G2\Documents\UseNeXT
2015-01-26 15:54 - 2015-01-26 15:54 - 00001868 _____ () C:\Users\HP ProBook 470 G2\Desktop\UseNeXT by Tangysoft.lnk
2015-01-26 15:54 - 2015-01-26 15:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\UseNeXT
2015-01-26 15:54 - 2015-01-26 15:54 - 00000000 ____D () C:\Program Files (x86)\UseNeXT
2015-01-26 15:53 - 2015-01-26 15:54 - 05270008 _____ (Tangysoft Ltd. ) C:\Users\HP ProBook 470 G2\Downloads\UseNeXTSetup_5.64.exe
2015-01-26 15:29 - 2015-01-30 09:23 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Roaming\Skype
2015-01-26 15:29 - 2015-01-26 15:29 - 00002699 _____ () C:\Users\Public\Desktop\Skype.lnk
2015-01-26 15:29 - 2015-01-26 15:29 - 00000000 ___RD () C:\Program Files (x86)\Skype
2015-01-26 15:29 - 2015-01-26 15:29 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Local\Skype
2015-01-26 15:29 - 2015-01-26 15:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2015-01-26 15:28 - 2015-01-26 15:28 - 01548384 _____ (Skype Technologies S.A.) C:\Users\HP ProBook 470 G2\Downloads\SkypeSetup.exe
2015-01-25 12:46 - 2015-01-25 12:46 - 00000000 __RHD () C:\MSOCache
2015-01-25 12:29 - 2015-01-25 12:29 - 00000329 _____ () C:\Users\HP ProBook 470 G2\Desktop\HP Druckerdiagnosetools.url
2015-01-24 10:34 - 2015-01-24 10:34 - 04372480 _____ () C:\Users\HP ProBook 470 G2\Downloads\fritz.wlan_repeater_ng_68.04.88.image
2015-01-23 08:41 - 2015-01-23 08:41 - 00000000 ____D () C:\Program Files\Western Digital
2015-01-23 08:41 - 2015-01-23 08:41 - 00000000 ____D () C:\Program Files\Common Files\Western Digital
2015-01-22 16:05 - 2015-01-22 16:05 - 00001665 _____ () C:\Users\HP ProBook 470 G2\Desktop\Mitgliederliste_V2015_V1 - Verknüpfung.lnk
2015-01-22 16:05 - 2015-01-22 16:05 - 00001572 _____ () C:\Users\HP ProBook 470 G2\Desktop\zugang_werder - Verknüpfung.lnk
2015-01-22 16:05 - 2015-01-22 16:05 - 00001569 _____ () C:\Users\HP ProBook 470 G2\Desktop\Zugangsdaten - Verknüpfung.lnk
2015-01-22 16:04 - 2015-01-22 16:04 - 00001606 _____ () C:\Users\HP ProBook 470 G2\Desktop\Anmeldungen_2015 - Verknüpfung.lnk
2015-01-22 12:05 - 2015-01-22 12:05 - 00001179 _____ () C:\Users\Public\Desktop\WD Security.lnk
2015-01-22 12:03 - 2015-01-22 12:03 - 00000000 ____D () C:\windows\System32\Tasks\Western Digital
2015-01-22 12:01 - 2015-01-22 12:01 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Local\Western Digital
2015-01-22 11:57 - 2015-01-22 11:57 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Local\Western_Digital_Technolog
2015-01-22 11:56 - 2015-01-23 08:42 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Western Digital
2015-01-22 11:56 - 2015-01-23 08:41 - 00000000 ____D () C:\Program Files (x86)\Western Digital
2015-01-22 11:56 - 2015-01-22 11:56 - 00001124 _____ () C:\Users\Public\Desktop\WD Drive Utilities.lnk
2015-01-22 11:55 - 2015-01-23 08:41 - 00000000 ____D () C:\ProgramData\Western Digital
2015-01-19 17:17 - 2015-01-19 17:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FileZilla FTP Client
2015-01-19 17:17 - 2015-01-19 17:17 - 00000000 ____D () C:\Program Files (x86)\FileZilla FTP Client
2015-01-19 17:16 - 2015-01-19 17:17 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Roaming\FileZilla
2015-01-19 17:16 - 2015-01-19 17:16 - 06381120 _____ (Tim Kosse) C:\Users\HP ProBook 470 G2\Downloads\FileZilla_3.10.0.2_win32-setup.exe
2015-01-19 17:16 - 2015-01-19 17:16 - 00000000 ____D () C:\Users\HP ProBook 470 G2\Downloads\FileZilla_3.10.0.1_win32
2015-01-19 17:14 - 2015-01-19 17:14 - 09511863 _____ () C:\Users\HP ProBook 470 G2\Downloads\FileZilla_3.10.0.1_win32.zip
2015-01-19 17:13 - 2015-01-19 17:13 - 01179936 _____ () C:\Users\HP ProBook 470 G2\Downloads\FileZilla - CHIP-Installer.exe
2015-01-19 17:07 - 2015-01-19 17:08 - 00000000 ____D () C:\Program Files (x86)\Ipswitch
2015-01-19 17:07 - 2015-01-19 17:07 - 00000000 ____D () C:\windows\SysWOW64\E177E04D548C4006A465EEB92D3DE021
2015-01-19 17:07 - 2005-02-28 12:37 - 00606293 ____N (Stardock.Net, Inc) C:\windows\SysWOW64\wbocx.ocx
2015-01-19 17:07 - 2005-02-28 12:37 - 00050688 ____N (Stardock.Net, Inc) C:\windows\SysWOW64\wbhelp2.dll
2015-01-19 17:07 - 2004-12-06 14:26 - 00348160 ____N (Microsoft Corporation) C:\windows\SysWOW64\msvcr71.dll
2015-01-19 17:07 - 2004-09-17 11:09 - 01060864 ____N (Microsoft Corporation) C:\windows\SysWOW64\MFC71.dll
2015-01-19 17:07 - 2004-02-12 17:16 - 00499712 ____N (Microsoft Corporation) C:\windows\SysWOW64\msvcp71.dll
2015-01-19 17:06 - 2015-01-19 17:08 - 00000023 _____ () C:\windows\setup.log
2015-01-19 17:06 - 2015-01-19 17:06 - 09893377 _____ (InstallShield Software Corporation) C:\Users\HP ProBook 470 G2\Downloads\WSFTP_HomeT40_Install.exe
2015-01-19 16:57 - 2015-02-03 17:08 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Roaming\vlc
2015-01-19 16:55 - 2015-01-29 11:31 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Roaming\Foxit Software
2015-01-19 16:52 - 2015-01-19 16:52 - 00001077 _____ () C:\Users\Public\Desktop\VLC media player.lnk
2015-01-19 16:52 - 2015-01-19 16:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2015-01-19 16:52 - 2015-01-19 16:52 - 00000000 ____D () C:\Program Files (x86)\VideoLAN
2015-01-19 16:51 - 2015-01-19 16:51 - 24743106 _____ () C:\Users\HP ProBook 470 G2\Downloads\vlc-2.1.5-win32.exe
2015-01-19 14:39 - 2015-01-28 13:58 - 00701616 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe
2015-01-19 14:39 - 2015-01-28 13:58 - 00071344 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-01-19 14:39 - 2015-01-19 14:39 - 00000000 ____D () C:\windows\system32\Macromed
2015-01-19 14:39 - 2015-01-19 14:39 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Roaming\Macromedia
2015-01-19 14:39 - 2015-01-19 14:39 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Local\Macromedia
2015-01-19 14:22 - 2015-01-19 14:22 - 00002297 _____ () C:\Users\Public\Desktop\Vereine und Ehrenamt.LNK
2015-01-19 14:22 - 2015-01-19 14:22 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Roaming\AAV
2015-01-19 14:22 - 2015-01-19 14:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\InfoBibliothek 2
2015-01-19 14:11 - 2015-01-21 17:13 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Roaming\Apple Computer
2015-01-19 14:11 - 2015-01-19 14:11 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Local\Apple Computer
2015-01-19 14:11 - 2012-10-03 16:14 - 00033240 _____ (GEAR Software Inc.) C:\windows\system32\Drivers\GEARAspiWDM.sys
2015-01-19 14:09 - 2015-02-04 07:37 - 00000000 ____D () C:\Program Files\Common Files\Apple
2015-01-19 14:09 - 2015-01-19 14:09 - 00002519 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk
2015-01-19 14:09 - 2015-01-19 14:09 - 00000000 ____D () C:\windows\System32\Tasks\Apple
2015-01-19 14:09 - 2015-01-19 14:09 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Local\Apple
2015-01-19 14:09 - 2015-01-19 14:09 - 00000000 ____D () C:\ProgramData\Apple Computer
2015-01-19 14:09 - 2015-01-19 14:09 - 00000000 ____D () C:\Program Files (x86)\Apple Software Update
2015-01-19 14:06 - 2015-01-19 14:08 - 122418480 _____ (Apple Inc.) C:\Users\HP ProBook 470 G2\Downloads\iTunes64Setup.exe
2015-01-19 10:32 - 2015-01-19 10:32 - 00000000 ____D () C:\HPSDM
2015-01-19 10:14 - 2015-01-19 10:13 - 03603672 _____ (Realtek Semiconductor Corporation ) C:\windows\system32\Drivers\rtwlane.sys
2015-01-19 10:05 - 2015-01-19 10:06 - 00001588 _____ () C:\HPCamDrv.log
2015-01-19 10:05 - 2015-01-19 10:06 - 00000382 _____ () C:\camera.log
2015-01-19 10:05 - 2015-01-19 10:05 - 00384672 _____ (SunplusIT) C:\windows\system32\VCamPPage_x64.dll
2015-01-19 10:05 - 2015-01-19 10:05 - 00321184 _____ (SunplusIT) C:\windows\SysWOW64\VCamPPage.dll
2015-01-19 10:03 - 2015-01-19 10:03 - 00001117 _____ () C:\Users\Public\Desktop\Picasa 3.lnk
2015-01-19 10:03 - 2015-01-19 10:03 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Local\Google
2015-01-19 10:03 - 2015-01-19 10:03 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Picasa 3
2015-01-19 10:03 - 2015-01-19 10:03 - 00000000 ____D () C:\Program Files (x86)\Google
2015-01-19 10:02 - 2015-01-19 10:02 - 17385800 _____ (Google Inc.) C:\Users\HP ProBook 470 G2\Downloads\picasa39-setup.exe
2015-01-19 10:00 - 2015-01-19 10:00 - 00003148 _____ () C:\windows\System32\Tasks\SidebarExecute
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\SysWOW64\zh-Hant
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\SysWOW64\zh-Hans
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\SysWOW64\tr
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\SysWOW64\th
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\SysWOW64\sv
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\SysWOW64\sr
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\SysWOW64\sl
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\SysWOW64\sk
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\SysWOW64\ru
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\SysWOW64\ro
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\SysWOW64\pl
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\SysWOW64\no
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\SysWOW64\nl
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\SysWOW64\lv
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\SysWOW64\lt
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\SysWOW64\ko
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\SysWOW64\ja
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\SysWOW64\it
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\SysWOW64\hu
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\SysWOW64\hr
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\SysWOW64\he
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\SysWOW64\fr
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\SysWOW64\fi
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\SysWOW64\et
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\SysWOW64\es
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\SysWOW64\el
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\SysWOW64\da
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\SysWOW64\cs
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\SysWOW64\bg
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\SysWOW64\ar
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\system32\zh-Hant
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\system32\zh-Hans
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\system32\tr
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\system32\th
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\system32\sv
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\system32\sr
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\system32\sl
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\system32\sk
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\system32\ru
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\system32\ro
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\system32\pl
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\system32\no
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\system32\nl
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\system32\lv
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\system32\lt
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\system32\ko
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\system32\ja
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\system32\it
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\system32\hu
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\system32\hr
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\system32\he
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\system32\fr
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\system32\fi
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\system32\et
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\system32\es
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\system32\el
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\system32\da
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\system32\cs
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\system32\bg
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\system32\ar
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\DPDrv
2015-01-19 09:50 - 2015-01-19 09:50 - 00000000 ____D () C:\ProgramData\Synaptics
2015-01-19 09:50 - 2015-01-19 09:49 - 00753392 _____ (Synaptics Incorporated) C:\windows\system32\SynCOM.dll
2015-01-19 09:50 - 2015-01-19 09:49 - 00580336 _____ (Synaptics Incorporated) C:\windows\system32\Drivers\SynTP.sys
2015-01-19 09:50 - 2015-01-19 09:49 - 00409328 _____ (Synaptics Incorporated) C:\windows\SysWOW64\SynCom.dll
2015-01-19 09:50 - 2015-01-19 09:49 - 00256240 _____ (Synaptics Incorporated) C:\windows\system32\SynTPAPI.dll
2015-01-19 09:50 - 2015-01-19 09:49 - 00212208 _____ (Synaptics Incorporated) C:\windows\system32\SynTPCo20.dll
2015-01-19 09:50 - 2015-01-19 09:49 - 00195784 _____ () C:\windows\system32\pca-manta.bin
2015-01-19 09:22 - 2015-01-19 09:22 - 00001674 _____ () C:\Users\HP ProBook 470 G2\Desktop\Rechnung5.lnk
2015-01-19 09:22 - 2015-01-19 09:22 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SoftwareNetz
2015-01-19 09:22 - 2015-01-19 09:22 - 00000000 ____D () C:\Softwarenetz
2015-01-19 09:22 - 2014-06-12 09:28 - 00181952 _____ (SoftwareNetz) C:\windows\snui.exe
2015-01-19 08:29 - 2015-01-19 08:29 - 00002212 _____ () C:\Users\Public\Desktop\SteuerSparErklärung 2015.lnk
2015-01-19 08:29 - 2015-01-19 08:29 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Local\AAV
2015-01-19 08:29 - 2015-01-19 08:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steuertipps
2015-01-19 08:28 - 2015-01-19 14:22 - 00000000 ____D () C:\Program Files (x86)\Akademische Arbeitsgemeinschaft
2015-01-19 08:25 - 2015-01-19 14:20 - 00000000 ____D () C:\ProgramData\AAV
2015-01-19 08:14 - 2015-01-19 08:19 - 205257056 _____ () C:\Users\HP ProBook 470 G2\Downloads\SSEStandard_20.25.123.exe
2015-01-19 07:34 - 2015-02-01 17:26 - 00000052 _____ () C:\windows\SysWOW64\DOErrors.log
2015-01-19 07:33 - 2015-02-01 17:25 - 00000000 _____ () C:\windows\system32\HP_ActiveX_Patch_NOT_DETECTED.txt
2015-01-18 15:32 - 2015-01-18 15:32 - 00000000 ___SD () C:\Users\HP ProBook 470 G2\Documents\Meine Datenquellen
2015-01-18 15:31 - 2015-01-18 15:31 - 00000000 ____D () C:\Users\HP ProBook 470 G2\Documents\Benutzerdefinierte Office-Vorlagen
2015-01-18 15:06 - 2015-01-18 15:06 - 00000000 ____D () C:\Users\HP ProBook 470 G2\Documents\OneNote-Notizbücher
2015-01-18 14:58 - 2015-01-18 15:02 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Roaming\Steganos
2015-01-18 14:58 - 2015-01-18 14:58 - 00001246 _____ () C:\Users\HP ProBook 470 G2\Desktop\Passwort-Manager.lnk
2015-01-18 14:58 - 2015-01-18 14:58 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steganos Passwort-Manager Free
2015-01-18 14:58 - 2015-01-18 14:58 - 00000000 ____D () C:\Program Files (x86)\Steganos Password Manager Free 11
2015-01-18 14:57 - 2015-01-19 14:39 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Local\Adobe
2015-01-18 14:52 - 2015-01-18 14:52 - 00000000 ____D () C:\ProgramData\FLEXnet
2015-01-18 14:51 - 2015-01-18 14:51 - 00001144 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop CS3.lnk
2015-01-18 14:50 - 2015-01-18 14:50 - 08275369 _____ (Steganos GmbH) C:\Users\HP ProBook 470 G2\Downloads\spm2009freeint.exe
2015-01-18 14:50 - 2015-01-18 14:50 - 00000000 ____D () C:\ProgramData\Adobe
2015-01-18 14:49 - 2015-01-18 14:49 - 00001230 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Stock Photos CS3.lnk
2015-01-18 14:47 - 2015-01-18 14:47 - 00001410 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe ExtendScript Toolkit 2.lnk
2015-01-18 14:47 - 2015-01-18 14:47 - 00001199 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Device Central CS3.lnk
2015-01-18 14:45 - 2015-01-18 14:45 - 00001106 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Bridge CS3.lnk
2015-01-18 14:45 - 2015-01-18 14:45 - 00000000 ____D () C:\windows\SysWOW64\spool
2015-01-18 14:45 - 2015-01-18 14:45 - 00000000 ____D () C:\windows\SysWOW64\Macromed
2015-01-18 14:42 - 2015-01-18 14:50 - 00000000 ____D () C:\Program Files (x86)\Adobe
2015-01-18 12:45 - 2015-01-18 12:45 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Roaming\My Bluetooth
2015-01-18 12:32 - 2015-01-26 15:16 - 00000000 ____D () C:\Users\HP ProBook 470 G2\Documents\Outlook-Dateien
2015-01-18 12:07 - 2015-01-19 07:26 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Roaming\Windows Live Writer
2015-01-18 12:07 - 2015-01-18 12:07 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Local\Windows Live Writer
2015-01-18 12:04 - 2015-01-18 12:04 - 00002498 _____ () C:\Users\HP ProBook 470 G2\Desktop\Word 2013.lnk
2015-01-18 12:04 - 2015-01-18 12:04 - 00002494 _____ () C:\Users\HP ProBook 470 G2\Desktop\Excel 2013.lnk
2015-01-18 12:04 - 2015-01-18 12:04 - 00002449 _____ () C:\Users\HP ProBook 470 G2\Desktop\Lync 2013.lnk
2015-01-18 12:04 - 2015-01-18 12:04 - 00002412 _____ () C:\Users\HP ProBook 470 G2\Desktop\OneNote 2013.lnk
2015-01-18 12:02 - 2015-01-18 12:02 - 00003214 _____ () C:\windows\System32\Tasks\HP Officejet 6600.exe_{F24B9D44-93E3-4130-BAC4-774FFE8E795B}
2015-01-18 11:59 - 2015-02-01 14:21 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Roaming\HpUpdate
2015-01-18 11:59 - 2015-01-18 11:59 - 00002159 _____ () C:\Users\Public\Desktop\HP Officejet 6600.lnk
2015-01-18 11:59 - 2012-10-17 04:31 - 00741480 ____N (Hewlett-Packard Co.) C:\windows\system32\HPDiscoPM5D12.dll
2015-01-18 11:58 - 2015-01-19 10:32 - 00000000 ____D () C:\ProgramData\HP
2015-01-18 11:58 - 2015-01-18 11:59 - 00000000 ____D () C:\Program Files (x86)\HP
2015-01-18 11:58 - 2015-01-18 11:58 - 00000000 ____D () C:\Program Files\HP
2015-01-18 11:57 - 2015-01-18 11:57 - 00000057 _____ () C:\ProgramData\Ament.ini
2015-01-18 11:56 - 2015-01-18 12:02 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Local\HP
2015-01-18 10:46 - 2014-12-13 06:09 - 00144384 _____ (Microsoft Corporation) C:\windows\system32\ieUnatt.exe
2015-01-18 10:46 - 2014-12-13 04:33 - 00115712 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieUnatt.exe
2015-01-18 10:46 - 2014-12-11 18:47 - 00087040 _____ (Microsoft Corporation) C:\windows\system32\TSWbPrxy.exe
2015-01-18 10:46 - 2014-07-09 03:03 - 00007168 _____ (Microsoft Corporation) C:\windows\system32\KBDYAK.DLL
2015-01-18 10:46 - 2014-07-09 03:03 - 00007168 _____ (Microsoft Corporation) C:\windows\system32\KBDTAT.DLL
2015-01-18 10:46 - 2014-07-09 03:03 - 00007168 _____ (Microsoft Corporation) C:\windows\system32\KBDRU1.DLL
2015-01-18 10:46 - 2014-07-09 03:03 - 00007168 _____ (Microsoft Corporation) C:\windows\system32\KBDBASH.DLL
2015-01-18 10:46 - 2014-07-09 03:03 - 00006656 _____ (Microsoft Corporation) C:\windows\system32\KBDRU.DLL
2015-01-18 10:46 - 2014-07-09 02:31 - 00007168 _____ (Microsoft Corporation) C:\windows\SysWOW64\KBDYAK.DLL
2015-01-18 10:46 - 2014-07-09 02:31 - 00007168 _____ (Microsoft Corporation) C:\windows\SysWOW64\KBDTAT.DLL
2015-01-18 10:46 - 2014-07-09 02:31 - 00006656 _____ (Microsoft Corporation) C:\windows\SysWOW64\KBDRU1.DLL
2015-01-18 10:46 - 2014-07-09 02:31 - 00006656 _____ (Microsoft Corporation) C:\windows\SysWOW64\KBDRU.DLL
2015-01-18 10:46 - 2014-07-09 02:31 - 00006656 _____ (Microsoft Corporation) C:\windows\SysWOW64\KBDBASH.DLL
2015-01-18 10:46 - 2014-07-08 23:38 - 00419992 _____ () C:\windows\system32\locale.nls
2015-01-18 10:46 - 2014-07-08 23:30 - 00419992 _____ () C:\windows\SysWOW64\locale.nls
2015-01-18 10:08 - 2014-08-29 03:07 - 03179520 _____ (Microsoft Corporation) C:\windows\system32\rdpcorets.dll
2015-01-18 10:08 - 2014-05-08 10:32 - 00016384 _____ (Microsoft Corporation) C:\windows\system32\RdpGroupPolicyExtension.dll
2015-01-18 10:07 - 2014-09-05 03:11 - 06584320 _____ (Microsoft Corporation) C:\windows\system32\mstscax.dll
2015-01-18 10:07 - 2014-09-05 02:52 - 05703168 _____ (Microsoft Corporation) C:\windows\SysWOW64\mstscax.dll
2015-01-18 09:58 - 2015-01-18 09:58 - 00000000 ____D () C:\windows\de
2015-01-18 09:57 - 2015-01-18 09:57 - 00001465 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Mail.lnk
2015-01-18 09:57 - 2015-01-18 09:57 - 00001381 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Photo Gallery.lnk
2015-01-18 09:57 - 2015-01-18 09:57 - 00001312 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Movie Maker.lnk
2015-01-18 09:57 - 2015-01-18 09:57 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live
2015-01-18 09:57 - 2015-01-18 09:57 - 00000000 ____D () C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2015-01-18 09:56 - 2015-01-18 09:56 - 00000000 ____D () C:\windows\PCHEALTH
2015-01-18 09:56 - 2015-01-18 09:56 - 00000000 ____D () C:\Program Files\Windows Live
2015-01-18 09:55 - 2015-01-18 09:57 - 00000000 ____D () C:\Program Files (x86)\Windows Live
2015-01-18 09:54 - 2010-06-02 04:55 - 00527192 _____ (Microsoft Corporation) C:\windows\SysWOW64\XAudio2_7.dll
2015-01-18 09:54 - 2010-06-02 04:55 - 00518488 _____ (Microsoft Corporation) C:\windows\system32\XAudio2_7.dll
2015-01-18 09:54 - 2010-06-02 04:55 - 00077656 _____ (Microsoft Corporation) C:\windows\system32\XAPOFX1_5.dll
2015-01-18 09:54 - 2010-06-02 04:55 - 00074072 _____ (Microsoft Corporation) C:\windows\SysWOW64\XAPOFX1_5.dll
2015-01-18 09:54 - 2010-05-26 11:41 - 02526056 _____ (Microsoft Corporation) C:\windows\system32\D3DCompiler_43.dll
2015-01-18 09:54 - 2010-05-26 11:41 - 02106216 _____ (Microsoft Corporation) C:\windows\SysWOW64\D3DCompiler_43.dll
2015-01-18 09:54 - 2010-05-26 11:41 - 00276832 _____ (Microsoft Corporation) C:\windows\system32\d3dx11_43.dll
2015-01-18 09:54 - 2010-05-26 11:41 - 00248672 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3dx11_43.dll
2015-01-18 09:53 - 2009-09-04 17:29 - 00523088 _____ (Microsoft Corporation) C:\windows\system32\d3dx10_42.dll
2015-01-18 09:53 - 2009-09-04 17:29 - 00453456 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3dx10_42.dll
2015-01-18 09:52 - 2015-01-18 09:52 - 00000199 _____ () C:\windows\DirectX.log
2015-01-18 09:52 - 2006-11-29 13:06 - 04398360 _____ (Microsoft Corporation) C:\windows\system32\d3dx9_32.dll
2015-01-18 09:52 - 2006-11-29 13:06 - 03426072 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3dx9_32.dll
2015-01-18 09:50 - 2015-01-21 10:09 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Local\Windows Live
2015-01-18 09:48 - 2015-01-18 09:49 - 01245384 _____ (Microsoft Corporation) C:\Users\HP ProBook 470 G2\Downloads\wlsetup-web.exe
2015-01-18 09:48 - 2015-01-18 09:48 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Local\Intel_Corporation
2015-01-18 09:04 - 2015-01-18 09:04 - 00000000 ____D () C:\windows\System32\Tasks\OfficeSoftwareProtectionPlatform
2015-01-18 09:04 - 2015-01-18 09:04 - 00000000 ____D () C:\Program Files (x86)\Microsoft Office
2015-01-18 09:03 - 2015-01-18 12:32 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2015-01-18 09:01 - 2015-01-18 11:48 - 00000000 ____D () C:\Program Files\Microsoft Office 15
2015-01-17 18:48 - 2013-10-02 03:22 - 00056832 _____ (Microsoft Corporation) C:\windows\system32\Drivers\TsUsbFlt.sys
2015-01-17 18:48 - 2013-10-02 03:11 - 00013824 _____ (Microsoft Corporation) C:\windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2015-01-17 18:48 - 2013-10-02 03:08 - 00012800 _____ (Microsoft Corporation) C:\windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2015-01-17 18:48 - 2013-10-02 02:48 - 00056832 _____ (Microsoft Corporation) C:\windows\system32\MsRdpWebAccess.dll
2015-01-17 18:48 - 2013-10-02 02:48 - 00018944 _____ (Microsoft Corporation) C:\windows\system32\wksprtPS.dll
2015-01-17 18:48 - 2013-10-02 02:29 - 00062976 _____ (Microsoft Corporation) C:\windows\system32\tsgqec.dll
2015-01-17 18:48 - 2013-10-02 02:10 - 00044544 _____ (Microsoft Corporation) C:\windows\system32\TsUsbGDCoInstaller.dll
2015-01-17 18:48 - 2013-10-02 01:15 - 01057280 _____ (Microsoft Corporation) C:\windows\system32\rdvidcrl.dll
2015-01-17 18:48 - 2013-10-02 01:14 - 00050176 _____ (Microsoft Corporation) C:\windows\SysWOW64\MsRdpWebAccess.dll
2015-01-17 18:48 - 2013-10-02 01:14 - 00017920 _____ (Microsoft Corporation) C:\windows\SysWOW64\wksprtPS.dll
2015-01-17 18:48 - 2013-10-02 01:01 - 00420864 _____ (Microsoft Corporation) C:\windows\system32\wksprt.exe
2015-01-17 18:48 - 2013-10-02 00:58 - 00053248 _____ (Microsoft Corporation) C:\windows\SysWOW64\tsgqec.dll
2015-01-17 18:48 - 2013-10-02 00:31 - 01147392 _____ (Microsoft Corporation) C:\windows\system32\mstsc.exe
2015-01-17 18:48 - 2013-10-02 00:08 - 00855552 _____ (Microsoft Corporation) C:\windows\SysWOW64\rdvidcrl.dll
2015-01-17 18:48 - 2013-10-01 23:34 - 01068544 _____ (Microsoft Corporation) C:\windows\SysWOW64\mstsc.exe
2015-01-17 18:42 - 2012-08-23 15:13 - 00243200 _____ (Microsoft Corporation) C:\windows\system32\rdpudd.dll
2015-01-17 18:42 - 2012-08-23 15:10 - 00019456 _____ (Microsoft Corporation) C:\windows\system32\Drivers\rdpvideominiport.sys
2015-01-17 18:42 - 2012-08-23 15:08 - 00030208 _____ (Microsoft Corporation) C:\windows\system32\Drivers\TsUsbGD.sys
2015-01-17 18:42 - 2012-08-23 12:12 - 00192000 _____ (Microsoft Corporation) C:\windows\SysWOW64\rdpendp_winip.dll
2015-01-17 18:42 - 2012-08-23 11:51 - 00228864 _____ (Microsoft Corporation) C:\windows\system32\rdpendp_winip.dll
2015-01-17 18:41 - 2015-01-17 18:41 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2015-01-17 18:40 - 2015-01-17 18:40 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2015-01-17 18:40 - 2015-01-17 18:40 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2015-01-17 18:37 - 2014-10-18 03:05 - 04121600 _____ (Microsoft Corporation) C:\windows\system32\mf.dll
2015-01-17 18:37 - 2014-10-18 02:33 - 03209728 _____ (Microsoft Corporation) C:\windows\SysWOW64\mf.dll
2015-01-17 18:37 - 2014-07-07 03:06 - 00206848 _____ (Microsoft Corporation) C:\windows\system32\mfps.dll
2015-01-17 18:37 - 2014-07-07 03:06 - 00055808 _____ (Microsoft Corporation) C:\windows\system32\rrinstaller.exe
2015-01-17 18:37 - 2014-07-07 03:06 - 00024576 _____ (Microsoft Corporation) C:\windows\system32\mfpmp.exe
2015-01-17 18:37 - 2014-07-07 03:02 - 00002048 _____ (Microsoft Corporation) C:\windows\system32\mferror.dll
2015-01-17 18:37 - 2014-07-07 02:40 - 00103424 _____ (Microsoft Corporation) C:\windows\SysWOW64\mfps.dll
2015-01-17 18:37 - 2014-07-07 02:39 - 00050176 _____ (Microsoft Corporation) C:\windows\SysWOW64\rrinstaller.exe
2015-01-17 18:37 - 2014-07-07 02:39 - 00023040 _____ (Microsoft Corporation) C:\windows\SysWOW64\mfpmp.exe
2015-01-17 18:37 - 2014-07-07 02:37 - 00002048 _____ (Microsoft Corporation) C:\windows\SysWOW64\mferror.dll
2015-01-17 18:37 - 2012-07-26 04:08 - 00744448 _____ (Microsoft Corporation) C:\windows\system32\WUDFx.dll
2015-01-17 18:37 - 2012-07-26 04:08 - 00229888 _____ (Microsoft Corporation) C:\windows\system32\WUDFHost.exe
2015-01-17 18:37 - 2012-07-26 04:08 - 00194048 _____ (Microsoft Corporation) C:\windows\system32\WUDFPlatform.dll
2015-01-17 18:37 - 2012-07-26 04:08 - 00084992 _____ (Microsoft Corporation) C:\windows\system32\WUDFSvc.dll
2015-01-17 18:37 - 2012-07-26 04:08 - 00045056 _____ (Microsoft Corporation) C:\windows\system32\WUDFCoinstaller.dll
2015-01-17 18:37 - 2012-07-26 03:26 - 00198656 _____ (Microsoft Corporation) C:\windows\system32\Drivers\WUDFRd.sys
2015-01-17 18:37 - 2012-07-26 03:26 - 00087040 _____ (Microsoft Corporation) C:\windows\system32\Drivers\WUDFPf.sys
2015-01-17 18:37 - 2012-06-02 15:57 - 00000003 _____ () C:\windows\system32\Drivers\MsftWdf_User_01_11_00_Inbox_Critical.Wdf
2015-01-17 18:35 - 2014-06-27 03:08 - 02777088 _____ (Microsoft Corporation) C:\windows\system32\msmpeg2vdec.dll
2015-01-17 18:35 - 2014-06-27 02:45 - 02285056 _____ (Microsoft Corporation) C:\windows\SysWOW64\msmpeg2vdec.dll
2015-01-17 18:32 - 2015-01-17 18:32 - 00000000 ____D () C:\Users\Public\Documents\CyberLink
2015-01-17 18:32 - 2015-01-17 18:32 - 00000000 ____D () C:\Users\HP ProBook 470 G2\Documents\CyberLink
2015-01-17 18:32 - 2015-01-17 18:32 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Roaming\CyberLink
2015-01-17 18:32 - 2014-11-08 04:16 - 00002048 _____ (Microsoft Corporation) C:\windows\system32\tzres.dll
2015-01-17 18:32 - 2014-11-08 03:45 - 00002048 _____ (Microsoft Corporation) C:\windows\SysWOW64\tzres.dll
2015-01-17 18:32 - 2014-10-14 03:13 - 03241984 _____ (Microsoft Corporation) C:\windows\system32\msi.dll
2015-01-17 18:32 - 2014-10-14 02:50 - 02363904 _____ (Microsoft Corporation) C:\windows\SysWOW64\msi.dll
2015-01-17 18:32 - 2014-09-25 03:08 - 00371712 _____ (Microsoft Corporation) C:\windows\system32\qdvd.dll
2015-01-17 18:32 - 2014-09-25 02:40 - 00519680 _____ (Microsoft Corporation) C:\windows\SysWOW64\qdvd.dll
2015-01-17 18:32 - 2014-08-01 12:53 - 01031168 _____ (Microsoft Corporation) C:\windows\system32\TSWorkspace.dll
2015-01-17 18:32 - 2014-08-01 12:35 - 00793600 _____ (Microsoft Corporation) C:\windows\SysWOW64\TSWorkspace.dll
2015-01-17 18:32 - 2014-06-24 04:29 - 02565120 _____ (Microsoft Corporation) C:\windows\system32\d3d10warp.dll
2015-01-17 18:32 - 2014-06-24 03:59 - 01987584 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3d10warp.dll
2015-01-17 18:31 - 2015-01-17 18:31 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Local\CyberLink
2015-01-17 18:31 - 2014-11-11 02:46 - 00119296 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tdx.sys
2015-01-17 18:31 - 2014-10-30 03:03 - 00165888 _____ (Microsoft Corporation) C:\windows\system32\charmap.exe
2015-01-17 18:31 - 2014-10-30 02:45 - 00155136 _____ (Microsoft Corporation) C:\windows\SysWOW64\charmap.exe
2015-01-17 18:31 - 2014-06-25 03:05 - 14175744 _____ (Microsoft Corporation) C:\windows\system32\shell32.dll
2015-01-17 18:31 - 2014-06-25 02:41 - 12874240 _____ (Microsoft Corporation) C:\windows\SysWOW64\shell32.dll
2015-01-17 18:31 - 2014-02-04 03:35 - 00274880 _____ (Microsoft Corporation) C:\windows\system32\Drivers\msiscsi.sys
2015-01-17 18:31 - 2014-02-04 03:35 - 00190912 _____ (Microsoft Corporation) C:\windows\system32\Drivers\storport.sys
2015-01-17 18:31 - 2014-02-04 03:35 - 00027584 _____ (Microsoft Corporation) C:\windows\system32\Drivers\Diskdump.sys
2015-01-17 18:31 - 2014-02-04 03:28 - 00002048 _____ (Microsoft Corporation) C:\windows\system32\iologmsg.dll
2015-01-17 18:31 - 2014-02-04 03:00 - 00002048 _____ (Microsoft Corporation) C:\windows\SysWOW64\iologmsg.dll
2015-01-17 18:31 - 2014-01-28 03:32 - 00228864 _____ (Microsoft Corporation) C:\windows\system32\wwansvc.dll
2015-01-17 18:31 - 2014-01-24 03:37 - 01684928 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ntfs.sys
2015-01-17 18:27 - 2014-10-03 03:12 - 02020352 _____ (Microsoft Corporation) C:\windows\system32\WsmSvc.dll
2015-01-17 18:27 - 2014-10-03 03:12 - 00346624 _____ (Microsoft Corporation) C:\windows\system32\WSManMigrationPlugin.dll
2015-01-17 18:27 - 2014-10-03 03:12 - 00310272 _____ (Microsoft Corporation) C:\windows\system32\WsmWmiPl.dll
2015-01-17 18:27 - 2014-10-03 03:12 - 00181248 _____ (Microsoft Corporation) C:\windows\system32\WsmAuto.dll
2015-01-17 18:27 - 2014-10-03 03:11 - 00266240 _____ (Microsoft Corporation) C:\windows\system32\WSManHTTPConfig.exe
2015-01-17 18:27 - 2014-10-03 02:45 - 01177088 _____ (Microsoft Corporation) C:\windows\SysWOW64\WsmSvc.dll
2015-01-17 18:27 - 2014-10-03 02:45 - 00248832 _____ (Microsoft Corporation) C:\windows\SysWOW64\WSManMigrationPlugin.dll
2015-01-17 18:27 - 2014-10-03 02:45 - 00214016 _____ (Microsoft Corporation) C:\windows\SysWOW64\WsmWmiPl.dll
2015-01-17 18:27 - 2014-10-03 02:45 - 00145920 _____ (Microsoft Corporation) C:\windows\SysWOW64\WsmAuto.dll
2015-01-17 18:27 - 2014-10-03 02:44 - 00198656 _____ (Microsoft Corporation) C:\windows\SysWOW64\WSManHTTPConfig.exe
2015-01-17 18:13 - 2015-02-03 14:04 - 00003854 _____ () C:\windows\System32\Tasks\Opera scheduled Autoupdate 1421514790
2015-01-17 18:13 - 2015-01-17 18:13 - 00001146 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk
2015-01-17 18:13 - 2015-01-17 18:13 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Roaming\Opera Software
2015-01-17 18:13 - 2015-01-17 18:13 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Local\Opera Software
2015-01-17 18:12 - 2015-02-03 14:04 - 00000000 ____D () C:\Program Files (x86)\Opera
2015-01-17 18:12 - 2015-01-17 18:12 - 00683664 _____ (Opera Software) C:\Users\HP ProBook 470 G2\Downloads\Opera_NI_stable.exe
2015-01-17 18:08 - 2015-01-30 07:13 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2015-01-17 18:08 - 2015-01-17 18:09 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Roaming\Mozilla
2015-01-17 18:08 - 2015-01-17 18:09 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Local\Mozilla
2015-01-17 18:08 - 2015-01-17 18:08 - 00001170 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2015-01-17 18:08 - 2015-01-17 18:08 - 00001158 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2015-01-17 18:08 - 2015-01-17 18:08 - 00000000 ____D () C:\ProgramData\Mozilla
2015-01-17 18:07 - 2015-01-17 18:07 - 00243728 _____ () C:\Users\HP ProBook 470 G2\Downloads\Firefox Setup Stub 35.0.exe
2015-01-17 18:05 - 2015-01-17 18:05 - 00000000 __SHD () C:\Users\HP ProBook 470 G2\AppData\Local\EmieUserList
2015-01-17 18:05 - 2015-01-17 18:05 - 00000000 __SHD () C:\Users\HP ProBook 470 G2\AppData\Local\EmieSiteList
2015-01-17 18:02 - 2015-01-17 18:02 - 00001228 _____ () C:\Users\HP ProBook 470 G2\Desktop\Windows Explorer.lnk
2015-01-17 15:41 - 2015-01-17 15:42 - 00000000 ____D () C:\windows\system32\MRT
2015-01-17 15:41 - 2014-12-31 13:12 - 113365784 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe
2015-01-17 15:40 - 2014-06-30 23:24 - 00008856 _____ (Microsoft Corporation) C:\windows\system32\icardres.dll
2015-01-17 15:40 - 2014-06-30 23:14 - 00008856 _____ (Microsoft Corporation) C:\windows\SysWOW64\icardres.dll
2015-01-17 15:40 - 2014-03-09 22:48 - 01389208 _____ (Microsoft Corporation) C:\windows\system32\icardagt.exe
2015-01-17 15:40 - 2014-03-09 22:48 - 00171160 _____ (Microsoft Corporation) C:\windows\system32\infocardapi.dll
2015-01-17 15:40 - 2014-03-09 22:47 - 00619672 _____ (Microsoft Corporation) C:\windows\SysWOW64\icardagt.exe
2015-01-17 15:40 - 2014-03-09 22:47 - 00099480 _____ (Microsoft Corporation) C:\windows\SysWOW64\infocardapi.dll
2015-01-17 15:39 - 2014-11-27 02:43 - 00389296 _____ (Microsoft Corporation) C:\windows\system32\iedkcs32.dll
2015-01-17 15:39 - 2014-11-27 02:10 - 00342200 _____ (Microsoft Corporation) C:\windows\SysWOW64\iedkcs32.dll
2015-01-17 15:39 - 2014-11-22 04:13 - 25059840 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2015-01-17 15:39 - 2014-11-22 04:06 - 02724864 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2015-01-17 15:39 - 2014-11-22 04:06 - 00004096 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollectorres.dll
2015-01-17 15:39 - 2014-11-22 03:50 - 00580096 _____ (Microsoft Corporation) C:\windows\system32\vbscript.dll
2015-01-17 15:39 - 2014-11-22 03:50 - 00066560 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2015-01-17 15:39 - 2014-11-22 03:49 - 02885120 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2015-01-17 15:39 - 2014-11-22 03:49 - 00048640 _____ (Microsoft Corporation) C:\windows\system32\ieetwproxystub.dll
2015-01-17 15:39 - 2014-11-22 03:48 - 00088064 _____ (Microsoft Corporation) C:\windows\system32\MshtmlDac.dll
2015-01-17 15:39 - 2014-11-22 03:41 - 00054784 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2015-01-17 15:39 - 2014-11-22 03:40 - 00034304 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2015-01-17 15:39 - 2014-11-22 03:37 - 00633856 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll
2015-01-17 15:39 - 2014-11-22 03:35 - 00114688 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollector.exe
2015-01-17 15:39 - 2014-11-22 03:34 - 06039552 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2015-01-17 15:39 - 2014-11-22 03:34 - 00814080 _____ (Microsoft Corporation) C:\windows\system32\jscript9diag.dll
2015-01-17 15:39 - 2014-11-22 03:26 - 00968704 _____ (Microsoft Corporation) C:\windows\system32\MsSpellCheckingFacility.exe
2015-01-17 15:39 - 2014-11-22 03:22 - 19749376 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll
2015-01-17 15:39 - 2014-11-22 03:22 - 00490496 _____ (Microsoft Corporation) C:\windows\system32\dxtmsft.dll
2015-01-17 15:39 - 2014-11-22 03:20 - 02724864 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb
2015-01-17 15:39 - 2014-11-22 03:14 - 00077824 _____ (Microsoft Corporation) C:\windows\system32\JavaScriptCollectionAgent.dll
2015-01-17 15:39 - 2014-11-22 03:09 - 00199680 _____ (Microsoft Corporation) C:\windows\system32\msrating.dll
2015-01-17 15:39 - 2014-11-22 03:08 - 00092160 _____ (Microsoft Corporation) C:\windows\system32\mshtmled.dll
2015-01-17 15:39 - 2014-11-22 03:07 - 00501248 _____ (Microsoft Corporation) C:\windows\SysWOW64\vbscript.dll
2015-01-17 15:39 - 2014-11-22 03:07 - 00062464 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesetup.dll
2015-01-17 15:39 - 2014-11-22 03:06 - 00047616 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieetwproxystub.dll
2015-01-17 15:39 - 2014-11-22 03:05 - 00316928 _____ (Microsoft Corporation) C:\windows\system32\dxtrans.dll
2015-01-17 15:39 - 2014-11-22 03:05 - 00064000 _____ (Microsoft Corporation) C:\windows\SysWOW64\MshtmlDac.dll
2015-01-17 15:39 - 2014-11-22 03:01 - 02277888 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll
2015-01-17 15:39 - 2014-11-22 02:59 - 00047104 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsproxy.dll
2015-01-17 15:39 - 2014-11-22 02:58 - 00030720 _____ (Microsoft Corporation) C:\windows\SysWOW64\iernonce.dll
2015-01-17 15:39 - 2014-11-22 02:56 - 00478208 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieui.dll
2015-01-17 15:39 - 2014-11-22 02:54 - 00620032 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9diag.dll
2015-01-17 15:39 - 2014-11-22 02:49 - 00800768 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2015-01-17 15:39 - 2014-11-22 02:49 - 00718848 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2015-01-17 15:39 - 2014-11-22 02:47 - 01359360 _____ (Microsoft Corporation) C:\windows\system32\mshtmlmedia.dll
2015-01-17 15:39 - 2014-11-22 02:46 - 02125312 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl
2015-01-17 15:39 - 2014-11-22 02:45 - 00418304 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtmsft.dll
2015-01-17 15:39 - 2014-11-22 02:43 - 14412800 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2015-01-17 15:39 - 2014-11-22 02:40 - 00060416 _____ (Microsoft Corporation) C:\windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-01-17 15:39 - 2014-11-22 02:36 - 00168960 _____ (Microsoft Corporation) C:\windows\SysWOW64\msrating.dll
2015-01-17 15:39 - 2014-11-22 02:35 - 00076288 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmled.dll
2015-01-17 15:39 - 2014-11-22 02:33 - 00285696 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtrans.dll
2015-01-17 15:39 - 2014-11-22 02:29 - 04299264 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll
2015-01-17 15:39 - 2014-11-22 02:28 - 02358272 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2015-01-17 15:39 - 2014-11-22 02:23 - 00688640 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll
2015-01-17 15:39 - 2014-11-22 02:22 - 02052096 _____ (Microsoft Corporation) C:\windows\SysWOW64\inetcpl.cpl
2015-01-17 15:39 - 2014-11-22 02:21 - 01155072 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmlmedia.dll
2015-01-17 15:39 - 2014-11-22 02:15 - 01548288 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2015-01-17 15:39 - 2014-11-22 02:13 - 12836864 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll
2015-01-17 15:39 - 2014-11-22 02:03 - 00800768 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dll
2015-01-17 15:39 - 2014-11-22 02:00 - 01888256 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll
2015-01-17 15:39 - 2014-11-22 01:56 - 01307136 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll
2015-01-17 15:39 - 2014-11-22 01:54 - 00710144 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieapfltr.dll
2015-01-17 15:39 - 2014-06-06 07:16 - 00035480 _____ (Microsoft Corporation) C:\windows\SysWOW64\TsWpfWrp.exe
2015-01-17 15:39 - 2014-06-06 07:12 - 00035480 _____ (Microsoft Corporation) C:\windows\system32\TsWpfWrp.exe
2015-01-17 15:38 - 2014-09-19 10:42 - 00342016 _____ (Microsoft Corporation) C:\windows\system32\schannel.dll
2015-01-17 15:38 - 2014-09-19 10:42 - 00314880 _____ (Microsoft Corporation) C:\windows\system32\msv1_0.dll
2015-01-17 15:38 - 2014-09-19 10:42 - 00309760 _____ (Microsoft Corporation) C:\windows\system32\ncrypt.dll
2015-01-17 15:38 - 2014-09-19 10:42 - 00210944 _____ (Microsoft Corporation) C:\windows\system32\wdigest.dll
2015-01-17 15:38 - 2014-09-19 10:42 - 00086528 _____ (Microsoft Corporation) C:\windows\system32\TSpkg.dll
2015-01-17 15:38 - 2014-09-19 10:42 - 00022016 _____ (Microsoft Corporation) C:\windows\system32\credssp.dll
2015-01-17 15:38 - 2014-09-19 10:23 - 00259584 _____ (Microsoft Corporation) C:\windows\SysWOW64\msv1_0.dll
2015-01-17 15:38 - 2014-09-19 10:23 - 00248832 _____ (Microsoft Corporation) C:\windows\SysWOW64\schannel.dll
2015-01-17 15:38 - 2014-09-19 10:23 - 00221184 _____ (Microsoft Corporation) C:\windows\SysWOW64\ncrypt.dll
2015-01-17 15:38 - 2014-09-19 10:23 - 00172032 _____ (Microsoft Corporation) C:\windows\SysWOW64\wdigest.dll
2015-01-17 15:38 - 2014-09-19 10:23 - 00065536 _____ (Microsoft Corporation) C:\windows\SysWOW64\TSpkg.dll
2015-01-17 15:38 - 2014-09-19 10:23 - 00017408 _____ (Microsoft Corporation) C:\windows\SysWOW64\credssp.dll
2015-01-17 15:38 - 2014-07-17 03:07 - 00455168 _____ (Microsoft Corporation) C:\windows\system32\winlogon.exe
2015-01-17 15:38 - 2014-07-17 03:07 - 00235520 _____ (Microsoft Corporation) C:\windows\system32\winsta.dll
2015-01-17 15:38 - 2014-07-17 03:07 - 00150528 _____ (Microsoft Corporation) C:\windows\system32\rdpcorekmts.dll
2015-01-17 15:38 - 2014-07-17 02:40 - 00157696 _____ (Microsoft Corporation) C:\windows\SysWOW64\winsta.dll
2015-01-17 15:38 - 2014-07-17 02:21 - 00212480 _____ (Microsoft Corporation) C:\windows\system32\Drivers\rdpwd.sys
2015-01-17 15:38 - 2014-07-17 02:21 - 00039936 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tssecsrv.sys
2015-01-17 15:38 - 2014-04-25 03:34 - 00801280 _____ (Microsoft Corporation) C:\windows\system32\usp10.dll
2015-01-17 15:38 - 2014-04-25 03:06 - 00626688 _____ (Microsoft Corporation) C:\windows\SysWOW64\usp10.dll
2015-01-17 15:38 - 2014-03-04 10:44 - 01163264 _____ (Microsoft Corporation) C:\windows\system32\kernel32.dll
2015-01-17 15:38 - 2014-03-04 10:44 - 00722944 _____ (Microsoft Corporation) C:\windows\system32\objsel.dll
2015-01-17 15:38 - 2014-03-04 10:44 - 00424960 _____ (Microsoft Corporation) C:\windows\system32\KernelBase.dll
2015-01-17 15:38 - 2014-03-04 10:44 - 00362496 _____ (Microsoft Corporation) C:\windows\system32\wow64win.dll
2015-01-17 15:38 - 2014-03-04 10:44 - 00243712 _____ (Microsoft Corporation) C:\windows\system32\wow64.dll
2015-01-17 15:38 - 2014-03-04 10:44 - 00039936 _____ (Microsoft Corporation) C:\windows\system32\wincredprovider.dll
2015-01-17 15:38 - 2014-03-04 10:44 - 00016384 _____ (Microsoft Corporation) C:\windows\system32\ntvdm64.dll
2015-01-17 15:38 - 2014-03-04 10:44 - 00013312 _____ (Microsoft Corporation) C:\windows\system32\wow64cpu.dll
2015-01-17 15:38 - 2014-03-04 10:43 - 00057344 _____ (Microsoft Corporation) C:\windows\system32\cngprovider.dll
2015-01-17 15:38 - 2014-03-04 10:43 - 00056832 _____ (Microsoft Corporation) C:\windows\system32\adprovider.dll
2015-01-17 15:38 - 2014-03-04 10:43 - 00053760 _____ (Microsoft Corporation) C:\windows\system32\capiprovider.dll
2015-01-17 15:38 - 2014-03-04 10:43 - 00052736 _____ (Microsoft Corporation) C:\windows\system32\dpapiprovider.dll
2015-01-17 15:38 - 2014-03-04 10:43 - 00044544 _____ (Microsoft Corporation) C:\windows\system32\dimsroam.dll
2015-01-17 15:38 - 2014-03-04 10:17 - 00538112 _____ (Microsoft Corporation) C:\windows\SysWOW64\objsel.dll
2015-01-17 15:38 - 2014-03-04 10:17 - 00051200 _____ (Microsoft Corporation) C:\windows\SysWOW64\cngprovider.dll
2015-01-17 15:38 - 2014-03-04 10:17 - 00049664 _____ (Microsoft Corporation) C:\windows\SysWOW64\adprovider.dll
2015-01-17 15:38 - 2014-03-04 10:17 - 00048128 _____ (Microsoft Corporation) C:\windows\SysWOW64\capiprovider.dll
2015-01-17 15:38 - 2014-03-04 10:17 - 00047616 _____ (Microsoft Corporation) C:\windows\SysWOW64\dpapiprovider.dll
2015-01-17 15:38 - 2014-03-04 10:17 - 00036864 _____ (Microsoft Corporation) C:\windows\SysWOW64\dimsroam.dll
2015-01-17 15:38 - 2014-03-04 10:17 - 00035328 _____ (Microsoft Corporation) C:\windows\SysWOW64\wincredprovider.dll
2015-01-17 15:38 - 2014-03-04 10:17 - 00014336 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntvdm64.dll
2015-01-17 15:38 - 2014-03-04 10:16 - 01114112 _____ (Microsoft Corporation) C:\windows\SysWOW64\kernel32.dll
2015-01-17 15:38 - 2014-03-04 10:16 - 00274944 _____ (Microsoft Corporation) C:\windows\SysWOW64\KernelBase.dll
2015-01-17 15:38 - 2014-03-04 10:16 - 00025600 _____ (Microsoft Corporation) C:\windows\SysWOW64\setup16.exe
2015-01-17 15:38 - 2014-03-04 10:16 - 00005120 _____ (Microsoft Corporation) C:\windows\SysWOW64\wow32.dll
2015-01-17 15:38 - 2014-03-04 09:09 - 00007680 _____ (Microsoft Corporation) C:\windows\SysWOW64\instnm.exe
2015-01-17 15:38 - 2014-03-04 09:09 - 00002048 _____ (Microsoft Corporation) C:\windows\SysWOW64\user.exe
2015-01-17 15:38 - 2011-04-09 07:58 - 00142336 _____ (Microsoft Corporation) C:\windows\system32\poqexec.exe
2015-01-17 15:38 - 2011-04-09 06:56 - 00123904 _____ (Microsoft Corporation) C:\windows\SysWOW64\poqexec.exe
2015-01-17 15:37 - 2014-12-19 02:46 - 00141312 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxdav.sys
2015-01-17 15:37 - 2014-12-12 06:35 - 05553592 _____ (Microsoft Corporation) C:\windows\system32\ntoskrnl.exe
2015-01-17 15:37 - 2014-12-12 06:31 - 00503808 _____ (Microsoft Corporation) C:\windows\system32\srcore.dll
2015-01-17 15:37 - 2014-12-12 06:31 - 00296960 _____ (Microsoft Corporation) C:\windows\system32\rstrui.exe
2015-01-17 15:37 - 2014-12-12 06:31 - 00050176 _____ (Microsoft Corporation) C:\windows\system32\srclient.dll
2015-01-17 15:37 - 2014-12-12 06:11 - 03971512 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntkrnlpa.exe
2015-01-17 15:37 - 2014-12-12 06:11 - 03916728 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntoskrnl.exe
2015-01-17 15:37 - 2014-12-12 06:07 - 00043008 _____ (Microsoft Corporation) C:\windows\SysWOW64\srclient.dll
2015-01-17 15:37 - 2014-11-11 04:09 - 01424384 _____ (Microsoft Corporation) C:\windows\system32\WindowsCodecs.dll
2015-01-17 15:37 - 2014-11-11 04:08 - 00728064 _____ (Microsoft Corporation) C:\windows\system32\kerberos.dll
2015-01-17 15:37 - 2014-11-11 04:08 - 00241152 _____ (Microsoft Corporation) C:\windows\system32\pku2u.dll
2015-01-17 15:37 - 2014-11-11 03:44 - 01230336 _____ (Microsoft Corporation) C:\windows\SysWOW64\WindowsCodecs.dll
2015-01-17 15:37 - 2014-11-11 03:44 - 00550912 _____ (Microsoft Corporation) C:\windows\SysWOW64\kerberos.dll
2015-01-17 15:37 - 2014-11-11 03:44 - 00186880 _____ (Microsoft Corporation) C:\windows\SysWOW64\pku2u.dll
2015-01-17 15:37 - 2014-10-14 03:16 - 00155064 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecpkg.sys
2015-01-17 15:37 - 2014-10-14 03:13 - 00683520 _____ (Microsoft Corporation) C:\windows\system32\termsrv.dll
2015-01-17 15:37 - 2014-10-14 03:12 - 01460736 _____ (Microsoft Corporation) C:\windows\system32\lsasrv.dll
2015-01-17 15:37 - 2014-10-14 03:09 - 00146432 _____ (Microsoft Corporation) C:\windows\system32\msaudite.dll
2015-01-17 15:37 - 2014-10-14 03:07 - 00681984 _____ (Microsoft Corporation) C:\windows\system32\adtschema.dll
2015-01-17 15:37 - 2014-10-14 02:50 - 00022016 _____ (Microsoft Corporation) C:\windows\SysWOW64\secur32.dll
2015-01-17 15:37 - 2014-10-14 02:49 - 00096768 _____ (Microsoft Corporation) C:\windows\SysWOW64\sspicli.dll
2015-01-17 15:37 - 2014-10-14 02:47 - 00146432 _____ (Microsoft Corporation) C:\windows\SysWOW64\msaudite.dll
2015-01-17 15:37 - 2014-10-14 02:46 - 00681984 _____ (Microsoft Corporation) C:\windows\SysWOW64\adtschema.dll
2015-01-17 15:37 - 2014-10-10 01:57 - 03198976 _____ (Microsoft Corporation) C:\windows\system32\win32k.sys
2015-01-17 15:37 - 2014-08-21 07:43 - 01882624 _____ (Microsoft Corporation) C:\windows\system32\msxml3.dll
2015-01-17 15:37 - 2014-08-21 07:40 - 00002048 _____ (Microsoft Corporation) C:\windows\system32\msxml3r.dll
2015-01-17 15:37 - 2014-08-21 07:26 - 01237504 _____ (Microsoft Corporation) C:\windows\SysWOW64\msxml3.dll
2015-01-17 15:37 - 2014-08-21 07:23 - 00002048 _____ (Microsoft Corporation) C:\windows\SysWOW64\msxml3r.dll
2015-01-17 15:37 - 2014-08-12 03:02 - 00878080 _____ (Microsoft Corporation) C:\windows\system32\IMJP10K.DLL
2015-01-17 15:37 - 2014-08-12 02:36 - 00701440 _____ (Microsoft Corporation) C:\windows\SysWOW64\IMJP10K.DLL
2015-01-17 15:37 - 2014-06-18 03:18 - 00692736 _____ (Microsoft Corporation) C:\windows\system32\osk.exe
2015-01-17 15:37 - 2014-06-18 02:51 - 00646144 _____ (Microsoft Corporation) C:\windows\SysWOW64\osk.exe
2015-01-17 15:37 - 2014-06-12 08:52 - 00986560 _____ (Microsoft Corporation) C:\windows\system32\Drivers\dxgkrnl.sys
2015-01-17 15:37 - 2014-06-03 11:02 - 01941504 _____ (Microsoft Corporation) C:\windows\system32\authui.dll
2015-01-17 15:37 - 2014-06-03 11:02 - 00504320 _____ (Microsoft Corporation) C:\windows\system32\msihnd.dll
2015-01-17 15:37 - 2014-06-03 11:02 - 00112064 _____ (Microsoft Corporation) C:\windows\system32\consent.exe
2015-01-17 15:37 - 2014-06-03 10:29 - 01805824 _____ (Microsoft Corporation) C:\windows\SysWOW64\authui.dll
2015-01-17 15:37 - 2014-06-03 10:29 - 00337408 _____ (Microsoft Corporation) C:\windows\SysWOW64\msihnd.dll
2015-01-17 15:37 - 2014-04-12 03:22 - 00095680 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecdd.sys
2015-01-17 15:37 - 2014-04-12 03:19 - 00136192 _____ (Microsoft Corporation) C:\windows\system32\sspicli.dll
2015-01-17 15:37 - 2014-04-12 03:19 - 00031232 _____ (Microsoft Corporation) C:\windows\system32\lsass.exe
2015-01-17 15:37 - 2014-04-12 03:19 - 00029184 _____ (Microsoft Corporation) C:\windows\system32\sspisrv.dll
2015-01-17 15:37 - 2014-04-12 03:19 - 00028160 _____ (Microsoft Corporation) C:\windows\system32\secur32.dll
2015-01-17 15:37 - 2014-04-05 03:47 - 01903552 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tcpip.sys
2015-01-17 15:37 - 2014-04-05 03:47 - 00288192 _____ (Microsoft Corporation) C:\windows\system32\Drivers\FWPKCLNT.SYS
2015-01-17 15:37 - 2014-03-26 15:44 - 02002432 _____ (Microsoft Corporation) C:\windows\system32\msxml6.dll
2015-01-17 15:37 - 2014-03-26 15:41 - 00002048 _____ (Microsoft Corporation) C:\windows\system32\msxml6r.dll
2015-01-17 15:37 - 2014-03-26 15:27 - 01389056 _____ (Microsoft Corporation) C:\windows\SysWOW64\msxml6.dll
2015-01-17 15:37 - 2014-03-26 15:25 - 00002048 _____ (Microsoft Corporation) C:\windows\SysWOW64\msxml6r.dll
2015-01-17 15:37 - 2011-11-17 07:35 - 00395776 _____ (Microsoft Corporation) C:\windows\system32\webio.dll
2015-01-17 15:37 - 2011-11-17 06:35 - 00314880 _____ (Microsoft Corporation) C:\windows\SysWOW64\webio.dll
2015-01-17 15:36 - 2014-12-19 04:06 - 00210432 _____ (Microsoft Corporation) C:\windows\system32\profsvc.dll
2015-01-17 15:36 - 2014-12-06 05:17 - 00303616 _____ (Microsoft Corporation) C:\windows\system32\nlasvc.dll
2015-01-17 15:36 - 2014-12-06 04:50 - 00156672 _____ (Microsoft Corporation) C:\windows\SysWOW64\ncsi.dll
2015-01-17 15:36 - 2014-12-06 04:50 - 00052224 _____ (Microsoft Corporation) C:\windows\SysWOW64\nlaapi.dll
2015-01-17 15:36 - 2014-10-25 02:57 - 00077824 _____ (Microsoft Corporation) C:\windows\system32\packager.dll
2015-01-17 15:36 - 2014-10-25 02:32 - 00067584 _____ (Microsoft Corporation) C:\windows\SysWOW64\packager.dll
2015-01-17 15:36 - 2014-10-18 03:05 - 00861696 _____ (Microsoft Corporation) C:\windows\system32\oleaut32.dll
2015-01-17 15:36 - 2014-10-18 02:33 - 00571904 _____ (Microsoft Corporation) C:\windows\SysWOW64\oleaut32.dll
2015-01-17 15:36 - 2014-10-03 03:12 - 00500224 _____ (Microsoft Corporation) C:\windows\system32\AUDIOKSE.dll
2015-01-17 15:36 - 2014-10-03 03:11 - 00680960 _____ (Microsoft Corporation) C:\windows\system32\audiosrv.dll
2015-01-17 15:36 - 2014-10-03 03:11 - 00440832 _____ (Microsoft Corporation) C:\windows\system32\AudioEng.dll
2015-01-17 15:36 - 2014-10-03 03:11 - 00296448 _____ (Microsoft Corporation) C:\windows\system32\AudioSes.dll
2015-01-17 15:36 - 2014-10-03 03:11 - 00284672 _____ (Microsoft Corporation) C:\windows\system32\EncDump.dll
2015-01-17 15:36 - 2014-10-03 02:44 - 00442880 _____ (Microsoft Corporation) C:\windows\SysWOW64\AUDIOKSE.dll
2015-01-17 15:36 - 2014-10-03 02:44 - 00374784 _____ (Microsoft Corporation) C:\windows\SysWOW64\AudioEng.dll
2015-01-17 15:36 - 2014-10-03 02:44 - 00195584 _____ (Microsoft Corporation) C:\windows\SysWOW64\AudioSes.dll
2015-01-17 15:36 - 2014-09-04 06:23 - 00424448 _____ (Microsoft Corporation) C:\windows\system32\rastls.dll
2015-01-17 15:36 - 2014-09-04 06:04 - 00372736 _____ (Microsoft Corporation) C:\windows\SysWOW64\rastls.dll
2015-01-17 15:36 - 2014-06-18 23:23 - 01943696 _____ (Microsoft Corporation) C:\windows\system32\dfshim.dll
2015-01-17 15:36 - 2014-06-18 23:23 - 01131664 _____ (Microsoft Corporation) C:\windows\SysWOW64\dfshim.dll
2015-01-17 15:36 - 2014-06-18 23:23 - 00156824 _____ (Microsoft Corporation) C:\windows\SysWOW64\mscorier.dll
2015-01-17 15:36 - 2014-06-18 23:23 - 00156312 _____ (Microsoft Corporation) C:\windows\system32\mscorier.dll
2015-01-17 15:36 - 2014-06-18 23:23 - 00081560 _____ (Microsoft Corporation) C:\windows\SysWOW64\mscories.dll
2015-01-17 15:36 - 2014-06-18 23:23 - 00073880 _____ (Microsoft Corporation) C:\windows\system32\mscories.dll
2015-01-17 15:36 - 2014-06-06 11:10 - 00624128 _____ (Microsoft Corporation) C:\windows\system32\qedit.dll
2015-01-17 15:36 - 2014-06-06 10:44 - 00509440 _____ (Microsoft Corporation) C:\windows\SysWOW64\qedit.dll
2015-01-17 15:36 - 2014-05-30 07:45 - 00497152 _____ (Microsoft Corporation) C:\windows\system32\Drivers\afd.sys
2015-01-17 15:36 - 2014-01-29 03:32 - 00484864 _____ (Microsoft Corporation) C:\windows\system32\wer.dll
2015-01-17 15:36 - 2014-01-29 03:06 - 00381440 _____ (Microsoft Corporation) C:\windows\SysWOW64\wer.dll
2015-01-17 15:36 - 2013-07-20 11:33 - 00124112 _____ (Microsoft Corporation) C:\windows\system32\PresentationCFFRasterizerNative_v0300.dll
2015-01-17 15:36 - 2013-07-20 11:33 - 00102608 _____ (Microsoft Corporation) C:\windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2015-01-17 15:35 - 2014-08-23 03:07 - 00404480 _____ (Microsoft Corporation) C:\windows\system32\gdi32.dll
2015-01-17 15:35 - 2014-08-23 02:45 - 00311808 _____ (Microsoft Corporation) C:\windows\SysWOW64\gdi32.dll
2015-01-17 15:35 - 2011-02-23 05:55 - 00090624 _____ (Microsoft Corporation) C:\windows\system32\Drivers\bowser.sys
2015-01-17 15:26 - 2014-07-14 03:02 - 01216000 _____ (Microsoft Corporation) C:\windows\system32\rpcrt4.dll
2015-01-17 15:26 - 2014-07-14 02:40 - 00664064 _____ (Microsoft Corporation) C:\windows\SysWOW64\rpcrt4.dll
2015-01-17 14:57 - 2015-01-17 14:57 - 00000000 ____D () C:\windows\system32\appmgmt
2015-01-17 14:32 - 2012-02-17 07:38 - 01031680 _____ (Microsoft Corporation) C:\windows\system32\rdpcore.dll
2015-01-17 14:32 - 2012-02-17 06:34 - 00826880 _____ (Microsoft Corporation) C:\windows\SysWOW64\rdpcore.dll
2015-01-17 14:32 - 2012-02-17 05:57 - 00023552 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tdtcp.sys
2015-01-17 14:29 - 2015-02-01 17:26 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Local\Hewlett-Packard
2015-01-17 14:24 - 2014-05-14 17:23 - 02477536 _____ (Microsoft Corporation) C:\windows\system32\wuaueng.dll
2015-01-17 14:24 - 2014-05-14 17:23 - 00700384 _____ (Microsoft Corporation) C:\windows\system32\wuapi.dll
2015-01-17 14:24 - 2014-05-14 17:23 - 00581600 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuapi.dll
2015-01-17 14:24 - 2014-05-14 17:23 - 00058336 _____ (Microsoft Corporation) C:\windows\system32\wuauclt.exe
2015-01-17 14:24 - 2014-05-14 17:23 - 00044512 _____ (Microsoft Corporation) C:\windows\system32\wups2.dll
2015-01-17 14:24 - 2014-05-14 17:23 - 00038880 _____ (Microsoft Corporation) C:\windows\system32\wups.dll
2015-01-17 14:24 - 2014-05-14 17:23 - 00036320 _____ (Microsoft Corporation) C:\windows\SysWOW64\wups.dll
2015-01-17 14:24 - 2014-05-14 17:21 - 02620928 _____ (Microsoft Corporation) C:\windows\system32\wucltux.dll
2015-01-17 14:24 - 2014-05-14 17:20 - 00097792 _____ (Microsoft Corporation) C:\windows\system32\wudriver.dll
2015-01-17 14:24 - 2014-05-14 17:17 - 00092672 _____ (Microsoft Corporation) C:\windows\SysWOW64\wudriver.dll
2015-01-17 14:24 - 2014-05-14 09:23 - 00198600 _____ (Microsoft Corporation) C:\windows\system32\wuwebv.dll
2015-01-17 14:24 - 2014-05-14 09:23 - 00179656 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuwebv.dll
2015-01-17 14:24 - 2014-05-14 09:20 - 00036864 _____ (Microsoft Corporation) C:\windows\system32\wuapp.exe
2015-01-17 14:24 - 2014-05-14 09:17 - 00033792 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuapp.exe
2015-01-17 14:23 - 2015-01-19 08:50 - 00111448 _____ () C:\Users\HP ProBook 470 G2\AppData\Local\GDIPFONTCACHEV1.DAT
2015-01-17 14:23 - 2015-01-17 14:23 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Roaming\Intel Corporation
2015-01-17 14:23 - 2015-01-17 14:23 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Roaming\ATI
2015-01-17 14:23 - 2015-01-17 14:23 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Local\ATI
2015-01-17 14:22 - 2015-01-28 14:08 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Roaming\Hewlett-Packard
2015-01-17 14:22 - 2015-01-19 09:59 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Roaming\hpqLog
2015-01-17 14:22 - 2015-01-17 14:22 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Local\Power2Go8
2015-01-17 14:21 - 2015-02-03 16:06 - 00003982 _____ () C:\windows\System32\Tasks\User_Feed_Synchronization-{A3EC1CE9-D038-490D-8706-1AC18333F6A4}
2015-01-17 14:21 - 2015-01-19 14:26 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Local\VirtualStore
2015-01-17 14:21 - 2015-01-18 14:57 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Roaming\Adobe
2015-01-17 14:21 - 2015-01-17 14:21 - 00001432 _____ () C:\Users\HP ProBook 470 G2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-01-17 14:21 - 2015-01-17 14:21 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Local\RemEngine
2015-01-17 14:21 - 2015-01-17 14:21 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Local\Hewlett-Packard_Company
2015-01-17 14:20 - 2015-02-04 09:54 - 00065269 _____ () C:\Users\HP ProBook 470 G2\AppData\Local\BTServer.log
2015-01-17 14:20 - 2015-01-17 14:21 - 00000000 ____D () C:\Users\HP ProBook 470 G2
2015-01-17 14:20 - 2015-01-17 14:20 - 00000180 _____ () C:\windows\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2015-01-17 14:20 - 2015-01-17 14:20 - 00000020 ___SH () C:\Users\HP ProBook 470 G2\ntuser.ini
2015-01-17 14:20 - 2015-01-17 14:20 - 00000000 _SHDL () C:\Users\HP ProBook 470 G2\Vorlagen
2015-01-17 14:20 - 2015-01-17 14:20 - 00000000 _SHDL () C:\Users\HP ProBook 470 G2\Startmenü
2015-01-17 14:20 - 2015-01-17 14:20 - 00000000 _SHDL () C:\Users\HP ProBook 470 G2\Netzwerkumgebung
2015-01-17 14:20 - 2015-01-17 14:20 - 00000000 _SHDL () C:\Users\HP ProBook 470 G2\Lokale Einstellungen
2015-01-17 14:20 - 2015-01-17 14:20 - 00000000 _SHDL () C:\Users\HP ProBook 470 G2\Eigene Dateien
2015-01-17 14:20 - 2015-01-17 14:20 - 00000000 _SHDL () C:\Users\HP ProBook 470 G2\Druckumgebung
2015-01-17 14:20 - 2015-01-17 14:20 - 00000000 _SHDL () C:\Users\HP ProBook 470 G2\Documents\Eigene Musik
2015-01-17 14:20 - 2015-01-17 14:20 - 00000000 _SHDL () C:\Users\HP ProBook 470 G2\Documents\Eigene Bilder
2015-01-17 14:20 - 2015-01-17 14:20 - 00000000 _SHDL () C:\Users\HP ProBook 470 G2\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2015-01-17 14:20 - 2015-01-17 14:20 - 00000000 _SHDL () C:\Users\HP ProBook 470 G2\AppData\Local\Verlauf
2015-01-17 14:20 - 2015-01-17 14:20 - 00000000 _SHDL () C:\Users\HP ProBook 470 G2\AppData\Local\Anwendungsdaten
2015-01-17 14:20 - 2015-01-17 14:20 - 00000000 _SHDL () C:\Users\HP ProBook 470 G2\Anwendungsdaten
2015-01-17 14:20 - 2015-01-17 14:20 - 00000000 __RSH () C:\windows\SysWOW64\Drivers\103C_HP_bNB_ProBook 470 G2_Y5336AN_0U_QCND43650KK_E14WWR4AW602_4A_I2249_SHP_V67.22_BM74 01.03_T140707_W748-1_L407_M8065_J750_7Intel_8651_92.60_#140522_N10EC8168;10ECB723_(G6W69EA#ABD)_XMOBILE_CN10_Z.MRK
2015-01-17 14:20 - 2015-01-17 14:20 - 00000000 __RSH () C:\windows\system32\Drivers\103C_HP_bNB_ProBook 470 G2_Y5336AN_0U_QCND43650KK_E14WWR4AW602_4A_I2249_SHP_V67.22_BM74 01.03_T140707_W748-1_L407_M8065_J750_7Intel_8651_92.60_#140522_N10EC8168;10ECB723_(G6W69EA#ABD)_XMOBILE_CN10_Z.MRK
2015-01-17 14:20 - 2015-01-17 14:20 - 00000000 ____D () C:\Users\HP ProBook 470 G2\Documents\My Bluetooth
2015-01-17 14:20 - 2015-01-17 14:20 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Roaming\DigitalPersona
2015-01-17 14:20 - 2015-01-17 14:20 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Local\DigitalPersona
2015-01-17 14:20 - 2014-09-09 20:22 - 00000000 ___HD () C:\Users\HP ProBook 470 G2\Documents\hp.system.package.metadata
2015-01-17 14:20 - 2009-07-14 05:54 - 00000000 ___RD () C:\Users\HP ProBook 470 G2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-01-17 14:20 - 2009-07-14 05:49 - 00000000 ___RD () C:\Users\HP ProBook 470 G2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2015-01-17 14:17 - 2015-02-04 08:04 - 01451336 _____ () C:\windows\WindowsUpdate.log

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-02-04 09:54 - 2009-07-14 06:08 - 00000006 ____H () C:\windows\Tasks\SA.DAT
2015-02-04 09:54 - 2009-07-14 05:51 - 00090055 _____ () C:\windows\setupact.log
2015-02-04 07:17 - 2009-07-14 05:45 - 00026608 ____H () C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-02-04 07:17 - 2009-07-14 05:45 - 00026608 ____H () C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-02-02 17:13 - 2014-09-09 21:04 - 00700380 _____ () C:\windows\system32\perfh007.dat
2015-02-02 17:13 - 2014-09-09 21:04 - 00149986 _____ () C:\windows\system32\perfc007.dat
2015-02-02 17:13 - 2009-07-14 06:13 - 01622706 _____ () C:\windows\system32\PerfStringBackup.INI
2015-02-01 14:21 - 2014-05-22 13:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP
2015-02-01 14:20 - 2014-09-09 20:51 - 00000000 ____D () C:\windows\Hewlett-Packard
2015-01-30 14:57 - 2010-11-21 04:47 - 00917220 _____ () C:\windows\PFRO.log
2015-01-26 15:29 - 2014-09-09 20:39 - 00000000 ____D () C:\ProgramData\Skype
2015-01-23 08:42 - 2014-09-09 20:21 - 00114410 _____ () C:\windows\DPINST.LOG
2015-01-23 08:38 - 2013-12-03 20:34 - 00000000 ____D () C:\ProgramData\Package Cache
2015-01-19 17:07 - 2014-05-22 13:25 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2015-01-19 14:09 - 2014-09-09 20:41 - 00000000 ____D () C:\ProgramData\Apple
2015-01-19 10:38 - 2009-07-14 04:20 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
2015-01-19 10:27 - 2009-07-14 05:45 - 02363080 _____ () C:\windows\system32\FNTCACHE.DAT
2015-01-19 10:13 - 2014-09-09 20:23 - 00000000 ____D () C:\Program Files (x86)\Realtek
2015-01-19 10:13 - 2014-03-29 00:26 - 00000000 ____D () C:\SWSETUP
2015-01-19 10:08 - 2014-09-09 20:36 - 00000000 ____D () C:\ProgramData\Realtek
2015-01-19 10:05 - 2014-09-09 20:38 - 00674592 _____ (Sunplus) C:\windows\system32\Drivers\SPUVCBv_x64.sys
2015-01-19 10:05 - 2014-09-09 20:38 - 00068984 _____ (Dext5xx) C:\windows\system32\DextUVCB_x64.ax
2015-01-19 10:05 - 2014-09-09 20:38 - 00063864 _____ (Dext5xx) C:\windows\SysWOW64\DextUVCB.ax
2015-01-19 10:05 - 2014-09-09 20:38 - 00004096 _____ (Hewlett-Packard Company) C:\windows\SysWOW64\sigfile.exe
2015-01-19 10:05 - 2014-09-09 20:38 - 00003962 _____ () C:\windows\Dext_21.ini
2015-01-19 10:05 - 2014-09-09 20:38 - 00003958 _____ () C:\windows\Dext_12.ini
2015-01-19 10:05 - 2014-09-09 20:38 - 00003942 _____ () C:\windows\Dext_27.ini
2015-01-19 10:05 - 2014-09-09 20:38 - 00003940 _____ () C:\windows\Dext_25.ini
2015-01-19 10:05 - 2014-09-09 20:38 - 00003876 _____ () C:\windows\Dext_05.ini
2015-01-19 10:05 - 2014-09-09 20:38 - 00003850 _____ () C:\windows\Dext_14.ini
2015-01-19 10:05 - 2014-09-09 20:38 - 00003762 _____ () C:\windows\Dext_10.ini
2015-01-19 10:05 - 2014-09-09 20:38 - 00003752 _____ () C:\windows\Dext_16.ini
2015-01-19 10:05 - 2014-09-09 20:38 - 00003720 _____ () C:\windows\Dext_36.ini
2015-01-19 10:05 - 2014-09-09 20:38 - 00003696 _____ () C:\windows\Dext_22.ini
2015-01-19 10:05 - 2014-09-09 20:38 - 00003688 _____ () C:\windows\Dext_1046.ini
2015-01-19 10:05 - 2014-09-09 20:38 - 00003684 _____ () C:\windows\Dext_08.ini
2015-01-19 10:05 - 2014-09-09 20:38 - 00003640 _____ () C:\windows\Dext_20.ini
2015-01-19 10:05 - 2014-09-09 20:38 - 00003630 _____ () C:\windows\Dext_07.ini
2015-01-19 10:05 - 2014-09-09 20:38 - 00003630 _____ () C:\windows\Dext_06.ini
2015-01-19 10:05 - 2014-09-09 20:38 - 00003598 _____ () C:\windows\Dext_19.ini
2015-01-19 10:05 - 2014-09-09 20:38 - 00003586 _____ () C:\windows\Dext_24.ini
2015-01-19 10:05 - 2014-09-09 20:38 - 00003580 _____ () C:\windows\Dext_02.ini
2015-01-19 10:05 - 2014-09-09 20:38 - 00003536 _____ () C:\windows\Dext_29.ini
2015-01-19 10:05 - 2014-09-09 20:38 - 00003412 _____ () C:\windows\Dext_13.ini
2015-01-19 10:05 - 2014-09-09 20:38 - 00000000 ____D () C:\Program Files (x86)\HP Camera Driver
2015-01-19 10:02 - 2014-09-09 20:19 - 14956922 _____ () C:\ProgramData\hpcsmmsilogs.log
2015-01-19 10:01 - 2014-09-09 20:21 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Security and Protection
2015-01-19 10:01 - 2014-05-22 13:24 - 00000000 ____D () C:\Program Files\Hewlett-Packard
2015-01-19 10:01 - 2014-05-22 13:24 - 00000000 ____D () C:\Program Files (x86)\Hewlett-Packard
2015-01-19 10:00 - 2014-09-09 21:03 - 00000000 ____D () C:\windows\SysWOW64\de
2015-01-19 10:00 - 2014-09-09 21:03 - 00000000 ____D () C:\windows\system32\de
2015-01-19 09:58 - 2014-09-09 20:21 - 00000000 ____D () C:\ProgramData\HPQLOG
2015-01-19 09:51 - 2014-09-09 20:30 - 00001336 _____ () C:\windows\Synaptics.log
2015-01-18 11:08 - 2009-07-14 04:20 - 00000000 ____D () C:\windows\rescache
2015-01-18 10:13 - 2013-12-03 20:37 - 01596986 _____ () C:\windows\SysWOW64\PerfStringBackup.INI
2015-01-18 09:56 - 2009-07-14 04:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared
2015-01-17 21:11 - 2014-05-22 13:25 - 00000000 ____D () C:\ProgramData\Hewlett-Packard
2015-01-17 18:49 - 2009-07-14 04:20 - 00000000 ____D () C:\windows\SysWOW64\Dism
2015-01-17 18:49 - 2009-07-14 04:20 - 00000000 ____D () C:\windows\system32\Dism
2015-01-17 18:49 - 2009-07-14 04:20 - 00000000 ____D () C:\windows\PolicyDefinitions
2015-01-17 18:32 - 2014-09-09 20:41 - 00000000 ____D () C:\ProgramData\CyberLink
2015-01-17 18:12 - 2014-05-22 13:28 - 00001912 _____ () C:\windows\epplauncher.mif
2015-01-17 18:12 - 2014-05-22 13:27 - 00002124 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Security Essentials.lnk
2015-01-17 18:12 - 2014-05-22 13:27 - 00000000 ____D () C:\Program Files\Microsoft Security Client
2015-01-17 18:12 - 2014-05-22 13:27 - 00000000 ____D () C:\Program Files (x86)\Microsoft Security Client
2015-01-17 17:47 - 2009-07-14 06:32 - 00000000 ____D () C:\windows\system32\restore
2015-01-17 17:43 - 2014-09-09 20:41 - 00000000 ____D () C:\Program Files\Windows Journal
2015-01-17 17:43 - 2010-11-21 08:06 - 00000000 ____D () C:\windows\SysWOW64\winrm
2015-01-17 17:43 - 2010-11-21 08:06 - 00000000 ____D () C:\windows\SysWOW64\WCN
2015-01-17 17:43 - 2010-11-21 08:06 - 00000000 ____D () C:\windows\SysWOW64\sysprep
2015-01-17 17:43 - 2010-11-21 08:06 - 00000000 ____D () C:\windows\SysWOW64\slmgr
2015-01-17 17:43 - 2010-11-21 08:06 - 00000000 ____D () C:\windows\SysWOW64\Printing_Admin_Scripts
2015-01-17 17:43 - 2010-11-21 08:06 - 00000000 ____D () C:\windows\system32\winrm
2015-01-17 17:43 - 2010-11-21 08:06 - 00000000 ____D () C:\windows\system32\WCN
2015-01-17 17:43 - 2010-11-21 08:06 - 00000000 ____D () C:\windows\system32\slmgr
2015-01-17 17:43 - 2010-11-21 08:06 - 00000000 ____D () C:\windows\system32\Printing_Admin_Scripts
2015-01-17 17:43 - 2009-07-14 06:37 - 00000000 ____D () C:\windows\DigitalLocker
2015-01-17 17:43 - 2009-07-14 06:32 - 00000000 ____D () C:\Program Files (x86)\Windows Sidebar
2015-01-17 17:43 - 2009-07-14 06:32 - 00000000 ____D () C:\Program Files (x86)\Windows Defender
2015-01-17 17:43 - 2009-07-14 04:20 - 00000000 ____D () C:\windows\SysWOW64\oobe
2015-01-17 17:43 - 2009-07-14 04:20 - 00000000 ____D () C:\windows\SysWOW64\MUI
2015-01-17 17:43 - 2009-07-14 04:20 - 00000000 ____D () C:\windows\system32\sysprep
2015-01-17 17:43 - 2009-07-14 04:20 - 00000000 ____D () C:\windows\system32\oobe
2015-01-17 17:43 - 2009-07-14 04:20 - 00000000 ____D () C:\windows\system32\MUI
2015-01-17 17:43 - 2009-07-14 04:20 - 00000000 ____D () C:\windows\IME
2015-01-17 17:43 - 2009-07-14 04:20 - 00000000 ____D () C:\Program Files\Common Files\System
2015-01-17 15:01 - 2014-09-09 20:40 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Communication and Chat
2015-01-17 14:21 - 2014-09-09 20:39 - 00000000 ___RD () C:\Program Files (x86)\Online Services
2015-01-17 14:21 - 2014-05-22 13:27 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Productivity and Tools
2015-01-17 14:21 - 2014-05-22 13:27 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP Help and Support
2015-01-17 14:21 - 2013-12-04 00:39 - 00000000 _RSHD () C:\SYSTEM.SAV
2015-01-17 14:20 - 2013-12-03 20:29 - 00000000 ____D () C:\windows\Panther
2015-01-17 14:17 - 2009-07-14 04:20 - 00000000 __RHD () C:\Users\Public\Libraries

==================== Files in the root of some directories =======

2015-01-17 14:20 - 2015-02-04 09:54 - 0065269 _____ () C:\Users\HP ProBook 470 G2\AppData\Local\BTServer.log
2015-01-18 11:57 - 2015-01-18 11:57 - 0000057 _____ () C:\ProgramData\Ament.ini
2014-09-09 20:19 - 2015-01-19 10:02 - 14956922 _____ () C:\ProgramData\hpcsmmsilogs.log
2014-09-09 20:48 - 2014-09-09 20:48 - 1262966 _____ () C:\ProgramData\hpdam_install_log.txt
2014-09-09 20:47 - 2014-09-09 20:48 - 0544208 _____ () C:\ProgramData\HPFileSanitizer_Install_Log.txt

Some content of TEMP:
====================
C:\Users\HP ProBook 470 G2\AppData\Local\Temp\Extract.exe
C:\Users\HP ProBook 470 G2\AppData\Local\Temp\Foxit PhantomPDF Updater.exe
C:\Users\HP ProBook 470 G2\AppData\Local\Temp\SP68157.exe
C:\Users\HP ProBook 470 G2\AppData\Local\Temp\SP69843.exe
C:\Users\HP ProBook 470 G2\AppData\Local\Temp\SP69888.exe
C:\Users\HP ProBook 470 G2\AppData\Local\Temp\SP69896.exe
C:\Users\HP ProBook 470 G2\AppData\Local\Temp\SP69926.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-02-03 08:55

==================== End Of Log ============================
         
 
--- --- ---

--- --- ---
         

dann kümmern wir uns mal um die Adware

Schritt 1:
Downloade Dir bitte AdwCleaner auf deinen Desktop.

• Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
• Starte die AdwCleaner.exe mit einem Doppelklick.
• Stimme den Nutzungsbedingungen zu.
• Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
  • "Tracing" Schlüssel löschen
  • Winsock Einstellungen zurücksetzen
  • Proxy Einstellungen zurücksetzen
  • Internet Explorer Richtlinien zurücksetzen
  • Chrome Richtlinien zurücksetzen
  • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
• Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
• Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
• Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
• Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Schritt 2:
Lade dir TFC (TempFileCleaner von Oldtimer) herunter und speichere es auf den Desktop.

• Öffne die TFC.exe.
  Vista und Win 7 User mit Rechtsklick "als Administrator starten".
• Schließe alle anderen Programme.
• Drücke auf den Button Start.
• Falls du zu einem Neustart aufgefordert wirst, bestätige diesen.

Schritt 3:
Downloade Dir bitte Malwarebytes Anti-Malware

• Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
• Starte Malwarebytes' Anti-Malware (MBAM).
• Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
• Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
• Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
• Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
• Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
• Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

Schritt 4:

je nach Systemgröße kann ESET mehrere Stunden scannen also Zeit für einen


ESET Online Scanner

• Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
• Lade und starte Eset Online Scanner
• Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
• Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
• Klicke auf Starten.
• Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
• Klicke am Ende des Suchlaufs auf Fertig stellen.
• Schließe das Fenster von ESET.
• Explorer öffnen.
• C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
• Logfile hier posten.
• Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
• Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Schritt 5:

erstelle ein neues FRST Logfile und poste es hier

Hier die 3 Dateien.

AdwCleaner

AdwCleaner Logfile:

# AdwCleaner v4.109 - Bericht erstellt am 04/02/2015 um 10:18:22
# Aktualisiert 24/01/2015 von Xplode
# Database : 2015-01-24.3 [Local]
# Betriebssystem : Windows 7 Professional Service Pack 1 (64 bits)
# Benutzername : HP ProBook 470 G2 - HPPROBOOK
# Gestartet von : G:\AdwCleaner_4.109.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****


***** [ Tasks ] *****


***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8FFE}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8FFE}
Schlüssel Gelöscht : HKCU\Software\OCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A2D81E70-2A98-4A08-A628-94388B063C5E}
Daten Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyOverride] - *.local

***** [ Browser ] *****

-\\ Internet Explorer v11.0.9600.17496


-\\ Mozilla Firefox v35.0.1 (x86 de)


-\\ Opera v27.0.1689.66


*************************

AdwCleaner[R0].txt - [1501 octets] - [04/02/2015 10:16:30]
AdwCleaner[S0].txt - [1368 octets] - [04/02/2015 10:18:22]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [1428 octets] ##########
         

--- --- ---


[/CODE


Malwarebytes Anti-Malware

 Malwarebytes Anti-Malware 
www.malwarebytes.org

Suchlauf Datum: 04.02.2015
Suchlauf-Zeit: 10:30:45
Logdatei: mbam.txt
Administrator: Ja

Version: 2.00.4.1028
Malware Datenbank: v2015.02.04.04
Rootkit Datenbank: v2015.02.03.01
Lizenz: Testversion
Malware Schutz: Aktiviert
Bösartiger Webseiten Schutz: Aktiviert
Selbstschutz: Deaktiviert

Betriebssystem: Windows 7 Service Pack 1
CPU: x64
Dateisystem: NTFS
Benutzer: HP ProBook 470 G2

Suchlauf-Art: Bedrohungs-Suchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 347023
Verstrichene Zeit: 7 Min, 18 Sek

Speicher: Aktiviert
Autostart: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Heuristik: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

Prozesse: 0
(Keine schädliche Elemente erkannt)

Module: 0
(Keine schädliche Elemente erkannt)

Registrierungsschlüssel: 0
(Keine schädliche Elemente erkannt)

Registrierungswerte: 0
(Keine schädliche Elemente erkannt)

Registrierungsdaten: 0
(Keine schädliche Elemente erkannt)

Ordner: 0
(Keine schädliche Elemente erkannt)

Dateien: 1
Trojan.Winlock.Gen, C:\Users\HP ProBook 470 G2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ja.lnk, In Quarantäne, [0470be5c3f4b979f76ea466b57ad52ae], 

Physische Sektoren: 0
(Keine schädliche Elemente erkannt)


(end)
         

ESET
Allerdings hat das Programm hier nur die Bedrohungen gefunden.
Gelösct konnten sie nicht. Diese Auswahl gab es nicht.

ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7623
# api_version=3.0.2
# EOSSerial=18d51e741702914481d2ae45ad132e06
# engine=22302
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2015-02-04 12:17:59
# local_time=2015-02-04 01:17:59 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1031
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode_1='Microsoft Security Essentials'
# compatibility_mode=5895 16777213 100 100 1541150 116365889 0 0
# scanned=190055
# found=3
# cleaned=0
# scan_time=9120
sh=3D149CC72FF22FE3ABEA2CF1D5CEE07D73D407C2 ft=1 fh=c71c0011347a6bb2 vn="Win32/TrojanDownloader.Autoit.NUX Trojaner" ac=I fn="C:\FRST\Quarantine\C\Users\HP ProBook 470 G2\AppData\Roaming\autostarter.exe.xBAD"
sh=4AED2FD1CF2AF29BDE00F0DD01AAB8A4549F39EC ft=1 fh=45a5f1915d8949ed vn="Mehrere Bedrohungen" ac=I fn="C:\FRST\Quarantine\C\Users\HP ProBook 470 G2\AppData\Roaming\loadit.exe.xBAD"
sh=6E4AF9FF6DC0F0A8474CF040D5AFDEE7E8102978 ft=1 fh=6244bdc7933fffc8 vn="Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung" ac=I fn="C:\Users\HP ProBook 470 G2\Downloads\FileZilla - CHIP-Installer.exe"
         

Und die neue FST-Datei

FRST Logfile:

	
	
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 01-02-2015
Ran by HP ProBook 470 G2 (administrator) on HPPROBOOK on 04-02-2015 13:25:37
Running from H:\
Loaded Profiles: HP ProBook 470 G2 (Available profiles: HP ProBook 470 G2)
Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(DigitalPersona, Inc.) C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpHostW.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Hewlett-Packard Company) C:\Windows\System32\hpservice.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Validity Sensors, Inc.) C:\Windows\System32\vcsFPService.exe
(DigitalPersona, Inc.) C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpCardEngine.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
() C:\Program Files (x86)\Akademische Arbeitsgemeinschaft\AAVUpdateManager\aavus.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Realtek Semiconductor Corporation) C:\Program Files (x86)\Realtek\REALTEK Bluetooth\AvrcpService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
() C:\Program Files (x86)\Realtek\REALTEK Bluetooth\BTDevMgr.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe
() C:\Program Files (x86)\Hewlett-Packard\HP Theft Recovery\CtService.exe
(Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\File Sanitizer\HPFSService.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
() C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe
(Realtek Semiconductor Corporation) C:\Program Files (x86)\Realtek\REALTEK Bluetooth\RtkBleServ.exe
(Western Digital Technologies, Inc.) C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Hewlett-Packard Development Company) C:\Program Files (x86)\Hewlett-Packard\HP Device Access Manager\HP.ProtectTools.DeviceAccessManager.ServiceHost.exe
(DigitalPersona, Inc.) C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpAgent.exe
(Western Digital Technologies, Inc.) C:\Program Files (x86)\Western Digital\WD SmartWare\WDBackupEngine.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
(Intel Corporation) C:\Windows\System32\igfxTray.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Realtek Semiconductor Corporation) C:\Program Files (x86)\Realtek\REALTEK Bluetooth\BTServer.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Hewlett-Packard Co.) C:\Program Files\HP\HP Officejet 6600\Bin\ScanToPCActivationApp.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\QLBController.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP 3D DriveGuard\AccelerometerSt.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\HPConnectionManager.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\hpCMSrv.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe
(Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exe
(ESET) C:\Program Files (x86)\ESET\ESET Online Scanner\OnlineScannerApp.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [287592 2013-09-27] (Intel Corporation)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7574896 2014-04-16] (Realtek Semiconductor)
HKLM\...\Run: [BtServer] => C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTServer.exe [226008 2014-07-03] (Realtek Semiconductor Corporation)
HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [1331288 2014-08-22] (Microsoft Corporation)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2863344 2015-01-19] (Synaptics Incorporated)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [169768 2015-01-27] (Apple Inc.)
HKLM-x32\...\Run: [QLBController] => C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\QLBController.exe [419512 2014-04-01] (Hewlett-Packard Company)
HKLM-x32\...\Run: [HPConnectionManager] => c:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\HPCMDelayStart.exe [185144 2014-04-09] (Hewlett-Packard Development Company, L.P.)
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [292848 2014-04-10] (Intel Corporation)
HKLM-x32\...\Run: [StartCCC] => c:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [767200 2014-04-07] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [AccelerometerSysTrayApplet] => C:\Program Files (x86)\Hewlett-Packard\HP 3D DriveGuard\AccelerometerST.exe [126240 2014-04-01] (Hewlett-Packard Company)
HKLM-x32\...\Run: [HP Camera Driver_Monitor] => "C:\Program Files (x86)\HP Camera Driver\monitor.exe"
HKLM-x32\...\Run: [YouCam Mirage] => "c:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe"
HKLM-x32\...\Run: [YouCam Tray] => c:\Program Files (x86)\CyberLink\YouCam\YouCamTray.exe [167488 2013-09-16] (CyberLink Corp.)
HKLM-x32\...\Run: [CLMLServer_For_P2G8] => c:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe [111576 2013-08-05] (CyberLink)
HKLM-x32\...\Run: [CLVirtualDrive] => c:\Program Files (x86)\CyberLink\Power2Go8\VirtualDrive.exe [490760 2013-08-07] (CyberLink Corp.)
HKLM-x32\...\Run: [HP File Sanitizer] => C:\Program Files (x86)\Hewlett-Packard\File Sanitizer\Coreshredder.exe [2213592 2014-02-05] (Hewlett-Packard)
HKLM-x32\...\Run: [DriveUtilitiesHelper] => C:\Program Files (x86)\Western Digital\WD Utilities\WDDriveUtilitiesHelper.exe [1852264 2014-05-23] (Western Digital Technologies, Inc.)
HKLM-x32\...\Run: [WD Drive Unlocker] => C:\Program Files (x86)\Western Digital\WD Security\WDDriveAutoUnlock.exe [1694048 2014-10-23] (Western Digital Technologies, Inc.)
HKLM-x32\...\Run: [WD Quick View] => C:\Program Files (x86)\Western Digital\WD Quick View\WDDMStatus.exe [5562736 2014-12-02] (Western Digital Technologies, Inc.)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard)
HKLM-x32\...\Run: [] => [X]
HKLM\...\RunOnce: [NCPluginUpdater] => C:\Program Files (x86)\Hewlett-Packard\HP Health Check\ActiveCheck\product_line\NCPluginUpdater.exe [21720 2015-01-28] (Hewlett-Packard)
HKLM\...\Winlogon: [Userinit] C:\Windows\system32\userinit.exe,C:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DPAgent.exe,
HKU\S-1-5-21-3292273767-2171407329-2624488104-1001\...\Run: [HP Officejet 6600 (NET)] => C:\Program Files\HP\HP Officejet 6600\Bin\ScanToPCActivationApp.exe [2573416 2012-10-17] (Hewlett-Packard Co.)
Lsa: [Notification Packages] DPPassFilter scecli
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\ISCTSystray.lnk
ShortcutTarget: ISCTSystray.lnk -> C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTsysTray8.exe (Intel Corporation)
Startup: C:\Users\HP ProBook 470 G2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\An OneNote senden.lnk
ShortcutTarget: An OneNote senden.lnk -> C:\Program Files\Microsoft Office 15\root\office15\ONENOTEM.EXE (Microsoft Corporation)
Startup: C:\Users\HP ProBook 470 G2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\AutoStarter.lnk
ShortcutTarget: AutoStarter.lnk -> C:\Users\HP ProBook 470 G2\AppData\Roaming\autostarter.exe (No File)
ShellIconOverlayIdentifiers-x32: [ SkyDrivePro1 (ErrorConflict)] -> {8BA85C75-763B-4103-94EB-9470F12FE0F7} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ SkyDrivePro2 (SyncInProgress)] -> {CD55129A-B1A1-438E-A425-CEBC7DC684EE} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ SkyDrivePro3 (InSync)] -> {E768CD3B-BDDC-436D-9C13-E1B39CA257B1} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL (Microsoft Corporation)
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://g.uk.msn.com/HPCOM14/10
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://g.uk.msn.com/HPCOM14/10
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.uk.msn.com/HPCOM14/10
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.uk.msn.com/HPCOM14/10
HKU\S-1-5-21-3292273767-2171407329-2624488104-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://g.uk.msn.com/HPCOM14/10
HKU\S-1-5-21-3292273767-2171407329-2624488104-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.uk.msn.com/HPCOM14/10
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll (Hewlett-Packard)
BHO-x32: HP File Sanitizer -> {3134413B-49B4-425C-98A5-893C1F195601} -> C:\Program Files (x86)\Hewlett-Packard\File Sanitizer\IEBHO.dll (Hewlett-Packard)
BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\Office15\OCHelper.dll (Microsoft Corporation)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office 15\root\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll (Hewlett-Packard)
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL (Microsoft Corporation)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\HP ProBook 470 G2\AppData\Roaming\Mozilla\Firefox\Profiles\a6bnzvty.default
FF DefaultSearchEngine: DuckDuckGo
FF Homepage: https://duckduckgo.com/
FF Plugin: @adobe.com/FlashPlayer -> C:\windows\system32\Macromed\Flash\NPSWF64_16_0_0_296.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_296.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/pdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll ()
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.fdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll ()
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: digitalpersona.com/ChromeDPAgent -> C:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\BrowserExt\components\npChromeDPAgent.dll (DigitalPersona, Inc.)
FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2015-01-29]
FF HKLM-x32\...\Firefox\Extensions: [dpmaxz_ng@jetpack] - C:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\BrowserExt\dpchrome
FF Extension: HP Client Security Manager - C:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\BrowserExt\dpchrome [2015-01-19]

Chrome: 
=======
CHR HKLM-x32\...\Chrome\Extension: [ncffjdbbodifgldkcbhmiiljfcnbgjab] - C:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\BrowserExt\dpchrome.crx [2014-06-26]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AAV UpdateService; C:\Program Files (x86)\Akademische Arbeitsgemeinschaft\AAVUpdateManager\aavus.exe [128296 2008-10-24] ()
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [77128 2015-01-19] (Apple Inc.)
R2 AvrcpService; C:\Program Files (x86)\REALTEK\Realtek Bluetooth\AvrcpService.exe [43224 2014-07-03] (Realtek Semiconductor Corporation)
R2 BTDevManager; C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTDevMgr.exe [98816 2014-10-11] () [File not signed]
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390176 2014-07-14] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1767520 2014-07-14] (Microsoft Corporation)
R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2449592 2014-11-12] (Microsoft Corporation)
R2 CtAgentService; C:\Program Files (x86)\Hewlett-Packard\HP Theft Recovery\CtService.exe [7168 2014-03-31] () [File not signed]
R2 DpHost; C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpHostW.exe [500048 2014-07-28] (DigitalPersona, Inc.)
S3 FLCDLOCK; c:\windows\SysWOW64\flcdlock.exe [567608 2013-11-20] (Hewlett-Packard Company)
S3 FLEXnet Licensing Service; C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [654848 2015-01-18] (Macrovision Europe Ltd.) [File not signed]
R2 HP Support Assistant Service; C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe [92160 2014-01-13] (Hewlett-Packard Company) [File not signed]
R2 HpDamServiceHost; c:\Program Files (x86)\Hewlett-Packard\HP Device Access Manager\HP.ProtectTools.DeviceAccessManager.ServiceHost.exe [18232 2013-11-15] (Hewlett-Packard Development Company)
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15720 2013-09-27] (Intel Corporation)
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [282072 2014-03-11] (Intel Corporation)
R2 Intel(R) Capability Licensing Service Interface; c:\Program Files\Intel\iCLS Client\HeciServer.exe [747520 2013-08-27] (Intel(R) Corporation) [File not signed]
S3 Intel(R) Capability Licensing Service TCP IP Interface; c:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [828376 2013-08-27] (Intel(R) Corporation)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [131544 2013-12-10] (Intel Corporation)
R2 ISCTAgent; c:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe [198120 2013-09-07] ()
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-12-10] (Intel Corporation)
R2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1871160 2014-11-21] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [969016 2014-11-21] (Malwarebytes Corporation)
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [23784 2014-08-22] (Microsoft Corporation)
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [368624 2014-08-22] (Microsoft Corporation)
R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [290520 2014-01-08] (Realtek Semiconductor)
R2 RtkBleServ; C:\Program Files (x86)\REALTEK\Realtek Bluetooth\RtkBleServ.exe [50392 2014-07-03] (Realtek Semiconductor Corporation)
R2 WDBackup; C:\Program Files (x86)\Western Digital\WD SmartWare\WDBackupEngine.exe [1042808 2014-12-02] (Western Digital Technologies, Inc.)
R2 WDDriveService; C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe [296312 2014-05-23] (Western Digital Technologies, Inc.)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-12-04] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R0 amdkmpfd; C:\Windows\System32\drivers\amdkmpfd.sys [36608 2013-12-13] (Advanced Micro Devices, Inc.)
R1 CLVirtualDrive; C:\Windows\System32\DRIVERS\CLVirtualDrive.sys [90608 2011-12-27] (CyberLink)
S3 DAMDrv; C:\Windows\System32\DRIVERS\DAMDrv64.sys [65752 2013-10-07] (Hewlett-Packard Company)
R0 iaStorF; C:\Windows\System32\drivers\iaStorF.sys [28008 2013-09-27] (Intel Corporation)
R3 ikbevent; C:\Windows\System32\DRIVERS\ikbevent.sys [21408 2013-08-09] ()
R3 imsevent; C:\Windows\System32\DRIVERS\imsevent.sys [21920 2013-08-09] ()
R3 INETMON; C:\windows\System32\Drivers\INETMON.sys [29088 2013-08-08] ()
R3 ISCT; C:\Windows\system32\drivers\ISCTD64.sys [46568 2013-08-08] ()
R3 MBAMProtector; C:\windows\system32\drivers\mbam.sys [25816 2014-11-21] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\windows\system32\drivers\MBAMSwissArmy.sys [129752 2015-02-04] (Malwarebytes Corporation)
R3 MBAMWebAccessControl; C:\windows\system32\drivers\mwac.sys [63704 2014-11-21] (Malwarebytes Corporation)
R3 MEIx64; C:\Windows\system32\drivers\TeeDriverx64.sys [100312 2013-12-10] (Intel Corporation)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [269008 2014-07-17] (Microsoft Corporation)
R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [125584 2014-07-17] (Microsoft Corporation)
R0 PinFile; C:\Windows\System32\DRIVERS\PinFile.sys [49856 2014-02-03] (WinMagic Inc.)
S3 RtkAvrcp; C:\Windows\system32\drivers\RtkAvrcp.sys [61152 2012-12-28] (Realtek Semiconductor Corporation)
S3 RtkBtFilter; C:\Windows\System32\DRIVERS\RtkBtfilter.sys [585944 2014-12-31] (Realtek Semiconductor Corporation)
S3 RTSPER; C:\Windows\System32\DRIVERS\RtsPer.sys [476888 2014-03-21] (Realsil Semiconductor Corporation)
R3 RTWlanE; C:\Windows\System32\DRIVERS\rtwlane.sys [3603672 2015-01-19] (Realtek Semiconductor Corporation                           )
R0 SDDisk2K; C:\Windows\System32\DRIVERS\SDDisk2K.sys [228544 2014-02-03] (WinMagic Inc.)
R0 SDDToki; C:\Windows\System32\DRIVERS\SDDToki.sys [131264 2014-02-03] (WinMagic Inc.)
S3 SmbDrv; C:\Windows\system32\drivers\Smb_driver_AMDASF.sys [30448 2014-04-08] (Synaptics Incorporated)
S3 SmbDrvI; C:\Windows\system32\drivers\Smb_driver_Intel.sys [31472 2014-04-08] (Synaptics Incorporated)
R3 SPUVCbv; C:\Windows\System32\Drivers\SPUVCbv_x64.sys [674592 2015-01-19] (Sunplus)

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-02-04 17:19 - 2015-02-04 13:25 - 00000000 ____D () C:\FRST
2015-02-04 13:23 - 2015-02-04 13:24 - 01660616 _____ (ESET) C:\Users\HP ProBook 470 G2\Downloads\eset_smart_security_live_installer_.exe
2015-02-04 10:41 - 2015-02-04 10:41 - 00000000 ____D () C:\Program Files (x86)\ESET
2015-02-04 10:40 - 2015-02-04 10:40 - 02347384 _____ (ESET) C:\Users\HP ProBook 470 G2\Downloads\esetsmartinstaller_deu.exe
2015-02-04 10:29 - 2015-02-04 13:16 - 00129752 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\MBAMSwissArmy.sys
2015-02-04 10:29 - 2015-02-04 10:29 - 00001113 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2015-02-04 10:29 - 2015-02-04 10:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2015-02-04 10:29 - 2015-02-04 10:29 - 00000000 ____D () C:\ProgramData\Malwarebytes
2015-02-04 10:29 - 2015-02-04 10:29 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2015-02-04 10:29 - 2014-11-21 06:14 - 00093400 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbamchameleon.sys
2015-02-04 10:29 - 2014-11-21 06:14 - 00063704 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mwac.sys
2015-02-04 10:29 - 2014-11-21 06:14 - 00025816 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbam.sys
2015-02-04 10:26 - 2015-02-04 10:26 - 00448512 _____ (OldTimer Tools) C:\Users\HP ProBook 470 G2\Downloads\TFC.exe
2015-02-04 10:26 - 2015-02-04 10:26 - 00448512 _____ (OldTimer Tools) C:\Users\HP ProBook 470 G2\Desktop\TFC.exe
2015-02-04 10:16 - 2015-02-04 10:18 - 00000000 ____D () C:\AdwCleaner
2015-02-04 09:54 - 2015-02-04 10:20 - 00001078 _____ () C:\windows\system32dbgraw.bmp
2015-02-04 07:38 - 2015-02-04 07:38 - 00001760 _____ () C:\Users\Public\Desktop\iTunes.lnk
2015-02-04 07:38 - 2015-02-04 07:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2015-02-04 07:37 - 2015-02-04 07:38 - 00000000 ____D () C:\ProgramData\E1864A66-75E3-486a-BD95-D1B7D99A84A7
2015-02-04 07:37 - 2015-02-04 07:38 - 00000000 ____D () C:\Program Files\iTunes
2015-02-04 07:37 - 2015-02-04 07:37 - 00000000 ____D () C:\Program Files\iPod
2015-02-04 07:37 - 2015-02-04 07:37 - 00000000 ____D () C:\Program Files (x86)\iTunes
2015-02-01 17:26 - 2015-02-01 19:29 - 00000380 _____ () C:\windows\Tasks\HPCeeScheduleForHP ProBook 470 G2.job
2015-02-01 17:26 - 2015-02-01 17:26 - 00003258 _____ () C:\windows\System32\Tasks\HPCeeScheduleForHP ProBook 470 G2
2015-01-30 14:58 - 2015-02-04 10:19 - 00008192 _____ () C:\windows\SysWOW64\WDPABKP.dat
2015-01-30 07:15 - 2015-01-30 07:15 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Local\CrashDumps
2015-01-29 16:42 - 2015-01-29 16:42 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Roaming\SMSout
2015-01-29 11:23 - 2015-01-29 11:23 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2015-01-29 11:08 - 2015-01-30 14:22 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Roaming\SuperMailer
2015-01-29 11:07 - 2015-01-29 12:43 - 00000000 ____D () C:\Program Files\SuperMailer
2015-01-29 11:07 - 2015-01-29 11:07 - 00000804 _____ () C:\Users\HP ProBook 470 G2\Desktop\SuperMailer.lnk
2015-01-29 11:07 - 2015-01-29 11:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SuperMailer
2015-01-26 17:17 - 2015-01-26 17:17 - 00000000 __SHD () C:\Users\HP ProBook 470 G2\AppData\Local\EmieBrowserModeList
2015-01-26 15:54 - 2015-02-04 10:43 - 00000000 ____D () C:\Users\HP ProBook 470 G2\Documents\UseNeXT
2015-01-26 15:54 - 2015-02-04 08:04 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Roaming\UseNeXT
2015-01-26 15:54 - 2015-01-26 15:54 - 00001868 _____ () C:\Users\HP ProBook 470 G2\Desktop\UseNeXT by Tangysoft.lnk
2015-01-26 15:54 - 2015-01-26 15:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\UseNeXT
2015-01-26 15:54 - 2015-01-26 15:54 - 00000000 ____D () C:\Program Files (x86)\UseNeXT
2015-01-26 15:53 - 2015-01-26 15:54 - 05270008 _____ (Tangysoft Ltd. ) C:\Users\HP ProBook 470 G2\Downloads\UseNeXTSetup_5.64.exe
2015-01-26 15:29 - 2015-01-30 09:23 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Roaming\Skype
2015-01-26 15:29 - 2015-01-26 15:29 - 00002699 _____ () C:\Users\Public\Desktop\Skype.lnk
2015-01-26 15:29 - 2015-01-26 15:29 - 00000000 ___RD () C:\Program Files (x86)\Skype
2015-01-26 15:29 - 2015-01-26 15:29 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Local\Skype
2015-01-26 15:29 - 2015-01-26 15:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2015-01-26 15:28 - 2015-01-26 15:28 - 01548384 _____ (Skype Technologies S.A.) C:\Users\HP ProBook 470 G2\Downloads\SkypeSetup.exe
2015-01-25 12:46 - 2015-01-25 12:46 - 00000000 __RHD () C:\MSOCache
2015-01-25 12:29 - 2015-01-25 12:29 - 00000329 _____ () C:\Users\HP ProBook 470 G2\Desktop\HP Druckerdiagnosetools.url
2015-01-24 10:34 - 2015-01-24 10:34 - 04372480 _____ () C:\Users\HP ProBook 470 G2\Downloads\fritz.wlan_repeater_ng_68.04.88.image
2015-01-23 08:41 - 2015-01-23 08:41 - 00000000 ____D () C:\Program Files\Western Digital
2015-01-23 08:41 - 2015-01-23 08:41 - 00000000 ____D () C:\Program Files\Common Files\Western Digital
2015-01-22 16:05 - 2015-01-22 16:05 - 00001665 _____ () C:\Users\HP ProBook 470 G2\Desktop\Mitgliederliste_V2015_V1 - Verknüpfung.lnk
2015-01-22 16:05 - 2015-01-22 16:05 - 00001572 _____ () C:\Users\HP ProBook 470 G2\Desktop\zugang_werder - Verknüpfung.lnk
2015-01-22 16:05 - 2015-01-22 16:05 - 00001569 _____ () C:\Users\HP ProBook 470 G2\Desktop\Zugangsdaten - Verknüpfung.lnk
2015-01-22 16:04 - 2015-01-22 16:04 - 00001606 _____ () C:\Users\HP ProBook 470 G2\Desktop\Anmeldungen_2015 - Verknüpfung.lnk
2015-01-22 12:05 - 2015-01-22 12:05 - 00001179 _____ () C:\Users\Public\Desktop\WD Security.lnk
2015-01-22 12:03 - 2015-01-22 12:03 - 00000000 ____D () C:\windows\System32\Tasks\Western Digital
2015-01-22 12:01 - 2015-01-22 12:01 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Local\Western Digital
2015-01-22 11:57 - 2015-01-22 11:57 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Local\Western_Digital_Technolog
2015-01-22 11:56 - 2015-01-23 08:42 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Western Digital
2015-01-22 11:56 - 2015-01-23 08:41 - 00000000 ____D () C:\Program Files (x86)\Western Digital
2015-01-22 11:56 - 2015-01-22 11:56 - 00001124 _____ () C:\Users\Public\Desktop\WD Drive Utilities.lnk
2015-01-22 11:55 - 2015-01-23 08:41 - 00000000 ____D () C:\ProgramData\Western Digital
2015-01-19 17:17 - 2015-01-19 17:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FileZilla FTP Client
2015-01-19 17:17 - 2015-01-19 17:17 - 00000000 ____D () C:\Program Files (x86)\FileZilla FTP Client
2015-01-19 17:16 - 2015-01-19 17:17 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Roaming\FileZilla
2015-01-19 17:16 - 2015-01-19 17:16 - 06381120 _____ (Tim Kosse) C:\Users\HP ProBook 470 G2\Downloads\FileZilla_3.10.0.2_win32-setup.exe
2015-01-19 17:16 - 2015-01-19 17:16 - 00000000 ____D () C:\Users\HP ProBook 470 G2\Downloads\FileZilla_3.10.0.1_win32
2015-01-19 17:14 - 2015-01-19 17:14 - 09511863 _____ () C:\Users\HP ProBook 470 G2\Downloads\FileZilla_3.10.0.1_win32.zip
2015-01-19 17:13 - 2015-01-19 17:13 - 01179936 _____ () C:\Users\HP ProBook 470 G2\Downloads\FileZilla - CHIP-Installer.exe
2015-01-19 17:07 - 2015-01-19 17:08 - 00000000 ____D () C:\Program Files (x86)\Ipswitch
2015-01-19 17:07 - 2015-01-19 17:07 - 00000000 ____D () C:\windows\SysWOW64\E177E04D548C4006A465EEB92D3DE021
2015-01-19 17:07 - 2005-02-28 12:37 - 00606293 ____N (Stardock.Net, Inc) C:\windows\SysWOW64\wbocx.ocx
2015-01-19 17:07 - 2005-02-28 12:37 - 00050688 ____N (Stardock.Net, Inc) C:\windows\SysWOW64\wbhelp2.dll
2015-01-19 17:07 - 2004-12-06 14:26 - 00348160 ____N (Microsoft Corporation) C:\windows\SysWOW64\msvcr71.dll
2015-01-19 17:07 - 2004-09-17 11:09 - 01060864 ____N (Microsoft Corporation) C:\windows\SysWOW64\MFC71.dll
2015-01-19 17:07 - 2004-02-12 17:16 - 00499712 ____N (Microsoft Corporation) C:\windows\SysWOW64\msvcp71.dll
2015-01-19 17:06 - 2015-01-19 17:08 - 00000023 _____ () C:\windows\setup.log
2015-01-19 17:06 - 2015-01-19 17:06 - 09893377 _____ (InstallShield Software Corporation) C:\Users\HP ProBook 470 G2\Downloads\WSFTP_HomeT40_Install.exe
2015-01-19 16:57 - 2015-02-03 17:08 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Roaming\vlc
2015-01-19 16:55 - 2015-01-29 11:31 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Roaming\Foxit Software
2015-01-19 16:52 - 2015-01-19 16:52 - 00001077 _____ () C:\Users\Public\Desktop\VLC media player.lnk
2015-01-19 16:52 - 2015-01-19 16:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2015-01-19 16:52 - 2015-01-19 16:52 - 00000000 ____D () C:\Program Files (x86)\VideoLAN
2015-01-19 16:51 - 2015-01-19 16:51 - 24743106 _____ () C:\Users\HP ProBook 470 G2\Downloads\vlc-2.1.5-win32.exe
2015-01-19 14:39 - 2015-01-28 13:58 - 00701616 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe
2015-01-19 14:39 - 2015-01-28 13:58 - 00071344 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-01-19 14:39 - 2015-01-19 14:39 - 00000000 ____D () C:\windows\system32\Macromed
2015-01-19 14:39 - 2015-01-19 14:39 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Roaming\Macromedia
2015-01-19 14:39 - 2015-01-19 14:39 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Local\Macromedia
2015-01-19 14:22 - 2015-01-19 14:22 - 00002297 _____ () C:\Users\Public\Desktop\Vereine und Ehrenamt.LNK
2015-01-19 14:22 - 2015-01-19 14:22 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Roaming\AAV
2015-01-19 14:22 - 2015-01-19 14:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\InfoBibliothek 2
2015-01-19 14:11 - 2015-01-21 17:13 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Roaming\Apple Computer
2015-01-19 14:11 - 2015-01-19 14:11 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Local\Apple Computer
2015-01-19 14:11 - 2012-10-03 16:14 - 00033240 _____ (GEAR Software Inc.) C:\windows\system32\Drivers\GEARAspiWDM.sys
2015-01-19 14:09 - 2015-02-04 07:37 - 00000000 ____D () C:\Program Files\Common Files\Apple
2015-01-19 14:09 - 2015-01-19 14:09 - 00002519 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk
2015-01-19 14:09 - 2015-01-19 14:09 - 00000000 ____D () C:\windows\System32\Tasks\Apple
2015-01-19 14:09 - 2015-01-19 14:09 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Local\Apple
2015-01-19 14:09 - 2015-01-19 14:09 - 00000000 ____D () C:\ProgramData\Apple Computer
2015-01-19 14:09 - 2015-01-19 14:09 - 00000000 ____D () C:\Program Files (x86)\Apple Software Update
2015-01-19 14:06 - 2015-01-19 14:08 - 122418480 _____ (Apple Inc.) C:\Users\HP ProBook 470 G2\Downloads\iTunes64Setup.exe
2015-01-19 10:32 - 2015-01-19 10:32 - 00000000 ____D () C:\HPSDM
2015-01-19 10:14 - 2015-01-19 10:13 - 03603672 _____ (Realtek Semiconductor Corporation ) C:\windows\system32\Drivers\rtwlane.sys
2015-01-19 10:05 - 2015-01-19 10:06 - 00001588 _____ () C:\HPCamDrv.log
2015-01-19 10:05 - 2015-01-19 10:06 - 00000382 _____ () C:\camera.log
2015-01-19 10:05 - 2015-01-19 10:05 - 00384672 _____ (SunplusIT) C:\windows\system32\VCamPPage_x64.dll
2015-01-19 10:05 - 2015-01-19 10:05 - 00321184 _____ (SunplusIT) C:\windows\SysWOW64\VCamPPage.dll
2015-01-19 10:03 - 2015-01-19 10:03 - 00001117 _____ () C:\Users\Public\Desktop\Picasa 3.lnk
2015-01-19 10:03 - 2015-01-19 10:03 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Local\Google
2015-01-19 10:03 - 2015-01-19 10:03 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Picasa 3
2015-01-19 10:03 - 2015-01-19 10:03 - 00000000 ____D () C:\Program Files (x86)\Google
2015-01-19 10:02 - 2015-01-19 10:02 - 17385800 _____ (Google Inc.) C:\Users\HP ProBook 470 G2\Downloads\picasa39-setup.exe
2015-01-19 10:00 - 2015-01-19 10:00 - 00003148 _____ () C:\windows\System32\Tasks\SidebarExecute
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\SysWOW64\zh-Hant
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\SysWOW64\zh-Hans
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\SysWOW64\tr
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\SysWOW64\th
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\SysWOW64\sv
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\SysWOW64\sr
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\SysWOW64\sl
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\SysWOW64\sk
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\SysWOW64\ru
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\SysWOW64\ro
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\SysWOW64\pl
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\SysWOW64\no
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\SysWOW64\nl
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\SysWOW64\lv
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\SysWOW64\lt
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\SysWOW64\ko
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\SysWOW64\ja
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\SysWOW64\it
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\SysWOW64\hu
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\SysWOW64\hr
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\SysWOW64\he
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\SysWOW64\fr
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\SysWOW64\fi
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\SysWOW64\et
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\SysWOW64\es
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\SysWOW64\el
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\SysWOW64\da
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\SysWOW64\cs
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\SysWOW64\bg
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\SysWOW64\ar
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\system32\zh-Hant
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\system32\zh-Hans
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\system32\tr
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\system32\th
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\system32\sv
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\system32\sr
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\system32\sl
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\system32\sk
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\system32\ru
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\system32\ro
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\system32\pl
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\system32\no
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\system32\nl
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\system32\lv
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\system32\lt
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\system32\ko
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\system32\ja
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\system32\it
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\system32\hu
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\system32\hr
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\system32\he
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\system32\fr
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\system32\fi
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\system32\et
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\system32\es
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\system32\el
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\system32\da
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\system32\cs
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\system32\bg
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\system32\ar
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\DPDrv
2015-01-19 09:50 - 2015-01-19 09:50 - 00000000 ____D () C:\ProgramData\Synaptics
2015-01-19 09:50 - 2015-01-19 09:49 - 00753392 _____ (Synaptics Incorporated) C:\windows\system32\SynCOM.dll
2015-01-19 09:50 - 2015-01-19 09:49 - 00580336 _____ (Synaptics Incorporated) C:\windows\system32\Drivers\SynTP.sys
2015-01-19 09:50 - 2015-01-19 09:49 - 00409328 _____ (Synaptics Incorporated) C:\windows\SysWOW64\SynCom.dll
2015-01-19 09:50 - 2015-01-19 09:49 - 00256240 _____ (Synaptics Incorporated) C:\windows\system32\SynTPAPI.dll
2015-01-19 09:50 - 2015-01-19 09:49 - 00212208 _____ (Synaptics Incorporated) C:\windows\system32\SynTPCo20.dll
2015-01-19 09:50 - 2015-01-19 09:49 - 00195784 _____ () C:\windows\system32\pca-manta.bin
2015-01-19 09:22 - 2015-01-19 09:22 - 00001674 _____ () C:\Users\HP ProBook 470 G2\Desktop\Rechnung5.lnk
2015-01-19 09:22 - 2015-01-19 09:22 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SoftwareNetz
2015-01-19 09:22 - 2015-01-19 09:22 - 00000000 ____D () C:\Softwarenetz
2015-01-19 09:22 - 2014-06-12 09:28 - 00181952 _____ (SoftwareNetz) C:\windows\snui.exe
2015-01-19 08:29 - 2015-01-19 08:29 - 00002212 _____ () C:\Users\Public\Desktop\SteuerSparErklärung 2015.lnk
2015-01-19 08:29 - 2015-01-19 08:29 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Local\AAV
2015-01-19 08:29 - 2015-01-19 08:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steuertipps
2015-01-19 08:28 - 2015-01-19 14:22 - 00000000 ____D () C:\Program Files (x86)\Akademische Arbeitsgemeinschaft
2015-01-19 08:25 - 2015-01-19 14:20 - 00000000 ____D () C:\ProgramData\AAV
2015-01-19 08:14 - 2015-01-19 08:19 - 205257056 _____ () C:\Users\HP ProBook 470 G2\Downloads\SSEStandard_20.25.123.exe
2015-01-19 07:34 - 2015-02-01 17:26 - 00000052 _____ () C:\windows\SysWOW64\DOErrors.log
2015-01-19 07:33 - 2015-02-01 17:25 - 00000000 _____ () C:\windows\system32\HP_ActiveX_Patch_NOT_DETECTED.txt
2015-01-18 15:32 - 2015-01-18 15:32 - 00000000 ___SD () C:\Users\HP ProBook 470 G2\Documents\Meine Datenquellen
2015-01-18 15:31 - 2015-01-18 15:31 - 00000000 ____D () C:\Users\HP ProBook 470 G2\Documents\Benutzerdefinierte Office-Vorlagen
2015-01-18 15:06 - 2015-01-18 15:06 - 00000000 ____D () C:\Users\HP ProBook 470 G2\Documents\OneNote-Notizbücher
2015-01-18 14:58 - 2015-01-18 15:02 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Roaming\Steganos
2015-01-18 14:58 - 2015-01-18 14:58 - 00001246 _____ () C:\Users\HP ProBook 470 G2\Desktop\Passwort-Manager.lnk
2015-01-18 14:58 - 2015-01-18 14:58 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steganos Passwort-Manager Free
2015-01-18 14:58 - 2015-01-18 14:58 - 00000000 ____D () C:\Program Files (x86)\Steganos Password Manager Free 11
2015-01-18 14:57 - 2015-01-19 14:39 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Local\Adobe
2015-01-18 14:52 - 2015-01-18 14:52 - 00000000 ____D () C:\ProgramData\FLEXnet
2015-01-18 14:51 - 2015-01-18 14:51 - 00001144 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop CS3.lnk
2015-01-18 14:50 - 2015-01-18 14:50 - 08275369 _____ (Steganos GmbH) C:\Users\HP ProBook 470 G2\Downloads\spm2009freeint.exe
2015-01-18 14:50 - 2015-01-18 14:50 - 00000000 ____D () C:\ProgramData\Adobe
2015-01-18 14:49 - 2015-01-18 14:49 - 00001230 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Stock Photos CS3.lnk
2015-01-18 14:47 - 2015-01-18 14:47 - 00001410 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe ExtendScript Toolkit 2.lnk
2015-01-18 14:47 - 2015-01-18 14:47 - 00001199 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Device Central CS3.lnk
2015-01-18 14:45 - 2015-01-18 14:45 - 00001106 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Bridge CS3.lnk
2015-01-18 14:45 - 2015-01-18 14:45 - 00000000 ____D () C:\windows\SysWOW64\spool
2015-01-18 14:45 - 2015-01-18 14:45 - 00000000 ____D () C:\windows\SysWOW64\Macromed
2015-01-18 14:42 - 2015-01-18 14:50 - 00000000 ____D () C:\Program Files (x86)\Adobe
2015-01-18 12:45 - 2015-01-18 12:45 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Roaming\My Bluetooth
2015-01-18 12:32 - 2015-01-26 15:16 - 00000000 ____D () C:\Users\HP ProBook 470 G2\Documents\Outlook-Dateien
2015-01-18 12:07 - 2015-01-19 07:26 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Roaming\Windows Live Writer
2015-01-18 12:07 - 2015-01-18 12:07 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Local\Windows Live Writer
2015-01-18 12:04 - 2015-01-18 12:04 - 00002498 _____ () C:\Users\HP ProBook 470 G2\Desktop\Word 2013.lnk
2015-01-18 12:04 - 2015-01-18 12:04 - 00002494 _____ () C:\Users\HP ProBook 470 G2\Desktop\Excel 2013.lnk
2015-01-18 12:04 - 2015-01-18 12:04 - 00002449 _____ () C:\Users\HP ProBook 470 G2\Desktop\Lync 2013.lnk
2015-01-18 12:04 - 2015-01-18 12:04 - 00002412 _____ () C:\Users\HP ProBook 470 G2\Desktop\OneNote 2013.lnk
2015-01-18 12:02 - 2015-01-18 12:02 - 00003214 _____ () C:\windows\System32\Tasks\HP Officejet 6600.exe_{F24B9D44-93E3-4130-BAC4-774FFE8E795B}
2015-01-18 11:59 - 2015-02-01 14:21 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Roaming\HpUpdate
2015-01-18 11:59 - 2015-01-18 11:59 - 00002159 _____ () C:\Users\Public\Desktop\HP Officejet 6600.lnk
2015-01-18 11:59 - 2012-10-17 04:31 - 00741480 ____N (Hewlett-Packard Co.) C:\windows\system32\HPDiscoPM5D12.dll
2015-01-18 11:58 - 2015-01-19 10:32 - 00000000 ____D () C:\ProgramData\HP
2015-01-18 11:58 - 2015-01-18 11:59 - 00000000 ____D () C:\Program Files (x86)\HP
2015-01-18 11:58 - 2015-01-18 11:58 - 00000000 ____D () C:\Program Files\HP
2015-01-18 11:57 - 2015-01-18 11:57 - 00000057 _____ () C:\ProgramData\Ament.ini
2015-01-18 11:56 - 2015-01-18 12:02 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Local\HP
2015-01-18 10:46 - 2014-12-13 06:09 - 00144384 _____ (Microsoft Corporation) C:\windows\system32\ieUnatt.exe
2015-01-18 10:46 - 2014-12-13 04:33 - 00115712 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieUnatt.exe
2015-01-18 10:46 - 2014-12-11 18:47 - 00087040 _____ (Microsoft Corporation) C:\windows\system32\TSWbPrxy.exe
2015-01-18 10:46 - 2014-07-09 03:03 - 00007168 _____ (Microsoft Corporation) C:\windows\system32\KBDYAK.DLL
2015-01-18 10:46 - 2014-07-09 03:03 - 00007168 _____ (Microsoft Corporation) C:\windows\system32\KBDTAT.DLL
2015-01-18 10:46 - 2014-07-09 03:03 - 00007168 _____ (Microsoft Corporation) C:\windows\system32\KBDRU1.DLL
2015-01-18 10:46 - 2014-07-09 03:03 - 00007168 _____ (Microsoft Corporation) C:\windows\system32\KBDBASH.DLL
2015-01-18 10:46 - 2014-07-09 03:03 - 00006656 _____ (Microsoft Corporation) C:\windows\system32\KBDRU.DLL
2015-01-18 10:46 - 2014-07-09 02:31 - 00007168 _____ (Microsoft Corporation) C:\windows\SysWOW64\KBDYAK.DLL
2015-01-18 10:46 - 2014-07-09 02:31 - 00007168 _____ (Microsoft Corporation) C:\windows\SysWOW64\KBDTAT.DLL
2015-01-18 10:46 - 2014-07-09 02:31 - 00006656 _____ (Microsoft Corporation) C:\windows\SysWOW64\KBDRU1.DLL
2015-01-18 10:46 - 2014-07-09 02:31 - 00006656 _____ (Microsoft Corporation) C:\windows\SysWOW64\KBDRU.DLL
2015-01-18 10:46 - 2014-07-09 02:31 - 00006656 _____ (Microsoft Corporation) C:\windows\SysWOW64\KBDBASH.DLL
2015-01-18 10:46 - 2014-07-08 23:38 - 00419992 _____ () C:\windows\system32\locale.nls
2015-01-18 10:46 - 2014-07-08 23:30 - 00419992 _____ () C:\windows\SysWOW64\locale.nls
2015-01-18 10:08 - 2014-08-29 03:07 - 03179520 _____ (Microsoft Corporation) C:\windows\system32\rdpcorets.dll
2015-01-18 10:08 - 2014-05-08 10:32 - 00016384 _____ (Microsoft Corporation) C:\windows\system32\RdpGroupPolicyExtension.dll
2015-01-18 10:07 - 2014-09-05 03:11 - 06584320 _____ (Microsoft Corporation) C:\windows\system32\mstscax.dll
2015-01-18 10:07 - 2014-09-05 02:52 - 05703168 _____ (Microsoft Corporation) C:\windows\SysWOW64\mstscax.dll
2015-01-18 09:58 - 2015-01-18 09:58 - 00000000 ____D () C:\windows\de
2015-01-18 09:57 - 2015-01-18 09:57 - 00001465 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Mail.lnk
2015-01-18 09:57 - 2015-01-18 09:57 - 00001381 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Photo Gallery.lnk
2015-01-18 09:57 - 2015-01-18 09:57 - 00001312 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Movie Maker.lnk
2015-01-18 09:57 - 2015-01-18 09:57 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live
2015-01-18 09:57 - 2015-01-18 09:57 - 00000000 ____D () C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2015-01-18 09:56 - 2015-01-18 09:56 - 00000000 ____D () C:\windows\PCHEALTH
2015-01-18 09:56 - 2015-01-18 09:56 - 00000000 ____D () C:\Program Files\Windows Live
2015-01-18 09:55 - 2015-01-18 09:57 - 00000000 ____D () C:\Program Files (x86)\Windows Live
2015-01-18 09:54 - 2010-06-02 04:55 - 00527192 _____ (Microsoft Corporation) C:\windows\SysWOW64\XAudio2_7.dll
2015-01-18 09:54 - 2010-06-02 04:55 - 00518488 _____ (Microsoft Corporation) C:\windows\system32\XAudio2_7.dll
2015-01-18 09:54 - 2010-06-02 04:55 - 00077656 _____ (Microsoft Corporation) C:\windows\system32\XAPOFX1_5.dll
2015-01-18 09:54 - 2010-06-02 04:55 - 00074072 _____ (Microsoft Corporation) C:\windows\SysWOW64\XAPOFX1_5.dll
2015-01-18 09:54 - 2010-05-26 11:41 - 02526056 _____ (Microsoft Corporation) C:\windows\system32\D3DCompiler_43.dll
2015-01-18 09:54 - 2010-05-26 11:41 - 02106216 _____ (Microsoft Corporation) C:\windows\SysWOW64\D3DCompiler_43.dll
2015-01-18 09:54 - 2010-05-26 11:41 - 00276832 _____ (Microsoft Corporation) C:\windows\system32\d3dx11_43.dll
2015-01-18 09:54 - 2010-05-26 11:41 - 00248672 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3dx11_43.dll
2015-01-18 09:53 - 2009-09-04 17:29 - 00523088 _____ (Microsoft Corporation) C:\windows\system32\d3dx10_42.dll
2015-01-18 09:53 - 2009-09-04 17:29 - 00453456 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3dx10_42.dll
2015-01-18 09:52 - 2015-01-18 09:52 - 00000199 _____ () C:\windows\DirectX.log
2015-01-18 09:52 - 2006-11-29 13:06 - 04398360 _____ (Microsoft Corporation) C:\windows\system32\d3dx9_32.dll
2015-01-18 09:52 - 2006-11-29 13:06 - 03426072 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3dx9_32.dll
2015-01-18 09:50 - 2015-01-21 10:09 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Local\Windows Live
2015-01-18 09:48 - 2015-01-18 09:49 - 01245384 _____ (Microsoft Corporation) C:\Users\HP ProBook 470 G2\Downloads\wlsetup-web.exe
2015-01-18 09:48 - 2015-01-18 09:48 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Local\Intel_Corporation
2015-01-18 09:04 - 2015-01-18 09:04 - 00000000 ____D () C:\windows\System32\Tasks\OfficeSoftwareProtectionPlatform
2015-01-18 09:04 - 2015-01-18 09:04 - 00000000 ____D () C:\Program Files (x86)\Microsoft Office
2015-01-18 09:03 - 2015-01-18 12:32 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2015-01-18 09:01 - 2015-01-18 11:48 - 00000000 ____D () C:\Program Files\Microsoft Office 15
2015-01-17 18:48 - 2013-10-02 03:22 - 00056832 _____ (Microsoft Corporation) C:\windows\system32\Drivers\TsUsbFlt.sys
2015-01-17 18:48 - 2013-10-02 03:11 - 00013824 _____ (Microsoft Corporation) C:\windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2015-01-17 18:48 - 2013-10-02 03:08 - 00012800 _____ (Microsoft Corporation) C:\windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2015-01-17 18:48 - 2013-10-02 02:48 - 00056832 _____ (Microsoft Corporation) C:\windows\system32\MsRdpWebAccess.dll
2015-01-17 18:48 - 2013-10-02 02:48 - 00018944 _____ (Microsoft Corporation) C:\windows\system32\wksprtPS.dll
2015-01-17 18:48 - 2013-10-02 02:29 - 00062976 _____ (Microsoft Corporation) C:\windows\system32\tsgqec.dll
2015-01-17 18:48 - 2013-10-02 02:10 - 00044544 _____ (Microsoft Corporation) C:\windows\system32\TsUsbGDCoInstaller.dll
2015-01-17 18:48 - 2013-10-02 01:15 - 01057280 _____ (Microsoft Corporation) C:\windows\system32\rdvidcrl.dll
2015-01-17 18:48 - 2013-10-02 01:14 - 00050176 _____ (Microsoft Corporation) C:\windows\SysWOW64\MsRdpWebAccess.dll
2015-01-17 18:48 - 2013-10-02 01:14 - 00017920 _____ (Microsoft Corporation) C:\windows\SysWOW64\wksprtPS.dll
2015-01-17 18:48 - 2013-10-02 01:01 - 00420864 _____ (Microsoft Corporation) C:\windows\system32\wksprt.exe
2015-01-17 18:48 - 2013-10-02 00:58 - 00053248 _____ (Microsoft Corporation) C:\windows\SysWOW64\tsgqec.dll
2015-01-17 18:48 - 2013-10-02 00:31 - 01147392 _____ (Microsoft Corporation) C:\windows\system32\mstsc.exe
2015-01-17 18:48 - 2013-10-02 00:08 - 00855552 _____ (Microsoft Corporation) C:\windows\SysWOW64\rdvidcrl.dll
2015-01-17 18:48 - 2013-10-01 23:34 - 01068544 _____ (Microsoft Corporation) C:\windows\SysWOW64\mstsc.exe
2015-01-17 18:42 - 2012-08-23 15:13 - 00243200 _____ (Microsoft Corporation) C:\windows\system32\rdpudd.dll
2015-01-17 18:42 - 2012-08-23 15:10 - 00019456 _____ (Microsoft Corporation) C:\windows\system32\Drivers\rdpvideominiport.sys
2015-01-17 18:42 - 2012-08-23 15:08 - 00030208 _____ (Microsoft Corporation) C:\windows\system32\Drivers\TsUsbGD.sys
2015-01-17 18:42 - 2012-08-23 12:12 - 00192000 _____ (Microsoft Corporation) C:\windows\SysWOW64\rdpendp_winip.dll
2015-01-17 18:42 - 2012-08-23 11:51 - 00228864 _____ (Microsoft Corporation) C:\windows\system32\rdpendp_winip.dll
2015-01-17 18:41 - 2015-01-17 18:41 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2015-01-17 18:40 - 2015-01-17 18:40 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2015-01-17 18:40 - 2015-01-17 18:40 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2015-01-17 18:37 - 2014-10-18 03:05 - 04121600 _____ (Microsoft Corporation) C:\windows\system32\mf.dll
2015-01-17 18:37 - 2014-10-18 02:33 - 03209728 _____ (Microsoft Corporation) C:\windows\SysWOW64\mf.dll
2015-01-17 18:37 - 2014-07-07 03:06 - 00206848 _____ (Microsoft Corporation) C:\windows\system32\mfps.dll
2015-01-17 18:37 - 2014-07-07 03:06 - 00055808 _____ (Microsoft Corporation) C:\windows\system32\rrinstaller.exe
2015-01-17 18:37 - 2014-07-07 03:06 - 00024576 _____ (Microsoft Corporation) C:\windows\system32\mfpmp.exe
2015-01-17 18:37 - 2014-07-07 03:02 - 00002048 _____ (Microsoft Corporation) C:\windows\system32\mferror.dll
2015-01-17 18:37 - 2014-07-07 02:40 - 00103424 _____ (Microsoft Corporation) C:\windows\SysWOW64\mfps.dll
2015-01-17 18:37 - 2014-07-07 02:39 - 00050176 _____ (Microsoft Corporation) C:\windows\SysWOW64\rrinstaller.exe
2015-01-17 18:37 - 2014-07-07 02:39 - 00023040 _____ (Microsoft Corporation) C:\windows\SysWOW64\mfpmp.exe
2015-01-17 18:37 - 2014-07-07 02:37 - 00002048 _____ (Microsoft Corporation) C:\windows\SysWOW64\mferror.dll
2015-01-17 18:37 - 2012-07-26 04:08 - 00744448 _____ (Microsoft Corporation) C:\windows\system32\WUDFx.dll
2015-01-17 18:37 - 2012-07-26 04:08 - 00229888 _____ (Microsoft Corporation) C:\windows\system32\WUDFHost.exe
2015-01-17 18:37 - 2012-07-26 04:08 - 00194048 _____ (Microsoft Corporation) C:\windows\system32\WUDFPlatform.dll
2015-01-17 18:37 - 2012-07-26 04:08 - 00084992 _____ (Microsoft Corporation) C:\windows\system32\WUDFSvc.dll
2015-01-17 18:37 - 2012-07-26 04:08 - 00045056 _____ (Microsoft Corporation) C:\windows\system32\WUDFCoinstaller.dll
2015-01-17 18:37 - 2012-07-26 03:26 - 00198656 _____ (Microsoft Corporation) C:\windows\system32\Drivers\WUDFRd.sys
2015-01-17 18:37 - 2012-07-26 03:26 - 00087040 _____ (Microsoft Corporation) C:\windows\system32\Drivers\WUDFPf.sys
2015-01-17 18:37 - 2012-06-02 15:57 - 00000003 _____ () C:\windows\system32\Drivers\MsftWdf_User_01_11_00_Inbox_Critical.Wdf
2015-01-17 18:35 - 2014-06-27 03:08 - 02777088 _____ (Microsoft Corporation) C:\windows\system32\msmpeg2vdec.dll
2015-01-17 18:35 - 2014-06-27 02:45 - 02285056 _____ (Microsoft Corporation) C:\windows\SysWOW64\msmpeg2vdec.dll
2015-01-17 18:32 - 2015-01-17 18:32 - 00000000 ____D () C:\Users\Public\Documents\CyberLink
2015-01-17 18:32 - 2015-01-17 18:32 - 00000000 ____D () C:\Users\HP ProBook 470 G2\Documents\CyberLink
2015-01-17 18:32 - 2015-01-17 18:32 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Roaming\CyberLink
2015-01-17 18:32 - 2014-11-08 04:16 - 00002048 _____ (Microsoft Corporation) C:\windows\system32\tzres.dll
2015-01-17 18:32 - 2014-11-08 03:45 - 00002048 _____ (Microsoft Corporation) C:\windows\SysWOW64\tzres.dll
2015-01-17 18:32 - 2014-10-14 03:13 - 03241984 _____ (Microsoft Corporation) C:\windows\system32\msi.dll
2015-01-17 18:32 - 2014-10-14 02:50 - 02363904 _____ (Microsoft Corporation) C:\windows\SysWOW64\msi.dll
2015-01-17 18:32 - 2014-09-25 03:08 - 00371712 _____ (Microsoft Corporation) C:\windows\system32\qdvd.dll
2015-01-17 18:32 - 2014-09-25 02:40 - 00519680 _____ (Microsoft Corporation) C:\windows\SysWOW64\qdvd.dll
2015-01-17 18:32 - 2014-08-01 12:53 - 01031168 _____ (Microsoft Corporation) C:\windows\system32\TSWorkspace.dll
2015-01-17 18:32 - 2014-08-01 12:35 - 00793600 _____ (Microsoft Corporation) C:\windows\SysWOW64\TSWorkspace.dll
2015-01-17 18:32 - 2014-06-24 04:29 - 02565120 _____ (Microsoft Corporation) C:\windows\system32\d3d10warp.dll
2015-01-17 18:32 - 2014-06-24 03:59 - 01987584 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3d10warp.dll
2015-01-17 18:31 - 2015-01-17 18:31 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Local\CyberLink
2015-01-17 18:31 - 2014-11-11 02:46 - 00119296 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tdx.sys
2015-01-17 18:31 - 2014-10-30 03:03 - 00165888 _____ (Microsoft Corporation) C:\windows\system32\charmap.exe
2015-01-17 18:31 - 2014-10-30 02:45 - 00155136 _____ (Microsoft Corporation) C:\windows\SysWOW64\charmap.exe
2015-01-17 18:31 - 2014-06-25 03:05 - 14175744 _____ (Microsoft Corporation) C:\windows\system32\shell32.dll
2015-01-17 18:31 - 2014-06-25 02:41 - 12874240 _____ (Microsoft Corporation) C:\windows\SysWOW64\shell32.dll
2015-01-17 18:31 - 2014-02-04 03:35 - 00274880 _____ (Microsoft Corporation) C:\windows\system32\Drivers\msiscsi.sys
2015-01-17 18:31 - 2014-02-04 03:35 - 00190912 _____ (Microsoft Corporation) C:\windows\system32\Drivers\storport.sys
2015-01-17 18:31 - 2014-02-04 03:35 - 00027584 _____ (Microsoft Corporation) C:\windows\system32\Drivers\Diskdump.sys
2015-01-17 18:31 - 2014-02-04 03:28 - 00002048 _____ (Microsoft Corporation) C:\windows\system32\iologmsg.dll
2015-01-17 18:31 - 2014-02-04 03:00 - 00002048 _____ (Microsoft Corporation) C:\windows\SysWOW64\iologmsg.dll
2015-01-17 18:31 - 2014-01-28 03:32 - 00228864 _____ (Microsoft Corporation) C:\windows\system32\wwansvc.dll
2015-01-17 18:31 - 2014-01-24 03:37 - 01684928 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ntfs.sys
2015-01-17 18:27 - 2014-10-03 03:12 - 02020352 _____ (Microsoft Corporation) C:\windows\system32\WsmSvc.dll
2015-01-17 18:27 - 2014-10-03 03:12 - 00346624 _____ (Microsoft Corporation) C:\windows\system32\WSManMigrationPlugin.dll
2015-01-17 18:27 - 2014-10-03 03:12 - 00310272 _____ (Microsoft Corporation) C:\windows\system32\WsmWmiPl.dll
2015-01-17 18:27 - 2014-10-03 03:12 - 00181248 _____ (Microsoft Corporation) C:\windows\system32\WsmAuto.dll
2015-01-17 18:27 - 2014-10-03 03:11 - 00266240 _____ (Microsoft Corporation) C:\windows\system32\WSManHTTPConfig.exe
2015-01-17 18:27 - 2014-10-03 02:45 - 01177088 _____ (Microsoft Corporation) C:\windows\SysWOW64\WsmSvc.dll
2015-01-17 18:27 - 2014-10-03 02:45 - 00248832 _____ (Microsoft Corporation) C:\windows\SysWOW64\WSManMigrationPlugin.dll
2015-01-17 18:27 - 2014-10-03 02:45 - 00214016 _____ (Microsoft Corporation) C:\windows\SysWOW64\WsmWmiPl.dll
2015-01-17 18:27 - 2014-10-03 02:45 - 00145920 _____ (Microsoft Corporation) C:\windows\SysWOW64\WsmAuto.dll
2015-01-17 18:27 - 2014-10-03 02:44 - 00198656 _____ (Microsoft Corporation) C:\windows\SysWOW64\WSManHTTPConfig.exe
2015-01-17 18:13 - 2015-02-03 14:04 - 00003854 _____ () C:\windows\System32\Tasks\Opera scheduled Autoupdate 1421514790
2015-01-17 18:13 - 2015-01-17 18:13 - 00001146 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk
2015-01-17 18:13 - 2015-01-17 18:13 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Roaming\Opera Software
2015-01-17 18:13 - 2015-01-17 18:13 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Local\Opera Software
2015-01-17 18:12 - 2015-02-03 14:04 - 00000000 ____D () C:\Program Files (x86)\Opera
2015-01-17 18:12 - 2015-01-17 18:12 - 00683664 _____ (Opera Software) C:\Users\HP ProBook 470 G2\Downloads\Opera_NI_stable.exe
2015-01-17 18:08 - 2015-01-30 07:13 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2015-01-17 18:08 - 2015-01-17 18:09 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Roaming\Mozilla
2015-01-17 18:08 - 2015-01-17 18:09 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Local\Mozilla
2015-01-17 18:08 - 2015-01-17 18:08 - 00001170 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2015-01-17 18:08 - 2015-01-17 18:08 - 00001158 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2015-01-17 18:08 - 2015-01-17 18:08 - 00000000 ____D () C:\ProgramData\Mozilla
2015-01-17 18:07 - 2015-01-17 18:07 - 00243728 _____ () C:\Users\HP ProBook 470 G2\Downloads\Firefox Setup Stub 35.0.exe
2015-01-17 18:05 - 2015-01-17 18:05 - 00000000 __SHD () C:\Users\HP ProBook 470 G2\AppData\Local\EmieUserList
2015-01-17 18:05 - 2015-01-17 18:05 - 00000000 __SHD () C:\Users\HP ProBook 470 G2\AppData\Local\EmieSiteList
2015-01-17 18:02 - 2015-01-17 18:02 - 00001228 _____ () C:\Users\HP ProBook 470 G2\Desktop\Windows Explorer.lnk
2015-01-17 15:41 - 2015-01-17 15:42 - 00000000 ____D () C:\windows\system32\MRT
2015-01-17 15:41 - 2014-12-31 13:12 - 113365784 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe
2015-01-17 15:40 - 2014-06-30 23:24 - 00008856 _____ (Microsoft Corporation) C:\windows\system32\icardres.dll
2015-01-17 15:40 - 2014-06-30 23:14 - 00008856 _____ (Microsoft Corporation) C:\windows\SysWOW64\icardres.dll
2015-01-17 15:40 - 2014-03-09 22:48 - 01389208 _____ (Microsoft Corporation) C:\windows\system32\icardagt.exe
2015-01-17 15:40 - 2014-03-09 22:48 - 00171160 _____ (Microsoft Corporation) C:\windows\system32\infocardapi.dll
2015-01-17 15:40 - 2014-03-09 22:47 - 00619672 _____ (Microsoft Corporation) C:\windows\SysWOW64\icardagt.exe
2015-01-17 15:40 - 2014-03-09 22:47 - 00099480 _____ (Microsoft Corporation) C:\windows\SysWOW64\infocardapi.dll
2015-01-17 15:39 - 2014-11-27 02:43 - 00389296 _____ (Microsoft Corporation) C:\windows\system32\iedkcs32.dll
2015-01-17 15:39 - 2014-11-27 02:10 - 00342200 _____ (Microsoft Corporation) C:\windows\SysWOW64\iedkcs32.dll
2015-01-17 15:39 - 2014-11-22 04:13 - 25059840 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2015-01-17 15:39 - 2014-11-22 04:06 - 02724864 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2015-01-17 15:39 - 2014-11-22 04:06 - 00004096 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollectorres.dll
2015-01-17 15:39 - 2014-11-22 03:50 - 00580096 _____ (Microsoft Corporation) C:\windows\system32\vbscript.dll
2015-01-17 15:39 - 2014-11-22 03:50 - 00066560 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2015-01-17 15:39 - 2014-11-22 03:49 - 02885120 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2015-01-17 15:39 - 2014-11-22 03:49 - 00048640 _____ (Microsoft Corporation) C:\windows\system32\ieetwproxystub.dll
2015-01-17 15:39 - 2014-11-22 03:48 - 00088064 _____ (Microsoft Corporation) C:\windows\system32\MshtmlDac.dll
2015-01-17 15:39 - 2014-11-22 03:41 - 00054784 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2015-01-17 15:39 - 2014-11-22 03:40 - 00034304 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2015-01-17 15:39 - 2014-11-22 03:37 - 00633856 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll
2015-01-17 15:39 - 2014-11-22 03:35 - 00114688 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollector.exe
2015-01-17 15:39 - 2014-11-22 03:34 - 06039552 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2015-01-17 15:39 - 2014-11-22 03:34 - 00814080 _____ (Microsoft Corporation) C:\windows\system32\jscript9diag.dll
2015-01-17 15:39 - 2014-11-22 03:26 - 00968704 _____ (Microsoft Corporation) C:\windows\system32\MsSpellCheckingFacility.exe
2015-01-17 15:39 - 2014-11-22 03:22 - 19749376 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll
2015-01-17 15:39 - 2014-11-22 03:22 - 00490496 _____ (Microsoft Corporation) C:\windows\system32\dxtmsft.dll
2015-01-17 15:39 - 2014-11-22 03:20 - 02724864 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb
2015-01-17 15:39 - 2014-11-22 03:14 - 00077824 _____ (Microsoft Corporation) C:\windows\system32\JavaScriptCollectionAgent.dll
2015-01-17 15:39 - 2014-11-22 03:09 - 00199680 _____ (Microsoft Corporation) C:\windows\system32\msrating.dll
2015-01-17 15:39 - 2014-11-22 03:08 - 00092160 _____ (Microsoft Corporation) C:\windows\system32\mshtmled.dll
2015-01-17 15:39 - 2014-11-22 03:07 - 00501248 _____ (Microsoft Corporation) C:\windows\SysWOW64\vbscript.dll
2015-01-17 15:39 - 2014-11-22 03:07 - 00062464 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesetup.dll
2015-01-17 15:39 - 2014-11-22 03:06 - 00047616 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieetwproxystub.dll
2015-01-17 15:39 - 2014-11-22 03:05 - 00316928 _____ (Microsoft Corporation) C:\windows\system32\dxtrans.dll
2015-01-17 15:39 - 2014-11-22 03:05 - 00064000 _____ (Microsoft Corporation) C:\windows\SysWOW64\MshtmlDac.dll
2015-01-17 15:39 - 2014-11-22 03:01 - 02277888 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll
2015-01-17 15:39 - 2014-11-22 02:59 - 00047104 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsproxy.dll
2015-01-17 15:39 - 2014-11-22 02:58 - 00030720 _____ (Microsoft Corporation) C:\windows\SysWOW64\iernonce.dll
2015-01-17 15:39 - 2014-11-22 02:56 - 00478208 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieui.dll
2015-01-17 15:39 - 2014-11-22 02:54 - 00620032 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9diag.dll
2015-01-17 15:39 - 2014-11-22 02:49 - 00800768 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2015-01-17 15:39 - 2014-11-22 02:49 - 00718848 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2015-01-17 15:39 - 2014-11-22 02:47 - 01359360 _____ (Microsoft Corporation) C:\windows\system32\mshtmlmedia.dll
2015-01-17 15:39 - 2014-11-22 02:46 - 02125312 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl
2015-01-17 15:39 - 2014-11-22 02:45 - 00418304 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtmsft.dll
2015-01-17 15:39 - 2014-11-22 02:43 - 14412800 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2015-01-17 15:39 - 2014-11-22 02:40 - 00060416 _____ (Microsoft Corporation) C:\windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-01-17 15:39 - 2014-11-22 02:36 - 00168960 _____ (Microsoft Corporation) C:\windows\SysWOW64\msrating.dll
2015-01-17 15:39 - 2014-11-22 02:35 - 00076288 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmled.dll
2015-01-17 15:39 - 2014-11-22 02:33 - 00285696 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtrans.dll
2015-01-17 15:39 - 2014-11-22 02:29 - 04299264 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll
2015-01-17 15:39 - 2014-11-22 02:28 - 02358272 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2015-01-17 15:39 - 2014-11-22 02:23 - 00688640 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll
2015-01-17 15:39 - 2014-11-22 02:22 - 02052096 _____ (Microsoft Corporation) C:\windows\SysWOW64\inetcpl.cpl
2015-01-17 15:39 - 2014-11-22 02:21 - 01155072 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmlmedia.dll
2015-01-17 15:39 - 2014-11-22 02:15 - 01548288 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2015-01-17 15:39 - 2014-11-22 02:13 - 12836864 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll
2015-01-17 15:39 - 2014-11-22 02:03 - 00800768 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dll
2015-01-17 15:39 - 2014-11-22 02:00 - 01888256 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll
2015-01-17 15:39 - 2014-11-22 01:56 - 01307136 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll
2015-01-17 15:39 - 2014-11-22 01:54 - 00710144 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieapfltr.dll
2015-01-17 15:39 - 2014-06-06 07:16 - 00035480 _____ (Microsoft Corporation) C:\windows\SysWOW64\TsWpfWrp.exe
2015-01-17 15:39 - 2014-06-06 07:12 - 00035480 _____ (Microsoft Corporation) C:\windows\system32\TsWpfWrp.exe
2015-01-17 15:38 - 2014-09-19 10:42 - 00342016 _____ (Microsoft Corporation) C:\windows\system32\schannel.dll
2015-01-17 15:38 - 2014-09-19 10:42 - 00314880 _____ (Microsoft Corporation) C:\windows\system32\msv1_0.dll
2015-01-17 15:38 - 2014-09-19 10:42 - 00309760 _____ (Microsoft Corporation) C:\windows\system32\ncrypt.dll
2015-01-17 15:38 - 2014-09-19 10:42 - 00210944 _____ (Microsoft Corporation) C:\windows\system32\wdigest.dll
2015-01-17 15:38 - 2014-09-19 10:42 - 00086528 _____ (Microsoft Corporation) C:\windows\system32\TSpkg.dll
2015-01-17 15:38 - 2014-09-19 10:42 - 00022016 _____ (Microsoft Corporation) C:\windows\system32\credssp.dll
2015-01-17 15:38 - 2014-09-19 10:23 - 00259584 _____ (Microsoft Corporation) C:\windows\SysWOW64\msv1_0.dll
2015-01-17 15:38 - 2014-09-19 10:23 - 00248832 _____ (Microsoft Corporation) C:\windows\SysWOW64\schannel.dll
2015-01-17 15:38 - 2014-09-19 10:23 - 00221184 _____ (Microsoft Corporation) C:\windows\SysWOW64\ncrypt.dll
2015-01-17 15:38 - 2014-09-19 10:23 - 00172032 _____ (Microsoft Corporation) C:\windows\SysWOW64\wdigest.dll
2015-01-17 15:38 - 2014-09-19 10:23 - 00065536 _____ (Microsoft Corporation) C:\windows\SysWOW64\TSpkg.dll
2015-01-17 15:38 - 2014-09-19 10:23 - 00017408 _____ (Microsoft Corporation) C:\windows\SysWOW64\credssp.dll
2015-01-17 15:38 - 2014-07-17 03:07 - 00455168 _____ (Microsoft Corporation) C:\windows\system32\winlogon.exe
2015-01-17 15:38 - 2014-07-17 03:07 - 00235520 _____ (Microsoft Corporation) C:\windows\system32\winsta.dll
2015-01-17 15:38 - 2014-07-17 03:07 - 00150528 _____ (Microsoft Corporation) C:\windows\system32\rdpcorekmts.dll
2015-01-17 15:38 - 2014-07-17 02:40 - 00157696 _____ (Microsoft Corporation) C:\windows\SysWOW64\winsta.dll
2015-01-17 15:38 - 2014-07-17 02:21 - 00212480 _____ (Microsoft Corporation) C:\windows\system32\Drivers\rdpwd.sys
2015-01-17 15:38 - 2014-07-17 02:21 - 00039936 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tssecsrv.sys
2015-01-17 15:38 - 2014-04-25 03:34 - 00801280 _____ (Microsoft Corporation) C:\windows\system32\usp10.dll
2015-01-17 15:38 - 2014-04-25 03:06 - 00626688 _____ (Microsoft Corporation) C:\windows\SysWOW64\usp10.dll
2015-01-17 15:38 - 2014-03-04 10:44 - 01163264 _____ (Microsoft Corporation) C:\windows\system32\kernel32.dll
2015-01-17 15:38 - 2014-03-04 10:44 - 00722944 _____ (Microsoft Corporation) C:\windows\system32\objsel.dll
2015-01-17 15:38 - 2014-03-04 10:44 - 00424960 _____ (Microsoft Corporation) C:\windows\system32\KernelBase.dll
2015-01-17 15:38 - 2014-03-04 10:44 - 00362496 _____ (Microsoft Corporation) C:\windows\system32\wow64win.dll
2015-01-17 15:38 - 2014-03-04 10:44 - 00243712 _____ (Microsoft Corporation) C:\windows\system32\wow64.dll
2015-01-17 15:38 - 2014-03-04 10:44 - 00039936 _____ (Microsoft Corporation) C:\windows\system32\wincredprovider.dll
2015-01-17 15:38 - 2014-03-04 10:44 - 00016384 _____ (Microsoft Corporation) C:\windows\system32\ntvdm64.dll
2015-01-17 15:38 - 2014-03-04 10:44 - 00013312 _____ (Microsoft Corporation) C:\windows\system32\wow64cpu.dll
2015-01-17 15:38 - 2014-03-04 10:43 - 00057344 _____ (Microsoft Corporation) C:\windows\system32\cngprovider.dll
2015-01-17 15:38 - 2014-03-04 10:43 - 00056832 _____ (Microsoft Corporation) C:\windows\system32\adprovider.dll
2015-01-17 15:38 - 2014-03-04 10:43 - 00053760 _____ (Microsoft Corporation) C:\windows\system32\capiprovider.dll
2015-01-17 15:38 - 2014-03-04 10:43 - 00052736 _____ (Microsoft Corporation) C:\windows\system32\dpapiprovider.dll
2015-01-17 15:38 - 2014-03-04 10:43 - 00044544 _____ (Microsoft Corporation) C:\windows\system32\dimsroam.dll
2015-01-17 15:38 - 2014-03-04 10:17 - 00538112 _____ (Microsoft Corporation) C:\windows\SysWOW64\objsel.dll
2015-01-17 15:38 - 2014-03-04 10:17 - 00051200 _____ (Microsoft Corporation) C:\windows\SysWOW64\cngprovider.dll
2015-01-17 15:38 - 2014-03-04 10:17 - 00049664 _____ (Microsoft Corporation) C:\windows\SysWOW64\adprovider.dll
2015-01-17 15:38 - 2014-03-04 10:17 - 00048128 _____ (Microsoft Corporation) C:\windows\SysWOW64\capiprovider.dll
2015-01-17 15:38 - 2014-03-04 10:17 - 00047616 _____ (Microsoft Corporation) C:\windows\SysWOW64\dpapiprovider.dll
2015-01-17 15:38 - 2014-03-04 10:17 - 00036864 _____ (Microsoft Corporation) C:\windows\SysWOW64\dimsroam.dll
2015-01-17 15:38 - 2014-03-04 10:17 - 00035328 _____ (Microsoft Corporation) C:\windows\SysWOW64\wincredprovider.dll
2015-01-17 15:38 - 2014-03-04 10:17 - 00014336 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntvdm64.dll
2015-01-17 15:38 - 2014-03-04 10:16 - 01114112 _____ (Microsoft Corporation) C:\windows\SysWOW64\kernel32.dll
2015-01-17 15:38 - 2014-03-04 10:16 - 00274944 _____ (Microsoft Corporation) C:\windows\SysWOW64\KernelBase.dll
2015-01-17 15:38 - 2014-03-04 10:16 - 00025600 _____ (Microsoft Corporation) C:\windows\SysWOW64\setup16.exe
2015-01-17 15:38 - 2014-03-04 10:16 - 00005120 _____ (Microsoft Corporation) C:\windows\SysWOW64\wow32.dll
2015-01-17 15:38 - 2014-03-04 09:09 - 00007680 _____ (Microsoft Corporation) C:\windows\SysWOW64\instnm.exe
2015-01-17 15:38 - 2014-03-04 09:09 - 00002048 _____ (Microsoft Corporation) C:\windows\SysWOW64\user.exe
2015-01-17 15:38 - 2011-04-09 07:58 - 00142336 _____ (Microsoft Corporation) C:\windows\system32\poqexec.exe
2015-01-17 15:38 - 2011-04-09 06:56 - 00123904 _____ (Microsoft Corporation) C:\windows\SysWOW64\poqexec.exe
2015-01-17 15:37 - 2014-12-19 02:46 - 00141312 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxdav.sys
2015-01-17 15:37 - 2014-12-12 06:35 - 05553592 _____ (Microsoft Corporation) C:\windows\system32\ntoskrnl.exe
2015-01-17 15:37 - 2014-12-12 06:31 - 00503808 _____ (Microsoft Corporation) C:\windows\system32\srcore.dll
2015-01-17 15:37 - 2014-12-12 06:31 - 00296960 _____ (Microsoft Corporation) C:\windows\system32\rstrui.exe
2015-01-17 15:37 - 2014-12-12 06:31 - 00050176 _____ (Microsoft Corporation) C:\windows\system32\srclient.dll
2015-01-17 15:37 - 2014-12-12 06:11 - 03971512 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntkrnlpa.exe
2015-01-17 15:37 - 2014-12-12 06:11 - 03916728 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntoskrnl.exe
2015-01-17 15:37 - 2014-12-12 06:07 - 00043008 _____ (Microsoft Corporation) C:\windows\SysWOW64\srclient.dll
2015-01-17 15:37 - 2014-11-11 04:09 - 01424384 _____ (Microsoft Corporation) C:\windows\system32\WindowsCodecs.dll
2015-01-17 15:37 - 2014-11-11 04:08 - 00728064 _____ (Microsoft Corporation) C:\windows\system32\kerberos.dll
2015-01-17 15:37 - 2014-11-11 04:08 - 00241152 _____ (Microsoft Corporation) C:\windows\system32\pku2u.dll
2015-01-17 15:37 - 2014-11-11 03:44 - 01230336 _____ (Microsoft Corporation) C:\windows\SysWOW64\WindowsCodecs.dll
2015-01-17 15:37 - 2014-11-11 03:44 - 00550912 _____ (Microsoft Corporation) C:\windows\SysWOW64\kerberos.dll
2015-01-17 15:37 - 2014-11-11 03:44 - 00186880 _____ (Microsoft Corporation) C:\windows\SysWOW64\pku2u.dll
2015-01-17 15:37 - 2014-10-14 03:16 - 00155064 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecpkg.sys
2015-01-17 15:37 - 2014-10-14 03:13 - 00683520 _____ (Microsoft Corporation) C:\windows\system32\termsrv.dll
2015-01-17 15:37 - 2014-10-14 03:12 - 01460736 _____ (Microsoft Corporation) C:\windows\system32\lsasrv.dll
2015-01-17 15:37 - 2014-10-14 03:09 - 00146432 _____ (Microsoft Corporation) C:\windows\system32\msaudite.dll
2015-01-17 15:37 - 2014-10-14 03:07 - 00681984 _____ (Microsoft Corporation) C:\windows\system32\adtschema.dll
2015-01-17 15:37 - 2014-10-14 02:50 - 00022016 _____ (Microsoft Corporation) C:\windows\SysWOW64\secur32.dll
2015-01-17 15:37 - 2014-10-14 02:49 - 00096768 _____ (Microsoft Corporation) C:\windows\SysWOW64\sspicli.dll
2015-01-17 15:37 - 2014-10-14 02:47 - 00146432 _____ (Microsoft Corporation) C:\windows\SysWOW64\msaudite.dll
2015-01-17 15:37 - 2014-10-14 02:46 - 00681984 _____ (Microsoft Corporation) C:\windows\SysWOW64\adtschema.dll
2015-01-17 15:37 - 2014-10-10 01:57 - 03198976 _____ (Microsoft Corporation) C:\windows\system32\win32k.sys
2015-01-17 15:37 - 2014-08-21 07:43 - 01882624 _____ (Microsoft Corporation) C:\windows\system32\msxml3.dll
2015-01-17 15:37 - 2014-08-21 07:40 - 00002048 _____ (Microsoft Corporation) C:\windows\system32\msxml3r.dll
2015-01-17 15:37 - 2014-08-21 07:26 - 01237504 _____ (Microsoft Corporation) C:\windows\SysWOW64\msxml3.dll
2015-01-17 15:37 - 2014-08-21 07:23 - 00002048 _____ (Microsoft Corporation) C:\windows\SysWOW64\msxml3r.dll
2015-01-17 15:37 - 2014-08-12 03:02 - 00878080 _____ (Microsoft Corporation) C:\windows\system32\IMJP10K.DLL
2015-01-17 15:37 - 2014-08-12 02:36 - 00701440 _____ (Microsoft Corporation) C:\windows\SysWOW64\IMJP10K.DLL
2015-01-17 15:37 - 2014-06-18 03:18 - 00692736 _____ (Microsoft Corporation) C:\windows\system32\osk.exe
2015-01-17 15:37 - 2014-06-18 02:51 - 00646144 _____ (Microsoft Corporation) C:\windows\SysWOW64\osk.exe
2015-01-17 15:37 - 2014-06-12 08:52 - 00986560 _____ (Microsoft Corporation) C:\windows\system32\Drivers\dxgkrnl.sys
2015-01-17 15:37 - 2014-06-03 11:02 - 01941504 _____ (Microsoft Corporation) C:\windows\system32\authui.dll
2015-01-17 15:37 - 2014-06-03 11:02 - 00504320 _____ (Microsoft Corporation) C:\windows\system32\msihnd.dll
2015-01-17 15:37 - 2014-06-03 11:02 - 00112064 _____ (Microsoft Corporation) C:\windows\system32\consent.exe
2015-01-17 15:37 - 2014-06-03 10:29 - 01805824 _____ (Microsoft Corporation) C:\windows\SysWOW64\authui.dll
2015-01-17 15:37 - 2014-06-03 10:29 - 00337408 _____ (Microsoft Corporation) C:\windows\SysWOW64\msihnd.dll
2015-01-17 15:37 - 2014-04-12 03:22 - 00095680 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecdd.sys
2015-01-17 15:37 - 2014-04-12 03:19 - 00136192 _____ (Microsoft Corporation) C:\windows\system32\sspicli.dll
2015-01-17 15:37 - 2014-04-12 03:19 - 00031232 _____ (Microsoft Corporation) C:\windows\system32\lsass.exe
2015-01-17 15:37 - 2014-04-12 03:19 - 00029184 _____ (Microsoft Corporation) C:\windows\system32\sspisrv.dll
2015-01-17 15:37 - 2014-04-12 03:19 - 00028160 _____ (Microsoft Corporation) C:\windows\system32\secur32.dll
2015-01-17 15:37 - 2014-04-05 03:47 - 01903552 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tcpip.sys
2015-01-17 15:37 - 2014-04-05 03:47 - 00288192 _____ (Microsoft Corporation) C:\windows\system32\Drivers\FWPKCLNT.SYS
2015-01-17 15:37 - 2014-03-26 15:44 - 02002432 _____ (Microsoft Corporation) C:\windows\system32\msxml6.dll
2015-01-17 15:37 - 2014-03-26 15:41 - 00002048 _____ (Microsoft Corporation) C:\windows\system32\msxml6r.dll
2015-01-17 15:37 - 2014-03-26 15:27 - 01389056 _____ (Microsoft Corporation) C:\windows\SysWOW64\msxml6.dll
2015-01-17 15:37 - 2014-03-26 15:25 - 00002048 _____ (Microsoft Corporation) C:\windows\SysWOW64\msxml6r.dll
2015-01-17 15:37 - 2011-11-17 07:35 - 00395776 _____ (Microsoft Corporation) C:\windows\system32\webio.dll
2015-01-17 15:37 - 2011-11-17 06:35 - 00314880 _____ (Microsoft Corporation) C:\windows\SysWOW64\webio.dll
2015-01-17 15:36 - 2014-12-19 04:06 - 00210432 _____ (Microsoft Corporation) C:\windows\system32\profsvc.dll
2015-01-17 15:36 - 2014-12-06 05:17 - 00303616 _____ (Microsoft Corporation) C:\windows\system32\nlasvc.dll
2015-01-17 15:36 - 2014-12-06 04:50 - 00156672 _____ (Microsoft Corporation) C:\windows\SysWOW64\ncsi.dll
2015-01-17 15:36 - 2014-12-06 04:50 - 00052224 _____ (Microsoft Corporation) C:\windows\SysWOW64\nlaapi.dll
2015-01-17 15:36 - 2014-10-25 02:57 - 00077824 _____ (Microsoft Corporation) C:\windows\system32\packager.dll
2015-01-17 15:36 - 2014-10-25 02:32 - 00067584 _____ (Microsoft Corporation) C:\windows\SysWOW64\packager.dll
2015-01-17 15:36 - 2014-10-18 03:05 - 00861696 _____ (Microsoft Corporation) C:\windows\system32\oleaut32.dll
2015-01-17 15:36 - 2014-10-18 02:33 - 00571904 _____ (Microsoft Corporation) C:\windows\SysWOW64\oleaut32.dll
2015-01-17 15:36 - 2014-10-03 03:12 - 00500224 _____ (Microsoft Corporation) C:\windows\system32\AUDIOKSE.dll
2015-01-17 15:36 - 2014-10-03 03:11 - 00680960 _____ (Microsoft Corporation) C:\windows\system32\audiosrv.dll
2015-01-17 15:36 - 2014-10-03 03:11 - 00440832 _____ (Microsoft Corporation) C:\windows\system32\AudioEng.dll
2015-01-17 15:36 - 2014-10-03 03:11 - 00296448 _____ (Microsoft Corporation) C:\windows\system32\AudioSes.dll
2015-01-17 15:36 - 2014-10-03 03:11 - 00284672 _____ (Microsoft Corporation) C:\windows\system32\EncDump.dll
2015-01-17 15:36 - 2014-10-03 02:44 - 00442880 _____ (Microsoft Corporation) C:\windows\SysWOW64\AUDIOKSE.dll
2015-01-17 15:36 - 2014-10-03 02:44 - 00374784 _____ (Microsoft Corporation) C:\windows\SysWOW64\AudioEng.dll
2015-01-17 15:36 - 2014-10-03 02:44 - 00195584 _____ (Microsoft Corporation) C:\windows\SysWOW64\AudioSes.dll
2015-01-17 15:36 - 2014-09-04 06:23 - 00424448 _____ (Microsoft Corporation) C:\windows\system32\rastls.dll
2015-01-17 15:36 - 2014-09-04 06:04 - 00372736 _____ (Microsoft Corporation) C:\windows\SysWOW64\rastls.dll
2015-01-17 15:36 - 2014-06-18 23:23 - 01943696 _____ (Microsoft Corporation) C:\windows\system32\dfshim.dll
2015-01-17 15:36 - 2014-06-18 23:23 - 01131664 _____ (Microsoft Corporation) C:\windows\SysWOW64\dfshim.dll
2015-01-17 15:36 - 2014-06-18 23:23 - 00156824 _____ (Microsoft Corporation) C:\windows\SysWOW64\mscorier.dll
2015-01-17 15:36 - 2014-06-18 23:23 - 00156312 _____ (Microsoft Corporation) C:\windows\system32\mscorier.dll
2015-01-17 15:36 - 2014-06-18 23:23 - 00081560 _____ (Microsoft Corporation) C:\windows\SysWOW64\mscories.dll
2015-01-17 15:36 - 2014-06-18 23:23 - 00073880 _____ (Microsoft Corporation) C:\windows\system32\mscories.dll
2015-01-17 15:36 - 2014-06-06 11:10 - 00624128 _____ (Microsoft Corporation) C:\windows\system32\qedit.dll
2015-01-17 15:36 - 2014-06-06 10:44 - 00509440 _____ (Microsoft Corporation) C:\windows\SysWOW64\qedit.dll
2015-01-17 15:36 - 2014-05-30 07:45 - 00497152 _____ (Microsoft Corporation) C:\windows\system32\Drivers\afd.sys
2015-01-17 15:36 - 2014-01-29 03:32 - 00484864 _____ (Microsoft Corporation) C:\windows\system32\wer.dll
2015-01-17 15:36 - 2014-01-29 03:06 - 00381440 _____ (Microsoft Corporation) C:\windows\SysWOW64\wer.dll
2015-01-17 15:36 - 2013-07-20 11:33 - 00124112 _____ (Microsoft Corporation) C:\windows\system32\PresentationCFFRasterizerNative_v0300.dll
2015-01-17 15:36 - 2013-07-20 11:33 - 00102608 _____ (Microsoft Corporation) C:\windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2015-01-17 15:35 - 2014-08-23 03:07 - 00404480 _____ (Microsoft Corporation) C:\windows\system32\gdi32.dll
2015-01-17 15:35 - 2014-08-23 02:45 - 00311808 _____ (Microsoft Corporation) C:\windows\SysWOW64\gdi32.dll
2015-01-17 15:35 - 2011-02-23 05:55 - 00090624 _____ (Microsoft Corporation) C:\windows\system32\Drivers\bowser.sys
2015-01-17 15:26 - 2014-07-14 03:02 - 01216000 _____ (Microsoft Corporation) C:\windows\system32\rpcrt4.dll
2015-01-17 15:26 - 2014-07-14 02:40 - 00664064 _____ (Microsoft Corporation) C:\windows\SysWOW64\rpcrt4.dll
2015-01-17 14:57 - 2015-01-17 14:57 - 00000000 ____D () C:\windows\system32\appmgmt
2015-01-17 14:32 - 2012-02-17 07:38 - 01031680 _____ (Microsoft Corporation) C:\windows\system32\rdpcore.dll
2015-01-17 14:32 - 2012-02-17 06:34 - 00826880 _____ (Microsoft Corporation) C:\windows\SysWOW64\rdpcore.dll
2015-01-17 14:32 - 2012-02-17 05:57 - 00023552 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tdtcp.sys
2015-01-17 14:29 - 2015-02-01 17:26 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Local\Hewlett-Packard
2015-01-17 14:24 - 2014-05-14 17:23 - 02477536 _____ (Microsoft Corporation) C:\windows\system32\wuaueng.dll
2015-01-17 14:24 - 2014-05-14 17:23 - 00700384 _____ (Microsoft Corporation) C:\windows\system32\wuapi.dll
2015-01-17 14:24 - 2014-05-14 17:23 - 00581600 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuapi.dll
2015-01-17 14:24 - 2014-05-14 17:23 - 00058336 _____ (Microsoft Corporation) C:\windows\system32\wuauclt.exe
2015-01-17 14:24 - 2014-05-14 17:23 - 00044512 _____ (Microsoft Corporation) C:\windows\system32\wups2.dll
2015-01-17 14:24 - 2014-05-14 17:23 - 00038880 _____ (Microsoft Corporation) C:\windows\system32\wups.dll
2015-01-17 14:24 - 2014-05-14 17:23 - 00036320 _____ (Microsoft Corporation) C:\windows\SysWOW64\wups.dll
2015-01-17 14:24 - 2014-05-14 17:21 - 02620928 _____ (Microsoft Corporation) C:\windows\system32\wucltux.dll
2015-01-17 14:24 - 2014-05-14 17:20 - 00097792 _____ (Microsoft Corporation) C:\windows\system32\wudriver.dll
2015-01-17 14:24 - 2014-05-14 17:17 - 00092672 _____ (Microsoft Corporation) C:\windows\SysWOW64\wudriver.dll
2015-01-17 14:24 - 2014-05-14 09:23 - 00198600 _____ (Microsoft Corporation) C:\windows\system32\wuwebv.dll
2015-01-17 14:24 - 2014-05-14 09:23 - 00179656 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuwebv.dll
2015-01-17 14:24 - 2014-05-14 09:20 - 00036864 _____ (Microsoft Corporation) C:\windows\system32\wuapp.exe
2015-01-17 14:24 - 2014-05-14 09:17 - 00033792 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuapp.exe
2015-01-17 14:23 - 2015-01-19 08:50 - 00111448 _____ () C:\Users\HP ProBook 470 G2\AppData\Local\GDIPFONTCACHEV1.DAT
2015-01-17 14:23 - 2015-01-17 14:23 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Roaming\Intel Corporation
2015-01-17 14:23 - 2015-01-17 14:23 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Roaming\ATI
2015-01-17 14:23 - 2015-01-17 14:23 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Local\ATI
2015-01-17 14:22 - 2015-01-28 14:08 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Roaming\Hewlett-Packard
2015-01-17 14:22 - 2015-01-19 09:59 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Roaming\hpqLog
2015-01-17 14:22 - 2015-01-17 14:22 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Local\Power2Go8
2015-01-17 14:21 - 2015-02-03 16:06 - 00003982 _____ () C:\windows\System32\Tasks\User_Feed_Synchronization-{A3EC1CE9-D038-490D-8706-1AC18333F6A4}
2015-01-17 14:21 - 2015-01-19 14:26 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Local\VirtualStore
2015-01-17 14:21 - 2015-01-18 14:57 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Roaming\Adobe
2015-01-17 14:21 - 2015-01-17 14:21 - 00001432 _____ () C:\Users\HP ProBook 470 G2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-01-17 14:21 - 2015-01-17 14:21 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Local\RemEngine
2015-01-17 14:21 - 2015-01-17 14:21 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Local\Hewlett-Packard_Company
2015-01-17 14:20 - 2015-02-04 10:19 - 00065987 _____ () C:\Users\HP ProBook 470 G2\AppData\Local\BTServer.log
2015-01-17 14:20 - 2015-01-17 14:21 - 00000000 ____D () C:\Users\HP ProBook 470 G2
2015-01-17 14:20 - 2015-01-17 14:20 - 00000180 _____ () C:\windows\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2015-01-17 14:20 - 2015-01-17 14:20 - 00000020 ___SH () C:\Users\HP ProBook 470 G2\ntuser.ini
2015-01-17 14:20 - 2015-01-17 14:20 - 00000000 _SHDL () C:\Users\HP ProBook 470 G2\Vorlagen
2015-01-17 14:20 - 2015-01-17 14:20 - 00000000 _SHDL () C:\Users\HP ProBook 470 G2\Startmenü
2015-01-17 14:20 - 2015-01-17 14:20 - 00000000 _SHDL () C:\Users\HP ProBook 470 G2\Netzwerkumgebung
2015-01-17 14:20 - 2015-01-17 14:20 - 00000000 _SHDL () C:\Users\HP ProBook 470 G2\Lokale Einstellungen
2015-01-17 14:20 - 2015-01-17 14:20 - 00000000 _SHDL () C:\Users\HP ProBook 470 G2\Eigene Dateien
2015-01-17 14:20 - 2015-01-17 14:20 - 00000000 _SHDL () C:\Users\HP ProBook 470 G2\Druckumgebung
2015-01-17 14:20 - 2015-01-17 14:20 - 00000000 _SHDL () C:\Users\HP ProBook 470 G2\Documents\Eigene Musik
2015-01-17 14:20 - 2015-01-17 14:20 - 00000000 _SHDL () C:\Users\HP ProBook 470 G2\Documents\Eigene Bilder
2015-01-17 14:20 - 2015-01-17 14:20 - 00000000 _SHDL () C:\Users\HP ProBook 470 G2\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2015-01-17 14:20 - 2015-01-17 14:20 - 00000000 _SHDL () C:\Users\HP ProBook 470 G2\AppData\Local\Verlauf
2015-01-17 14:20 - 2015-01-17 14:20 - 00000000 _SHDL () C:\Users\HP ProBook 470 G2\AppData\Local\Anwendungsdaten
2015-01-17 14:20 - 2015-01-17 14:20 - 00000000 _SHDL () C:\Users\HP ProBook 470 G2\Anwendungsdaten
2015-01-17 14:20 - 2015-01-17 14:20 - 00000000 __RSH () C:\windows\SysWOW64\Drivers\103C_HP_bNB_ProBook 470 G2_Y5336AN_0U_QCND43650KK_E14WWR4AW602_4A_I2249_SHP_V67.22_BM74 01.03_T140707_W748-1_L407_M8065_J750_7Intel_8651_92.60_#140522_N10EC8168;10ECB723_(G6W69EA#ABD)_XMOBILE_CN10_Z.MRK
2015-01-17 14:20 - 2015-01-17 14:20 - 00000000 __RSH () C:\windows\system32\Drivers\103C_HP_bNB_ProBook 470 G2_Y5336AN_0U_QCND43650KK_E14WWR4AW602_4A_I2249_SHP_V67.22_BM74 01.03_T140707_W748-1_L407_M8065_J750_7Intel_8651_92.60_#140522_N10EC8168;10ECB723_(G6W69EA#ABD)_XMOBILE_CN10_Z.MRK
2015-01-17 14:20 - 2015-01-17 14:20 - 00000000 ____D () C:\Users\HP ProBook 470 G2\Documents\My Bluetooth
2015-01-17 14:20 - 2015-01-17 14:20 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Roaming\DigitalPersona
2015-01-17 14:20 - 2015-01-17 14:20 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Local\DigitalPersona
2015-01-17 14:20 - 2014-09-09 20:22 - 00000000 ___HD () C:\Users\HP ProBook 470 G2\Documents\hp.system.package.metadata
2015-01-17 14:20 - 2009-07-14 05:54 - 00000000 ___RD () C:\Users\HP ProBook 470 G2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-01-17 14:20 - 2009-07-14 05:49 - 00000000 ___RD () C:\Users\HP ProBook 470 G2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2015-01-17 14:17 - 2015-02-04 10:30 - 01464148 _____ () C:\windows\WindowsUpdate.log

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-02-04 13:23 - 2014-09-09 21:04 - 00700380 _____ () C:\windows\system32\perfh007.dat
2015-02-04 13:23 - 2014-09-09 21:04 - 00149986 _____ () C:\windows\system32\perfc007.dat
2015-02-04 13:23 - 2009-07-14 06:13 - 01622706 _____ () C:\windows\system32\PerfStringBackup.INI
2015-02-04 10:27 - 2009-07-14 05:45 - 00026608 ____H () C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-02-04 10:27 - 2009-07-14 05:45 - 00026608 ____H () C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-02-04 10:19 - 2009-07-14 06:08 - 00000006 ____H () C:\windows\Tasks\SA.DAT
2015-02-04 10:19 - 2009-07-14 05:51 - 00090769 _____ () C:\windows\setupact.log
2015-02-04 10:18 - 2010-11-21 04:47 - 00917530 _____ () C:\windows\PFRO.log
2015-02-01 14:21 - 2014-05-22 13:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP
2015-02-01 14:20 - 2014-09-09 20:51 - 00000000 ____D () C:\windows\Hewlett-Packard
2015-01-26 15:29 - 2014-09-09 20:39 - 00000000 ____D () C:\ProgramData\Skype
2015-01-23 08:42 - 2014-09-09 20:21 - 00114410 _____ () C:\windows\DPINST.LOG
2015-01-23 08:38 - 2013-12-03 20:34 - 00000000 ____D () C:\ProgramData\Package Cache
2015-01-19 17:07 - 2014-05-22 13:25 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2015-01-19 14:09 - 2014-09-09 20:41 - 00000000 ____D () C:\ProgramData\Apple
2015-01-19 10:38 - 2009-07-14 04:20 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
2015-01-19 10:27 - 2009-07-14 05:45 - 02363080 _____ () C:\windows\system32\FNTCACHE.DAT
2015-01-19 10:13 - 2014-09-09 20:23 - 00000000 ____D () C:\Program Files (x86)\Realtek
2015-01-19 10:13 - 2014-03-29 00:26 - 00000000 ____D () C:\SWSETUP
2015-01-19 10:08 - 2014-09-09 20:36 - 00000000 ____D () C:\ProgramData\Realtek
2015-01-19 10:05 - 2014-09-09 20:38 - 00674592 _____ (Sunplus) C:\windows\system32\Drivers\SPUVCBv_x64.sys
2015-01-19 10:05 - 2014-09-09 20:38 - 00068984 _____ (Dext5xx) C:\windows\system32\DextUVCB_x64.ax
2015-01-19 10:05 - 2014-09-09 20:38 - 00063864 _____ (Dext5xx) C:\windows\SysWOW64\DextUVCB.ax
2015-01-19 10:05 - 2014-09-09 20:38 - 00004096 _____ (Hewlett-Packard Company) C:\windows\SysWOW64\sigfile.exe
2015-01-19 10:05 - 2014-09-09 20:38 - 00003962 _____ () C:\windows\Dext_21.ini
2015-01-19 10:05 - 2014-09-09 20:38 - 00003958 _____ () C:\windows\Dext_12.ini
2015-01-19 10:05 - 2014-09-09 20:38 - 00003942 _____ () C:\windows\Dext_27.ini
2015-01-19 10:05 - 2014-09-09 20:38 - 00003940 _____ () C:\windows\Dext_25.ini
2015-01-19 10:05 - 2014-09-09 20:38 - 00003876 _____ () C:\windows\Dext_05.ini
2015-01-19 10:05 - 2014-09-09 20:38 - 00003850 _____ () C:\windows\Dext_14.ini
2015-01-19 10:05 - 2014-09-09 20:38 - 00003762 _____ () C:\windows\Dext_10.ini
2015-01-19 10:05 - 2014-09-09 20:38 - 00003752 _____ () C:\windows\Dext_16.ini
2015-01-19 10:05 - 2014-09-09 20:38 - 00003720 _____ () C:\windows\Dext_36.ini
2015-01-19 10:05 - 2014-09-09 20:38 - 00003696 _____ () C:\windows\Dext_22.ini
2015-01-19 10:05 - 2014-09-09 20:38 - 00003688 _____ () C:\windows\Dext_1046.ini
2015-01-19 10:05 - 2014-09-09 20:38 - 00003684 _____ () C:\windows\Dext_08.ini
2015-01-19 10:05 - 2014-09-09 20:38 - 00003640 _____ () C:\windows\Dext_20.ini
2015-01-19 10:05 - 2014-09-09 20:38 - 00003630 _____ () C:\windows\Dext_07.ini
2015-01-19 10:05 - 2014-09-09 20:38 - 00003630 _____ () C:\windows\Dext_06.ini
2015-01-19 10:05 - 2014-09-09 20:38 - 00003598 _____ () C:\windows\Dext_19.ini
2015-01-19 10:05 - 2014-09-09 20:38 - 00003586 _____ () C:\windows\Dext_24.ini
2015-01-19 10:05 - 2014-09-09 20:38 - 00003580 _____ () C:\windows\Dext_02.ini
2015-01-19 10:05 - 2014-09-09 20:38 - 00003536 _____ () C:\windows\Dext_29.ini
2015-01-19 10:05 - 2014-09-09 20:38 - 00003412 _____ () C:\windows\Dext_13.ini
2015-01-19 10:05 - 2014-09-09 20:38 - 00000000 ____D () C:\Program Files (x86)\HP Camera Driver
2015-01-19 10:02 - 2014-09-09 20:19 - 14956922 _____ () C:\ProgramData\hpcsmmsilogs.log
2015-01-19 10:01 - 2014-09-09 20:21 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Security and Protection
2015-01-19 10:01 - 2014-05-22 13:24 - 00000000 ____D () C:\Program Files\Hewlett-Packard
2015-01-19 10:01 - 2014-05-22 13:24 - 00000000 ____D () C:\Program Files (x86)\Hewlett-Packard
2015-01-19 10:00 - 2014-09-09 21:03 - 00000000 ____D () C:\windows\SysWOW64\de
2015-01-19 10:00 - 2014-09-09 21:03 - 00000000 ____D () C:\windows\system32\de
2015-01-19 09:58 - 2014-09-09 20:21 - 00000000 ____D () C:\ProgramData\HPQLOG
2015-01-19 09:51 - 2014-09-09 20:30 - 00001336 _____ () C:\windows\Synaptics.log
2015-01-18 11:08 - 2009-07-14 04:20 - 00000000 ____D () C:\windows\rescache
2015-01-18 10:13 - 2013-12-03 20:37 - 01596986 _____ () C:\windows\SysWOW64\PerfStringBackup.INI
2015-01-18 09:56 - 2009-07-14 04:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared
2015-01-17 21:11 - 2014-05-22 13:25 - 00000000 ____D () C:\ProgramData\Hewlett-Packard
2015-01-17 18:49 - 2009-07-14 04:20 - 00000000 ____D () C:\windows\SysWOW64\Dism
2015-01-17 18:49 - 2009-07-14 04:20 - 00000000 ____D () C:\windows\system32\Dism
2015-01-17 18:49 - 2009-07-14 04:20 - 00000000 ____D () C:\windows\PolicyDefinitions
2015-01-17 18:32 - 2014-09-09 20:41 - 00000000 ____D () C:\ProgramData\CyberLink
2015-01-17 18:12 - 2014-05-22 13:28 - 00001912 _____ () C:\windows\epplauncher.mif
2015-01-17 18:12 - 2014-05-22 13:27 - 00002124 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Security Essentials.lnk
2015-01-17 18:12 - 2014-05-22 13:27 - 00000000 ____D () C:\Program Files\Microsoft Security Client
2015-01-17 18:12 - 2014-05-22 13:27 - 00000000 ____D () C:\Program Files (x86)\Microsoft Security Client
2015-01-17 17:47 - 2009-07-14 06:32 - 00000000 ____D () C:\windows\system32\restore
2015-01-17 17:43 - 2014-09-09 20:41 - 00000000 ____D () C:\Program Files\Windows Journal
2015-01-17 17:43 - 2010-11-21 08:06 - 00000000 ____D () C:\windows\SysWOW64\winrm
2015-01-17 17:43 - 2010-11-21 08:06 - 00000000 ____D () C:\windows\SysWOW64\WCN
2015-01-17 17:43 - 2010-11-21 08:06 - 00000000 ____D () C:\windows\SysWOW64\sysprep
2015-01-17 17:43 - 2010-11-21 08:06 - 00000000 ____D () C:\windows\SysWOW64\slmgr
2015-01-17 17:43 - 2010-11-21 08:06 - 00000000 ____D () C:\windows\SysWOW64\Printing_Admin_Scripts
2015-01-17 17:43 - 2010-11-21 08:06 - 00000000 ____D () C:\windows\system32\winrm
2015-01-17 17:43 - 2010-11-21 08:06 - 00000000 ____D () C:\windows\system32\WCN
2015-01-17 17:43 - 2010-11-21 08:06 - 00000000 ____D () C:\windows\system32\slmgr
2015-01-17 17:43 - 2010-11-21 08:06 - 00000000 ____D () C:\windows\system32\Printing_Admin_Scripts
2015-01-17 17:43 - 2009-07-14 06:37 - 00000000 ____D () C:\windows\DigitalLocker
2015-01-17 17:43 - 2009-07-14 06:32 - 00000000 ____D () C:\Program Files (x86)\Windows Sidebar
2015-01-17 17:43 - 2009-07-14 06:32 - 00000000 ____D () C:\Program Files (x86)\Windows Defender
2015-01-17 17:43 - 2009-07-14 04:20 - 00000000 ____D () C:\windows\SysWOW64\oobe
2015-01-17 17:43 - 2009-07-14 04:20 - 00000000 ____D () C:\windows\SysWOW64\MUI
2015-01-17 17:43 - 2009-07-14 04:20 - 00000000 ____D () C:\windows\system32\sysprep
2015-01-17 17:43 - 2009-07-14 04:20 - 00000000 ____D () C:\windows\system32\oobe
2015-01-17 17:43 - 2009-07-14 04:20 - 00000000 ____D () C:\windows\system32\MUI
2015-01-17 17:43 - 2009-07-14 04:20 - 00000000 ____D () C:\windows\IME
2015-01-17 17:43 - 2009-07-14 04:20 - 00000000 ____D () C:\Program Files\Common Files\System
2015-01-17 15:01 - 2014-09-09 20:40 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Communication and Chat
2015-01-17 14:21 - 2014-09-09 20:39 - 00000000 ___RD () C:\Program Files (x86)\Online Services
2015-01-17 14:21 - 2014-05-22 13:27 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Productivity and Tools
2015-01-17 14:21 - 2014-05-22 13:27 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP Help and Support
2015-01-17 14:21 - 2013-12-04 00:39 - 00000000 _RSHD () C:\SYSTEM.SAV
2015-01-17 14:20 - 2013-12-03 20:29 - 00000000 ____D () C:\windows\Panther
2015-01-17 14:17 - 2009-07-14 04:20 - 00000000 __RHD () C:\Users\Public\Libraries

==================== Files in the root of some directories =======

2015-01-17 14:20 - 2015-02-04 10:19 - 0065987 _____ () C:\Users\HP ProBook 470 G2\AppData\Local\BTServer.log
2015-01-18 11:57 - 2015-01-18 11:57 - 0000057 _____ () C:\ProgramData\Ament.ini
2014-09-09 20:19 - 2015-01-19 10:02 - 14956922 _____ () C:\ProgramData\hpcsmmsilogs.log
2014-09-09 20:48 - 2014-09-09 20:48 - 1262966 _____ () C:\ProgramData\hpdam_install_log.txt
2014-09-09 20:47 - 2014-09-09 20:48 - 0544208 _____ () C:\ProgramData\HPFileSanitizer_Install_Log.txt

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-02-03 08:55

==================== End Of Log ============================
         
 
--- --- ---
         

Hi,

die ESET funde löschen wir jetzt mit...

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

C:\Users\HP ProBook 470 G2\Downloads\FileZilla - CHIP-Installer.exe
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
         

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

• Starte nun FRST erneut und klicke den Entfernen Button.
• Das Tool erstellt eine Fixlog.txt.
• Poste mir deren Inhalt.

die beiden anderen Funde sind schon in Quarantene

Downloade Dir bitte SecurityCheck und:

• Speichere es auf dem Desktop.
• Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
• Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.

Poste den Inhalt bitte hier.

Fixlog.txt

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 01-02-2015
Ran by HP ProBook 470 G2 at 2015-02-04 14:19:34 Run:4
Running from H:\
Loaded Profiles: HP ProBook 470 G2 (Available profiles: HP ProBook 470 G2)
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
C:\Users\HP ProBook 470 G2\Downloads\FileZilla - CHIP-Installer.exe
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

*****************

C:\Users\HP ProBook 470 G2\Downloads\FileZilla - CHIP-Installer.exe => Moved successfully.
"HKLM\SOFTWARE\Policies\Google" => Key deleted successfully.

==== End of Fixlog 14:19:35 ====
         

Check Up

 Results of screen317's Security Check version 0.99.95  
 Windows 7 Service Pack 1 x64 (UAC is enabled)  
 Internet Explorer 11  
``````````````Antivirus/Firewall Check:`````````````` 
Microsoft Security Essentials   
 Antivirus up to date!  
`````````Anti-malware/Other Utilities Check:````````` 
  Java 64-bit 8 Update 31  
 Adobe Flash Player 16.0.0.296  
 Mozilla Firefox (35.0.1) 
````````Process Check: objlist.exe by Laurent````````  
 Microsoft Security Essentials MSMpEng.exe 
 Microsoft Security Essentials msseces.exe 
 Malwarebytes Anti-Malware mbamservice.exe  
 Malwarebytes Anti-Malware mbam.exe  
 Malwarebytes Anti-Malware mbamscheduler.exe   
`````````````````System Health check````````````````` 
 Total Fragmentation on Drive C:  
````````````````````End of Log``````````````````````
         

Hi,

das sieht ja gut aus mitlwerweile.

Poste mir bitte ein neues FRST Logfile. Wenn dann alles sauber ist räumen wir noch auf.

Hi,

das finde ich auch

Hier meine aktuelle FRST-Datei


FRST Logfile:

FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 01-02-2015
Ran by HP ProBook 470 G2 (administrator) on HPPROBOOK on 04-02-2015 16:51:06
Running from H:\
Loaded Profiles: HP ProBook 470 G2 (Available profiles: HP ProBook 470 G2)
Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(DigitalPersona, Inc.) C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpHostW.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(DigitalPersona, Inc.) C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpCardEngine.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Hewlett-Packard Company) C:\Windows\System32\hpservice.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Validity Sensors, Inc.) C:\Windows\System32\vcsFPService.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(DigitalPersona, Inc.) C:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DPAgent.exe
() C:\Program Files (x86)\Akademische Arbeitsgemeinschaft\AAVUpdateManager\aavus.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Realtek Semiconductor Corporation) C:\Program Files (x86)\Realtek\REALTEK Bluetooth\AvrcpService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
() C:\Program Files (x86)\Realtek\REALTEK Bluetooth\BTDevMgr.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe
() C:\Program Files (x86)\Hewlett-Packard\HP Theft Recovery\CtService.exe
(Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\File Sanitizer\HPFSService.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
() C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe
(Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe
(Realtek Semiconductor Corporation) C:\Program Files (x86)\Realtek\REALTEK Bluetooth\RtkBleServ.exe
(Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exe
(Western Digital Technologies, Inc.) C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(DigitalPersona, Inc.) C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpAgent.exe
(Western Digital Technologies, Inc.) C:\Program Files (x86)\Western Digital\WD SmartWare\WDBackupEngine.exe
(Hewlett-Packard Development Company) C:\Program Files (x86)\Hewlett-Packard\HP Device Access Manager\HP.ProtectTools.DeviceAccessManager.ServiceHost.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
(Intel Corporation) C:\Windows\System32\igfxTray.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Realtek Semiconductor Corporation) C:\Program Files (x86)\Realtek\REALTEK Bluetooth\BTServer.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(Hewlett-Packard Co.) C:\Program Files\HP\HP Officejet 6600\Bin\ScanToPCActivationApp.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTsysTray8.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\QLBController.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP 3D DriveGuard\AccelerometerSt.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe
(Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\File Sanitizer\CORESHREDDER.exe
(Western Digital Technologies, Inc.) C:\Program Files (x86)\Western Digital\WD Utilities\WDDriveUtilitiesHelper.exe
(Western Digital Technologies, Inc.) C:\Program Files (x86)\Western Digital\WD Security\WDDriveAutoUnlock.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Western Digital Technologies, Inc.) C:\Program Files (x86)\Western Digital\WD Quick View\WDDMStatus.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\HPConnectionManager.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\hpCMSrv.exe
(Microsoft Corporation) C:\Program Files (x86)\Windows Live\Mail\wlmail.exe
(Microsoft Corporation) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [287592 2013-09-27] (Intel Corporation)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7574896 2014-04-16] (Realtek Semiconductor)
HKLM\...\Run: [BtServer] => C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTServer.exe [226008 2014-07-03] (Realtek Semiconductor Corporation)
HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [1331288 2014-08-22] (Microsoft Corporation)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2863344 2015-01-19] (Synaptics Incorporated)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [169768 2015-01-27] (Apple Inc.)
HKLM-x32\...\Run: [QLBController] => C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\QLBController.exe [419512 2014-04-01] (Hewlett-Packard Company)
HKLM-x32\...\Run: [HPConnectionManager] => c:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\HPCMDelayStart.exe [185144 2014-04-09] (Hewlett-Packard Development Company, L.P.)
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [292848 2014-04-10] (Intel Corporation)
HKLM-x32\...\Run: [StartCCC] => c:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [767200 2014-04-07] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [AccelerometerSysTrayApplet] => C:\Program Files (x86)\Hewlett-Packard\HP 3D DriveGuard\AccelerometerST.exe [126240 2014-04-01] (Hewlett-Packard Company)
HKLM-x32\...\Run: [HP Camera Driver_Monitor] => "C:\Program Files (x86)\HP Camera Driver\monitor.exe"
HKLM-x32\...\Run: [YouCam Mirage] => "c:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe"
HKLM-x32\...\Run: [YouCam Tray] => c:\Program Files (x86)\CyberLink\YouCam\YouCamTray.exe [167488 2013-09-16] (CyberLink Corp.)
HKLM-x32\...\Run: [CLMLServer_For_P2G8] => c:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe [111576 2013-08-05] (CyberLink)
HKLM-x32\...\Run: [CLVirtualDrive] => c:\Program Files (x86)\CyberLink\Power2Go8\VirtualDrive.exe [490760 2013-08-07] (CyberLink Corp.)
HKLM-x32\...\Run: [HP File Sanitizer] => C:\Program Files (x86)\Hewlett-Packard\File Sanitizer\Coreshredder.exe [2213592 2014-02-05] (Hewlett-Packard)
HKLM-x32\...\Run: [DriveUtilitiesHelper] => C:\Program Files (x86)\Western Digital\WD Utilities\WDDriveUtilitiesHelper.exe [1852264 2014-05-23] (Western Digital Technologies, Inc.)
HKLM-x32\...\Run: [WD Drive Unlocker] => C:\Program Files (x86)\Western Digital\WD Security\WDDriveAutoUnlock.exe [1694048 2014-10-23] (Western Digital Technologies, Inc.)
HKLM-x32\...\Run: [WD Quick View] => C:\Program Files (x86)\Western Digital\WD Quick View\WDDMStatus.exe [5562736 2014-12-02] (Western Digital Technologies, Inc.)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard)
HKLM-x32\...\Run: [] => [X]
HKLM\...\RunOnce: [NCPluginUpdater] => C:\Program Files (x86)\Hewlett-Packard\HP Health Check\ActiveCheck\product_line\NCPluginUpdater.exe [21720 2015-01-28] (Hewlett-Packard)
HKLM\...\Winlogon: [Userinit] C:\Windows\system32\userinit.exe,C:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DPAgent.exe,
HKU\S-1-5-21-3292273767-2171407329-2624488104-1001\...\Run: [HP Officejet 6600 (NET)] => C:\Program Files\HP\HP Officejet 6600\Bin\ScanToPCActivationApp.exe [2573416 2012-10-17] (Hewlett-Packard Co.)
Lsa: [Notification Packages] DPPassFilter scecli
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\ISCTSystray.lnk
ShortcutTarget: ISCTSystray.lnk -> C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTsysTray8.exe (Intel Corporation)
Startup: C:\Users\HP ProBook 470 G2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\An OneNote senden.lnk
ShortcutTarget: An OneNote senden.lnk -> C:\Program Files\Microsoft Office 15\root\office15\ONENOTEM.EXE (Microsoft Corporation)
Startup: C:\Users\HP ProBook 470 G2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\AutoStarter.lnk
ShortcutTarget: AutoStarter.lnk -> C:\Users\HP ProBook 470 G2\AppData\Roaming\autostarter.exe (No File)
ShellIconOverlayIdentifiers-x32: [ SkyDrivePro1 (ErrorConflict)] -> {8BA85C75-763B-4103-94EB-9470F12FE0F7} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ SkyDrivePro2 (SyncInProgress)] -> {CD55129A-B1A1-438E-A425-CEBC7DC684EE} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ SkyDrivePro3 (InSync)] -> {E768CD3B-BDDC-436D-9C13-E1B39CA257B1} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL (Microsoft Corporation)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://g.uk.msn.com/HPCOM14/10
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://g.uk.msn.com/HPCOM14/10
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.uk.msn.com/HPCOM14/10
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.uk.msn.com/HPCOM14/10
HKU\S-1-5-21-3292273767-2171407329-2624488104-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://g.uk.msn.com/HPCOM14/10
HKU\S-1-5-21-3292273767-2171407329-2624488104-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.uk.msn.com/HPCOM14/10
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll (Hewlett-Packard)
BHO-x32: HP File Sanitizer -> {3134413B-49B4-425C-98A5-893C1F195601} -> C:\Program Files (x86)\Hewlett-Packard\File Sanitizer\IEBHO.dll (Hewlett-Packard)
BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\Office15\OCHelper.dll (Microsoft Corporation)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office 15\root\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll (Hewlett-Packard)
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL (Microsoft Corporation)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\HP ProBook 470 G2\AppData\Roaming\Mozilla\Firefox\Profiles\a6bnzvty.default
FF DefaultSearchEngine: DuckDuckGo
FF Homepage: https://duckduckgo.com/
FF Plugin: @adobe.com/FlashPlayer -> C:\windows\system32\Macromed\Flash\NPSWF64_16_0_0_296.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_296.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/pdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll ()
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.fdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll ()
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: digitalpersona.com/ChromeDPAgent -> C:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\BrowserExt\components\npChromeDPAgent.dll (DigitalPersona, Inc.)
FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2015-01-29]
FF HKLM-x32\...\Firefox\Extensions: [dpmaxz_ng@jetpack] - C:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\BrowserExt\dpchrome
FF Extension: HP Client Security Manager - C:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\BrowserExt\dpchrome [2015-01-19]

Chrome: 
=======
CHR HKLM-x32\...\Chrome\Extension: [ncffjdbbodifgldkcbhmiiljfcnbgjab] - C:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\BrowserExt\dpchrome.crx [2014-06-26]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AAV UpdateService; C:\Program Files (x86)\Akademische Arbeitsgemeinschaft\AAVUpdateManager\aavus.exe [128296 2008-10-24] ()
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [77128 2015-01-19] (Apple Inc.)
R2 AvrcpService; C:\Program Files (x86)\REALTEK\Realtek Bluetooth\AvrcpService.exe [43224 2014-07-03] (Realtek Semiconductor Corporation)
R2 BTDevManager; C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTDevMgr.exe [98816 2014-10-11] () [File not signed]
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390176 2014-07-14] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1767520 2014-07-14] (Microsoft Corporation)
R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2449592 2014-11-12] (Microsoft Corporation)
R2 CtAgentService; C:\Program Files (x86)\Hewlett-Packard\HP Theft Recovery\CtService.exe [7168 2014-03-31] () [File not signed]
R2 DpHost; C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpHostW.exe [500048 2014-07-28] (DigitalPersona, Inc.)
S3 FLCDLOCK; c:\windows\SysWOW64\flcdlock.exe [567608 2013-11-20] (Hewlett-Packard Company)
S3 FLEXnet Licensing Service; C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [654848 2015-01-18] (Macrovision Europe Ltd.) [File not signed]
R2 HP Support Assistant Service; C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe [92160 2014-01-13] (Hewlett-Packard Company) [File not signed]
R2 HpDamServiceHost; c:\Program Files (x86)\Hewlett-Packard\HP Device Access Manager\HP.ProtectTools.DeviceAccessManager.ServiceHost.exe [18232 2013-11-15] (Hewlett-Packard Development Company)
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15720 2013-09-27] (Intel Corporation)
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [282072 2014-03-11] (Intel Corporation)
R2 Intel(R) Capability Licensing Service Interface; c:\Program Files\Intel\iCLS Client\HeciServer.exe [747520 2013-08-27] (Intel(R) Corporation) [File not signed]
S3 Intel(R) Capability Licensing Service TCP IP Interface; c:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [828376 2013-08-27] (Intel(R) Corporation)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [131544 2013-12-10] (Intel Corporation)
R2 ISCTAgent; c:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe [198120 2013-09-07] ()
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-12-10] (Intel Corporation)
R2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1871160 2014-11-21] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [969016 2014-11-21] (Malwarebytes Corporation)
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [23784 2014-08-22] (Microsoft Corporation)
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [368624 2014-08-22] (Microsoft Corporation)
R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [290520 2014-01-08] (Realtek Semiconductor)
R2 RtkBleServ; C:\Program Files (x86)\REALTEK\Realtek Bluetooth\RtkBleServ.exe [50392 2014-07-03] (Realtek Semiconductor Corporation)
R2 WDBackup; C:\Program Files (x86)\Western Digital\WD SmartWare\WDBackupEngine.exe [1042808 2014-12-02] (Western Digital Technologies, Inc.)
R2 WDDriveService; C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe [296312 2014-05-23] (Western Digital Technologies, Inc.)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-12-04] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R0 amdkmpfd; C:\Windows\System32\drivers\amdkmpfd.sys [36608 2013-12-13] (Advanced Micro Devices, Inc.)
R1 CLVirtualDrive; C:\Windows\System32\DRIVERS\CLVirtualDrive.sys [90608 2011-12-27] (CyberLink)
S3 DAMDrv; C:\Windows\System32\DRIVERS\DAMDrv64.sys [65752 2013-10-07] (Hewlett-Packard Company)
R0 iaStorF; C:\Windows\System32\drivers\iaStorF.sys [28008 2013-09-27] (Intel Corporation)
R3 ikbevent; C:\Windows\System32\DRIVERS\ikbevent.sys [21408 2013-08-09] ()
R3 imsevent; C:\Windows\System32\DRIVERS\imsevent.sys [21920 2013-08-09] ()
R3 INETMON; C:\windows\System32\Drivers\INETMON.sys [29088 2013-08-08] ()
R3 ISCT; C:\Windows\system32\drivers\ISCTD64.sys [46568 2013-08-08] ()
R3 MBAMProtector; C:\windows\system32\drivers\mbam.sys [25816 2014-11-21] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\windows\system32\drivers\MBAMSwissArmy.sys [129752 2015-02-04] (Malwarebytes Corporation)
R3 MBAMWebAccessControl; C:\windows\system32\drivers\mwac.sys [63704 2014-11-21] (Malwarebytes Corporation)
R3 MEIx64; C:\Windows\system32\drivers\TeeDriverx64.sys [100312 2013-12-10] (Intel Corporation)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [269008 2014-07-17] (Microsoft Corporation)
R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [125584 2014-07-17] (Microsoft Corporation)
R0 PinFile; C:\Windows\System32\DRIVERS\PinFile.sys [49856 2014-02-03] (WinMagic Inc.)
S3 RtkAvrcp; C:\Windows\system32\drivers\RtkAvrcp.sys [61152 2012-12-28] (Realtek Semiconductor Corporation)
S3 RtkBtFilter; C:\Windows\System32\DRIVERS\RtkBtfilter.sys [585944 2014-12-31] (Realtek Semiconductor Corporation)
S3 RTSPER; C:\Windows\System32\DRIVERS\RtsPer.sys [476888 2014-03-21] (Realsil Semiconductor Corporation)
R3 RTWlanE; C:\Windows\System32\DRIVERS\rtwlane.sys [3603672 2015-01-19] (Realtek Semiconductor Corporation                           )
R0 SDDisk2K; C:\Windows\System32\DRIVERS\SDDisk2K.sys [228544 2014-02-03] (WinMagic Inc.)
R0 SDDToki; C:\Windows\System32\DRIVERS\SDDToki.sys [131264 2014-02-03] (WinMagic Inc.)
S3 SmbDrv; C:\Windows\system32\drivers\Smb_driver_AMDASF.sys [30448 2014-04-08] (Synaptics Incorporated)
S3 SmbDrvI; C:\Windows\system32\drivers\Smb_driver_Intel.sys [31472 2014-04-08] (Synaptics Incorporated)
R3 SPUVCbv; C:\Windows\System32\Drivers\SPUVCbv_x64.sys [674592 2015-01-19] (Sunplus)

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-02-04 17:19 - 2015-02-04 16:51 - 00000000 ____D () C:\FRST
2015-02-04 16:49 - 2015-02-04 16:49 - 00000382 _____ () C:\Users\HP ProBook 470 G2\Desktop\est.txt
2015-02-04 15:11 - 2015-02-04 15:12 - 00001078 _____ () C:\windows\system32dbgraw.bmp
2015-02-04 14:21 - 2015-02-04 14:21 - 00852573 _____ () C:\Users\HP ProBook 470 G2\Desktop\SecurityCheck.exe
2015-02-04 13:23 - 2015-02-04 13:24 - 01660616 _____ (ESET) C:\Users\HP ProBook 470 G2\Downloads\eset_smart_security_live_installer_.exe
2015-02-04 10:41 - 2015-02-04 10:41 - 00000000 ____D () C:\Program Files (x86)\ESET
2015-02-04 10:40 - 2015-02-04 10:40 - 02347384 _____ (ESET) C:\Users\HP ProBook 470 G2\Downloads\esetsmartinstaller_deu.exe
2015-02-04 10:29 - 2015-02-04 16:06 - 00129752 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\MBAMSwissArmy.sys
2015-02-04 10:29 - 2015-02-04 10:29 - 00001113 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2015-02-04 10:29 - 2015-02-04 10:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2015-02-04 10:29 - 2015-02-04 10:29 - 00000000 ____D () C:\ProgramData\Malwarebytes
2015-02-04 10:29 - 2015-02-04 10:29 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2015-02-04 10:29 - 2014-11-21 06:14 - 00093400 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbamchameleon.sys
2015-02-04 10:29 - 2014-11-21 06:14 - 00063704 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mwac.sys
2015-02-04 10:29 - 2014-11-21 06:14 - 00025816 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbam.sys
2015-02-04 10:26 - 2015-02-04 10:26 - 00448512 _____ (OldTimer Tools) C:\Users\HP ProBook 470 G2\Downloads\TFC.exe
2015-02-04 10:26 - 2015-02-04 10:26 - 00448512 _____ (OldTimer Tools) C:\Users\HP ProBook 470 G2\Desktop\TFC.exe
2015-02-04 10:16 - 2015-02-04 10:18 - 00000000 ____D () C:\AdwCleaner
2015-02-04 07:38 - 2015-02-04 07:38 - 00001760 _____ () C:\Users\Public\Desktop\iTunes.lnk
2015-02-04 07:38 - 2015-02-04 07:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2015-02-04 07:37 - 2015-02-04 07:38 - 00000000 ____D () C:\ProgramData\E1864A66-75E3-486a-BD95-D1B7D99A84A7
2015-02-04 07:37 - 2015-02-04 07:38 - 00000000 ____D () C:\Program Files\iTunes
2015-02-04 07:37 - 2015-02-04 07:37 - 00000000 ____D () C:\Program Files\iPod
2015-02-04 07:37 - 2015-02-04 07:37 - 00000000 ____D () C:\Program Files (x86)\iTunes
2015-02-01 17:26 - 2015-02-01 19:29 - 00000380 _____ () C:\windows\Tasks\HPCeeScheduleForHP ProBook 470 G2.job
2015-02-01 17:26 - 2015-02-01 17:26 - 00003258 _____ () C:\windows\System32\Tasks\HPCeeScheduleForHP ProBook 470 G2
2015-01-30 14:58 - 2015-02-04 15:12 - 00008192 _____ () C:\windows\SysWOW64\WDPABKP.dat
2015-01-30 07:15 - 2015-01-30 07:15 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Local\CrashDumps
2015-01-29 16:42 - 2015-01-29 16:42 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Roaming\SMSout
2015-01-29 11:23 - 2015-01-29 11:23 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2015-01-29 11:08 - 2015-01-30 14:22 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Roaming\SuperMailer
2015-01-29 11:07 - 2015-01-29 12:43 - 00000000 ____D () C:\Program Files\SuperMailer
2015-01-29 11:07 - 2015-01-29 11:07 - 00000804 _____ () C:\Users\HP ProBook 470 G2\Desktop\SuperMailer.lnk
2015-01-29 11:07 - 2015-01-29 11:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SuperMailer
2015-01-26 17:17 - 2015-01-26 17:17 - 00000000 __SHD () C:\Users\HP ProBook 470 G2\AppData\Local\EmieBrowserModeList
2015-01-26 15:54 - 2015-02-04 15:14 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Roaming\UseNeXT
2015-01-26 15:54 - 2015-02-04 15:13 - 00000000 ____D () C:\Users\HP ProBook 470 G2\Documents\UseNeXT
2015-01-26 15:54 - 2015-01-26 15:54 - 00001868 _____ () C:\Users\HP ProBook 470 G2\Desktop\UseNeXT by Tangysoft.lnk
2015-01-26 15:54 - 2015-01-26 15:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\UseNeXT
2015-01-26 15:54 - 2015-01-26 15:54 - 00000000 ____D () C:\Program Files (x86)\UseNeXT
2015-01-26 15:29 - 2015-01-30 09:23 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Roaming\Skype
2015-01-26 15:29 - 2015-01-26 15:29 - 00002699 _____ () C:\Users\Public\Desktop\Skype.lnk
2015-01-26 15:29 - 2015-01-26 15:29 - 00000000 ___RD () C:\Program Files (x86)\Skype
2015-01-26 15:29 - 2015-01-26 15:29 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Local\Skype
2015-01-26 15:29 - 2015-01-26 15:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2015-01-25 12:46 - 2015-01-25 12:46 - 00000000 __RHD () C:\MSOCache
2015-01-24 10:34 - 2015-01-24 10:34 - 04372480 _____ () C:\Users\HP ProBook 470 G2\Downloads\fritz.wlan_repeater_ng_68.04.88.image
2015-01-23 08:41 - 2015-01-23 08:41 - 00000000 ____D () C:\Program Files\Western Digital
2015-01-23 08:41 - 2015-01-23 08:41 - 00000000 ____D () C:\Program Files\Common Files\Western Digital
2015-01-22 16:05 - 2015-01-22 16:05 - 00001665 _____ () C:\Users\HP ProBook 470 G2\Desktop\Mitgliederliste_V2015_V1 - Verknüpfung.lnk
2015-01-22 16:05 - 2015-01-22 16:05 - 00001572 _____ () C:\Users\HP ProBook 470 G2\Desktop\zugang_werder - Verknüpfung.lnk
2015-01-22 16:05 - 2015-01-22 16:05 - 00001569 _____ () C:\Users\HP ProBook 470 G2\Desktop\Zugangsdaten - Verknüpfung.lnk
2015-01-22 16:04 - 2015-01-22 16:04 - 00001606 _____ () C:\Users\HP ProBook 470 G2\Desktop\Anmeldungen_2015 - Verknüpfung.lnk
2015-01-22 12:05 - 2015-01-22 12:05 - 00001179 _____ () C:\Users\Public\Desktop\WD Security.lnk
2015-01-22 12:03 - 2015-01-22 12:03 - 00000000 ____D () C:\windows\System32\Tasks\Western Digital
2015-01-22 12:01 - 2015-01-22 12:01 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Local\Western Digital
2015-01-22 11:57 - 2015-01-22 11:57 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Local\Western_Digital_Technolog
2015-01-22 11:56 - 2015-01-23 08:42 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Western Digital
2015-01-22 11:56 - 2015-01-23 08:41 - 00000000 ____D () C:\Program Files (x86)\Western Digital
2015-01-22 11:56 - 2015-01-22 11:56 - 00001124 _____ () C:\Users\Public\Desktop\WD Drive Utilities.lnk
2015-01-22 11:55 - 2015-01-23 08:41 - 00000000 ____D () C:\ProgramData\Western Digital
2015-01-19 17:16 - 2015-01-19 17:17 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Roaming\FileZilla
2015-01-19 17:07 - 2015-01-19 17:08 - 00000000 ____D () C:\Program Files (x86)\Ipswitch
2015-01-19 17:07 - 2015-01-19 17:07 - 00000000 ____D () C:\windows\SysWOW64\E177E04D548C4006A465EEB92D3DE021
2015-01-19 17:07 - 2005-02-28 12:37 - 00606293 ____N (Stardock.Net, Inc) C:\windows\SysWOW64\wbocx.ocx
2015-01-19 17:07 - 2005-02-28 12:37 - 00050688 ____N (Stardock.Net, Inc) C:\windows\SysWOW64\wbhelp2.dll
2015-01-19 17:07 - 2004-12-06 14:26 - 00348160 ____N (Microsoft Corporation) C:\windows\SysWOW64\msvcr71.dll
2015-01-19 17:07 - 2004-09-17 11:09 - 01060864 ____N (Microsoft Corporation) C:\windows\SysWOW64\MFC71.dll
2015-01-19 17:07 - 2004-02-12 17:16 - 00499712 ____N (Microsoft Corporation) C:\windows\SysWOW64\msvcp71.dll
2015-01-19 17:06 - 2015-01-19 17:08 - 00000023 _____ () C:\windows\setup.log
2015-01-19 16:57 - 2015-02-04 15:39 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Roaming\vlc
2015-01-19 16:55 - 2015-01-29 11:31 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Roaming\Foxit Software
2015-01-19 16:52 - 2015-01-19 16:52 - 00001077 _____ () C:\Users\Public\Desktop\VLC media player.lnk
2015-01-19 16:52 - 2015-01-19 16:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2015-01-19 16:52 - 2015-01-19 16:52 - 00000000 ____D () C:\Program Files (x86)\VideoLAN
2015-01-19 16:51 - 2015-01-19 16:51 - 24743106 _____ () C:\Users\HP ProBook 470 G2\Downloads\vlc-2.1.5-win32.exe
2015-01-19 14:39 - 2015-01-28 13:58 - 00701616 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe
2015-01-19 14:39 - 2015-01-28 13:58 - 00071344 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-01-19 14:39 - 2015-01-19 14:39 - 00000000 ____D () C:\windows\system32\Macromed
2015-01-19 14:39 - 2015-01-19 14:39 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Roaming\Macromedia
2015-01-19 14:39 - 2015-01-19 14:39 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Local\Macromedia
2015-01-19 14:22 - 2015-01-19 14:22 - 00002297 _____ () C:\Users\Public\Desktop\Vereine und Ehrenamt.LNK
2015-01-19 14:22 - 2015-01-19 14:22 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Roaming\AAV
2015-01-19 14:22 - 2015-01-19 14:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\InfoBibliothek 2
2015-01-19 14:11 - 2015-01-21 17:13 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Roaming\Apple Computer
2015-01-19 14:11 - 2015-01-19 14:11 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Local\Apple Computer
2015-01-19 14:11 - 2012-10-03 16:14 - 00033240 _____ (GEAR Software Inc.) C:\windows\system32\Drivers\GEARAspiWDM.sys
2015-01-19 14:09 - 2015-02-04 07:37 - 00000000 ____D () C:\Program Files\Common Files\Apple
2015-01-19 14:09 - 2015-01-19 14:09 - 00002519 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk
2015-01-19 14:09 - 2015-01-19 14:09 - 00000000 ____D () C:\windows\System32\Tasks\Apple
2015-01-19 14:09 - 2015-01-19 14:09 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Local\Apple
2015-01-19 14:09 - 2015-01-19 14:09 - 00000000 ____D () C:\ProgramData\Apple Computer
2015-01-19 14:09 - 2015-01-19 14:09 - 00000000 ____D () C:\Program Files (x86)\Apple Software Update
2015-01-19 10:32 - 2015-01-19 10:32 - 00000000 ____D () C:\HPSDM
2015-01-19 10:14 - 2015-01-19 10:13 - 03603672 _____ (Realtek Semiconductor Corporation ) C:\windows\system32\Drivers\rtwlane.sys
2015-01-19 10:05 - 2015-01-19 10:06 - 00001588 _____ () C:\HPCamDrv.log
2015-01-19 10:05 - 2015-01-19 10:06 - 00000382 _____ () C:\camera.log
2015-01-19 10:05 - 2015-01-19 10:05 - 00384672 _____ (SunplusIT) C:\windows\system32\VCamPPage_x64.dll
2015-01-19 10:05 - 2015-01-19 10:05 - 00321184 _____ (SunplusIT) C:\windows\SysWOW64\VCamPPage.dll
2015-01-19 10:03 - 2015-01-19 10:03 - 00001117 _____ () C:\Users\Public\Desktop\Picasa 3.lnk
2015-01-19 10:03 - 2015-01-19 10:03 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Local\Google
2015-01-19 10:03 - 2015-01-19 10:03 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Picasa 3
2015-01-19 10:03 - 2015-01-19 10:03 - 00000000 ____D () C:\Program Files (x86)\Google
2015-01-19 10:02 - 2015-01-19 10:02 - 17385800 _____ (Google Inc.) C:\Users\HP ProBook 470 G2\Downloads\picasa39-setup.exe
2015-01-19 10:00 - 2015-01-19 10:00 - 00003148 _____ () C:\windows\System32\Tasks\SidebarExecute
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\SysWOW64\zh-Hant
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\SysWOW64\zh-Hans
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\SysWOW64\tr
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\SysWOW64\th
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\SysWOW64\sv
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\SysWOW64\sr
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\SysWOW64\sl
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\SysWOW64\sk
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\SysWOW64\ru
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\SysWOW64\ro
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\SysWOW64\pl
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\SysWOW64\no
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\SysWOW64\nl
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\SysWOW64\lv
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\SysWOW64\lt
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\SysWOW64\ko
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\SysWOW64\ja
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\SysWOW64\it
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\SysWOW64\hu
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\SysWOW64\hr
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\SysWOW64\he
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\SysWOW64\fr
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\SysWOW64\fi
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\SysWOW64\et
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\SysWOW64\es
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\SysWOW64\el
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\SysWOW64\da
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\SysWOW64\cs
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\SysWOW64\bg
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\SysWOW64\ar
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\system32\zh-Hant
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\system32\zh-Hans
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\system32\tr
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\system32\th
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\system32\sv
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\system32\sr
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\system32\sl
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\system32\sk
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\system32\ru
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\system32\ro
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\system32\pl
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\system32\no
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\system32\nl
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\system32\lv
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\system32\lt
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\system32\ko
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\system32\ja
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\system32\it
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\system32\hu
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\system32\hr
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\system32\he
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\system32\fr
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\system32\fi
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\system32\et
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\system32\es
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\system32\el
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\system32\da
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\system32\cs
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\system32\bg
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\system32\ar
2015-01-19 10:00 - 2015-01-19 10:00 - 00000000 ____D () C:\windows\DPDrv
2015-01-19 09:50 - 2015-01-19 09:50 - 00000000 ____D () C:\ProgramData\Synaptics
2015-01-19 09:50 - 2015-01-19 09:49 - 00753392 _____ (Synaptics Incorporated) C:\windows\system32\SynCOM.dll
2015-01-19 09:50 - 2015-01-19 09:49 - 00580336 _____ (Synaptics Incorporated) C:\windows\system32\Drivers\SynTP.sys
2015-01-19 09:50 - 2015-01-19 09:49 - 00409328 _____ (Synaptics Incorporated) C:\windows\SysWOW64\SynCom.dll
2015-01-19 09:50 - 2015-01-19 09:49 - 00256240 _____ (Synaptics Incorporated) C:\windows\system32\SynTPAPI.dll
2015-01-19 09:50 - 2015-01-19 09:49 - 00212208 _____ (Synaptics Incorporated) C:\windows\system32\SynTPCo20.dll
2015-01-19 09:50 - 2015-01-19 09:49 - 00195784 _____ () C:\windows\system32\pca-manta.bin
2015-01-19 09:22 - 2015-01-19 09:22 - 00001674 _____ () C:\Users\HP ProBook 470 G2\Desktop\Rechnung5.lnk
2015-01-19 09:22 - 2015-01-19 09:22 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SoftwareNetz
2015-01-19 09:22 - 2015-01-19 09:22 - 00000000 ____D () C:\Softwarenetz
2015-01-19 09:22 - 2014-06-12 09:28 - 00181952 _____ (SoftwareNetz) C:\windows\snui.exe
2015-01-19 08:29 - 2015-01-19 08:29 - 00002212 _____ () C:\Users\Public\Desktop\SteuerSparErklärung 2015.lnk
2015-01-19 08:29 - 2015-01-19 08:29 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Local\AAV
2015-01-19 08:29 - 2015-01-19 08:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steuertipps
2015-01-19 08:28 - 2015-01-19 14:22 - 00000000 ____D () C:\Program Files (x86)\Akademische Arbeitsgemeinschaft
2015-01-19 08:25 - 2015-01-19 14:20 - 00000000 ____D () C:\ProgramData\AAV
2015-01-19 08:14 - 2015-01-19 08:19 - 205257056 _____ () C:\Users\HP ProBook 470 G2\Downloads\SSEStandard_20.25.123.exe
2015-01-19 07:34 - 2015-02-01 17:26 - 00000052 _____ () C:\windows\SysWOW64\DOErrors.log
2015-01-19 07:33 - 2015-02-01 17:25 - 00000000 _____ () C:\windows\system32\HP_ActiveX_Patch_NOT_DETECTED.txt
2015-01-18 15:32 - 2015-01-18 15:32 - 00000000 ___SD () C:\Users\HP ProBook 470 G2\Documents\Meine Datenquellen
2015-01-18 15:31 - 2015-01-18 15:31 - 00000000 ____D () C:\Users\HP ProBook 470 G2\Documents\Benutzerdefinierte Office-Vorlagen
2015-01-18 15:06 - 2015-01-18 15:06 - 00000000 ____D () C:\Users\HP ProBook 470 G2\Documents\OneNote-Notizbücher
2015-01-18 14:58 - 2015-01-18 15:02 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Roaming\Steganos
2015-01-18 14:58 - 2015-01-18 14:58 - 00001246 _____ () C:\Users\HP ProBook 470 G2\Desktop\Passwort-Manager.lnk
2015-01-18 14:58 - 2015-01-18 14:58 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steganos Passwort-Manager Free
2015-01-18 14:58 - 2015-01-18 14:58 - 00000000 ____D () C:\Program Files (x86)\Steganos Password Manager Free 11
2015-01-18 14:57 - 2015-01-19 14:39 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Local\Adobe
2015-01-18 14:52 - 2015-01-18 14:52 - 00000000 ____D () C:\ProgramData\FLEXnet
2015-01-18 14:51 - 2015-01-18 14:51 - 00001144 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop CS3.lnk
2015-01-18 14:50 - 2015-01-18 14:50 - 08275369 _____ (Steganos GmbH) C:\Users\HP ProBook 470 G2\Downloads\spm2009freeint.exe
2015-01-18 14:50 - 2015-01-18 14:50 - 00000000 ____D () C:\ProgramData\Adobe
2015-01-18 14:49 - 2015-01-18 14:49 - 00001230 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Stock Photos CS3.lnk
2015-01-18 14:47 - 2015-01-18 14:47 - 00001410 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe ExtendScript Toolkit 2.lnk
2015-01-18 14:47 - 2015-01-18 14:47 - 00001199 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Device Central CS3.lnk
2015-01-18 14:45 - 2015-01-18 14:45 - 00001106 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Bridge CS3.lnk
2015-01-18 14:45 - 2015-01-18 14:45 - 00000000 ____D () C:\windows\SysWOW64\spool
2015-01-18 14:45 - 2015-01-18 14:45 - 00000000 ____D () C:\windows\SysWOW64\Macromed
2015-01-18 14:42 - 2015-01-18 14:50 - 00000000 ____D () C:\Program Files (x86)\Adobe
2015-01-18 12:45 - 2015-01-18 12:45 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Roaming\My Bluetooth
2015-01-18 12:32 - 2015-01-26 15:16 - 00000000 ____D () C:\Users\HP ProBook 470 G2\Documents\Outlook-Dateien
2015-01-18 12:07 - 2015-01-19 07:26 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Roaming\Windows Live Writer
2015-01-18 12:07 - 2015-01-18 12:07 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Local\Windows Live Writer
2015-01-18 12:04 - 2015-01-18 12:04 - 00002498 _____ () C:\Users\HP ProBook 470 G2\Desktop\Word 2013.lnk
2015-01-18 12:04 - 2015-01-18 12:04 - 00002494 _____ () C:\Users\HP ProBook 470 G2\Desktop\Excel 2013.lnk
2015-01-18 12:04 - 2015-01-18 12:04 - 00002449 _____ () C:\Users\HP ProBook 470 G2\Desktop\Lync 2013.lnk
2015-01-18 12:04 - 2015-01-18 12:04 - 00002412 _____ () C:\Users\HP ProBook 470 G2\Desktop\OneNote 2013.lnk
2015-01-18 12:02 - 2015-01-18 12:02 - 00003214 _____ () C:\windows\System32\Tasks\HP Officejet 6600.exe_{F24B9D44-93E3-4130-BAC4-774FFE8E795B}
2015-01-18 11:59 - 2015-02-01 14:21 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Roaming\HpUpdate
2015-01-18 11:59 - 2015-01-18 11:59 - 00002159 _____ () C:\Users\Public\Desktop\HP Officejet 6600.lnk
2015-01-18 11:59 - 2012-10-17 04:31 - 00741480 ____N (Hewlett-Packard Co.) C:\windows\system32\HPDiscoPM5D12.dll
2015-01-18 11:58 - 2015-01-19 10:32 - 00000000 ____D () C:\ProgramData\HP
2015-01-18 11:58 - 2015-01-18 11:59 - 00000000 ____D () C:\Program Files (x86)\HP
2015-01-18 11:58 - 2015-01-18 11:58 - 00000000 ____D () C:\Program Files\HP
2015-01-18 11:57 - 2015-01-18 11:57 - 00000057 _____ () C:\ProgramData\Ament.ini
2015-01-18 11:56 - 2015-01-18 12:02 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Local\HP
2015-01-18 10:46 - 2014-12-13 06:09 - 00144384 _____ (Microsoft Corporation) C:\windows\system32\ieUnatt.exe
2015-01-18 10:46 - 2014-12-13 04:33 - 00115712 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieUnatt.exe
2015-01-18 10:46 - 2014-12-11 18:47 - 00087040 _____ (Microsoft Corporation) C:\windows\system32\TSWbPrxy.exe
2015-01-18 10:46 - 2014-07-09 03:03 - 00007168 _____ (Microsoft Corporation) C:\windows\system32\KBDYAK.DLL
2015-01-18 10:46 - 2014-07-09 03:03 - 00007168 _____ (Microsoft Corporation) C:\windows\system32\KBDTAT.DLL
2015-01-18 10:46 - 2014-07-09 03:03 - 00007168 _____ (Microsoft Corporation) C:\windows\system32\KBDRU1.DLL
2015-01-18 10:46 - 2014-07-09 03:03 - 00007168 _____ (Microsoft Corporation) C:\windows\system32\KBDBASH.DLL
2015-01-18 10:46 - 2014-07-09 03:03 - 00006656 _____ (Microsoft Corporation) C:\windows\system32\KBDRU.DLL
2015-01-18 10:46 - 2014-07-09 02:31 - 00007168 _____ (Microsoft Corporation) C:\windows\SysWOW64\KBDYAK.DLL
2015-01-18 10:46 - 2014-07-09 02:31 - 00007168 _____ (Microsoft Corporation) C:\windows\SysWOW64\KBDTAT.DLL
2015-01-18 10:46 - 2014-07-09 02:31 - 00006656 _____ (Microsoft Corporation) C:\windows\SysWOW64\KBDRU1.DLL
2015-01-18 10:46 - 2014-07-09 02:31 - 00006656 _____ (Microsoft Corporation) C:\windows\SysWOW64\KBDRU.DLL
2015-01-18 10:46 - 2014-07-09 02:31 - 00006656 _____ (Microsoft Corporation) C:\windows\SysWOW64\KBDBASH.DLL
2015-01-18 10:46 - 2014-07-08 23:38 - 00419992 _____ () C:\windows\system32\locale.nls
2015-01-18 10:46 - 2014-07-08 23:30 - 00419992 _____ () C:\windows\SysWOW64\locale.nls
2015-01-18 10:08 - 2014-08-29 03:07 - 03179520 _____ (Microsoft Corporation) C:\windows\system32\rdpcorets.dll
2015-01-18 10:08 - 2014-05-08 10:32 - 00016384 _____ (Microsoft Corporation) C:\windows\system32\RdpGroupPolicyExtension.dll
2015-01-18 10:07 - 2014-09-05 03:11 - 06584320 _____ (Microsoft Corporation) C:\windows\system32\mstscax.dll
2015-01-18 10:07 - 2014-09-05 02:52 - 05703168 _____ (Microsoft Corporation) C:\windows\SysWOW64\mstscax.dll
2015-01-18 09:58 - 2015-01-18 09:58 - 00000000 ____D () C:\windows\de
2015-01-18 09:57 - 2015-01-18 09:57 - 00001465 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Mail.lnk
2015-01-18 09:57 - 2015-01-18 09:57 - 00001381 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Photo Gallery.lnk
2015-01-18 09:57 - 2015-01-18 09:57 - 00001312 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Movie Maker.lnk
2015-01-18 09:57 - 2015-01-18 09:57 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live
2015-01-18 09:57 - 2015-01-18 09:57 - 00000000 ____D () C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2015-01-18 09:56 - 2015-01-18 09:56 - 00000000 ____D () C:\windows\PCHEALTH
2015-01-18 09:56 - 2015-01-18 09:56 - 00000000 ____D () C:\Program Files\Windows Live
2015-01-18 09:55 - 2015-01-18 09:57 - 00000000 ____D () C:\Program Files (x86)\Windows Live
2015-01-18 09:54 - 2010-06-02 04:55 - 00527192 _____ (Microsoft Corporation) C:\windows\SysWOW64\XAudio2_7.dll
2015-01-18 09:54 - 2010-06-02 04:55 - 00518488 _____ (Microsoft Corporation) C:\windows\system32\XAudio2_7.dll
2015-01-18 09:54 - 2010-06-02 04:55 - 00077656 _____ (Microsoft Corporation) C:\windows\system32\XAPOFX1_5.dll
2015-01-18 09:54 - 2010-06-02 04:55 - 00074072 _____ (Microsoft Corporation) C:\windows\SysWOW64\XAPOFX1_5.dll
2015-01-18 09:54 - 2010-05-26 11:41 - 02526056 _____ (Microsoft Corporation) C:\windows\system32\D3DCompiler_43.dll
2015-01-18 09:54 - 2010-05-26 11:41 - 02106216 _____ (Microsoft Corporation) C:\windows\SysWOW64\D3DCompiler_43.dll
2015-01-18 09:54 - 2010-05-26 11:41 - 00276832 _____ (Microsoft Corporation) C:\windows\system32\d3dx11_43.dll
2015-01-18 09:54 - 2010-05-26 11:41 - 00248672 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3dx11_43.dll
2015-01-18 09:53 - 2009-09-04 17:29 - 00523088 _____ (Microsoft Corporation) C:\windows\system32\d3dx10_42.dll
2015-01-18 09:53 - 2009-09-04 17:29 - 00453456 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3dx10_42.dll
2015-01-18 09:52 - 2015-01-18 09:52 - 00000199 _____ () C:\windows\DirectX.log
2015-01-18 09:52 - 2006-11-29 13:06 - 04398360 _____ (Microsoft Corporation) C:\windows\system32\d3dx9_32.dll
2015-01-18 09:52 - 2006-11-29 13:06 - 03426072 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3dx9_32.dll
2015-01-18 09:50 - 2015-01-21 10:09 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Local\Windows Live
2015-01-18 09:48 - 2015-01-18 09:49 - 01245384 _____ (Microsoft Corporation) C:\Users\HP ProBook 470 G2\Downloads\wlsetup-web.exe
2015-01-18 09:48 - 2015-01-18 09:48 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Local\Intel_Corporation
2015-01-18 09:04 - 2015-01-18 09:04 - 00000000 ____D () C:\windows\System32\Tasks\OfficeSoftwareProtectionPlatform
2015-01-18 09:04 - 2015-01-18 09:04 - 00000000 ____D () C:\Program Files (x86)\Microsoft Office
2015-01-18 09:03 - 2015-01-18 12:32 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2015-01-18 09:01 - 2015-01-18 11:48 - 00000000 ____D () C:\Program Files\Microsoft Office 15
2015-01-17 18:48 - 2013-10-02 03:22 - 00056832 _____ (Microsoft Corporation) C:\windows\system32\Drivers\TsUsbFlt.sys
2015-01-17 18:48 - 2013-10-02 03:11 - 00013824 _____ (Microsoft Corporation) C:\windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2015-01-17 18:48 - 2013-10-02 03:08 - 00012800 _____ (Microsoft Corporation) C:\windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2015-01-17 18:48 - 2013-10-02 02:48 - 00056832 _____ (Microsoft Corporation) C:\windows\system32\MsRdpWebAccess.dll
2015-01-17 18:48 - 2013-10-02 02:48 - 00018944 _____ (Microsoft Corporation) C:\windows\system32\wksprtPS.dll
2015-01-17 18:48 - 2013-10-02 02:29 - 00062976 _____ (Microsoft Corporation) C:\windows\system32\tsgqec.dll
2015-01-17 18:48 - 2013-10-02 02:10 - 00044544 _____ (Microsoft Corporation) C:\windows\system32\TsUsbGDCoInstaller.dll
2015-01-17 18:48 - 2013-10-02 01:15 - 01057280 _____ (Microsoft Corporation) C:\windows\system32\rdvidcrl.dll
2015-01-17 18:48 - 2013-10-02 01:14 - 00050176 _____ (Microsoft Corporation) C:\windows\SysWOW64\MsRdpWebAccess.dll
2015-01-17 18:48 - 2013-10-02 01:14 - 00017920 _____ (Microsoft Corporation) C:\windows\SysWOW64\wksprtPS.dll
2015-01-17 18:48 - 2013-10-02 01:01 - 00420864 _____ (Microsoft Corporation) C:\windows\system32\wksprt.exe
2015-01-17 18:48 - 2013-10-02 00:58 - 00053248 _____ (Microsoft Corporation) C:\windows\SysWOW64\tsgqec.dll
2015-01-17 18:48 - 2013-10-02 00:31 - 01147392 _____ (Microsoft Corporation) C:\windows\system32\mstsc.exe
2015-01-17 18:48 - 2013-10-02 00:08 - 00855552 _____ (Microsoft Corporation) C:\windows\SysWOW64\rdvidcrl.dll
2015-01-17 18:48 - 2013-10-01 23:34 - 01068544 _____ (Microsoft Corporation) C:\windows\SysWOW64\mstsc.exe
2015-01-17 18:42 - 2012-08-23 15:13 - 00243200 _____ (Microsoft Corporation) C:\windows\system32\rdpudd.dll
2015-01-17 18:42 - 2012-08-23 15:10 - 00019456 _____ (Microsoft Corporation) C:\windows\system32\Drivers\rdpvideominiport.sys
2015-01-17 18:42 - 2012-08-23 15:08 - 00030208 _____ (Microsoft Corporation) C:\windows\system32\Drivers\TsUsbGD.sys
2015-01-17 18:42 - 2012-08-23 12:12 - 00192000 _____ (Microsoft Corporation) C:\windows\SysWOW64\rdpendp_winip.dll
2015-01-17 18:42 - 2012-08-23 11:51 - 00228864 _____ (Microsoft Corporation) C:\windows\system32\rdpendp_winip.dll
2015-01-17 18:41 - 2015-01-17 18:41 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2015-01-17 18:40 - 2015-01-17 18:40 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2015-01-17 18:40 - 2015-01-17 18:40 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2015-01-17 18:37 - 2014-10-18 03:05 - 04121600 _____ (Microsoft Corporation) C:\windows\system32\mf.dll
2015-01-17 18:37 - 2014-10-18 02:33 - 03209728 _____ (Microsoft Corporation) C:\windows\SysWOW64\mf.dll
2015-01-17 18:37 - 2014-07-07 03:06 - 00206848 _____ (Microsoft Corporation) C:\windows\system32\mfps.dll
2015-01-17 18:37 - 2014-07-07 03:06 - 00055808 _____ (Microsoft Corporation) C:\windows\system32\rrinstaller.exe
2015-01-17 18:37 - 2014-07-07 03:06 - 00024576 _____ (Microsoft Corporation) C:\windows\system32\mfpmp.exe
2015-01-17 18:37 - 2014-07-07 03:02 - 00002048 _____ (Microsoft Corporation) C:\windows\system32\mferror.dll
2015-01-17 18:37 - 2014-07-07 02:40 - 00103424 _____ (Microsoft Corporation) C:\windows\SysWOW64\mfps.dll
2015-01-17 18:37 - 2014-07-07 02:39 - 00050176 _____ (Microsoft Corporation) C:\windows\SysWOW64\rrinstaller.exe
2015-01-17 18:37 - 2014-07-07 02:39 - 00023040 _____ (Microsoft Corporation) C:\windows\SysWOW64\mfpmp.exe
2015-01-17 18:37 - 2014-07-07 02:37 - 00002048 _____ (Microsoft Corporation) C:\windows\SysWOW64\mferror.dll
2015-01-17 18:37 - 2012-07-26 04:08 - 00744448 _____ (Microsoft Corporation) C:\windows\system32\WUDFx.dll
2015-01-17 18:37 - 2012-07-26 04:08 - 00229888 _____ (Microsoft Corporation) C:\windows\system32\WUDFHost.exe
2015-01-17 18:37 - 2012-07-26 04:08 - 00194048 _____ (Microsoft Corporation) C:\windows\system32\WUDFPlatform.dll
2015-01-17 18:37 - 2012-07-26 04:08 - 00084992 _____ (Microsoft Corporation) C:\windows\system32\WUDFSvc.dll
2015-01-17 18:37 - 2012-07-26 04:08 - 00045056 _____ (Microsoft Corporation) C:\windows\system32\WUDFCoinstaller.dll
2015-01-17 18:37 - 2012-07-26 03:26 - 00198656 _____ (Microsoft Corporation) C:\windows\system32\Drivers\WUDFRd.sys
2015-01-17 18:37 - 2012-07-26 03:26 - 00087040 _____ (Microsoft Corporation) C:\windows\system32\Drivers\WUDFPf.sys
2015-01-17 18:37 - 2012-06-02 15:57 - 00000003 _____ () C:\windows\system32\Drivers\MsftWdf_User_01_11_00_Inbox_Critical.Wdf
2015-01-17 18:35 - 2014-06-27 03:08 - 02777088 _____ (Microsoft Corporation) C:\windows\system32\msmpeg2vdec.dll
2015-01-17 18:35 - 2014-06-27 02:45 - 02285056 _____ (Microsoft Corporation) C:\windows\SysWOW64\msmpeg2vdec.dll
2015-01-17 18:32 - 2015-01-17 18:32 - 00000000 ____D () C:\Users\Public\Documents\CyberLink
2015-01-17 18:32 - 2015-01-17 18:32 - 00000000 ____D () C:\Users\HP ProBook 470 G2\Documents\CyberLink
2015-01-17 18:32 - 2015-01-17 18:32 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Roaming\CyberLink
2015-01-17 18:32 - 2014-11-08 04:16 - 00002048 _____ (Microsoft Corporation) C:\windows\system32\tzres.dll
2015-01-17 18:32 - 2014-11-08 03:45 - 00002048 _____ (Microsoft Corporation) C:\windows\SysWOW64\tzres.dll
2015-01-17 18:32 - 2014-10-14 03:13 - 03241984 _____ (Microsoft Corporation) C:\windows\system32\msi.dll
2015-01-17 18:32 - 2014-10-14 02:50 - 02363904 _____ (Microsoft Corporation) C:\windows\SysWOW64\msi.dll
2015-01-17 18:32 - 2014-09-25 03:08 - 00371712 _____ (Microsoft Corporation) C:\windows\system32\qdvd.dll
2015-01-17 18:32 - 2014-09-25 02:40 - 00519680 _____ (Microsoft Corporation) C:\windows\SysWOW64\qdvd.dll
2015-01-17 18:32 - 2014-08-01 12:53 - 01031168 _____ (Microsoft Corporation) C:\windows\system32\TSWorkspace.dll
2015-01-17 18:32 - 2014-08-01 12:35 - 00793600 _____ (Microsoft Corporation) C:\windows\SysWOW64\TSWorkspace.dll
2015-01-17 18:32 - 2014-06-24 04:29 - 02565120 _____ (Microsoft Corporation) C:\windows\system32\d3d10warp.dll
2015-01-17 18:32 - 2014-06-24 03:59 - 01987584 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3d10warp.dll
2015-01-17 18:31 - 2015-01-17 18:31 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Local\CyberLink
2015-01-17 18:31 - 2014-11-11 02:46 - 00119296 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tdx.sys
2015-01-17 18:31 - 2014-10-30 03:03 - 00165888 _____ (Microsoft Corporation) C:\windows\system32\charmap.exe
2015-01-17 18:31 - 2014-10-30 02:45 - 00155136 _____ (Microsoft Corporation) C:\windows\SysWOW64\charmap.exe
2015-01-17 18:31 - 2014-06-25 03:05 - 14175744 _____ (Microsoft Corporation) C:\windows\system32\shell32.dll
2015-01-17 18:31 - 2014-06-25 02:41 - 12874240 _____ (Microsoft Corporation) C:\windows\SysWOW64\shell32.dll
2015-01-17 18:31 - 2014-02-04 03:35 - 00274880 _____ (Microsoft Corporation) C:\windows\system32\Drivers\msiscsi.sys
2015-01-17 18:31 - 2014-02-04 03:35 - 00190912 _____ (Microsoft Corporation) C:\windows\system32\Drivers\storport.sys
2015-01-17 18:31 - 2014-02-04 03:35 - 00027584 _____ (Microsoft Corporation) C:\windows\system32\Drivers\Diskdump.sys
2015-01-17 18:31 - 2014-02-04 03:28 - 00002048 _____ (Microsoft Corporation) C:\windows\system32\iologmsg.dll
2015-01-17 18:31 - 2014-02-04 03:00 - 00002048 _____ (Microsoft Corporation) C:\windows\SysWOW64\iologmsg.dll
2015-01-17 18:31 - 2014-01-28 03:32 - 00228864 _____ (Microsoft Corporation) C:\windows\system32\wwansvc.dll
2015-01-17 18:31 - 2014-01-24 03:37 - 01684928 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ntfs.sys
2015-01-17 18:27 - 2014-10-03 03:12 - 02020352 _____ (Microsoft Corporation) C:\windows\system32\WsmSvc.dll
2015-01-17 18:27 - 2014-10-03 03:12 - 00346624 _____ (Microsoft Corporation) C:\windows\system32\WSManMigrationPlugin.dll
2015-01-17 18:27 - 2014-10-03 03:12 - 00310272 _____ (Microsoft Corporation) C:\windows\system32\WsmWmiPl.dll
2015-01-17 18:27 - 2014-10-03 03:12 - 00181248 _____ (Microsoft Corporation) C:\windows\system32\WsmAuto.dll
2015-01-17 18:27 - 2014-10-03 03:11 - 00266240 _____ (Microsoft Corporation) C:\windows\system32\WSManHTTPConfig.exe
2015-01-17 18:27 - 2014-10-03 02:45 - 01177088 _____ (Microsoft Corporation) C:\windows\SysWOW64\WsmSvc.dll
2015-01-17 18:27 - 2014-10-03 02:45 - 00248832 _____ (Microsoft Corporation) C:\windows\SysWOW64\WSManMigrationPlugin.dll
2015-01-17 18:27 - 2014-10-03 02:45 - 00214016 _____ (Microsoft Corporation) C:\windows\SysWOW64\WsmWmiPl.dll
2015-01-17 18:27 - 2014-10-03 02:45 - 00145920 _____ (Microsoft Corporation) C:\windows\SysWOW64\WsmAuto.dll
2015-01-17 18:27 - 2014-10-03 02:44 - 00198656 _____ (Microsoft Corporation) C:\windows\SysWOW64\WSManHTTPConfig.exe
2015-01-17 18:13 - 2015-02-03 14:04 - 00003854 _____ () C:\windows\System32\Tasks\Opera scheduled Autoupdate 1421514790
2015-01-17 18:13 - 2015-01-17 18:13 - 00001146 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk
2015-01-17 18:13 - 2015-01-17 18:13 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Roaming\Opera Software
2015-01-17 18:13 - 2015-01-17 18:13 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Local\Opera Software
2015-01-17 18:12 - 2015-02-03 14:04 - 00000000 ____D () C:\Program Files (x86)\Opera
2015-01-17 18:08 - 2015-01-30 07:13 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2015-01-17 18:08 - 2015-01-17 18:09 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Roaming\Mozilla
2015-01-17 18:08 - 2015-01-17 18:09 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Local\Mozilla
2015-01-17 18:08 - 2015-01-17 18:08 - 00001170 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2015-01-17 18:08 - 2015-01-17 18:08 - 00001158 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2015-01-17 18:08 - 2015-01-17 18:08 - 00000000 ____D () C:\ProgramData\Mozilla
2015-01-17 18:05 - 2015-01-17 18:05 - 00000000 __SHD () C:\Users\HP ProBook 470 G2\AppData\Local\EmieUserList
2015-01-17 18:05 - 2015-01-17 18:05 - 00000000 __SHD () C:\Users\HP ProBook 470 G2\AppData\Local\EmieSiteList
2015-01-17 18:02 - 2015-01-17 18:02 - 00001228 _____ () C:\Users\HP ProBook 470 G2\Desktop\Windows Explorer.lnk
2015-01-17 15:41 - 2015-01-17 15:42 - 00000000 ____D () C:\windows\system32\MRT
2015-01-17 15:41 - 2014-12-31 13:12 - 113365784 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe
2015-01-17 15:40 - 2014-06-30 23:24 - 00008856 _____ (Microsoft Corporation) C:\windows\system32\icardres.dll
2015-01-17 15:40 - 2014-06-30 23:14 - 00008856 _____ (Microsoft Corporation) C:\windows\SysWOW64\icardres.dll
2015-01-17 15:40 - 2014-03-09 22:48 - 01389208 _____ (Microsoft Corporation) C:\windows\system32\icardagt.exe
2015-01-17 15:40 - 2014-03-09 22:48 - 00171160 _____ (Microsoft Corporation) C:\windows\system32\infocardapi.dll
2015-01-17 15:40 - 2014-03-09 22:47 - 00619672 _____ (Microsoft Corporation) C:\windows\SysWOW64\icardagt.exe
2015-01-17 15:40 - 2014-03-09 22:47 - 00099480 _____ (Microsoft Corporation) C:\windows\SysWOW64\infocardapi.dll
2015-01-17 15:39 - 2014-11-27 02:43 - 00389296 _____ (Microsoft Corporation) C:\windows\system32\iedkcs32.dll
2015-01-17 15:39 - 2014-11-27 02:10 - 00342200 _____ (Microsoft Corporation) C:\windows\SysWOW64\iedkcs32.dll
2015-01-17 15:39 - 2014-11-22 04:13 - 25059840 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2015-01-17 15:39 - 2014-11-22 04:06 - 02724864 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2015-01-17 15:39 - 2014-11-22 04:06 - 00004096 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollectorres.dll
2015-01-17 15:39 - 2014-11-22 03:50 - 00580096 _____ (Microsoft Corporation) C:\windows\system32\vbscript.dll
2015-01-17 15:39 - 2014-11-22 03:50 - 00066560 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2015-01-17 15:39 - 2014-11-22 03:49 - 02885120 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2015-01-17 15:39 - 2014-11-22 03:49 - 00048640 _____ (Microsoft Corporation) C:\windows\system32\ieetwproxystub.dll
2015-01-17 15:39 - 2014-11-22 03:48 - 00088064 _____ (Microsoft Corporation) C:\windows\system32\MshtmlDac.dll
2015-01-17 15:39 - 2014-11-22 03:41 - 00054784 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2015-01-17 15:39 - 2014-11-22 03:40 - 00034304 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2015-01-17 15:39 - 2014-11-22 03:37 - 00633856 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll
2015-01-17 15:39 - 2014-11-22 03:35 - 00114688 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollector.exe
2015-01-17 15:39 - 2014-11-22 03:34 - 06039552 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2015-01-17 15:39 - 2014-11-22 03:34 - 00814080 _____ (Microsoft Corporation) C:\windows\system32\jscript9diag.dll
2015-01-17 15:39 - 2014-11-22 03:26 - 00968704 _____ (Microsoft Corporation) C:\windows\system32\MsSpellCheckingFacility.exe
2015-01-17 15:39 - 2014-11-22 03:22 - 19749376 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll
2015-01-17 15:39 - 2014-11-22 03:22 - 00490496 _____ (Microsoft Corporation) C:\windows\system32\dxtmsft.dll
2015-01-17 15:39 - 2014-11-22 03:20 - 02724864 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb
2015-01-17 15:39 - 2014-11-22 03:14 - 00077824 _____ (Microsoft Corporation) C:\windows\system32\JavaScriptCollectionAgent.dll
2015-01-17 15:39 - 2014-11-22 03:09 - 00199680 _____ (Microsoft Corporation) C:\windows\system32\msrating.dll
2015-01-17 15:39 - 2014-11-22 03:08 - 00092160 _____ (Microsoft Corporation) C:\windows\system32\mshtmled.dll
2015-01-17 15:39 - 2014-11-22 03:07 - 00501248 _____ (Microsoft Corporation) C:\windows\SysWOW64\vbscript.dll
2015-01-17 15:39 - 2014-11-22 03:07 - 00062464 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesetup.dll
2015-01-17 15:39 - 2014-11-22 03:06 - 00047616 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieetwproxystub.dll
2015-01-17 15:39 - 2014-11-22 03:05 - 00316928 _____ (Microsoft Corporation) C:\windows\system32\dxtrans.dll
2015-01-17 15:39 - 2014-11-22 03:05 - 00064000 _____ (Microsoft Corporation) C:\windows\SysWOW64\MshtmlDac.dll
2015-01-17 15:39 - 2014-11-22 03:01 - 02277888 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll
2015-01-17 15:39 - 2014-11-22 02:59 - 00047104 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsproxy.dll
2015-01-17 15:39 - 2014-11-22 02:58 - 00030720 _____ (Microsoft Corporation) C:\windows\SysWOW64\iernonce.dll
2015-01-17 15:39 - 2014-11-22 02:56 - 00478208 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieui.dll
2015-01-17 15:39 - 2014-11-22 02:54 - 00620032 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9diag.dll
2015-01-17 15:39 - 2014-11-22 02:49 - 00800768 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2015-01-17 15:39 - 2014-11-22 02:49 - 00718848 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2015-01-17 15:39 - 2014-11-22 02:47 - 01359360 _____ (Microsoft Corporation) C:\windows\system32\mshtmlmedia.dll
2015-01-17 15:39 - 2014-11-22 02:46 - 02125312 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl
2015-01-17 15:39 - 2014-11-22 02:45 - 00418304 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtmsft.dll
2015-01-17 15:39 - 2014-11-22 02:43 - 14412800 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2015-01-17 15:39 - 2014-11-22 02:40 - 00060416 _____ (Microsoft Corporation) C:\windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-01-17 15:39 - 2014-11-22 02:36 - 00168960 _____ (Microsoft Corporation) C:\windows\SysWOW64\msrating.dll
2015-01-17 15:39 - 2014-11-22 02:35 - 00076288 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmled.dll
2015-01-17 15:39 - 2014-11-22 02:33 - 00285696 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtrans.dll
2015-01-17 15:39 - 2014-11-22 02:29 - 04299264 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll
2015-01-17 15:39 - 2014-11-22 02:28 - 02358272 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2015-01-17 15:39 - 2014-11-22 02:23 - 00688640 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll
2015-01-17 15:39 - 2014-11-22 02:22 - 02052096 _____ (Microsoft Corporation) C:\windows\SysWOW64\inetcpl.cpl
2015-01-17 15:39 - 2014-11-22 02:21 - 01155072 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmlmedia.dll
2015-01-17 15:39 - 2014-11-22 02:15 - 01548288 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2015-01-17 15:39 - 2014-11-22 02:13 - 12836864 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll
2015-01-17 15:39 - 2014-11-22 02:03 - 00800768 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dll
2015-01-17 15:39 - 2014-11-22 02:00 - 01888256 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll
2015-01-17 15:39 - 2014-11-22 01:56 - 01307136 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll
2015-01-17 15:39 - 2014-11-22 01:54 - 00710144 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieapfltr.dll
2015-01-17 15:39 - 2014-06-06 07:16 - 00035480 _____ (Microsoft Corporation) C:\windows\SysWOW64\TsWpfWrp.exe
2015-01-17 15:39 - 2014-06-06 07:12 - 00035480 _____ (Microsoft Corporation) C:\windows\system32\TsWpfWrp.exe
2015-01-17 15:38 - 2014-09-19 10:42 - 00342016 _____ (Microsoft Corporation) C:\windows\system32\schannel.dll
2015-01-17 15:38 - 2014-09-19 10:42 - 00314880 _____ (Microsoft Corporation) C:\windows\system32\msv1_0.dll
2015-01-17 15:38 - 2014-09-19 10:42 - 00309760 _____ (Microsoft Corporation) C:\windows\system32\ncrypt.dll
2015-01-17 15:38 - 2014-09-19 10:42 - 00210944 _____ (Microsoft Corporation) C:\windows\system32\wdigest.dll
2015-01-17 15:38 - 2014-09-19 10:42 - 00086528 _____ (Microsoft Corporation) C:\windows\system32\TSpkg.dll
2015-01-17 15:38 - 2014-09-19 10:42 - 00022016 _____ (Microsoft Corporation) C:\windows\system32\credssp.dll
2015-01-17 15:38 - 2014-09-19 10:23 - 00259584 _____ (Microsoft Corporation) C:\windows\SysWOW64\msv1_0.dll
2015-01-17 15:38 - 2014-09-19 10:23 - 00248832 _____ (Microsoft Corporation) C:\windows\SysWOW64\schannel.dll
2015-01-17 15:38 - 2014-09-19 10:23 - 00221184 _____ (Microsoft Corporation) C:\windows\SysWOW64\ncrypt.dll
2015-01-17 15:38 - 2014-09-19 10:23 - 00172032 _____ (Microsoft Corporation) C:\windows\SysWOW64\wdigest.dll
2015-01-17 15:38 - 2014-09-19 10:23 - 00065536 _____ (Microsoft Corporation) C:\windows\SysWOW64\TSpkg.dll
2015-01-17 15:38 - 2014-09-19 10:23 - 00017408 _____ (Microsoft Corporation) C:\windows\SysWOW64\credssp.dll
2015-01-17 15:38 - 2014-07-17 03:07 - 00455168 _____ (Microsoft Corporation) C:\windows\system32\winlogon.exe
2015-01-17 15:38 - 2014-07-17 03:07 - 00235520 _____ (Microsoft Corporation) C:\windows\system32\winsta.dll
2015-01-17 15:38 - 2014-07-17 03:07 - 00150528 _____ (Microsoft Corporation) C:\windows\system32\rdpcorekmts.dll
2015-01-17 15:38 - 2014-07-17 02:40 - 00157696 _____ (Microsoft Corporation) C:\windows\SysWOW64\winsta.dll
2015-01-17 15:38 - 2014-07-17 02:21 - 00212480 _____ (Microsoft Corporation) C:\windows\system32\Drivers\rdpwd.sys
2015-01-17 15:38 - 2014-07-17 02:21 - 00039936 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tssecsrv.sys
2015-01-17 15:38 - 2014-04-25 03:34 - 00801280 _____ (Microsoft Corporation) C:\windows\system32\usp10.dll
2015-01-17 15:38 - 2014-04-25 03:06 - 00626688 _____ (Microsoft Corporation) C:\windows\SysWOW64\usp10.dll
2015-01-17 15:38 - 2014-03-04 10:44 - 01163264 _____ (Microsoft Corporation) C:\windows\system32\kernel32.dll
2015-01-17 15:38 - 2014-03-04 10:44 - 00722944 _____ (Microsoft Corporation) C:\windows\system32\objsel.dll
2015-01-17 15:38 - 2014-03-04 10:44 - 00424960 _____ (Microsoft Corporation) C:\windows\system32\KernelBase.dll
2015-01-17 15:38 - 2014-03-04 10:44 - 00362496 _____ (Microsoft Corporation) C:\windows\system32\wow64win.dll
2015-01-17 15:38 - 2014-03-04 10:44 - 00243712 _____ (Microsoft Corporation) C:\windows\system32\wow64.dll
2015-01-17 15:38 - 2014-03-04 10:44 - 00039936 _____ (Microsoft Corporation) C:\windows\system32\wincredprovider.dll
2015-01-17 15:38 - 2014-03-04 10:44 - 00016384 _____ (Microsoft Corporation) C:\windows\system32\ntvdm64.dll
2015-01-17 15:38 - 2014-03-04 10:44 - 00013312 _____ (Microsoft Corporation) C:\windows\system32\wow64cpu.dll
2015-01-17 15:38 - 2014-03-04 10:43 - 00057344 _____ (Microsoft Corporation) C:\windows\system32\cngprovider.dll
2015-01-17 15:38 - 2014-03-04 10:43 - 00056832 _____ (Microsoft Corporation) C:\windows\system32\adprovider.dll
2015-01-17 15:38 - 2014-03-04 10:43 - 00053760 _____ (Microsoft Corporation) C:\windows\system32\capiprovider.dll
2015-01-17 15:38 - 2014-03-04 10:43 - 00052736 _____ (Microsoft Corporation) C:\windows\system32\dpapiprovider.dll
2015-01-17 15:38 - 2014-03-04 10:43 - 00044544 _____ (Microsoft Corporation) C:\windows\system32\dimsroam.dll
2015-01-17 15:38 - 2014-03-04 10:17 - 00538112 _____ (Microsoft Corporation) C:\windows\SysWOW64\objsel.dll
2015-01-17 15:38 - 2014-03-04 10:17 - 00051200 _____ (Microsoft Corporation) C:\windows\SysWOW64\cngprovider.dll
2015-01-17 15:38 - 2014-03-04 10:17 - 00049664 _____ (Microsoft Corporation) C:\windows\SysWOW64\adprovider.dll
2015-01-17 15:38 - 2014-03-04 10:17 - 00048128 _____ (Microsoft Corporation) C:\windows\SysWOW64\capiprovider.dll
2015-01-17 15:38 - 2014-03-04 10:17 - 00047616 _____ (Microsoft Corporation) C:\windows\SysWOW64\dpapiprovider.dll
2015-01-17 15:38 - 2014-03-04 10:17 - 00036864 _____ (Microsoft Corporation) C:\windows\SysWOW64\dimsroam.dll
2015-01-17 15:38 - 2014-03-04 10:17 - 00035328 _____ (Microsoft Corporation) C:\windows\SysWOW64\wincredprovider.dll
2015-01-17 15:38 - 2014-03-04 10:17 - 00014336 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntvdm64.dll
2015-01-17 15:38 - 2014-03-04 10:16 - 01114112 _____ (Microsoft Corporation) C:\windows\SysWOW64\kernel32.dll
2015-01-17 15:38 - 2014-03-04 10:16 - 00274944 _____ (Microsoft Corporation) C:\windows\SysWOW64\KernelBase.dll
2015-01-17 15:38 - 2014-03-04 10:16 - 00025600 _____ (Microsoft Corporation) C:\windows\SysWOW64\setup16.exe
2015-01-17 15:38 - 2014-03-04 10:16 - 00005120 _____ (Microsoft Corporation) C:\windows\SysWOW64\wow32.dll
2015-01-17 15:38 - 2014-03-04 09:09 - 00007680 _____ (Microsoft Corporation) C:\windows\SysWOW64\instnm.exe
2015-01-17 15:38 - 2014-03-04 09:09 - 00002048 _____ (Microsoft Corporation) C:\windows\SysWOW64\user.exe
2015-01-17 15:38 - 2011-04-09 07:58 - 00142336 _____ (Microsoft Corporation) C:\windows\system32\poqexec.exe
2015-01-17 15:38 - 2011-04-09 06:56 - 00123904 _____ (Microsoft Corporation) C:\windows\SysWOW64\poqexec.exe
2015-01-17 15:37 - 2014-12-19 02:46 - 00141312 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxdav.sys
2015-01-17 15:37 - 2014-12-12 06:35 - 05553592 _____ (Microsoft Corporation) C:\windows\system32\ntoskrnl.exe
2015-01-17 15:37 - 2014-12-12 06:31 - 00503808 _____ (Microsoft Corporation) C:\windows\system32\srcore.dll
2015-01-17 15:37 - 2014-12-12 06:31 - 00296960 _____ (Microsoft Corporation) C:\windows\system32\rstrui.exe
2015-01-17 15:37 - 2014-12-12 06:31 - 00050176 _____ (Microsoft Corporation) C:\windows\system32\srclient.dll
2015-01-17 15:37 - 2014-12-12 06:11 - 03971512 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntkrnlpa.exe
2015-01-17 15:37 - 2014-12-12 06:11 - 03916728 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntoskrnl.exe
2015-01-17 15:37 - 2014-12-12 06:07 - 00043008 _____ (Microsoft Corporation) C:\windows\SysWOW64\srclient.dll
2015-01-17 15:37 - 2014-11-11 04:09 - 01424384 _____ (Microsoft Corporation) C:\windows\system32\WindowsCodecs.dll
2015-01-17 15:37 - 2014-11-11 04:08 - 00728064 _____ (Microsoft Corporation) C:\windows\system32\kerberos.dll
2015-01-17 15:37 - 2014-11-11 04:08 - 00241152 _____ (Microsoft Corporation) C:\windows\system32\pku2u.dll
2015-01-17 15:37 - 2014-11-11 03:44 - 01230336 _____ (Microsoft Corporation) C:\windows\SysWOW64\WindowsCodecs.dll
2015-01-17 15:37 - 2014-11-11 03:44 - 00550912 _____ (Microsoft Corporation) C:\windows\SysWOW64\kerberos.dll
2015-01-17 15:37 - 2014-11-11 03:44 - 00186880 _____ (Microsoft Corporation) C:\windows\SysWOW64\pku2u.dll
2015-01-17 15:37 - 2014-10-14 03:16 - 00155064 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecpkg.sys
2015-01-17 15:37 - 2014-10-14 03:13 - 00683520 _____ (Microsoft Corporation) C:\windows\system32\termsrv.dll
2015-01-17 15:37 - 2014-10-14 03:12 - 01460736 _____ (Microsoft Corporation) C:\windows\system32\lsasrv.dll
2015-01-17 15:37 - 2014-10-14 03:09 - 00146432 _____ (Microsoft Corporation) C:\windows\system32\msaudite.dll
2015-01-17 15:37 - 2014-10-14 03:07 - 00681984 _____ (Microsoft Corporation) C:\windows\system32\adtschema.dll
2015-01-17 15:37 - 2014-10-14 02:50 - 00022016 _____ (Microsoft Corporation) C:\windows\SysWOW64\secur32.dll
2015-01-17 15:37 - 2014-10-14 02:49 - 00096768 _____ (Microsoft Corporation) C:\windows\SysWOW64\sspicli.dll
2015-01-17 15:37 - 2014-10-14 02:47 - 00146432 _____ (Microsoft Corporation) C:\windows\SysWOW64\msaudite.dll
2015-01-17 15:37 - 2014-10-14 02:46 - 00681984 _____ (Microsoft Corporation) C:\windows\SysWOW64\adtschema.dll
2015-01-17 15:37 - 2014-10-10 01:57 - 03198976 _____ (Microsoft Corporation) C:\windows\system32\win32k.sys
2015-01-17 15:37 - 2014-08-21 07:43 - 01882624 _____ (Microsoft Corporation) C:\windows\system32\msxml3.dll
2015-01-17 15:37 - 2014-08-21 07:40 - 00002048 _____ (Microsoft Corporation) C:\windows\system32\msxml3r.dll
2015-01-17 15:37 - 2014-08-21 07:26 - 01237504 _____ (Microsoft Corporation) C:\windows\SysWOW64\msxml3.dll
2015-01-17 15:37 - 2014-08-21 07:23 - 00002048 _____ (Microsoft Corporation) C:\windows\SysWOW64\msxml3r.dll
2015-01-17 15:37 - 2014-08-12 03:02 - 00878080 _____ (Microsoft Corporation) C:\windows\system32\IMJP10K.DLL
2015-01-17 15:37 - 2014-08-12 02:36 - 00701440 _____ (Microsoft Corporation) C:\windows\SysWOW64\IMJP10K.DLL
2015-01-17 15:37 - 2014-06-18 03:18 - 00692736 _____ (Microsoft Corporation) C:\windows\system32\osk.exe
2015-01-17 15:37 - 2014-06-18 02:51 - 00646144 _____ (Microsoft Corporation) C:\windows\SysWOW64\osk.exe
2015-01-17 15:37 - 2014-06-12 08:52 - 00986560 _____ (Microsoft Corporation) C:\windows\system32\Drivers\dxgkrnl.sys
2015-01-17 15:37 - 2014-06-03 11:02 - 01941504 _____ (Microsoft Corporation) C:\windows\system32\authui.dll
2015-01-17 15:37 - 2014-06-03 11:02 - 00504320 _____ (Microsoft Corporation) C:\windows\system32\msihnd.dll
2015-01-17 15:37 - 2014-06-03 11:02 - 00112064 _____ (Microsoft Corporation) C:\windows\system32\consent.exe
2015-01-17 15:37 - 2014-06-03 10:29 - 01805824 _____ (Microsoft Corporation) C:\windows\SysWOW64\authui.dll
2015-01-17 15:37 - 2014-06-03 10:29 - 00337408 _____ (Microsoft Corporation) C:\windows\SysWOW64\msihnd.dll
2015-01-17 15:37 - 2014-04-12 03:22 - 00095680 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecdd.sys
2015-01-17 15:37 - 2014-04-12 03:19 - 00136192 _____ (Microsoft Corporation) C:\windows\system32\sspicli.dll
2015-01-17 15:37 - 2014-04-12 03:19 - 00031232 _____ (Microsoft Corporation) C:\windows\system32\lsass.exe
2015-01-17 15:37 - 2014-04-12 03:19 - 00029184 _____ (Microsoft Corporation) C:\windows\system32\sspisrv.dll
2015-01-17 15:37 - 2014-04-12 03:19 - 00028160 _____ (Microsoft Corporation) C:\windows\system32\secur32.dll
2015-01-17 15:37 - 2014-04-05 03:47 - 01903552 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tcpip.sys
2015-01-17 15:37 - 2014-04-05 03:47 - 00288192 _____ (Microsoft Corporation) C:\windows\system32\Drivers\FWPKCLNT.SYS
2015-01-17 15:37 - 2014-03-26 15:44 - 02002432 _____ (Microsoft Corporation) C:\windows\system32\msxml6.dll
2015-01-17 15:37 - 2014-03-26 15:41 - 00002048 _____ (Microsoft Corporation) C:\windows\system32\msxml6r.dll
2015-01-17 15:37 - 2014-03-26 15:27 - 01389056 _____ (Microsoft Corporation) C:\windows\SysWOW64\msxml6.dll
2015-01-17 15:37 - 2014-03-26 15:25 - 00002048 _____ (Microsoft Corporation) C:\windows\SysWOW64\msxml6r.dll
2015-01-17 15:37 - 2011-11-17 07:35 - 00395776 _____ (Microsoft Corporation) C:\windows\system32\webio.dll
2015-01-17 15:37 - 2011-11-17 06:35 - 00314880 _____ (Microsoft Corporation) C:\windows\SysWOW64\webio.dll
2015-01-17 15:36 - 2014-12-19 04:06 - 00210432 _____ (Microsoft Corporation) C:\windows\system32\profsvc.dll
2015-01-17 15:36 - 2014-12-06 05:17 - 00303616 _____ (Microsoft Corporation) C:\windows\system32\nlasvc.dll
2015-01-17 15:36 - 2014-12-06 04:50 - 00156672 _____ (Microsoft Corporation) C:\windows\SysWOW64\ncsi.dll
2015-01-17 15:36 - 2014-12-06 04:50 - 00052224 _____ (Microsoft Corporation) C:\windows\SysWOW64\nlaapi.dll
2015-01-17 15:36 - 2014-10-25 02:57 - 00077824 _____ (Microsoft Corporation) C:\windows\system32\packager.dll
2015-01-17 15:36 - 2014-10-25 02:32 - 00067584 _____ (Microsoft Corporation) C:\windows\SysWOW64\packager.dll
2015-01-17 15:36 - 2014-10-18 03:05 - 00861696 _____ (Microsoft Corporation) C:\windows\system32\oleaut32.dll
2015-01-17 15:36 - 2014-10-18 02:33 - 00571904 _____ (Microsoft Corporation) C:\windows\SysWOW64\oleaut32.dll
2015-01-17 15:36 - 2014-10-03 03:12 - 00500224 _____ (Microsoft Corporation) C:\windows\system32\AUDIOKSE.dll
2015-01-17 15:36 - 2014-10-03 03:11 - 00680960 _____ (Microsoft Corporation) C:\windows\system32\audiosrv.dll
2015-01-17 15:36 - 2014-10-03 03:11 - 00440832 _____ (Microsoft Corporation) C:\windows\system32\AudioEng.dll
2015-01-17 15:36 - 2014-10-03 03:11 - 00296448 _____ (Microsoft Corporation) C:\windows\system32\AudioSes.dll
2015-01-17 15:36 - 2014-10-03 03:11 - 00284672 _____ (Microsoft Corporation) C:\windows\system32\EncDump.dll
2015-01-17 15:36 - 2014-10-03 02:44 - 00442880 _____ (Microsoft Corporation) C:\windows\SysWOW64\AUDIOKSE.dll
2015-01-17 15:36 - 2014-10-03 02:44 - 00374784 _____ (Microsoft Corporation) C:\windows\SysWOW64\AudioEng.dll
2015-01-17 15:36 - 2014-10-03 02:44 - 00195584 _____ (Microsoft Corporation) C:\windows\SysWOW64\AudioSes.dll
2015-01-17 15:36 - 2014-09-04 06:23 - 00424448 _____ (Microsoft Corporation) C:\windows\system32\rastls.dll
2015-01-17 15:36 - 2014-09-04 06:04 - 00372736 _____ (Microsoft Corporation) C:\windows\SysWOW64\rastls.dll
2015-01-17 15:36 - 2014-06-18 23:23 - 01943696 _____ (Microsoft Corporation) C:\windows\system32\dfshim.dll
2015-01-17 15:36 - 2014-06-18 23:23 - 01131664 _____ (Microsoft Corporation) C:\windows\SysWOW64\dfshim.dll
2015-01-17 15:36 - 2014-06-18 23:23 - 00156824 _____ (Microsoft Corporation) C:\windows\SysWOW64\mscorier.dll
2015-01-17 15:36 - 2014-06-18 23:23 - 00156312 _____ (Microsoft Corporation) C:\windows\system32\mscorier.dll
2015-01-17 15:36 - 2014-06-18 23:23 - 00081560 _____ (Microsoft Corporation) C:\windows\SysWOW64\mscories.dll
2015-01-17 15:36 - 2014-06-18 23:23 - 00073880 _____ (Microsoft Corporation) C:\windows\system32\mscories.dll
2015-01-17 15:36 - 2014-06-06 11:10 - 00624128 _____ (Microsoft Corporation) C:\windows\system32\qedit.dll
2015-01-17 15:36 - 2014-06-06 10:44 - 00509440 _____ (Microsoft Corporation) C:\windows\SysWOW64\qedit.dll
2015-01-17 15:36 - 2014-05-30 07:45 - 00497152 _____ (Microsoft Corporation) C:\windows\system32\Drivers\afd.sys
2015-01-17 15:36 - 2014-01-29 03:32 - 00484864 _____ (Microsoft Corporation) C:\windows\system32\wer.dll
2015-01-17 15:36 - 2014-01-29 03:06 - 00381440 _____ (Microsoft Corporation) C:\windows\SysWOW64\wer.dll
2015-01-17 15:36 - 2013-07-20 11:33 - 00124112 _____ (Microsoft Corporation) C:\windows\system32\PresentationCFFRasterizerNative_v0300.dll
2015-01-17 15:36 - 2013-07-20 11:33 - 00102608 _____ (Microsoft Corporation) C:\windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2015-01-17 15:35 - 2014-08-23 03:07 - 00404480 _____ (Microsoft Corporation) C:\windows\system32\gdi32.dll
2015-01-17 15:35 - 2014-08-23 02:45 - 00311808 _____ (Microsoft Corporation) C:\windows\SysWOW64\gdi32.dll
2015-01-17 15:35 - 2011-02-23 05:55 - 00090624 _____ (Microsoft Corporation) C:\windows\system32\Drivers\bowser.sys
2015-01-17 15:26 - 2014-07-14 03:02 - 01216000 _____ (Microsoft Corporation) C:\windows\system32\rpcrt4.dll
2015-01-17 15:26 - 2014-07-14 02:40 - 00664064 _____ (Microsoft Corporation) C:\windows\SysWOW64\rpcrt4.dll
2015-01-17 14:57 - 2015-01-17 14:57 - 00000000 ____D () C:\windows\system32\appmgmt
2015-01-17 14:32 - 2012-02-17 07:38 - 01031680 _____ (Microsoft Corporation) C:\windows\system32\rdpcore.dll
2015-01-17 14:32 - 2012-02-17 06:34 - 00826880 _____ (Microsoft Corporation) C:\windows\SysWOW64\rdpcore.dll
2015-01-17 14:32 - 2012-02-17 05:57 - 00023552 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tdtcp.sys
2015-01-17 14:29 - 2015-02-01 17:26 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Local\Hewlett-Packard
2015-01-17 14:24 - 2014-05-14 17:23 - 02477536 _____ (Microsoft Corporation) C:\windows\system32\wuaueng.dll
2015-01-17 14:24 - 2014-05-14 17:23 - 00700384 _____ (Microsoft Corporation) C:\windows\system32\wuapi.dll
2015-01-17 14:24 - 2014-05-14 17:23 - 00581600 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuapi.dll
2015-01-17 14:24 - 2014-05-14 17:23 - 00058336 _____ (Microsoft Corporation) C:\windows\system32\wuauclt.exe
2015-01-17 14:24 - 2014-05-14 17:23 - 00044512 _____ (Microsoft Corporation) C:\windows\system32\wups2.dll
2015-01-17 14:24 - 2014-05-14 17:23 - 00038880 _____ (Microsoft Corporation) C:\windows\system32\wups.dll
2015-01-17 14:24 - 2014-05-14 17:23 - 00036320 _____ (Microsoft Corporation) C:\windows\SysWOW64\wups.dll
2015-01-17 14:24 - 2014-05-14 17:21 - 02620928 _____ (Microsoft Corporation) C:\windows\system32\wucltux.dll
2015-01-17 14:24 - 2014-05-14 17:20 - 00097792 _____ (Microsoft Corporation) C:\windows\system32\wudriver.dll
2015-01-17 14:24 - 2014-05-14 17:17 - 00092672 _____ (Microsoft Corporation) C:\windows\SysWOW64\wudriver.dll
2015-01-17 14:24 - 2014-05-14 09:23 - 00198600 _____ (Microsoft Corporation) C:\windows\system32\wuwebv.dll
2015-01-17 14:24 - 2014-05-14 09:23 - 00179656 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuwebv.dll
2015-01-17 14:24 - 2014-05-14 09:20 - 00036864 _____ (Microsoft Corporation) C:\windows\system32\wuapp.exe
2015-01-17 14:24 - 2014-05-14 09:17 - 00033792 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuapp.exe
2015-01-17 14:23 - 2015-01-19 08:50 - 00111448 _____ () C:\Users\HP ProBook 470 G2\AppData\Local\GDIPFONTCACHEV1.DAT
2015-01-17 14:23 - 2015-01-17 14:23 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Roaming\Intel Corporation
2015-01-17 14:23 - 2015-01-17 14:23 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Roaming\ATI
2015-01-17 14:23 - 2015-01-17 14:23 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Local\ATI
2015-01-17 14:22 - 2015-01-28 14:08 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Roaming\Hewlett-Packard
2015-01-17 14:22 - 2015-01-19 09:59 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Roaming\hpqLog
2015-01-17 14:22 - 2015-01-17 14:22 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Local\Power2Go8
2015-01-17 14:21 - 2015-02-03 16:06 - 00003982 _____ () C:\windows\System32\Tasks\User_Feed_Synchronization-{A3EC1CE9-D038-490D-8706-1AC18333F6A4}
2015-01-17 14:21 - 2015-01-19 14:26 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Local\VirtualStore
2015-01-17 14:21 - 2015-01-18 14:57 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Roaming\Adobe
2015-01-17 14:21 - 2015-01-17 14:21 - 00001432 _____ () C:\Users\HP ProBook 470 G2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-01-17 14:21 - 2015-01-17 14:21 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Local\RemEngine
2015-01-17 14:21 - 2015-01-17 14:21 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Local\Hewlett-Packard_Company
2015-01-17 14:20 - 2015-02-04 15:12 - 00066612 _____ () C:\Users\HP ProBook 470 G2\AppData\Local\BTServer.log
2015-01-17 14:20 - 2015-01-17 14:21 - 00000000 ____D () C:\Users\HP ProBook 470 G2
2015-01-17 14:20 - 2015-01-17 14:20 - 00000180 _____ () C:\windows\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2015-01-17 14:20 - 2015-01-17 14:20 - 00000020 ___SH () C:\Users\HP ProBook 470 G2\ntuser.ini
2015-01-17 14:20 - 2015-01-17 14:20 - 00000000 _SHDL () C:\Users\HP ProBook 470 G2\Vorlagen
2015-01-17 14:20 - 2015-01-17 14:20 - 00000000 _SHDL () C:\Users\HP ProBook 470 G2\Startmenü
2015-01-17 14:20 - 2015-01-17 14:20 - 00000000 _SHDL () C:\Users\HP ProBook 470 G2\Netzwerkumgebung
2015-01-17 14:20 - 2015-01-17 14:20 - 00000000 _SHDL () C:\Users\HP ProBook 470 G2\Lokale Einstellungen
2015-01-17 14:20 - 2015-01-17 14:20 - 00000000 _SHDL () C:\Users\HP ProBook 470 G2\Eigene Dateien
2015-01-17 14:20 - 2015-01-17 14:20 - 00000000 _SHDL () C:\Users\HP ProBook 470 G2\Druckumgebung
2015-01-17 14:20 - 2015-01-17 14:20 - 00000000 _SHDL () C:\Users\HP ProBook 470 G2\Documents\Eigene Musik
2015-01-17 14:20 - 2015-01-17 14:20 - 00000000 _SHDL () C:\Users\HP ProBook 470 G2\Documents\Eigene Bilder
2015-01-17 14:20 - 2015-01-17 14:20 - 00000000 _SHDL () C:\Users\HP ProBook 470 G2\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2015-01-17 14:20 - 2015-01-17 14:20 - 00000000 _SHDL () C:\Users\HP ProBook 470 G2\AppData\Local\Verlauf
2015-01-17 14:20 - 2015-01-17 14:20 - 00000000 _SHDL () C:\Users\HP ProBook 470 G2\AppData\Local\Anwendungsdaten
2015-01-17 14:20 - 2015-01-17 14:20 - 00000000 _SHDL () C:\Users\HP ProBook 470 G2\Anwendungsdaten
2015-01-17 14:20 - 2015-01-17 14:20 - 00000000 __RSH () C:\windows\SysWOW64\Drivers\103C_HP_bNB_ProBook 470 G2_Y5336AN_0U_QCND43650KK_E14WWR4AW602_4A_I2249_SHP_V67.22_BM74 01.03_T140707_W748-1_L407_M8065_J750_7Intel_8651_92.60_#140522_N10EC8168;10ECB723_(G6W69EA#ABD)_XMOBILE_CN10_Z.MRK
2015-01-17 14:20 - 2015-01-17 14:20 - 00000000 __RSH () C:\windows\system32\Drivers\103C_HP_bNB_ProBook 470 G2_Y5336AN_0U_QCND43650KK_E14WWR4AW602_4A_I2249_SHP_V67.22_BM74 01.03_T140707_W748-1_L407_M8065_J750_7Intel_8651_92.60_#140522_N10EC8168;10ECB723_(G6W69EA#ABD)_XMOBILE_CN10_Z.MRK
2015-01-17 14:20 - 2015-01-17 14:20 - 00000000 ____D () C:\Users\HP ProBook 470 G2\Documents\My Bluetooth
2015-01-17 14:20 - 2015-01-17 14:20 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Roaming\DigitalPersona
2015-01-17 14:20 - 2015-01-17 14:20 - 00000000 ____D () C:\Users\HP ProBook 470 G2\AppData\Local\DigitalPersona
2015-01-17 14:20 - 2014-09-09 20:22 - 00000000 ___HD () C:\Users\HP ProBook 470 G2\Documents\hp.system.package.metadata
2015-01-17 14:20 - 2009-07-14 05:54 - 00000000 ___RD () C:\Users\HP ProBook 470 G2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-01-17 14:20 - 2009-07-14 05:49 - 00000000 ___RD () C:\Users\HP ProBook 470 G2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2015-01-17 14:17 - 2015-02-04 15:15 - 01497284 _____ () C:\windows\WindowsUpdate.log

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-02-04 15:18 - 2009-07-14 05:45 - 00026608 ____H () C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-02-04 15:18 - 2009-07-14 05:45 - 00026608 ____H () C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-02-04 15:11 - 2009-07-14 06:08 - 00000006 ____H () C:\windows\Tasks\SA.DAT
2015-02-04 15:11 - 2009-07-14 05:51 - 00091483 _____ () C:\windows\setupact.log
2015-02-04 15:10 - 2010-11-21 04:47 - 00917902 _____ () C:\windows\PFRO.log
2015-02-04 13:23 - 2014-09-09 21:04 - 00700380 _____ () C:\windows\system32\perfh007.dat
2015-02-04 13:23 - 2014-09-09 21:04 - 00149986 _____ () C:\windows\system32\perfc007.dat
2015-02-04 13:23 - 2009-07-14 06:13 - 01622706 _____ () C:\windows\system32\PerfStringBackup.INI
2015-02-01 14:21 - 2014-05-22 13:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP
2015-02-01 14:20 - 2014-09-09 20:51 - 00000000 ____D () C:\windows\Hewlett-Packard
2015-01-26 15:29 - 2014-09-09 20:39 - 00000000 ____D () C:\ProgramData\Skype
2015-01-23 08:42 - 2014-09-09 20:21 - 00114410 _____ () C:\windows\DPINST.LOG
2015-01-23 08:38 - 2013-12-03 20:34 - 00000000 ____D () C:\ProgramData\Package Cache
2015-01-19 17:07 - 2014-05-22 13:25 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2015-01-19 14:09 - 2014-09-09 20:41 - 00000000 ____D () C:\ProgramData\Apple
2015-01-19 10:38 - 2009-07-14 04:20 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
2015-01-19 10:27 - 2009-07-14 05:45 - 02363080 _____ () C:\windows\system32\FNTCACHE.DAT
2015-01-19 10:13 - 2014-09-09 20:23 - 00000000 ____D () C:\Program Files (x86)\Realtek
2015-01-19 10:13 - 2014-03-29 00:26 - 00000000 ____D () C:\SWSETUP
2015-01-19 10:08 - 2014-09-09 20:36 - 00000000 ____D () C:\ProgramData\Realtek
2015-01-19 10:05 - 2014-09-09 20:38 - 00674592 _____ (Sunplus) C:\windows\system32\Drivers\SPUVCBv_x64.sys
2015-01-19 10:05 - 2014-09-09 20:38 - 00068984 _____ (Dext5xx) C:\windows\system32\DextUVCB_x64.ax
2015-01-19 10:05 - 2014-09-09 20:38 - 00063864 _____ (Dext5xx) C:\windows\SysWOW64\DextUVCB.ax
2015-01-19 10:05 - 2014-09-09 20:38 - 00004096 _____ (Hewlett-Packard Company) C:\windows\SysWOW64\sigfile.exe
2015-01-19 10:05 - 2014-09-09 20:38 - 00003962 _____ () C:\windows\Dext_21.ini
2015-01-19 10:05 - 2014-09-09 20:38 - 00003958 _____ () C:\windows\Dext_12.ini
2015-01-19 10:05 - 2014-09-09 20:38 - 00003942 _____ () C:\windows\Dext_27.ini
2015-01-19 10:05 - 2014-09-09 20:38 - 00003940 _____ () C:\windows\Dext_25.ini
2015-01-19 10:05 - 2014-09-09 20:38 - 00003876 _____ () C:\windows\Dext_05.ini
2015-01-19 10:05 - 2014-09-09 20:38 - 00003850 _____ () C:\windows\Dext_14.ini
2015-01-19 10:05 - 2014-09-09 20:38 - 00003762 _____ () C:\windows\Dext_10.ini
2015-01-19 10:05 - 2014-09-09 20:38 - 00003752 _____ () C:\windows\Dext_16.ini
2015-01-19 10:05 - 2014-09-09 20:38 - 00003720 _____ () C:\windows\Dext_36.ini
2015-01-19 10:05 - 2014-09-09 20:38 - 00003696 _____ () C:\windows\Dext_22.ini
2015-01-19 10:05 - 2014-09-09 20:38 - 00003688 _____ () C:\windows\Dext_1046.ini
2015-01-19 10:05 - 2014-09-09 20:38 - 00003684 _____ () C:\windows\Dext_08.ini
2015-01-19 10:05 - 2014-09-09 20:38 - 00003640 _____ () C:\windows\Dext_20.ini
2015-01-19 10:05 - 2014-09-09 20:38 - 00003630 _____ () C:\windows\Dext_07.ini
2015-01-19 10:05 - 2014-09-09 20:38 - 00003630 _____ () C:\windows\Dext_06.ini
2015-01-19 10:05 - 2014-09-09 20:38 - 00003598 _____ () C:\windows\Dext_19.ini
2015-01-19 10:05 - 2014-09-09 20:38 - 00003586 _____ () C:\windows\Dext_24.ini
2015-01-19 10:05 - 2014-09-09 20:38 - 00003580 _____ () C:\windows\Dext_02.ini
2015-01-19 10:05 - 2014-09-09 20:38 - 00003536 _____ () C:\windows\Dext_29.ini
2015-01-19 10:05 - 2014-09-09 20:38 - 00003412 _____ () C:\windows\Dext_13.ini
2015-01-19 10:05 - 2014-09-09 20:38 - 00000000 ____D () C:\Program Files (x86)\HP Camera Driver
2015-01-19 10:02 - 2014-09-09 20:19 - 14956922 _____ () C:\ProgramData\hpcsmmsilogs.log
2015-01-19 10:01 - 2014-09-09 20:21 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Security and Protection
2015-01-19 10:01 - 2014-05-22 13:24 - 00000000 ____D () C:\Program Files\Hewlett-Packard
2015-01-19 10:01 - 2014-05-22 13:24 - 00000000 ____D () C:\Program Files (x86)\Hewlett-Packard
2015-01-19 10:00 - 2014-09-09 21:03 - 00000000 ____D () C:\windows\SysWOW64\de
2015-01-19 10:00 - 2014-09-09 21:03 - 00000000 ____D () C:\windows\system32\de
2015-01-19 09:58 - 2014-09-09 20:21 - 00000000 ____D () C:\ProgramData\HPQLOG
2015-01-19 09:51 - 2014-09-09 20:30 - 00001336 _____ () C:\windows\Synaptics.log
2015-01-18 11:08 - 2009-07-14 04:20 - 00000000 ____D () C:\windows\rescache
2015-01-18 10:13 - 2013-12-03 20:37 - 01596986 _____ () C:\windows\SysWOW64\PerfStringBackup.INI
2015-01-18 09:56 - 2009-07-14 04:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared
2015-01-17 21:11 - 2014-05-22 13:25 - 00000000 ____D () C:\ProgramData\Hewlett-Packard
2015-01-17 18:49 - 2009-07-14 04:20 - 00000000 ____D () C:\windows\SysWOW64\Dism
2015-01-17 18:49 - 2009-07-14 04:20 - 00000000 ____D () C:\windows\system32\Dism
2015-01-17 18:49 - 2009-07-14 04:20 - 00000000 ____D () C:\windows\PolicyDefinitions
2015-01-17 18:32 - 2014-09-09 20:41 - 00000000 ____D () C:\ProgramData\CyberLink
2015-01-17 18:12 - 2014-05-22 13:28 - 00001912 _____ () C:\windows\epplauncher.mif
2015-01-17 18:12 - 2014-05-22 13:27 - 00002124 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Security Essentials.lnk
2015-01-17 18:12 - 2014-05-22 13:27 - 00000000 ____D () C:\Program Files\Microsoft Security Client
2015-01-17 18:12 - 2014-05-22 13:27 - 00000000 ____D () C:\Program Files (x86)\Microsoft Security Client
2015-01-17 17:47 - 2009-07-14 06:32 - 00000000 ____D () C:\windows\system32\restore
2015-01-17 17:43 - 2014-09-09 20:41 - 00000000 ____D () C:\Program Files\Windows Journal
2015-01-17 17:43 - 2010-11-21 08:06 - 00000000 ____D () C:\windows\SysWOW64\winrm
2015-01-17 17:43 - 2010-11-21 08:06 - 00000000 ____D () C:\windows\SysWOW64\WCN
2015-01-17 17:43 - 2010-11-21 08:06 - 00000000 ____D () C:\windows\SysWOW64\sysprep
2015-01-17 17:43 - 2010-11-21 08:06 - 00000000 ____D () C:\windows\SysWOW64\slmgr
2015-01-17 17:43 - 2010-11-21 08:06 - 00000000 ____D () C:\windows\SysWOW64\Printing_Admin_Scripts
2015-01-17 17:43 - 2010-11-21 08:06 - 00000000 ____D () C:\windows\system32\winrm
2015-01-17 17:43 - 2010-11-21 08:06 - 00000000 ____D () C:\windows\system32\WCN
2015-01-17 17:43 - 2010-11-21 08:06 - 00000000 ____D () C:\windows\system32\slmgr
2015-01-17 17:43 - 2010-11-21 08:06 - 00000000 ____D () C:\windows\system32\Printing_Admin_Scripts
2015-01-17 17:43 - 2009-07-14 06:37 - 00000000 ____D () C:\windows\DigitalLocker
2015-01-17 17:43 - 2009-07-14 06:32 - 00000000 ____D () C:\Program Files (x86)\Windows Sidebar
2015-01-17 17:43 - 2009-07-14 06:32 - 00000000 ____D () C:\Program Files (x86)\Windows Defender
2015-01-17 17:43 - 2009-07-14 04:20 - 00000000 ____D () C:\windows\SysWOW64\oobe
2015-01-17 17:43 - 2009-07-14 04:20 - 00000000 ____D () C:\windows\SysWOW64\MUI
2015-01-17 17:43 - 2009-07-14 04:20 - 00000000 ____D () C:\windows\system32\sysprep
2015-01-17 17:43 - 2009-07-14 04:20 - 00000000 ____D () C:\windows\system32\oobe
2015-01-17 17:43 - 2009-07-14 04:20 - 00000000 ____D () C:\windows\system32\MUI
2015-01-17 17:43 - 2009-07-14 04:20 - 00000000 ____D () C:\windows\IME
2015-01-17 17:43 - 2009-07-14 04:20 - 00000000 ____D () C:\Program Files\Common Files\System
2015-01-17 15:01 - 2014-09-09 20:40 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Communication and Chat
2015-01-17 14:21 - 2014-09-09 20:39 - 00000000 ___RD () C:\Program Files (x86)\Online Services
2015-01-17 14:21 - 2014-05-22 13:27 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Productivity and Tools
2015-01-17 14:21 - 2014-05-22 13:27 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP Help and Support
2015-01-17 14:21 - 2013-12-04 00:39 - 00000000 _RSHD () C:\SYSTEM.SAV
2015-01-17 14:20 - 2013-12-03 20:29 - 00000000 ____D () C:\windows\Panther
2015-01-17 14:17 - 2009-07-14 04:20 - 00000000 __RHD () C:\Users\Public\Libraries

==================== Files in the root of some directories =======

2015-01-17 14:20 - 2015-02-04 15:12 - 0066612 _____ () C:\Users\HP ProBook 470 G2\AppData\Local\BTServer.log
2015-01-18 11:57 - 2015-01-18 11:57 - 0000057 _____ () C:\ProgramData\Ament.ini
2014-09-09 20:19 - 2015-01-19 10:02 - 14956922 _____ () C:\ProgramData\hpcsmmsilogs.log
2014-09-09 20:48 - 2014-09-09 20:48 - 1262966 _____ () C:\ProgramData\hpdam_install_log.txt
2014-09-09 20:47 - 2014-09-09 20:48 - 0544208 _____ () C:\ProgramData\HPFileSanitizer_Install_Log.txt

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-02-03 08:55

==================== End Of Log ============================
         

--- --- ---

--- --- ---


[/CODE]

wunderbar

Die Reihenfolge ist hier entscheidend.

1. Falls Defogger benutzt wurde: Defogger nochmal starten und auf re-enable klicken.
2. Falls Combofix benutzt wurde: (Alternativ in uninstall.exe umbenennen und starten)
   • Windowstaste + R > Combofix /Uninstall (eingeben) > OK
   • Alternative: Combofix.exe in uninstall.exe umbenennen und starten
   • Combofix wird jetzt starten, sich evtl updaten und dann alle Reste von sich selbst entfernen.
3. Downloade Dir bitte auf jeden Fall DelFix auf deinen Desktop:
   • Schließe alle offenen Programme.
   • Starte die delfix.exe mit einem Doppelklick.
   • Setze vor jede Funktion ein Häkchen.
   • Klicke auf Start.
   • Hinweis: DelFix entfernt u. a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst.
   • Starte deinen Rechner abschließend neu.
4. Sollten jetzt noch Programme aus unserer Bereinigung übrig sein kannst du sie bedenkenlos löschen.

wenn von deiner Seite nichts mehr anliegt poste ich dir noch eininge Tips und Hinweise

Und auch DelFix erfolgreich ausgeführt.
Vielen Dank an Aneri für die tolle Unterstützung!

Wunderbar dein System ist soweit ich das sehen kann sauber.

Hier noch ein paar Tipps zur Absicherung deines Systems.

Benutzerkonto Einstellungen:

Wir sehen immer wieder User mit Administratorrechten. Hier kann jeder Nutzer eines Windowsrechners schon die erste Türe schließen. Arbeite mit einem eingeschränkten Benutzerkonto anstelle eines Kontos mit Administratorrechten. Diese sind für das tägliche Arbeiten nicht nötig, und solltest du einmal Software installieren wollen wirst du im normalfall nach deinem Passwort gefragt.

Systemupdates:

Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.

• Bitte überprüfe ob dein System Windows Updates automatisch herunter lädt
• Windows Updates
  • Windows XP: Start --> Systemsteuerung --> Doppelklick auf Automatische Updates
  • Windows Vista / 7: Start --> Systemsteuerung --> System und Sicherheit --> Automatische Updates aktivieren oder deaktivieren
• Gehe sicher das die automatischen Updates aktiviert sind.
• Software Updates
  Installierte Software kann ebenfalls Sicherheitslücken haben, welche Malware nutzen kann, um dein System zu infizieren.
  Um deine Installierte Software up to date zu halten, empfehle ich dir Secunia Online Software.

Besonders Java erfährt zur Zeit regelmäßig sicherheitsrelevante Updates

Ältere Versionen enthalten Sicherheitslücken, die von Malware missbraucht werden können.

• Downloade dir bitte die neueste Java-Version von hier
• Speichere die jxpiinstall.exe
• Schließe alle laufenden Programme. Speziell deinen Browser.
• Starte die jxpiinstall.exe. Diese wird den Installer für die neueste Java Version ( Java 8 Update 31 ) herunter laden.
• Entferne den Haken bei "Installieren Sie die Ask-Toolbar ..." während der Installation.
• Wenn die Installation beendet wurde
  Start --> Systemsteuerung --> Programme und deinstalliere alle älteren Java Versionen.
• Starte deinen Rechner neu sobald alle älteren Versionen deinstalliert wurden.

Nach dem Neustart

• Öffne erneut die Systemsteuerung --> Programme und klicke auf das Java Symbol.
• Im Reiter Allgemein, klicke unter Temporäre Internetdateien auf Einstellungen.
• Klicke auf Dateien löschen....
• Gehe sicher das überall ein Haken gesetzt ist und klicke OK.
• Klicke erneut OK.

schneller Plugin-Test: PluginCheck

Antivirensoftware

Anti- Viren Software

• Gehe sicher immer eine Anti Viren Software installiert zu haben und das diese auch up to date ist. Es ist nämlich nutzlos wenn diese out of date sind.

Zusätzlicher Schutz

• MalwareBytes Anti Malware
  Dies ist eines der besten Anti-Malware Tools auf dem Markt. Es ist ein On- Demond Scan Tool welches viele aktuelle Malware erkennt und auch entfernt.
  Update das Tool und lass es einmal in der Woche laufen. Die Kaufversion biete zudem noch einen Hintergrundwächter.
  Ein Tutorial zur Verwendung findest Du hier.
• WinPatrol
  Diese Software macht einen Snapshot deines Systems und warnt dich vor eventuellen Änderungen. Downloade dir die Freeware Version von hier.

Sicheres Browsen

• SpywareBlaster
  Eine kurze Einführung findest du Hier
• MVPs hosts file
  Ein Tutorial findest Du hier. Leider habe ich bis jetzt kein deutschsprachiges gefunden.
• WOT (Web of trust)
  Dieses AddOn warnt Dich bevor Du eine als schädlich gemeldete Seite besuchst.

alternatives Browsen

Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.

• Opera
• Mozilla Firefox.
  • Hinweis: Für diesen Browser habe ich hier ein paar nützliche Add Ons
  • NoScript
    Dieses AddOn blockt JavaScript, Java and Flash und andere Plugins. Sie werden nur dann ausgeführt wenn Du es bestätigst.
    
  • AdblockPlus
    Dieses AddOn blockt die meisten Werbung von selbst. Ein Rechtsklick auf den Banner um diesen zu AdBlockPlus hinzu zu fügen reicht und dieser wird nicht mehr geladen.
    Es spart ausserdem Downloadkapazität.

Performance
Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC
Halte dich fern von jedlichen Registry Cleanern.
Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links
Miekemoes Blogspot ( MVP )
Bill Castner ( MVP )

Don'ts

• Klicke nicht auf alles nur weil es Dich dazu auffordert und schön bunt ist.
• verwende keine peer to peer oder Filesharing Software (Emule, uTorrent,..)
• Lass die Finger von Cracks, Keygens, Serials oder anderer illegaler Software.
• Öffne keine Anhänge von Dir nicht bekannten Emails. Achte vor allem auf die Dateiendung wie zb deinFoto.jpg.exe

Nun bleibt mir nur noch dir viel Spass beim sicheren Surfen zu wünschen.

Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.


Wenn du möchtest, kannst du das Trojaner Board Forum mit einer kleinen Spende unterstützen.