Zurück   Trojaner-Board > Malware entfernen > Plagegeister aller Art und deren Bekämpfung
Firefox öffnet selbstständig Internetseiten

Firefox öffnet selbstständig Internetseiten


Plagegeister aller Art und deren Bekämpfung: Firefox öffnet selbstständig Internetseiten

Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen.

Antwort
Alt 02.03.2016, 06:47   #1
paeckchen1
 
Firefox öffnet selbstständig Internetseiten - Standard

Firefox öffnet selbstständig Internetseiten


Hallo Helfer,

Firefox öffnet ständig neue Tabs. Wenn ich eine bestimmte Seite suche und anschließend anklicke öffnet sie sich kurz, wird dann abgebrochen und eine ganz andere Seite erscheint. Ausserdem habe ich immer häufiger ein Kästchen mit Werbeangeboten von AliExpress.
Beides nervt ungemein.
Ich habe hier im Forum bereits etwas gelesen und das Farbar Recovery Scan Tool installiert und laufen lassen. Leider kann ich mit den gefunden Informationen in "First Editor" und "Addition Editor" überhaupt nichts anfangen. Könnt Ihr mir bitte weiterhelfen?
Anhang 77723

Anhang 77724

Anhang 77725

Ganz lieben Dank und ich hoffe, alles richtig beachtet zu haben.

Viele Grüße

Alt 02.03.2016, 09:32   #2
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
Firefox öffnet selbstständig Internetseiten - Standard

Firefox öffnet selbstständig Internetseiten


Hi und

Logs bitte nicht anhängen, notfalls splitten und über mehrere Postings verteilt posten

Lesestoff:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR oder 7Z-Archiv zu packen erschwert mir massiv die Arbeit.
Auch wenn die Logs für einen Beitrag zu groß sein sollten, bitte ich dich die Logs direkt und notfalls über mehrere Beiträge verteilt zu posten.
Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
  • Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
  • Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
  • Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
  • Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.
__________________

__________________
Alt 02.03.2016, 10:10   #3
paeckchen1
 
Firefox öffnet selbstständig Internetseiten - Standard

Firefox öffnet selbstständig Internetseiten


Hallo cosinus,

vielen Dank, dass Du Dich meines Problems annimmst...
Die Datei hat zuviele Zeichen, daher muss ich sie in mehreren Teilen schicken.
Hoffe, das klappt nun:

Code:
ATTFilter
Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x86) Version:01-03-2016
durchgeführt von Tina Thiel (Administrator) auf TT-KELLER (02-03-2016 06:22:10)
Gestartet von C:\Users\Tina Thiel\Downloads
Geladene Profile: Tina Thiel (Verfügbare Profile: Tina Thiel)
Platform: Microsoft Windows 7 Professional  Service Pack 1 (X86) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: FF)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(Adobe Systems Incorporated) C:\Program Files\Adobe\Adobe Version Cue CS2\bin\VersionCueCS2.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(devolo AG) C:\Program Files\devolo\dlan\devolonetsvc.exe
(F-Secure Corporation) C:\Program Files\F-Secure\Internet Security\fshoster32.exe
(F-Secure Corporation) C:\Program Files\F-Secure\Internet Security\apps\CCF_Reputation\fsorsp.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(Dropbox, Inc.) C:\Program Files\Dropbox\Client\Dropbox.exe
(Adobe Sytems Incorporated) C:\Program Files\Adobe\Adobe Version Cue CS2\ControlPanel\VersionCueCS2Tray.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Audible, Inc.) C:\Program Files\Audible\Bin\AudibleDownloadHelper.exe
(F-Secure Corporation) C:\Program Files\F-Secure\Internet Security\fshoster32.exe
(F-Secure Corporation) C:\Program Files\F-Secure\Internet Security\apps\ComputerSecurity\Anti-Virus\fsgk32.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(pdfforge GmbH) C:\Program Files\PDF Architect 4\creator-ws.exe
(© pdfforge GmbH.) C:\ProgramData\pdfforge\PDF Architect 4 Manager\PDF Architect 4\Architect Manager.exe
() C:\Program Files\Adobe\Adobe Version Cue CS2\data\database\bin\mysqld-nt.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(F-Secure Corporation) C:\Program Files\F-Secure\Internet Security\apps\ComputerSecurity\Common\FSMA32.EXE
(F-Secure Corporation) C:\Program Files\F-Secure\Internet Security\apps\ComputerSecurity\Anti-Virus\fssm32.exe
(Microsoft Corporation) C:\Windows\System32\taskmgr.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(pdfforge GmbH) C:\Program Files\PDF Architect 4\architect.exe
(pdfforge GmbH) C:\Program Files\PDF Architect 4\ws.exe
() C:\Program Files\Silhouette America\Silhouette Studio\Silhouette Studio.exe
() C:\Program Files\Silhouette America\Silhouette Studio\Resources\Resources\SPEC_ANY\AH\aspex_helper.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(TeamViewer GmbH) C:\Program Files\TeamViewer\TeamViewer_Service.exe
(TeamViewer GmbH) C:\Program Files\TeamViewer\TeamViewer.exe
(TeamViewer GmbH) C:\Program Files\TeamViewer\tv_w32.exe


==================== Registry (Nicht auf der Ausnahmeliste) ===========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [F-Secure GUI (666)] => C:\Program Files\F-Secure\Internet Security\FsGuiStarter.exe [101928 2015-11-10] (F-Secure Corporation)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [157456 2015-12-17] (Apple Inc.)
HKLM\...\Run: [Dropbox] => C:\Program Files\Dropbox\Client\Dropbox.exe [25122080 2016-02-16] (Dropbox, Inc.)
HKLM\...\Run: [Adobe Version Cue CS2] => c:\Program Files\Adobe\Adobe Version Cue CS2\ControlPanel\VersionCueCS2Tray.exe [856064 2005-04-06] (Adobe Sytems Incorporated)
HKLM\...\Run: [QuickTime Task] => C:\Program Files\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)
HKU\S-1-5-21-2503069186-1068286192-3510494515-1000\...\Run: [Chromium] => "c:\users\tina thiel\appdata\local\chromium\application\chrome.exe" --auto-launch-at-startup --profile-directory="Default" --restore-last-session
HKU\S-1-5-18\...\RunOnce: [SPReview] => C:\Windows\System32\SPReview\SPReview.exe [280576 2016-02-07] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files\Dropbox\Client\DropboxExt.33.dll [2016-02-16] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files\Dropbox\Client\DropboxExt.33.dll [2016-02-16] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt3] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files\Dropbox\Client\DropboxExt.33.dll [2016-02-16] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt4] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files\Dropbox\Client\DropboxExt.33.dll [2016-02-16] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt5] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files\Dropbox\Client\DropboxExt.33.dll [2016-02-16] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt6] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files\Dropbox\Client\DropboxExt.33.dll [2016-02-16] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt7] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files\Dropbox\Client\DropboxExt.33.dll [2016-02-16] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt8] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files\Dropbox\Client\DropboxExt.33.dll [2016-02-16] (Dropbox, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma.lnk [2016-02-05]
ShortcutTarget: Adobe Gamma.lnk -> C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Audible Download Manager.lnk [2016-02-10]
ShortcutTarget: Audible Download Manager.lnk -> C:\Program Files\Audible\Bin\AudibleDownloadHelper.exe (Audible, Inc.)
CHR HKLM\SOFTWARE\Policies\Google: Beschränkung <======= ACHTUNG

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Winsock: Catalog5 05 C:\Program Files\Bonjour\mdnsNSP.dll [122128 2015-08-12] (Apple Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{444A56ED-7BD0-40EE-AB4E-4D3876231813}: [DhcpNameServer] 192.168.178.1
ManualProxies: 0hxxp://stop-block.org/wpad.dat?8641805a75cd62e65ef7e9f01c473ec15887859

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_popjar_16_07_ssg08&param1=1&param2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1QzutDtDtByEzztC0E0BtDtDtD0DtAzz0DyCtN0D0Tzu0StCyDtDyCtN1L2XzutAtFtCzztFtCtFtDtN1L1Czu1StN1L1G1B1V1N2Y1L1Qzu2SyDzyyD0B0FyDtBzytGtCtByDtBtGtAzy0C0DtGtC0EtDzztGtC0D0E0DtBtCtDtAtD0B0AtA2QtN1M1F1B2Z1V1N2Y1L1Qzu2StCtD0C0BtD0AtAtDtGyB0FyB0CtGyEyCtD0EtG0B0C0C0FtG0FzytB0Ezy0ByDtD0B0B0D0F2QtN0A0LzuyE%26cr%3D1341331592%26a%3Dwbf_popjar_16_07_ssg08%26os_ver%3D6.1%26os%3DWindows%2B7%2BProfessional
HKU\S-1-5-21-2503069186-1068286192-3510494515-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_popjar_16_07_ssg08&param1=1&param2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1QzutDtDtByEzztC0E0BtDtDtD0DtAzz0DyCtN0D0Tzu0StCyDtDyCtN1L2XzutAtFtCzztFtCtFtDtN1L1Czu1StN1L1G1B1V1N2Y1L1Qzu2SyDzyyD0B0FyDtBzytGtCtByDtBtGtAzy0C0DtGtC0EtDzztGtC0D0E0DtBtCtDtAtD0B0AtA2QtN1M1F1B2Z1V1N2Y1L1Qzu2StCtD0C0BtD0AtAtDtGyB0FyB0CtGyEyCtD0EtG0B0C0C0FtG0FzytB0Ezy0ByDtD0B0B0D0F2QtN0A0LzuyE%26cr%3D1341331592%26a%3Dwbf_popjar_16_07_ssg08%26os_ver%3D6.1%26os%3DWindows%2B7%2BProfessional
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://de.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_popjar_16_07_ssg08&param1=1&param2=f%3D4%26b%3DIE%26cc%3Dde%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1QzutDtDtByEzztC0E0BtDtDtD0DtAzz0DyCtN0D0Tzu0StCyDtDyCtN1L2XzutAtFtCzztFtCtFtDtN1L1Czu1StN1L1G1B1V1N2Y1L1Qzu2SyDzyyD0B0FyDtBzytGtCtByDtBtGtAzy0C0DtGtC0EtDzztGtC0D0E0DtBtCtDtAtD0B0AtA2QtN1M1F1B2Z1V1N2Y1L1Qzu2StCtD0C0BtD0AtAtDtGyB0FyB0CtGyEyCtD0EtG0B0C0C0FtG0FzytB0Ezy0ByDtD0B0B0D0F2QtN0A0LzuyE%26cr%3D1341331592%26a%3Dwbf_popjar_16_07_ssg08%26os_ver%3D6.1%26os%3DWindows%2B7%2BProfessional&p={searchTerms}
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://de.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_popjar_16_07_ssg08&param1=1&param2=f%3D4%26b%3DIE%26cc%3Dde%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1QzutDtDtByEzztC0E0BtDtDtD0DtAzz0DyCtN0D0Tzu0StCyDtDyCtN1L2XzutAtFtCzztFtCtFtDtN1L1Czu1StN1L1G1B1V1N2Y1L1Qzu2SyDzyyD0B0FyDtBzytGtCtByDtBtGtAzy0C0DtGtC0EtDzztGtC0D0E0DtBtCtDtAtD0B0AtA2QtN1M1F1B2Z1V1N2Y1L1Qzu2StCtD0C0BtD0AtAtDtGyB0FyB0CtGyEyCtD0EtG0B0C0C0FtG0FzytB0Ezy0ByDtD0B0B0D0F2QtN0A0LzuyE%26cr%3D1341331592%26a%3Dwbf_popjar_16_07_ssg08%26os_ver%3D6.1%26os%3DWindows%2B7%2BProfessional&p={searchTerms}
SearchScopes: HKU\S-1-5-21-2503069186-1068286192-3510494515-1000 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://de.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_popjar_16_07_ssg08&param1=1&param2=f%3D4%26b%3DIE%26cc%3Dde%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1QzutDtDtByEzztC0E0BtDtDtD0DtAzz0DyCtN0D0Tzu0StCyDtDyCtN1L2XzutAtFtCzztFtCtFtDtN1L1Czu1StN1L1G1B1V1N2Y1L1Qzu2SyDzyyD0B0FyDtBzytGtCtByDtBtGtAzy0C0DtGtC0EtDzztGtC0D0E0DtBtCtDtAtD0B0AtA2QtN1M1F1B2Z1V1N2Y1L1Qzu2StCtD0C0BtD0AtAtDtGyB0FyB0CtGyEyCtD0EtG0B0C0C0FtG0FzytB0Ezy0ByDtD0B0B0D0F2QtN0A0LzuyE%26cr%3D1341331592%26a%3Dwbf_popjar_16_07_ssg08%26os_ver%3D6.1%26os%3DWindows%2B7%2BProfessional&p={searchTerms}
SearchScopes: HKU\S-1-5-21-2503069186-1068286192-3510494515-1000 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://de.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_popjar_16_07_ssg08&param1=1&param2=f%3D4%26b%3DIE%26cc%3Dde%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1QzutDtDtByEzztC0E0BtDtDtD0DtAzz0DyCtN0D0Tzu0StCyDtDyCtN1L2XzutAtFtCzztFtCtFtDtN1L1Czu1StN1L1G1B1V1N2Y1L1Qzu2SyDzyyD0B0FyDtBzytGtCtByDtBtGtAzy0C0DtGtC0EtDzztGtC0D0E0DtBtCtDtAtD0B0AtA2QtN1M1F1B2Z1V1N2Y1L1Qzu2StCtD0C0BtD0AtAtDtGyB0FyB0CtGyEyCtD0EtG0B0C0C0FtG0FzytB0Ezy0ByDtD0B0B0D0F2QtN0A0LzuyE%26cr%3D1341331592%26a%3Dwbf_popjar_16_07_ssg08%26os_ver%3D6.1%26os%3DWindows%2B7%2BProfessional&p={searchTerms}
BHO: PDF Architect 4 Helper -> {38279E1A-7019-40C1-B579-E99DFB3312E8} -> C:\Program Files\PDF Architect 4\creator-ie-helper.dll [2016-01-15] (pdfforge GmbH)
BHO: Browsing Protection by F-Secure -> {45BBE08D-81C5-4A67-AF20-B2A077C67747} -> C:\Program Files\F-Secure\Internet Security\apps\CCF_Scanning\bin\browser\install\fs_ie_https\fs_ie_https.dll [2016-02-03] (F-Secure Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
Toolbar: HKLM - PDF Architect 4 Toolbar - {23FD9C33-A9E1-48A1-8404-E5925CF1C8E1} - C:\Program Files\PDF Architect 4\creator-ie-plugin.dll [2016-01-15] (pdfforge GmbH)
StartMenuInternet: IEXPLORE.EXE - iexplore.exe

FireFox:
========
FF ProfilePath: C:\Users\Tina Thiel\AppData\Roaming\Mozilla\Firefox\Profiles\047uw4lu.default
FF NewTab: about:newtab
FF SelectedSearchEngine: Search Provided by Yahoo
FF Homepage: www.google.de
FF Plugin: @Apple.com/iTunes,version=1.0 -> C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll [2015-10-14] ()
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin: PDF Architect 4 -> C:\Program Files\PDF Architect 4\np-previewer.dll [2016-01-15] (pdfforge GmbH)
FF HKLM\...\Firefox\Extensions: [ols@f-secure.com] - C:\Program Files\F-Secure\Internet Security\apps\CCF_Scanning\bin\browser\install\fs_firefox_https\fs_firefox_https.xpi
FF Extension: Browsing Protection by F-Secure - C:\Program Files\F-Secure\Internet Security\apps\CCF_Scanning\bin\browser\install\fs_firefox_https\fs_firefox_https.xpi [2016-02-03]
FF HKLM\...\Firefox\Extensions: [pdf_architect_4_conv@pdfarchitect.org] - C:\Program Files\PDF Architect 4\resources\pdfarchitect4firefoxextension
FF Extension: PDF Architect 4 Creator - C:\Program Files\PDF Architect 4\resources\pdfarchitect4firefoxextension [2016-02-05] [ist nicht signiert]
FF ExtraCheck: C:\Program Files\mozilla firefox\defaults\pref\itms.js [2015-11-16]

Chrome: 
=======
CHR HKLM\...\Chrome\Extension: [jmjjnhpacphpjmnnlnccpfmhkcloaade] - C:/Program Files/F-Secure/Internet Security/apps/CCF_Scanning/bin/browser/install/fs_chrome_https/fs_chrome_https.crx [2016-02-03]

==================== Dienste (Nicht auf der Ausnahmeliste) ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

S3 Adobe LM Service; C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [72704 2016-02-05] (Adobe Systems) [Datei ist nicht signiert]
R2 Adobe Version Cue CS2; c:\Program Files\Adobe\Adobe Version Cue CS2\bin\VersionCueCS2.exe [163840 2005-04-06] (Adobe Systems Incorporated) [Datei ist nicht signiert]
S2 dbupdate; C:\Program Files\Dropbox\Update\DropboxUpdate.exe [143144 2016-02-05] (Dropbox, Inc.)
S3 dbupdatem; C:\Program Files\Dropbox\Update\DropboxUpdate.exe [143144 2016-02-05] (Dropbox, Inc.)
R2 DevoloNetworkService; C:\Program Files\devolo\dlan\devolonetsvc.exe [3755976 2015-07-01] (devolo AG)
R2 fshoster; C:\Program Files\F-Secure\Internet Security\fshoster32.exe [184360 2015-11-10] (F-Secure Corporation)
R3 FSMA; C:\Program Files\F-Secure\Internet Security\apps\ComputerSecurity\Common\FSMA32.EXE [216104 2015-11-24] (F-Secure Corporation)
R2 FSORSPClient; C:\Program Files\F-Secure\Internet Security\apps\CCF_Reputation\fsorsp.exe [60456 2016-02-03] (F-Secure Corporation)
R3 PDF Architect 4; C:\Program Files\PDF Architect 4\ws.exe [2220768 2016-01-15] (pdfforge GmbH)
S3 PDF Architect 4 CrashHandler; C:\Program Files\PDF Architect 4\crash-handler-ws.exe [970464 2016-01-15] (pdfforge GmbH)
R2 PDF Architect 4 Creator; C:\Program Files\PDF Architect 4\creator-ws.exe [772832 2016-01-15] (pdfforge GmbH)
R2 PDF Architect 4 Manager; C:\ProgramData\pdfforge\PDF Architect 4 Manager\PDF Architect 4\Architect Manager.exe [959248 2015-10-05] (© pdfforge GmbH.)
R2 TeamViewer; C:\Program Files\TeamViewer\TeamViewer_Service.exe [6940944 2016-02-16] (TeamViewer GmbH)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation)

===================== Treiber (Nicht auf der Ausnahmeliste) ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R3 F-Secure Gatekeeper; C:\Program Files\F-Secure\Internet Security\apps\ComputerSecurity\Anti-Virus\minifilter\fsgk.sys [160832 2016-02-03] (F-Secure Corporation)
R1 F-Secure HIPS; C:\Program Files\F-Secure\Internet Security\apps\ComputerSecurity\HIPS\drivers\fshs.sys [95296 2016-02-11] (F-Secure Corporation)
R0 fsbts; C:\Windows\System32\Drivers\fsbts.sys [63680 2015-11-05] ()
R3 fsni; C:\Program Files\F-Secure\Internet Security\apps\CCF_Scanning\bin\fsni32.sys [77864 2016-02-03] (F-Secure Corporation)
R2 NPF_devolo; C:\Windows\system32\drivers\npf_devolo.sys [35840 2013-03-04] (CACE Technologies) [Datei ist nicht signiert]
S3 DrvAgent32; \??\C:\Windows\system32\Drivers\DrvAgent32.sys [X]

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2016-03-02 06:22 - 2016-03-02 06:22 - 00016571 _____ C:\Users\Tina Thiel\Downloads\FRST.txt
2016-03-02 06:22 - 2016-03-02 06:22 - 00000000 ____D C:\FRST
2016-03-02 06:21 - 2016-03-02 06:21 - 01722368 _____ (Farbar) C:\Users\Tina Thiel\Downloads\FRST.exe
2016-03-01 12:03 - 2016-03-01 12:03 - 00000000 ____D C:\Users\Tina Thiel\AppData\Local\TeamViewer
2016-03-01 11:55 - 2016-03-01 12:06 - 00000000 ____D C:\Users\Tina Thiel\AppData\Roaming\TeamViewer
2016-03-01 11:55 - 2016-03-01 11:56 - 00000000 ____D C:\Program Files\TeamViewer
2016-03-01 11:55 - 2016-03-01 11:55 - 00001005 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 11.lnk
2016-03-01 11:55 - 2016-03-01 11:55 - 00000993 _____ C:\Users\Public\Desktop\TeamViewer 11.lnk
2016-03-01 11:54 - 2016-03-01 11:54 - 09784128 _____ (TeamViewer GmbH) C:\Users\Tina Thiel\Downloads\TeamViewer_Setup_de-jfa.exe
2016-02-27 05:50 - 2016-02-27 05:50 - 01511936 _____ C:\Users\Tina Thiel\Downloads\adwcleaner_5.036.exe
2016-02-21 06:05 - 2016-02-21 06:05 - 00000000 ____D C:\Users\Tina Thiel\AppData\Roaming\PDF Producer
2016-02-21 05:46 - 2016-02-21 05:46 - 00000000 ____D C:\Users\Tina Thiel\AppData\Local\PDFCreator
2016-02-18 06:04 - 2016-02-18 06:04 - 01511936 _____ C:\Users\Tina Thiel\Downloads\adwcleaner_5.034.exe
2016-02-17 16:44 - 2016-02-17 16:44 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox
2016-02-15 12:54 - 2016-02-15 12:54 - 00000000 ____D C:\Users\Tina Thiel\AppData\Roaming\Baidu
2016-02-15 12:54 - 2016-02-15 12:54 - 00000000 ____D C:\ProgramData\Baidu
2016-02-15 12:53 - 2016-02-15 12:53 - 37328992 _____ (Oracle Corporation) C:\Users\Tina Thiel\Downloads\JavaSetup [1].exe
2016-02-15 12:53 - 2016-02-15 12:53 - 00000392 __RSH C:\ProgramData\ntuser.pol
2016-02-15 12:53 - 2016-02-15 12:53 - 00000000 ____D C:\Users\Tina Thiel\AppData\Local\MiniService
2016-02-11 10:25 - 2012-02-11 06:37 - 00317440 _____ (Microsoft Corporation) C:\Windows\system32\spoolsv.exe
2016-02-11 10:25 - 2011-03-11 06:39 - 00143744 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvstor.sys
2016-02-11 10:25 - 2011-03-11 06:39 - 00117120 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvraid.sys
2016-02-11 10:25 - 2011-03-11 06:38 - 00332160 _____ (Intel Corporation) C:\Windows\system32\Drivers\iaStorV.sys
2016-02-11 10:25 - 2011-03-11 06:38 - 00080256 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdsata.sys
2016-02-11 10:25 - 2011-03-11 06:38 - 00022400 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdxata.sys
2016-02-11 10:25 - 2011-03-11 06:33 - 01699328 _____ (Microsoft Corporation) C:\Windows\system32\esent.dll
2016-02-11 10:25 - 2011-03-11 06:31 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\fsutil.exe
2016-02-11 10:25 - 2011-03-11 05:01 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBSTOR.SYS
2016-02-11 04:00 - 2016-02-11 04:00 - 00000000 ___SD C:\Windows\system32\CompatTel
2016-02-11 04:00 - 2016-02-11 04:00 - 00000000 ____D C:\Windows\system32\appraiser
2016-02-11 03:21 - 2015-01-09 00:44 - 00419936 _____ C:\Windows\system32\locale.nls
2016-02-10 13:33 - 2016-01-16 19:42 - 00022464 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2016-02-10 13:33 - 2016-01-16 19:34 - 00949760 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2016-02-10 13:33 - 2016-01-11 15:07 - 01198080 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2016-02-10 13:33 - 2016-01-11 15:07 - 00591360 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2016-02-10 13:33 - 2016-01-11 15:07 - 00544768 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2016-02-10 13:33 - 2016-01-11 15:07 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2016-02-10 13:33 - 2016-01-11 15:07 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2016-02-10 13:33 - 2015-11-16 21:12 - 00176128 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2016-02-10 13:33 - 2015-06-03 21:17 - 01167520 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe
2016-02-10 13:32 - 2016-01-22 07:13 - 03993536 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe
2016-02-10 13:32 - 2016-01-22 07:05 - 12877824 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2016-02-10 13:32 - 2016-01-22 07:00 - 01498624 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll
2016-02-10 13:32 - 2016-01-22 06:59 - 01805824 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2016-02-10 13:32 - 2016-01-22 06:12 - 02973184 _____ (Microsoft Corporation) C:\Windows\explorer.exe
2016-02-10 13:32 - 2016-01-16 19:36 - 01413632 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
2016-02-10 13:32 - 2016-01-07 18:47 - 02386944 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2016-02-10 13:32 - 2016-01-07 18:35 - 00116224 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys
2016-02-10 13:32 - 2016-01-06 19:41 - 00216064 _____ (Microsoft Corporation) C:\Windows\system32\InkEd.dll
2016-02-10 13:32 - 2016-01-06 18:56 - 00019968 _____ (Microsoft Corporation) C:\Windows\system32\jnwmon.dll
2016-02-10 13:31 - 2016-02-06 11:01 - 20366848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2016-02-10 13:31 - 2016-02-06 10:54 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2016-02-10 13:31 - 2016-02-06 10:43 - 02280448 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2016-02-10 13:31 - 2016-02-06 10:38 - 00476160 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2016-02-10 13:31 - 2016-02-06 10:16 - 12857856 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2016-02-10 13:31 - 2016-02-06 09:54 - 01312256 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2016-02-10 13:31 - 2016-01-22 21:10 - 00341200 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2016-02-10 13:31 - 2016-01-22 07:14 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2016-02-10 13:31 - 2016-01-22 07:13 - 03938752 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2016-02-10 13:31 - 2016-01-22 07:13 - 00138176 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2016-02-10 13:31 - 2016-01-22 07:13 - 00067520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2016-02-10 13:31 - 2016-01-22 07:09 - 01310232 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2016-02-10 13:31 - 2016-01-22 07:06 - 00400896 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2016-02-10 13:31 - 2016-01-22 07:06 - 00171520 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2016-02-10 13:31 - 2016-01-22 07:06 - 00169984 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2016-02-10 13:31 - 2016-01-22 07:06 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2016-02-10 13:31 - 2016-01-22 07:06 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2016-02-10 13:31 - 2016-01-22 07:06 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2016-02-10 13:31 - 2016-01-22 07:05 - 00654336 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2016-02-10 13:31 - 2016-01-22 07:05 - 00251392 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2016-02-10 13:31 - 2016-01-22 07:05 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2016-02-10 13:31 - 2016-01-22 07:04 - 00642048 _____ (Microsoft Corporation) C:\Windows\system32\CPFilters.dll
2016-02-10 13:31 - 2016-01-22 07:04 - 00535040 _____ (Microsoft Corporation) C:\Windows\system32\EncDec.dll
2016-02-10 13:31 - 2016-01-22 07:02 - 01060864 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2016-02-10 13:31 - 2016-01-22 07:02 - 00872448 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2016-02-10 13:31 - 2016-01-22 07:02 - 00553472 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2016-02-10 13:31 - 2016-01-22 07:02 - 00496640 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2016-02-10 13:31 - 2016-01-22 07:02 - 00293888 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2016-02-10 13:31 - 2016-01-22 07:02 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2016-02-10 13:31 - 2016-01-22 07:02 - 00223232 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2016-02-10 13:31 - 2016-01-22 07:02 - 00176128 _____ (Microsoft Corporation) C:\Windows\system32\msorcl32.dll
2016-02-10 13:31 - 2016-01-22 07:02 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2016-02-10 13:31 - 2016-01-22 07:02 - 00114176 _____ (Microsoft Corporation) C:\Windows\system32\mtxoci.dll
2016-02-10 13:31 - 2016-01-22 07:02 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2016-02-10 13:31 - 2016-01-22 07:02 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2016-02-10 13:31 - 2016-01-22 07:01 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2016-02-10 13:31 - 2016-01-22 07:01 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2016-02-10 13:31 - 2016-01-22 07:00 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2016-02-10 13:31 - 2016-01-22 06:59 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2016-02-10 13:31 - 2016-01-22 06:59 - 00642560 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2016-02-10 13:31 - 2016-01-22 06:59 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2016-02-10 13:31 - 2016-01-22 06:59 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2016-02-10 13:31 - 2016-01-22 06:59 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2016-02-10 13:31 - 2016-01-22 06:59 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2016-02-10 13:31 - 2016-01-22 06:59 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2016-02-10 13:31 - 2016-01-22 06:59 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2016-02-10 13:31 - 2016-01-22 06:59 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2016-02-10 13:31 - 2016-01-22 06:59 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2016-02-10 13:31 - 2016-01-22 06:59 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2016-02-10 13:31 - 2016-01-22 06:59 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2016-02-10 13:31 - 2016-01-22 06:59 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2016-02-10 13:31 - 2016-01-22 06:59 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2016-02-10 13:31 - 2016-01-22 06:59 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2016-02-10 13:31 - 2016-01-22 06:59 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2016-02-10 13:31 - 2016-01-22 06:59 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2016-02-10 13:31 - 2016-01-22 06:59 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2016-02-10 13:31 - 2016-01-22 06:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2016-02-10 13:31 - 2016-01-22 06:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-02-10 13:31 - 2016-01-22 06:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2016-02-10 13:31 - 2016-01-22 06:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2016-02-10 13:31 - 2016-01-22 06:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2016-02-10 13:31 - 2016-01-22 06:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2016-02-10 13:31 - 2016-01-22 06:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2016-02-10 13:31 - 2016-01-22 06:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2016-02-10 13:31 - 2016-01-22 06:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2016-02-10 13:31 - 2016-01-22 06:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2016-02-10 13:31 - 2016-01-22 06:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2016-02-10 13:31 - 2016-01-22 06:55 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2016-02-10 13:31 - 2016-01-22 06:55 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2016-02-10 13:31 - 2016-01-22 06:52 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2016-02-10 13:31 - 2016-01-22 06:51 - 00663552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2016-02-10 13:31 - 2016-01-22 06:51 - 00620032 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2016-02-10 13:31 - 2016-01-22 06:51 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2016-02-10 13:31 - 2016-01-22 06:46 - 00667648 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2016-02-10 13:31 - 2016-01-22 06:43 - 00416256 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2016-02-10 13:31 - 2016-01-22 06:39 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2016-02-10 13:31 - 2016-01-22 06:38 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2016-02-10 13:31 - 2016-01-22 06:37 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2016-02-10 13:31 - 2016-01-22 06:35 - 04611072 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2016-02-10 13:31 - 2016-01-22 06:35 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2016-02-10 13:31 - 2016-01-22 06:34 - 00279040 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2016-02-10 13:31 - 2016-01-22 06:33 - 00130048 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2016-02-10 13:31 - 2016-01-22 06:27 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2016-02-10 13:31 - 2016-01-22 06:25 - 00687104 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2016-02-10 13:31 - 2016-01-22 06:25 - 00684032 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2016-02-10 13:31 - 2016-01-22 06:24 - 02050560 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2016-02-10 13:31 - 2016-01-22 06:24 - 01155072 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2016-02-10 13:31 - 2016-01-22 06:07 - 02120704 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2016-02-10 13:31 - 2016-01-22 06:07 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2016-02-10 13:31 - 2016-01-22 06:02 - 00710144 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2016-02-10 13:31 - 2016-01-22 06:01 - 00271360 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2016-02-10 13:31 - 2016-01-22 06:00 - 00262656 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2016-02-10 13:31 - 2016-01-22 05:53 - 00225792 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2016-02-10 13:31 - 2016-01-22 05:53 - 00124416 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2016-02-10 13:31 - 2016-01-22 05:53 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2016-02-10 13:31 - 2016-01-22 05:51 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2016-02-10 13:31 - 2016-01-22 05:51 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2016-02-10 13:31 - 2016-01-22 05:51 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2016-02-10 13:31 - 2016-01-22 05:51 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2016-02-10 13:31 - 2016-01-22 05:51 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2016-02-10 13:31 - 2016-01-22 05:51 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2016-02-10 13:31 - 2016-01-22 05:51 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2016-02-10 13:31 - 2016-01-22 05:51 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2016-02-10 13:31 - 2015-09-23 14:09 - 00371920 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2016-02-10 13:31 - 2015-09-23 14:09 - 00251000 _____ (Microsoft Corporation) C:\Windows\system32\bcryptprimitives.dll
2016-02-10 13:30 - 2016-01-11 19:47 - 02956288 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2016-02-10 13:30 - 2016-01-11 19:47 - 00174080 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2016-02-10 13:30 - 2016-01-11 19:35 - 00073728 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2016-02-10 13:30 - 2016-01-11 19:17 - 02062848 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2016-02-10 13:30 - 2016-01-11 19:14 - 00573440 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2016-02-10 13:30 - 2016-01-11 19:14 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2016-02-10 13:30 - 2016-01-11 19:14 - 00093696 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2016-02-10 13:30 - 2016-01-11 19:14 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2016-02-10 13:30 - 2016-01-11 19:14 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2016-02-10 13:30 - 2016-01-11 19:14 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2016-02-10 13:30 - 2016-01-11 19:14 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2016-02-10 13:30 - 2014-07-09 02:29 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDYAK.DLL
2016-02-10 13:30 - 2014-07-09 02:29 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDTAT.DLL
2016-02-10 13:30 - 2014-07-09 02:29 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU1.DLL
2016-02-10 13:30 - 2014-07-09 02:29 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDBASH.DLL
2016-02-10 13:30 - 2014-07-09 02:29 - 00005632 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU.DLL
2016-02-10 13:30 - 2013-11-26 09:16 - 03419136 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2016-02-10 12:31 - 2016-02-10 12:31 - 00000000 ____D C:\Users\Tina Thiel\Documents\Audible
2016-02-10 12:31 - 2016-02-10 12:31 - 00000000 ____D C:\Users\Public\Documents\Audible
2016-02-10 12:31 - 2016-02-10 12:31 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AudibleManager
2016-02-10 12:31 - 2016-02-10 12:31 - 00000000 ____D C:\Program Files\Audible
2016-02-10 12:26 - 2016-02-10 12:28 - 00000408 _____ C:\Users\Tina Thiel\Desktop\admhelper
2016-02-10 09:50 - 2016-02-10 09:50 - 00000000 ____D C:\Users\Tina Thiel\AppData\Local\GWX
2016-02-10 09:00 - 2016-02-10 09:00 - 00000000 ____D C:\Users\Tina Thiel\AppData\Roaming\Opera
2016-02-10 06:25 - 2015-11-10 19:39 - 01251328 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2016-02-10 06:25 - 2015-11-10 19:39 - 00909824 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2016-02-10 06:25 - 2015-11-10 19:39 - 00811520 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll
2016-02-10 06:25 - 2015-02-03 04:12 - 01230848 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2016-02-10 06:18 - 2015-07-30 18:57 - 01987584 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2016-02-10 06:17 - 2015-12-08 22:54 - 02285056 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2016-02-10 06:17 - 2015-02-04 03:54 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2016-02-10 04:43 - 2016-02-27 05:55 - 00000000 ____D C:\AdwCleaner
2016-02-10 04:37 - 2016-02-11 21:57 - 00000000 ____D C:\Windows\system32\MRT
2016-02-10 04:37 - 2016-02-11 21:55 - 144254680 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2016-02-10 04:22 - 2016-02-27 03:16 - 00000000 ___SD C:\Windows\system32\GWX
2016-02-09 22:07 - 2012-07-26 04:21 - 00196608 _____ (Microsoft Corporation) C:\Windows\system32\WUDFHost.exe
2016-02-09 22:07 - 2012-07-26 04:20 - 00613888 _____ (Microsoft Corporation) C:\Windows\system32\WUDFx.dll
2016-02-09 22:07 - 2012-07-26 04:20 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\WUDFPlatform.dll
2016-02-09 22:07 - 2012-07-26 04:20 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\WUDFSvc.dll
2016-02-09 22:07 - 2012-07-26 04:20 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\WUDFCoinstaller.dll
2016-02-09 22:07 - 2012-07-26 03:33 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFPf.sys
2016-02-09 22:07 - 2012-07-26 03:32 - 00155136 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFRd.sys
2016-02-09 22:07 - 2012-06-02 15:57 - 00000003 _____ C:\Windows\system32\Drivers\MsftWdf_User_01_11_00_Inbox_Critical.Wdf
2016-02-09 22:05 - 2014-06-30 23:14 - 00008856 _____ (Microsoft Corporation) C:\Windows\system32\icardres.dll
2016-02-09 22:05 - 2014-06-06 07:16 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe
2016-02-09 22:05 - 2014-03-09 22:47 - 00619672 _____ (Microsoft Corporation) C:\Windows\system32\icardagt.exe
2016-02-09 22:05 - 2014-03-09 22:47 - 00099480 _____ (Microsoft Corporation) C:\Windows\system32\infocardapi.dll
2016-02-09 22:05 - 2012-03-01 06:46 - 00019824 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fs_rec.sys
2016-02-09 22:05 - 2012-03-01 06:29 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\wmi.dll
2016-02-09 21:41 - 2016-02-09 21:41 - 00645120 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2016-02-09 21:41 - 2016-02-09 21:41 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2016-02-09 21:41 - 2016-02-09 21:41 - 00233472 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2016-02-09 21:41 - 2016-02-09 21:41 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2016-02-09 21:41 - 2016-02-09 21:41 - 00182272 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2016-02-09 21:41 - 2016-02-09 21:41 - 00151552 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2016-02-09 21:41 - 2016-02-09 21:41 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2016-02-09 21:41 - 2016-02-09 21:41 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2016-02-09 21:41 - 2016-02-09 21:41 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2016-02-09 21:41 - 2016-02-09 21:41 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2016-02-09 21:41 - 2016-02-09 21:41 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2016-02-09 21:41 - 2016-02-09 21:41 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2016-02-09 21:41 - 2016-02-09 21:41 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2016-02-09 21:41 - 2016-02-09 21:41 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2016-02-09 21:41 - 2016-02-09 21:41 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2016-02-09 21:41 - 2016-02-09 21:41 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2016-02-09 21:41 - 2016-02-09 21:41 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2016-02-09 21:41 - 2016-02-09 21:41 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2016-02-09 21:41 - 2016-02-09 21:41 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2016-02-09 21:41 - 2016-02-09 21:41 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2016-02-09 21:41 - 2016-02-09 21:41 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2016-02-09 21:40 - 2016-02-09 21:40 - 00231424 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll
2016-02-09 21:39 - 2016-02-09 21:39 - 00049152 _____ (Microsoft Corporation) C:\Windows\system32\taskhost.exe
2016-02-09 21:37 - 2016-02-09 21:37 - 01158144 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll
2016-02-09 21:37 - 2016-02-09 21:37 - 01080832 _____ (Microsoft Corporation) C:\Windows\system32\d3d10.dll
2016-02-09 21:37 - 2016-02-09 21:37 - 00604160 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll
2016-02-09 21:37 - 2016-02-09 21:37 - 00364544 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll
2016-02-09 21:37 - 2016-02-09 21:37 - 00293376 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll
2016-02-09 21:37 - 2016-02-09 21:37 - 00249856 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll
2016-02-09 21:37 - 2016-02-09 21:37 - 00220160 _____ (Microsoft Corporation) C:\Windows\system32\d3d10core.dll
2016-02-09 21:37 - 2016-02-09 21:37 - 00207872 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecsExt.dll
2016-02-09 21:37 - 2016-02-09 21:37 - 00187392 _____ (Microsoft Corporation) C:\Windows\system32\UIAnimation.dll
2016-02-09 21:37 - 2016-02-09 21:37 - 00161792 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll
2016-02-09 21:37 - 2016-02-09 21:37 - 00010752 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2016-02-09 21:37 - 2016-02-09 21:37 - 00009728 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2016-02-09 21:37 - 2016-02-09 21:37 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2016-02-09 21:37 - 2016-02-09 21:37 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
2016-02-09 21:37 - 2016-02-09 21:37 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
2016-02-09 21:37 - 2016-02-09 21:37 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2016-02-09 21:37 - 2016-02-09 21:37 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
2016-02-09 21:37 - 2016-02-09 21:37 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
2016-02-09 21:37 - 2016-02-09 21:37 - 00002560 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2016-02-09 21:35 - 2016-02-09 21:35 - 01505280 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll
2016-02-09 21:33 - 2015-07-30 14:13 - 00103120 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2016-02-09 21:05 - 2016-02-09 21:05 - 00000000 ____D C:\Users\Tina Thiel\AppData\Roaming\Aquafadas
2016-02-09 21:03 - 2016-02-09 21:03 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuarkXPress Document Converter
2016-02-09 19:17 - 2016-02-10 09:19 - 00000000 ____D C:\Users\Tina Thiel\AppData\Local\Quark
2016-02-09 19:17 - 2016-02-09 19:17 - 00000000 ____D C:\Users\Tina Thiel\AppData\Roaming\Quark
2016-02-09 19:16 - 2016-03-02 02:00 - 00000344 _____ C:\Windows\Tasks\Quark Updater.job
2016-02-09 19:15 - 2016-02-18 06:05 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuarkXPress 10
2016-02-09 19:14 - 2016-02-09 19:16 - 00000000 ____D C:\ProgramData\Quark
2016-02-09 19:12 - 2016-02-09 19:13 - 00000000 ____D C:\Program Files\QuickTime
2016-02-09 19:12 - 2016-02-09 19:12 - 00001815 _____ C:\Users\Public\Desktop\QuickTime Player.lnk
2016-02-09 19:12 - 2016-02-09 19:12 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime
2016-02-09 19:11 - 2016-02-09 19:11 - 00000000 ____D C:\Users\Tina Thiel\AppData\LocalLow\Apple Computer
2016-02-09 07:32 - 2016-03-01 10:04 - 00000000 ____D C:\ProgramData\boost_interprocess
2016-02-09 07:32 - 2016-02-17 07:23 - 00000000 ____D C:\Users\Tina Thiel\AppData\Roaming\com.aspexsoftware.Silhouette_Studio
2016-02-09 07:32 - 2016-02-10 07:57 - 00000000 ____D C:\ProgramData\com.aspexsoftware.Silhouette_Studio.8
2016-02-09 07:32 - 2016-02-09 19:41 - 00000000 ____D C:\ProgramData\com.aspexsoftware.Silhouette_Studio.license
2016-02-09 07:32 - 2016-02-09 07:32 - 00000000 ____D C:\Users\Tina Thiel\AppData\Roaming\com.aspexsoftware.studio_helper
2016-02-09 05:05 - 2015-01-09 03:48 - 00635904 _____ (Microsoft Corporation) C:\Windows\system32\perftrack.dll
2016-02-09 05:05 - 2015-01-09 03:48 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\wdi.dll
2016-02-09 05:05 - 2015-01-09 03:48 - 00027136 _____ (Microsoft Corporation) C:\Windows\system32\powertracker.dll
2016-02-09 05:03 - 2015-07-18 14:08 - 00901264 _____ (Microsoft Corporation) C:\Windows\system32\ucrtbase.dll
2016-02-09 05:03 - 2015-07-18 14:08 - 00066400 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-private-l1-1-0.dll
2016-02-09 05:03 - 2015-07-18 14:08 - 00022368 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-math-l1-1-0.dll
2016-02-09 05:03 - 2015-07-18 14:08 - 00019808 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-multibyte-l1-1-0.dll
2016-02-09 05:03 - 2015-07-18 14:08 - 00017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-string-l1-1-0.dll
2016-02-09 05:03 - 2015-07-18 14:08 - 00017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-stdio-l1-1-0.dll
2016-02-09 05:03 - 2015-07-18 14:08 - 00016224 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-runtime-l1-1-0.dll
2016-02-09 05:03 - 2015-07-18 14:08 - 00015712 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-convert-l1-1-0.dll
2016-02-09 05:03 - 2015-07-18 14:08 - 00014176 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-time-l1-1-0.dll
2016-02-09 05:03 - 2015-07-18 14:08 - 00014176 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-2-0.dll
2016-02-09 05:03 - 2015-07-18 14:08 - 00013664 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-filesystem-l1-1-0.dll
2016-02-09 05:03 - 2015-07-18 14:08 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-process-l1-1-0.dll
2016-02-09 05:03 - 2015-07-18 14:08 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-heap-l1-1-0.dll
2016-02-09 05:03 - 2015-07-18 14:08 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-conio-l1-1-0.dll
2016-02-09 05:03 - 2015-07-18 14:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-utility-l1-1-0.dll
2016-02-09 05:03 - 2015-07-18 14:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-locale-l1-1-0.dll
2016-02-09 05:03 - 2015-07-18 14:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-environment-l1-1-0.dll
2016-02-09 05:03 - 2015-07-18 14:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-2-0.dll
2016-02-09 05:03 - 2015-07-18 14:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-1.dll
2016-02-09 05:03 - 2015-07-18 14:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-eventing-provider-l1-1-0.dll
2016-02-09 05:03 - 2015-07-18 14:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l2-1-0.dll
2016-02-09 05:03 - 2015-07-18 14:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-timezone-l1-1-0.dll
2016-02-09 05:03 - 2015-07-18 14:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l2-1-0.dll
2016-02-09 05:03 - 2015-07-18 14:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-2-0.dll
2016-02-09 05:03 - 2015-07-10 18:34 - 03221504 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2016-02-09 05:03 - 2015-07-10 18:34 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2016-02-09 05:03 - 2015-07-10 18:33 - 00131584 _____ (Microsoft Corporation) C:\Windows\system32\aaclient.dll
2016-02-09 05:03 - 2015-01-29 04:02 - 02311168 _____ (Microsoft Corporation) C:\Windows\system32\wpdshext.dll
2016-02-09 05:03 - 2013-10-04 02:58 - 00152576 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll
2016-02-09 05:03 - 2013-10-04 02:56 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll
2016-02-09 05:03 - 2013-07-03 04:36 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys
2016-02-09 05:03 - 2013-07-03 04:36 - 00025728 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys
2016-02-09 05:03 - 2012-07-04 20:45 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\RNDISMP.sys
2016-02-09 05:02 - 2015-11-11 19:39 - 01242624 _____ (Microsoft Corporation) C:\Windows\system32\comsvcs.dll
2016-02-09 05:02 - 2015-11-11 19:39 - 00487936 _____ (Microsoft Corporation) C:\Windows\system32\catsrvut.dll
2016-02-09 05:02 - 2015-07-01 21:30 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll
2016-02-09 05:02 - 2015-07-01 21:30 - 00082432 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll
2016-02-09 05:02 - 2013-02-12 04:32 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usb8023.sys
2016-02-09 05:02 - 2011-04-29 03:46 - 00311808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys
2016-02-09 05:02 - 2011-04-29 03:46 - 00310272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
2016-02-09 05:02 - 2011-04-29 03:46 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
2016-02-09 05:01 - 2015-08-27 18:58 - 01391104 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2016-02-09 05:01 - 2015-08-27 18:58 - 01241088 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2016-02-09 05:01 - 2015-08-27 18:51 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll
2016-02-09 05:01 - 2015-08-27 18:51 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2016-02-09 05:01 - 2015-08-05 18:41 - 00751104 _____ (Microsoft Corporation) C:\Windows\system32\schedsvc.dll
2016-02-09 05:01 - 2015-07-09 18:42 - 00179712 _____ (Microsoft Corporation) C:\Windows\system32\notepad.exe
2016-02-09 05:01 - 2015-07-09 18:42 - 00179712 _____ (Microsoft Corporation) C:\Windows\notepad.exe
2016-02-09 05:01 - 2013-10-30 03:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll
2016-02-09 05:01 - 2013-01-24 05:47 - 00196328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fvevol.sys
2016-02-09 05:01 - 2012-11-02 06:11 - 00376832 _____ (Microsoft Corporation) C:\Windows\system32\dpnet.dll
2016-02-09 05:01 - 2011-06-16 05:33 - 00180224 _____ (Microsoft Corporation) C:\Windows\system32\xmllite.dll
2016-02-09 05:01 - 2011-02-18 06:39 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\prevhost.exe
2016-02-09 05:00 - 2015-06-15 22:43 - 02364416 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2016-02-09 05:00 - 2015-06-15 22:43 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
2016-02-09 05:00 - 2015-06-15 22:42 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\msiexec.exe
2016-02-09 05:00 - 2015-06-15 22:37 - 00025088 _____ (Microsoft Corporation) C:\Windows\system32\msimsg.dll
2016-02-09 05:00 - 2014-11-11 03:44 - 00186880 _____ (Microsoft Corporation) C:\Windows\system32\pku2u.dll
2016-02-09 05:00 - 2014-06-16 02:44 - 00730048 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2016-02-09 05:00 - 2014-06-16 02:44 - 00219072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2016-02-09 05:00 - 2014-06-16 02:40 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll
2016-02-09 05:00 - 2013-10-19 02:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
2016-02-09 05:00 - 2011-03-03 06:38 - 00270336 _____ (Microsoft Corporation) C:\Windows\system32\dnsapi.dll
2016-02-09 05:00 - 2011-03-03 06:38 - 00132608 _____ (Microsoft Corporation) C:\Windows\system32\dnsrslvr.dll
2016-02-09 05:00 - 2011-03-03 06:36 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\dnscacheugc.exe
2016-02-09 04:59 - 2015-10-29 18:50 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\shimeng.dll
2016-02-09 04:59 - 2015-10-29 18:49 - 00295936 _____ (Microsoft Corporation) C:\Windows\system32\apphelp.dll
2016-02-09 04:59 - 2015-10-29 18:49 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\aelupsvc.dll
2016-02-09 04:59 - 2015-10-29 18:49 - 00020992 _____ (Microsoft Corporation) C:\Windows\system32\sdbinst.exe
2016-02-09 04:59 - 2015-07-15 18:59 - 00078784 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mountmgr.sys
2016-02-09 04:59 - 2015-07-15 18:55 - 01159168 _____ (Microsoft Corporation) C:\Windows\system32\sysmain.dll
2016-02-09 04:59 - 2015-07-15 18:54 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\msmmsp.dll
2016-02-09 04:59 - 2014-08-12 02:36 - 00701440 _____ (Microsoft Corporation) C:\Windows\system32\IMJP10K.DLL
2016-02-09 04:59 - 2014-03-04 10:17 - 00538112 _____ (Microsoft Corporation) C:\Windows\system32\objsel.dll
2016-02-09 04:59 - 2014-03-04 10:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\cngprovider.dll
2016-02-09 04:59 - 2014-03-04 10:17 - 00049664 _____ (Microsoft Corporation) C:\Windows\system32\adprovider.dll
2016-02-09 04:59 - 2014-03-04 10:17 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\capiprovider.dll
2016-02-09 04:59 - 2014-03-04 10:17 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\dpapiprovider.dll
2016-02-09 04:59 - 2014-03-04 10:17 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\dimsroam.dll
2016-02-09 04:59 - 2014-03-04 10:17 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\wincredprovider.dll
2016-02-09 04:59 - 2013-10-12 03:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx
2016-02-09 04:59 - 2013-10-12 03:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll
2016-02-09 04:59 - 2013-10-12 02:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe
2016-02-09 04:59 - 2013-10-12 02:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe
2016-02-09 04:59 - 2012-08-21 21:12 - 00245760 _____ (Microsoft Corporation) C:\Windows\system32\OxpsConverter.exe
2016-02-09 04:59 - 2011-12-30 06:27 - 00478720 _____ (Microsoft Corporation) C:\Windows\system32\timedate.cpl
2016-02-09 04:59 - 2011-08-17 05:24 - 00465408 _____ (Microsoft Corporation) C:\Windows\system32\psisdecd.dll
2016-02-09 04:59 - 2011-08-17 05:19 - 00075776 _____ (Microsoft Corporation) C:\Windows\system32\psisrndr.ax
2016-02-09 04:58 - 2015-11-05 20:00 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2016-02-09 04:58 - 2015-10-13 17:31 - 00338944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2016-02-09 04:58 - 2015-10-13 17:31 - 00074752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys
2016-02-09 04:58 - 2015-09-02 03:48 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2016-02-09 04:58 - 2015-09-02 03:48 - 00034304 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2016-02-09 04:58 - 2015-09-02 03:48 - 00026624 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2016-02-09 04:58 - 2015-09-02 03:48 - 00010240 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2016-02-09 04:58 - 2015-09-02 02:33 - 00299520 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2016-02-09 04:58 - 2014-09-04 06:04 - 00372736 _____ (Microsoft Corporation) C:\Windows\system32\rastls.dll
2016-02-09 04:58 - 2013-05-10 04:20 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\cryptdlg.dll
2016-02-09 04:58 - 2011-08-27 05:26 - 00233472 _____ (Microsoft Corporation) C:\Windows\system32\oleacc.dll
2016-02-09 04:58 - 2011-05-24 11:44 - 00293376 _____ (Microsoft Corporation) C:\Windows\system32\umpnpmgr.dll
2016-02-09 04:57 - 2015-11-03 19:55 - 00179712 _____ (Microsoft Corporation) C:\Windows\system32\els.dll
2016-02-09 04:57 - 2015-10-13 05:50 - 00712640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys
2016-02-09 04:57 - 2015-04-11 04:07 - 00054656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\stream.sys
2016-02-09 04:57 - 2015-03-04 05:16 - 00249784 _____ (Microsoft Corporation) C:\Windows\system32\clfs.sys
2016-02-09 04:57 - 2015-03-04 05:10 - 00058880 _____ (Microsoft Corporation) C:\Windows\system32\clfsw32.dll
2016-02-09 04:57 - 2015-01-17 03:30 - 00828928 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll
2016-02-09 04:57 - 2014-02-04 03:07 - 00234432 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys
2016-02-09 04:57 - 2014-02-04 03:07 - 00149440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
2016-02-09 04:57 - 2014-02-04 03:07 - 00027072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys
2016-02-09 04:57 - 2014-02-04 03:00 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\iologmsg.dll
2016-02-09 04:57 - 2014-01-28 03:07 - 00185344 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll
2016-02-09 04:57 - 2013-08-28 01:57 - 00434688 _____ (Microsoft Corporation) C:\Windows\system32\scavengeui.dll
2016-02-09 04:57 - 2013-05-13 04:08 - 00903168 _____ (Microsoft Corporation) C:\Windows\system32\certutil.exe
2016-02-09 04:57 - 2013-05-13 04:08 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\certenc.dll
2016-02-09 04:57 - 2013-04-26 05:55 - 00492544 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll
2016-02-09 04:57 - 2013-03-19 04:33 - 00040960 _____ (Microsoft Corporation) C:\Windows\system32\wwanprotdim.dll
2016-02-09 04:57 - 2011-05-03 05:30 - 00741376 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2016-02-09 04:56 - 2015-07-22 18:53 - 00937984 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
2016-02-09 04:56 - 2015-07-22 18:53 - 00635392 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2016-02-09 04:56 - 2015-07-22 17:38 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\UtcResources.dll
2016-02-09 04:56 - 2012-10-03 17:42 - 00175104 _____ (Microsoft Corporation) C:\Windows\system32\netcorehc.dll
2016-02-09 04:56 - 2012-10-03 17:42 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\netevent.dll
2016-02-09 04:56 - 2012-10-03 17:40 - 00499712 _____ (Microsoft Corporation) C:\Windows\system32\iphlpsvc.dll
2016-02-09 04:56 - 2012-10-03 16:21 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpipreg.sys
2016-02-09 04:56 - 2011-05-04 05:34 - 01549312 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll
2016-02-09 04:56 - 2011-05-04 05:32 - 01401344 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll
2016-02-09 04:56 - 2011-05-04 05:32 - 00666624 _____ (Microsoft Corporation) C:\Windows\system32\mssvp.dll
2016-02-09 04:56 - 2011-05-04 05:32 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\mssph.dll
2016-02-09 04:56 - 2011-05-04 05:32 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\mssphtb.dll
2016-02-09 04:56 - 2011-05-04 05:32 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\msscntrs.dll
2016-02-09 04:56 - 2011-05-04 05:28 - 00427520 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe
2016-02-09 04:56 - 2011-05-04 05:28 - 00164352 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe
2016-02-09 04:56 - 2011-05-04 05:28 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\SearchFilterHost.exe
2016-02-09 04:55 - 2015-07-09 18:42 - 01372160 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll
2016-02-09 04:55 - 2015-07-09 18:42 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\dwmapi.dll
2016-02-09 04:55 - 2014-06-18 02:51 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe
2016-02-09 04:55 - 2014-01-24 03:18 - 01212352 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2016-02-09 04:55 - 2012-07-04 22:16 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\netapi32.dll
2016-02-09 04:55 - 2012-07-04 22:14 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\browser.dll
2016-02-09 04:55 - 2012-07-04 22:14 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\browcli.dll
2016-02-09 04:55 - 2012-06-06 06:03 - 00805376 _____ (Microsoft Corporation) C:\Windows\system32\cdosys.dll
2016-02-09 04:55 - 2011-02-12 06:35 - 00191488 _____ (Microsoft Corporation) C:\Windows\system32\FXSCOVER.exe
2016-02-09 04:55 - 2010-12-23 06:54 - 00850944 _____ (Microsoft Corporation) C:\Windows\system32\sbe.dll
2016-02-09 04:55 - 2010-12-23 06:50 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\mpg2splt.ax
2016-02-09 04:54 - 2015-11-03 19:56 - 00627712 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll
2016-02-09 04:54 - 2015-05-25 19:01 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\sechost.dll
2016-02-09 04:54 - 2015-05-25 19:00 - 00364544 _____ (Microsoft Corporation) C:\Windows\system32\tracerpt.exe
2016-02-09 04:54 - 2015-05-25 19:00 - 00082944 _____ (Microsoft Corporation) C:\Windows\system32\logman.exe
2016-02-09 04:54 - 2015-05-25 19:00 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\typeperf.exe
2016-02-09 04:54 - 2015-05-25 19:00 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\relog.exe
2016-02-09 04:54 - 2015-05-25 19:00 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\diskperf.exe
2016-02-09 04:54 - 2015-04-27 20:05 - 00179200 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2016-02-09 04:54 - 2015-04-27 20:04 - 01174528 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2016-02-09 04:54 - 2015-04-27 20:04 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2016-02-09 04:54 - 2015-04-27 20:04 - 00103936 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2016-02-09 04:54 - 2015-04-18 03:56 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2016-02-09 04:54 - 2015-04-13 04:19 - 00259072 _____ (Microsoft Corporation) C:\Windows\system32\services.exe
2016-02-09 04:53 - 2015-12-08 22:53 - 00509952 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2016-02-09 04:53 - 2015-12-08 22:53 - 00305664 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2016-02-09 04:53 - 2015-10-01 18:50 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
2016-02-09 04:53 - 2015-10-01 18:50 - 00050688 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
2016-02-09 04:53 - 2015-10-01 18:50 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2016-02-09 04:53 - 2015-10-01 18:50 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
2016-02-09 04:53 - 2015-10-01 18:50 - 00016896 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
2016-02-09 04:53 - 2015-10-01 17:53 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2016-02-09 04:53 - 2014-08-01 12:35 - 00793600 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll
2016-02-09 04:53 - 2014-04-05 03:25 - 01294272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2016-02-09 04:53 - 2014-04-05 03:24 - 00187840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2016-02-09 04:53 - 2013-11-26 12:11 - 00240576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2016-02-09 04:52 - 2014-06-18 23:23 - 01131664 _____ (Microsoft Corporation) C:\Windows\system32\dfshim.dll
2016-02-09 04:52 - 2014-06-18 23:23 - 00156824 _____ (Microsoft Corporation) C:\Windows\system32\mscorier.dll
2016-02-09 04:52 - 2014-06-18 23:23 - 00081560 _____ (Microsoft Corporation) C:\Windows\system32\mscories.dll
2016-02-09 04:52 - 2012-12-07 13:26 - 00308736 _____ (Microsoft Corporation) C:\Windows\system32\Wpc.dll
2016-02-09 04:52 - 2012-12-07 13:20 - 02576384 _____ (Microsoft Corporation) C:\Windows\system32\gameux.dll
2016-02-09 04:52 - 2012-12-07 11:46 - 00055296 _____ (Microsoft) C:\Windows\system32\cero.rs
2016-02-09 04:52 - 2012-12-07 11:46 - 00051712 _____ (Microsoft) C:\Windows\system32\esrb.rs
2016-02-09 04:52 - 2012-12-07 11:46 - 00046592 _____ (Microsoft) C:\Windows\system32\fpb.rs
2016-02-09 04:52 - 2012-12-07 11:46 - 00045568 _____ (Microsoft) C:\Windows\system32\oflc-nz.rs
2016-02-09 04:52 - 2012-12-07 11:46 - 00044544 _____ (Microsoft) C:\Windows\system32\pegibbfc.rs
2016-02-09 04:52 - 2012-12-07 11:46 - 00043520 _____ (Microsoft) C:\Windows\system32\csrr.rs
2016-02-09 04:52 - 2012-12-07 11:46 - 00040960 _____ (Microsoft) C:\Windows\system32\cob-au.rs
2016-02-09 04:52 - 2012-12-07 11:46 - 00030720 _____ (Microsoft) C:\Windows\system32\usk.rs
2016-02-09 04:52 - 2012-12-07 11:46 - 00023552 _____ (Microsoft) C:\Windows\system32\oflc.rs
2016-02-09 04:52 - 2012-12-07 11:46 - 00021504 _____ (Microsoft) C:\Windows\system32\grb.rs
2016-02-09 04:52 - 2012-12-07 11:46 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-pt.rs
2016-02-09 04:52 - 2012-12-07 11:46 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-fi.rs
2016-02-09 04:52 - 2012-12-07 11:46 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi.rs
2016-02-09 04:52 - 2012-12-07 11:46 - 00015360 _____ (Microsoft) C:\Windows\system32\djctq.rs
2016-02-09 04:51 - 2015-11-13 23:50 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\mapistub.dll
2016-02-09 04:51 - 2015-11-13 23:50 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\mapi32.dll
2016-02-09 04:51 - 2015-11-13 23:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\fixmapi.exe
2016-02-09 04:51 - 2015-11-05 20:02 - 00014848 _____ (Microsoft Corporation) C:\Windows\system32\wshrm.dll
2016-02-09 04:51 - 2015-11-05 10:48 - 00117760 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rmcast.sys
2016-02-09 04:51 - 2015-02-18 08:06 - 00123904 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe
2016-02-09 04:51 - 2015-02-03 04:12 - 00171520 _____ (Microsoft Corporation) C:\Windows\system32\ubpm.dll
2016-02-09 04:51 - 2014-12-19 03:43 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll
2016-02-09 04:51 - 2014-12-11 18:47 - 00046592 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe
2016-02-09 04:51 - 2014-11-26 04:32 - 00571904 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2016-02-09 04:51 - 2014-10-30 02:45 - 00155136 _____ (Microsoft Corporation) C:\Windows\system32\charmap.exe
2016-02-09 04:51 - 2014-10-25 02:32 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll
2016-02-09 04:51 - 2013-10-12 03:03 - 00656896 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll
2016-02-09 04:51 - 2013-10-12 03:01 - 00679424 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2016-02-09 04:51 - 2013-10-12 03:01 - 00216576 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL
2016-02-09 04:51 - 2013-08-05 02:56 - 00133056 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ataport.sys
2016-02-09 04:51 - 2013-07-26 02:55 - 00180224 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll
2016-02-09 04:51 - 2012-09-25 23:47 - 00078336 _____ (Microsoft Corporation) C:\Windows\system32\synceng.dll
2016-02-09 04:51 - 2012-05-14 05:33 - 00769024 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
2016-02-09 04:51 - 2012-03-17 08:27 - 00056176 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\partmgr.sys
2016-02-09 04:51 - 2011-12-16 08:52 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\msvcrt.dll
2016-02-09 04:51 - 2011-11-17 06:35 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\webio.dll
2016-02-09 04:51 - 2011-06-15 09:55 - 00319488 _____ (Microsoft Corporation) C:\Windows\system32\odbcjt32.dll
2016-02-09 04:51 - 2011-06-15 09:55 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\odbctrac.dll
2016-02-09 04:51 - 2011-06-15 09:55 - 00122880 _____ (Microsoft Corporation) C:\Windows\system32\odbccp32.dll
2016-02-09 04:51 - 2011-06-15 09:55 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\odbccu32.dll
2016-02-09 04:51 - 2011-06-15 09:55 - 00081920 _____ (Microsoft Corporation) C:\Windows\system32\odbccr32.dll
2016-02-09 04:50 - 2015-06-25 10:48 - 00105408 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2016-02-09 04:50 - 2015-06-25 10:44 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll
2016-02-09 04:50 - 2014-07-17 02:40 - 00157696 _____ (Microsoft Corporation) C:\Windows\system32\winsta.dll
2016-02-09 04:50 - 2014-07-17 02:39 - 01051136 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2016-02-09 04:50 - 2014-07-17 02:39 - 00304128 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2016-02-09 04:50 - 2014-07-17 02:39 - 00130048 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorekmts.dll
2016-02-09 04:50 - 2014-07-17 02:03 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys
2016-02-09 04:50 - 2014-07-17 02:02 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys
2016-02-09 04:50 - 2012-10-09 18:40 - 00193536 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcore6.dll
2016-02-09 04:50 - 2012-10-09 18:40 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcsvc6.dll
2016-02-09 04:50 - 2012-04-26 05:45 - 00058880 _____ (Microsoft Corporation) C:\Windows\system32\rdpwsx.dll
2016-02-09 04:50 - 2012-04-26 05:41 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\rdrmemptylst.exe
2016-02-09 04:50 - 2012-01-04 09:58 - 00442880 _____ (Microsoft Corporation) C:\Windows\system32\ntshrui.dll
2016-02-09 04:49 - 2015-07-15 03:55 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\basesrv.dll
2016-02-09 04:49 - 2015-02-25 04:03 - 00514560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys
2016-02-09 04:49 - 2013-07-12 11:07 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbcir.sys
2016-02-09 04:48 - 2015-12-08 22:54 - 01620992 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2016-02-09 04:48 - 2015-12-08 22:54 - 01568768 _____ (Microsoft Corporation) C:\Windows\system32\WMVENCOD.DLL
2016-02-09 04:48 - 2015-12-08 22:54 - 01325056 _____ (Microsoft Corporation) C:\Windows\system32\WMSPDMOE.DLL
2016-02-09 04:48 - 2015-12-08 22:54 - 01202688 _____ (Microsoft Corporation) C:\Windows\system32\WMALFXGFXDSP.dll
2016-02-09 04:48 - 2015-12-08 22:54 - 00902144 _____ (Microsoft Corporation) C:\Windows\system32\WMADMOD.DLL
2016-02-09 04:48 - 2015-12-08 22:54 - 00815616 _____ (Microsoft Corporation) C:\Windows\system32\WMADMOE.DLL
2016-02-09 04:48 - 2015-12-08 22:54 - 00740352 _____ (Microsoft Corporation) C:\Windows\system32\wmpmde.dll
2016-02-09 04:48 - 2015-12-08 22:54 - 00739328 _____ (Microsoft Corporation) C:\Windows\system32\WMSPDMOD.DLL
2016-02-09 04:48 - 2015-12-08 22:54 - 00665088 _____ (Microsoft Corporation) C:\Windows\system32\WMVXENCD.DLL
2016-02-09 04:48 - 2015-12-08 22:54 - 00541184 _____ (Microsoft Corporation) C:\Windows\system32\WMVSDECD.DLL
2016-02-09 04:48 - 2015-12-08 22:54 - 00358400 _____ (Microsoft Corporation) C:\Windows\system32\WMVSENCD.DLL
2016-02-09 04:48 - 2015-12-08 22:54 - 00154112 _____ (Microsoft Corporation) C:\Windows\system32\VIDRESZR.DLL
2016-02-09 04:48 - 2015-12-08 22:53 - 03209728 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2016-02-09 04:48 - 2015-12-08 22:53 - 01329664 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll
2016-02-09 04:48 - 2015-12-08 22:53 - 00970240 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2adec.dll
2016-02-09 04:48 - 2015-12-08 22:53 - 00829952 _____ (Microsoft Corporation) C:\Windows\system32\MSMPEG2ENC.DLL
2016-02-09 04:48 - 2015-12-08 22:53 - 00728576 _____ (Microsoft Corporation) C:\Windows\system32\mcmde.dll
2016-02-09 04:48 - 2015-12-08 22:53 - 00609280 _____ (Microsoft Corporation) C:\Windows\system32\MFWMAAEC.DLL
2016-02-09 04:48 - 2015-12-08 22:53 - 00519680 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
2016-02-09 04:48 - 2015-12-08 22:53 - 00489984 _____ (Microsoft Corporation) C:\Windows\system32\evr.dll
2016-02-09 04:48 - 2015-12-08 22:53 - 00415744 _____ (Microsoft Corporation) C:\Windows\system32\MP4SDECD.DLL
2016-02-09 04:48 - 2015-12-08 22:53 - 00354816 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll
2016-02-09 04:48 - 2015-12-08 22:53 - 00338944 _____ (Microsoft Corporation) C:\Windows\system32\SysFxUI.dll
2016-02-09 04:48 - 2015-12-08 22:53 - 00241152 _____ (Microsoft Corporation) C:\Windows\system32\MPG4DECD.DLL
2016-02-09 04:48 - 2015-12-08 22:53 - 00241152 _____ (Microsoft Corporation) C:\Windows\system32\MP43DECD.DLL
2016-02-09 04:48 - 2015-12-08 22:53 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\RESAMPLEDMO.DLL
2016-02-09 04:48 - 2015-12-08 22:53 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\qasf.dll
2016-02-09 04:48 - 2015-12-08 22:53 - 00193536 _____ (Microsoft Corporation) C:\Windows\system32\ksproxy.ax
2016-02-09 04:48 - 2015-12-08 22:53 - 00153600 _____ (Microsoft Corporation) C:\Windows\system32\COLORCNV.DLL
2016-02-09 04:48 - 2015-12-08 22:53 - 00103424 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
2016-02-09 04:48 - 2015-12-08 22:53 - 00079872 _____ (Microsoft Corporation) C:\Windows\system32\MP3DMOD.DLL
2016-02-09 04:48 - 2015-12-08 22:53 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\devenum.dll
2016-02-09 04:48 - 2015-12-08 22:53 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\mfvdsp.dll
2016-02-09 04:48 - 2015-12-08 22:53 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\rrinstaller.exe
2016-02-09 04:48 - 2015-12-08 22:53 - 00023040 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe
2016-02-09 04:48 - 2015-12-08 22:53 - 00004608 _____ (Microsoft Corporation) C:\Windows\system32\ksuser.dll
2016-02-09 04:48 - 2015-12-08 22:50 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\mferror.dll
2016-02-09 04:48 - 2015-12-08 22:43 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys
2016-02-09 04:48 - 2015-12-08 22:11 - 00177152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys
2016-02-09 04:48 - 2015-12-08 22:11 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmkaud.sys
2016-02-09 04:48 - 2015-06-02 00:47 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\cewmdm.dll
2016-02-09 04:48 - 2015-04-29 19:07 - 11411456 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2016-02-09 04:48 - 2015-04-29 19:07 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll
2016-02-09 04:48 - 2015-04-29 19:07 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx
2016-02-09 04:48 - 2015-04-29 19:07 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll
2016-02-09 04:48 - 2015-04-29 19:05 - 12625408 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2016-02-09 04:48 - 2015-02-03 04:12 - 00988160 _____ (Microsoft Corporation) C:\Windows\system32\drmv2clt.dll
2016-02-09 04:48 - 2015-02-03 04:12 - 00744960 _____ (Microsoft Corporation) C:\Windows\system32\blackbox.dll
2016-02-09 04:48 - 2015-02-03 04:12 - 00617984 _____ (Microsoft Corporation) C:\Windows\system32\wmdrmsdk.dll
2016-02-09 04:48 - 2014-12-06 04:50 - 00242688 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll
2016-02-09 04:48 - 2014-01-29 03:06 - 00381440 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2016-02-09 04:48 - 2013-11-27 02:14 - 00258560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2016-02-09 04:48 - 2013-11-27 02:13 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2016-02-09 04:48 - 2013-11-27 02:13 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2016-02-09 04:48 - 2013-11-27 02:13 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2016-02-09 04:48 - 2013-11-27 02:13 - 00024064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2016-02-09 04:48 - 2013-11-27 02:13 - 00020480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2016-02-09 04:48 - 2013-11-27 02:13 - 00006016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2016-02-09 04:48 - 2013-06-25 23:56 - 00527064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys
2016-02-09 04:48 - 2012-11-28 23:57 - 00047720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdfLdr.sys
2016-02-09 04:48 - 2012-11-28 23:57 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\Wdfres.dll
2016-02-09 04:48 - 2012-11-28 23:57 - 00000003 _____ C:\Windows\system32\Drivers\MsftWdf_Kernel_01011_Inbox_Critical.Wdf
2016-02-09 04:48 - 2012-10-03 17:42 - 00156672 _____ (Microsoft Corporation) C:\Windows\system32\ncsi.dll
2016-02-09 04:48 - 2012-10-03 17:42 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\nlaapi.dll
2016-02-09 04:48 - 2011-03-11 06:33 - 01164288 _____ (Microsoft Corporation) C:\Windows\system32\mfc42u.dll
2016-02-09 04:48 - 2011-03-11 06:33 - 01137664 _____ (Microsoft Corporation) C:\Windows\system32\mfc42.dll
2016-02-09 04:48 - 2011-02-23 05:47 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bowser.sys
2016-02-09 04:47 - 2015-02-03 04:12 - 01005056 _____ (Microsoft Corporation) C:\Windows\system32\cryptui.dll
2016-02-09 04:47 - 2015-02-03 04:12 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\msscp.dll
2016-02-09 04:47 - 2015-02-03 04:12 - 00475136 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2016-02-09 04:47 - 2015-02-03 04:12 - 00442880 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2016-02-09 04:47 - 2015-02-03 04:12 - 00406016 _____ (Microsoft Corporation) C:\Windows\system32\drmmgrtn.dll
2016-02-09 04:47 - 2015-02-03 04:12 - 00374784 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2016-02-09 04:47 - 2015-02-03 04:12 - 00275968 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll
2016-02-09 04:47 - 2015-02-03 04:12 - 00265216 _____ (Microsoft Corporation) C:\Windows\system32\msnetobj.dll
2016-02-09 04:47 - 2015-02-03 04:12 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2016-02-09 04:47 - 2015-02-03 04:12 - 00157184 _____ (Microsoft Corporation) C:\Windows\system32\pcasvc.dll
2016-02-09 04:47 - 2015-02-03 04:12 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\cryptsp.dll
2016-02-09 04:47 - 2015-02-03 04:12 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\pcadm.dll
2016-02-09 04:47 - 2015-02-03 04:11 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe
2016-02-09 04:47 - 2015-02-03 04:11 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\pcawrk.exe
2016-02-09 04:47 - 2015-02-03 04:11 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\pcalua.exe
2016-02-09 04:47 - 2015-02-03 04:10 - 00008704 _____ (Microsoft Corporation) C:\Windows\system32\pcaevts.dll
2016-02-09 04:47 - 2015-02-03 04:00 - 00593920 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\PEAuth.sys
2016-02-09 04:47 - 2014-12-08 03:46 - 00308224 _____ (Microsoft Corporation) C:\Windows\system32\scesrv.dll
2016-02-09 04:47 - 2014-10-31 23:22 - 00521384 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2016-02-09 04:47 - 2014-06-28 01:21 - 00455752 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
2016-02-09 04:47 - 2014-06-28 01:21 - 00409272 _____ (Microsoft Corporation) C:\Windows\system32\ci.dll
2016-02-09 04:46 - 2015-04-24 18:56 - 00530432 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
2016-02-09 04:46 - 2014-10-14 02:50 - 00523776 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll
2016-02-09 04:46 - 2013-12-04 03:03 - 00428032 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll
2016-02-09 04:46 - 2013-12-04 03:03 - 00423936 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll
2016-02-09 04:46 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll
2016-02-09 04:46 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll
2016-02-09 04:46 - 2013-12-04 03:02 - 00390144 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll
2016-02-09 04:46 - 2013-12-04 02:54 - 00594944 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe
2016-02-09 04:46 - 2013-12-04 02:54 - 00572416 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe
2016-02-09 04:46 - 2013-12-04 02:54 - 00510976 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe
2016-02-09 04:46 - 2013-12-04 02:54 - 00508928 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe
2016-02-09 04:45 - 2014-10-03 02:45 - 01177088 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll
2016-02-09 04:45 - 2014-10-03 02:45 - 00248832 _____ (Microsoft Corporation) C:\Windows\system32\WSManMigrationPlugin.dll
2016-02-09 04:45 - 2014-10-03 02:45 - 00214016 _____ (Microsoft Corporation) C:\Windows\system32\WsmWmiPl.dll
2016-02-09 04:45 - 2014-10-03 02:45 - 00145920 _____ (Microsoft Corporation) C:\Windows\system32\WsmAuto.dll
2016-02-09 04:45 - 2014-10-03 02:44 - 00198656 _____ (Microsoft Corporation) C:\Windows\system32\WSManHTTPConfig.exe
2016-02-09 04:23 - 2012-02-17 06:34 - 00826880 _____ (Microsoft Corporation) C:\Windows\system32\rdpcore.dll
2016-02-09 04:23 - 2012-02-17 05:13 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdtcp.sys


Das war der 1. Teil...
__________________
Alt 02.03.2016, 10:11   #4
paeckchen1
 
Firefox öffnet selbstständig Internetseiten - Standard

Firefox öffnet selbstständig Internetseiten


Und nun der 2. Teil der FRST-Datei:

Code:
ATTFilter
2016-02-08 10:45 - 2016-02-08 10:45 - 00000000 ____D C:\Users\Tina Thiel\Marlene
2016-02-08 10:41 - 2016-02-21 04:24 - 00000000 ____D C:\Users\Tina Thiel\Eigene Dateien TINA
2016-02-08 10:38 - 2016-02-08 10:38 - 00000000 ____D C:\Users\Tina Thiel\Kläranlage
2016-02-08 10:38 - 2016-02-08 10:38 - 00000000 ____D C:\Users\Tina Thiel\Dateien vom Desktop
2016-02-08 10:37 - 2016-02-08 10:41 - 00000000 ____D C:\Users\Tina Thiel\Moritz
2016-02-08 10:37 - 2016-02-08 10:37 - 00000000 ____D C:\Users\Tina Thiel\Steuer-Sparbuch
2016-02-08 10:37 - 2016-02-08 10:37 - 00000000 ____D C:\Users\Tina Thiel\Desktop\Schriften
2016-02-08 10:36 - 2016-02-08 10:42 - 00000000 ____D C:\Users\Tina Thiel\Nähen
2016-02-08 10:30 - 2016-02-16 05:46 - 00000000 ____D C:\Users\Tina Thiel\Sticken
2016-02-07 16:01 - 2016-02-07 16:01 - 00001300 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\paint.net.lnk
2016-02-07 16:01 - 2016-02-07 16:01 - 00001288 _____ C:\Users\Public\Desktop\paint.net.lnk
2016-02-07 16:00 - 2016-02-07 16:02 - 00000000 ____D C:\Users\Tina Thiel\AppData\Local\paint.net
2016-02-07 16:00 - 2016-02-07 16:01 - 00000000 ____D C:\Program Files\paint.net
2016-02-07 15:44 - 2016-02-07 15:44 - 00000000 ____D C:\Users\Tina Thiel\AppData\LocalLow\F-Secure
2016-02-07 14:59 - 2016-02-07 14:59 - 00000000 ____D C:\Users\Tina Thiel\AppData\Roaming\WinRAR
2016-02-07 14:59 - 2016-02-07 14:59 - 00000000 ____D C:\Users\Tina Thiel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2016-02-07 14:59 - 2016-02-07 14:59 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2016-02-07 14:59 - 2016-02-07 14:59 - 00000000 ____D C:\Program Files\WinRAR
2016-02-07 14:55 - 2016-02-07 14:55 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip
2016-02-07 14:55 - 2016-02-07 14:55 - 00000000 ____D C:\Program Files\7-Zip
2016-02-07 03:09 - 2016-02-07 03:09 - 00000000 ____D C:\Windows\system32\SPReview
2016-02-07 03:09 - 2016-02-07 03:09 - 00000000 ____D C:\Windows\system32\EventProviders
2016-02-06 05:06 - 2010-11-20 13:32 - 05066752 _____ (Microsoft Corporation) C:\Windows\system32\AuthFWSnapin.dll
2016-02-06 05:06 - 2010-11-20 13:29 - 00520064 _____ (Microsoft Corporation) C:\Windows\system32\mcupdate_GenuineIntel.dll
2016-02-06 05:06 - 2010-11-20 13:29 - 00014208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hwpolicy.sys
2016-02-06 05:06 - 2010-11-20 13:21 - 01667584 _____ (Microsoft Corporation) C:\Windows\system32\setupapi.dll
2016-02-06 05:06 - 2010-11-20 13:21 - 01128448 _____ (Microsoft Corporation) C:\Windows\system32\vssapi.dll
2016-02-06 05:06 - 2010-11-20 13:21 - 01115136 _____ (Microsoft Corporation) C:\Windows\system32\RacEngn.dll
2016-02-06 05:06 - 2010-11-20 13:21 - 01086976 _____ (Microsoft Corporation) C:\Windows\system32\wevtsvc.dll
2016-02-06 05:06 - 2010-11-20 13:21 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\SearchFolder.dll
2016-02-06 05:06 - 2010-11-20 13:21 - 00505856 _____ (Microsoft Corporation) C:\Windows\system32\taskschd.dll
2016-02-06 05:06 - 2010-11-20 13:21 - 00351232 _____ (Microsoft Corporation) C:\Windows\system32\winhttp.dll
2016-02-06 05:06 - 2010-11-20 13:21 - 00270848 _____ (Microsoft Corporation) C:\Windows\system32\tsmf.dll
2016-02-06 05:06 - 2010-11-20 13:21 - 00253952 _____ (Microsoft Corporation) C:\Windows\system32\spwizui.dll
2016-02-06 05:06 - 2010-11-20 13:21 - 00171008 _____ (Microsoft Corporation) C:\Windows\system32\umrdp.dll
2016-02-06 05:06 - 2010-11-20 13:21 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2016-02-06 05:06 - 2010-11-20 13:20 - 00585728 _____ (Microsoft Corporation) C:\Windows\system32\qmgr.dll
2016-02-06 05:06 - 2010-11-20 13:20 - 00573440 _____ (Microsoft Corporation) C:\Windows\system32\odbc32.dll
2016-02-06 05:06 - 2010-11-20 13:19 - 02291712 _____ (Microsoft Corporation) C:\Windows\system32\MSVidCtl.dll
2016-02-06 05:06 - 2010-11-20 13:19 - 00954752 _____ (Microsoft Corporation) C:\Windows\system32\mfc40.dll
2016-02-06 05:06 - 2010-11-20 13:19 - 00954288 _____ (Microsoft Corporation) C:\Windows\system32\mfc40u.dll
2016-02-06 05:06 - 2010-11-20 13:19 - 00593408 _____ (Microsoft Corporation) C:\Windows\system32\gpsvc.dll
2016-02-06 05:06 - 2010-11-20 13:19 - 00566272 _____ (Microsoft Corporation) C:\Windows\system32\MPSSVC.dll
2016-02-06 05:06 - 2010-11-20 13:18 - 01828352 _____ (Microsoft Corporation) C:\Windows\system32\d3d9.dll
2016-02-06 05:06 - 2010-11-20 13:18 - 01334272 _____ (Microsoft Corporation) C:\Windows\system32\CertEnroll.dll
2016-02-06 05:06 - 2010-11-20 13:18 - 00863744 _____ (Microsoft Corporation) C:\Windows\system32\diagperf.dll
2016-02-06 05:06 - 2010-11-20 13:18 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\dot3api.dll
2016-02-06 05:06 - 2010-11-20 13:17 - 03367424 _____ (Microsoft Corporation) C:\Windows\system32\WinSAT.exe
2016-02-06 05:06 - 2010-11-20 13:17 - 01203200 _____ (Microsoft Corporation) C:\Windows\system32\wbengine.exe
2016-02-06 05:06 - 2010-11-20 13:17 - 00456192 _____ (Microsoft Corporation) C:\Windows\system32\spinstall.exe
2016-02-06 05:06 - 2010-11-20 13:17 - 00280576 _____ (Microsoft Corporation) C:\Windows\system32\spreview.exe
2016-02-06 05:06 - 2010-11-20 13:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\PushPrinterConnections.exe
2016-02-06 05:06 - 2010-11-20 11:24 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys
2016-02-06 05:06 - 2010-11-20 11:22 - 00213504 _____ (Microsoft Corporation) C:\Windows\system32\rdpdd.dll
2016-02-06 05:06 - 2010-11-05 03:20 - 00146852 _____ C:\Windows\system32\systemsf.ebd
2016-02-06 05:06 - 2010-11-05 02:58 - 00297808 _____ (Microsoft Corporation) C:\Windows\system32\mscoree.dll
2016-02-06 05:06 - 2010-11-05 02:53 - 00295264 _____ (Microsoft Corporation) C:\Windows\system32\PresentationHost.exe
2016-02-06 05:06 - 2010-11-05 02:53 - 00099176 _____ (Microsoft Corporation) C:\Windows\system32\PresentationHostProxy.dll
2016-02-06 05:05 - 2010-11-20 13:36 - 01077248 _____ (Microsoft Corporation) C:\Windows\system32\Narrator.exe
2016-02-06 05:05 - 2010-11-20 13:36 - 00107008 _____ (Microsoft Corporation) C:\Windows\system32\NAPHLPR.DLL
2016-02-06 05:05 - 2010-11-20 13:36 - 00046080 _____ (Microsoft Corporation) C:\Windows\system32\NAPCRYPT.DLL
2016-02-06 05:05 - 2010-11-20 13:30 - 00245632 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\volsnap.sys
2016-02-06 05:05 - 2010-11-20 13:30 - 00175360 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vmbus.sys
2016-02-06 05:05 - 2010-11-20 13:30 - 00173440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdyboost.sys
2016-02-06 05:05 - 2010-11-20 13:30 - 00160128 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vhdmp.sys
2016-02-06 05:05 - 2010-11-20 13:30 - 00153984 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pci.sys
2016-02-06 05:05 - 2010-11-20 13:30 - 00140160 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\scsiport.sys
2016-02-06 05:05 - 2010-11-20 13:30 - 00130432 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mpio.sys
2016-02-06 05:05 - 2010-11-20 13:30 - 00116096 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msdsm.sys
2016-02-06 05:05 - 2010-11-20 13:30 - 00085376 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\sbp2port.sys
2016-02-06 05:05 - 2010-11-20 13:30 - 00053120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\volmgr.sys
2016-02-06 05:05 - 2010-11-20 13:30 - 00053120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\termdd.sys
2016-02-06 05:05 - 2010-11-20 13:30 - 00040704 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vmstorfl.sys
2016-02-06 05:05 - 2010-11-20 13:30 - 00028032 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storvsc.sys
2016-02-06 05:05 - 2010-11-20 13:30 - 00028032 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msahci.sys
2016-02-06 05:05 - 2010-11-20 13:29 - 02217856 _____ (Microsoft Corporation) C:\Windows\system32\bootres.dll
2016-02-06 05:05 - 2010-11-20 13:29 - 00274304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\acpi.sys
2016-02-06 05:05 - 2010-11-20 13:29 - 00194432 _____ (Microsoft Corporation) C:\Windows\system32\halmacpi.dll
2016-02-06 05:05 - 2010-11-20 13:29 - 00194432 _____ (Microsoft Corporation) C:\Windows\system32\hal.dll
2016-02-06 05:05 - 2010-11-20 13:29 - 00137088 _____ (Microsoft Corporation) C:\Windows\system32\halacpi.dll
2016-02-06 05:05 - 2010-11-20 13:29 - 00043392 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\winhv.sys
2016-02-06 05:05 - 2010-11-20 13:24 - 00271664 _____ (Microsoft Corporation) C:\Windows\system32\fveapi.dll
2016-02-06 05:05 - 2010-11-20 13:23 - 00144768 _____ (Microsoft Corporation) C:\Windows\system32\basecsp.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 02983424 _____ (Microsoft Corporation) C:\Windows\system32\UIRibbon.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 02755072 _____ (Microsoft Corporation) C:\Windows\system32\themeui.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 02202624 _____ (Microsoft Corporation) C:\Windows\system32\SensorsCpl.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 02157568 _____ (Microsoft Corporation) C:\Windows\system32\themecpl.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 02146304 _____ (Microsoft Corporation) C:\Windows\system32\SyncCenter.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 01712640 _____ (Microsoft Corporation) C:\Windows\system32\xpsservices.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 01624064 _____ (Microsoft Corporation) C:\Windows\system32\WMPEncEn.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 01363456 _____ (Microsoft Corporation) C:\Windows\system32\Query.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 01326592 _____ (Microsoft Corporation) C:\Windows\system32\wlanpref.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 01227776 _____ (Microsoft Corporation) C:\Windows\system32\wdc.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 01063936 _____ (Microsoft Corporation) C:\Windows\system32\werconcpl.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 01003008 _____ (Microsoft Corporation) C:\Windows\system32\WMNetMgr.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00974336 _____ (Microsoft Corporation) C:\Windows\system32\sppobjs.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00933376 _____ (Microsoft Corporation) C:\Windows\system32\Vault.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00907776 _____ (Microsoft Corporation) C:\Windows\system32\sdengin2.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00782336 _____ (Microsoft Corporation) C:\Windows\system32\webservices.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00778240 _____ (Microsoft Corporation) C:\Windows\system32\sqlsrv32.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00766464 _____ (Microsoft Corporation) C:\Windows\system32\wpccpl.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00755200 _____ (Microsoft Corporation) C:\Windows\system32\sud.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00750080 _____ (Microsoft Corporation) C:\Windows\system32\sdcpl.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00697344 _____ (Microsoft Corporation) C:\Windows\system32\SmiEngine.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00638976 _____ (Microsoft Corporation) C:\Windows\system32\VAN.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00600064 _____ (Microsoft Corporation) C:\Windows\system32\usercpl.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00577024 _____ (Microsoft Corporation) C:\Windows\system32\wpd_ci.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00551424 _____ (Microsoft Corporation) C:\Windows\system32\samsrv.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00507392 _____ (Microsoft Corporation) C:\Windows\system32\wmdrmdev.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00473600 _____ (Microsoft Corporation) C:\Windows\system32\riched20.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00464896 _____ (Microsoft Corporation) C:\Windows\system32\scrptadm.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00463360 _____ (Microsoft Corporation) C:\Windows\system32\wiaservc.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00458752 _____ (Microsoft Corporation) C:\Windows\system32\WSDApi.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00444928 _____ (Microsoft Corporation) C:\Windows\system32\wvc.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00436736 _____ (Microsoft Corporation) C:\Windows\system32\wmdrmnet.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00428544 _____ (Microsoft Corporation) C:\Windows\system32\shwebsvc.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00428032 _____ (Microsoft Corporation) C:\Windows\system32\wlanmsm.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00416768 _____ (Microsoft Corporation) C:\Windows\system32\wiadefui.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00412160 _____ (Microsoft Corporation) C:\Windows\system32\sppwinob.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00411648 _____ (Microsoft Corporation) C:\Windows\system32\wlangpui.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00410624 _____ (Microsoft Corporation) C:\Windows\system32\systemcpl.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00410112 _____ (Microsoft Corporation) C:\Windows\system32\wlanui.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00406528 _____ (Microsoft Corporation) C:\Windows\system32\wimgapi.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00380416 _____ (Microsoft Corporation) C:\Windows\system32\sxs.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00376832 _____ (Microsoft Corporation) C:\Windows\system32\rpcss.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00363520 _____ (Microsoft Corporation) C:\Windows\system32\StructuredQuery.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00352768 _____ (Microsoft Corporation) C:\Windows\system32\termmgr.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00352768 _____ (Microsoft Corporation) C:\Windows\system32\spwizeng.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00352256 _____ (Microsoft Corporation) C:\Windows\system32\wmpeffects.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00351232 _____ (Microsoft Corporation) C:\Windows\system32\wmicmiplugin.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00350720 _____ (Microsoft Corporation) C:\Windows\system32\WPDSp.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00350208 _____ (Microsoft Corporation) C:\Windows\system32\shlwapi.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00346624 _____ (Microsoft Corporation) C:\Windows\system32\untfs.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00335872 _____ (Microsoft Corporation) C:\Windows\system32\WinSATAPI.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00328192 _____ (Microsoft Corporation) C:\Windows\system32\shsvcs.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00327680 _____ (Microsoft Corporation) C:\Windows\system32\zipfldr.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00318976 _____ (Microsoft Corporation) C:\Windows\system32\raschap.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00316416 _____ (Microsoft Corporation) C:\Windows\system32\sharemediacpl.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\sqlcese30.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00305152 _____ (Microsoft Corporation) C:\Windows\system32\taskcomp.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00301568 _____ (Microsoft Corporation) C:\Windows\system32\srchadmin.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00299520 _____ (Microsoft Corporation) C:\Windows\system32\wmpdxm.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00286208 _____ (Microsoft Corporation) C:\Windows\system32\rasmans.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00276992 _____ (Microsoft Corporation) C:\Windows\system32\wcncsvc.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00269824 _____ (Microsoft Corporation) C:\Windows\system32\Wldap32.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00257024 _____ (Microsoft Corporation) C:\Windows\system32\srrstr.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\ReAgent.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00246272 _____ (Microsoft Corporation) C:\Windows\system32\scansetting.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00242176 _____ (Microsoft Corporation) C:\Windows\system32\vpnike.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00242176 _____ (Microsoft Corporation) C:\Windows\system32\tapisrv.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00233472 _____ (Microsoft Corporation) C:\Windows\system32\taskbarcpl.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00228352 _____ (Microsoft Corporation) C:\Windows\system32\stobject.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00222208 _____ (Microsoft Corporation) C:\Windows\system32\wavemsp.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00220160 _____ (Microsoft Corporation) C:\Windows\system32\SndVolSSO.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\ws2_32.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\upnp.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00202240 _____ (Microsoft Corporation) C:\Windows\system32\unattend.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00198144 _____ (Microsoft Corporation) C:\Windows\system32\wpdwcn.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00198144 _____ (Microsoft Corporation) C:\Windows\system32\sysclass.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00196608 _____ (Microsoft Corporation) C:\Windows\system32\wwanconn.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00196096 _____ (Microsoft Corporation) C:\Windows\system32\vaultsvc.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\winmm.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00193536 _____ (Microsoft Corporation) C:\Windows\system32\sppcomapi.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00189952 _____ (Microsoft Corporation) C:\Windows\system32\sqmapi.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00186368 _____ (Microsoft Corporation) C:\Windows\system32\rdpencom.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00182272 _____ (Microsoft Corporation) C:\Windows\system32\wmpsrcwp.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00181760 _____ (Microsoft Corporation) C:\Windows\system32\tcpipcfg.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\rasppp.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00175616 _____ (Microsoft Corporation) C:\Windows\system32\scecli.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00172544 _____ (Microsoft Corporation) C:\Windows\system32\spp.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\srvsvc.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00160256 _____ (Microsoft Corporation) C:\Windows\system32\vdsbas.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\syncui.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00154624 _____ (Microsoft Corporation) C:\Windows\system32\tscfgwmi.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00151040 _____ (Microsoft Corporation) C:\Windows\system32\vdsutil.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00146944 _____ (Microsoft Corporation) C:\Windows\system32\remotepg.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\twext.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\wmpps.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00140800 _____ (Microsoft Corporation) C:\Windows\system32\rdpendp.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\recovery.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00135168 _____ (Microsoft Corporation) C:\Windows\system32\XpsRasterService.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00134656 _____ (Microsoft Corporation) C:\Windows\system32\WinSCard.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00125952 _____ (Microsoft Corporation) C:\Windows\system32\sdrsvc.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00119808 _____ (Microsoft Corporation) C:\Windows\system32\umpo.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00118784 _____ (Microsoft Corporation) C:\Windows\system32\uxlib.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\sppnp.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\setupcln.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\SessEnv.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00111104 _____ (Microsoft Corporation) C:\Windows\system32\shsetup.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00109568 _____ (Microsoft Corporation) C:\Windows\system32\wiavideo.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00109056 _____ (Microsoft Corporation) C:\Windows\system32\t2embed.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\shacct.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\WPDShServiceObj.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00105472 _____ (Microsoft Corporation) C:\Windows\system32\wmpshell.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\sppinst.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\srvcli.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\wpdbusenum.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00084480 _____ (Microsoft Corporation) C:\Windows\system32\wkssvc.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00082944 _____ (Microsoft Corporation) C:\Windows\system32\thumbcache.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00081920 _____ (Microsoft Corporation) C:\Windows\system32\userenv.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00080896 _____ (Microsoft Corporation) C:\Windows\system32\QUTIL.DLL
2016-02-06 05:05 - 2010-11-20 13:21 - 00078848 _____ (Microsoft Corporation) C:\Windows\system32\UserAccountControlSettings.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\TabSvc.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00072192 _____ (Microsoft Corporation) C:\Windows\system32\regapi.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00071168 _____ (Microsoft Corporation) C:\Windows\system32\resutils.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\tlscsp.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\rastapi.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\spbcd.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\unimdmat.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\vfwwdm32.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\sppuinotify.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\rdpd3d.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\wsnmp32.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\wscapi.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00051200 _____ (Twain Working Group) C:\Windows\twain_32.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\samcli.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00050688 _____ (Microsoft Corporation) C:\Windows\system32\umb.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\wkscli.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00046592 _____ (Microsoft Corporation) C:\Windows\system32\WavDest.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00046080 _____ (Microsoft Corporation) C:\Windows\system32\RpcRtRemote.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\wtsapi32.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\rtutils.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\shimgvw.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\wiarpc.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00031744 _____ (Microsoft Corporation) C:\Windows\system32\wdiasqmmodule.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00031744 _____ (Microsoft Corporation) C:\Windows\system32\utildll.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\vpnikeapi.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00021504 _____ (Microsoft Corporation) C:\Windows\system32\rdprefdrvapi.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00019968 _____ (Microsoft Corporation) C:\Windows\system32\spopk.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\sisbkup.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00014848 _____ (Microsoft Corporation) C:\Windows\system32\syssetup.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\slwga.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\tsbyuv.dll
2016-02-06 05:05 - 2010-11-20 13:20 - 02504192 _____ (Microsoft Corporation) C:\Windows\system32\WMVCORE.DLL
2016-02-06 05:05 - 2010-11-20 13:20 - 02494464 _____ (Microsoft Corporation) C:\Windows\system32\netshell.dll
2016-02-06 05:05 - 2010-11-20 13:20 - 02130944 _____ (Microsoft Corporation) C:\Windows\system32\networkmap.dll
2016-02-06 05:05 - 2010-11-20 13:20 - 01750528 _____ (Microsoft Corporation) C:\Windows\system32\pnidui.dll
2016-02-06 05:05 - 2010-11-20 13:20 - 01661440 _____ (Microsoft Corporation) C:\Windows\system32\networkexplorer.dll
2016-02-06 05:05 - 2010-11-20 13:20 - 01644032 _____ (Microsoft Corporation) C:\Windows\system32\netcenter.dll
2016-02-06 05:05 - 2010-11-20 13:20 - 01508864 _____ (Microsoft Corporation) C:\Windows\system32\pla.dll
2016-02-06 05:05 - 2010-11-20 13:20 - 01160192 _____ (Microsoft Corporation) C:\Windows\system32\OpcServices.dll
2016-02-06 05:05 - 2010-11-20 13:20 - 01111552 _____ (Microsoft Corporation) C:\Windows\system32\onexui.dll
2016-02-06 05:05 - 2010-11-20 13:20 - 00988160 _____ (Microsoft Corporation) C:\Windows\system32\propsys.dll
2016-02-06 05:05 - 2010-11-20 13:20 - 00932352 _____ (Microsoft Corporation) C:\Windows\system32\printui.dll
2016-02-06 05:05 - 2010-11-20 13:20 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\OobeFldr.dll
2016-02-06 05:05 - 2010-11-20 13:20 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\NaturalLanguage6.dll
2016-02-06 05:05 - 2010-11-20 13:20 - 00600576 _____ (Microsoft Corporation) C:\Windows\system32\PerfCenterCPL.dll
2016-02-06 05:05 - 2010-11-20 13:20 - 00563712 _____ (Microsoft Corporation) C:\Windows\system32\netlogon.dll
2016-02-06 05:05 - 2010-11-20 13:20 - 00547840 _____ (Microsoft Corporation) C:\Windows\system32\PortableDeviceApi.dll
2016-02-06 05:05 - 2010-11-20 13:20 - 00441856 _____ (Microsoft Corporation) C:\Windows\system32\powercpl.dll
2016-02-06 05:05 - 2010-11-20 13:20 - 00427520 _____ (Microsoft Corporation) C:\Windows\system32\PortableDeviceStatus.dll
2016-02-06 05:05 - 2010-11-20 13:20 - 00406528 _____ (Microsoft Corporation) C:\Windows\system32\netcfgx.dll
2016-02-06 05:05 - 2010-11-20 13:20 - 00395264 _____ (Microsoft Corporation) C:\Windows\system32\prnfldr.dll
2016-02-06 05:05 - 2010-11-20 13:20 - 00346112 _____ (Microsoft Corporation) C:\Windows\system32\nshipsec.dll
2016-02-06 05:05 - 2010-11-20 13:20 - 00330240 _____ (Microsoft Corporation) C:\Windows\system32\QAGENTRT.DLL
2016-02-06 05:05 - 2010-11-20 13:20 - 00324608 _____ (Microsoft Corporation) C:\Windows\system32\puiobj.dll
2016-02-06 05:05 - 2010-11-20 13:20 - 00297472 _____ (Microsoft Corporation) C:\Windows\system32\ntprint.dll
2016-02-06 05:05 - 2010-11-20 13:20 - 00295424 _____ (Microsoft Corporation) C:\Windows\system32\photowiz.dll
2016-02-06 05:05 - 2010-11-20 13:20 - 00283136 _____ (Microsoft Corporation) C:\Windows\system32\qdv.dll
2016-02-06 05:05 - 2010-11-20 13:20 - 00236544 _____ (Microsoft Corporation) C:\Windows\system32\pdh.dll
2016-02-06 05:05 - 2010-11-20 13:20 - 00225792 _____ (Microsoft Corporation) C:\Windows\system32\netdiagfx.dll
2016-02-06 05:05 - 2010-11-20 13:20 - 00218112 _____ (Microsoft Corporation) C:\Windows\system32\OnLineIDCpl.dll
2016-02-06 05:05 - 2010-11-20 13:20 - 00199168 _____ (Microsoft Corporation) C:\Windows\system32\onex.dll
2016-02-06 05:05 - 2010-11-20 13:20 - 00190976 _____ (Microsoft Corporation) C:\Windows\system32\qcap.dll
2016-02-06 05:05 - 2010-11-20 13:20 - 00183296 _____ (Microsoft Corporation) C:\Windows\system32\PortableDeviceSyncProvider.dll
2016-02-06 05:05 - 2010-11-20 13:20 - 00175616 _____ (Microsoft Corporation) C:\Windows\system32\netplwiz.dll
2016-02-06 05:05 - 2010-11-20 13:20 - 00174592 _____ (Microsoft Corporation) C:\Windows\system32\ocsetapi.dll
2016-02-06 05:05 - 2010-11-20 13:20 - 00171520 _____ (Microsoft Corporation) C:\Windows\system32\QAGENT.DLL
2016-02-06 05:05 - 2010-11-20 13:20 - 00167936 _____ (Microsoft Corporation) C:\Windows\system32\QSHVHOST.DLL
2016-02-06 05:05 - 2010-11-20 13:20 - 00166400 _____ (Microsoft Corporation) C:\Windows\system32\netiohlp.dll
2016-02-06 05:05 - 2010-11-20 13:20 - 00165376 _____ (Microsoft Corporation) C:\Windows\system32\provsvc.dll
2016-02-06 05:05 - 2010-11-20 13:20 - 00161792 _____ (Microsoft Corporation) C:\Windows\system32\netjoin.dll
2016-02-06 05:05 - 2010-11-20 13:20 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\mydocs.dll
2016-02-06 05:05 - 2010-11-20 13:20 - 00121344 _____ (Microsoft Corporation) C:\Windows\system32\sppc.dll
2016-02-06 05:05 - 2010-11-20 13:20 - 00120320 _____ (Microsoft Corporation) C:\Windows\system32\prntvpt.dll
2016-02-06 05:05 - 2010-11-20 13:20 - 00117248 _____ (Microsoft Corporation) C:\Windows\system32\netid.dll
2016-02-06 05:05 - 2010-11-20 13:20 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\prncache.dll
2016-02-06 05:05 - 2010-11-20 13:20 - 00099328 _____ (Microsoft Corporation) C:\Windows\system32\QSVRMGMT.DLL
2016-02-06 05:05 - 2010-11-20 13:20 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\olepro32.dll
2016-02-06 05:05 - 2010-11-20 13:20 - 00078848 _____ (Microsoft Corporation) C:\Windows\system32\nci.dll
2016-02-06 05:05 - 2010-11-20 13:20 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\olethk32.dll
2016-02-06 05:05 - 2010-11-20 13:20 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\QCLIPROV.DLL
2016-02-06 05:05 - 2010-11-20 13:20 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\ntlanman.dll
2016-02-06 05:05 - 2010-11-20 13:20 - 00060928 _____ (Microsoft Corporation) C:\Windows\system32\ncryptui.dll
2016-02-06 05:05 - 2010-11-20 13:20 - 00046592 _____ (Microsoft Corporation) C:\Windows\system32\pdhui.dll
2016-02-06 05:05 - 2010-11-20 13:20 - 00040960 _____ (Microsoft Corporation) C:\Windows\system32\odbcconf.dll
2016-02-06 05:05 - 2010-11-20 13:20 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\PrintIsolationProxy.dll
2016-02-06 05:05 - 2010-11-20 13:20 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\profprov.dll
2016-02-06 05:05 - 2010-11-20 13:20 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\netutils.dll
2016-02-06 05:05 - 2010-11-20 13:20 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\perfts.dll
2016-02-06 05:05 - 2010-11-20 13:20 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\nrpsrv.dll
2016-02-06 05:05 - 2010-11-20 13:19 - 02151936 _____ (Microsoft Corporation) C:\Windows\system32\mmcndmgr.dll
2016-02-06 05:05 - 2010-11-20 13:19 - 01066496 _____ (Microsoft Corporation) C:\Windows\system32\msdtctm.dll
2016-02-06 05:05 - 2010-11-20 13:19 - 00856576 _____ (Microsoft Corporation) C:\Windows\system32\FirewallControlPanel.dll
2016-02-06 05:05 - 2010-11-20 13:19 - 00828928 _____ (Microsoft Corporation) C:\Windows\system32\fontext.dll
2016-02-06 05:05 - 2010-11-20 13:19 - 00732160 _____ (Microsoft Corporation) C:\Windows\system32\imapi2fs.dll
2016-02-06 05:05 - 2010-11-20 13:19 - 00592384 _____ (Microsoft Corporation) C:\Windows\system32\msftedit.dll
2016-02-06 05:05 - 2010-11-20 13:19 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\gpprefcl.dll
2016-02-06 05:05 - 2010-11-20 13:19 - 00481792 _____ (Microsoft Corporation) C:\Windows\system32\mscms.dll
2016-02-06 05:05 - 2010-11-20 13:19 - 00430080 _____ (Microsoft Corporation) C:\Windows\system32\FXSTIFF.dll
2016-02-06 05:05 - 2010-11-20 13:19 - 00429056 _____ (Microsoft Corporation) C:\Windows\system32\localsec.dll
2016-02-06 05:05 - 2010-11-20 13:19 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\msdri.dll
2016-02-06 05:05 - 2010-11-20 13:19 - 00414208 _____ (Microsoft Corporation) C:\Windows\system32\mspbda.dll
2016-02-06 05:05 - 2010-11-20 13:19 - 00400896 _____ (Microsoft Corporation) C:\Windows\system32\ipsmsnap.dll
2016-02-06 05:05 - 2010-11-20 13:19 - 00392192 _____ (Microsoft Corporation) C:\Windows\system32\imapi2.dll
2016-02-06 05:05 - 2010-11-20 13:19 - 00350208 _____ (Microsoft Corporation) C:\Windows\system32\IPSECSVC.DLL
2016-02-06 05:05 - 2010-11-20 13:19 - 00320512 _____ (Microsoft Corporation) C:\Windows\system32\mtxclu.dll
2016-02-06 05:05 - 2010-11-20 13:19 - 00320512 _____ (Microsoft Corporation) C:\Windows\system32\Faultrep.dll
2016-02-06 05:05 - 2010-11-20 13:19 - 00312832 _____ (Microsoft Corporation) C:\Windows\system32\hgcpl.dll
2016-02-06 05:05 - 2010-11-20 13:19 - 00296448 _____ (Microsoft Corporation) C:\Windows\system32\mfds.dll
2016-02-06 05:05 - 2010-11-20 13:19 - 00271360 _____ (Microsoft Corporation) C:\Windows\system32\iprtrmgr.dll
2016-02-06 05:05 - 2010-11-20 13:19 - 00268800 _____ (Microsoft Corporation) C:\Windows\system32\mprddm.dll
2016-02-06 05:05 - 2010-11-20 13:19 - 00266752 _____ (Microsoft Corporation) C:\Windows\system32\MediaMetadataHandler.dll
2016-02-06 05:05 - 2010-11-20 13:19 - 00226304 _____ (Microsoft Corporation) C:\Windows\system32\MSAC3ENC.DLL
2016-02-06 05:05 - 2010-11-20 13:19 - 00219648 _____ (Microsoft Corporation) C:\Windows\system32\iTVData.dll
2016-02-06 05:05 - 2010-11-20 13:19 - 00213504 _____ (Microsoft Corporation) C:\Windows\system32\MMDevAPI.dll
2016-02-06 05:05 - 2010-11-20 13:19 - 00209920 _____ (Microsoft Corporation) C:\Windows\system32\mstask.dll
2016-02-06 05:05 - 2010-11-20 13:19 - 00206336 _____ (Microsoft Corporation) C:\Windows\system32\framedynos.dll
2016-02-06 05:05 - 2010-11-20 13:19 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\framedyn.dll
2016-02-06 05:05 - 2010-11-20 13:19 - 00202240 _____ (Microsoft Corporation) C:\Windows\system32\input.dll
2016-02-06 05:05 - 2010-11-20 13:19 - 00196608 _____ (Microsoft Corporation) C:\Windows\system32\mfreadwrite.dll
2016-02-06 05:05 - 2010-11-20 13:19 - 00194560 _____ (Microsoft Corporation) C:\Windows\system32\ListSvc.dll
2016-02-06 05:05 - 2010-11-20 13:19 - 00176128 _____ (Microsoft Corporation) C:\Windows\system32\MFPlay.dll
2016-02-06 05:05 - 2010-11-20 13:19 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\iasrad.dll
2016-02-06 05:05 - 2010-11-20 13:19 - 00167936 _____ (Microsoft Corporation) C:\Windows\system32\msutb.dll
2016-02-06 05:05 - 2010-11-20 13:19 - 00158720 _____ (Microsoft Corporation) C:\Windows\system32\mprapi.dll
2016-02-06 05:05 - 2010-11-20 13:19 - 00158720 _____ (Microsoft Corporation) C:\Windows\system32\itircl.dll
2016-02-06 05:05 - 2010-11-20 13:19 - 00155136 _____ (Microsoft Corporation) C:\Windows\system32\hgprint.dll
2016-02-06 05:05 - 2010-11-20 13:19 - 00148992 _____ (Microsoft Corporation) C:\Windows\system32\ifsutil.dll
2016-02-06 05:05 - 2010-11-20 13:19 - 00127488 _____ (Microsoft Corporation) C:\Windows\system32\logoncli.dll
2016-02-06 05:05 - 2010-11-20 13:19 - 00126464 _____ (Microsoft Corporation) C:\Windows\system32\inetpp.dll
2016-02-06 05:05 - 2010-11-20 13:19 - 00124416 _____ (Microsoft Corporation) C:\Windows\system32\fde.dll
2016-02-06 05:05 - 2010-11-20 13:19 - 00122880 _____ (Microsoft Corporation) C:\Windows\system32\iasrecst.dll
2016-02-06 05:05 - 2010-11-20 13:19 - 00120320 _____ (Microsoft Corporation) C:\Windows\system32\msvfw32.dll
2016-02-06 05:05 - 2010-11-20 13:19 - 00118272 _____ (Microsoft Corporation) C:\Windows\system32\imm32.dll
2016-02-06 05:05 - 2010-11-20 13:19 - 00103936 _____ (Microsoft Corporation) C:\Windows\system32\IPHLPAPI.DLL
2016-02-06 05:05 - 2010-11-20 13:19 - 00101888 _____ (Microsoft Corporation) C:\Windows\system32\migisol.dll
2016-02-06 05:05 - 2010-11-20 13:19 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\fphc.dll
2016-02-06 05:05 - 2010-11-20 13:19 - 00093696 _____ (Windows (R) Codename Longhorn DDK provider) C:\Windows\system32\fms.dll
2016-02-06 05:05 - 2010-11-20 13:19 - 00084480 _____ (Microsoft Corporation) C:\Windows\system32\mciavi32.dll
2016-02-06 05:05 - 2010-11-20 13:19 - 00082944 _____ (Radius Inc.) C:\Windows\system32\iccvid.dll
2016-02-06 05:05 - 2010-11-20 13:19 - 00078848 _____ (Microsoft Corporation) C:\Windows\system32\iasacct.dll
2016-02-06 05:05 - 2010-11-20 13:19 - 00071168 _____ (Microsoft Corporation) C:\Windows\system32\KMSVC.DLL
2016-02-06 05:05 - 2010-11-20 13:19 - 00068096 _____ (Microsoft Corporation) C:\Windows\system32\Mcx2Svc.dll
2016-02-06 05:05 - 2010-11-20 13:19 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\hbaapi.dll
2016-02-06 05:05 - 2010-11-20 13:19 - 00059904 _____ (Microsoft Corporation) C:\Windows\system32\fdeploy.dll
2016-02-06 05:05 - 2010-11-20 13:19 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\inetmib1.dll
2016-02-06 05:05 - 2010-11-20 13:19 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\iyuv_32.dll
2016-02-06 05:05 - 2010-11-20 13:19 - 00042496 _____ (Microsoft Corporation) C:\Windows\system32\mimefilt.dll
2016-02-06 05:05 - 2010-11-20 13:19 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\luainstall.dll
2016-02-06 05:05 - 2010-11-20 13:19 - 00039424 _____ (Microsoft Corporation) C:\Windows\system32\FXSMON.dll
2016-02-06 05:05 - 2010-11-20 13:19 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\mciqtz32.dll
2016-02-06 05:05 - 2010-11-20 13:19 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\httpapi.dll
2016-02-06 05:05 - 2010-11-20 13:19 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\msasn1.dll
2016-02-06 05:05 - 2010-11-20 13:19 - 00031744 _____ (Microsoft Corporation) C:\Windows\system32\msvidc32.dll
2016-02-06 05:05 - 2010-11-20 13:19 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\msdmo.dll
2016-02-06 05:05 - 2010-11-20 13:19 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\iscsium.dll
2016-02-06 05:05 - 2010-11-20 13:19 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\msyuv.dll
2016-02-06 05:05 - 2010-11-20 13:19 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\HotStartUserAgent.dll
2016-02-06 05:05 - 2010-11-20 13:19 - 00021504 _____ (Microsoft Corporation) C:\Windows\system32\lsmproxy.dll
2016-02-06 05:05 - 2010-11-20 13:19 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\icaapi.dll
2016-02-06 05:05 - 2010-11-20 13:19 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\muifontsetup.dll
2016-02-06 05:05 - 2010-11-20 13:19 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msrle32.dll
2016-02-06 05:05 - 2010-11-20 13:18 - 03727872 _____ (Microsoft Corporation) C:\Windows\system32\accessibilitycpl.dll
2016-02-06 05:05 - 2010-11-20 13:18 - 02522624 _____ (Microsoft Corporation) C:\Windows\system32\dbgeng.dll
2016-02-06 05:05 - 2010-11-20 13:18 - 01555456 _____ (Microsoft Corporation) C:\Windows\system32\certmgr.dll
2016-02-06 05:05 - 2010-11-20 13:18 - 01400320 _____ (Microsoft Corporation) C:\Windows\system32\DxpTaskSync.dll
2016-02-06 05:05 - 2010-11-20 13:18 - 01188864 _____ (Microsoft Corporation) C:\Windows\system32\DiagCpl.dll
2016-02-06 05:05 - 2010-11-20 13:18 - 01040384 _____ (Microsoft Corporation) C:\Windows\system32\Display.dll
2016-02-06 05:05 - 2010-11-20 13:18 - 00854016 _____ (Microsoft Corporation) C:\Windows\system32\dbghelp.dll
2016-02-06 05:05 - 2010-11-20 13:18 - 00762880 _____ (Microsoft Corporation) C:\Windows\system32\azroles.dll
2016-02-06 05:05 - 2010-11-20 13:18 - 00744448 _____ (Microsoft Corporation) C:\Windows\system32\ActionCenter.dll
2016-02-06 05:05 - 2010-11-20 13:18 - 00740864 _____ (Microsoft Corporation) C:\Windows\system32\batmeter.dll
2016-02-06 05:05 - 2010-11-20 13:18 - 00685056 _____ (Microsoft Corporation) C:\Windows\system32\dsuiext.dll
2016-02-06 05:05 - 2010-11-20 13:18 - 00665600 _____ (Microsoft Corporation) C:\Windows\system32\AuxiliaryDisplayCpl.dll
2016-02-06 05:05 - 2010-11-20 13:18 - 00630784 _____ (Microsoft Corporation) C:\Windows\system32\DXPTaskRingtone.dll
2016-02-06 05:05 - 2010-11-20 13:18 - 00546304 _____ (Microsoft Corporation) C:\Windows\system32\cscsvc.dll
2016-02-06 05:05 - 2010-11-20 13:18 - 00537600 _____ (Microsoft Corporation) C:\Windows\system32\ActionCenterCPL.dll
2016-02-06 05:05 - 2010-11-20 13:18 - 00494592 _____ (Microsoft Corporation) C:\Windows\system32\BFE.DLL
2016-02-06 05:05 - 2010-11-20 13:18 - 00485888 _____ (Microsoft Corporation) C:\Windows\system32\comdlg32.dll
2016-02-06 05:05 - 2010-11-20 13:18 - 00484864 _____ (Microsoft Corporation) C:\Windows\system32\DeviceCenter.dll
2016-02-06 05:05 - 2010-11-20 13:18 - 00438272 _____ (Microsoft Corporation) C:\Windows\system32\AdmTmpl.dll
2016-02-06 05:05 - 2010-11-20 13:18 - 00428032 _____ (Microsoft Corporation) C:\Windows\system32\biocpl.dll
2016-02-06 05:05 - 2010-11-20 13:18 - 00418816 _____ (Microsoft Corporation) C:\Windows\system32\cscui.dll
2016-02-06 05:05 - 2010-11-20 13:18 - 00399872 _____ (Microsoft Corporation) C:\Windows\system32\DXP.dll
2016-02-06 05:05 - 2010-11-20 13:18 - 00339968 _____ (Microsoft Corporation) C:\Windows\system32\appmgr.dll
2016-02-06 05:05 - 2010-11-20 13:18 - 00333824 _____ (Microsoft Corporation) C:\Windows\system32\dot3ui.dll
2016-02-06 05:05 - 2010-11-20 13:18 - 00323072 _____ (Microsoft Corporation) C:\Windows\system32\drvstore.dll
2016-02-06 05:05 - 2010-11-20 13:18 - 00314368 _____ (Microsoft Corporation) C:\Windows\system32\azroleui.dll
2016-02-06 05:05 - 2010-11-20 13:18 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\actxprxy.dll
2016-02-06 05:05 - 2010-11-20 13:18 - 00257024 _____ (Microsoft Corporation) C:\Windows\system32\dpx.dll
2016-02-06 05:05 - 2010-11-20 13:18 - 00254464 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcore.dll
2016-02-06 05:05 - 2010-11-20 13:18 - 00252928 _____ (Microsoft) C:\Windows\system32\DShowRdpFilter.dll
2016-02-06 05:05 - 2010-11-20 13:18 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\audiodev.dll
2016-02-06 05:05 - 2010-11-20 13:18 - 00242176 _____ (Microsoft Corporation) C:\Windows\system32\eapp3hst.dll
2016-02-06 05:05 - 2010-11-20 13:18 - 00230912 _____ (Microsoft Corporation) C:\Windows\system32\clusapi.dll
2016-02-06 05:05 - 2010-11-20 13:18 - 00222208 _____ (Microsoft Corporation) C:\Windows\system32\eapphost.dll
2016-02-06 05:05 - 2010-11-20 13:18 - 00220672 _____ (Microsoft Corporation) C:\Windows\system32\defaultlocationcpl.dll
2016-02-06 05:05 - 2010-11-20 13:18 - 00214016 _____ (Microsoft Corporation) C:\Windows\system32\dot3svc.dll
2016-02-06 05:05 - 2010-11-20 13:18 - 00211456 _____ (Microsoft Corporation) C:\Windows\system32\DevicePairingFolder.dll
2016-02-06 05:05 - 2010-11-20 13:18 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\dxdiagn.dll
2016-02-06 05:05 - 2010-11-20 13:18 - 00205312 _____ (Microsoft Corporation) C:\Windows\system32\efscore.dll
2016-02-06 05:05 - 2010-11-20 13:18 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\activeds.dll
2016-02-06 05:05 - 2010-11-20 13:18 - 00196608 _____ (Microsoft Corporation) C:\Windows\system32\dskquoui.dll
2016-02-06 05:05 - 2010-11-20 13:18 - 00186880 _____ (Microsoft Corporation) C:\Windows\system32\adsldp.dll
2016-02-06 05:05 - 2010-11-20 13:18 - 00179200 _____ (Microsoft Corporation) C:\Windows\system32\ActionQueue.dll
2016-02-06 05:05 - 2010-11-20 13:18 - 00146944 _____ (Microsoft Corporation) C:\Windows\system32\autoplay.dll
2016-02-06 05:05 - 2010-11-20 13:18 - 00145920 _____ (Microsoft Corporation) C:\Windows\system32\cfgmgr32.dll
2016-02-06 05:05 - 2010-11-20 13:18 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\dps.dll
2016-02-06 05:05 - 2010-11-20 13:18 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\cscobj.dll
2016-02-06 05:05 - 2010-11-20 13:18 - 00133632 _____ (Microsoft Corporation) C:\Windows\system32\bcdsrv.dll
2016-02-06 05:05 - 2010-11-20 13:18 - 00132608 _____ (Microsoft Corporation) C:\Windows\system32\cabview.dll
2016-02-06 05:05 - 2010-11-20 13:18 - 00128512 _____ (Microsoft Corporation) C:\Windows\system32\EhStorAPI.dll
2016-02-06 05:05 - 2010-11-20 13:18 - 00115200 _____ (Microsoft Corporation) C:\Windows\system32\dot3msm.dll
2016-02-06 05:05 - 2010-11-20 13:18 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\AuxiliaryDisplayServices.dll
2016-02-06 05:05 - 2010-11-20 13:18 - 00109568 _____ (Microsoft Corporation) C:\Windows\system32\CscMig.dll
2016-02-06 05:05 - 2010-11-20 13:18 - 00109056 _____ (Microsoft Corporation) C:\Windows\system32\dnscmmc.dll
2016-02-06 05:05 - 2010-11-20 13:18 - 00097280 _____ (Microsoft Corporation) C:\Windows\system32\dwmredir.dll
2016-02-06 05:05 - 2010-11-20 13:18 - 00094208 _____ (Microsoft Corporation) C:\Windows\system32\eappgnui.dll
2016-02-06 05:05 - 2010-11-20 13:18 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\avifil32.dll
2016-02-06 05:05 - 2010-11-20 13:18 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\AxInstSv.dll
2016-02-06 05:05 - 2010-11-20 13:18 - 00082432 _____ (Microsoft Corporation) C:\Windows\system32\dot3cfg.dll
2016-02-06 05:05 - 2010-11-20 13:18 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\cabinet.dll
2016-02-06 05:05 - 2010-11-20 13:18 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\amstream.dll
2016-02-06 05:05 - 2010-11-20 13:18 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\certprop.dll
2016-02-06 05:05 - 2010-11-20 13:18 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\asycfilt.dll
2016-02-06 05:05 - 2010-11-20 13:18 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\cca.dll
2016-02-06 05:05 - 2010-11-20 13:18 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\CertPolEng.dll
2016-02-06 05:05 - 2010-11-20 13:18 - 00045568 _____ (Microsoft Corporation) C:\Windows\system32\acppage.dll
2016-02-06 05:05 - 2010-11-20 13:18 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\cscapi.dll
2016-02-06 05:05 - 2010-11-20 13:18 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\AzSqlExt.dll
2016-02-06 05:05 - 2010-11-20 13:18 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\elsTrans.dll
2016-02-06 05:05 - 2010-11-20 13:17 - 03179520 _____ (Microsoft Corporation) C:\Windows\system32\sppsvc.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 01131008 _____ (Microsoft Corporation) C:\Windows\system32\sdclt.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 01025536 _____ (Microsoft Corporation) C:\Windows\system32\VSSVC.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00941568 _____ (Microsoft Corporation) C:\Windows\system32\mblctr.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00802304 _____ (Microsoft Corporation) C:\Windows\system32\WFS.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00586752 _____ (Microsoft Corporation) C:\Windows\system32\dfrgui.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00523264 _____ (Microsoft Corporation) C:\Windows\system32\FXSSVC.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00477696 _____ (Microsoft Corporation) C:\Windows\system32\lpksetup.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00453632 _____ (Microsoft Corporation) C:\Windows\system32\vds.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00334336 _____ (Microsoft Corporation) C:\Windows\system32\wisptis.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00327680 _____ (Microsoft Corporation) C:\Windows\system32\wimserv.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00327168 _____ (Microsoft Corporation) C:\Windows\system32\nltest.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00325632 _____ (Microsoft Corporation) C:\Windows\system32\slui.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\wusa.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00314368 _____ (Microsoft Corporation) C:\Windows\system32\SndVol.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00303104 _____ (Microsoft Corporation) C:\Windows\system32\msinfo32.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00302592 _____ (Microsoft Corporation) C:\Windows\system32\cmd.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00292864 _____ (Microsoft Corporation) C:\Windows\system32\WindowsAnytimeUpgradeResults.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00288256 _____ (Microsoft Corporation) C:\Windows\system32\eudcedit.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00276480 _____ (Microsoft Corporation) C:\Windows\system32\diskraid.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00270336 _____ (Microsoft Corporation) C:\Windows\system32\sethc.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00267776 _____ (Microsoft Corporation) C:\Windows\system32\lsm.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00257536 _____ (Microsoft Corporation) C:\Windows\system32\WindowsAnytimeUpgrade.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00254976 _____ (Microsoft Corporation) C:\Windows\system32\wsqmcons.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00233984 _____ (Microsoft Corporation) C:\Windows\system32\msconfig.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\taskmgr.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00220672 _____ (Microsoft Corporation) C:\Windows\system32\mcbuilder.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\recdisc.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00209920 _____ (Microsoft Corporation) C:\Windows\system32\PkgMgr.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00197632 _____ (Microsoft Corporation) C:\Windows\system32\ocsetup.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\taskeng.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00182784 _____ (Microsoft Corporation) C:\Windows\system32\RelPost.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00179712 _____ (Microsoft Corporation) C:\Windows\system32\schtasks.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00173568 _____ (Microsoft Corporation) C:\Windows\system32\rdpclip.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00170496 _____ (Microsoft Corporation) C:\Windows\system32\PresentationSettings.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00157184 _____ (Microsoft Corporation) C:\Windows\system32\perfmon.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00144896 _____ (Microsoft Corporation) C:\Windows\system32\iscsicli.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00142336 _____ (Microsoft Corporation) C:\Windows\system32\net1.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00133632 _____ (Microsoft Corporation) C:\Windows\system32\diskpart.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00132608 _____ (Microsoft Corporation) C:\Windows\system32\MdSched.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00113152 _____ (Microsoft Corporation) C:\Windows\system32\setupugc.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00103936 _____ (Microsoft Corporation) C:\Windows\system32\setupcl.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\mobsync.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00098816 _____ (Microsoft) C:\Windows\system32\Robocopy.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\nslookup.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00095232 _____ (Microsoft Corporation) C:\Windows\system32\logagent.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\isoburn.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\cmstp.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\tabcal.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\MuiUnattend.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00066048 _____ C:\Windows\system32\PrintBrmUi.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\w32tm.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\findstr.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\manage-bde.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\lpremove.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\PnPUnattend.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00059904 _____ (Microsoft Corporation) C:\Windows\system32\djoin.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\repair-bde.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\MultiDigiMon.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\takeown.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00050688 _____ (Microsoft Corporation) C:\Windows\system32\runonce.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\tzutil.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00042496 _____ (Microsoft Corporation) C:\Windows\system32\ftp.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\unlodctr.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\WerFaultSecure.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\proquota.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00026624 _____ (Microsoft Corporation) C:\Windows\system32\userinit.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00026624 _____ (Microsoft Corporation) C:\Windows\system32\qwinsta.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\netiougc.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\netcfg.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00025088 _____ (Microsoft Corporation) C:\Windows\system32\qprocess.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\msg.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00024064 _____ (Microsoft Corporation) C:\Windows\system32\netbtugc.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00023040 _____ (Microsoft Corporation) C:\Windows\system32\quser.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\tskill.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\tsdiscon.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\ReAgentc.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00021504 _____ (Microsoft Corporation) C:\Windows\system32\tscon.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00021504 _____ (Microsoft Corporation) C:\Windows\system32\qappsrv.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00021504 _____ (Microsoft Corporation) C:\Windows\system32\logoff.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00020992 _____ (Microsoft Corporation) C:\Windows\system32\shadow.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00020992 _____ (Microsoft Corporation) C:\Windows\system32\rwinsta.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00015360 _____ (Microsoft Corporation) C:\Windows\system32\reset.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00014848 _____ (Microsoft Corporation) C:\Windows\system32\query.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00007680 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2016-02-06 05:05 - 2010-11-20 13:16 - 00905216 _____ (Microsoft Corporation) C:\Windows\system32\mmsys.cpl
2016-02-06 05:05 - 2010-11-20 13:16 - 00878592 _____ (Microsoft Corporation) C:\Windows\system32\Bubbles.scr
2016-02-06 05:05 - 2010-11-20 13:16 - 00776192 _____ (Microsoft Corporation) C:\Windows\system32\calc.exe
2016-02-06 05:05 - 2010-11-20 13:16 - 00692736 _____ (Microsoft Corporation) C:\Windows\system32\bthprops.cpl
2016-02-06 05:05 - 2010-11-20 13:16 - 00679424 _____ (Microsoft Corporation) C:\Windows\system32\autoconv.exe
2016-02-06 05:05 - 2010-11-20 13:16 - 00668160 _____ (Microsoft Corporation) C:\Windows\system32\autochk.exe
2016-02-06 05:05 - 2010-11-20 13:16 - 00658944 _____ (Microsoft Corporation) C:\Windows\system32\autofmt.exe
2016-02-06 05:05 - 2010-11-20 13:16 - 00649216 _____ (Microsoft Corporation) C:\Windows\system32\appwiz.cpl
2016-02-06 05:05 - 2010-11-20 13:16 - 00600576 _____ (Microsoft Corporation) C:\Windows\system32\TabletPC.cpl
2016-02-06 05:05 - 2010-11-20 13:16 - 00516096 _____ (Microsoft Corporation) C:\Windows\system32\main.cpl
2016-02-06 05:05 - 2010-11-20 13:16 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\PhotoScreensaver.scr
2016-02-06 05:05 - 2010-11-20 13:16 - 00389632 _____ (Microsoft Corporation) C:\Windows\system32\sysmon.ocx
2016-02-06 05:05 - 2010-11-20 13:16 - 00345088 _____ (Microsoft Corporation) C:\Windows\system32\intl.cpl
2016-02-06 05:05 - 2010-11-20 13:16 - 00326656 _____ (Microsoft Corporation) C:\Windows\system32\sysdm.cpl
2016-02-06 05:05 - 2010-11-20 13:16 - 00320000 _____ (Microsoft Corporation) C:\Windows\system32\winspool.drv
2016-02-06 05:05 - 2010-11-20 13:16 - 00295424 _____ (Microsoft Corporation) C:\Windows\system32\bcdedit.exe
2016-02-06 05:05 - 2010-11-20 13:16 - 00293888 _____ (Microsoft Corporation) C:\Windows\system32\ssText3d.scr
2016-02-06 05:05 - 2010-11-20 13:16 - 00281088 _____ (Microsoft Corporation) C:\Windows\system32\unimdm.tsp
2016-02-06 05:05 - 2010-11-20 13:16 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\Mystify.scr
2016-02-06 05:05 - 2010-11-20 13:16 - 00220672 _____ (Microsoft Corporation) C:\Windows\system32\Ribbons.scr
2016-02-06 05:05 - 2010-11-20 13:16 - 00204288 _____ (Microsoft Corporation) C:\Windows\system32\MSNP.ax
2016-02-06 05:05 - 2010-11-20 13:16 - 00186368 _____ (Microsoft Corporation) C:\Windows\system32\bitsadmin.exe
2016-02-06 05:05 - 2010-11-20 13:16 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\wdmaud.drv
2016-02-06 05:05 - 2010-11-20 13:16 - 00153600 _____ (Microsoft Corporation) C:\Windows\system32\VBICodec.ax
2016-02-06 05:05 - 2010-11-20 13:16 - 00146944 _____ (Microsoft Corporation) C:\Windows\system32\bcdboot.exe
2016-02-06 05:05 - 2010-11-20 13:16 - 00142336 _____ (Microsoft Corporation) C:\Windows\system32\powercfg.cpl
2016-02-06 05:05 - 2010-11-20 13:16 - 00128000 _____ (Microsoft Corporation) C:\Windows\system32\desk.cpl
2016-02-06 05:05 - 2010-11-20 13:16 - 00119808 _____ (Microsoft Corporation) C:\Windows\system32\aitagent.exe
2016-02-06 05:05 - 2010-11-20 13:16 - 00107008 _____ (Microsoft Corporation) C:\Windows\system32\Kswdmcap.ax
2016-02-06 05:05 - 2010-11-20 13:16 - 00084480 _____ (Microsoft Corporation) C:\Windows\system32\kstvtune.ax
2016-02-06 05:05 - 2010-11-20 13:16 - 00072704 _____ (Microsoft Corporation) C:\Windows\system32\Mpeg2Data.ax
2016-02-06 05:05 - 2010-11-20 13:16 - 00068608 _____ (Microsoft Corporation) C:\Windows\system32\WSTPager.ax
2016-02-06 05:05 - 2010-11-20 13:16 - 00065024 _____ (Microsoft Corporation) C:\Windows\bfsvc.exe
2016-02-06 05:05 - 2010-11-20 13:16 - 00059904 _____ (Microsoft Corporation) C:\Windows\system32\MSDvbNP.ax
2016-02-06 05:05 - 2010-11-20 13:16 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ksxbar.ax
2016-02-06 05:05 - 2010-11-20 13:16 - 00045568 _____ (Microsoft Corporation) C:\Windows\system32\g711codc.ax
2016-02-06 05:05 - 2010-11-20 13:16 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\vbisurf.ax
2016-02-06 05:05 - 2010-11-20 13:16 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\chgport.exe
2016-02-06 05:05 - 2010-11-20 13:16 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\chglogon.exe
2016-02-06 05:05 - 2010-11-20 13:16 - 00020992 _____ (Microsoft Corporation) C:\Windows\system32\chgusr.exe
2016-02-06 05:05 - 2010-11-20 13:16 - 00015360 _____ (Microsoft Corporation) C:\Windows\system32\change.exe
2016-02-06 05:05 - 2010-11-20 13:07 - 01164800 _____ (Microsoft Corporation) C:\Windows\system32\UIRibbonRes.dll
2016-02-06 05:05 - 2010-11-20 13:03 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\vmicres.dll
2016-02-06 05:05 - 2010-11-20 13:03 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\vmbusres.dll
2016-02-06 05:05 - 2010-11-20 13:03 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\vmstorfltres.dll
2016-02-06 05:05 - 2010-11-20 13:00 - 01027584 _____ (Microsoft Corporation) C:\Windows\system32\IMJP10.IME
2016-02-06 05:05 - 2010-11-20 11:52 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbrpm.sys
2016-02-06 05:05 - 2010-11-20 11:24 - 00133632 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpdr.sys
2016-02-06 05:05 - 2010-11-20 11:22 - 00223232 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe
2016-02-06 05:05 - 2010-11-20 11:07 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndproxy.sys
2016-02-06 05:05 - 2010-11-20 11:06 - 00108544 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tunnel.sys
2016-02-06 05:05 - 2010-11-20 11:06 - 00046080 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndisuio.sys
2016-02-06 05:05 - 2010-11-20 11:01 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\1394ohci.sys
2016-02-06 05:05 - 2010-11-20 10:50 - 00190976 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ks.sys
2016-02-06 05:05 - 2010-11-20 10:50 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\CompositeBus.sys
2016-02-06 05:05 - 2010-11-20 10:14 - 00215552 _____ (Microsoft Corporation) C:\Windows\system32\vmicsvc.exe
2016-02-06 05:05 - 2010-11-20 09:44 - 00388096 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\csc.sys
2016-02-06 05:05 - 2010-11-20 09:44 - 00242688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdbss.sys
2016-02-06 05:05 - 2010-11-20 09:42 - 00246784 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\udfs.sys
2016-02-06 05:05 - 2010-11-20 09:42 - 00078336 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dfsc.sys
2016-02-06 05:05 - 2010-11-20 09:39 - 00187904 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netbt.sys
2016-02-06 05:05 - 2010-11-20 09:39 - 00021504 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdi.sys
2016-02-06 05:05 - 2010-11-20 09:38 - 00108544 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cdrom.sys
2016-02-06 05:05 - 2010-11-20 06:23 - 00053600 _____ C:\Windows\system32\dosx.exe
2016-02-06 05:05 - 2010-11-10 02:45 - 00010429 _____ C:\Windows\system32\ScavengeSpace.xml
2016-02-06 05:05 - 2010-11-05 03:11 - 00312168 _____ (Microsoft Corporation) C:\Windows\system32\MCEWMDRMNDBootstrap.dll
2016-02-06 05:05 - 2010-11-05 02:58 - 00049488 _____ (Microsoft Corporation) C:\Windows\system32\netfxperf.dll
2016-02-06 05:04 - 2010-11-20 13:21 - 00363008 _____ (Microsoft Corporation) C:\Windows\system32\wbemcomn.dll
2016-02-06 05:04 - 2010-11-20 13:21 - 00189952 _____ (Microsoft Corporation) C:\Windows\system32\wdscore.dll
2016-02-06 05:04 - 2010-11-20 13:21 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\wshbth.dll
2016-02-06 05:04 - 2010-11-20 13:21 - 00021504 _____ (Microsoft Corporation) C:\Windows\system32\wsdchngr.dll
2016-02-06 05:04 - 2010-11-20 13:21 - 00021504 _____ (Microsoft Corporation) C:\Windows\system32\TRAPI.dll
2016-02-06 05:04 - 2010-11-20 13:21 - 00020992 _____ (Microsoft Corporation) C:\Windows\system32\shgina.dll
2016-02-06 05:04 - 2010-11-20 13:21 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\schedcli.dll
2016-02-06 05:04 - 2010-11-20 13:21 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\wshirda.dll
2016-02-06 05:04 - 2010-11-20 13:21 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\shunimpl.dll
2016-02-06 05:04 - 2010-11-20 13:21 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\sscore.dll
2016-02-06 05:04 - 2010-11-20 13:21 - 00008704 _____ (Microsoft Corporation) C:\Windows\system32\riched32.dll
2016-02-06 05:04 - 2010-11-20 13:21 - 00008704 _____ (Microsoft Corporation) C:\Windows\system32\rdpcfgex.dll
2016-02-06 05:04 - 2010-11-20 13:20 - 00068096 _____ (Microsoft Corporation) C:\Windows\system32\napdsnap.dll
2016-02-06 05:04 - 2010-11-20 13:18 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\dsauth.dll
2016-02-06 05:04 - 2010-11-20 13:18 - 00023040 _____ (Microsoft Corporation) C:\Windows\system32\cscdll.dll
2016-02-06 05:04 - 2010-11-20 13:18 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\bitsperf.dll
2016-02-06 05:04 - 2010-11-20 13:18 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\C_ISCII.DLL
2016-02-06 05:04 - 2010-11-20 13:18 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\browseui.dll
2016-02-06 05:04 - 2010-11-20 13:17 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\LogonUI.exe
2016-02-06 05:04 - 2010-11-20 13:07 - 00007680 _____ (Microsoft Corporation) C:\Windows\system32\spwizres.dll
2016-02-06 05:04 - 2010-11-20 13:06 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\nlsbres.dll
2016-02-06 05:04 - 2010-11-20 13:05 - 00121856 _____ (Microsoft Corporation) C:\Windows\system32\RDPENCDD.dll
2016-02-06 05:04 - 2010-11-20 13:05 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\pifmgr.dll
2016-02-06 05:04 - 2010-11-20 13:00 - 00430080 _____ (Microsoft Corporation) C:\Windows\system32\imkr80.ime
2016-02-06 05:04 - 2010-11-20 13:00 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDSG.DLL
2016-02-06 05:04 - 2010-11-20 13:00 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\kbdlk41a.dll
2016-02-06 05:04 - 2010-11-20 13:00 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDCZ1.DLL
2016-02-06 05:04 - 2010-11-20 13:00 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDTUQ.DLL
2016-02-06 05:04 - 2010-11-20 13:00 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDTUF.DLL
2016-02-06 05:04 - 2010-11-20 13:00 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDSF.DLL
2016-02-06 05:04 - 2010-11-20 13:00 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDPO.DLL
2016-02-06 05:04 - 2010-11-20 13:00 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDNEPR.DLL
2016-02-06 05:04 - 2010-11-20 13:00 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDINBEN.DLL
2016-02-06 05:04 - 2010-11-20 13:00 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDGR1.DLL
2016-02-06 05:04 - 2010-11-20 13:00 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDGKL.DLL
2016-02-06 05:04 - 2010-11-20 13:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDUS.DLL
2016-02-06 05:04 - 2010-11-20 13:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDUGHR1.DLL
2016-02-06 05:04 - 2010-11-20 13:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDTURME.DLL
2016-02-06 05:04 - 2010-11-20 13:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDTAJIK.DLL
2016-02-06 05:04 - 2010-11-20 13:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDMON.DLL
2016-02-06 05:04 - 2010-11-20 13:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDMAORI.DLL
2016-02-06 05:04 - 2010-11-20 13:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDLT1.DLL
2016-02-06 05:04 - 2010-11-20 13:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDINTEL.DLL
2016-02-06 05:04 - 2010-11-20 13:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDINTAM.DLL
2016-02-06 05:04 - 2010-11-20 13:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDINORI.DLL
2016-02-06 05:04 - 2010-11-20 13:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDINMAR.DLL
2016-02-06 05:04 - 2010-11-20 13:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDINKAN.DLL
2016-02-06 05:04 - 2010-11-20 13:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDINHIN.DLL
2016-02-06 05:04 - 2010-11-20 13:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDBULG.DLL
2016-02-06 05:04 - 2010-11-20 13:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDBLR.DLL
2016-02-06 05:04 - 2010-11-20 13:00 - 00005632 _____ (Microsoft Corporation) C:\Windows\system32\KBDGEO.DLL
2016-02-06 05:04 - 2010-11-20 12:57 - 00002560 _____ (Microsoft Corporation) C:\Windows\system32\dpnaddr.dll
2016-02-06 05:04 - 2010-11-20 12:56 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\BlbEvents.dll
2016-02-06 05:04 - 2010-11-20 11:22 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\RDPCDD.sys
2016-02-06 05:04 - 2010-11-20 11:21 - 00026624 _____ (Microsoft Corporation) C:\Windows\system32\RDPREFDD.dll
2016-02-06 05:04 - 2010-11-20 11:21 - 00018432 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdpipe.sys
2016-02-06 05:04 - 2010-11-20 11:07 - 00118784 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndiswan.sys
2016-02-06 05:04 - 2010-11-20 11:07 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wanarp.sys
2016-02-06 05:04 - 2010-11-20 11:00 - 00304128 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\HdAudio.sys
2016-02-06 05:04 - 2010-11-20 11:00 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\umbus.sys
2016-02-06 05:04 - 2010-11-20 11:00 - 00025856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBCAMD2.sys
2016-02-06 05:04 - 2010-11-20 11:00 - 00025856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBCAMD.sys
2016-02-06 05:04 - 2010-11-20 10:59 - 00108544 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hdaudbus.sys
2016-02-06 05:04 - 2010-11-20 10:59 - 00024064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidusb.sys
2016-02-06 05:04 - 2010-11-20 10:50 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\kbdhid.sys
2016-02-06 05:04 - 2010-11-20 10:50 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\sffp_sd.sys
2016-02-06 05:04 - 2010-11-20 10:24 - 00026624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\scfilter.sys
2016-02-06 05:04 - 2010-11-20 10:19 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\IPMIDrv.sys
2016-02-06 05:04 - 2010-11-20 10:14 - 00116224 _____ (Microsoft Corporation) C:\Windows\system32\VmbusCoinstaller.dll
2016-02-06 05:04 - 2010-11-20 10:14 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\VmdCoinstall.dll
2016-02-06 05:04 - 2010-11-20 10:14 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\IcCoinstall.dll
2016-02-06 05:04 - 2010-11-20 10:14 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\VMBusHID.sys
2016-02-06 05:04 - 2010-11-20 10:14 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\vmbuspipe.dll
2016-02-06 05:04 - 2010-11-20 10:14 - 00005632 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vms3cap.sys
2016-02-06 05:04 - 2010-11-20 09:47 - 00010240 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\acpipmi.sys
2016-02-06 05:04 - 2010-11-05 03:20 - 00105559 _____ C:\Windows\system32\RacRules.xml
2016-02-05 16:02 - 2016-02-05 16:02 - 00000000 ____D C:\Program Files\Common Files\DESIGNER
2016-02-05 15:54 - 2016-02-05 15:54 - 00000000 ____D C:\Users\Default\AppData\Local\Microsoft Help
2016-02-05 15:54 - 2016-02-05 15:54 - 00000000 ____D C:\Users\Default User\AppData\Local\Microsoft Help
2016-02-05 15:45 - 2016-02-05 15:45 - 00000000 ____D C:\Users\Tina Thiel\AppData\Local\Adobe
2016-02-05 15:43 - 2016-02-10 08:58 - 00000000 ____D C:\Users\Tina Thiel\AppData\Roaming\Adobe
2016-02-05 15:34 - 2016-02-05 15:34 - 00002550 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Illustrator CS2.lnk
2016-02-05 15:33 - 2016-02-05 15:33 - 00000000 ____D C:\Windows\system32\Adobe
2016-02-05 15:33 - 2004-08-17 02:40 - 00016384 _____ C:\Windows\system32\FileOps.exe
2016-02-05 15:31 - 2016-02-05 15:31 - 00000997 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe InDesign CS2.lnk
2016-02-05 10:31 - 2016-02-05 10:31 - 00002015 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop CS2.lnk
2016-02-05 10:31 - 2016-02-05 10:31 - 00002012 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe ImageReady CS2.lnk
2016-02-05 10:29 - 2016-02-05 15:45 - 00000000 ____D C:\ProgramData\Adobe
2016-02-05 10:29 - 2016-02-05 15:33 - 00000000 ____D C:\Program Files\Common Files\Adobe
2016-02-05 10:29 - 2016-02-05 15:33 - 00000000 ____D C:\Program Files\Adobe
2016-02-05 10:29 - 2016-02-05 10:29 - 00001983 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Help Center.lnk
2016-02-05 10:29 - 2016-02-05 10:29 - 00001965 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Bridge.lnk
2016-02-05 10:29 - 2016-02-05 10:29 - 00000000 ____D C:\Users\Public\Documents\Adobe PDF
2016-02-05 10:29 - 2016-02-05 10:29 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe
2016-02-05 10:29 - 2016-02-05 10:29 - 00000000 ____D C:\Program Files\Common Files\Adobe Systems Shared
2016-02-05 10:28 - 2016-02-05 10:28 - 00000000 ____D C:\Program Files\InstallShield Installation Information
2016-02-05 09:19 - 2016-02-29 11:24 - 00000000 ___RD C:\Users\Tina Thiel\Dropbox
2016-02-05 09:19 - 2016-02-05 09:19 - 00001188 _____ C:\Users\Tina Thiel\Desktop\Dropbox.lnk
2016-02-05 09:16 - 2016-03-02 06:21 - 00001210 _____ C:\Windows\Tasks\DropboxUpdateTaskMachineUA.job
2016-02-05 09:16 - 2016-03-01 09:21 - 00001206 _____ C:\Windows\Tasks\DropboxUpdateTaskMachineCore.job
2016-02-05 09:16 - 2016-02-27 05:57 - 00000000 ____D C:\Users\Tina Thiel\AppData\Local\Dropbox
2016-02-05 09:16 - 2016-02-17 16:44 - 00000000 ____D C:\Program Files\Dropbox
2016-02-05 09:16 - 2016-02-05 09:16 - 00000000 ____D C:\Users\Tina Thiel\AppData\Roaming\Dropbox
2016-02-05 09:16 - 2016-02-05 09:16 - 00000000 ____D C:\ProgramData\Dropbox
2016-02-05 09:13 - 2016-02-15 05:23 - 00000000 ____D C:\Users\Tina Thiel\AppData\Roaming\Apple Computer
2016-02-05 09:13 - 2016-02-05 09:13 - 00000000 ____D C:\Users\Tina Thiel\AppData\Local\Apple Computer
2016-02-05 09:13 - 2016-02-05 09:13 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2016-02-05 09:13 - 2016-02-05 09:13 - 00000000 ____D C:\ProgramData\Apple Computer
2016-02-05 09:13 - 2016-02-05 09:13 - 00000000 ____D C:\Program Files\iTunes
2016-02-05 09:13 - 2016-02-05 09:13 - 00000000 ____D C:\Program Files\iPod
2016-02-05 09:12 - 2016-02-05 09:13 - 00000000 ____D C:\Program Files\Common Files\Apple
2016-02-05 09:12 - 2016-02-05 09:12 - 00002519 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk
2016-02-05 09:12 - 2016-02-05 09:12 - 00000000 ____D C:\Users\Tina Thiel\AppData\Local\Apple
2016-02-05 09:12 - 2016-02-05 09:12 - 00000000 ____D C:\ProgramData\Apple
2016-02-05 09:12 - 2016-02-05 09:12 - 00000000 ____D C:\Program Files\Bonjour
2016-02-05 09:12 - 2016-02-05 09:12 - 00000000 ____D C:\Program Files\Apple Software Update
2016-02-05 08:57 - 2016-02-05 08:57 - 00002144 _____ C:\Users\Public\Desktop\Silhouette Studio.lnk
2016-02-05 08:56 - 2016-02-05 08:57 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Silhouette Studio
2016-02-05 08:56 - 2016-02-05 08:56 - 00000000 ____D C:\Users\Tina Thiel\AppData\Roaming\Silhouette America
2016-02-05 08:56 - 2016-02-05 08:56 - 00000000 ____D C:\Program Files\Silhouette America
2016-02-05 08:52 - 2016-02-05 08:52 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\devolo
2016-02-05 08:52 - 2016-02-05 08:52 - 00000000 ____D C:\Program Files\devolo
2016-02-05 08:49 - 2016-02-05 08:49 - 00000957 _____ C:\Users\Public\Desktop\PDF Architect 4.lnk
2016-02-05 08:49 - 2016-02-05 08:49 - 00000000 ____D C:\ProgramData\pdfforge
2016-02-05 08:48 - 2016-02-08 16:02 - 00000000 ____D C:\Users\Tina Thiel\AppData\Roaming\PDF Architect 4
2016-02-05 08:48 - 2016-02-05 08:49 - 00000000 ____D C:\Program Files\PDF Architect 4
2016-02-05 08:48 - 2016-02-05 08:48 - 00000000 ____D C:\Users\Tina Thiel\Documents\PDF Architect
2016-02-05 08:48 - 2016-02-05 08:48 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDF Architect 4
2016-02-05 08:48 - 2016-02-05 08:48 - 00000000 ____D C:\Program Files\Common Files\PDF Software
2016-02-05 08:47 - 2016-02-08 16:02 - 00000000 ____D C:\ProgramData\PDF Architect 4
2016-02-05 08:47 - 2016-02-05 08:49 - 00000000 ____D C:\Program Files\PDFCreator
2016-02-05 08:47 - 2016-02-05 08:47 - 00101256 _____ (pdfforge GmbH) C:\Windows\system32\pdfcmon.dll
2016-02-05 08:47 - 2016-02-05 08:47 - 00000993 _____ C:\Users\Public\Desktop\PDFCreator.lnk
2016-02-05 08:47 - 2016-02-05 08:47 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDFCreator
2016-02-05 07:32 - 2016-02-05 07:32 - 00000000 ____D C:\Users\Tina Thiel\Documents\PE-DESIGN NEXT
2016-02-05 07:32 - 2016-02-05 07:32 - 00000000 ____D C:\ProgramData\Brother
2016-02-05 07:28 - 2016-02-05 07:28 - 00001982 _____ C:\Users\Public\Desktop\PE-DESIGN NEXT.lnk
2016-02-05 07:28 - 2016-02-05 07:28 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PE-DESIGN NEXT
2016-02-03 20:53 - 2016-02-03 20:54 - 00000000 ____D C:\Users\Tina Thiel\AppData\Roaming\Scribus
2016-02-03 20:48 - 2016-02-19 07:28 - 00108360 _____ C:\Users\Tina Thiel\AppData\Local\GDIPFONTCACHEV1.DAT
2016-02-03 20:00 - 2016-02-09 21:03 - 00000000 ____D C:\Program Files\Quark
2016-02-03 19:56 - 2016-02-03 19:56 - 00000000 ____D C:\Users\Tina Thiel\AppData\Roaming\CDZilla
2016-02-03 19:49 - 2016-02-08 15:42 - 00000000 ____D C:\Users\Tina Thiel\AppData\Roaming\elsterformular
2016-02-03 19:49 - 2016-02-03 19:50 - 00000000 ____D C:\ProgramData\elsterformular
2016-02-03 19:49 - 2016-02-03 19:49 - 00001191 _____ C:\Users\Public\Desktop\ElsterFormular.lnk
2016-02-03 19:49 - 2016-02-03 19:49 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ElsterFormular
2016-02-03 19:49 - 2016-02-03 19:49 - 00000000 ____D C:\Program Files\ElsterFormular
2016-02-03 19:42 - 2016-02-03 20:55 - 00000000 ____D C:\Windows\system32\appmgmt
2016-02-03 19:20 - 2016-02-05 07:28 - 00000000 ____D C:\Program Files\Common Files\BIL
2016-02-03 19:20 - 2016-02-03 19:20 - 00000000 ____D C:\Program Files\Brother
2016-02-03 17:12 - 2016-02-03 17:12 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
2016-02-03 17:11 - 2016-02-03 17:11 - 00000000 ____D C:\Windows\PCHEALTH
2016-02-03 17:10 - 2016-02-03 17:10 - 00000000 ____D C:\Program Files\Microsoft Analysis Services
2016-02-03 17:09 - 2016-02-03 17:11 - 00000000 ____D C:\Program Files\Microsoft Office
2016-02-03 17:09 - 2016-02-03 17:09 - 00000000 __RHD C:\MSOCache
2016-02-03 17:09 - 2016-02-03 17:09 - 00000000 ____D C:\Users\Tina Thiel\AppData\Local\Microsoft Help
2016-02-03 16:58 - 2015-11-05 12:23 - 00063680 _____ C:\Windows\system32\Drivers\fsbts.sys
2016-02-03 16:56 - 2016-02-03 16:56 - 00002171 _____ C:\Users\Public\Desktop\F-Secure.lnk
2016-02-03 16:56 - 2016-02-03 16:56 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\F-Secure
2016-02-03 16:56 - 2016-02-03 16:56 - 00000000 ____D C:\Program Files\F-Secure
2016-02-03 16:55 - 2016-02-09 21:27 - 00000000 ____D C:\Users\Tina Thiel\AppData\Local\F-Secure
2016-02-03 16:55 - 2016-02-03 16:58 - 00000000 ____D C:\ProgramData\F-Secure
2016-02-03 16:55 - 2016-02-03 16:55 - 00000000 ____D C:\Users\Tina Thiel\AppData\Local\FSDART
2016-02-03 16:51 - 2016-02-15 12:54 - 00000000 ____D C:\Program Files\Mozilla Firefox
2016-02-03 16:51 - 2016-02-10 04:45 - 00001023 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2016-02-03 16:51 - 2016-02-10 04:45 - 00001011 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2016-02-03 16:51 - 2016-02-03 16:57 - 00000000 ____D C:\Users\Tina Thiel\AppData\Local\Mozilla
2016-02-03 16:51 - 2016-02-03 16:51 - 00000000 ____D C:\Users\Tina Thiel\AppData\Roaming\Mozilla
2016-02-03 16:49 - 2015-12-02 13:25 - 00247976 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2016-02-03 16:36 - 2016-02-29 19:33 - 01618320 _____ C:\Windows\system32\PerfStringBackup.INI
2016-02-03 16:34 - 2016-02-10 04:45 - 00001150 _____ C:\Users\Tina Thiel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2016-02-03 16:33 - 2016-02-10 07:59 - 00000000 ____D C:\Users\Tina Thiel
2016-02-03 16:33 - 2016-02-05 15:45 - 00000000 ____D C:\Users\Tina Thiel\AppData\Local\VirtualStore
2016-02-03 16:33 - 2016-02-03 16:33 - 00000020 ___SH C:\Users\Tina Thiel\ntuser.ini
2016-02-03 16:33 - 2016-02-03 16:33 - 00000000 _SHDL C:\Users\Tina Thiel\Vorlagen
2016-02-03 16:33 - 2016-02-03 16:33 - 00000000 _SHDL C:\Users\Tina Thiel\Startmenü
2016-02-03 16:33 - 2016-02-03 16:33 - 00000000 _SHDL C:\Users\Tina Thiel\Netzwerkumgebung
2016-02-03 16:33 - 2016-02-03 16:33 - 00000000 _SHDL C:\Users\Tina Thiel\Lokale Einstellungen
2016-02-03 16:33 - 2016-02-03 16:33 - 00000000 _SHDL C:\Users\Tina Thiel\Eigene Dateien
2016-02-03 16:33 - 2016-02-03 16:33 - 00000000 _SHDL C:\Users\Tina Thiel\Druckumgebung
2016-02-03 16:33 - 2016-02-03 16:33 - 00000000 _SHDL C:\Users\Tina Thiel\Documents\Eigene Videos
2016-02-03 16:33 - 2016-02-03 16:33 - 00000000 _SHDL C:\Users\Tina Thiel\Documents\Eigene Musik
2016-02-03 16:33 - 2016-02-03 16:33 - 00000000 _SHDL C:\Users\Tina Thiel\Documents\Eigene Bilder
2016-02-03 16:33 - 2016-02-03 16:33 - 00000000 _SHDL C:\Users\Tina Thiel\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2016-02-03 16:33 - 2016-02-03 16:33 - 00000000 _SHDL C:\Users\Tina Thiel\AppData\Local\Verlauf
2016-02-03 16:33 - 2016-02-03 16:33 - 00000000 _SHDL C:\Users\Tina Thiel\AppData\Local\Anwendungsdaten
2016-02-03 16:33 - 2016-02-03 16:33 - 00000000 _SHDL C:\Users\Tina Thiel\Anwendungsdaten
2016-02-03 16:33 - 2016-02-03 16:33 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Videos
2016-02-03 16:33 - 2016-02-03 16:33 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Musik
2016-02-03 16:33 - 2016-02-03 16:33 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Bilder
2016-02-03 16:33 - 2016-02-03 16:33 - 00000000 _SHDL C:\Users\Default\Vorlagen
2016-02-03 16:33 - 2016-02-03 16:33 - 00000000 _SHDL C:\Users\Default\Startmenü
2016-02-03 16:33 - 2016-02-03 16:33 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung
2016-02-03 16:33 - 2016-02-03 16:33 - 00000000 _SHDL C:\Users\Default\Lokale Einstellungen
2016-02-03 16:33 - 2016-02-03 16:33 - 00000000 _SHDL C:\Users\Default\Eigene Dateien
2016-02-03 16:33 - 2016-02-03 16:33 - 00000000 _SHDL C:\Users\Default\Druckumgebung
2016-02-03 16:33 - 2016-02-03 16:33 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Videos
2016-02-03 16:33 - 2016-02-03 16:33 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Musik
2016-02-03 16:33 - 2016-02-03 16:33 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Bilder
2016-02-03 16:33 - 2016-02-03 16:33 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2016-02-03 16:33 - 2016-02-03 16:33 - 00000000 _SHDL C:\Users\Default\AppData\Local\Verlauf
2016-02-03 16:33 - 2016-02-03 16:33 - 00000000 _SHDL C:\Users\Default\AppData\Local\Anwendungsdaten
2016-02-03 16:33 - 2016-02-03 16:33 - 00000000 _SHDL C:\Users\Default\Anwendungsdaten
2016-02-03 16:33 - 2016-02-03 16:33 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Videos
2016-02-03 16:33 - 2016-02-03 16:33 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Musik
2016-02-03 16:33 - 2016-02-03 16:33 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Bilder
2016-02-03 16:33 - 2016-02-03 16:33 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2016-02-03 16:33 - 2016-02-03 16:33 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Verlauf
2016-02-03 16:33 - 2016-02-03 16:33 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Anwendungsdaten
2016-02-03 16:33 - 2016-02-03 16:33 - 00000000 _SHDL C:\ProgramData\Vorlagen
2016-02-03 16:33 - 2016-02-03 16:33 - 00000000 _SHDL C:\ProgramData\Startmenü
2016-02-03 16:33 - 2016-02-03 16:33 - 00000000 _SHDL C:\ProgramData\Microsoft\Windows\Start Menu\Programme
2016-02-03 16:33 - 2016-02-03 16:33 - 00000000 _SHDL C:\ProgramData\Favoriten
2016-02-03 16:33 - 2016-02-03 16:33 - 00000000 _SHDL C:\ProgramData\Dokumente
2016-02-03 16:33 - 2016-02-03 16:33 - 00000000 _SHDL C:\ProgramData\Anwendungsdaten
2016-02-03 16:33 - 2016-02-03 16:33 - 00000000 _SHDL C:\Program Files\Gemeinsame Dateien
2016-02-03 16:33 - 2009-07-14 09:56 - 00000000 ____D C:\Users\Tina Thiel\AppData\Roaming\Media Center Programs
2016-02-03 15:30 - 2016-02-03 15:30 - 00001345 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk
2016-02-03 15:30 - 2016-02-03 15:30 - 00001326 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk
2016-02-03 15:28 - 2016-02-03 15:28 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdFs_01_09_00.Wdf
2016-02-03 15:19 - 2016-02-03 16:33 - 00000000 ____D C:\Windows\Panther
2016-02-02 09:45 - 2016-02-02 09:45 - 00000000 __SHD C:\found.000
2016-02-01 07:39 - 2016-02-01 07:39 - 00000000 ____D C:\Windows.old
2016-02-01 07:28 - 2015-10-30 06:45 - 00000001 ___SH C:\BOOTNXT
2016-02-01 04:23 - 2016-02-01 04:23 - 00000000 ___HD C:\$Windows.~WS
2016-02-01 04:06 - 2016-02-01 04:51 - 00000000 ____D C:\ESD
2016-02-01 03:30 - 2016-02-01 03:30 - 00000000 _SHDL C:\Programme
2016-02-01 03:30 - 2016-02-01 03:30 - 00000000 _SHDL C:\Dokumente und Einstellungen
2016-02-01 03:14 - 2016-02-03 15:19 - 00008192 __RSH C:\BOOTSECT.BAK
2016-02-01 03:14 - 2015-10-30 06:40 - 00400228 __RSH C:\bootmgr

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2016-03-01 22:35 - 2009-07-14 05:34 - 00014944 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-03-01 22:35 - 2009-07-14 05:34 - 00014944 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-02-29 19:33 - 2009-07-14 09:47 - 00698688 _____ C:\Windows\system32\perfh007.dat
2016-02-29 19:33 - 2009-07-14 09:47 - 00148828 _____ C:\Windows\system32\perfc007.dat
2016-02-29 19:33 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\inf
2016-02-27 05:56 - 2009-07-14 05:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-02-19 07:24 - 2009-07-14 05:33 - 00387288 _____ C:\Windows\system32\FNTCACHE.DAT
2016-02-15 12:53 - 2009-07-14 03:37 - 00000000 ___HD C:\Windows\system32\GroupPolicy
2016-02-12 05:45 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\rescache
2016-02-12 04:29 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\AppCompat
2016-02-11 04:00 - 2009-07-14 09:57 - 00000000 ____D C:\Program Files\Windows Journal
2016-02-11 04:00 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\tracing
2016-02-11 03:59 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\system32\Dism
2016-02-11 03:59 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\system32\AdvancedInstallers
2016-02-11 03:59 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\PolicyDefinitions
2016-02-11 03:59 - 2009-07-14 03:37 - 00000000 ____D C:\Program Files\Common Files\System
2016-02-10 09:00 - 2009-07-14 03:04 - 00000403 _____ C:\Windows\win.ini
2016-02-10 04:21 - 2009-07-14 05:52 - 00000000 ____D C:\Program Files\Windows Defender
2016-02-07 03:32 - 2009-07-14 05:52 - 00000000 ____D C:\Program Files\Windows Sidebar
2016-02-07 03:32 - 2009-07-14 05:52 - 00000000 ____D C:\Program Files\Windows Portable Devices
2016-02-07 03:32 - 2009-07-14 05:52 - 00000000 ____D C:\Program Files\Windows Photo Viewer
2016-02-07 03:32 - 2009-07-14 05:52 - 00000000 ____D C:\Program Files\DVD Maker
2016-02-07 03:32 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\system32\sysprep
2016-02-07 03:32 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\system32\Setup
2016-02-07 03:32 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\system32\oobe
2016-02-07 03:32 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\system32\migwiz
2016-02-07 03:32 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\system32\manifeststore
2016-02-07 03:32 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\servicing
2016-02-07 03:13 - 2009-07-14 03:05 - 00152576 _____ (Microsoft Corporation) C:\Windows\system32\msclmd.dll
2016-02-03 20:52 - 2009-07-14 03:37 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2016-02-03 17:10 - 2009-07-14 09:57 - 00000000 ____D C:\Windows\ShellNew
2016-02-03 16:33 - 2009-07-14 03:37 - 00000000 __RHD C:\Users\Public\Libraries
2016-02-03 16:33 - 2009-07-14 03:37 - 00000000 ____D C:\Program Files\Windows NT
2016-02-03 15:27 - 2009-07-14 09:57 - 00000000 ____D C:\Windows\CSC
2016-02-03 15:19 - 2009-07-14 05:52 - 00028672 _____ C:\Windows\system32\config\BCD-Template

Einige Dateien in TEMP:
====================
C:\Users\Tina Thiel\AppData\Local\Temp\DRHelper_installFinish.exe
C:\Users\Tina Thiel\AppData\Local\Temp\DRHelper_installStart.exe
C:\Users\Tina Thiel\AppData\Local\Temp\DRHelper_uninstallComplete.exe
C:\Users\Tina Thiel\AppData\Local\Temp\Ec7N9rbI3D.exe
C:\Users\Tina Thiel\AppData\Local\Temp\ose00000.exe
C:\Users\Tina Thiel\AppData\Local\Temp\spark_install.exe
C:\Users\Tina Thiel\AppData\Local\Temp\sqlite3.dll
C:\Users\Tina Thiel\AppData\Local\Temp\v8OS9GKYT7.exe


==================== Bamital & volsnap =================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert


LastRegBack: 2016-02-28 00:56

==================== Ende vom FRST.txt ============================

Alt 02.03.2016, 10:12   #5
paeckchen1
 
Firefox öffnet selbstständig Internetseiten - Standard

Firefox öffnet selbstständig Internetseiten


Und hier noch die Addition-Datei:

Code:
ATTFilter
Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x86) Version:01-03-2016
durchgeführt von Tina Thiel (2016-03-02 06:23:05)
Gestartet von C:\Users\Tina Thiel\Downloads
Microsoft Windows 7 Professional  Service Pack 1 (X86) (2016-02-03 15:33:44)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-2503069186-1068286192-3510494515-500 - Administrator - Disabled)
Gast (S-1-5-21-2503069186-1068286192-3510494515-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-2503069186-1068286192-3510494515-1002 - Limited - Enabled)
Tina Thiel (S-1-5-21-2503069186-1068286192-3510494515-1000 - Administrator - Enabled) => C:\Users\Tina Thiel

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Antivirus by F-Secure (Enabled - Up to date) {0F70A6C4-76E4-6A3B-2695-519F428B1C20}
AS: Antivirus by F-Secure (Enabled - Up to date) {B4114720-50DE-65B5-1C25-6AED390C569D}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

7-Zip 15.14 (HKLM\...\7-Zip) (Version: 15.14 - Igor Pavlov)
Adobe Creative Suite 2 (HKLM\...\{0134A1A1-C283-4A47-91A1-92F19F960372}) (Version:  - )
Adobe SVG Viewer 3.0 (HKLM\...\Adobe SVG Viewer) (Version:  3.0 - Adobe Systems, Inc.)
Apple Application Support (32-Bit) (HKLM\...\{7FA9ECCF-A2DE-4DA1-BFF3-81260DBDA68F}) (Version: 4.1.2 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{9A629DCB-415D-4A50-85B9-5C2E4F8F74A8}) (Version: 9.1.0.6 - Apple Inc.)
Apple Software Update (HKLM\...\{FFD1F7F1-1AC9-4BC4-A908-0686D635ABAF}) (Version: 2.1.4.131 - Apple Inc.)
Audible Download Manager (HKLM\...\AudibleDownloadManager) (Version: 6.6.0.19 - Audible, Inc.)
Bonjour (HKLM\...\{D168AAD0-6686-47C1-B599-CDD4888B9D1A}) (Version: 3.1.0.1 - Apple Inc.)
Computer Security 14.150.101.0 (release) (Version: 14.150.101.0 - F-Secure Corporation) Hidden
devolo Cockpit (HKLM\...\dlancockpit) (Version: 4.3.1.0 - devolo AG)
Dropbox (HKLM\...\Dropbox) (Version: 3.14.7 - Dropbox, Inc.)
Dropbox Update Helper (Version: 1.3.27.77 - Dropbox, Inc.) Hidden
ElsterFormular (HKLM\...\ElsterFormular) (Version: 17.0.4.20160106 - Landesfinanzdirektion Thüringen)
F-Secure (HKLM\...\F-Secure ServiceEnabler 666) (Version: 2.50.208.0 - F-Secure Corporation)
F-Secure (Version: 2.50.208.0 - F-Secure Corporation) Hidden
F-Secure CCF Reputation (Version: 2.0.1337.0 - F-Secure) Hidden
F-Secure CCF Scanning 1.72.115.709 (release) (Version: 1.72.115.709 - F-Secure Corporation) Hidden
F-Secure Network CCF 1.04.119 (Version: 1.04.119 - F-Secure Corporation) Hidden
F-Secure SafeSearch 1.07.110.0 (release) (Version: 1.07.110.0 - F-Secure Corporation) Hidden
iTunes (HKLM\...\{2C741651-87E0-4479-9703-6DD0D7988B84}) (Version: 12.3.2.35 - Apple Inc.)
Manager (Version: 4.0.1.25166 - 2015 pdfforge GmbH. All rights reserved) Hidden
Microsoft .NET Framework 4.6.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.6.01055 - Microsoft Corporation)
Microsoft .NET Framework 4.6.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.6.01055 - Microsoft Corporation)
Microsoft Office Home and Student 2010 (HKLM\...\Office14.SingleImage) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x86) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x86)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x86) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x86) Language Pack - DEU) (Version: 10.0.50903 - Microsoft Corporation)
Mozilla Firefox 44.0.2 (x86 de) (HKLM\...\Mozilla Firefox 44.0.2 (x86 de)) (Version: 44.0.2 - Mozilla)
Online Safety 2.150.3659.2518 (Version: 2.150.3659.2518 - F-Secure Corporation) Hidden
paint.net (HKLM\...\{DADC2AF6-DC9F-4BCF-BFCE-DCEC16EF507B}) (Version: 4.0.9 - dotPDN LLC)
PDF Architect 4 (HKLM\...\PDF Architect 4) (Version: 4.0.34.26215 - pdfforge GmbH)
PDF Architect 4 Create Module (Version: 4.0.12.26604 - pdfforge GmbH) Hidden
PDF Architect 4 Edit Module (Version: 4.0.12.26604 - pdfforge GmbH) Hidden
PDF Architect 4 View Module (Version: 4.0.12.26604 - pdfforge GmbH) Hidden
PDFCreator (HKLM\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 2.2.2 - pdfforge)
PE-DESIGN NEXT (HKLM\...\{041EDAC5-853E-4A10-A0C8-ED0CF7769306}) (Version: 9.01.0000 - Brother Industries, Ltd.)
Quark Update (HKLM\...\{82154114-943B-4A6F-9B20-073C9573E93E}) (Version: 1.0.0.2 - Ihr Firmenname)
QuarkXPress (HKLM\...\{EACCA5D3-5E48-4181-B953-1842BA6FED32}) (Version: 10.5.2.0 - Quark Software Inc.)
QuarkXPress Document Converter (HKLM\...\{B9CB6B1B-0C6D-4D28-87FD-CE5EDE953473}) (Version: 1.0 - Ihr Firmenname)
QuickTime (HKLM\...\{B67BAFBA-4C9F-48FA-9496-933E3B255044}) (Version: 7.74.80.86 - Apple Inc.)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version:  - Microsoft)
Silhouette Studio (HKLM\...\{D730B479-9A4C-492F-B518-BFC9186B3618}) (Version: 3.6.057 - Silhouette America)
Suite Specific (Version: 2.0.0 - Adobe Systems, Incorporated) Hidden
TeamViewer 11 (HKLM\...\TeamViewer) (Version: 11.0.55321 - TeamViewer)
WinRAR 5.31 (32-Bit) (HKLM\...\WinRAR archiver) (Version: 5.31.0 - win.rar GmbH)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {008DC6A8-EB53-467B-BD99-AF8D8E20BD1F} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2015-08-27] (Apple Inc.)
Task: {15239642-600C-4EA3-A871-6F2E1F0B8C9F} - System32\Tasks\DropboxUpdateTaskMachineUA => C:\Program Files\Dropbox\Update\DropboxUpdate.exe [2016-02-05] (Dropbox, Inc.)
Task: {1CBE49D6-6CAA-493D-A5BB-941EF0E60F4B} - System32\Tasks\{13CBB859-99D7-403F-9FC8-CED8DEE3309D} => pcalua.exe -a "C:\Users\Tina Thiel\Desktop\Photoshop\CS2_RetNon_Ger_3.exe" -d "C:\Users\Tina Thiel\Desktop\Photoshop"
Task: {293A4FD6-C15B-40F9-BB0B-D45372439EB8} - System32\Tasks\{0FB712BC-FB48-4817-8AF7-387B3A2FC106} => pcalua.exe -a "C:\Users\Tina Thiel\Desktop\Photoshop\CS2_RetNon_Ger_2.exe" -d "C:\Users\Tina Thiel\Desktop\Photoshop"
Task: {5FB2F96D-5573-4C3F-99FA-02FA0AC914FA} - System32\Tasks\Quark Updater => C:\Program Files\Quark\Quark Update\AutoUpdate.exe [2011-11-25] ()
Task: {8B6AB2C8-1AA8-4F1B-8601-22489D34F095} - System32\Tasks\{97F2E282-D0DC-44A7-A22E-4A803304BFBA} => pcalua.exe -a "C:\Users\Tina Thiel\Desktop\Photoshop\CS_2.0_GR_Extras_1.exe" -d "C:\Users\Tina Thiel\Desktop\Photoshop"
Task: {DA51EE5B-CE6E-4E7B-8C14-4D9930D5CC90} - System32\Tasks\DropboxUpdateTaskMachineCore => C:\Program Files\Dropbox\Update\DropboxUpdate.exe [2016-02-05] (Dropbox, Inc.)

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\Windows\Tasks\DropboxUpdateTaskMachineCore.job => C:\Program Files\Dropbox\Update\DropboxUpdate.exe
Task: C:\Windows\Tasks\DropboxUpdateTaskMachineUA.job => C:\Program Files\Dropbox\Update\DropboxUpdate.exe
Task: C:\Windows\Tasks\Quark Updater.job => C:\Program Files\Quark\Quark Update\AutoUpdate.exe

==================== Verknüpfungen =============================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2005-04-06 16:52 - 2005-04-06 16:52 - 00028791 _____ () c:\Program Files\Adobe\Adobe Version Cue CS2\jre\bin\hpi.dll
2005-04-06 16:53 - 2005-04-06 16:53 - 00057453 _____ () c:\Program Files\Adobe\Adobe Version Cue CS2\jre\bin\verify.dll
2005-04-06 16:53 - 2005-04-06 16:53 - 00102515 _____ () c:\Program Files\Adobe\Adobe Version Cue CS2\jre\bin\java.dll
2005-04-06 16:53 - 2005-04-06 16:53 - 00053364 _____ () c:\Program Files\Adobe\Adobe Version Cue CS2\jre\bin\zip.dll
2005-04-06 16:53 - 2005-04-06 16:53 - 00057455 _____ () C:\Program Files\Adobe\Adobe Version Cue CS2\jre\bin\net.dll
2005-04-06 16:53 - 2005-04-06 16:53 - 00032880 _____ () C:\Program Files\Adobe\Adobe Version Cue CS2\jre\bin\nio.dll
2005-04-06 16:53 - 2005-04-06 16:53 - 00434255 _____ () c:\Program Files\Adobe\Adobe Version Cue CS2\bin\ps-rw-vc-v8_58.dll
2005-04-06 16:53 - 2005-04-06 16:53 - 01019904 _____ () c:\Program Files\Adobe\Adobe Version Cue CS2\bin\ps-vc-v8_58.dll
2015-12-17 18:39 - 2015-12-17 18:39 - 00073512 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2015-12-17 18:39 - 2015-12-17 18:39 - 01040144 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2016-02-03 16:58 - 2015-11-24 11:26 - 00072744 _____ () C:\Program Files\F-Secure\Internet Security\apps\ComputerSecurity\Anti-Virus\FSAVHRES.eng
2015-11-10 13:16 - 2015-11-10 13:16 - 00248872 _____ () C:\Program Files\F-Secure\Internet Security\daas2.dll
2016-02-05 09:17 - 2016-01-12 19:44 - 00034768 _____ () C:\Program Files\Dropbox\Client\_multiprocessing.pyd
2016-02-17 16:44 - 2016-01-12 19:45 - 00019408 _____ () C:\Program Files\Dropbox\Client\faulthandler.pyd
2016-02-17 16:44 - 2016-01-12 19:44 - 00116688 _____ () C:\Program Files\Dropbox\Client\pywintypes27.dll
2016-02-05 09:17 - 2016-01-12 19:44 - 00093640 _____ () C:\Program Files\Dropbox\Client\_ctypes.pyd
2016-02-05 09:17 - 2016-01-12 19:44 - 00018376 _____ () C:\Program Files\Dropbox\Client\select.pyd
2016-02-05 09:17 - 2016-02-16 19:39 - 00019760 _____ () C:\Program Files\Dropbox\Client\tornado.speedups.pyd
2016-02-05 09:17 - 2016-01-12 19:46 - 00105928 _____ () C:\Program Files\Dropbox\Client\win32api.pyd
2016-02-17 16:44 - 2016-01-12 19:44 - 00392144 _____ () C:\Program Files\Dropbox\Client\pythoncom27.dll
2016-02-05 09:17 - 2016-02-16 19:39 - 00381752 _____ () C:\Program Files\Dropbox\Client\win32com.shell.shell.pyd
2016-02-05 09:17 - 2016-01-12 19:44 - 00692688 _____ () C:\Program Files\Dropbox\Client\unicodedata.pyd
2016-02-17 16:44 - 2016-02-16 19:38 - 00020816 _____ () C:\Program Files\Dropbox\Client\cryptography.hazmat.bindings._constant_time.pyd
2016-02-05 09:17 - 2016-01-12 19:45 - 00112592 _____ () C:\Program Files\Dropbox\Client\_cffi_backend.pyd
2016-02-17 16:44 - 2016-02-16 19:38 - 01682760 _____ () C:\Program Files\Dropbox\Client\cryptography.hazmat.bindings._openssl.pyd
2016-02-17 16:44 - 2016-02-16 19:38 - 00020808 _____ () C:\Program Files\Dropbox\Client\cryptography.hazmat.bindings._padding.pyd
2016-02-05 09:17 - 2016-02-16 19:39 - 00020800 _____ () C:\Program Files\Dropbox\Client\_cffi_python_x66cf7a7cx17a72769.pyd
2016-02-05 09:17 - 2016-02-16 19:39 - 00021840 _____ () C:\Program Files\Dropbox\Client\_cffi_unicode_environ_win32_x8bf8e68bx9968e850.pyd
2016-02-17 16:44 - 2016-02-16 19:39 - 00038696 _____ () C:\Program Files\Dropbox\Client\fastpath.pyd
2016-02-17 16:44 - 2016-01-12 19:46 - 00020936 _____ () C:\Program Files\Dropbox\Client\mmapfile.pyd
2016-02-05 09:17 - 2016-01-12 19:46 - 00024528 _____ () C:\Program Files\Dropbox\Client\win32event.pyd
2016-02-05 09:17 - 2016-01-12 19:47 - 00114640 _____ () C:\Program Files\Dropbox\Client\win32security.pyd
2016-02-05 09:17 - 2016-01-12 19:46 - 00124880 _____ () C:\Program Files\Dropbox\Client\win32file.pyd
2016-02-12 04:44 - 2016-02-16 19:39 - 00021832 _____ () C:\Program Files\Dropbox\Client\_cffi_pywin_kernel32_x64d8f881xc8c369be.pyd
2016-02-05 09:17 - 2016-01-12 19:46 - 00024016 _____ () C:\Program Files\Dropbox\Client\win32clipboard.pyd
2016-02-05 09:17 - 2016-01-12 19:46 - 00175560 _____ () C:\Program Files\Dropbox\Client\win32gui.pyd
2016-02-05 09:17 - 2016-01-12 19:47 - 00030160 _____ () C:\Program Files\Dropbox\Client\win32pipe.pyd
2016-02-05 09:17 - 2016-01-12 19:47 - 00043472 _____ () C:\Program Files\Dropbox\Client\win32process.pyd
2016-02-05 09:17 - 2016-01-12 19:47 - 00028616 _____ () C:\Program Files\Dropbox\Client\win32ts.pyd
2016-02-05 09:17 - 2016-01-12 19:47 - 00048592 _____ () C:\Program Files\Dropbox\Client\win32service.pyd
2016-02-17 16:44 - 2016-02-16 19:39 - 00026456 _____ () C:\Program Files\Dropbox\Client\dropbox.infinite.win.compiled._driverinstallation.pyd
2016-02-05 09:17 - 2016-01-12 19:46 - 00057808 _____ () C:\Program Files\Dropbox\Client\win32evtlog.pyd
2016-02-05 09:17 - 2016-01-12 19:47 - 00024016 _____ () C:\Program Files\Dropbox\Client\win32profile.pyd
2016-02-17 16:44 - 2016-02-16 19:38 - 00117056 _____ () C:\Program Files\Dropbox\Client\breakpad.client.windows.handler.pyd
2016-02-17 16:44 - 2016-02-16 19:39 - 00024392 _____ () C:\Program Files\Dropbox\Client\librsyncffi.compiled._librsyncffi.pyd
2016-02-17 16:44 - 2016-01-12 19:47 - 00036296 _____ () C:\Program Files\Dropbox\Client\librsync.dll
2016-02-05 09:17 - 2016-02-16 19:39 - 00023376 _____ () C:\Program Files\Dropbox\Client\winscreenshot.compiled._CaptureScreenshot.pyd
2016-02-05 09:17 - 2016-01-12 19:44 - 00134608 _____ () C:\Program Files\Dropbox\Client\_elementtree.pyd
2016-02-17 16:44 - 2016-01-12 19:44 - 00134088 _____ () C:\Program Files\Dropbox\Client\pyexpat.pyd
2016-02-17 16:44 - 2016-01-12 19:45 - 00240584 _____ () C:\Program Files\Dropbox\Client\jpegtran.pyd
2016-02-17 16:44 - 2016-02-16 19:39 - 00052024 _____ () C:\Program Files\Dropbox\Client\psutil._psutil_windows.pyd
2016-02-12 04:44 - 2016-02-16 19:39 - 00020800 _____ () C:\Program Files\Dropbox\Client\winffi.iphlpapi._winffi_iphlpapi.pyd
2016-02-12 04:44 - 2016-02-16 19:39 - 00021824 _____ () C:\Program Files\Dropbox\Client\winffi.kernel32._winffi_kernel32.pyd
2016-02-12 04:44 - 2016-02-16 19:39 - 00019776 _____ () C:\Program Files\Dropbox\Client\winffi.winerror._winffi_winerror.pyd
2016-02-12 04:44 - 2016-02-16 19:39 - 00020800 _____ () C:\Program Files\Dropbox\Client\winffi.wininet._winffi_wininet.pyd
2016-02-17 16:44 - 2016-02-16 19:38 - 00020280 _____ () C:\Program Files\Dropbox\Client\cpuid.compiled._cpuid.pyd
2016-02-05 09:17 - 2016-01-12 19:47 - 00350152 _____ () C:\Program Files\Dropbox\Client\winxpgui.pyd
2016-02-12 04:44 - 2016-02-16 19:39 - 00022352 _____ () C:\Program Files\Dropbox\Client\winverifysignature.compiled._VerifySignature.pyd
2016-02-17 16:44 - 2016-02-16 19:39 - 00084792 _____ () C:\Program Files\Dropbox\Client\dropbox_sqlite_ext.DLL
2016-02-17 16:44 - 2016-02-16 19:39 - 01826096 _____ () C:\Program Files\Dropbox\Client\PyQt5.QtCore.pyd
2016-02-05 09:17 - 2016-01-12 19:45 - 00083912 _____ () C:\Program Files\Dropbox\Client\sip.pyd
2016-02-17 16:44 - 2016-02-16 19:39 - 03928880 _____ () C:\Program Files\Dropbox\Client\PyQt5.QtWidgets.pyd
2016-02-17 16:44 - 2016-02-16 19:39 - 01971504 _____ () C:\Program Files\Dropbox\Client\PyQt5.QtGui.pyd
2016-02-17 16:44 - 2016-02-16 19:39 - 00531248 _____ () C:\Program Files\Dropbox\Client\PyQt5.QtNetwork.pyd
2016-02-17 16:44 - 2016-02-16 19:39 - 00132912 _____ () C:\Program Files\Dropbox\Client\PyQt5.QtWebKit.pyd
2016-02-17 16:44 - 2016-02-16 19:39 - 00223544 _____ () C:\Program Files\Dropbox\Client\PyQt5.QtWebKitWidgets.pyd
2016-02-17 16:44 - 2016-02-16 19:39 - 00207672 _____ () C:\Program Files\Dropbox\Client\PyQt5.QtPrintSupport.pyd
2016-02-17 16:44 - 2016-02-16 19:39 - 00158008 _____ () C:\Program Files\Dropbox\Client\PyQt5.QtWebEngineWidgets.pyd
2016-02-17 16:44 - 2016-02-16 19:39 - 00042808 _____ () C:\Program Files\Dropbox\Client\PyQt5.QtWebChannel.pyd
2016-02-17 16:44 - 2016-01-12 19:49 - 00017864 _____ () C:\Program Files\Dropbox\Client\libEGL.dll
2016-02-17 16:44 - 2016-01-12 19:49 - 01631184 _____ () C:\Program Files\Dropbox\Client\libGLESv2.dll
2016-02-05 09:17 - 2016-02-16 19:39 - 00024904 _____ () C:\Program Files\Dropbox\Client\_cffi_wpad_proxy_win_x752e3d61xdcfdcc84.pyd
2016-02-17 16:44 - 2016-02-16 19:39 - 00546096 _____ () C:\Program Files\Dropbox\Client\PyQt5.QtQuick.pyd
2016-02-17 16:44 - 2016-02-16 19:39 - 00357680 _____ () C:\Program Files\Dropbox\Client\PyQt5.QtQml.pyd
2016-02-05 09:17 - 2016-01-12 19:52 - 00697304 _____ () C:\Program Files\Dropbox\Client\QtQuick\Controls\qtquickcontrolsplugin.dll
2005-04-06 16:53 - 2005-04-06 16:53 - 03502080 _____ () c:\Program Files\Adobe\Adobe Version Cue CS2\data\database\bin\mysqld-nt.exe
2016-02-03 17:01 - 2016-02-03 17:01 - 00091176 _____ () C:\Program Files\F-Secure\Internet Security\apps\ComputerSecurity\Anti-Virus\minifilter\hashlib_x86.dll
2016-02-03 16:58 - 2016-02-03 17:01 - 00177704 _____ () C:\Program Files\F-Secure\Internet Security\apps\ComputerSecurity\Gemini\fsgem.dll
2016-02-03 16:58 - 2016-02-03 17:01 - 00212008 _____ () C:\Program Files\F-Secure\Internet Security\apps\ComputerSecurity\Spam Control\fsas.dll
2016-02-03 16:58 - 2016-02-03 17:01 - 00929832 _____ () C:\Program Files\F-Secure\Internet Security\apps\ComputerSecurity\Anti-Virus\fm4av.dll
2016-01-15 17:53 - 2016-01-15 17:53 - 00194048 _____ () C:\Program Files\PDF Architect 4\libidn.dll
2015-10-28 14:28 - 2015-10-28 14:28 - 66219536 _____ () C:\Program Files\Silhouette America\Silhouette Studio\Silhouette Studio.exe
2015-10-28 14:21 - 2015-10-28 14:21 - 01865216 ____N () C:\Program Files\Silhouette America\Silhouette Studio\Silhouette Studio Libs\RBGUIFramework.dll
2015-10-28 14:21 - 2015-10-28 14:21 - 00096256 ____N () C:\Program Files\Silhouette America\Silhouette Studio\Silhouette Studio Libs\Appearance Pak.dll
2015-10-28 14:21 - 2015-10-28 14:21 - 00088576 ____N () C:\Program Files\Silhouette America\Silhouette Studio\Silhouette Studio Libs\Crypto.dll
2015-10-28 14:21 - 2015-10-28 14:21 - 00137216 ____N () C:\Program Files\Silhouette America\Silhouette Studio\Silhouette Studio Libs\Browser Plugin.dll
2015-10-28 14:21 - 2015-10-28 14:21 - 00013824 ____N () C:\Program Files\Silhouette America\Silhouette Studio\Silhouette Studio Libs\Internet Encodings.dll
2015-10-28 14:21 - 2015-10-28 14:21 - 00031744 ____N () C:\Program Files\Silhouette America\Silhouette Studio\Silhouette Studio Libs\Shell.dll
2015-10-28 14:21 - 2015-10-28 14:21 - 01418398 ____N () C:\Program Files\Silhouette America\Silhouette Studio\Silhouette Studio Libs\SSLSocket.dll
2015-10-28 14:21 - 2015-10-28 14:21 - 00293376 ____N () C:\Program Files\Silhouette America\Silhouette Studio\Silhouette Studio Libs\XML.dll
2015-10-28 14:21 - 2015-10-28 14:21 - 00077824 ____N () C:\Program Files\Silhouette America\Silhouette Studio\Silhouette Studio Libs\RBAutoProxySetup.dll
2015-10-28 14:21 - 2015-10-28 14:21 - 00462336 ____N () C:\Program Files\Silhouette America\Silhouette Studio\libFreeType-6.dll
2015-10-28 14:21 - 2015-10-28 14:21 - 01129984 ____N () C:\Program Files\Silhouette America\Silhouette Studio\aspx_cdr_lib.dll
2015-10-28 14:21 - 2015-10-28 14:21 - 00355328 ____N () C:\Program Files\Silhouette America\Silhouette Studio\aspx_hunspell_lib.dll
2015-10-28 14:28 - 2015-10-28 14:28 - 05107472 _____ () C:\Program Files\Silhouette America\Silhouette Studio\Resources\Resources\SPEC_ANY\AH\aspex_helper.exe
2015-10-28 14:21 - 2015-10-28 14:21 - 01865216 ____N () C:\Program Files\Silhouette America\Silhouette Studio\Resources\Resources\SPEC_ANY\AH\aspex_helper Libs\RBGUIFramework.dll
2015-10-28 14:21 - 2015-10-28 14:21 - 00096256 ____N () C:\Program Files\Silhouette America\Silhouette Studio\Resources\Resources\SPEC_ANY\AH\aspex_helper Libs\Appearance Pak.dll
2015-10-28 14:21 - 2015-10-28 14:21 - 00013824 ____N () C:\Program Files\Silhouette America\Silhouette Studio\Resources\Resources\SPEC_ANY\AH\aspex_helper Libs\Internet Encodings.dll
2015-10-28 14:21 - 2015-10-28 14:21 - 00031744 ____N () C:\Program Files\Silhouette America\Silhouette Studio\Resources\Resources\SPEC_ANY\AH\aspex_helper Libs\Shell.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)

AlternateDataStreams: C:\Users\Tina Thiel\Desktop\10 Euro 001.jpg:com.dropbox.attributes
AlternateDataStreams: C:\Users\Tina Thiel\Desktop\20 Euro 001.jpg:com.dropbox.attributes
AlternateDataStreams: C:\Users\Tina Thiel\Desktop\5 Euro 001.jpg:com.dropbox.attributes

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)


==================== EXE Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)


==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)


==================== Hosts Inhalt: ===============================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2009-07-14 03:04 - 2016-02-15 12:57 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts


==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-2503069186-1068286192-3510494515-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Tina Thiel\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.178.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)


==================== FirewallRules (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [SPPSVC-In-TCP] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [SPPSVC-In-TCP-NoScope] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [{58423BA6-D2B6-4DBC-8530-BE24A23330D9}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{AFEE739B-940B-4F90-972B-15832F177BFC}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{70FEC98C-F44C-43CF-A9B2-62383E40C043}] => (Allow) C:\Program Files\devolo\dlan\devolonetsvc.exe
FirewallRules: [{D4D39338-EFE9-409B-B436-3B3F50BF2EF6}] => (Allow) C:\Program Files\devolo\dlan\devolonetsvc.exe
FirewallRules: [{AA8E020B-7C17-4D54-92EB-97C617D2E924}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{3902AC9E-F9B6-48C4-9559-302147708974}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{998DC7C3-F363-4629-A62B-D6AFBD8D0BAB}] => (Allow) C:\Program Files\iTunes\iTunes.exe
FirewallRules: [{4198C64E-45BD-4B27-906B-98C298E2313C}] => (Allow) C:\Program Files\Adobe\Adobe Version Cue CS2\bin\VersionCueCS2.exe
FirewallRules: [{2713E47A-E645-4099-B752-C84691C20D6F}] => (Allow) C:\Program Files\Adobe\Adobe Version Cue CS2\bin\VersionCueCS2.exe
FirewallRules: [{E902CC6C-1588-49FA-B152-18E6D7B2B601}] => (Allow) C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
FirewallRules: [{1FB8F217-C3AF-4047-B3D8-E8E46CCDAE05}] => (Allow) C:\Program Files\baidu\Baidu Browser\Spark.exe
FirewallRules: [{B75EF00E-3CB7-4053-94A5-071749E7FFEA}] => (Allow) C:\Program Files\baidu\Baidu Browser\Spark.exe
FirewallRules: [{F3D10085-A743-487C-9150-8A05D621B4BE}] => (Allow) C:\Program Files\Dropbox\Client\Dropbox.exe
FirewallRules: [{6B33CC71-3858-4D98-A004-251F222C4ADD}] => (Allow) C:\Program Files\TeamViewer\TeamViewer.exe
FirewallRules: [{6D22704E-CD13-4B75-91CA-602D65369900}] => (Allow) C:\Program Files\TeamViewer\TeamViewer.exe
FirewallRules: [{63E4E1B3-E152-4F2F-9BD1-045A77BA9906}] => (Allow) C:\Program Files\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{DD05C7BB-35BA-4A47-9678-565219E92E1B}] => (Allow) C:\Program Files\TeamViewer\TeamViewer_Service.exe

==================== Wiederherstellungspunkte =========================

19-02-2016 09:04:38 Geplanter Prüfpunkt
24-02-2016 10:40:44 Uniblue PC Mechanic installation
27-02-2016 03:00:10 Windows Update

==================== Fehlerhafte Geräte im Gerätemanager =============

Name: PS/2-kompatible Maus
Description: PS/2-kompatible Maus
Class Guid: {4d36e96f-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: i8042prt
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (02/27/2016 05:57:10 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Unexpected conflict discarding   17 21.178.168.192.in-addr.arpa. PTR TT-Keller.local.

Error: (02/27/2016 05:57:10 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Received from 192.168.178.21:5353   19 21.178.168.192.in-addr.arpa. PTR TT-Keller-2.local.

Error: (02/24/2016 10:40:43 AM) (Source: VSS) (EventID: 8194) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Abfragen nach der Schnittstelle "IVssWriterCallback" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070005, Zugriff verweigert
.
Die Ursache hierfür ist oft eine falsche Sicherheitseinstellung im Schreib- oder Anfrageprozess.


Vorgang:
   Generatordaten werden gesammelt

Kontext:
   Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
   Generatorname: System Writer
   Generatorinstanz-ID: {b1641eb2-4cc0-4ba9-9df1-ae0218b5f60f}

Error: (02/19/2016 07:25:03 AM) (Source: Adobe Version Cue CS2) (EventID: 3) (User: )
Description: VersionCueCS2.exe: JVM aborted!

Error: (02/19/2016 07:25:03 AM) (Source: Adobe Version Cue CS2) (EventID: 3) (User: )
Description: VersionCueCS2.exe: JVM aborted!

Error: (02/19/2016 07:25:03 AM) (Source: Adobe Version Cue CS2) (EventID: 3) (User: )
Description: VersionCueCS2.exe:

Error: (02/19/2016 07:25:03 AM) (Source: Adobe Version Cue CS2) (EventID: 3) (User: )
Description: VersionCueCS2.exe:  [0x18010000, 0x18612510, 0x18612600, 0x18650000)

Error: (02/19/2016 07:25:03 AM) (Source: Adobe Version Cue CS2) (EventID: 3) (User: )
Description: VersionCueCS2.exe:  space 6400K,  96% used

Error: (02/19/2016 07:25:03 AM) (Source: Adobe Version Cue CS2) (EventID: 3) (User: )
Description: VersionCueCS2.exe:    the

Error: (02/19/2016 07:25:03 AM) (Source: Adobe Version Cue CS2) (EventID: 3) (User: )
Description: VersionCueCS2.exe:  [0x18010000, 0x18650000, 0x1c010000)


Systemfehler:
=============
Error: (02/27/2016 05:55:54 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Windows Media Player-Netzwerkfreigabedienst" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%3

Error: (02/27/2016 05:55:54 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Windows Search" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%3

Error: (02/27/2016 05:55:23 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Media Player-Netzwerkfreigabedienst" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 30000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (02/27/2016 05:55:23 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Search" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 30000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (02/27/2016 05:55:23 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "iPod-Dienst" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (02/27/2016 05:55:23 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "F-Secure Management Agent" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (02/27/2016 05:55:23 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "PDF Architect 4 Manager" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (02/27/2016 05:55:23 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "PDF Architect 4 Creator" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (02/27/2016 05:55:23 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "F-Secure ORSP Client" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 5000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (02/27/2016 05:55:23 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "F-Secure Dll Hoster" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.


==================== Memory info =========================== 

Processor: Intel(R) Core(TM)2 Duo CPU E8400 @ 3.00GHz
Prozentuale Nutzung des RAM: 68%
Installierter physikalischer RAM: 3567.34 MB
Verfügbarer physikalischer RAM: 1113 MB
Summe virtueller Speicher: 7132.99 MB
Verfügbarer virtueller Speicher: 4283.8 MB

==================== Laufwerke ================================

Drive c: () (Fixed) (Total:220.87 GB) (Free:147.61 GB) NTFS ==>[Laufwerk mit Startkomponenten (eingeholt von BCD)]
Drive d: (HP_RECOVERY) (Fixed) (Total:12 GB) (Free:11.96 GB) NTFS

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 232.9 GB) (Disk ID: 2DAF2DAF)
Partition 1: (Active) - (Size=220.9 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=12 GB) - (Type=07 NTFS)

==================== Ende vom Addition.txt ============================


Vielen Dank!!!!


Alt 02.03.2016, 10:31   #6
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
Firefox öffnet selbstständig Internetseiten - Standard

Firefox öffnet selbstständig Internetseiten


Hast du noch weitere Logs (mit Funden)? Malwarebytes und/oder andere Virenscanner, sind die mal fündig geworden?

Ich frage deswegen nach => http://www.trojaner-board.de/125889-...tml#post941520

Bitte keine neuen Virenscans machen sondern erst nur schon vorhandene Logs in CODE-Tags posten!
Relevant sind nur Logs der letzten 7 Tage bzw. seitdem das Problem besteht!
__________________
--> Firefox öffnet selbstständig Internetseiten

Alt 02.03.2016, 11:35   #7
paeckchen1
 
Firefox öffnet selbstständig Internetseiten - Standard

Firefox öffnet selbstständig Internetseiten


Ich habe am 27.02.2016 den Adware Cleaner laufen lassen, der aber nichts gefunden hat, bzw. nichts zum Löschen angeboten hat
Die dazugehörige Datei, die nach dem Neustart angezeigt wurde finde ich nicht mehr... Ich glaube, dass ich sie einfach geschlossen habe und jetzt habe ich keine Idee, wo sie abgespeichtert wurde.
Sorry, ich bin etwas planlos unterwegs.

Oh... hab doch etwas gefunden... Kommt direkt:

Code:
ATTFilter
# AdwCleaner v5.033 - Bericht erstellt am 16/02/2016 um 03:33:16
# Aktualisiert am 07/02/2016 von Xplode
# Datenbank : 2016-02-15.1 [Server]
# Betriebssystem : Windows 7 Professional Service Pack 1 (x86)
# Benutzername : Tina Thiel - TT-KELLER
# Gestartet von : C:\Users\Tina Thiel\Desktop\adwcleaner_5.033.exe
# Option : Löschen
# Unterstützung : hxxp://toolslib.net/forum

***** [ Dienste ] *****


***** [ Ordner ] *****


***** [ Dateien ] *****

[-] Datei Gelöscht : C:\Users\Tina Thiel\AppData\Roaming\Mozilla\Firefox\Profiles\047uw4lu.default\searchplugins\Search Provided by Yahoo.xml

***** [ DLLs ] *****


***** [ Verknüpfungen ] *****


***** [ Aufgabenplanung ] *****


***** [ Registrierungsdatenbank ] *****

[-] Schlüssel Gelöscht : HKCU\Software\PRODUCTSETUP
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Caphyon

***** [ Internetbrowser ] *****


*************************

:: "Tracing" Schlüssel gelöscht
:: Winsock Einstellungen zurückgesetzt

########## EOF - C:\AdwCleaner\AdwCleaner[C1].txt - [1007 Bytes] ##########

Hilft das...?

Alt 02.03.2016, 12:53   #8
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
Firefox öffnet selbstständig Internetseiten - Standard

Firefox öffnet selbstständig Internetseiten


Malwarebytes Anti-Rootkit (MBAR)

Downloade dir bitte Malwarebytes Anti-Rootkit Malwarebytes Anti-Rootkit und speichere es auf deinem Desktop.
  • Starte bitte die mbar.exe.
  • Folge den Anweisungen auf deinem Bildschirm gemäß Anleitung zu Malwarebytes Anti-Rootkit
  • Aktualisiere unbedingt die Datenbank und erlaube dem Tool, dein System zu scannen.
  • Klicke auf den CleanUp Button und erlaube den Neustart.
  • Während dem Neustart wird MBAR die gefundenen Objekte entfernen, also bleib geduldig.
  • Nach dem Neustart starte die mbar.exe erneut.
  • Sollte nochmal was gefunden werden, wiederhole den CleanUp Prozess.
Das Tool wird im erstellten Ordner eine Logfile ( mbar-log-<Jahr-Monat-Tag>.txt ) erzeugen. Bitte poste diese hier.

Starte keine andere Datei in diesem Ordner ohne Anweisung eines Helfers
__________________
Logfiles bitte immer in CODE-Tags posten

Alt 02.03.2016, 16:53   #9
paeckchen1
 
Firefox öffnet selbstständig Internetseiten - Standard

Firefox öffnet selbstständig Internetseiten


Hallo,
habe alles nach Anweisung durchgeführt. Hier das Ergebniss des 1. Durchlaufs:

Code:
ATTFilter
Malwarebytes Anti-Rootkit BETA 1.9.3.1001
www.malwarebytes.org

Database version:
  main:    v2016.03.02.03
  rootkit: v2016.02.27.01

Windows 7 Service Pack 1 x86 NTFS
Internet Explorer 11.0.9600.18204
Tina Thiel :: TT-KELLER [administrator]

02.03.2016 15:15:20
mbar-log-2016-03-02 (15-15-20).txt

Scan type: Quick scan
Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken
Scan options disabled: 
Objects scanned: 311871
Time elapsed: 25 minute(s), 15 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 2
HKLM\SYSTEM\CONTROLSET001\SERVICES\NLASVC\PARAMETERS\INTERNET\MANUALPROXIES| (Hijack.AutoConfigURL.PrxySvrRST) -> Data: 0hxxp://stop-block.org/wpad.dat?8641805a75cd62e65ef7e9f01c473ec15887859 -> Delete on reboot. [8e6d5d255a3f1b1b37b2a7cf689c738d]
HKU\S-1-5-21-2503069186-1068286192-3510494515-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\INTERNET SETTINGS|AutoConfigUrl (Hijack.AutoConfigURL.PrxySvrRST) -> Data: hxxp://stop-block.org/wpad.dat?8641805a75cd62e65ef7e9f01c473ec15887859 -> Delete on reboot. [b843f290c5d47abc9f1c6809f50f11ef]

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

Physical Sectors Detected: 0
(No malicious items detected)

(end)
Und hier das vom 2. Durchlauf:

Code:
ATTFilter
Malwarebytes Anti-Rootkit BETA 1.9.3.1001
www.malwarebytes.org

Database version:
  main:    v2016.03.02.04
  rootkit: v2016.02.27.01

Windows 7 Service Pack 1 x86 NTFS
Internet Explorer 11.0.9600.18204
Tina Thiel :: TT-KELLER [administrator]

02.03.2016 16:15:08
mbar-log-2016-03-02 (16-15-08).txt

Scan type: Quick scan
Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken
Scan options disabled: 
Objects scanned: 311121
Time elapsed: 25 minute(s), 51 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

Physical Sectors Detected: 0
(No malicious items detected)

(end)

Mir scheint, der Fehler ist gefunden und behoben... ?!?!?
Richtig?

Alt 02.03.2016, 18:23   #10
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
Firefox öffnet selbstständig Internetseiten - Standard

Firefox öffnet selbstständig Internetseiten


Adware/Junkware/Toolbars entfernen

Alte Versionen von adwCleaner und falls vorhanden JRT vorher löschen, danach neu runterladen auf den Desktop!
Virenscanner jetzt vor dem Einsatz dieser Tools bitte komplett deaktivieren!

1. Schritt: adwCleaner

Downloade Dir bitte AdwCleaner Logo Icon AdwCleaner auf deinen Desktop.
  • Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
  • Starte die AdwCleaner.exe mit einem Doppelklick.
  • Stimme den Nutzungsbedingungen zu.
  • Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
    • "Tracing" Schlüssel löschen
    • Winsock Einstellungen zurücksetzen
    • Proxy Einstellungen zurücksetzen
    • Internet Explorer Richtlinien zurücksetzen
    • Chrome Richtlinien zurücksetzen
    • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
  • Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
  • Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
  • Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).




2. Schritt: JRT - Junkware Removal Tool

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

  • Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
  • Drücke eine beliebige Taste, um das Tool zu starten.
  • Je nach System kann der Scan eine Weile dauern.
  • Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
  • Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.




3. Schritt: Frisches Log mit FRST

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST Download FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
  • Starte jetzt FRST.
  • Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
  • Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
  • Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

__________________
Logfiles bitte immer in CODE-Tags posten

Alt 03.03.2016, 06:42   #11
paeckchen1
 
Firefox öffnet selbstständig Internetseiten - Standard

Firefox öffnet selbstständig Internetseiten


Guten Morgen,
weiter geht es...
Code:
ATTFilter
# AdwCleaner v5.037 - Bericht erstellt am 03/03/2016 um 06:28:08
# Aktualisiert am 28/02/2016 von Xplode
# Datenbank : 2016-03-02.1 [Server]
# Betriebssystem : Windows 7 Professional Service Pack 1 (x86)
# Benutzername : Tina Thiel - TT-KELLER
# Gestartet von : C:\Users\Tina Thiel\Desktop\AdwCleaner_5.037.exe
# Option : Suchlauf
# Unterstützung : hxxp://toolslib.net/forum

***** [ Dienste ] *****


***** [ Ordner ] *****


***** [ Dateien ] *****


***** [ DLL ] *****


***** [ Verknüpfungen ] *****


***** [ Aufgabenplanung ] *****


***** [ Registrierungsdatenbank ] *****


***** [ Internetbrowser ] *****


*************************

C:\AdwCleaner\AdwCleaner[C1].txt - [1086 Bytes] - [16/02/2016 03:33:16]
C:\AdwCleaner\AdwCleaner[C2].txt - [1417 Bytes] - [27/02/2016 05:55:23]
C:\AdwCleaner\AdwCleaner[C3].txt - [1151 Bytes] - [03/03/2016 06:27:37]
C:\AdwCleaner\AdwCleaner[S1].txt - [962 Bytes] - [16/02/2016 03:32:23]
C:\AdwCleaner\AdwCleaner[S2].txt - [730 Bytes] - [18/02/2016 06:04:39]
C:\AdwCleaner\AdwCleaner[S3].txt - [1154 Bytes] - [27/02/2016 05:50:40]
C:\AdwCleaner\AdwCleaner[S4].txt - [1227 Bytes] - [27/02/2016 05:54:05]
C:\AdwCleaner\AdwCleaner[S5].txt - [1569 Bytes] - [03/03/2016 06:05:14]
C:\AdwCleaner\AdwCleaner[S6].txt - [1642 Bytes] - [03/03/2016 06:26:22]
C:\AdwCleaner\AdwCleaner[S7].txt - [1336 Bytes] - [03/03/2016 06:28:08]

########## EOF - C:\AdwCleaner\AdwCleaner[S7].txt - [1409 Bytes] ##########
Und hier die Infos von JRT

Code:
ATTFilter
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 8.0.3 (02.09.2016)
Operating System: Windows 7 Professional x86 
Ran by Tina Thiel (Administrator) on 03.03.2016 at  6:34:01,04
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




File System: 26 

Successfully deleted: C:\Program Files\mozilla firefox\defaults\pref\itms.js (File) 
Successfully deleted: C:\ProgramData\pdfforge (Folder) 
Successfully deleted: C:\Users\Tina Thiel\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\099SBSGE (Temporary Internet Files Folder) 
Successfully deleted: C:\Users\Tina Thiel\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\2PYDNE5F (Temporary Internet Files Folder) 
Successfully deleted: C:\Users\Tina Thiel\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5NCMW8EL (Temporary Internet Files Folder) 
Successfully deleted: C:\Users\Tina Thiel\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\8M0M2G62 (Temporary Internet Files Folder) 
Successfully deleted: C:\Users\Tina Thiel\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\8W3LGRVJ (Temporary Internet Files Folder) 
Successfully deleted: C:\Users\Tina Thiel\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\CWZEBXWV (Temporary Internet Files Folder) 
Successfully deleted: C:\Users\Tina Thiel\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DDDSV78P (Temporary Internet Files Folder) 
Successfully deleted: C:\Users\Tina Thiel\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\MX6EQSDO (Temporary Internet Files Folder) 
Successfully deleted: C:\Users\Tina Thiel\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\PBEEGZX2 (Temporary Internet Files Folder) 
Successfully deleted: C:\Users\Tina Thiel\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\PV3PU25Q (Temporary Internet Files Folder) 
Successfully deleted: C:\Users\Tina Thiel\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\UQYF0W3Q (Temporary Internet Files Folder) 
Successfully deleted: C:\Users\Tina Thiel\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Y3LFW7Z7 (Temporary Internet Files Folder) 
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\099SBSGE (Temporary Internet Files Folder) 
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\2PYDNE5F (Temporary Internet Files Folder) 
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5NCMW8EL (Temporary Internet Files Folder) 
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\8M0M2G62 (Temporary Internet Files Folder) 
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\8W3LGRVJ (Temporary Internet Files Folder) 
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\CWZEBXWV (Temporary Internet Files Folder) 
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DDDSV78P (Temporary Internet Files Folder) 
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\MX6EQSDO (Temporary Internet Files Folder) 
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\PBEEGZX2 (Temporary Internet Files Folder) 
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\PV3PU25Q (Temporary Internet Files Folder) 
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\UQYF0W3Q (Temporary Internet Files Folder) 
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Y3LFW7Z7 (Temporary Internet Files Folder) 

Deleted the following from C:\Users\Tina Thiel\AppData\Roaming\Mozilla\Firefox\Profiles\047uw4lu.default\prefs.js
user_pref(extensions.unitedinternet.email.runonceNewUsersShown, true);



Registry: 2 

Successfully deleted: HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{38279E1A-7019-40C1-B579-E99DFB3312E8} (Registry Key)
Successfully deleted: HKLM\Software\Microsoft\Internet Explorer\Toolbar\\{23FD9C33-A9E1-48A1-8404-E5925CF1C8E1} (Registry Value) 




~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 03.03.2016 at  6:35:07,55
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Und jetzt FRST Teil 1:


Code:
ATTFilter
Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x86) Version:02-03-2016
durchgeführt von Tina Thiel (Administrator) auf TT-KELLER (03-03-2016 06:38:22)
Gestartet von C:\Users\Tina Thiel\Desktop
Geladene Profile: Tina Thiel (Verfügbare Profile: Tina Thiel)
Platform: Microsoft Windows 7 Professional  Service Pack 1 (X86) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: FF)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(TeamViewer GmbH) C:\Program Files\TeamViewer\TeamViewer_Service.exe
(F-Secure Corporation) C:\Program Files\F-Secure\Internet Security\apps\CCF_Reputation\fsorsp.exe
(F-Secure Corporation) C:\Program Files\F-Secure\Internet Security\apps\ComputerSecurity\Common\FSMA32.EXE
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(F-Secure Corporation) C:\Program Files\F-Secure\Internet Security\fshoster32.exe
(F-Secure Corporation) C:\Program Files\F-Secure\Internet Security\apps\ComputerSecurity\Anti-Virus\fsgk32.exe
(F-Secure Corporation) C:\Program Files\F-Secure\Internet Security\apps\ComputerSecurity\Anti-Virus\fssm32.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Registry (Nicht auf der Ausnahmeliste) ===========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [F-Secure GUI (666)] => C:\Program Files\F-Secure\Internet Security\FsGuiStarter.exe [101928 2015-11-10] (F-Secure Corporation)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [157456 2015-12-17] (Apple Inc.)
HKLM\...\Run: [Dropbox] => C:\Program Files\Dropbox\Client\Dropbox.exe [25122080 2016-02-16] (Dropbox, Inc.)
HKLM\...\Run: [Adobe Version Cue CS2] => c:\Program Files\Adobe\Adobe Version Cue CS2\ControlPanel\VersionCueCS2Tray.exe [856064 2005-04-06] (Adobe Sytems Incorporated)
HKLM\...\Run: [QuickTime Task] => C:\Program Files\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)
HKU\S-1-5-21-2503069186-1068286192-3510494515-1000\...\Run: [Chromium] => "c:\users\tina thiel\appdata\local\chromium\application\chrome.exe" --auto-launch-at-startup --profile-directory="Default" --restore-last-session
HKU\S-1-5-18\...\RunOnce: [SPReview] => C:\Windows\System32\SPReview\SPReview.exe [280576 2016-02-07] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files\Dropbox\Client\DropboxExt.33.dll [2016-02-16] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files\Dropbox\Client\DropboxExt.33.dll [2016-02-16] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt3] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files\Dropbox\Client\DropboxExt.33.dll [2016-02-16] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt4] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files\Dropbox\Client\DropboxExt.33.dll [2016-02-16] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt5] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files\Dropbox\Client\DropboxExt.33.dll [2016-02-16] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt6] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files\Dropbox\Client\DropboxExt.33.dll [2016-02-16] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt7] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files\Dropbox\Client\DropboxExt.33.dll [2016-02-16] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt8] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files\Dropbox\Client\DropboxExt.33.dll [2016-02-16] (Dropbox, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma.lnk [2016-02-05]
ShortcutTarget: Adobe Gamma.lnk -> C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Audible Download Manager.lnk [2016-02-10]
ShortcutTarget: Audible Download Manager.lnk -> C:\Program Files\Audible\Bin\AudibleDownloadHelper.exe (Audible, Inc.)
CHR HKLM\SOFTWARE\Policies\Google: Beschränkung <======= ACHTUNG

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Winsock: Catalog5 05 C:\Program Files\Bonjour\mdnsNSP.dll [122128 2015-08-12] (Apple Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{444A56ED-7BD0-40EE-AB4E-4D3876231813}: [DhcpNameServer] 192.168.178.1
ManualProxies: 

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_popjar_16_07_ssg08&param1=1&param2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1QzutDtDtByEzztC0E0BtDtDtD0DtAzz0DyCtN0D0Tzu0StCyDtDyCtN1L2XzutAtFtCzztFtCtFtDtN1L1Czu1StN1L1G1B1V1N2Y1L1Qzu2SyDzyyD0B0FyDtBzytGtCtByDtBtGtAzy0C0DtGtC0EtDzztGtC0D0E0DtBtCtDtAtD0B0AtA2QtN1M1F1B2Z1V1N2Y1L1Qzu2StCtD0C0BtD0AtAtDtGyB0FyB0CtGyEyCtD0EtG0B0C0C0FtG0FzytB0Ezy0ByDtD0B0B0D0F2QtN0A0LzuyE%26cr%3D1341331592%26a%3Dwbf_popjar_16_07_ssg08%26os_ver%3D6.1%26os%3DWindows%2B7%2BProfessional
HKU\S-1-5-21-2503069186-1068286192-3510494515-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_popjar_16_07_ssg08&param1=1&param2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1QzutDtDtByEzztC0E0BtDtDtD0DtAzz0DyCtN0D0Tzu0StCyDtDyCtN1L2XzutAtFtCzztFtCtFtDtN1L1Czu1StN1L1G1B1V1N2Y1L1Qzu2SyDzyyD0B0FyDtBzytGtCtByDtBtGtAzy0C0DtGtC0EtDzztGtC0D0E0DtBtCtDtAtD0B0AtA2QtN1M1F1B2Z1V1N2Y1L1Qzu2StCtD0C0BtD0AtAtDtGyB0FyB0CtGyEyCtD0EtG0B0C0C0FtG0FzytB0Ezy0ByDtD0B0B0D0F2QtN0A0LzuyE%26cr%3D1341331592%26a%3Dwbf_popjar_16_07_ssg08%26os_ver%3D6.1%26os%3DWindows%2B7%2BProfessional
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://de.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_popjar_16_07_ssg08&param1=1&param2=f%3D4%26b%3DIE%26cc%3Dde%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1QzutDtDtByEzztC0E0BtDtDtD0DtAzz0DyCtN0D0Tzu0StCyDtDyCtN1L2XzutAtFtCzztFtCtFtDtN1L1Czu1StN1L1G1B1V1N2Y1L1Qzu2SyDzyyD0B0FyDtBzytGtCtByDtBtGtAzy0C0DtGtC0EtDzztGtC0D0E0DtBtCtDtAtD0B0AtA2QtN1M1F1B2Z1V1N2Y1L1Qzu2StCtD0C0BtD0AtAtDtGyB0FyB0CtGyEyCtD0EtG0B0C0C0FtG0FzytB0Ezy0ByDtD0B0B0D0F2QtN0A0LzuyE%26cr%3D1341331592%26a%3Dwbf_popjar_16_07_ssg08%26os_ver%3D6.1%26os%3DWindows%2B7%2BProfessional&p={searchTerms}
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://de.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_popjar_16_07_ssg08&param1=1&param2=f%3D4%26b%3DIE%26cc%3Dde%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1QzutDtDtByEzztC0E0BtDtDtD0DtAzz0DyCtN0D0Tzu0StCyDtDyCtN1L2XzutAtFtCzztFtCtFtDtN1L1Czu1StN1L1G1B1V1N2Y1L1Qzu2SyDzyyD0B0FyDtBzytGtCtByDtBtGtAzy0C0DtGtC0EtDzztGtC0D0E0DtBtCtDtAtD0B0AtA2QtN1M1F1B2Z1V1N2Y1L1Qzu2StCtD0C0BtD0AtAtDtGyB0FyB0CtGyEyCtD0EtG0B0C0C0FtG0FzytB0Ezy0ByDtD0B0B0D0F2QtN0A0LzuyE%26cr%3D1341331592%26a%3Dwbf_popjar_16_07_ssg08%26os_ver%3D6.1%26os%3DWindows%2B7%2BProfessional&p={searchTerms}
SearchScopes: HKU\S-1-5-21-2503069186-1068286192-3510494515-1000 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://de.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_popjar_16_07_ssg08&param1=1&param2=f%3D4%26b%3DIE%26cc%3Dde%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1QzutDtDtByEzztC0E0BtDtDtD0DtAzz0DyCtN0D0Tzu0StCyDtDyCtN1L2XzutAtFtCzztFtCtFtDtN1L1Czu1StN1L1G1B1V1N2Y1L1Qzu2SyDzyyD0B0FyDtBzytGtCtByDtBtGtAzy0C0DtGtC0EtDzztGtC0D0E0DtBtCtDtAtD0B0AtA2QtN1M1F1B2Z1V1N2Y1L1Qzu2StCtD0C0BtD0AtAtDtGyB0FyB0CtGyEyCtD0EtG0B0C0C0FtG0FzytB0Ezy0ByDtD0B0B0D0F2QtN0A0LzuyE%26cr%3D1341331592%26a%3Dwbf_popjar_16_07_ssg08%26os_ver%3D6.1%26os%3DWindows%2B7%2BProfessional&p={searchTerms}
SearchScopes: HKU\S-1-5-21-2503069186-1068286192-3510494515-1000 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://de.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_popjar_16_07_ssg08&param1=1&param2=f%3D4%26b%3DIE%26cc%3Dde%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1QzutDtDtByEzztC0E0BtDtDtD0DtAzz0DyCtN0D0Tzu0StCyDtDyCtN1L2XzutAtFtCzztFtCtFtDtN1L1Czu1StN1L1G1B1V1N2Y1L1Qzu2SyDzyyD0B0FyDtBzytGtCtByDtBtGtAzy0C0DtGtC0EtDzztGtC0D0E0DtBtCtDtAtD0B0AtA2QtN1M1F1B2Z1V1N2Y1L1Qzu2StCtD0C0BtD0AtAtDtGyB0FyB0CtGyEyCtD0EtG0B0C0C0FtG0FzytB0Ezy0ByDtD0B0B0D0F2QtN0A0LzuyE%26cr%3D1341331592%26a%3Dwbf_popjar_16_07_ssg08%26os_ver%3D6.1%26os%3DWindows%2B7%2BProfessional&p={searchTerms}
BHO: Browsing Protection by F-Secure -> {45BBE08D-81C5-4A67-AF20-B2A077C67747} -> C:\Program Files\F-Secure\Internet Security\apps\CCF_Scanning\bin\browser\install\fs_ie_https\fs_ie_https.dll [2016-02-03] (F-Secure Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
StartMenuInternet: IEXPLORE.EXE - iexplore.exe

FireFox:
========
FF ProfilePath: C:\Users\Tina Thiel\AppData\Roaming\Mozilla\Firefox\Profiles\047uw4lu.default
FF NewTab: about:newtab
FF SelectedSearchEngine: Search Provided by Yahoo
FF Homepage: www.google.de
FF Plugin: @Apple.com/iTunes,version=1.0 -> C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll [2015-10-14] ()
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin: PDF Architect 4 -> C:\Program Files\PDF Architect 4\np-previewer.dll [2016-01-15] (pdfforge GmbH)
FF HKLM\...\Firefox\Extensions: [ols@f-secure.com] - C:\Program Files\F-Secure\Internet Security\apps\CCF_Scanning\bin\browser\install\fs_firefox_https\fs_firefox_https.xpi
FF Extension: Browsing Protection by F-Secure - C:\Program Files\F-Secure\Internet Security\apps\CCF_Scanning\bin\browser\install\fs_firefox_https\fs_firefox_https.xpi [2016-02-03]
FF HKLM\...\Firefox\Extensions: [pdf_architect_4_conv@pdfarchitect.org] - C:\Program Files\PDF Architect 4\resources\pdfarchitect4firefoxextension
FF Extension: PDF Architect 4 Creator - C:\Program Files\PDF Architect 4\resources\pdfarchitect4firefoxextension [2016-02-05] [ist nicht signiert]

Chrome: 
=======
CHR HKLM\...\Chrome\Extension: [jmjjnhpacphpjmnnlnccpfmhkcloaade] - C:/Program Files/F-Secure/Internet Security/apps/CCF_Scanning/bin/browser/install/fs_chrome_https/fs_chrome_https.crx [2016-02-03]

==================== Dienste (Nicht auf der Ausnahmeliste) ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

S3 Adobe LM Service; C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [72704 2016-02-05] (Adobe Systems) [Datei ist nicht signiert]
S2 Adobe Version Cue CS2; c:\Program Files\Adobe\Adobe Version Cue CS2\bin\VersionCueCS2.exe [163840 2005-04-06] (Adobe Systems Incorporated) [Datei ist nicht signiert]
S2 dbupdate; C:\Program Files\Dropbox\Update\DropboxUpdate.exe [143144 2016-02-05] (Dropbox, Inc.)
S3 dbupdatem; C:\Program Files\Dropbox\Update\DropboxUpdate.exe [143144 2016-02-05] (Dropbox, Inc.)
S2 DevoloNetworkService; C:\Program Files\devolo\dlan\devolonetsvc.exe [3755976 2015-07-01] (devolo AG)
R2 fshoster; C:\Program Files\F-Secure\Internet Security\fshoster32.exe [184360 2015-11-10] (F-Secure Corporation)
R3 FSMA; C:\Program Files\F-Secure\Internet Security\apps\ComputerSecurity\Common\FSMA32.EXE [216104 2015-11-24] (F-Secure Corporation)
R2 FSORSPClient; C:\Program Files\F-Secure\Internet Security\apps\CCF_Reputation\fsorsp.exe [60456 2016-02-03] (F-Secure Corporation)
S3 PDF Architect 4; C:\Program Files\PDF Architect 4\ws.exe [2220768 2016-01-15] (pdfforge GmbH)
S3 PDF Architect 4 CrashHandler; C:\Program Files\PDF Architect 4\crash-handler-ws.exe [970464 2016-01-15] (pdfforge GmbH)
S2 PDF Architect 4 Creator; C:\Program Files\PDF Architect 4\creator-ws.exe [772832 2016-01-15] (pdfforge GmbH)
R2 TeamViewer; C:\Program Files\TeamViewer\TeamViewer_Service.exe [6940944 2016-02-16] (TeamViewer GmbH)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation)
S2 PDF Architect 4 Manager; "C:\ProgramData\pdfforge\PDF Architect 4 Manager\PDF Architect 4\Architect Manager.exe" [X]

===================== Treiber (Nicht auf der Ausnahmeliste) ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R3 F-Secure Gatekeeper; C:\Program Files\F-Secure\Internet Security\apps\ComputerSecurity\Anti-Virus\minifilter\fsgk.sys [160832 2016-02-03] (F-Secure Corporation)
R1 F-Secure HIPS; C:\Program Files\F-Secure\Internet Security\apps\ComputerSecurity\HIPS\drivers\fshs.sys [95296 2016-02-11] (F-Secure Corporation)
R0 fsbts; C:\Windows\System32\Drivers\fsbts.sys [63680 2015-11-05] ()
R3 fsni; C:\Program Files\F-Secure\Internet Security\apps\CCF_Scanning\bin\fsni32.sys [77864 2016-02-03] (F-Secure Corporation)
R2 NPF_devolo; C:\Windows\system32\drivers\npf_devolo.sys [35840 2013-03-04] (CACE Technologies) [Datei ist nicht signiert]
S3 DrvAgent32; \??\C:\Windows\system32\Drivers\DrvAgent32.sys [X]

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2016-03-03 06:38 - 2016-03-03 06:38 - 00014476 _____ C:\Users\Tina Thiel\Desktop\FRST.txt
2016-03-03 06:37 - 2016-03-03 06:37 - 01722368 _____ (Farbar) C:\Users\Tina Thiel\Desktop\FRST.exe
2016-03-03 06:35 - 2016-03-03 06:35 - 00005175 _____ C:\Users\Tina Thiel\Desktop\JRT.txt
2016-03-03 06:33 - 2016-03-03 06:33 - 01609216 _____ (Malwarebytes) C:\Users\Tina Thiel\Desktop\JRT.exe
2016-03-03 06:03 - 2016-03-03 06:03 - 01518592 _____ C:\Users\Tina Thiel\Desktop\AdwCleaner_5.037.exe
2016-03-02 15:15 - 2016-03-02 16:46 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2016-03-02 15:15 - 2016-03-02 16:15 - 00170200 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2016-03-02 15:15 - 2016-03-02 15:15 - 00000000 ____D C:\ProgramData\Malwarebytes
2016-03-02 15:14 - 2016-03-02 16:46 - 00000000 ____D C:\Users\Tina Thiel\Desktop\mbar
2016-03-02 15:14 - 2016-03-02 16:14 - 00094936 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys
2016-03-02 06:22 - 2016-03-03 06:38 - 00000000 ____D C:\FRST
2016-03-01 12:03 - 2016-03-01 12:03 - 00000000 ____D C:\Users\Tina Thiel\AppData\Local\TeamViewer
2016-03-01 11:55 - 2016-03-01 12:06 - 00000000 ____D C:\Users\Tina Thiel\AppData\Roaming\TeamViewer
2016-03-01 11:55 - 2016-03-01 11:56 - 00000000 ____D C:\Program Files\TeamViewer
2016-03-01 11:55 - 2016-03-01 11:55 - 00001005 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 11.lnk
2016-03-01 11:55 - 2016-03-01 11:55 - 00000993 _____ C:\Users\Public\Desktop\TeamViewer 11.lnk
2016-02-29 11:24 - 2016-02-29 11:24 - 00000000 ____D C:\Users\Tina Thiel\Desktop\deer_smallv1
2016-02-21 06:05 - 2016-02-21 06:05 - 00000000 ____D C:\Users\Tina Thiel\AppData\Roaming\PDF Producer
2016-02-21 05:46 - 2016-02-21 05:46 - 00000000 ____D C:\Users\Tina Thiel\AppData\Local\PDFCreator
2016-02-17 16:44 - 2016-02-17 16:44 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox
2016-02-15 12:54 - 2016-02-15 12:54 - 00000000 ____D C:\Users\Tina Thiel\AppData\Roaming\Baidu
2016-02-15 12:54 - 2016-02-15 12:54 - 00000000 ____D C:\ProgramData\Baidu
2016-02-15 12:53 - 2016-02-15 12:53 - 00000392 __RSH C:\ProgramData\ntuser.pol
2016-02-15 12:53 - 2016-02-15 12:53 - 00000000 ____D C:\Users\Tina Thiel\AppData\Local\MiniService
2016-02-11 10:25 - 2012-02-11 06:37 - 00317440 _____ (Microsoft Corporation) C:\Windows\system32\spoolsv.exe
2016-02-11 10:25 - 2011-03-11 06:39 - 00143744 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvstor.sys
2016-02-11 10:25 - 2011-03-11 06:39 - 00117120 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvraid.sys
2016-02-11 10:25 - 2011-03-11 06:38 - 00332160 _____ (Intel Corporation) C:\Windows\system32\Drivers\iaStorV.sys
2016-02-11 10:25 - 2011-03-11 06:38 - 00080256 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdsata.sys
2016-02-11 10:25 - 2011-03-11 06:38 - 00022400 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdxata.sys
2016-02-11 10:25 - 2011-03-11 06:33 - 01699328 _____ (Microsoft Corporation) C:\Windows\system32\esent.dll
2016-02-11 10:25 - 2011-03-11 06:31 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\fsutil.exe
2016-02-11 10:25 - 2011-03-11 05:01 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBSTOR.SYS
2016-02-11 04:00 - 2016-02-11 04:00 - 00000000 ___SD C:\Windows\system32\CompatTel
2016-02-11 04:00 - 2016-02-11 04:00 - 00000000 ____D C:\Windows\system32\appraiser
2016-02-11 03:21 - 2015-01-09 00:44 - 00419936 _____ C:\Windows\system32\locale.nls
2016-02-10 13:33 - 2016-01-16 19:42 - 00022464 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2016-02-10 13:33 - 2016-01-16 19:34 - 00949760 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2016-02-10 13:33 - 2016-01-11 15:07 - 01198080 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2016-02-10 13:33 - 2016-01-11 15:07 - 00591360 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2016-02-10 13:33 - 2016-01-11 15:07 - 00544768 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2016-02-10 13:33 - 2016-01-11 15:07 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2016-02-10 13:33 - 2016-01-11 15:07 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2016-02-10 13:33 - 2015-11-16 21:12 - 00176128 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2016-02-10 13:33 - 2015-06-03 21:17 - 01167520 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe
2016-02-10 13:32 - 2016-01-22 07:13 - 03993536 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe
2016-02-10 13:32 - 2016-01-22 07:05 - 12877824 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2016-02-10 13:32 - 2016-01-22 07:00 - 01498624 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll
2016-02-10 13:32 - 2016-01-22 06:59 - 01805824 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2016-02-10 13:32 - 2016-01-22 06:12 - 02973184 _____ (Microsoft Corporation) C:\Windows\explorer.exe
2016-02-10 13:32 - 2016-01-16 19:36 - 01413632 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
2016-02-10 13:32 - 2016-01-07 18:47 - 02386944 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2016-02-10 13:32 - 2016-01-07 18:35 - 00116224 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys
2016-02-10 13:32 - 2016-01-06 19:41 - 00216064 _____ (Microsoft Corporation) C:\Windows\system32\InkEd.dll
2016-02-10 13:32 - 2016-01-06 18:56 - 00019968 _____ (Microsoft Corporation) C:\Windows\system32\jnwmon.dll
2016-02-10 13:31 - 2016-02-06 11:01 - 20366848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2016-02-10 13:31 - 2016-02-06 10:54 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2016-02-10 13:31 - 2016-02-06 10:43 - 02280448 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2016-02-10 13:31 - 2016-02-06 10:38 - 00476160 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2016-02-10 13:31 - 2016-02-06 10:16 - 12857856 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2016-02-10 13:31 - 2016-02-06 09:54 - 01312256 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2016-02-10 13:31 - 2016-01-22 21:10 - 00341200 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2016-02-10 13:31 - 2016-01-22 07:14 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2016-02-10 13:31 - 2016-01-22 07:13 - 03938752 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2016-02-10 13:31 - 2016-01-22 07:13 - 00138176 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2016-02-10 13:31 - 2016-01-22 07:13 - 00067520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2016-02-10 13:31 - 2016-01-22 07:09 - 01310232 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2016-02-10 13:31 - 2016-01-22 07:06 - 00400896 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2016-02-10 13:31 - 2016-01-22 07:06 - 00171520 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2016-02-10 13:31 - 2016-01-22 07:06 - 00169984 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2016-02-10 13:31 - 2016-01-22 07:06 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2016-02-10 13:31 - 2016-01-22 07:06 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2016-02-10 13:31 - 2016-01-22 07:06 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2016-02-10 13:31 - 2016-01-22 07:05 - 00654336 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2016-02-10 13:31 - 2016-01-22 07:05 - 00251392 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2016-02-10 13:31 - 2016-01-22 07:05 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2016-02-10 13:31 - 2016-01-22 07:04 - 00642048 _____ (Microsoft Corporation) C:\Windows\system32\CPFilters.dll
2016-02-10 13:31 - 2016-01-22 07:04 - 00535040 _____ (Microsoft Corporation) C:\Windows\system32\EncDec.dll
2016-02-10 13:31 - 2016-01-22 07:02 - 01060864 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2016-02-10 13:31 - 2016-01-22 07:02 - 00872448 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2016-02-10 13:31 - 2016-01-22 07:02 - 00553472 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2016-02-10 13:31 - 2016-01-22 07:02 - 00496640 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2016-02-10 13:31 - 2016-01-22 07:02 - 00293888 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2016-02-10 13:31 - 2016-01-22 07:02 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2016-02-10 13:31 - 2016-01-22 07:02 - 00223232 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2016-02-10 13:31 - 2016-01-22 07:02 - 00176128 _____ (Microsoft Corporation) C:\Windows\system32\msorcl32.dll
2016-02-10 13:31 - 2016-01-22 07:02 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2016-02-10 13:31 - 2016-01-22 07:02 - 00114176 _____ (Microsoft Corporation) C:\Windows\system32\mtxoci.dll
2016-02-10 13:31 - 2016-01-22 07:02 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2016-02-10 13:31 - 2016-01-22 07:02 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2016-02-10 13:31 - 2016-01-22 07:01 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2016-02-10 13:31 - 2016-01-22 07:01 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2016-02-10 13:31 - 2016-01-22 07:00 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2016-02-10 13:31 - 2016-01-22 06:59 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2016-02-10 13:31 - 2016-01-22 06:59 - 00642560 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2016-02-10 13:31 - 2016-01-22 06:59 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2016-02-10 13:31 - 2016-01-22 06:59 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2016-02-10 13:31 - 2016-01-22 06:59 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2016-02-10 13:31 - 2016-01-22 06:59 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2016-02-10 13:31 - 2016-01-22 06:59 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2016-02-10 13:31 - 2016-01-22 06:59 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2016-02-10 13:31 - 2016-01-22 06:59 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2016-02-10 13:31 - 2016-01-22 06:59 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2016-02-10 13:31 - 2016-01-22 06:59 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2016-02-10 13:31 - 2016-01-22 06:59 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2016-02-10 13:31 - 2016-01-22 06:59 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2016-02-10 13:31 - 2016-01-22 06:59 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2016-02-10 13:31 - 2016-01-22 06:59 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2016-02-10 13:31 - 2016-01-22 06:59 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2016-02-10 13:31 - 2016-01-22 06:59 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2016-02-10 13:31 - 2016-01-22 06:59 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2016-02-10 13:31 - 2016-01-22 06:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2016-02-10 13:31 - 2016-01-22 06:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-02-10 13:31 - 2016-01-22 06:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2016-02-10 13:31 - 2016-01-22 06:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2016-02-10 13:31 - 2016-01-22 06:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2016-02-10 13:31 - 2016-01-22 06:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2016-02-10 13:31 - 2016-01-22 06:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2016-02-10 13:31 - 2016-01-22 06:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2016-02-10 13:31 - 2016-01-22 06:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2016-02-10 13:31 - 2016-01-22 06:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2016-02-10 13:31 - 2016-01-22 06:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2016-02-10 13:31 - 2016-01-22 06:55 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2016-02-10 13:31 - 2016-01-22 06:55 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2016-02-10 13:31 - 2016-01-22 06:52 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2016-02-10 13:31 - 2016-01-22 06:51 - 00663552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2016-02-10 13:31 - 2016-01-22 06:51 - 00620032 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2016-02-10 13:31 - 2016-01-22 06:51 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2016-02-10 13:31 - 2016-01-22 06:46 - 00667648 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2016-02-10 13:31 - 2016-01-22 06:43 - 00416256 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2016-02-10 13:31 - 2016-01-22 06:39 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2016-02-10 13:31 - 2016-01-22 06:38 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2016-02-10 13:31 - 2016-01-22 06:37 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2016-02-10 13:31 - 2016-01-22 06:35 - 04611072 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2016-02-10 13:31 - 2016-01-22 06:35 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2016-02-10 13:31 - 2016-01-22 06:34 - 00279040 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2016-02-10 13:31 - 2016-01-22 06:33 - 00130048 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2016-02-10 13:31 - 2016-01-22 06:27 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2016-02-10 13:31 - 2016-01-22 06:25 - 00687104 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2016-02-10 13:31 - 2016-01-22 06:25 - 00684032 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2016-02-10 13:31 - 2016-01-22 06:24 - 02050560 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2016-02-10 13:31 - 2016-01-22 06:24 - 01155072 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2016-02-10 13:31 - 2016-01-22 06:07 - 02120704 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2016-02-10 13:31 - 2016-01-22 06:07 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2016-02-10 13:31 - 2016-01-22 06:02 - 00710144 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2016-02-10 13:31 - 2016-01-22 06:01 - 00271360 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2016-02-10 13:31 - 2016-01-22 06:00 - 00262656 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2016-02-10 13:31 - 2016-01-22 05:53 - 00225792 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2016-02-10 13:31 - 2016-01-22 05:53 - 00124416 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2016-02-10 13:31 - 2016-01-22 05:53 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2016-02-10 13:31 - 2016-01-22 05:51 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2016-02-10 13:31 - 2016-01-22 05:51 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2016-02-10 13:31 - 2016-01-22 05:51 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2016-02-10 13:31 - 2016-01-22 05:51 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2016-02-10 13:31 - 2016-01-22 05:51 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2016-02-10 13:31 - 2016-01-22 05:51 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2016-02-10 13:31 - 2016-01-22 05:51 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2016-02-10 13:31 - 2016-01-22 05:51 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2016-02-10 13:31 - 2015-09-23 14:09 - 00371920 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2016-02-10 13:31 - 2015-09-23 14:09 - 00251000 _____ (Microsoft Corporation) C:\Windows\system32\bcryptprimitives.dll
2016-02-10 13:30 - 2016-01-11 19:47 - 02956288 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2016-02-10 13:30 - 2016-01-11 19:47 - 00174080 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2016-02-10 13:30 - 2016-01-11 19:35 - 00073728 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2016-02-10 13:30 - 2016-01-11 19:17 - 02062848 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2016-02-10 13:30 - 2016-01-11 19:14 - 00573440 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2016-02-10 13:30 - 2016-01-11 19:14 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2016-02-10 13:30 - 2016-01-11 19:14 - 00093696 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2016-02-10 13:30 - 2016-01-11 19:14 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2016-02-10 13:30 - 2016-01-11 19:14 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2016-02-10 13:30 - 2016-01-11 19:14 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2016-02-10 13:30 - 2016-01-11 19:14 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2016-02-10 13:30 - 2014-07-09 02:29 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDYAK.DLL
2016-02-10 13:30 - 2014-07-09 02:29 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDTAT.DLL
2016-02-10 13:30 - 2014-07-09 02:29 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU1.DLL
2016-02-10 13:30 - 2014-07-09 02:29 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDBASH.DLL
2016-02-10 13:30 - 2014-07-09 02:29 - 00005632 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU.DLL
2016-02-10 13:30 - 2013-11-26 09:16 - 03419136 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2016-02-10 12:31 - 2016-02-10 12:31 - 00000000 ____D C:\Users\Tina Thiel\Documents\Audible
2016-02-10 12:31 - 2016-02-10 12:31 - 00000000 ____D C:\Users\Public\Documents\Audible
2016-02-10 12:31 - 2016-02-10 12:31 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AudibleManager
2016-02-10 12:31 - 2016-02-10 12:31 - 00000000 ____D C:\Program Files\Audible
2016-02-10 12:26 - 2016-02-10 12:28 - 00000408 _____ C:\Users\Tina Thiel\Desktop\admhelper
2016-02-10 09:50 - 2016-02-10 09:50 - 00000000 ____D C:\Users\Tina Thiel\AppData\Local\GWX
2016-02-10 09:00 - 2016-02-10 09:00 - 00000000 ____D C:\Users\Tina Thiel\AppData\Roaming\Opera
2016-02-10 06:25 - 2015-11-10 19:39 - 01251328 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2016-02-10 06:25 - 2015-11-10 19:39 - 00909824 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2016-02-10 06:25 - 2015-11-10 19:39 - 00811520 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll
2016-02-10 06:25 - 2015-02-03 04:12 - 01230848 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2016-02-10 06:18 - 2015-07-30 18:57 - 01987584 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2016-02-10 06:17 - 2015-12-08 22:54 - 02285056 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2016-02-10 06:17 - 2015-02-04 03:54 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2016-02-10 04:43 - 2016-03-03 06:28 - 00000000 ____D C:\AdwCleaner
2016-02-10 04:37 - 2016-02-11 21:57 - 00000000 ____D C:\Windows\system32\MRT
2016-02-10 04:37 - 2016-02-11 21:55 - 144254680 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2016-02-10 04:22 - 2016-02-27 03:16 - 00000000 ___SD C:\Windows\system32\GWX
2016-02-09 22:07 - 2012-07-26 04:21 - 00196608 _____ (Microsoft Corporation) C:\Windows\system32\WUDFHost.exe
2016-02-09 22:07 - 2012-07-26 04:20 - 00613888 _____ (Microsoft Corporation) C:\Windows\system32\WUDFx.dll
2016-02-09 22:07 - 2012-07-26 04:20 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\WUDFPlatform.dll
2016-02-09 22:07 - 2012-07-26 04:20 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\WUDFSvc.dll
2016-02-09 22:07 - 2012-07-26 04:20 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\WUDFCoinstaller.dll
2016-02-09 22:07 - 2012-07-26 03:33 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFPf.sys
2016-02-09 22:07 - 2012-07-26 03:32 - 00155136 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFRd.sys
2016-02-09 22:07 - 2012-06-02 15:57 - 00000003 _____ C:\Windows\system32\Drivers\MsftWdf_User_01_11_00_Inbox_Critical.Wdf
2016-02-09 22:05 - 2014-06-30 23:14 - 00008856 _____ (Microsoft Corporation) C:\Windows\system32\icardres.dll
2016-02-09 22:05 - 2014-06-06 07:16 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe
2016-02-09 22:05 - 2014-03-09 22:47 - 00619672 _____ (Microsoft Corporation) C:\Windows\system32\icardagt.exe
2016-02-09 22:05 - 2014-03-09 22:47 - 00099480 _____ (Microsoft Corporation) C:\Windows\system32\infocardapi.dll
2016-02-09 22:05 - 2012-03-01 06:46 - 00019824 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fs_rec.sys
2016-02-09 22:05 - 2012-03-01 06:29 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\wmi.dll
2016-02-09 21:41 - 2016-02-09 21:41 - 00645120 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2016-02-09 21:41 - 2016-02-09 21:41 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2016-02-09 21:41 - 2016-02-09 21:41 - 00233472 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2016-02-09 21:41 - 2016-02-09 21:41 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2016-02-09 21:41 - 2016-02-09 21:41 - 00182272 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2016-02-09 21:41 - 2016-02-09 21:41 - 00151552 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2016-02-09 21:41 - 2016-02-09 21:41 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2016-02-09 21:41 - 2016-02-09 21:41 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2016-02-09 21:41 - 2016-02-09 21:41 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2016-02-09 21:41 - 2016-02-09 21:41 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2016-02-09 21:41 - 2016-02-09 21:41 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2016-02-09 21:41 - 2016-02-09 21:41 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2016-02-09 21:41 - 2016-02-09 21:41 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2016-02-09 21:41 - 2016-02-09 21:41 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2016-02-09 21:41 - 2016-02-09 21:41 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2016-02-09 21:41 - 2016-02-09 21:41 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2016-02-09 21:41 - 2016-02-09 21:41 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2016-02-09 21:41 - 2016-02-09 21:41 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2016-02-09 21:41 - 2016-02-09 21:41 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2016-02-09 21:41 - 2016-02-09 21:41 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2016-02-09 21:41 - 2016-02-09 21:41 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2016-02-09 21:40 - 2016-02-09 21:40 - 00231424 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll
2016-02-09 21:39 - 2016-02-09 21:39 - 00049152 _____ (Microsoft Corporation) C:\Windows\system32\taskhost.exe
2016-02-09 21:37 - 2016-02-09 21:37 - 01158144 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll
2016-02-09 21:37 - 2016-02-09 21:37 - 01080832 _____ (Microsoft Corporation) C:\Windows\system32\d3d10.dll
2016-02-09 21:37 - 2016-02-09 21:37 - 00604160 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll
2016-02-09 21:37 - 2016-02-09 21:37 - 00364544 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll
2016-02-09 21:37 - 2016-02-09 21:37 - 00293376 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll
2016-02-09 21:37 - 2016-02-09 21:37 - 00249856 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll
2016-02-09 21:37 - 2016-02-09 21:37 - 00220160 _____ (Microsoft Corporation) C:\Windows\system32\d3d10core.dll
2016-02-09 21:37 - 2016-02-09 21:37 - 00207872 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecsExt.dll
2016-02-09 21:37 - 2016-02-09 21:37 - 00187392 _____ (Microsoft Corporation) C:\Windows\system32\UIAnimation.dll
2016-02-09 21:37 - 2016-02-09 21:37 - 00161792 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll
2016-02-09 21:37 - 2016-02-09 21:37 - 00010752 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2016-02-09 21:37 - 2016-02-09 21:37 - 00009728 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2016-02-09 21:37 - 2016-02-09 21:37 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2016-02-09 21:37 - 2016-02-09 21:37 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
2016-02-09 21:37 - 2016-02-09 21:37 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
2016-02-09 21:37 - 2016-02-09 21:37 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2016-02-09 21:37 - 2016-02-09 21:37 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
2016-02-09 21:37 - 2016-02-09 21:37 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
2016-02-09 21:37 - 2016-02-09 21:37 - 00002560 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2016-02-09 21:35 - 2016-02-09 21:35 - 01505280 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll
2016-02-09 21:33 - 2015-07-30 14:13 - 00103120 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2016-02-09 21:05 - 2016-02-09 21:05 - 00000000 ____D C:\Users\Tina Thiel\AppData\Roaming\Aquafadas
2016-02-09 21:03 - 2016-02-09 21:03 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuarkXPress Document Converter
2016-02-09 19:17 - 2016-02-10 09:19 - 00000000 ____D C:\Users\Tina Thiel\AppData\Local\Quark
2016-02-09 19:17 - 2016-02-09 19:17 - 00000000 ____D C:\Users\Tina Thiel\AppData\Roaming\Quark
2016-02-09 19:16 - 2016-03-02 02:00 - 00000344 _____ C:\Windows\Tasks\Quark Updater.job
2016-02-09 19:15 - 2016-02-18 06:05 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuarkXPress 10
2016-02-09 19:14 - 2016-02-09 19:16 - 00000000 ____D C:\ProgramData\Quark
2016-02-09 19:12 - 2016-02-09 19:13 - 00000000 ____D C:\Program Files\QuickTime
2016-02-09 19:12 - 2016-02-09 19:12 - 00001815 _____ C:\Users\Public\Desktop\QuickTime Player.lnk
2016-02-09 19:12 - 2016-02-09 19:12 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime
2016-02-09 19:11 - 2016-02-09 19:11 - 00000000 ____D C:\Users\Tina Thiel\AppData\LocalLow\Apple Computer
2016-02-09 07:32 - 2016-03-01 10:04 - 00000000 ____D C:\ProgramData\boost_interprocess
2016-02-09 07:32 - 2016-02-17 07:23 - 00000000 ____D C:\Users\Tina Thiel\AppData\Roaming\com.aspexsoftware.Silhouette_Studio
2016-02-09 07:32 - 2016-02-10 07:57 - 00000000 ____D C:\ProgramData\com.aspexsoftware.Silhouette_Studio.8
2016-02-09 07:32 - 2016-02-09 19:41 - 00000000 ____D C:\ProgramData\com.aspexsoftware.Silhouette_Studio.license
2016-02-09 07:32 - 2016-02-09 07:32 - 00000000 ____D C:\Users\Tina Thiel\AppData\Roaming\com.aspexsoftware.studio_helper
2016-02-09 05:05 - 2015-01-09 03:48 - 00635904 _____ (Microsoft Corporation) C:\Windows\system32\perftrack.dll
2016-02-09 05:05 - 2015-01-09 03:48 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\wdi.dll
2016-02-09 05:05 - 2015-01-09 03:48 - 00027136 _____ (Microsoft Corporation) C:\Windows\system32\powertracker.dll
2016-02-09 05:03 - 2015-07-18 14:08 - 00901264 _____ (Microsoft Corporation) C:\Windows\system32\ucrtbase.dll
2016-02-09 05:03 - 2015-07-18 14:08 - 00066400 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-private-l1-1-0.dll
2016-02-09 05:03 - 2015-07-18 14:08 - 00022368 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-math-l1-1-0.dll
2016-02-09 05:03 - 2015-07-18 14:08 - 00019808 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-multibyte-l1-1-0.dll
2016-02-09 05:03 - 2015-07-18 14:08 - 00017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-string-l1-1-0.dll
2016-02-09 05:03 - 2015-07-18 14:08 - 00017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-stdio-l1-1-0.dll
2016-02-09 05:03 - 2015-07-18 14:08 - 00016224 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-runtime-l1-1-0.dll
2016-02-09 05:03 - 2015-07-18 14:08 - 00015712 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-convert-l1-1-0.dll
2016-02-09 05:03 - 2015-07-18 14:08 - 00014176 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-time-l1-1-0.dll
2016-02-09 05:03 - 2015-07-18 14:08 - 00014176 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-2-0.dll
2016-02-09 05:03 - 2015-07-18 14:08 - 00013664 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-filesystem-l1-1-0.dll
2016-02-09 05:03 - 2015-07-18 14:08 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-process-l1-1-0.dll
2016-02-09 05:03 - 2015-07-18 14:08 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-heap-l1-1-0.dll
2016-02-09 05:03 - 2015-07-18 14:08 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-conio-l1-1-0.dll
2016-02-09 05:03 - 2015-07-18 14:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-utility-l1-1-0.dll
2016-02-09 05:03 - 2015-07-18 14:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-locale-l1-1-0.dll
2016-02-09 05:03 - 2015-07-18 14:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-environment-l1-1-0.dll
2016-02-09 05:03 - 2015-07-18 14:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-2-0.dll
2016-02-09 05:03 - 2015-07-18 14:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-1.dll
2016-02-09 05:03 - 2015-07-18 14:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-eventing-provider-l1-1-0.dll
2016-02-09 05:03 - 2015-07-18 14:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l2-1-0.dll
2016-02-09 05:03 - 2015-07-18 14:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-timezone-l1-1-0.dll
2016-02-09 05:03 - 2015-07-18 14:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l2-1-0.dll
2016-02-09 05:03 - 2015-07-18 14:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-2-0.dll
2016-02-09 05:03 - 2015-07-10 18:34 - 03221504 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2016-02-09 05:03 - 2015-07-10 18:34 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2016-02-09 05:03 - 2015-07-10 18:33 - 00131584 _____ (Microsoft Corporation) C:\Windows\system32\aaclient.dll
2016-02-09 05:03 - 2015-01-29 04:02 - 02311168 _____ (Microsoft Corporation) C:\Windows\system32\wpdshext.dll
2016-02-09 05:03 - 2013-10-04 02:58 - 00152576 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll
2016-02-09 05:03 - 2013-10-04 02:56 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll
2016-02-09 05:03 - 2013-07-03 04:36 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys
2016-02-09 05:03 - 2013-07-03 04:36 - 00025728 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys
2016-02-09 05:03 - 2012-07-04 20:45 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\RNDISMP.sys
2016-02-09 05:02 - 2015-11-11 19:39 - 01242624 _____ (Microsoft Corporation) C:\Windows\system32\comsvcs.dll
2016-02-09 05:02 - 2015-11-11 19:39 - 00487936 _____ (Microsoft Corporation) C:\Windows\system32\catsrvut.dll
2016-02-09 05:02 - 2015-07-01 21:30 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll
2016-02-09 05:02 - 2015-07-01 21:30 - 00082432 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll
2016-02-09 05:02 - 2013-02-12 04:32 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usb8023.sys
2016-02-09 05:02 - 2011-04-29 03:46 - 00311808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys
2016-02-09 05:02 - 2011-04-29 03:46 - 00310272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
2016-02-09 05:02 - 2011-04-29 03:46 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
2016-02-09 05:01 - 2015-08-27 18:58 - 01391104 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2016-02-09 05:01 - 2015-08-27 18:58 - 01241088 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2016-02-09 05:01 - 2015-08-27 18:51 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll
2016-02-09 05:01 - 2015-08-27 18:51 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2016-02-09 05:01 - 2015-08-05 18:41 - 00751104 _____ (Microsoft Corporation) C:\Windows\system32\schedsvc.dll
2016-02-09 05:01 - 2015-07-09 18:42 - 00179712 _____ (Microsoft Corporation) C:\Windows\system32\notepad.exe
2016-02-09 05:01 - 2015-07-09 18:42 - 00179712 _____ (Microsoft Corporation) C:\Windows\notepad.exe
2016-02-09 05:01 - 2013-10-30 03:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll
2016-02-09 05:01 - 2013-01-24 05:47 - 00196328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fvevol.sys
2016-02-09 05:01 - 2012-11-02 06:11 - 00376832 _____ (Microsoft Corporation) C:\Windows\system32\dpnet.dll
2016-02-09 05:01 - 2011-06-16 05:33 - 00180224 _____ (Microsoft Corporation) C:\Windows\system32\xmllite.dll
2016-02-09 05:01 - 2011-02-18 06:39 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\prevhost.exe
2016-02-09 05:00 - 2015-06-15 22:43 - 02364416 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2016-02-09 05:00 - 2015-06-15 22:43 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
2016-02-09 05:00 - 2015-06-15 22:42 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\msiexec.exe
2016-02-09 05:00 - 2015-06-15 22:37 - 00025088 _____ (Microsoft Corporation) C:\Windows\system32\msimsg.dll
2016-02-09 05:00 - 2014-11-11 03:44 - 00186880 _____ (Microsoft Corporation) C:\Windows\system32\pku2u.dll
2016-02-09 05:00 - 2014-06-16 02:44 - 00730048 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2016-02-09 05:00 - 2014-06-16 02:44 - 00219072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2016-02-09 05:00 - 2014-06-16 02:40 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll
2016-02-09 05:00 - 2013-10-19 02:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
2016-02-09 05:00 - 2011-03-03 06:38 - 00270336 _____ (Microsoft Corporation) C:\Windows\system32\dnsapi.dll
2016-02-09 05:00 - 2011-03-03 06:38 - 00132608 _____ (Microsoft Corporation) C:\Windows\system32\dnsrslvr.dll
2016-02-09 05:00 - 2011-03-03 06:36 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\dnscacheugc.exe
2016-02-09 04:59 - 2015-10-29 18:50 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\shimeng.dll
2016-02-09 04:59 - 2015-10-29 18:49 - 00295936 _____ (Microsoft Corporation) C:\Windows\system32\apphelp.dll
2016-02-09 04:59 - 2015-10-29 18:49 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\aelupsvc.dll
2016-02-09 04:59 - 2015-10-29 18:49 - 00020992 _____ (Microsoft Corporation) C:\Windows\system32\sdbinst.exe
2016-02-09 04:59 - 2015-07-15 18:59 - 00078784 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mountmgr.sys
2016-02-09 04:59 - 2015-07-15 18:55 - 01159168 _____ (Microsoft Corporation) C:\Windows\system32\sysmain.dll
2016-02-09 04:59 - 2015-07-15 18:54 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\msmmsp.dll
2016-02-09 04:59 - 2014-08-12 02:36 - 00701440 _____ (Microsoft Corporation) C:\Windows\system32\IMJP10K.DLL
2016-02-09 04:59 - 2014-03-04 10:17 - 00538112 _____ (Microsoft Corporation) C:\Windows\system32\objsel.dll
2016-02-09 04:59 - 2014-03-04 10:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\cngprovider.dll
2016-02-09 04:59 - 2014-03-04 10:17 - 00049664 _____ (Microsoft Corporation) C:\Windows\system32\adprovider.dll
2016-02-09 04:59 - 2014-03-04 10:17 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\capiprovider.dll
2016-02-09 04:59 - 2014-03-04 10:17 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\dpapiprovider.dll
2016-02-09 04:59 - 2014-03-04 10:17 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\dimsroam.dll
2016-02-09 04:59 - 2014-03-04 10:17 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\wincredprovider.dll
2016-02-09 04:59 - 2013-10-12 03:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx
2016-02-09 04:59 - 2013-10-12 03:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll
2016-02-09 04:59 - 2013-10-12 02:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe
2016-02-09 04:59 - 2013-10-12 02:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe
2016-02-09 04:59 - 2012-08-21 21:12 - 00245760 _____ (Microsoft Corporation) C:\Windows\system32\OxpsConverter.exe
2016-02-09 04:59 - 2011-12-30 06:27 - 00478720 _____ (Microsoft Corporation) C:\Windows\system32\timedate.cpl
2016-02-09 04:59 - 2011-08-17 05:24 - 00465408 _____ (Microsoft Corporation) C:\Windows\system32\psisdecd.dll
2016-02-09 04:59 - 2011-08-17 05:19 - 00075776 _____ (Microsoft Corporation) C:\Windows\system32\psisrndr.ax
2016-02-09 04:58 - 2015-11-05 20:00 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2016-02-09 04:58 - 2015-10-13 17:31 - 00338944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2016-02-09 04:58 - 2015-10-13 17:31 - 00074752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys
2016-02-09 04:58 - 2015-09-02 03:48 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2016-02-09 04:58 - 2015-09-02 03:48 - 00034304 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2016-02-09 04:58 - 2015-09-02 03:48 - 00026624 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2016-02-09 04:58 - 2015-09-02 03:48 - 00010240 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2016-02-09 04:58 - 2015-09-02 02:33 - 00299520 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2016-02-09 04:58 - 2014-09-04 06:04 - 00372736 _____ (Microsoft Corporation) C:\Windows\system32\rastls.dll
2016-02-09 04:58 - 2013-05-10 04:20 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\cryptdlg.dll
2016-02-09 04:58 - 2011-08-27 05:26 - 00233472 _____ (Microsoft Corporation) C:\Windows\system32\oleacc.dll
2016-02-09 04:58 - 2011-05-24 11:44 - 00293376 _____ (Microsoft Corporation) C:\Windows\system32\umpnpmgr.dll
2016-02-09 04:57 - 2015-11-03 19:55 - 00179712 _____ (Microsoft Corporation) C:\Windows\system32\els.dll
2016-02-09 04:57 - 2015-10-13 05:50 - 00712640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys
2016-02-09 04:57 - 2015-04-11 04:07 - 00054656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\stream.sys
2016-02-09 04:57 - 2015-03-04 05:16 - 00249784 _____ (Microsoft Corporation) C:\Windows\system32\clfs.sys
2016-02-09 04:57 - 2015-03-04 05:10 - 00058880 _____ (Microsoft Corporation) C:\Windows\system32\clfsw32.dll
2016-02-09 04:57 - 2015-01-17 03:30 - 00828928 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll
2016-02-09 04:57 - 2014-02-04 03:07 - 00234432 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys
2016-02-09 04:57 - 2014-02-04 03:07 - 00149440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
2016-02-09 04:57 - 2014-02-04 03:07 - 00027072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys
2016-02-09 04:57 - 2014-02-04 03:00 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\iologmsg.dll
2016-02-09 04:57 - 2014-01-28 03:07 - 00185344 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll
2016-02-09 04:57 - 2013-08-28 01:57 - 00434688 _____ (Microsoft Corporation) C:\Windows\system32\scavengeui.dll
2016-02-09 04:57 - 2013-05-13 04:08 - 00903168 _____ (Microsoft Corporation) C:\Windows\system32\certutil.exe
2016-02-09 04:57 - 2013-05-13 04:08 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\certenc.dll
2016-02-09 04:57 - 2013-04-26 05:55 - 00492544 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll
2016-02-09 04:57 - 2013-03-19 04:33 - 00040960 _____ (Microsoft Corporation) C:\Windows\system32\wwanprotdim.dll
2016-02-09 04:57 - 2011-05-03 05:30 - 00741376 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2016-02-09 04:56 - 2015-07-22 18:53 - 00937984 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
2016-02-09 04:56 - 2015-07-22 18:53 - 00635392 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2016-02-09 04:56 - 2015-07-22 17:38 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\UtcResources.dll
2016-02-09 04:56 - 2012-10-03 17:42 - 00175104 _____ (Microsoft Corporation) C:\Windows\system32\netcorehc.dll
2016-02-09 04:56 - 2012-10-03 17:42 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\netevent.dll
2016-02-09 04:56 - 2012-10-03 17:40 - 00499712 _____ (Microsoft Corporation) C:\Windows\system32\iphlpsvc.dll
2016-02-09 04:56 - 2012-10-03 16:21 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpipreg.sys
2016-02-09 04:56 - 2011-05-04 05:34 - 01549312 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll
2016-02-09 04:56 - 2011-05-04 05:32 - 01401344 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll
2016-02-09 04:56 - 2011-05-04 05:32 - 00666624 _____ (Microsoft Corporation) C:\Windows\system32\mssvp.dll
2016-02-09 04:56 - 2011-05-04 05:32 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\mssph.dll
2016-02-09 04:56 - 2011-05-04 05:32 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\mssphtb.dll
2016-02-09 04:56 - 2011-05-04 05:32 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\msscntrs.dll
2016-02-09 04:56 - 2011-05-04 05:28 - 00427520 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe
2016-02-09 04:56 - 2011-05-04 05:28 - 00164352 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe
2016-02-09 04:56 - 2011-05-04 05:28 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\SearchFilterHost.exe
2016-02-09 04:55 - 2015-07-09 18:42 - 01372160 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll
2016-02-09 04:55 - 2015-07-09 18:42 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\dwmapi.dll
2016-02-09 04:55 - 2014-06-18 02:51 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe
2016-02-09 04:55 - 2014-01-24 03:18 - 01212352 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2016-02-09 04:55 - 2012-07-04 22:16 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\netapi32.dll
2016-02-09 04:55 - 2012-07-04 22:14 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\browser.dll
2016-02-09 04:55 - 2012-07-04 22:14 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\browcli.dll
2016-02-09 04:55 - 2012-06-06 06:03 - 00805376 _____ (Microsoft Corporation) C:\Windows\system32\cdosys.dll
2016-02-09 04:55 - 2011-02-12 06:35 - 00191488 _____ (Microsoft Corporation) C:\Windows\system32\FXSCOVER.exe
2016-02-09 04:55 - 2010-12-23 06:54 - 00850944 _____ (Microsoft Corporation) C:\Windows\system32\sbe.dll
2016-02-09 04:55 - 2010-12-23 06:50 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\mpg2splt.ax
2016-02-09 04:54 - 2015-11-03 19:56 - 00627712 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll
2016-02-09 04:54 - 2015-05-25 19:01 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\sechost.dll
2016-02-09 04:54 - 2015-05-25 19:00 - 00364544 _____ (Microsoft Corporation) C:\Windows\system32\tracerpt.exe
2016-02-09 04:54 - 2015-05-25 19:00 - 00082944 _____ (Microsoft Corporation) C:\Windows\system32\logman.exe
2016-02-09 04:54 - 2015-05-25 19:00 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\typeperf.exe
2016-02-09 04:54 - 2015-05-25 19:00 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\relog.exe
2016-02-09 04:54 - 2015-05-25 19:00 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\diskperf.exe
2016-02-09 04:54 - 2015-04-27 20:05 - 00179200 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2016-02-09 04:54 - 2015-04-27 20:04 - 01174528 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2016-02-09 04:54 - 2015-04-27 20:04 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2016-02-09 04:54 - 2015-04-27 20:04 - 00103936 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2016-02-09 04:54 - 2015-04-18 03:56 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2016-02-09 04:54 - 2015-04-13 04:19 - 00259072 _____ (Microsoft Corporation) C:\Windows\system32\services.exe
2016-02-09 04:53 - 2015-12-08 22:53 - 00509952 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2016-02-09 04:53 - 2015-12-08 22:53 - 00305664 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2016-02-09 04:53 - 2015-10-01 18:50 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
2016-02-09 04:53 - 2015-10-01 18:50 - 00050688 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
2016-02-09 04:53 - 2015-10-01 18:50 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2016-02-09 04:53 - 2015-10-01 18:50 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
2016-02-09 04:53 - 2015-10-01 18:50 - 00016896 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
2016-02-09 04:53 - 2015-10-01 17:53 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2016-02-09 04:53 - 2014-08-01 12:35 - 00793600 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll
2016-02-09 04:53 - 2014-04-05 03:25 - 01294272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2016-02-09 04:53 - 2014-04-05 03:24 - 00187840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2016-02-09 04:53 - 2013-11-26 12:11 - 00240576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2016-02-09 04:52 - 2014-06-18 23:23 - 01131664 _____ (Microsoft Corporation) C:\Windows\system32\dfshim.dll
2016-02-09 04:52 - 2014-06-18 23:23 - 00156824 _____ (Microsoft Corporation) C:\Windows\system32\mscorier.dll
2016-02-09 04:52 - 2014-06-18 23:23 - 00081560 _____ (Microsoft Corporation) C:\Windows\system32\mscories.dll
2016-02-09 04:52 - 2012-12-07 13:26 - 00308736 _____ (Microsoft Corporation) C:\Windows\system32\Wpc.dll
2016-02-09 04:52 - 2012-12-07 13:20 - 02576384 _____ (Microsoft Corporation) C:\Windows\system32\gameux.dll
2016-02-09 04:52 - 2012-12-07 11:46 - 00055296 _____ (Microsoft) C:\Windows\system32\cero.rs
2016-02-09 04:52 - 2012-12-07 11:46 - 00051712 _____ (Microsoft) C:\Windows\system32\esrb.rs
2016-02-09 04:52 - 2012-12-07 11:46 - 00046592 _____ (Microsoft) C:\Windows\system32\fpb.rs
2016-02-09 04:52 - 2012-12-07 11:46 - 00045568 _____ (Microsoft) C:\Windows\system32\oflc-nz.rs
2016-02-09 04:52 - 2012-12-07 11:46 - 00044544 _____ (Microsoft) C:\Windows\system32\pegibbfc.rs
2016-02-09 04:52 - 2012-12-07 11:46 - 00043520 _____ (Microsoft) C:\Windows\system32\csrr.rs
2016-02-09 04:52 - 2012-12-07 11:46 - 00040960 _____ (Microsoft) C:\Windows\system32\cob-au.rs
2016-02-09 04:52 - 2012-12-07 11:46 - 00030720 _____ (Microsoft) C:\Windows\system32\usk.rs
2016-02-09 04:52 - 2012-12-07 11:46 - 00023552 _____ (Microsoft) C:\Windows\system32\oflc.rs
2016-02-09 04:52 - 2012-12-07 11:46 - 00021504 _____ (Microsoft) C:\Windows\system32\grb.rs
2016-02-09 04:52 - 2012-12-07 11:46 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-pt.rs
2016-02-09 04:52 - 2012-12-07 11:46 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-fi.rs
2016-02-09 04:52 - 2012-12-07 11:46 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi.rs
2016-02-09 04:52 - 2012-12-07 11:46 - 00015360 _____ (Microsoft) C:\Windows\system32\djctq.rs
2016-02-09 04:51 - 2015-11-13 23:50 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\mapistub.dll
2016-02-09 04:51 - 2015-11-13 23:50 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\mapi32.dll
2016-02-09 04:51 - 2015-11-13 23:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\fixmapi.exe
2016-02-09 04:51 - 2015-11-05 20:02 - 00014848 _____ (Microsoft Corporation) C:\Windows\system32\wshrm.dll
2016-02-09 04:51 - 2015-11-05 10:48 - 00117760 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rmcast.sys
2016-02-09 04:51 - 2015-02-18 08:06 - 00123904 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe
2016-02-09 04:51 - 2015-02-03 04:12 - 00171520 _____ (Microsoft Corporation) C:\Windows\system32\ubpm.dll
2016-02-09 04:51 - 2014-12-19 03:43 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll
2016-02-09 04:51 - 2014-12-11 18:47 - 00046592 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe
2016-02-09 04:51 - 2014-11-26 04:32 - 00571904 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2016-02-09 04:51 - 2014-10-30 02:45 - 00155136 _____ (Microsoft Corporation) C:\Windows\system32\charmap.exe
2016-02-09 04:51 - 2014-10-25 02:32 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll
2016-02-09 04:51 - 2013-10-12 03:03 - 00656896 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll
2016-02-09 04:51 - 2013-10-12 03:01 - 00679424 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2016-02-09 04:51 - 2013-10-12 03:01 - 00216576 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL
2016-02-09 04:51 - 2013-08-05 02:56 - 00133056 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ataport.sys
2016-02-09 04:51 - 2013-07-26 02:55 - 00180224 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll
2016-02-09 04:51 - 2012-09-25 23:47 - 00078336 _____ (Microsoft Corporation) C:\Windows\system32\synceng.dll
2016-02-09 04:51 - 2012-05-14 05:33 - 00769024 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
2016-02-09 04:51 - 2012-03-17 08:27 - 00056176 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\partmgr.sys
2016-02-09 04:51 - 2011-12-16 08:52 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\msvcrt.dll
2016-02-09 04:51 - 2011-11-17 06:35 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\webio.dll
2016-02-09 04:51 - 2011-06-15 09:55 - 00319488 _____ (Microsoft Corporation) C:\Windows\system32\odbcjt32.dll
2016-02-09 04:51 - 2011-06-15 09:55 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\odbctrac.dll
2016-02-09 04:51 - 2011-06-15 09:55 - 00122880 _____ (Microsoft Corporation) C:\Windows\system32\odbccp32.dll
2016-02-09 04:51 - 2011-06-15 09:55 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\odbccu32.dll
2016-02-09 04:51 - 2011-06-15 09:55 - 00081920 _____ (Microsoft Corporation) C:\Windows\system32\odbccr32.dll
2016-02-09 04:50 - 2015-06-25 10:48 - 00105408 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2016-02-09 04:50 - 2015-06-25 10:44 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll
2016-02-09 04:50 - 2014-07-17 02:40 - 00157696 _____ (Microsoft Corporation) C:\Windows\system32\winsta.dll
2016-02-09 04:50 - 2014-07-17 02:39 - 01051136 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2016-02-09 04:50 - 2014-07-17 02:39 - 00304128 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2016-02-09 04:50 - 2014-07-17 02:39 - 00130048 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorekmts.dll
2016-02-09 04:50 - 2014-07-17 02:03 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys
2016-02-09 04:50 - 2014-07-17 02:02 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys
2016-02-09 04:50 - 2012-10-09 18:40 - 00193536 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcore6.dll
2016-02-09 04:50 - 2012-10-09 18:40 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcsvc6.dll
2016-02-09 04:50 - 2012-04-26 05:45 - 00058880 _____ (Microsoft Corporation) C:\Windows\system32\rdpwsx.dll
2016-02-09 04:50 - 2012-04-26 05:41 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\rdrmemptylst.exe
2016-02-09 04:50 - 2012-01-04 09:58 - 00442880 _____ (Microsoft Corporation) C:\Windows\system32\ntshrui.dll
2016-02-09 04:49 - 2015-07-15 03:55 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\basesrv.dll
2016-02-09 04:49 - 2015-02-25 04:03 - 00514560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys
2016-02-09 04:49 - 2013-07-12 11:07 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbcir.sys
2016-02-09 04:48 - 2015-12-08 22:54 - 01620992 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2016-02-09 04:48 - 2015-12-08 22:54 - 01568768 _____ (Microsoft Corporation) C:\Windows\system32\WMVENCOD.DLL
2016-02-09 04:48 - 2015-12-08 22:54 - 01325056 _____ (Microsoft Corporation) C:\Windows\system32\WMSPDMOE.DLL
2016-02-09 04:48 - 2015-12-08 22:54 - 01202688 _____ (Microsoft Corporation) C:\Windows\system32\WMALFXGFXDSP.dll
2016-02-09 04:48 - 2015-12-08 22:54 - 00902144 _____ (Microsoft Corporation) C:\Windows\system32\WMADMOD.DLL
2016-02-09 04:48 - 2015-12-08 22:54 - 00815616 _____ (Microsoft Corporation) C:\Windows\system32\WMADMOE.DLL
2016-02-09 04:48 - 2015-12-08 22:54 - 00740352 _____ (Microsoft Corporation) C:\Windows\system32\wmpmde.dll
2016-02-09 04:48 - 2015-12-08 22:54 - 00739328 _____ (Microsoft Corporation) C:\Windows\system32\WMSPDMOD.DLL
2016-02-09 04:48 - 2015-12-08 22:54 - 00665088 _____ (Microsoft Corporation) C:\Windows\system32\WMVXENCD.DLL
2016-02-09 04:48 - 2015-12-08 22:54 - 00541184 _____ (Microsoft Corporation) C:\Windows\system32\WMVSDECD.DLL
2016-02-09 04:48 - 2015-12-08 22:54 - 00358400 _____ (Microsoft Corporation) C:\Windows\system32\WMVSENCD.DLL
2016-02-09 04:48 - 2015-12-08 22:54 - 00154112 _____ (Microsoft Corporation) C:\Windows\system32\VIDRESZR.DLL
2016-02-09 04:48 - 2015-12-08 22:53 - 03209728 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2016-02-09 04:48 - 2015-12-08 22:53 - 01329664 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll
2016-02-09 04:48 - 2015-12-08 22:53 - 00970240 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2adec.dll
2016-02-09 04:48 - 2015-12-08 22:53 - 00829952 _____ (Microsoft Corporation) C:\Windows\system32\MSMPEG2ENC.DLL
2016-02-09 04:48 - 2015-12-08 22:53 - 00728576 _____ (Microsoft Corporation) C:\Windows\system32\mcmde.dll
2016-02-09 04:48 - 2015-12-08 22:53 - 00609280 _____ (Microsoft Corporation) C:\Windows\system32\MFWMAAEC.DLL
2016-02-09 04:48 - 2015-12-08 22:53 - 00519680 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
2016-02-09 04:48 - 2015-12-08 22:53 - 00489984 _____ (Microsoft Corporation) C:\Windows\system32\evr.dll
2016-02-09 04:48 - 2015-12-08 22:53 - 00415744 _____ (Microsoft Corporation) C:\Windows\system32\MP4SDECD.DLL
2016-02-09 04:48 - 2015-12-08 22:53 - 00354816 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll
2016-02-09 04:48 - 2015-12-08 22:53 - 00338944 _____ (Microsoft Corporation) C:\Windows\system32\SysFxUI.dll
2016-02-09 04:48 - 2015-12-08 22:53 - 00241152 _____ (Microsoft Corporation) C:\Windows\system32\MPG4DECD.DLL
2016-02-09 04:48 - 2015-12-08 22:53 - 00241152 _____ (Microsoft Corporation) C:\Windows\system32\MP43DECD.DLL
2016-02-09 04:48 - 2015-12-08 22:53 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\RESAMPLEDMO.DLL
2016-02-09 04:48 - 2015-12-08 22:53 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\qasf.dll
2016-02-09 04:48 - 2015-12-08 22:53 - 00193536 _____ (Microsoft Corporation) C:\Windows\system32\ksproxy.ax
2016-02-09 04:48 - 2015-12-08 22:53 - 00153600 _____ (Microsoft Corporation) C:\Windows\system32\COLORCNV.DLL
2016-02-09 04:48 - 2015-12-08 22:53 - 00103424 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
2016-02-09 04:48 - 2015-12-08 22:53 - 00079872 _____ (Microsoft Corporation) C:\Windows\system32\MP3DMOD.DLL
2016-02-09 04:48 - 2015-12-08 22:53 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\devenum.dll
2016-02-09 04:48 - 2015-12-08 22:53 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\mfvdsp.dll
2016-02-09 04:48 - 2015-12-08 22:53 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\rrinstaller.exe
2016-02-09 04:48 - 2015-12-08 22:53 - 00023040 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe
2016-02-09 04:48 - 2015-12-08 22:53 - 00004608 _____ (Microsoft Corporation) C:\Windows\system32\ksuser.dll
2016-02-09 04:48 - 2015-12-08 22:50 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\mferror.dll
2016-02-09 04:48 - 2015-12-08 22:43 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys
2016-02-09 04:48 - 2015-12-08 22:11 - 00177152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys
2016-02-09 04:48 - 2015-12-08 22:11 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmkaud.sys
2016-02-09 04:48 - 2015-06-02 00:47 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\cewmdm.dll
2016-02-09 04:48 - 2015-04-29 19:07 - 11411456 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2016-02-09 04:48 - 2015-04-29 19:07 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll
2016-02-09 04:48 - 2015-04-29 19:07 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx
2016-02-09 04:48 - 2015-04-29 19:07 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll
2016-02-09 04:48 - 2015-04-29 19:05 - 12625408 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2016-02-09 04:48 - 2015-02-03 04:12 - 00988160 _____ (Microsoft Corporation) C:\Windows\system32\drmv2clt.dll
2016-02-09 04:48 - 2015-02-03 04:12 - 00744960 _____ (Microsoft Corporation) C:\Windows\system32\blackbox.dll
2016-02-09 04:48 - 2015-02-03 04:12 - 00617984 _____ (Microsoft Corporation) C:\Windows\system32\wmdrmsdk.dll
2016-02-09 04:48 - 2014-12-06 04:50 - 00242688 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll
2016-02-09 04:48 - 2014-01-29 03:06 - 00381440 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2016-02-09 04:48 - 2013-11-27 02:14 - 00258560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2016-02-09 04:48 - 2013-11-27 02:13 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2016-02-09 04:48 - 2013-11-27 02:13 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2016-02-09 04:48 - 2013-11-27 02:13 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2016-02-09 04:48 - 2013-11-27 02:13 - 00024064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2016-02-09 04:48 - 2013-11-27 02:13 - 00020480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2016-02-09 04:48 - 2013-11-27 02:13 - 00006016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2016-02-09 04:48 - 2013-06-25 23:56 - 00527064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys
2016-02-09 04:48 - 2012-11-28 23:57 - 00047720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdfLdr.sys
2016-02-09 04:48 - 2012-11-28 23:57 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\Wdfres.dll
2016-02-09 04:48 - 2012-11-28 23:57 - 00000003 _____ C:\Windows\system32\Drivers\MsftWdf_Kernel_01011_Inbox_Critical.Wdf
2016-02-09 04:48 - 2012-10-03 17:42 - 00156672 _____ (Microsoft Corporation) C:\Windows\system32\ncsi.dll
2016-02-09 04:48 - 2012-10-03 17:42 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\nlaapi.dll
2016-02-09 04:48 - 2011-03-11 06:33 - 01164288 _____ (Microsoft Corporation) C:\Windows\system32\mfc42u.dll
2016-02-09 04:48 - 2011-03-11 06:33 - 01137664 _____ (Microsoft Corporation) C:\Windows\system32\mfc42.dll
2016-02-09 04:48 - 2011-02-23 05:47 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bowser.sys
2016-02-09 04:47 - 2015-02-03 04:12 - 01005056 _____ (Microsoft Corporation) C:\Windows\system32\cryptui.dll
2016-02-09 04:47 - 2015-02-03 04:12 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\msscp.dll
2016-02-09 04:47 - 2015-02-03 04:12 - 00475136 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2016-02-09 04:47 - 2015-02-03 04:12 - 00442880 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2016-02-09 04:47 - 2015-02-03 04:12 - 00406016 _____ (Microsoft Corporation) C:\Windows\system32\drmmgrtn.dll
2016-02-09 04:47 - 2015-02-03 04:12 - 00374784 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2016-02-09 04:47 - 2015-02-03 04:12 - 00275968 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll
2016-02-09 04:47 - 2015-02-03 04:12 - 00265216 _____ (Microsoft Corporation) C:\Windows\system32\msnetobj.dll
2016-02-09 04:47 - 2015-02-03 04:12 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2016-02-09 04:47 - 2015-02-03 04:12 - 00157184 _____ (Microsoft Corporation) C:\Windows\system32\pcasvc.dll
2016-02-09 04:47 - 2015-02-03 04:12 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\cryptsp.dll
2016-02-09 04:47 - 2015-02-03 04:12 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\pcadm.dll
2016-02-09 04:47 - 2015-02-03 04:11 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe
2016-02-09 04:47 - 2015-02-03 04:11 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\pcawrk.exe
2016-02-09 04:47 - 2015-02-03 04:11 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\pcalua.exe
2016-02-09 04:47 - 2015-02-03 04:10 - 00008704 _____ (Microsoft Corporation) C:\Windows\system32\pcaevts.dll
2016-02-09 04:47 - 2015-02-03 04:00 - 00593920 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\PEAuth.sys
2016-02-09 04:47 - 2014-12-08 03:46 - 00308224 _____ (Microsoft Corporation) C:\Windows\system32\scesrv.dll
2016-02-09 04:47 - 2014-10-31 23:22 - 00521384 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2016-02-09 04:47 - 2014-06-28 01:21 - 00455752 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
2016-02-09 04:47 - 2014-06-28 01:21 - 00409272 _____ (Microsoft Corporation) C:\Windows\system32\ci.dll
2016-02-09 04:46 - 2015-04-24 18:56 - 00530432 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
2016-02-09 04:46 - 2014-10-14 02:50 - 00523776 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll
2016-02-09 04:46 - 2013-12-04 03:03 - 00428032 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll
2016-02-09 04:46 - 2013-12-04 03:03 - 00423936 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll
2016-02-09 04:46 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll
2016-02-09 04:46 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll
2016-02-09 04:46 - 2013-12-04 03:02 - 00390144 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll
2016-02-09 04:46 - 2013-12-04 02:54 - 00594944 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe
2016-02-09 04:46 - 2013-12-04 02:54 - 00572416 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe
2016-02-09 04:46 - 2013-12-04 02:54 - 00510976 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe
2016-02-09 04:46 - 2013-12-04 02:54 - 00508928 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe
2016-02-09 04:45 - 2014-10-03 02:45 - 01177088 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll
2016-02-09 04:45 - 2014-10-03 02:45 - 00248832 _____ (Microsoft Corporation) C:\Windows\system32\WSManMigrationPlugin.dll
2016-02-09 04:45 - 2014-10-03 02:45 - 00214016 _____ (Microsoft Corporation) C:\Windows\system32\WsmWmiPl.dll
2016-02-09 04:45 - 2014-10-03 02:45 - 00145920 _____ (Microsoft Corporation) C:\Windows\system32\WsmAuto.dll
2016-02-09 04:45 - 2014-10-03 02:44 - 00198656 _____ (Microsoft Corporation) C:\Windows\system32\WSManHTTPConfig.exe
2016-02-09 04:23 - 2012-02-17 06:34 - 00826880 _____ (Microsoft Corporation) C:\Windows\system32\rdpcore.dll
2016-02-09 04:23 - 2012-02-17 05:13 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdtcp.sys

Alt 03.03.2016, 06:44   #12
paeckchen1
 
Firefox öffnet selbstständig Internetseiten - Standard

Firefox öffnet selbstständig Internetseiten


Teil 2:


Code:
ATTFilter
2016-02-08 10:45 - 2016-02-08 10:45 - 00000000 ____D C:\Users\Tina Thiel\Marlene
2016-02-08 10:41 - 2016-03-02 16:47 - 00000000 ____D C:\Users\Tina Thiel\Eigene Dateien TINA
2016-02-08 10:38 - 2016-02-08 10:38 - 00000000 ____D C:\Users\Tina Thiel\Kläranlage
2016-02-08 10:38 - 2016-02-08 10:38 - 00000000 ____D C:\Users\Tina Thiel\Dateien vom Desktop
2016-02-08 10:37 - 2016-02-08 10:41 - 00000000 ____D C:\Users\Tina Thiel\Moritz
2016-02-08 10:37 - 2016-02-08 10:37 - 00000000 ____D C:\Users\Tina Thiel\Steuer-Sparbuch
2016-02-08 10:37 - 2016-02-08 10:37 - 00000000 ____D C:\Users\Tina Thiel\Desktop\Schriften
2016-02-08 10:36 - 2016-02-08 10:42 - 00000000 ____D C:\Users\Tina Thiel\Nähen
2016-02-08 10:30 - 2016-02-16 05:46 - 00000000 ____D C:\Users\Tina Thiel\Sticken
2016-02-07 16:01 - 2016-02-07 16:01 - 00001300 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\paint.net.lnk
2016-02-07 16:01 - 2016-02-07 16:01 - 00001288 _____ C:\Users\Public\Desktop\paint.net.lnk
2016-02-07 16:00 - 2016-02-07 16:02 - 00000000 ____D C:\Users\Tina Thiel\AppData\Local\paint.net
2016-02-07 16:00 - 2016-02-07 16:01 - 00000000 ____D C:\Program Files\paint.net
2016-02-07 15:44 - 2016-02-07 15:44 - 00000000 ____D C:\Users\Tina Thiel\AppData\LocalLow\F-Secure
2016-02-07 14:59 - 2016-02-07 14:59 - 00000000 ____D C:\Users\Tina Thiel\AppData\Roaming\WinRAR
2016-02-07 14:59 - 2016-02-07 14:59 - 00000000 ____D C:\Users\Tina Thiel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2016-02-07 14:59 - 2016-02-07 14:59 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2016-02-07 14:59 - 2016-02-07 14:59 - 00000000 ____D C:\Program Files\WinRAR
2016-02-07 14:55 - 2016-02-07 14:55 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip
2016-02-07 14:55 - 2016-02-07 14:55 - 00000000 ____D C:\Program Files\7-Zip
2016-02-07 03:09 - 2016-02-07 03:09 - 00000000 ____D C:\Windows\system32\SPReview
2016-02-07 03:09 - 2016-02-07 03:09 - 00000000 ____D C:\Windows\system32\EventProviders
2016-02-06 05:06 - 2010-11-20 13:32 - 05066752 _____ (Microsoft Corporation) C:\Windows\system32\AuthFWSnapin.dll
2016-02-06 05:06 - 2010-11-20 13:29 - 00520064 _____ (Microsoft Corporation) C:\Windows\system32\mcupdate_GenuineIntel.dll
2016-02-06 05:06 - 2010-11-20 13:29 - 00014208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hwpolicy.sys
2016-02-06 05:06 - 2010-11-20 13:21 - 01667584 _____ (Microsoft Corporation) C:\Windows\system32\setupapi.dll
2016-02-06 05:06 - 2010-11-20 13:21 - 01128448 _____ (Microsoft Corporation) C:\Windows\system32\vssapi.dll
2016-02-06 05:06 - 2010-11-20 13:21 - 01115136 _____ (Microsoft Corporation) C:\Windows\system32\RacEngn.dll
2016-02-06 05:06 - 2010-11-20 13:21 - 01086976 _____ (Microsoft Corporation) C:\Windows\system32\wevtsvc.dll
2016-02-06 05:06 - 2010-11-20 13:21 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\SearchFolder.dll
2016-02-06 05:06 - 2010-11-20 13:21 - 00505856 _____ (Microsoft Corporation) C:\Windows\system32\taskschd.dll
2016-02-06 05:06 - 2010-11-20 13:21 - 00351232 _____ (Microsoft Corporation) C:\Windows\system32\winhttp.dll
2016-02-06 05:06 - 2010-11-20 13:21 - 00270848 _____ (Microsoft Corporation) C:\Windows\system32\tsmf.dll
2016-02-06 05:06 - 2010-11-20 13:21 - 00253952 _____ (Microsoft Corporation) C:\Windows\system32\spwizui.dll
2016-02-06 05:06 - 2010-11-20 13:21 - 00171008 _____ (Microsoft Corporation) C:\Windows\system32\umrdp.dll
2016-02-06 05:06 - 2010-11-20 13:21 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2016-02-06 05:06 - 2010-11-20 13:20 - 00585728 _____ (Microsoft Corporation) C:\Windows\system32\qmgr.dll
2016-02-06 05:06 - 2010-11-20 13:20 - 00573440 _____ (Microsoft Corporation) C:\Windows\system32\odbc32.dll
2016-02-06 05:06 - 2010-11-20 13:19 - 02291712 _____ (Microsoft Corporation) C:\Windows\system32\MSVidCtl.dll
2016-02-06 05:06 - 2010-11-20 13:19 - 00954752 _____ (Microsoft Corporation) C:\Windows\system32\mfc40.dll
2016-02-06 05:06 - 2010-11-20 13:19 - 00954288 _____ (Microsoft Corporation) C:\Windows\system32\mfc40u.dll
2016-02-06 05:06 - 2010-11-20 13:19 - 00593408 _____ (Microsoft Corporation) C:\Windows\system32\gpsvc.dll
2016-02-06 05:06 - 2010-11-20 13:19 - 00566272 _____ (Microsoft Corporation) C:\Windows\system32\MPSSVC.dll
2016-02-06 05:06 - 2010-11-20 13:18 - 01828352 _____ (Microsoft Corporation) C:\Windows\system32\d3d9.dll
2016-02-06 05:06 - 2010-11-20 13:18 - 01334272 _____ (Microsoft Corporation) C:\Windows\system32\CertEnroll.dll
2016-02-06 05:06 - 2010-11-20 13:18 - 00863744 _____ (Microsoft Corporation) C:\Windows\system32\diagperf.dll
2016-02-06 05:06 - 2010-11-20 13:18 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\dot3api.dll
2016-02-06 05:06 - 2010-11-20 13:17 - 03367424 _____ (Microsoft Corporation) C:\Windows\system32\WinSAT.exe
2016-02-06 05:06 - 2010-11-20 13:17 - 01203200 _____ (Microsoft Corporation) C:\Windows\system32\wbengine.exe
2016-02-06 05:06 - 2010-11-20 13:17 - 00456192 _____ (Microsoft Corporation) C:\Windows\system32\spinstall.exe
2016-02-06 05:06 - 2010-11-20 13:17 - 00280576 _____ (Microsoft Corporation) C:\Windows\system32\spreview.exe
2016-02-06 05:06 - 2010-11-20 13:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\PushPrinterConnections.exe
2016-02-06 05:06 - 2010-11-20 11:24 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys
2016-02-06 05:06 - 2010-11-20 11:22 - 00213504 _____ (Microsoft Corporation) C:\Windows\system32\rdpdd.dll
2016-02-06 05:06 - 2010-11-05 03:20 - 00146852 _____ C:\Windows\system32\systemsf.ebd
2016-02-06 05:06 - 2010-11-05 02:58 - 00297808 _____ (Microsoft Corporation) C:\Windows\system32\mscoree.dll
2016-02-06 05:06 - 2010-11-05 02:53 - 00295264 _____ (Microsoft Corporation) C:\Windows\system32\PresentationHost.exe
2016-02-06 05:06 - 2010-11-05 02:53 - 00099176 _____ (Microsoft Corporation) C:\Windows\system32\PresentationHostProxy.dll
2016-02-06 05:05 - 2010-11-20 13:36 - 01077248 _____ (Microsoft Corporation) C:\Windows\system32\Narrator.exe
2016-02-06 05:05 - 2010-11-20 13:36 - 00107008 _____ (Microsoft Corporation) C:\Windows\system32\NAPHLPR.DLL
2016-02-06 05:05 - 2010-11-20 13:36 - 00046080 _____ (Microsoft Corporation) C:\Windows\system32\NAPCRYPT.DLL
2016-02-06 05:05 - 2010-11-20 13:30 - 00245632 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\volsnap.sys
2016-02-06 05:05 - 2010-11-20 13:30 - 00175360 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vmbus.sys
2016-02-06 05:05 - 2010-11-20 13:30 - 00173440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdyboost.sys
2016-02-06 05:05 - 2010-11-20 13:30 - 00160128 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vhdmp.sys
2016-02-06 05:05 - 2010-11-20 13:30 - 00153984 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pci.sys
2016-02-06 05:05 - 2010-11-20 13:30 - 00140160 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\scsiport.sys
2016-02-06 05:05 - 2010-11-20 13:30 - 00130432 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mpio.sys
2016-02-06 05:05 - 2010-11-20 13:30 - 00116096 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msdsm.sys
2016-02-06 05:05 - 2010-11-20 13:30 - 00085376 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\sbp2port.sys
2016-02-06 05:05 - 2010-11-20 13:30 - 00053120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\volmgr.sys
2016-02-06 05:05 - 2010-11-20 13:30 - 00053120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\termdd.sys
2016-02-06 05:05 - 2010-11-20 13:30 - 00040704 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vmstorfl.sys
2016-02-06 05:05 - 2010-11-20 13:30 - 00028032 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storvsc.sys
2016-02-06 05:05 - 2010-11-20 13:30 - 00028032 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msahci.sys
2016-02-06 05:05 - 2010-11-20 13:29 - 02217856 _____ (Microsoft Corporation) C:\Windows\system32\bootres.dll
2016-02-06 05:05 - 2010-11-20 13:29 - 00274304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\acpi.sys
2016-02-06 05:05 - 2010-11-20 13:29 - 00194432 _____ (Microsoft Corporation) C:\Windows\system32\halmacpi.dll
2016-02-06 05:05 - 2010-11-20 13:29 - 00194432 _____ (Microsoft Corporation) C:\Windows\system32\hal.dll
2016-02-06 05:05 - 2010-11-20 13:29 - 00137088 _____ (Microsoft Corporation) C:\Windows\system32\halacpi.dll
2016-02-06 05:05 - 2010-11-20 13:29 - 00043392 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\winhv.sys
2016-02-06 05:05 - 2010-11-20 13:24 - 00271664 _____ (Microsoft Corporation) C:\Windows\system32\fveapi.dll
2016-02-06 05:05 - 2010-11-20 13:23 - 00144768 _____ (Microsoft Corporation) C:\Windows\system32\basecsp.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 02983424 _____ (Microsoft Corporation) C:\Windows\system32\UIRibbon.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 02755072 _____ (Microsoft Corporation) C:\Windows\system32\themeui.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 02202624 _____ (Microsoft Corporation) C:\Windows\system32\SensorsCpl.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 02157568 _____ (Microsoft Corporation) C:\Windows\system32\themecpl.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 02146304 _____ (Microsoft Corporation) C:\Windows\system32\SyncCenter.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 01712640 _____ (Microsoft Corporation) C:\Windows\system32\xpsservices.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 01624064 _____ (Microsoft Corporation) C:\Windows\system32\WMPEncEn.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 01363456 _____ (Microsoft Corporation) C:\Windows\system32\Query.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 01326592 _____ (Microsoft Corporation) C:\Windows\system32\wlanpref.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 01227776 _____ (Microsoft Corporation) C:\Windows\system32\wdc.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 01063936 _____ (Microsoft Corporation) C:\Windows\system32\werconcpl.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 01003008 _____ (Microsoft Corporation) C:\Windows\system32\WMNetMgr.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00974336 _____ (Microsoft Corporation) C:\Windows\system32\sppobjs.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00933376 _____ (Microsoft Corporation) C:\Windows\system32\Vault.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00907776 _____ (Microsoft Corporation) C:\Windows\system32\sdengin2.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00782336 _____ (Microsoft Corporation) C:\Windows\system32\webservices.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00778240 _____ (Microsoft Corporation) C:\Windows\system32\sqlsrv32.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00766464 _____ (Microsoft Corporation) C:\Windows\system32\wpccpl.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00755200 _____ (Microsoft Corporation) C:\Windows\system32\sud.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00750080 _____ (Microsoft Corporation) C:\Windows\system32\sdcpl.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00697344 _____ (Microsoft Corporation) C:\Windows\system32\SmiEngine.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00638976 _____ (Microsoft Corporation) C:\Windows\system32\VAN.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00600064 _____ (Microsoft Corporation) C:\Windows\system32\usercpl.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00577024 _____ (Microsoft Corporation) C:\Windows\system32\wpd_ci.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00551424 _____ (Microsoft Corporation) C:\Windows\system32\samsrv.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00507392 _____ (Microsoft Corporation) C:\Windows\system32\wmdrmdev.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00473600 _____ (Microsoft Corporation) C:\Windows\system32\riched20.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00464896 _____ (Microsoft Corporation) C:\Windows\system32\scrptadm.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00463360 _____ (Microsoft Corporation) C:\Windows\system32\wiaservc.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00458752 _____ (Microsoft Corporation) C:\Windows\system32\WSDApi.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00444928 _____ (Microsoft Corporation) C:\Windows\system32\wvc.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00436736 _____ (Microsoft Corporation) C:\Windows\system32\wmdrmnet.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00428544 _____ (Microsoft Corporation) C:\Windows\system32\shwebsvc.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00428032 _____ (Microsoft Corporation) C:\Windows\system32\wlanmsm.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00416768 _____ (Microsoft Corporation) C:\Windows\system32\wiadefui.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00412160 _____ (Microsoft Corporation) C:\Windows\system32\sppwinob.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00411648 _____ (Microsoft Corporation) C:\Windows\system32\wlangpui.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00410624 _____ (Microsoft Corporation) C:\Windows\system32\systemcpl.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00410112 _____ (Microsoft Corporation) C:\Windows\system32\wlanui.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00406528 _____ (Microsoft Corporation) C:\Windows\system32\wimgapi.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00380416 _____ (Microsoft Corporation) C:\Windows\system32\sxs.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00376832 _____ (Microsoft Corporation) C:\Windows\system32\rpcss.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00363520 _____ (Microsoft Corporation) C:\Windows\system32\StructuredQuery.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00352768 _____ (Microsoft Corporation) C:\Windows\system32\termmgr.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00352768 _____ (Microsoft Corporation) C:\Windows\system32\spwizeng.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00352256 _____ (Microsoft Corporation) C:\Windows\system32\wmpeffects.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00351232 _____ (Microsoft Corporation) C:\Windows\system32\wmicmiplugin.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00350720 _____ (Microsoft Corporation) C:\Windows\system32\WPDSp.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00350208 _____ (Microsoft Corporation) C:\Windows\system32\shlwapi.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00346624 _____ (Microsoft Corporation) C:\Windows\system32\untfs.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00335872 _____ (Microsoft Corporation) C:\Windows\system32\WinSATAPI.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00328192 _____ (Microsoft Corporation) C:\Windows\system32\shsvcs.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00327680 _____ (Microsoft Corporation) C:\Windows\system32\zipfldr.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00318976 _____ (Microsoft Corporation) C:\Windows\system32\raschap.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00316416 _____ (Microsoft Corporation) C:\Windows\system32\sharemediacpl.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\sqlcese30.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00305152 _____ (Microsoft Corporation) C:\Windows\system32\taskcomp.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00301568 _____ (Microsoft Corporation) C:\Windows\system32\srchadmin.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00299520 _____ (Microsoft Corporation) C:\Windows\system32\wmpdxm.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00286208 _____ (Microsoft Corporation) C:\Windows\system32\rasmans.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00276992 _____ (Microsoft Corporation) C:\Windows\system32\wcncsvc.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00269824 _____ (Microsoft Corporation) C:\Windows\system32\Wldap32.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00257024 _____ (Microsoft Corporation) C:\Windows\system32\srrstr.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\ReAgent.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00246272 _____ (Microsoft Corporation) C:\Windows\system32\scansetting.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00242176 _____ (Microsoft Corporation) C:\Windows\system32\vpnike.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00242176 _____ (Microsoft Corporation) C:\Windows\system32\tapisrv.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00233472 _____ (Microsoft Corporation) C:\Windows\system32\taskbarcpl.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00228352 _____ (Microsoft Corporation) C:\Windows\system32\stobject.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00222208 _____ (Microsoft Corporation) C:\Windows\system32\wavemsp.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00220160 _____ (Microsoft Corporation) C:\Windows\system32\SndVolSSO.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\ws2_32.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\upnp.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00202240 _____ (Microsoft Corporation) C:\Windows\system32\unattend.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00198144 _____ (Microsoft Corporation) C:\Windows\system32\wpdwcn.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00198144 _____ (Microsoft Corporation) C:\Windows\system32\sysclass.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00196608 _____ (Microsoft Corporation) C:\Windows\system32\wwanconn.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00196096 _____ (Microsoft Corporation) C:\Windows\system32\vaultsvc.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\winmm.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00193536 _____ (Microsoft Corporation) C:\Windows\system32\sppcomapi.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00189952 _____ (Microsoft Corporation) C:\Windows\system32\sqmapi.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00186368 _____ (Microsoft Corporation) C:\Windows\system32\rdpencom.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00182272 _____ (Microsoft Corporation) C:\Windows\system32\wmpsrcwp.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00181760 _____ (Microsoft Corporation) C:\Windows\system32\tcpipcfg.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\rasppp.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00175616 _____ (Microsoft Corporation) C:\Windows\system32\scecli.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00172544 _____ (Microsoft Corporation) C:\Windows\system32\spp.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\srvsvc.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00160256 _____ (Microsoft Corporation) C:\Windows\system32\vdsbas.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\syncui.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00154624 _____ (Microsoft Corporation) C:\Windows\system32\tscfgwmi.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00151040 _____ (Microsoft Corporation) C:\Windows\system32\vdsutil.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00146944 _____ (Microsoft Corporation) C:\Windows\system32\remotepg.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\twext.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\wmpps.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00140800 _____ (Microsoft Corporation) C:\Windows\system32\rdpendp.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\recovery.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00135168 _____ (Microsoft Corporation) C:\Windows\system32\XpsRasterService.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00134656 _____ (Microsoft Corporation) C:\Windows\system32\WinSCard.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00125952 _____ (Microsoft Corporation) C:\Windows\system32\sdrsvc.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00119808 _____ (Microsoft Corporation) C:\Windows\system32\umpo.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00118784 _____ (Microsoft Corporation) C:\Windows\system32\uxlib.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\sppnp.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\setupcln.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\SessEnv.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00111104 _____ (Microsoft Corporation) C:\Windows\system32\shsetup.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00109568 _____ (Microsoft Corporation) C:\Windows\system32\wiavideo.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00109056 _____ (Microsoft Corporation) C:\Windows\system32\t2embed.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\shacct.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\WPDShServiceObj.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00105472 _____ (Microsoft Corporation) C:\Windows\system32\wmpshell.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\sppinst.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\srvcli.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\wpdbusenum.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00084480 _____ (Microsoft Corporation) C:\Windows\system32\wkssvc.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00082944 _____ (Microsoft Corporation) C:\Windows\system32\thumbcache.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00081920 _____ (Microsoft Corporation) C:\Windows\system32\userenv.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00080896 _____ (Microsoft Corporation) C:\Windows\system32\QUTIL.DLL
2016-02-06 05:05 - 2010-11-20 13:21 - 00078848 _____ (Microsoft Corporation) C:\Windows\system32\UserAccountControlSettings.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\TabSvc.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00072192 _____ (Microsoft Corporation) C:\Windows\system32\regapi.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00071168 _____ (Microsoft Corporation) C:\Windows\system32\resutils.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\tlscsp.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\rastapi.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\spbcd.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\unimdmat.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\vfwwdm32.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\sppuinotify.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\rdpd3d.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\wsnmp32.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\wscapi.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00051200 _____ (Twain Working Group) C:\Windows\twain_32.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\samcli.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00050688 _____ (Microsoft Corporation) C:\Windows\system32\umb.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\wkscli.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00046592 _____ (Microsoft Corporation) C:\Windows\system32\WavDest.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00046080 _____ (Microsoft Corporation) C:\Windows\system32\RpcRtRemote.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\wtsapi32.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\rtutils.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\shimgvw.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\wiarpc.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00031744 _____ (Microsoft Corporation) C:\Windows\system32\wdiasqmmodule.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00031744 _____ (Microsoft Corporation) C:\Windows\system32\utildll.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\vpnikeapi.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00021504 _____ (Microsoft Corporation) C:\Windows\system32\rdprefdrvapi.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00019968 _____ (Microsoft Corporation) C:\Windows\system32\spopk.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\sisbkup.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00014848 _____ (Microsoft Corporation) C:\Windows\system32\syssetup.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\slwga.dll
2016-02-06 05:05 - 2010-11-20 13:21 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\tsbyuv.dll
2016-02-06 05:05 - 2010-11-20 13:20 - 02504192 _____ (Microsoft Corporation) C:\Windows\system32\WMVCORE.DLL
2016-02-06 05:05 - 2010-11-20 13:20 - 02494464 _____ (Microsoft Corporation) C:\Windows\system32\netshell.dll
2016-02-06 05:05 - 2010-11-20 13:20 - 02130944 _____ (Microsoft Corporation) C:\Windows\system32\networkmap.dll
2016-02-06 05:05 - 2010-11-20 13:20 - 01750528 _____ (Microsoft Corporation) C:\Windows\system32\pnidui.dll
2016-02-06 05:05 - 2010-11-20 13:20 - 01661440 _____ (Microsoft Corporation) C:\Windows\system32\networkexplorer.dll
2016-02-06 05:05 - 2010-11-20 13:20 - 01644032 _____ (Microsoft Corporation) C:\Windows\system32\netcenter.dll
2016-02-06 05:05 - 2010-11-20 13:20 - 01508864 _____ (Microsoft Corporation) C:\Windows\system32\pla.dll
2016-02-06 05:05 - 2010-11-20 13:20 - 01160192 _____ (Microsoft Corporation) C:\Windows\system32\OpcServices.dll
2016-02-06 05:05 - 2010-11-20 13:20 - 01111552 _____ (Microsoft Corporation) C:\Windows\system32\onexui.dll
2016-02-06 05:05 - 2010-11-20 13:20 - 00988160 _____ (Microsoft Corporation) C:\Windows\system32\propsys.dll
2016-02-06 05:05 - 2010-11-20 13:20 - 00932352 _____ (Microsoft Corporation) C:\Windows\system32\printui.dll
2016-02-06 05:05 - 2010-11-20 13:20 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\OobeFldr.dll
2016-02-06 05:05 - 2010-11-20 13:20 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\NaturalLanguage6.dll
2016-02-06 05:05 - 2010-11-20 13:20 - 00600576 _____ (Microsoft Corporation) C:\Windows\system32\PerfCenterCPL.dll
2016-02-06 05:05 - 2010-11-20 13:20 - 00563712 _____ (Microsoft Corporation) C:\Windows\system32\netlogon.dll
2016-02-06 05:05 - 2010-11-20 13:20 - 00547840 _____ (Microsoft Corporation) C:\Windows\system32\PortableDeviceApi.dll
2016-02-06 05:05 - 2010-11-20 13:20 - 00441856 _____ (Microsoft Corporation) C:\Windows\system32\powercpl.dll
2016-02-06 05:05 - 2010-11-20 13:20 - 00427520 _____ (Microsoft Corporation) C:\Windows\system32\PortableDeviceStatus.dll
2016-02-06 05:05 - 2010-11-20 13:20 - 00406528 _____ (Microsoft Corporation) C:\Windows\system32\netcfgx.dll
2016-02-06 05:05 - 2010-11-20 13:20 - 00395264 _____ (Microsoft Corporation) C:\Windows\system32\prnfldr.dll
2016-02-06 05:05 - 2010-11-20 13:20 - 00346112 _____ (Microsoft Corporation) C:\Windows\system32\nshipsec.dll
2016-02-06 05:05 - 2010-11-20 13:20 - 00330240 _____ (Microsoft Corporation) C:\Windows\system32\QAGENTRT.DLL
2016-02-06 05:05 - 2010-11-20 13:20 - 00324608 _____ (Microsoft Corporation) C:\Windows\system32\puiobj.dll
2016-02-06 05:05 - 2010-11-20 13:20 - 00297472 _____ (Microsoft Corporation) C:\Windows\system32\ntprint.dll
2016-02-06 05:05 - 2010-11-20 13:20 - 00295424 _____ (Microsoft Corporation) C:\Windows\system32\photowiz.dll
2016-02-06 05:05 - 2010-11-20 13:20 - 00283136 _____ (Microsoft Corporation) C:\Windows\system32\qdv.dll
2016-02-06 05:05 - 2010-11-20 13:20 - 00236544 _____ (Microsoft Corporation) C:\Windows\system32\pdh.dll
2016-02-06 05:05 - 2010-11-20 13:20 - 00225792 _____ (Microsoft Corporation) C:\Windows\system32\netdiagfx.dll
2016-02-06 05:05 - 2010-11-20 13:20 - 00218112 _____ (Microsoft Corporation) C:\Windows\system32\OnLineIDCpl.dll
2016-02-06 05:05 - 2010-11-20 13:20 - 00199168 _____ (Microsoft Corporation) C:\Windows\system32\onex.dll
2016-02-06 05:05 - 2010-11-20 13:20 - 00190976 _____ (Microsoft Corporation) C:\Windows\system32\qcap.dll
2016-02-06 05:05 - 2010-11-20 13:20 - 00183296 _____ (Microsoft Corporation) C:\Windows\system32\PortableDeviceSyncProvider.dll
2016-02-06 05:05 - 2010-11-20 13:20 - 00175616 _____ (Microsoft Corporation) C:\Windows\system32\netplwiz.dll
2016-02-06 05:05 - 2010-11-20 13:20 - 00174592 _____ (Microsoft Corporation) C:\Windows\system32\ocsetapi.dll
2016-02-06 05:05 - 2010-11-20 13:20 - 00171520 _____ (Microsoft Corporation) C:\Windows\system32\QAGENT.DLL
2016-02-06 05:05 - 2010-11-20 13:20 - 00167936 _____ (Microsoft Corporation) C:\Windows\system32\QSHVHOST.DLL
2016-02-06 05:05 - 2010-11-20 13:20 - 00166400 _____ (Microsoft Corporation) C:\Windows\system32\netiohlp.dll
2016-02-06 05:05 - 2010-11-20 13:20 - 00165376 _____ (Microsoft Corporation) C:\Windows\system32\provsvc.dll
2016-02-06 05:05 - 2010-11-20 13:20 - 00161792 _____ (Microsoft Corporation) C:\Windows\system32\netjoin.dll
2016-02-06 05:05 - 2010-11-20 13:20 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\mydocs.dll
2016-02-06 05:05 - 2010-11-20 13:20 - 00121344 _____ (Microsoft Corporation) C:\Windows\system32\sppc.dll
2016-02-06 05:05 - 2010-11-20 13:20 - 00120320 _____ (Microsoft Corporation) C:\Windows\system32\prntvpt.dll
2016-02-06 05:05 - 2010-11-20 13:20 - 00117248 _____ (Microsoft Corporation) C:\Windows\system32\netid.dll
2016-02-06 05:05 - 2010-11-20 13:20 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\prncache.dll
2016-02-06 05:05 - 2010-11-20 13:20 - 00099328 _____ (Microsoft Corporation) C:\Windows\system32\QSVRMGMT.DLL
2016-02-06 05:05 - 2010-11-20 13:20 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\olepro32.dll
2016-02-06 05:05 - 2010-11-20 13:20 - 00078848 _____ (Microsoft Corporation) C:\Windows\system32\nci.dll
2016-02-06 05:05 - 2010-11-20 13:20 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\olethk32.dll
2016-02-06 05:05 - 2010-11-20 13:20 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\QCLIPROV.DLL
2016-02-06 05:05 - 2010-11-20 13:20 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\ntlanman.dll
2016-02-06 05:05 - 2010-11-20 13:20 - 00060928 _____ (Microsoft Corporation) C:\Windows\system32\ncryptui.dll
2016-02-06 05:05 - 2010-11-20 13:20 - 00046592 _____ (Microsoft Corporation) C:\Windows\system32\pdhui.dll
2016-02-06 05:05 - 2010-11-20 13:20 - 00040960 _____ (Microsoft Corporation) C:\Windows\system32\odbcconf.dll
2016-02-06 05:05 - 2010-11-20 13:20 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\PrintIsolationProxy.dll
2016-02-06 05:05 - 2010-11-20 13:20 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\profprov.dll
2016-02-06 05:05 - 2010-11-20 13:20 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\netutils.dll
2016-02-06 05:05 - 2010-11-20 13:20 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\perfts.dll
2016-02-06 05:05 - 2010-11-20 13:20 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\nrpsrv.dll
2016-02-06 05:05 - 2010-11-20 13:19 - 02151936 _____ (Microsoft Corporation) C:\Windows\system32\mmcndmgr.dll
2016-02-06 05:05 - 2010-11-20 13:19 - 01066496 _____ (Microsoft Corporation) C:\Windows\system32\msdtctm.dll
2016-02-06 05:05 - 2010-11-20 13:19 - 00856576 _____ (Microsoft Corporation) C:\Windows\system32\FirewallControlPanel.dll
2016-02-06 05:05 - 2010-11-20 13:19 - 00828928 _____ (Microsoft Corporation) C:\Windows\system32\fontext.dll
2016-02-06 05:05 - 2010-11-20 13:19 - 00732160 _____ (Microsoft Corporation) C:\Windows\system32\imapi2fs.dll
2016-02-06 05:05 - 2010-11-20 13:19 - 00592384 _____ (Microsoft Corporation) C:\Windows\system32\msftedit.dll
2016-02-06 05:05 - 2010-11-20 13:19 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\gpprefcl.dll
2016-02-06 05:05 - 2010-11-20 13:19 - 00481792 _____ (Microsoft Corporation) C:\Windows\system32\mscms.dll
2016-02-06 05:05 - 2010-11-20 13:19 - 00430080 _____ (Microsoft Corporation) C:\Windows\system32\FXSTIFF.dll
2016-02-06 05:05 - 2010-11-20 13:19 - 00429056 _____ (Microsoft Corporation) C:\Windows\system32\localsec.dll
2016-02-06 05:05 - 2010-11-20 13:19 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\msdri.dll
2016-02-06 05:05 - 2010-11-20 13:19 - 00414208 _____ (Microsoft Corporation) C:\Windows\system32\mspbda.dll
2016-02-06 05:05 - 2010-11-20 13:19 - 00400896 _____ (Microsoft Corporation) C:\Windows\system32\ipsmsnap.dll
2016-02-06 05:05 - 2010-11-20 13:19 - 00392192 _____ (Microsoft Corporation) C:\Windows\system32\imapi2.dll
2016-02-06 05:05 - 2010-11-20 13:19 - 00350208 _____ (Microsoft Corporation) C:\Windows\system32\IPSECSVC.DLL
2016-02-06 05:05 - 2010-11-20 13:19 - 00320512 _____ (Microsoft Corporation) C:\Windows\system32\mtxclu.dll
2016-02-06 05:05 - 2010-11-20 13:19 - 00320512 _____ (Microsoft Corporation) C:\Windows\system32\Faultrep.dll
2016-02-06 05:05 - 2010-11-20 13:19 - 00312832 _____ (Microsoft Corporation) C:\Windows\system32\hgcpl.dll
2016-02-06 05:05 - 2010-11-20 13:19 - 00296448 _____ (Microsoft Corporation) C:\Windows\system32\mfds.dll
2016-02-06 05:05 - 2010-11-20 13:19 - 00271360 _____ (Microsoft Corporation) C:\Windows\system32\iprtrmgr.dll
2016-02-06 05:05 - 2010-11-20 13:19 - 00268800 _____ (Microsoft Corporation) C:\Windows\system32\mprddm.dll
2016-02-06 05:05 - 2010-11-20 13:19 - 00266752 _____ (Microsoft Corporation) C:\Windows\system32\MediaMetadataHandler.dll
2016-02-06 05:05 - 2010-11-20 13:19 - 00226304 _____ (Microsoft Corporation) C:\Windows\system32\MSAC3ENC.DLL
2016-02-06 05:05 - 2010-11-20 13:19 - 00219648 _____ (Microsoft Corporation) C:\Windows\system32\iTVData.dll
2016-02-06 05:05 - 2010-11-20 13:19 - 00213504 _____ (Microsoft Corporation) C:\Windows\system32\MMDevAPI.dll
2016-02-06 05:05 - 2010-11-20 13:19 - 00209920 _____ (Microsoft Corporation) C:\Windows\system32\mstask.dll
2016-02-06 05:05 - 2010-11-20 13:19 - 00206336 _____ (Microsoft Corporation) C:\Windows\system32\framedynos.dll
2016-02-06 05:05 - 2010-11-20 13:19 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\framedyn.dll
2016-02-06 05:05 - 2010-11-20 13:19 - 00202240 _____ (Microsoft Corporation) C:\Windows\system32\input.dll
2016-02-06 05:05 - 2010-11-20 13:19 - 00196608 _____ (Microsoft Corporation) C:\Windows\system32\mfreadwrite.dll
2016-02-06 05:05 - 2010-11-20 13:19 - 00194560 _____ (Microsoft Corporation) C:\Windows\system32\ListSvc.dll
2016-02-06 05:05 - 2010-11-20 13:19 - 00176128 _____ (Microsoft Corporation) C:\Windows\system32\MFPlay.dll
2016-02-06 05:05 - 2010-11-20 13:19 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\iasrad.dll
2016-02-06 05:05 - 2010-11-20 13:19 - 00167936 _____ (Microsoft Corporation) C:\Windows\system32\msutb.dll
2016-02-06 05:05 - 2010-11-20 13:19 - 00158720 _____ (Microsoft Corporation) C:\Windows\system32\mprapi.dll
2016-02-06 05:05 - 2010-11-20 13:19 - 00158720 _____ (Microsoft Corporation) C:\Windows\system32\itircl.dll
2016-02-06 05:05 - 2010-11-20 13:19 - 00155136 _____ (Microsoft Corporation) C:\Windows\system32\hgprint.dll
2016-02-06 05:05 - 2010-11-20 13:19 - 00148992 _____ (Microsoft Corporation) C:\Windows\system32\ifsutil.dll
2016-02-06 05:05 - 2010-11-20 13:19 - 00127488 _____ (Microsoft Corporation) C:\Windows\system32\logoncli.dll
2016-02-06 05:05 - 2010-11-20 13:19 - 00126464 _____ (Microsoft Corporation) C:\Windows\system32\inetpp.dll
2016-02-06 05:05 - 2010-11-20 13:19 - 00124416 _____ (Microsoft Corporation) C:\Windows\system32\fde.dll
2016-02-06 05:05 - 2010-11-20 13:19 - 00122880 _____ (Microsoft Corporation) C:\Windows\system32\iasrecst.dll
2016-02-06 05:05 - 2010-11-20 13:19 - 00120320 _____ (Microsoft Corporation) C:\Windows\system32\msvfw32.dll
2016-02-06 05:05 - 2010-11-20 13:19 - 00118272 _____ (Microsoft Corporation) C:\Windows\system32\imm32.dll
2016-02-06 05:05 - 2010-11-20 13:19 - 00103936 _____ (Microsoft Corporation) C:\Windows\system32\IPHLPAPI.DLL
2016-02-06 05:05 - 2010-11-20 13:19 - 00101888 _____ (Microsoft Corporation) C:\Windows\system32\migisol.dll
2016-02-06 05:05 - 2010-11-20 13:19 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\fphc.dll
2016-02-06 05:05 - 2010-11-20 13:19 - 00093696 _____ (Windows (R) Codename Longhorn DDK provider) C:\Windows\system32\fms.dll
2016-02-06 05:05 - 2010-11-20 13:19 - 00084480 _____ (Microsoft Corporation) C:\Windows\system32\mciavi32.dll
2016-02-06 05:05 - 2010-11-20 13:19 - 00082944 _____ (Radius Inc.) C:\Windows\system32\iccvid.dll
2016-02-06 05:05 - 2010-11-20 13:19 - 00078848 _____ (Microsoft Corporation) C:\Windows\system32\iasacct.dll
2016-02-06 05:05 - 2010-11-20 13:19 - 00071168 _____ (Microsoft Corporation) C:\Windows\system32\KMSVC.DLL
2016-02-06 05:05 - 2010-11-20 13:19 - 00068096 _____ (Microsoft Corporation) C:\Windows\system32\Mcx2Svc.dll
2016-02-06 05:05 - 2010-11-20 13:19 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\hbaapi.dll
2016-02-06 05:05 - 2010-11-20 13:19 - 00059904 _____ (Microsoft Corporation) C:\Windows\system32\fdeploy.dll
2016-02-06 05:05 - 2010-11-20 13:19 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\inetmib1.dll
2016-02-06 05:05 - 2010-11-20 13:19 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\iyuv_32.dll
2016-02-06 05:05 - 2010-11-20 13:19 - 00042496 _____ (Microsoft Corporation) C:\Windows\system32\mimefilt.dll
2016-02-06 05:05 - 2010-11-20 13:19 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\luainstall.dll
2016-02-06 05:05 - 2010-11-20 13:19 - 00039424 _____ (Microsoft Corporation) C:\Windows\system32\FXSMON.dll
2016-02-06 05:05 - 2010-11-20 13:19 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\mciqtz32.dll
2016-02-06 05:05 - 2010-11-20 13:19 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\httpapi.dll
2016-02-06 05:05 - 2010-11-20 13:19 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\msasn1.dll
2016-02-06 05:05 - 2010-11-20 13:19 - 00031744 _____ (Microsoft Corporation) C:\Windows\system32\msvidc32.dll
2016-02-06 05:05 - 2010-11-20 13:19 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\msdmo.dll
2016-02-06 05:05 - 2010-11-20 13:19 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\iscsium.dll
2016-02-06 05:05 - 2010-11-20 13:19 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\msyuv.dll
2016-02-06 05:05 - 2010-11-20 13:19 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\HotStartUserAgent.dll
2016-02-06 05:05 - 2010-11-20 13:19 - 00021504 _____ (Microsoft Corporation) C:\Windows\system32\lsmproxy.dll
2016-02-06 05:05 - 2010-11-20 13:19 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\icaapi.dll
2016-02-06 05:05 - 2010-11-20 13:19 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\muifontsetup.dll
2016-02-06 05:05 - 2010-11-20 13:19 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msrle32.dll
2016-02-06 05:05 - 2010-11-20 13:18 - 03727872 _____ (Microsoft Corporation) C:\Windows\system32\accessibilitycpl.dll
2016-02-06 05:05 - 2010-11-20 13:18 - 02522624 _____ (Microsoft Corporation) C:\Windows\system32\dbgeng.dll
2016-02-06 05:05 - 2010-11-20 13:18 - 01555456 _____ (Microsoft Corporation) C:\Windows\system32\certmgr.dll
2016-02-06 05:05 - 2010-11-20 13:18 - 01400320 _____ (Microsoft Corporation) C:\Windows\system32\DxpTaskSync.dll
2016-02-06 05:05 - 2010-11-20 13:18 - 01188864 _____ (Microsoft Corporation) C:\Windows\system32\DiagCpl.dll
2016-02-06 05:05 - 2010-11-20 13:18 - 01040384 _____ (Microsoft Corporation) C:\Windows\system32\Display.dll
2016-02-06 05:05 - 2010-11-20 13:18 - 00854016 _____ (Microsoft Corporation) C:\Windows\system32\dbghelp.dll
2016-02-06 05:05 - 2010-11-20 13:18 - 00762880 _____ (Microsoft Corporation) C:\Windows\system32\azroles.dll
2016-02-06 05:05 - 2010-11-20 13:18 - 00744448 _____ (Microsoft Corporation) C:\Windows\system32\ActionCenter.dll
2016-02-06 05:05 - 2010-11-20 13:18 - 00740864 _____ (Microsoft Corporation) C:\Windows\system32\batmeter.dll
2016-02-06 05:05 - 2010-11-20 13:18 - 00685056 _____ (Microsoft Corporation) C:\Windows\system32\dsuiext.dll
2016-02-06 05:05 - 2010-11-20 13:18 - 00665600 _____ (Microsoft Corporation) C:\Windows\system32\AuxiliaryDisplayCpl.dll
2016-02-06 05:05 - 2010-11-20 13:18 - 00630784 _____ (Microsoft Corporation) C:\Windows\system32\DXPTaskRingtone.dll
2016-02-06 05:05 - 2010-11-20 13:18 - 00546304 _____ (Microsoft Corporation) C:\Windows\system32\cscsvc.dll
2016-02-06 05:05 - 2010-11-20 13:18 - 00537600 _____ (Microsoft Corporation) C:\Windows\system32\ActionCenterCPL.dll
2016-02-06 05:05 - 2010-11-20 13:18 - 00494592 _____ (Microsoft Corporation) C:\Windows\system32\BFE.DLL
2016-02-06 05:05 - 2010-11-20 13:18 - 00485888 _____ (Microsoft Corporation) C:\Windows\system32\comdlg32.dll
2016-02-06 05:05 - 2010-11-20 13:18 - 00484864 _____ (Microsoft Corporation) C:\Windows\system32\DeviceCenter.dll
2016-02-06 05:05 - 2010-11-20 13:18 - 00438272 _____ (Microsoft Corporation) C:\Windows\system32\AdmTmpl.dll
2016-02-06 05:05 - 2010-11-20 13:18 - 00428032 _____ (Microsoft Corporation) C:\Windows\system32\biocpl.dll
2016-02-06 05:05 - 2010-11-20 13:18 - 00418816 _____ (Microsoft Corporation) C:\Windows\system32\cscui.dll
2016-02-06 05:05 - 2010-11-20 13:18 - 00399872 _____ (Microsoft Corporation) C:\Windows\system32\DXP.dll
2016-02-06 05:05 - 2010-11-20 13:18 - 00339968 _____ (Microsoft Corporation) C:\Windows\system32\appmgr.dll
2016-02-06 05:05 - 2010-11-20 13:18 - 00333824 _____ (Microsoft Corporation) C:\Windows\system32\dot3ui.dll
2016-02-06 05:05 - 2010-11-20 13:18 - 00323072 _____ (Microsoft Corporation) C:\Windows\system32\drvstore.dll
2016-02-06 05:05 - 2010-11-20 13:18 - 00314368 _____ (Microsoft Corporation) C:\Windows\system32\azroleui.dll
2016-02-06 05:05 - 2010-11-20 13:18 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\actxprxy.dll
2016-02-06 05:05 - 2010-11-20 13:18 - 00257024 _____ (Microsoft Corporation) C:\Windows\system32\dpx.dll
2016-02-06 05:05 - 2010-11-20 13:18 - 00254464 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcore.dll
2016-02-06 05:05 - 2010-11-20 13:18 - 00252928 _____ (Microsoft) C:\Windows\system32\DShowRdpFilter.dll
2016-02-06 05:05 - 2010-11-20 13:18 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\audiodev.dll
2016-02-06 05:05 - 2010-11-20 13:18 - 00242176 _____ (Microsoft Corporation) C:\Windows\system32\eapp3hst.dll
2016-02-06 05:05 - 2010-11-20 13:18 - 00230912 _____ (Microsoft Corporation) C:\Windows\system32\clusapi.dll
2016-02-06 05:05 - 2010-11-20 13:18 - 00222208 _____ (Microsoft Corporation) C:\Windows\system32\eapphost.dll
2016-02-06 05:05 - 2010-11-20 13:18 - 00220672 _____ (Microsoft Corporation) C:\Windows\system32\defaultlocationcpl.dll
2016-02-06 05:05 - 2010-11-20 13:18 - 00214016 _____ (Microsoft Corporation) C:\Windows\system32\dot3svc.dll
2016-02-06 05:05 - 2010-11-20 13:18 - 00211456 _____ (Microsoft Corporation) C:\Windows\system32\DevicePairingFolder.dll
2016-02-06 05:05 - 2010-11-20 13:18 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\dxdiagn.dll
2016-02-06 05:05 - 2010-11-20 13:18 - 00205312 _____ (Microsoft Corporation) C:\Windows\system32\efscore.dll
2016-02-06 05:05 - 2010-11-20 13:18 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\activeds.dll
2016-02-06 05:05 - 2010-11-20 13:18 - 00196608 _____ (Microsoft Corporation) C:\Windows\system32\dskquoui.dll
2016-02-06 05:05 - 2010-11-20 13:18 - 00186880 _____ (Microsoft Corporation) C:\Windows\system32\adsldp.dll
2016-02-06 05:05 - 2010-11-20 13:18 - 00179200 _____ (Microsoft Corporation) C:\Windows\system32\ActionQueue.dll
2016-02-06 05:05 - 2010-11-20 13:18 - 00146944 _____ (Microsoft Corporation) C:\Windows\system32\autoplay.dll
2016-02-06 05:05 - 2010-11-20 13:18 - 00145920 _____ (Microsoft Corporation) C:\Windows\system32\cfgmgr32.dll
2016-02-06 05:05 - 2010-11-20 13:18 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\dps.dll
2016-02-06 05:05 - 2010-11-20 13:18 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\cscobj.dll
2016-02-06 05:05 - 2010-11-20 13:18 - 00133632 _____ (Microsoft Corporation) C:\Windows\system32\bcdsrv.dll
2016-02-06 05:05 - 2010-11-20 13:18 - 00132608 _____ (Microsoft Corporation) C:\Windows\system32\cabview.dll
2016-02-06 05:05 - 2010-11-20 13:18 - 00128512 _____ (Microsoft Corporation) C:\Windows\system32\EhStorAPI.dll
2016-02-06 05:05 - 2010-11-20 13:18 - 00115200 _____ (Microsoft Corporation) C:\Windows\system32\dot3msm.dll
2016-02-06 05:05 - 2010-11-20 13:18 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\AuxiliaryDisplayServices.dll
2016-02-06 05:05 - 2010-11-20 13:18 - 00109568 _____ (Microsoft Corporation) C:\Windows\system32\CscMig.dll
2016-02-06 05:05 - 2010-11-20 13:18 - 00109056 _____ (Microsoft Corporation) C:\Windows\system32\dnscmmc.dll
2016-02-06 05:05 - 2010-11-20 13:18 - 00097280 _____ (Microsoft Corporation) C:\Windows\system32\dwmredir.dll
2016-02-06 05:05 - 2010-11-20 13:18 - 00094208 _____ (Microsoft Corporation) C:\Windows\system32\eappgnui.dll
2016-02-06 05:05 - 2010-11-20 13:18 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\avifil32.dll
2016-02-06 05:05 - 2010-11-20 13:18 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\AxInstSv.dll
2016-02-06 05:05 - 2010-11-20 13:18 - 00082432 _____ (Microsoft Corporation) C:\Windows\system32\dot3cfg.dll
2016-02-06 05:05 - 2010-11-20 13:18 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\cabinet.dll
2016-02-06 05:05 - 2010-11-20 13:18 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\amstream.dll
2016-02-06 05:05 - 2010-11-20 13:18 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\certprop.dll
2016-02-06 05:05 - 2010-11-20 13:18 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\asycfilt.dll
2016-02-06 05:05 - 2010-11-20 13:18 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\cca.dll
2016-02-06 05:05 - 2010-11-20 13:18 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\CertPolEng.dll
2016-02-06 05:05 - 2010-11-20 13:18 - 00045568 _____ (Microsoft Corporation) C:\Windows\system32\acppage.dll
2016-02-06 05:05 - 2010-11-20 13:18 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\cscapi.dll
2016-02-06 05:05 - 2010-11-20 13:18 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\AzSqlExt.dll
2016-02-06 05:05 - 2010-11-20 13:18 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\elsTrans.dll
2016-02-06 05:05 - 2010-11-20 13:17 - 03179520 _____ (Microsoft Corporation) C:\Windows\system32\sppsvc.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 01131008 _____ (Microsoft Corporation) C:\Windows\system32\sdclt.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 01025536 _____ (Microsoft Corporation) C:\Windows\system32\VSSVC.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00941568 _____ (Microsoft Corporation) C:\Windows\system32\mblctr.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00802304 _____ (Microsoft Corporation) C:\Windows\system32\WFS.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00586752 _____ (Microsoft Corporation) C:\Windows\system32\dfrgui.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00523264 _____ (Microsoft Corporation) C:\Windows\system32\FXSSVC.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00477696 _____ (Microsoft Corporation) C:\Windows\system32\lpksetup.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00453632 _____ (Microsoft Corporation) C:\Windows\system32\vds.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00334336 _____ (Microsoft Corporation) C:\Windows\system32\wisptis.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00327680 _____ (Microsoft Corporation) C:\Windows\system32\wimserv.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00327168 _____ (Microsoft Corporation) C:\Windows\system32\nltest.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00325632 _____ (Microsoft Corporation) C:\Windows\system32\slui.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\wusa.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00314368 _____ (Microsoft Corporation) C:\Windows\system32\SndVol.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00303104 _____ (Microsoft Corporation) C:\Windows\system32\msinfo32.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00302592 _____ (Microsoft Corporation) C:\Windows\system32\cmd.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00292864 _____ (Microsoft Corporation) C:\Windows\system32\WindowsAnytimeUpgradeResults.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00288256 _____ (Microsoft Corporation) C:\Windows\system32\eudcedit.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00276480 _____ (Microsoft Corporation) C:\Windows\system32\diskraid.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00270336 _____ (Microsoft Corporation) C:\Windows\system32\sethc.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00267776 _____ (Microsoft Corporation) C:\Windows\system32\lsm.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00257536 _____ (Microsoft Corporation) C:\Windows\system32\WindowsAnytimeUpgrade.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00254976 _____ (Microsoft Corporation) C:\Windows\system32\wsqmcons.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00233984 _____ (Microsoft Corporation) C:\Windows\system32\msconfig.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\taskmgr.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00220672 _____ (Microsoft Corporation) C:\Windows\system32\mcbuilder.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\recdisc.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00209920 _____ (Microsoft Corporation) C:\Windows\system32\PkgMgr.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00197632 _____ (Microsoft Corporation) C:\Windows\system32\ocsetup.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\taskeng.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00182784 _____ (Microsoft Corporation) C:\Windows\system32\RelPost.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00179712 _____ (Microsoft Corporation) C:\Windows\system32\schtasks.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00173568 _____ (Microsoft Corporation) C:\Windows\system32\rdpclip.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00170496 _____ (Microsoft Corporation) C:\Windows\system32\PresentationSettings.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00157184 _____ (Microsoft Corporation) C:\Windows\system32\perfmon.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00144896 _____ (Microsoft Corporation) C:\Windows\system32\iscsicli.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00142336 _____ (Microsoft Corporation) C:\Windows\system32\net1.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00133632 _____ (Microsoft Corporation) C:\Windows\system32\diskpart.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00132608 _____ (Microsoft Corporation) C:\Windows\system32\MdSched.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00113152 _____ (Microsoft Corporation) C:\Windows\system32\setupugc.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00103936 _____ (Microsoft Corporation) C:\Windows\system32\setupcl.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\mobsync.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00098816 _____ (Microsoft) C:\Windows\system32\Robocopy.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\nslookup.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00095232 _____ (Microsoft Corporation) C:\Windows\system32\logagent.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\isoburn.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\cmstp.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\tabcal.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\MuiUnattend.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00066048 _____ C:\Windows\system32\PrintBrmUi.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\w32tm.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\findstr.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\manage-bde.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\lpremove.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\PnPUnattend.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00059904 _____ (Microsoft Corporation) C:\Windows\system32\djoin.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\repair-bde.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\MultiDigiMon.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\takeown.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00050688 _____ (Microsoft Corporation) C:\Windows\system32\runonce.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\tzutil.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00042496 _____ (Microsoft Corporation) C:\Windows\system32\ftp.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\unlodctr.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\WerFaultSecure.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\proquota.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00026624 _____ (Microsoft Corporation) C:\Windows\system32\userinit.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00026624 _____ (Microsoft Corporation) C:\Windows\system32\qwinsta.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\netiougc.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\netcfg.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00025088 _____ (Microsoft Corporation) C:\Windows\system32\qprocess.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\msg.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00024064 _____ (Microsoft Corporation) C:\Windows\system32\netbtugc.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00023040 _____ (Microsoft Corporation) C:\Windows\system32\quser.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\tskill.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\tsdiscon.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\ReAgentc.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00021504 _____ (Microsoft Corporation) C:\Windows\system32\tscon.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00021504 _____ (Microsoft Corporation) C:\Windows\system32\qappsrv.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00021504 _____ (Microsoft Corporation) C:\Windows\system32\logoff.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00020992 _____ (Microsoft Corporation) C:\Windows\system32\shadow.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00020992 _____ (Microsoft Corporation) C:\Windows\system32\rwinsta.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00015360 _____ (Microsoft Corporation) C:\Windows\system32\reset.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00014848 _____ (Microsoft Corporation) C:\Windows\system32\query.exe
2016-02-06 05:05 - 2010-11-20 13:17 - 00007680 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2016-02-06 05:05 - 2010-11-20 13:16 - 00905216 _____ (Microsoft Corporation) C:\Windows\system32\mmsys.cpl
2016-02-06 05:05 - 2010-11-20 13:16 - 00878592 _____ (Microsoft Corporation) C:\Windows\system32\Bubbles.scr
2016-02-06 05:05 - 2010-11-20 13:16 - 00776192 _____ (Microsoft Corporation) C:\Windows\system32\calc.exe
2016-02-06 05:05 - 2010-11-20 13:16 - 00692736 _____ (Microsoft Corporation) C:\Windows\system32\bthprops.cpl
2016-02-06 05:05 - 2010-11-20 13:16 - 00679424 _____ (Microsoft Corporation) C:\Windows\system32\autoconv.exe
2016-02-06 05:05 - 2010-11-20 13:16 - 00668160 _____ (Microsoft Corporation) C:\Windows\system32\autochk.exe
2016-02-06 05:05 - 2010-11-20 13:16 - 00658944 _____ (Microsoft Corporation) C:\Windows\system32\autofmt.exe
2016-02-06 05:05 - 2010-11-20 13:16 - 00649216 _____ (Microsoft Corporation) C:\Windows\system32\appwiz.cpl
2016-02-06 05:05 - 2010-11-20 13:16 - 00600576 _____ (Microsoft Corporation) C:\Windows\system32\TabletPC.cpl
2016-02-06 05:05 - 2010-11-20 13:16 - 00516096 _____ (Microsoft Corporation) C:\Windows\system32\main.cpl
2016-02-06 05:05 - 2010-11-20 13:16 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\PhotoScreensaver.scr
2016-02-06 05:05 - 2010-11-20 13:16 - 00389632 _____ (Microsoft Corporation) C:\Windows\system32\sysmon.ocx
2016-02-06 05:05 - 2010-11-20 13:16 - 00345088 _____ (Microsoft Corporation) C:\Windows\system32\intl.cpl
2016-02-06 05:05 - 2010-11-20 13:16 - 00326656 _____ (Microsoft Corporation) C:\Windows\system32\sysdm.cpl
2016-02-06 05:05 - 2010-11-20 13:16 - 00320000 _____ (Microsoft Corporation) C:\Windows\system32\winspool.drv
2016-02-06 05:05 - 2010-11-20 13:16 - 00295424 _____ (Microsoft Corporation) C:\Windows\system32\bcdedit.exe
2016-02-06 05:05 - 2010-11-20 13:16 - 00293888 _____ (Microsoft Corporation) C:\Windows\system32\ssText3d.scr
2016-02-06 05:05 - 2010-11-20 13:16 - 00281088 _____ (Microsoft Corporation) C:\Windows\system32\unimdm.tsp
2016-02-06 05:05 - 2010-11-20 13:16 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\Mystify.scr
2016-02-06 05:05 - 2010-11-20 13:16 - 00220672 _____ (Microsoft Corporation) C:\Windows\system32\Ribbons.scr
2016-02-06 05:05 - 2010-11-20 13:16 - 00204288 _____ (Microsoft Corporation) C:\Windows\system32\MSNP.ax
2016-02-06 05:05 - 2010-11-20 13:16 - 00186368 _____ (Microsoft Corporation) C:\Windows\system32\bitsadmin.exe
2016-02-06 05:05 - 2010-11-20 13:16 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\wdmaud.drv
2016-02-06 05:05 - 2010-11-20 13:16 - 00153600 _____ (Microsoft Corporation) C:\Windows\system32\VBICodec.ax
2016-02-06 05:05 - 2010-11-20 13:16 - 00146944 _____ (Microsoft Corporation) C:\Windows\system32\bcdboot.exe
2016-02-06 05:05 - 2010-11-20 13:16 - 00142336 _____ (Microsoft Corporation) C:\Windows\system32\powercfg.cpl
2016-02-06 05:05 - 2010-11-20 13:16 - 00128000 _____ (Microsoft Corporation) C:\Windows\system32\desk.cpl
2016-02-06 05:05 - 2010-11-20 13:16 - 00119808 _____ (Microsoft Corporation) C:\Windows\system32\aitagent.exe
2016-02-06 05:05 - 2010-11-20 13:16 - 00107008 _____ (Microsoft Corporation) C:\Windows\system32\Kswdmcap.ax
2016-02-06 05:05 - 2010-11-20 13:16 - 00084480 _____ (Microsoft Corporation) C:\Windows\system32\kstvtune.ax
2016-02-06 05:05 - 2010-11-20 13:16 - 00072704 _____ (Microsoft Corporation) C:\Windows\system32\Mpeg2Data.ax
2016-02-06 05:05 - 2010-11-20 13:16 - 00068608 _____ (Microsoft Corporation) C:\Windows\system32\WSTPager.ax
2016-02-06 05:05 - 2010-11-20 13:16 - 00065024 _____ (Microsoft Corporation) C:\Windows\bfsvc.exe
2016-02-06 05:05 - 2010-11-20 13:16 - 00059904 _____ (Microsoft Corporation) C:\Windows\system32\MSDvbNP.ax
2016-02-06 05:05 - 2010-11-20 13:16 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ksxbar.ax
2016-02-06 05:05 - 2010-11-20 13:16 - 00045568 _____ (Microsoft Corporation) C:\Windows\system32\g711codc.ax
2016-02-06 05:05 - 2010-11-20 13:16 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\vbisurf.ax
2016-02-06 05:05 - 2010-11-20 13:16 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\chgport.exe
2016-02-06 05:05 - 2010-11-20 13:16 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\chglogon.exe
2016-02-06 05:05 - 2010-11-20 13:16 - 00020992 _____ (Microsoft Corporation) C:\Windows\system32\chgusr.exe
2016-02-06 05:05 - 2010-11-20 13:16 - 00015360 _____ (Microsoft Corporation) C:\Windows\system32\change.exe
2016-02-06 05:05 - 2010-11-20 13:07 - 01164800 _____ (Microsoft Corporation) C:\Windows\system32\UIRibbonRes.dll
2016-02-06 05:05 - 2010-11-20 13:03 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\vmicres.dll
2016-02-06 05:05 - 2010-11-20 13:03 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\vmbusres.dll
2016-02-06 05:05 - 2010-11-20 13:03 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\vmstorfltres.dll
2016-02-06 05:05 - 2010-11-20 13:00 - 01027584 _____ (Microsoft Corporation) C:\Windows\system32\IMJP10.IME
2016-02-06 05:05 - 2010-11-20 11:52 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbrpm.sys
2016-02-06 05:05 - 2010-11-20 11:24 - 00133632 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpdr.sys
2016-02-06 05:05 - 2010-11-20 11:22 - 00223232 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe
2016-02-06 05:05 - 2010-11-20 11:07 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndproxy.sys
2016-02-06 05:05 - 2010-11-20 11:06 - 00108544 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tunnel.sys
2016-02-06 05:05 - 2010-11-20 11:06 - 00046080 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndisuio.sys
2016-02-06 05:05 - 2010-11-20 11:01 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\1394ohci.sys
2016-02-06 05:05 - 2010-11-20 10:50 - 00190976 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ks.sys
2016-02-06 05:05 - 2010-11-20 10:50 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\CompositeBus.sys
2016-02-06 05:05 - 2010-11-20 10:14 - 00215552 _____ (Microsoft Corporation) C:\Windows\system32\vmicsvc.exe
2016-02-06 05:05 - 2010-11-20 09:44 - 00388096 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\csc.sys
2016-02-06 05:05 - 2010-11-20 09:44 - 00242688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdbss.sys
2016-02-06 05:05 - 2010-11-20 09:42 - 00246784 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\udfs.sys
2016-02-06 05:05 - 2010-11-20 09:42 - 00078336 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dfsc.sys
2016-02-06 05:05 - 2010-11-20 09:39 - 00187904 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netbt.sys
2016-02-06 05:05 - 2010-11-20 09:39 - 00021504 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdi.sys
2016-02-06 05:05 - 2010-11-20 09:38 - 00108544 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cdrom.sys
2016-02-06 05:05 - 2010-11-20 06:23 - 00053600 _____ C:\Windows\system32\dosx.exe
2016-02-06 05:05 - 2010-11-10 02:45 - 00010429 _____ C:\Windows\system32\ScavengeSpace.xml
2016-02-06 05:05 - 2010-11-05 03:11 - 00312168 _____ (Microsoft Corporation) C:\Windows\system32\MCEWMDRMNDBootstrap.dll
2016-02-06 05:05 - 2010-11-05 02:58 - 00049488 _____ (Microsoft Corporation) C:\Windows\system32\netfxperf.dll
2016-02-06 05:04 - 2010-11-20 13:21 - 00363008 _____ (Microsoft Corporation) C:\Windows\system32\wbemcomn.dll
2016-02-06 05:04 - 2010-11-20 13:21 - 00189952 _____ (Microsoft Corporation) C:\Windows\system32\wdscore.dll
2016-02-06 05:04 - 2010-11-20 13:21 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\wshbth.dll
2016-02-06 05:04 - 2010-11-20 13:21 - 00021504 _____ (Microsoft Corporation) C:\Windows\system32\wsdchngr.dll
2016-02-06 05:04 - 2010-11-20 13:21 - 00021504 _____ (Microsoft Corporation) C:\Windows\system32\TRAPI.dll
2016-02-06 05:04 - 2010-11-20 13:21 - 00020992 _____ (Microsoft Corporation) C:\Windows\system32\shgina.dll
2016-02-06 05:04 - 2010-11-20 13:21 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\schedcli.dll
2016-02-06 05:04 - 2010-11-20 13:21 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\wshirda.dll
2016-02-06 05:04 - 2010-11-20 13:21 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\shunimpl.dll
2016-02-06 05:04 - 2010-11-20 13:21 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\sscore.dll
2016-02-06 05:04 - 2010-11-20 13:21 - 00008704 _____ (Microsoft Corporation) C:\Windows\system32\riched32.dll
2016-02-06 05:04 - 2010-11-20 13:21 - 00008704 _____ (Microsoft Corporation) C:\Windows\system32\rdpcfgex.dll
2016-02-06 05:04 - 2010-11-20 13:20 - 00068096 _____ (Microsoft Corporation) C:\Windows\system32\napdsnap.dll
2016-02-06 05:04 - 2010-11-20 13:18 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\dsauth.dll
2016-02-06 05:04 - 2010-11-20 13:18 - 00023040 _____ (Microsoft Corporation) C:\Windows\system32\cscdll.dll
2016-02-06 05:04 - 2010-11-20 13:18 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\bitsperf.dll
2016-02-06 05:04 - 2010-11-20 13:18 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\C_ISCII.DLL
2016-02-06 05:04 - 2010-11-20 13:18 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\browseui.dll
2016-02-06 05:04 - 2010-11-20 13:17 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\LogonUI.exe
2016-02-06 05:04 - 2010-11-20 13:07 - 00007680 _____ (Microsoft Corporation) C:\Windows\system32\spwizres.dll
2016-02-06 05:04 - 2010-11-20 13:06 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\nlsbres.dll
2016-02-06 05:04 - 2010-11-20 13:05 - 00121856 _____ (Microsoft Corporation) C:\Windows\system32\RDPENCDD.dll
2016-02-06 05:04 - 2010-11-20 13:05 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\pifmgr.dll
2016-02-06 05:04 - 2010-11-20 13:00 - 00430080 _____ (Microsoft Corporation) C:\Windows\system32\imkr80.ime
2016-02-06 05:04 - 2010-11-20 13:00 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDSG.DLL
2016-02-06 05:04 - 2010-11-20 13:00 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\kbdlk41a.dll
2016-02-06 05:04 - 2010-11-20 13:00 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDCZ1.DLL
2016-02-06 05:04 - 2010-11-20 13:00 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDTUQ.DLL
2016-02-06 05:04 - 2010-11-20 13:00 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDTUF.DLL
2016-02-06 05:04 - 2010-11-20 13:00 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDSF.DLL
2016-02-06 05:04 - 2010-11-20 13:00 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDPO.DLL
2016-02-06 05:04 - 2010-11-20 13:00 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDNEPR.DLL
2016-02-06 05:04 - 2010-11-20 13:00 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDINBEN.DLL
2016-02-06 05:04 - 2010-11-20 13:00 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDGR1.DLL
2016-02-06 05:04 - 2010-11-20 13:00 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDGKL.DLL
2016-02-06 05:04 - 2010-11-20 13:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDUS.DLL
2016-02-06 05:04 - 2010-11-20 13:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDUGHR1.DLL
2016-02-06 05:04 - 2010-11-20 13:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDTURME.DLL
2016-02-06 05:04 - 2010-11-20 13:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDTAJIK.DLL
2016-02-06 05:04 - 2010-11-20 13:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDMON.DLL
2016-02-06 05:04 - 2010-11-20 13:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDMAORI.DLL
2016-02-06 05:04 - 2010-11-20 13:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDLT1.DLL
2016-02-06 05:04 - 2010-11-20 13:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDINTEL.DLL
2016-02-06 05:04 - 2010-11-20 13:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDINTAM.DLL
2016-02-06 05:04 - 2010-11-20 13:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDINORI.DLL
2016-02-06 05:04 - 2010-11-20 13:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDINMAR.DLL
2016-02-06 05:04 - 2010-11-20 13:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDINKAN.DLL
2016-02-06 05:04 - 2010-11-20 13:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDINHIN.DLL
2016-02-06 05:04 - 2010-11-20 13:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDBULG.DLL
2016-02-06 05:04 - 2010-11-20 13:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDBLR.DLL
2016-02-06 05:04 - 2010-11-20 13:00 - 00005632 _____ (Microsoft Corporation) C:\Windows\system32\KBDGEO.DLL
2016-02-06 05:04 - 2010-11-20 12:57 - 00002560 _____ (Microsoft Corporation) C:\Windows\system32\dpnaddr.dll
2016-02-06 05:04 - 2010-11-20 12:56 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\BlbEvents.dll
2016-02-06 05:04 - 2010-11-20 11:22 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\RDPCDD.sys
2016-02-06 05:04 - 2010-11-20 11:21 - 00026624 _____ (Microsoft Corporation) C:\Windows\system32\RDPREFDD.dll
2016-02-06 05:04 - 2010-11-20 11:21 - 00018432 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdpipe.sys
2016-02-06 05:04 - 2010-11-20 11:07 - 00118784 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndiswan.sys
2016-02-06 05:04 - 2010-11-20 11:07 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wanarp.sys
2016-02-06 05:04 - 2010-11-20 11:00 - 00304128 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\HdAudio.sys
2016-02-06 05:04 - 2010-11-20 11:00 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\umbus.sys
2016-02-06 05:04 - 2010-11-20 11:00 - 00025856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBCAMD2.sys
2016-02-06 05:04 - 2010-11-20 11:00 - 00025856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBCAMD.sys
2016-02-06 05:04 - 2010-11-20 10:59 - 00108544 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hdaudbus.sys
2016-02-06 05:04 - 2010-11-20 10:59 - 00024064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidusb.sys
2016-02-06 05:04 - 2010-11-20 10:50 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\kbdhid.sys
2016-02-06 05:04 - 2010-11-20 10:50 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\sffp_sd.sys
2016-02-06 05:04 - 2010-11-20 10:24 - 00026624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\scfilter.sys
2016-02-06 05:04 - 2010-11-20 10:19 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\IPMIDrv.sys
2016-02-06 05:04 - 2010-11-20 10:14 - 00116224 _____ (Microsoft Corporation) C:\Windows\system32\VmbusCoinstaller.dll
2016-02-06 05:04 - 2010-11-20 10:14 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\VmdCoinstall.dll
2016-02-06 05:04 - 2010-11-20 10:14 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\IcCoinstall.dll
2016-02-06 05:04 - 2010-11-20 10:14 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\VMBusHID.sys
2016-02-06 05:04 - 2010-11-20 10:14 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\vmbuspipe.dll
2016-02-06 05:04 - 2010-11-20 10:14 - 00005632 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vms3cap.sys
2016-02-06 05:04 - 2010-11-20 09:47 - 00010240 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\acpipmi.sys
2016-02-06 05:04 - 2010-11-05 03:20 - 00105559 _____ C:\Windows\system32\RacRules.xml
2016-02-05 16:02 - 2016-02-05 16:02 - 00000000 ____D C:\Program Files\Common Files\DESIGNER
2016-02-05 15:54 - 2016-02-05 15:54 - 00000000 ____D C:\Users\Default\AppData\Local\Microsoft Help
2016-02-05 15:54 - 2016-02-05 15:54 - 00000000 ____D C:\Users\Default User\AppData\Local\Microsoft Help
2016-02-05 15:45 - 2016-02-05 15:45 - 00000000 ____D C:\Users\Tina Thiel\AppData\Local\Adobe
2016-02-05 15:43 - 2016-02-10 08:58 - 00000000 ____D C:\Users\Tina Thiel\AppData\Roaming\Adobe
2016-02-05 15:34 - 2016-02-05 15:34 - 00002550 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Illustrator CS2.lnk
2016-02-05 15:33 - 2016-02-05 15:33 - 00000000 ____D C:\Windows\system32\Adobe
2016-02-05 15:33 - 2004-08-17 02:40 - 00016384 _____ C:\Windows\system32\FileOps.exe
2016-02-05 15:31 - 2016-02-05 15:31 - 00000997 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe InDesign CS2.lnk
2016-02-05 10:31 - 2016-02-05 10:31 - 00002015 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop CS2.lnk
2016-02-05 10:31 - 2016-02-05 10:31 - 00002012 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe ImageReady CS2.lnk
2016-02-05 10:29 - 2016-02-05 15:45 - 00000000 ____D C:\ProgramData\Adobe
2016-02-05 10:29 - 2016-02-05 15:33 - 00000000 ____D C:\Program Files\Common Files\Adobe
2016-02-05 10:29 - 2016-02-05 15:33 - 00000000 ____D C:\Program Files\Adobe
2016-02-05 10:29 - 2016-02-05 10:29 - 00001983 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Help Center.lnk
2016-02-05 10:29 - 2016-02-05 10:29 - 00001965 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Bridge.lnk
2016-02-05 10:29 - 2016-02-05 10:29 - 00000000 ____D C:\Users\Public\Documents\Adobe PDF
2016-02-05 10:29 - 2016-02-05 10:29 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe
2016-02-05 10:29 - 2016-02-05 10:29 - 00000000 ____D C:\Program Files\Common Files\Adobe Systems Shared
2016-02-05 10:28 - 2016-02-05 10:28 - 00000000 ____D C:\Program Files\InstallShield Installation Information
2016-02-05 09:19 - 2016-03-02 16:12 - 00000000 ___RD C:\Users\Tina Thiel\Dropbox
2016-02-05 09:19 - 2016-02-05 09:19 - 00001188 _____ C:\Users\Tina Thiel\Desktop\Dropbox.lnk
2016-02-05 09:16 - 2016-03-03 06:21 - 00001210 _____ C:\Windows\Tasks\DropboxUpdateTaskMachineUA.job
2016-02-05 09:16 - 2016-03-02 16:11 - 00000000 ____D C:\Users\Tina Thiel\AppData\Local\Dropbox
2016-02-05 09:16 - 2016-03-02 16:10 - 00001206 _____ C:\Windows\Tasks\DropboxUpdateTaskMachineCore.job
2016-02-05 09:16 - 2016-02-17 16:44 - 00000000 ____D C:\Program Files\Dropbox
2016-02-05 09:16 - 2016-02-05 09:16 - 00000000 ____D C:\Users\Tina Thiel\AppData\Roaming\Dropbox
2016-02-05 09:16 - 2016-02-05 09:16 - 00000000 ____D C:\ProgramData\Dropbox
2016-02-05 09:13 - 2016-02-15 05:23 - 00000000 ____D C:\Users\Tina Thiel\AppData\Roaming\Apple Computer
2016-02-05 09:13 - 2016-02-05 09:13 - 00000000 ____D C:\Users\Tina Thiel\AppData\Local\Apple Computer
2016-02-05 09:13 - 2016-02-05 09:13 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2016-02-05 09:13 - 2016-02-05 09:13 - 00000000 ____D C:\ProgramData\Apple Computer
2016-02-05 09:13 - 2016-02-05 09:13 - 00000000 ____D C:\Program Files\iTunes
2016-02-05 09:13 - 2016-02-05 09:13 - 00000000 ____D C:\Program Files\iPod
2016-02-05 09:12 - 2016-02-05 09:13 - 00000000 ____D C:\Program Files\Common Files\Apple
2016-02-05 09:12 - 2016-02-05 09:12 - 00002519 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk
2016-02-05 09:12 - 2016-02-05 09:12 - 00000000 ____D C:\Users\Tina Thiel\AppData\Local\Apple
2016-02-05 09:12 - 2016-02-05 09:12 - 00000000 ____D C:\ProgramData\Apple
2016-02-05 09:12 - 2016-02-05 09:12 - 00000000 ____D C:\Program Files\Bonjour
2016-02-05 09:12 - 2016-02-05 09:12 - 00000000 ____D C:\Program Files\Apple Software Update
2016-02-05 08:57 - 2016-02-05 08:57 - 00002144 _____ C:\Users\Public\Desktop\Silhouette Studio.lnk
2016-02-05 08:56 - 2016-02-05 08:57 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Silhouette Studio
2016-02-05 08:56 - 2016-02-05 08:56 - 00000000 ____D C:\Users\Tina Thiel\AppData\Roaming\Silhouette America
2016-02-05 08:56 - 2016-02-05 08:56 - 00000000 ____D C:\Program Files\Silhouette America
2016-02-05 08:52 - 2016-02-05 08:52 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\devolo
2016-02-05 08:52 - 2016-02-05 08:52 - 00000000 ____D C:\Program Files\devolo
2016-02-05 08:49 - 2016-02-05 08:49 - 00000957 _____ C:\Users\Public\Desktop\PDF Architect 4.lnk
2016-02-05 08:48 - 2016-02-08 16:02 - 00000000 ____D C:\Users\Tina Thiel\AppData\Roaming\PDF Architect 4
2016-02-05 08:48 - 2016-02-05 08:49 - 00000000 ____D C:\Program Files\PDF Architect 4
2016-02-05 08:48 - 2016-02-05 08:48 - 00000000 ____D C:\Users\Tina Thiel\Documents\PDF Architect
2016-02-05 08:48 - 2016-02-05 08:48 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDF Architect 4
2016-02-05 08:48 - 2016-02-05 08:48 - 00000000 ____D C:\Program Files\Common Files\PDF Software
2016-02-05 08:47 - 2016-02-08 16:02 - 00000000 ____D C:\ProgramData\PDF Architect 4
2016-02-05 08:47 - 2016-02-05 08:49 - 00000000 ____D C:\Program Files\PDFCreator
2016-02-05 08:47 - 2016-02-05 08:47 - 00101256 _____ (pdfforge GmbH) C:\Windows\system32\pdfcmon.dll
2016-02-05 08:47 - 2016-02-05 08:47 - 00000993 _____ C:\Users\Public\Desktop\PDFCreator.lnk
2016-02-05 08:47 - 2016-02-05 08:47 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDFCreator
2016-02-05 07:32 - 2016-02-05 07:32 - 00000000 ____D C:\Users\Tina Thiel\Documents\PE-DESIGN NEXT
2016-02-05 07:32 - 2016-02-05 07:32 - 00000000 ____D C:\ProgramData\Brother
2016-02-05 07:28 - 2016-02-05 07:28 - 00001982 _____ C:\Users\Public\Desktop\PE-DESIGN NEXT.lnk
2016-02-05 07:28 - 2016-02-05 07:28 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PE-DESIGN NEXT
2016-02-03 20:53 - 2016-02-03 20:54 - 00000000 ____D C:\Users\Tina Thiel\AppData\Roaming\Scribus
2016-02-03 20:48 - 2016-03-02 16:15 - 00108360 _____ C:\Users\Tina Thiel\AppData\Local\GDIPFONTCACHEV1.DAT
2016-02-03 20:00 - 2016-02-09 21:03 - 00000000 ____D C:\Program Files\Quark
2016-02-03 19:56 - 2016-02-03 19:56 - 00000000 ____D C:\Users\Tina Thiel\AppData\Roaming\CDZilla
2016-02-03 19:49 - 2016-02-08 15:42 - 00000000 ____D C:\Users\Tina Thiel\AppData\Roaming\elsterformular
2016-02-03 19:49 - 2016-02-03 19:50 - 00000000 ____D C:\ProgramData\elsterformular
2016-02-03 19:49 - 2016-02-03 19:49 - 00001191 _____ C:\Users\Public\Desktop\ElsterFormular.lnk
2016-02-03 19:49 - 2016-02-03 19:49 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ElsterFormular
2016-02-03 19:49 - 2016-02-03 19:49 - 00000000 ____D C:\Program Files\ElsterFormular
2016-02-03 19:42 - 2016-02-03 20:55 - 00000000 ____D C:\Windows\system32\appmgmt
2016-02-03 19:20 - 2016-02-05 07:28 - 00000000 ____D C:\Program Files\Common Files\BIL
2016-02-03 19:20 - 2016-02-03 19:20 - 00000000 ____D C:\Program Files\Brother
2016-02-03 17:12 - 2016-02-03 17:12 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
2016-02-03 17:11 - 2016-02-03 17:11 - 00000000 ____D C:\Windows\PCHEALTH
2016-02-03 17:10 - 2016-02-03 17:10 - 00000000 ____D C:\Program Files\Microsoft Analysis Services
2016-02-03 17:09 - 2016-02-03 17:11 - 00000000 ____D C:\Program Files\Microsoft Office
2016-02-03 17:09 - 2016-02-03 17:09 - 00000000 __RHD C:\MSOCache
2016-02-03 17:09 - 2016-02-03 17:09 - 00000000 ____D C:\Users\Tina Thiel\AppData\Local\Microsoft Help
2016-02-03 16:58 - 2015-11-05 12:23 - 00063680 _____ C:\Windows\system32\Drivers\fsbts.sys
2016-02-03 16:56 - 2016-02-03 16:56 - 00002171 _____ C:\Users\Public\Desktop\F-Secure.lnk
2016-02-03 16:56 - 2016-02-03 16:56 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\F-Secure
2016-02-03 16:56 - 2016-02-03 16:56 - 00000000 ____D C:\Program Files\F-Secure
2016-02-03 16:55 - 2016-03-02 15:53 - 00000000 ____D C:\Users\Tina Thiel\AppData\Local\F-Secure
2016-02-03 16:55 - 2016-02-03 16:58 - 00000000 ____D C:\ProgramData\F-Secure
2016-02-03 16:55 - 2016-02-03 16:55 - 00000000 ____D C:\Users\Tina Thiel\AppData\Local\FSDART
2016-02-03 16:51 - 2016-02-15 12:54 - 00000000 ____D C:\Program Files\Mozilla Firefox
2016-02-03 16:51 - 2016-02-10 04:45 - 00001023 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2016-02-03 16:51 - 2016-02-10 04:45 - 00001011 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2016-02-03 16:51 - 2016-02-03 16:57 - 00000000 ____D C:\Users\Tina Thiel\AppData\Local\Mozilla
2016-02-03 16:51 - 2016-02-03 16:51 - 00000000 ____D C:\Users\Tina Thiel\AppData\Roaming\Mozilla
2016-02-03 16:49 - 2015-12-02 13:25 - 00247976 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2016-02-03 16:36 - 2016-03-02 11:29 - 01618320 _____ C:\Windows\system32\PerfStringBackup.INI
2016-02-03 16:34 - 2016-02-10 04:45 - 00001150 _____ C:\Users\Tina Thiel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2016-02-03 16:33 - 2016-02-10 07:59 - 00000000 ____D C:\Users\Tina Thiel
2016-02-03 16:33 - 2016-02-05 15:45 - 00000000 ____D C:\Users\Tina Thiel\AppData\Local\VirtualStore
2016-02-03 16:33 - 2016-02-03 16:33 - 00000020 ___SH C:\Users\Tina Thiel\ntuser.ini
2016-02-03 16:33 - 2016-02-03 16:33 - 00000000 _SHDL C:\Users\Tina Thiel\Vorlagen
2016-02-03 16:33 - 2016-02-03 16:33 - 00000000 _SHDL C:\Users\Tina Thiel\Startmenü
2016-02-03 16:33 - 2016-02-03 16:33 - 00000000 _SHDL C:\Users\Tina Thiel\Netzwerkumgebung
2016-02-03 16:33 - 2016-02-03 16:33 - 00000000 _SHDL C:\Users\Tina Thiel\Lokale Einstellungen
2016-02-03 16:33 - 2016-02-03 16:33 - 00000000 _SHDL C:\Users\Tina Thiel\Eigene Dateien
2016-02-03 16:33 - 2016-02-03 16:33 - 00000000 _SHDL C:\Users\Tina Thiel\Druckumgebung
2016-02-03 16:33 - 2016-02-03 16:33 - 00000000 _SHDL C:\Users\Tina Thiel\Documents\Eigene Videos
2016-02-03 16:33 - 2016-02-03 16:33 - 00000000 _SHDL C:\Users\Tina Thiel\Documents\Eigene Musik
2016-02-03 16:33 - 2016-02-03 16:33 - 00000000 _SHDL C:\Users\Tina Thiel\Documents\Eigene Bilder
2016-02-03 16:33 - 2016-02-03 16:33 - 00000000 _SHDL C:\Users\Tina Thiel\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2016-02-03 16:33 - 2016-02-03 16:33 - 00000000 _SHDL C:\Users\Tina Thiel\AppData\Local\Verlauf
2016-02-03 16:33 - 2016-02-03 16:33 - 00000000 _SHDL C:\Users\Tina Thiel\AppData\Local\Anwendungsdaten
2016-02-03 16:33 - 2016-02-03 16:33 - 00000000 _SHDL C:\Users\Tina Thiel\Anwendungsdaten
2016-02-03 16:33 - 2016-02-03 16:33 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Videos
2016-02-03 16:33 - 2016-02-03 16:33 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Musik
2016-02-03 16:33 - 2016-02-03 16:33 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Bilder
2016-02-03 16:33 - 2016-02-03 16:33 - 00000000 _SHDL C:\Users\Default\Vorlagen
2016-02-03 16:33 - 2016-02-03 16:33 - 00000000 _SHDL C:\Users\Default\Startmenü
2016-02-03 16:33 - 2016-02-03 16:33 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung
2016-02-03 16:33 - 2016-02-03 16:33 - 00000000 _SHDL C:\Users\Default\Lokale Einstellungen
2016-02-03 16:33 - 2016-02-03 16:33 - 00000000 _SHDL C:\Users\Default\Eigene Dateien
2016-02-03 16:33 - 2016-02-03 16:33 - 00000000 _SHDL C:\Users\Default\Druckumgebung
2016-02-03 16:33 - 2016-02-03 16:33 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Videos
2016-02-03 16:33 - 2016-02-03 16:33 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Musik
2016-02-03 16:33 - 2016-02-03 16:33 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Bilder
2016-02-03 16:33 - 2016-02-03 16:33 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2016-02-03 16:33 - 2016-02-03 16:33 - 00000000 _SHDL C:\Users\Default\AppData\Local\Verlauf
2016-02-03 16:33 - 2016-02-03 16:33 - 00000000 _SHDL C:\Users\Default\AppData\Local\Anwendungsdaten
2016-02-03 16:33 - 2016-02-03 16:33 - 00000000 _SHDL C:\Users\Default\Anwendungsdaten
2016-02-03 16:33 - 2016-02-03 16:33 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Videos
2016-02-03 16:33 - 2016-02-03 16:33 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Musik
2016-02-03 16:33 - 2016-02-03 16:33 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Bilder
2016-02-03 16:33 - 2016-02-03 16:33 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2016-02-03 16:33 - 2016-02-03 16:33 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Verlauf
2016-02-03 16:33 - 2016-02-03 16:33 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Anwendungsdaten
2016-02-03 16:33 - 2016-02-03 16:33 - 00000000 _SHDL C:\ProgramData\Vorlagen
2016-02-03 16:33 - 2016-02-03 16:33 - 00000000 _SHDL C:\ProgramData\Startmenü
2016-02-03 16:33 - 2016-02-03 16:33 - 00000000 _SHDL C:\ProgramData\Microsoft\Windows\Start Menu\Programme
2016-02-03 16:33 - 2016-02-03 16:33 - 00000000 _SHDL C:\ProgramData\Favoriten
2016-02-03 16:33 - 2016-02-03 16:33 - 00000000 _SHDL C:\ProgramData\Dokumente
2016-02-03 16:33 - 2016-02-03 16:33 - 00000000 _SHDL C:\ProgramData\Anwendungsdaten
2016-02-03 16:33 - 2016-02-03 16:33 - 00000000 _SHDL C:\Program Files\Gemeinsame Dateien
2016-02-03 16:33 - 2009-07-14 09:56 - 00000000 ____D C:\Users\Tina Thiel\AppData\Roaming\Media Center Programs
2016-02-03 15:30 - 2016-02-03 15:30 - 00001345 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk
2016-02-03 15:30 - 2016-02-03 15:30 - 00001326 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk
2016-02-03 15:28 - 2016-02-03 15:28 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdFs_01_09_00.Wdf
2016-02-03 15:19 - 2016-02-03 16:33 - 00000000 ____D C:\Windows\Panther
2016-02-02 09:45 - 2016-02-02 09:45 - 00000000 __SHD C:\found.000

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2016-03-03 01:00 - 2009-07-14 05:34 - 00014944 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-03-03 01:00 - 2009-07-14 05:34 - 00014944 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-03-02 16:10 - 2009-07-14 05:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-03-02 16:10 - 2009-07-14 05:33 - 00388040 _____ C:\Windows\system32\FNTCACHE.DAT
2016-03-02 16:10 - 2009-07-14 03:37 - 00000000 __RSD C:\Windows\Media
2016-03-02 11:29 - 2009-07-14 09:47 - 00698688 _____ C:\Windows\system32\perfh007.dat
2016-03-02 11:29 - 2009-07-14 09:47 - 00148828 _____ C:\Windows\system32\perfc007.dat
2016-03-02 11:29 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\inf
2016-02-15 12:53 - 2009-07-14 03:37 - 00000000 ___HD C:\Windows\system32\GroupPolicy
2016-02-12 05:45 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\rescache
2016-02-12 04:29 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\AppCompat
2016-02-11 04:00 - 2009-07-14 09:57 - 00000000 ____D C:\Program Files\Windows Journal
2016-02-11 04:00 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\tracing
2016-02-11 03:59 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\system32\Dism
2016-02-11 03:59 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\system32\AdvancedInstallers
2016-02-11 03:59 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\PolicyDefinitions
2016-02-11 03:59 - 2009-07-14 03:37 - 00000000 ____D C:\Program Files\Common Files\System
2016-02-10 09:00 - 2009-07-14 03:04 - 00000403 _____ C:\Windows\win.ini
2016-02-10 04:21 - 2009-07-14 05:52 - 00000000 ____D C:\Program Files\Windows Defender
2016-02-07 03:32 - 2009-07-14 05:52 - 00000000 ____D C:\Program Files\Windows Sidebar
2016-02-07 03:32 - 2009-07-14 05:52 - 00000000 ____D C:\Program Files\Windows Portable Devices
2016-02-07 03:32 - 2009-07-14 05:52 - 00000000 ____D C:\Program Files\Windows Photo Viewer
2016-02-07 03:32 - 2009-07-14 05:52 - 00000000 ____D C:\Program Files\DVD Maker
2016-02-07 03:32 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\system32\sysprep
2016-02-07 03:32 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\system32\Setup
2016-02-07 03:32 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\system32\oobe
2016-02-07 03:32 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\system32\migwiz
2016-02-07 03:32 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\system32\manifeststore
2016-02-07 03:32 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\servicing
2016-02-07 03:13 - 2009-07-14 03:05 - 00152576 _____ (Microsoft Corporation) C:\Windows\system32\msclmd.dll
2016-02-03 20:52 - 2009-07-14 03:37 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2016-02-03 17:10 - 2009-07-14 09:57 - 00000000 ____D C:\Windows\ShellNew
2016-02-03 16:33 - 2009-07-14 03:37 - 00000000 __RHD C:\Users\Public\Libraries
2016-02-03 16:33 - 2009-07-14 03:37 - 00000000 ____D C:\Program Files\Windows NT
2016-02-03 15:27 - 2009-07-14 09:57 - 00000000 ____D C:\Windows\CSC
2016-02-03 15:19 - 2016-02-01 03:14 - 00008192 __RSH C:\BOOTSECT.BAK
2016-02-03 15:19 - 2009-07-14 05:52 - 00028672 _____ C:\Windows\system32\config\BCD-Template

Einige Dateien in TEMP:
====================
C:\Users\Tina Thiel\AppData\Local\Temp\DRHelper_installFinish.exe
C:\Users\Tina Thiel\AppData\Local\Temp\DRHelper_installStart.exe
C:\Users\Tina Thiel\AppData\Local\Temp\DRHelper_uninstallComplete.exe
C:\Users\Tina Thiel\AppData\Local\Temp\Ec7N9rbI3D.exe
C:\Users\Tina Thiel\AppData\Local\Temp\ose00000.exe
C:\Users\Tina Thiel\AppData\Local\Temp\spark_install.exe
C:\Users\Tina Thiel\AppData\Local\Temp\v8OS9GKYT7.exe


==================== Bamital & volsnap =================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert


LastRegBack: 2016-02-28 00:56

==================== Ende vom FRST.txt ============================
Jetzt noch Addition:

Code:
ATTFilter
Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x86) Version:02-03-2016
durchgeführt von Tina Thiel (2016-03-03 06:39:11)
Gestartet von C:\Users\Tina Thiel\Desktop
Microsoft Windows 7 Professional  Service Pack 1 (X86) (2016-02-03 15:33:44)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-2503069186-1068286192-3510494515-500 - Administrator - Disabled)
Gast (S-1-5-21-2503069186-1068286192-3510494515-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-2503069186-1068286192-3510494515-1002 - Limited - Enabled)
Tina Thiel (S-1-5-21-2503069186-1068286192-3510494515-1000 - Administrator - Enabled) => C:\Users\Tina Thiel

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Antivirus by F-Secure (Disabled - Up to date) {0F70A6C4-76E4-6A3B-2695-519F428B1C20}
AS: Antivirus by F-Secure (Disabled - Up to date) {B4114720-50DE-65B5-1C25-6AED390C569D}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

7-Zip 15.14 (HKLM\...\7-Zip) (Version: 15.14 - Igor Pavlov)
Adobe Creative Suite 2 (HKLM\...\{0134A1A1-C283-4A47-91A1-92F19F960372}) (Version:  - )
Adobe SVG Viewer 3.0 (HKLM\...\Adobe SVG Viewer) (Version:  3.0 - Adobe Systems, Inc.)
Apple Application Support (32-Bit) (HKLM\...\{7FA9ECCF-A2DE-4DA1-BFF3-81260DBDA68F}) (Version: 4.1.2 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{9A629DCB-415D-4A50-85B9-5C2E4F8F74A8}) (Version: 9.1.0.6 - Apple Inc.)
Apple Software Update (HKLM\...\{FFD1F7F1-1AC9-4BC4-A908-0686D635ABAF}) (Version: 2.1.4.131 - Apple Inc.)
Audible Download Manager (HKLM\...\AudibleDownloadManager) (Version: 6.6.0.19 - Audible, Inc.)
Bonjour (HKLM\...\{D168AAD0-6686-47C1-B599-CDD4888B9D1A}) (Version: 3.1.0.1 - Apple Inc.)
Computer Security 14.150.101.0 (release) (Version: 14.150.101.0 - F-Secure Corporation) Hidden
devolo Cockpit (HKLM\...\dlancockpit) (Version: 4.3.1.0 - devolo AG)
Dropbox (HKLM\...\Dropbox) (Version: 3.14.7 - Dropbox, Inc.)
Dropbox Update Helper (Version: 1.3.27.77 - Dropbox, Inc.) Hidden
ElsterFormular (HKLM\...\ElsterFormular) (Version: 17.0.4.20160106 - Landesfinanzdirektion Thüringen)
F-Secure (HKLM\...\F-Secure ServiceEnabler 666) (Version: 2.50.208.0 - F-Secure Corporation)
F-Secure (Version: 2.50.208.0 - F-Secure Corporation) Hidden
F-Secure CCF Reputation (Version: 2.0.1337.0 - F-Secure) Hidden
F-Secure CCF Scanning 1.72.115.709 (release) (Version: 1.72.115.709 - F-Secure Corporation) Hidden
F-Secure Network CCF 1.04.119 (Version: 1.04.119 - F-Secure Corporation) Hidden
F-Secure SafeSearch 1.07.110.0 (release) (Version: 1.07.110.0 - F-Secure Corporation) Hidden
iTunes (HKLM\...\{2C741651-87E0-4479-9703-6DD0D7988B84}) (Version: 12.3.2.35 - Apple Inc.)
Manager (Version: 4.0.1.25166 - 2015 pdfforge GmbH. All rights reserved) Hidden
Microsoft .NET Framework 4.6.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.6.01055 - Microsoft Corporation)
Microsoft .NET Framework 4.6.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.6.01055 - Microsoft Corporation)
Microsoft Office Home and Student 2010 (HKLM\...\Office14.SingleImage) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x86) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x86)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x86) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x86) Language Pack - DEU) (Version: 10.0.50903 - Microsoft Corporation)
Mozilla Firefox 44.0.2 (x86 de) (HKLM\...\Mozilla Firefox 44.0.2 (x86 de)) (Version: 44.0.2 - Mozilla)
Online Safety 2.150.3659.2518 (Version: 2.150.3659.2518 - F-Secure Corporation) Hidden
paint.net (HKLM\...\{DADC2AF6-DC9F-4BCF-BFCE-DCEC16EF507B}) (Version: 4.0.9 - dotPDN LLC)
PDF Architect 4 (HKLM\...\PDF Architect 4) (Version: 4.0.34.26215 - pdfforge GmbH)
PDF Architect 4 Create Module (Version: 4.0.12.26604 - pdfforge GmbH) Hidden
PDF Architect 4 Edit Module (Version: 4.0.12.26604 - pdfforge GmbH) Hidden
PDF Architect 4 View Module (Version: 4.0.12.26604 - pdfforge GmbH) Hidden
PDFCreator (HKLM\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 2.2.2 - pdfforge)
PE-DESIGN NEXT (HKLM\...\{041EDAC5-853E-4A10-A0C8-ED0CF7769306}) (Version: 9.01.0000 - Brother Industries, Ltd.)
Quark Update (HKLM\...\{82154114-943B-4A6F-9B20-073C9573E93E}) (Version: 1.0.0.2 - Ihr Firmenname)
QuarkXPress (HKLM\...\{EACCA5D3-5E48-4181-B953-1842BA6FED32}) (Version: 10.5.2.0 - Quark Software Inc.)
QuarkXPress Document Converter (HKLM\...\{B9CB6B1B-0C6D-4D28-87FD-CE5EDE953473}) (Version: 1.0 - Ihr Firmenname)
QuickTime (HKLM\...\{B67BAFBA-4C9F-48FA-9496-933E3B255044}) (Version: 7.74.80.86 - Apple Inc.)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version:  - Microsoft)
Silhouette Studio (HKLM\...\{D730B479-9A4C-492F-B518-BFC9186B3618}) (Version: 3.6.057 - Silhouette America)
Suite Specific (Version: 2.0.0 - Adobe Systems, Incorporated) Hidden
TeamViewer 11 (HKLM\...\TeamViewer) (Version: 11.0.55321 - TeamViewer)
WinRAR 5.31 (32-Bit) (HKLM\...\WinRAR archiver) (Version: 5.31.0 - win.rar GmbH)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {008DC6A8-EB53-467B-BD99-AF8D8E20BD1F} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2015-08-27] (Apple Inc.)
Task: {15239642-600C-4EA3-A871-6F2E1F0B8C9F} - System32\Tasks\DropboxUpdateTaskMachineUA => C:\Program Files\Dropbox\Update\DropboxUpdate.exe [2016-02-05] (Dropbox, Inc.)
Task: {1CBE49D6-6CAA-493D-A5BB-941EF0E60F4B} - System32\Tasks\{13CBB859-99D7-403F-9FC8-CED8DEE3309D} => pcalua.exe -a "C:\Users\Tina Thiel\Desktop\Photoshop\CS2_RetNon_Ger_3.exe" -d "C:\Users\Tina Thiel\Desktop\Photoshop"
Task: {293A4FD6-C15B-40F9-BB0B-D45372439EB8} - System32\Tasks\{0FB712BC-FB48-4817-8AF7-387B3A2FC106} => pcalua.exe -a "C:\Users\Tina Thiel\Desktop\Photoshop\CS2_RetNon_Ger_2.exe" -d "C:\Users\Tina Thiel\Desktop\Photoshop"
Task: {5FB2F96D-5573-4C3F-99FA-02FA0AC914FA} - System32\Tasks\Quark Updater => C:\Program Files\Quark\Quark Update\AutoUpdate.exe [2011-11-25] ()
Task: {8B6AB2C8-1AA8-4F1B-8601-22489D34F095} - System32\Tasks\{97F2E282-D0DC-44A7-A22E-4A803304BFBA} => pcalua.exe -a "C:\Users\Tina Thiel\Desktop\Photoshop\CS_2.0_GR_Extras_1.exe" -d "C:\Users\Tina Thiel\Desktop\Photoshop"
Task: {DA51EE5B-CE6E-4E7B-8C14-4D9930D5CC90} - System32\Tasks\DropboxUpdateTaskMachineCore => C:\Program Files\Dropbox\Update\DropboxUpdate.exe [2016-02-05] (Dropbox, Inc.)

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\Windows\Tasks\DropboxUpdateTaskMachineCore.job => C:\Program Files\Dropbox\Update\DropboxUpdate.exe
Task: C:\Windows\Tasks\DropboxUpdateTaskMachineUA.job => C:\Program Files\Dropbox\Update\DropboxUpdate.exe
Task: C:\Windows\Tasks\Quark Updater.job => C:\Program Files\Quark\Quark Update\AutoUpdate.exe

==================== Verknüpfungen =============================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2015-11-10 13:16 - 2015-11-10 13:16 - 00248872 _____ () C:\Program Files\F-Secure\Internet Security\daas2.dll
2015-12-17 18:39 - 2015-12-17 18:39 - 00073512 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2015-12-17 18:39 - 2015-12-17 18:39 - 01040144 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2016-02-03 17:01 - 2016-02-03 17:01 - 00091176 _____ () C:\Program Files\F-Secure\Internet Security\apps\ComputerSecurity\Anti-Virus\minifilter\hashlib_x86.dll
2016-02-03 16:58 - 2016-02-03 17:01 - 00177704 _____ () C:\Program Files\F-Secure\Internet Security\apps\ComputerSecurity\Gemini\fsgem.dll
2016-02-03 16:58 - 2016-02-03 17:01 - 00212008 _____ () C:\Program Files\F-Secure\Internet Security\apps\ComputerSecurity\Spam Control\fsas.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)

AlternateDataStreams: C:\Users\Tina Thiel\Desktop\10 Euro 001.jpg:com.dropbox.attributes [422]
AlternateDataStreams: C:\Users\Tina Thiel\Desktop\20 Euro 001.jpg:com.dropbox.attributes [420]
AlternateDataStreams: C:\Users\Tina Thiel\Desktop\5 Euro 001.jpg:com.dropbox.attributes [420]
AlternateDataStreams: C:\Users\Tina Thiel\Desktop\deer_smallv1:com.dropbox.attributes [168]

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)


==================== EXE Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)


==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)


==================== Hosts Inhalt: ===============================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2009-07-14 03:04 - 2016-02-15 12:57 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts


==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-2503069186-1068286192-3510494515-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Tina Thiel\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.178.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)


==================== FirewallRules (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [SPPSVC-In-TCP] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [SPPSVC-In-TCP-NoScope] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [{58423BA6-D2B6-4DBC-8530-BE24A23330D9}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{AFEE739B-940B-4F90-972B-15832F177BFC}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{70FEC98C-F44C-43CF-A9B2-62383E40C043}] => (Allow) C:\Program Files\devolo\dlan\devolonetsvc.exe
FirewallRules: [{D4D39338-EFE9-409B-B436-3B3F50BF2EF6}] => (Allow) C:\Program Files\devolo\dlan\devolonetsvc.exe
FirewallRules: [{AA8E020B-7C17-4D54-92EB-97C617D2E924}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{3902AC9E-F9B6-48C4-9559-302147708974}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{998DC7C3-F363-4629-A62B-D6AFBD8D0BAB}] => (Allow) C:\Program Files\iTunes\iTunes.exe
FirewallRules: [{4198C64E-45BD-4B27-906B-98C298E2313C}] => (Allow) C:\Program Files\Adobe\Adobe Version Cue CS2\bin\VersionCueCS2.exe
FirewallRules: [{2713E47A-E645-4099-B752-C84691C20D6F}] => (Allow) C:\Program Files\Adobe\Adobe Version Cue CS2\bin\VersionCueCS2.exe
FirewallRules: [{E902CC6C-1588-49FA-B152-18E6D7B2B601}] => (Allow) C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
FirewallRules: [{F3D10085-A743-487C-9150-8A05D621B4BE}] => (Allow) C:\Program Files\Dropbox\Client\Dropbox.exe
FirewallRules: [{6B33CC71-3858-4D98-A004-251F222C4ADD}] => (Allow) C:\Program Files\TeamViewer\TeamViewer.exe
FirewallRules: [{6D22704E-CD13-4B75-91CA-602D65369900}] => (Allow) C:\Program Files\TeamViewer\TeamViewer.exe
FirewallRules: [{63E4E1B3-E152-4F2F-9BD1-045A77BA9906}] => (Allow) C:\Program Files\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{DD05C7BB-35BA-4A47-9678-565219E92E1B}] => (Allow) C:\Program Files\TeamViewer\TeamViewer_Service.exe

==================== Wiederherstellungspunkte =========================

19-02-2016 09:04:38 Geplanter Prüfpunkt
24-02-2016 10:40:44 Uniblue PC Mechanic installation
27-02-2016 03:00:10 Windows Update
02-03-2016 15:53:49 Malwarebytes Anti-Rootkit Restore Point
03-03-2016 06:34:02 JRT Pre-Junkware Removal

==================== Fehlerhafte Geräte im Gerätemanager =============

Name: PS/2-kompatible Maus
Description: PS/2-kompatible Maus
Class Guid: {4d36e96f-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: i8042prt
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (03/02/2016 04:35:52 PM) (Source: FSecure-FSecure-F-Secure Anti-Virus) (EventID: 103) (User: )
Description: 1  2016-03-02  16:35:52+02:00  TT-KELLER  TT-Keller\Tina Thiel  F-Secure Anti-Virus
 Spyware detected:
 Type: adware
 Family: 
 Name: Adware.Agent.QHG
 Object: C:\Users\Tina Thiel\AppData\Local\Temp\tmp7z_1\uninstall.exe

Error: (03/02/2016 04:11:05 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Unexpected conflict discarding   17 21.178.168.192.in-addr.arpa. PTR TT-Keller.local.

Error: (03/02/2016 04:11:05 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Received from 192.168.178.21:5353   19 21.178.168.192.in-addr.arpa. PTR TT-Keller-2.local.

Error: (03/02/2016 03:53:47 PM) (Source: VSS) (EventID: 8194) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Abfragen nach der Schnittstelle "IVssWriterCallback" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070005, Zugriff verweigert
.
Die Ursache hierfür ist oft eine falsche Sicherheitseinstellung im Schreib- oder Anfrageprozess.


Vorgang:
   Generatordaten werden gesammelt

Kontext:
   Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
   Generatorname: System Writer
   Generatorinstanz-ID: {4d4054d9-8f86-4cef-baa3-4af90f56bd74}

Error: (03/02/2016 03:35:17 PM) (Source: FSecure-FSecure-F-Secure Anti-Virus) (EventID: 103) (User: )
Description: 1  2016-03-02  15:35:16+02:00  TT-KELLER  TT-Keller\Tina Thiel  F-Secure Anti-Virus
 Spyware detected:
 Type: adware
 Family: 
 Name: Adware.Agent.QHG
 Object: C:\Users\Tina Thiel\AppData\Local\Temp\tmp7z_1\uninstall.exe

Error: (02/27/2016 05:57:10 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Unexpected conflict discarding   17 21.178.168.192.in-addr.arpa. PTR TT-Keller.local.

Error: (02/27/2016 05:57:10 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Received from 192.168.178.21:5353   19 21.178.168.192.in-addr.arpa. PTR TT-Keller-2.local.

Error: (02/24/2016 10:40:43 AM) (Source: VSS) (EventID: 8194) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Abfragen nach der Schnittstelle "IVssWriterCallback" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070005, Zugriff verweigert
.
Die Ursache hierfür ist oft eine falsche Sicherheitseinstellung im Schreib- oder Anfrageprozess.


Vorgang:
   Generatordaten werden gesammelt

Kontext:
   Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
   Generatorname: System Writer
   Generatorinstanz-ID: {b1641eb2-4cc0-4ba9-9df1-ae0218b5f60f}

Error: (02/19/2016 07:25:03 AM) (Source: Adobe Version Cue CS2) (EventID: 3) (User: )
Description: VersionCueCS2.exe: JVM aborted!

Error: (02/19/2016 07:25:03 AM) (Source: Adobe Version Cue CS2) (EventID: 3) (User: )
Description: VersionCueCS2.exe: JVM aborted!


Systemfehler:
=============
Error: (03/03/2016 06:34:14 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "F-Secure Dll Hoster" wurde unerwartet beendet. Dies ist bereits 2 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (03/03/2016 06:27:37 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Modules Installer" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 120000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (03/03/2016 06:27:37 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Media Player-Netzwerkfreigabedienst" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 30000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (03/03/2016 06:27:37 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "iPod-Dienst" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (03/03/2016 06:27:37 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Search" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 30000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (03/03/2016 06:27:37 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "F-Secure Management Agent" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (03/03/2016 06:27:36 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "PDF Architect 4 Manager" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (03/03/2016 06:27:36 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "PDF Architect 4 Creator" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (03/03/2016 06:27:36 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "F-Secure ORSP Client" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 5000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (03/03/2016 06:27:36 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "F-Secure Dll Hoster" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.


==================== Memory info =========================== 

Processor: Intel(R) Core(TM)2 Duo CPU E8400 @ 3.00GHz
Prozentuale Nutzung des RAM: 35%
Installierter physikalischer RAM: 3567.34 MB
Verfügbarer physikalischer RAM: 2308.33 MB
Summe virtueller Speicher: 7132.99 MB
Verfügbarer virtueller Speicher: 5763.65 MB

==================== Laufwerke ================================

Drive c: () (Fixed) (Total:220.87 GB) (Free:146.58 GB) NTFS ==>[Laufwerk mit Startkomponenten (eingeholt von BCD)]
Drive d: (HP_RECOVERY) (Fixed) (Total:12 GB) (Free:11.96 GB) NTFS

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 232.9 GB) (Disk ID: 2DAF2DAF)
Partition 1: (Active) - (Size=220.9 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=12 GB) - (Type=07 NTFS)

==================== Ende vom Addition.txt ============================

Alt 03.03.2016, 10:03   #13
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
Firefox öffnet selbstständig Internetseiten - Standard

Firefox öffnet selbstständig Internetseiten


Hast du alle Optionen vom adwCleaner aktiviert?

__________________
Logfiles bitte immer in CODE-Tags posten

Antwort

Themen zu Firefox öffnet selbstständig Internetseiten
abgebrochen, andere, bestimmte, editor, firefox, forum, häufiger, installiert, interne, internetseite, klicke, laufen, nervt, neue, nichts, recovery, richtig, scan, schließe, seite, seiten, suche, tool, überhaupt, öffnet


« Windows 7 Google Chrome Werbung | Virus Recovery »


Ähnliche Themen: Firefox öffnet selbstständig Internetseiten


  1. Firefox öffnet selbstständig Tabs mit Werbung
    Plagegeister aller Art und deren Bekämpfung - 02.02.2015 (11)
  2. Windows 7: selbstständig öffnende Internetseiten sowohl im IE als auch bei Mozilla Firefox
    Log-Analyse und Auswertung - 29.05.2014 (15)
  3. Laptop ist langsam, hängt sich auf und öffnet selbstständig Internetseiten
    Alles rund um Windows - 23.02.2014 (1)
  4. Win 8 Firefox öffnet selbstständig neuen TAB
    Plagegeister aller Art und deren Bekämpfung - 16.02.2014 (1)
  5. Win 7: Firefox öffnet selbstständig Tabs mit Werbung
    Log-Analyse und Auswertung - 13.09.2013 (11)
  6. Firefox öffnet selbstständig Tabs mit Werbung
    Plagegeister aller Art und deren Bekämpfung - 09.07.2013 (7)
  7. Firefox öffnet selbstständig 209.59.195.20
    Log-Analyse und Auswertung - 17.09.2010 (21)
  8. IE öffnet selbstständig bei laufenden Firefox
    Log-Analyse und Auswertung - 04.07.2010 (15)
  9. Firefox öffnet Werbetabs&Internet Explorer öffnet sich selbstständig
    Log-Analyse und Auswertung - 09.05.2010 (64)
  10. HILFE: Firefox öffnet Werbetabs&Internet Explorer öffnet sich selbstständig
    Log-Analyse und Auswertung - 07.05.2010 (6)
  11. IE/Firefox öffnet Internetseiten von alleine
    Log-Analyse und Auswertung - 24.04.2010 (5)
  12. Firefox öffnet selbstständig Werbefenster
    Log-Analyse und Auswertung - 11.04.2010 (2)
  13. Firefox öffnet selbstständig Werbeseiten
    Log-Analyse und Auswertung - 08.01.2010 (6)
  14. Browser öffnet selbstständig Internetseiten!!
    Log-Analyse und Auswertung - 07.12.2009 (1)
  15. firefox öffnet selbstständig werbeseiten
    Log-Analyse und Auswertung - 08.12.2008 (8)
  16. Firefox öffnet selbstständig neue Browser
    Plagegeister aller Art und deren Bekämpfung - 26.11.2008 (14)
  17. Firefox öffnet selbstständig werbeseiten
    Log-Analyse und Auswertung - 02.02.2006 (12)
Anleitungen und Tipps

- Für alle Hilfesuchenden! Was beachten?

- Anleitung: MyStartSearch.com entfernen

- Anleitung: WebSearches löschen

- Hilfe: iStartSurf entfernen – so gehts!

- Anleitung: Omiga Plus richtig entfernen

- Browser Viren entfernen


Zum Thema Firefox öffnet selbstständig Internetseiten - Hallo Helfer, Firefox öffnet ständig neue Tabs. Wenn ich eine bestimmte Seite suche und anschließend anklicke öffnet sie sich kurz, wird dann abgebrochen und eine ganz andere Seite erscheint. Ausserdem - Firefox öffnet selbstständig Internetseiten...
Archiv
Du betrachtest: Firefox öffnet selbstständig Internetseiten auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55