![]() |
Trojaner TR/Crypt.XPACK.Gen5" gefunden C:\Windows\winsxs\Temp\PendingRenames Hallo, Antivir hat den Trojaner "TR/Crypt.XPACK.Gen5" gefunden! Ich habe hier im Forum nachgelesen und Antivir hat 4 Funde gemeldet: Hier das Protokoll des Echtzeit Scanners: 16.05.2012,11:25:16 [INFO] Update-Auftrag gestartet! 16.05.2012,11:25:24 [INFO] Aktuelle Engine Version: 8.2.10.64 16.05.2012,11:25:24 [INFO] Aktuelle Version der VDF-Datei: 7.11.30.46 16.05.2012,11:54:30 [INFO] Der Avira Free Antivirus Dienst wurde beendet! 16.05.2012,11:55:22 [INFO] --------------------------------------------------------- 16.05.2012,11:55:22 [INFO] Der Avira Free Antivirus Dienst wurde erfolgreich gestartet! 16.05.2012,11:55:35 [INFO] Echtzeit Scanner Version: 12.03.00.15, Engine Version 8.2.10.64, VDF Version: 7.11.30.46 16.05.2012,11:55:36 [INFO] Online-Dienste stehen zur Verfügung. 16.05.2012,11:55:36 [INFO] Echtzeit Scanner wurde aktiviert 16.05.2012,11:55:36 [INFO] Verwendete Konfiguration der Echtzeitsuche: - Geprüfte Dateien: Dateien von lokalen Laufwerken prüfen - Geprüfte Dateien: Dateierweiterungsliste verwenden: . .386 .?HT* .ACM .ADE .ADP .ANI .APK .APP .ASD .ASF .ASP .ASX .AWX .AX .BAS .BAT .BIN .BOO .CDF .CHM .CLASS .CMD .CNV .COM .CPL .CPX .CRT .CSH .DEX .DLL .DLO .DO* .DRV .EMF .EML .EXE* .FAS .FLT .FOT .HLP .HT* .INF .INI .INS .ISP .J2K .JAR .JFF .JFI .JFIF .JIF .JMH .JNG .JP2 .JPE .JPEG .JPG .JS* .JSE .LNK .LSP .MD? .MDB .MOD .MS? .NWS .OBJ .OCX .OLB .OSD .OV? .PCD .PDF .PDR .PGM .PHP .PIF .PKG .PL* .PNG .POT* .PPAM .PPS* .PPT* .PRG .RAR .REG .RPL .RTF .SBF .SCR .SCRIPT .SCT .SH .SHA .SHB .SHS .SHTM* .SIS .SLD? .SPL .SWF .SYS .TLB .TMP .TSP .TTF .URL .VB? .VCS .VLM .VXD .VXO .WIZ .WLL .WMD .WMF .WMS .WMZ .WPC .WSC .WSF .WSH .WWK .XAR .XL* .XML .XXX .ZIP - Gerätemodus: Datei beim Öffnen durchsuchen, Datei nach Schließen durchsuchen - Aktion: Benutzer fragen - Archive durchsuchen: Deaktiviert - Makrovirenheuristik: Aktiviert - Win32 Dateiheuristik: Erkennungsstufe mittel - Protokollierungsstufe: Standard 16.05.2012,13:06:41 [FUND] Ist das Trojanische Pferd TR/Crypt.XPACK.Gen5! C:\Windows\winsxs\Temp\PendingRenames\65a2f1f85333cd0157750000e40f6c0e.wow64_microsoft-windows-p..installerandprintui_31bf3856ad364e35_6.1.7601.17514_none_3eceef6140ec9728_puiobj.dll_343adf45 [INFO] Benutzer: NT-AUTORITÄT\SYSTEM [INFO] Der Zugriff auf die Datei wurde verweigert! 16.05.2012,13:06:45 [FUND] Ist das Trojanische Pferd TR/Crypt.XPACK.Gen5! C:\Windows\winsxs\Temp\PendingRenames\65a2f1f85333cd0157750000e40f6c0e.wow64_microsoft-windows-p..installerandprintui_31bf3856ad364e35_6.1.7601.17514_none_3eceef6140ec9728_puiobj.dll_343adf45 [INFO] Benutzer: NT-AUTORITÄT\SYSTEM [INFO] Datei wurde an Scanner übergeben. 16.05.2012,13:09:09 [FUND] Ist das Trojanische Pferd TR/Crypt.XPACK.Gen5! C:\Windows\winsxs\Temp\PendingRenames\32475f515433cd01eb750000e40f6c0e.wow64_microsoft-windows-p..installerandprintui_31bf3856ad364e35_6.1.7601.17514_none_3eceef6140ec9728_puiobj.dll_343adf45 [INFO] Benutzer: NT-AUTORITÄT\SYSTEM [INFO] Der Zugriff auf die Datei wurde verweigert! 16.05.2012,13:09:12 [FUND] Ist das Trojanische Pferd TR/Crypt.XPACK.Gen5! C:\Windows\winsxs\Temp\PendingRenames\32475f515433cd01eb750000e40f6c0e.wow64_microsoft-windows-p..installerandprintui_31bf3856ad364e35_6.1.7601.17514_none_3eceef6140ec9728_puiobj.dll_343adf45 [INFO] Benutzer: NT-AUTORITÄT\SYSTEM [INFO] Datei wurde an Scanner übergeben. Ich hab dann Malwarebytes Anti Malware installiert und gestartet, mit folgendem Ergebnis: Es wurde NICHTS gefunden! Malwarebytes Anti-Malware (Test) 1.61.0.1400 www.malwarebytes.org Datenbank Version: v2012.05.16.03 Windows 7 x64 NTFS Internet Explorer 9.0.8112.16421 Daria :: DARIA-PC [Administrator] Schutz: Aktiviert 16.05.2012 13:18:45 mbam-log-2012-05-16 (13-18-45).txt Art des Suchlaufs: Vollständiger Suchlauf Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM Deaktivierte Suchlaufeinstellungen: P2P Durchsuchte Objekte: 369387 Laufzeit: 1 Stunde(n), 9 Minute(n), 59 Sekunde(n) Infizierte Speicherprozesse: 0 (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungswerte: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateiobjekte der Registrierung: 0 (Keine bösartigen Objekte gefunden) Infizierte Verzeichnisse: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateien: 0 (Keine bösartigen Objekte gefunden) (Ende) Kann ich nun den Trojaner, den Antivir in Quarantäne versetzt hat einfach löschen? Vielen Dank für eure Hilfe! |
Hallo und Herzlich Willkommen! :) Bevor wir unsere Zusammenarbeit beginnen, [Bitte Vollständig lesen]: Zitat:
Für Vista und Win7: Wichtig: Alle Befehle bitte als Administrator ausführen! rechte Maustaste auf die Eingabeaufforderung und "als Administrator ausführen" auswählen Auf der angewählten Anwendung einen Rechtsklick (rechte Maustaste) und "Als Administrator ausführen" wählen! 1. Systemscan mit OTL Lade Dir bitte OTL von Oldtimer herunter und speichere es auf Deinem Desktop
2. Um festzustellen, ob veraltete oder schädliche Software unter Programme installiert sind, ich würde gerne noch all deine installierten Programme sehen:
Zitat:
kira |
Hallo, danke für die schnelle Antwort! Anbei das Logfile von CCleaner mit all meinen installierten Programmen Adobe Flash Player 11 Plugin 64-bit Adobe Systems Incorporated 08.05.2012 6,00MB 11.2.202.235 Adobe Reader X (10.1.3) - Deutsch Adobe Systems Incorporated 08.05.2012 121,3MB 10.1.3 Advanced Audio FX Engine Creative Technology Ltd 10.05.2012 1.12.05 Avira Free Antivirus Avira 09.05.2012 109,5MB 12.0.0.1125 CCleaner Piriform 15.05.2012 3.18 Dell Resource CD Ihr Firmenname 08.05.2012 3,00MB 1.00.0000 Dell Support Center Dell Inc. 08.05.2012 128,9MB 3.1.5907.39 Dell Touchpad ALPS ELECTRIC CO., LTD. 09.05.2012 7.1107.115.102 Dell Webcam Central Creative Technology Ltd 10.05.2012 1.40.05 EndNote X5 Thomson Reuters 08.05.2012 82,5MB 15.0.0.5478 Free RAR Extract Frog Philipp Winterberg 08.05.2012 4.30 grafstat4 DrSoft 08.05.2012 93,6MB 4.252 Integrated Webcam Driver (1.00.02.0825) 11.05.2012 Intel(R) Rapid Storage Technology Intel Corporation 16.05.2012 10.5.0.1029 Intel® Matrix Storage Manager Intel Corporation 09.05.2012 Java(TM) 7 Update 4 Oracle 13.05.2012 99,3MB 7.0.40 JavaFX 2.1.0 Oracle Corporation 13.05.2012 20,9MB 2.1.0 Live! Cam Avatar Creator Creative Technology Ltd 10.05.2012 4.6.3009.1 Malwarebytes Anti-Malware Version 1.61.0.1400 Malwarebytes Corporation 15.05.2012 18,0MB 1.61.0.1400 Marvell Miniport Driver Marvell 09.05.2012 11.10.5.3 Microsoft .NET Framework 4 Client Profile Microsoft Corporation 15.05.2012 38,8MB 4.0.30319 Microsoft .NET Framework 4 Client Profile DEU Language Pack Microsoft Corporation 15.05.2012 2,94MB 4.0.30319 Microsoft Office Enterprise 2007 Microsoft Corporation 08.05.2012 12.0.4518.1014 Microsoft Office Outlook Connector Microsoft Corporation 08.05.2012 3,38MB 14.0.6106.5001 Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 Microsoft Corporation 08.05.2012 11,1MB 10.0.40219 Mozilla Firefox 12.0 (x86 en-US) Mozilla 08.05.2012 36,7MB 12.0 Mozilla Maintenance Service Mozilla 08.05.2012 0,21MB 12.0 ResearchSoft Direct Export Helper 08.05.2012 Skype™ 5.9 Skype Technologies S.A. 08.05.2012 19,3MB 5.9.115 VLC media player 2.0.1 VideoLAN 08.05.2012 2.0.1 Hier das Log von Extras.TXT:OTL EXTRAS Logfile: Code: OTL Extras logfile created on: 16.05.2012 14:58:07 - Run 1 |
und hier das Log von OTL.TXT OTL logfile created on: 16.05.2012 14:58:07 - Run 1 OTL by OldTimer - Version 3.2.43.0 Folder = C:\Users\Daria\Downloads 64bit- Home Premium Edition (Version = 6.1.7600) - Type = NTWorkstation Internet Explorer (Version = 9.0.8112.16421) Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy 3,96 Gb Total Physical Memory | 2,42 Gb Available Physical Memory | 61,15% Memory free 7,92 Gb Paging File | 6,13 Gb Available in Paging File | 77,40% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 596,07 Gb Total Space | 520,77 Gb Free Space | 87,37% Space Free | Partition Type: NTFS Computer Name: DARIA-PC | User Name: Daria | Logged in as Administrator. Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days ========== Processes (SafeList) ========== PRC - C:\Users\Daria\Downloads\OTL.exe (OldTimer Tools) PRC - C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG) PRC - C:\Program Files (x86)\Avira\AntiVir Desktop\avscan.exe (Avira Operations GmbH & Co. KG) PRC - C:\program files (x86)\avira\antivir desktop\avcenter.exe (Avira Operations GmbH & Co. KG) PRC - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG) PRC - C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (Avira Operations GmbH & Co. KG) PRC - C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation) PRC - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe (Malwarebytes Corporation) PRC - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation) PRC - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated) PRC - C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (Microsoft Corporation) PRC - C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe (Creative Technology Ltd) PRC - C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe (Intel Corporation) PRC - C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe (Intel Corporation) ========== Modules (No Company Name) ========== MOD - C:\Program Files (x86)\Mozilla Firefox\mozjs.dll () MOD - C:\PROGRA~2\MICROS~1\Office12\ADDINS\UMOUTL~1.DLL () MOD - C:\PROGRA~2\MICROS~1\Office12\ADDINS\COLLEA~1.DLL () MOD - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\MSPTLS.DLL () ========== Win32 Services (SafeList) ========== SRV - (AntiVirSchedulerService) -- C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG) SRV - (AntiVirService) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (Avira Operations GmbH & Co. KG) SRV - (AdobeFlashPlayerUpdateSvc) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe (Adobe Systems Incorporated) SRV - (SkypeUpdate) -- C:\Program Files (x86)\Skype\Updater\Updater.exe (Skype Technologies) SRV - (MozillaMaintenance) -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe (Mozilla Foundation) SRV - (MBAMService) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe (Malwarebytes Corporation) SRV - (AdobeARMservice) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated) SRV - (clr_optimization_v4.0.30319_32) -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (Microsoft Corporation) SRV - (clr_optimization_v2.0.50727_32) -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (Microsoft Corporation) SRV - (IAANTMON) Intel(R) -- C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe (Intel Corporation) ========== Driver Services (SafeList) ========== DRV:64bit: - (avipbb) -- C:\Windows\SysNative\drivers\avipbb.sys (Avira GmbH) DRV:64bit: - (avgntflt) -- C:\Windows\SysNative\drivers\avgntflt.sys (Avira GmbH) DRV:64bit: - (MBAMProtector) -- C:\Windows\SysNative\drivers\mbam.sys (Malwarebytes Corporation) DRV:64bit: - (Fs_Rec) -- C:\Windows\SysNative\drivers\fs_rec.sys (Microsoft Corporation) DRV:64bit: - (avkmgr) -- C:\Windows\SysNative\drivers\avkmgr.sys (Avira GmbH) DRV:64bit: - (iaStor) -- C:\Windows\SysNative\drivers\iaStor.sys (Intel Corporation) DRV:64bit: - (dc3d) MS Hardware Device Detection Driver (USB) -- C:\Windows\SysNative\drivers\dc3d.sys (Microsoft Corporation) DRV:64bit: - (amdsata) -- C:\Windows\SysNative\drivers\amdsata.sys (Advanced Micro Devices) DRV:64bit: - (amdxata) -- C:\Windows\SysNative\drivers\amdxata.sys (Advanced Micro Devices) DRV:64bit: - (igfx) -- C:\Windows\SysNative\drivers\igdkmd64.sys (Intel Corporation) DRV:64bit: - (ApfiltrService) -- C:\Windows\SysNative\drivers\Apfiltr.sys (Alps Electric Co., Ltd.) DRV:64bit: - (yukonw7) -- C:\Windows\SysNative\drivers\yk62x64.sys () DRV:64bit: - (amdsbs) -- C:\Windows\SysNative\drivers\amdsbs.sys (AMD Technologies Inc.) DRV:64bit: - (LSI_SAS2) -- C:\Windows\SysNative\drivers\lsi_sas2.sys (LSI Corporation) DRV:64bit: - (HpSAMD) -- C:\Windows\SysNative\drivers\HpSAMD.sys (Hewlett-Packard Company) DRV:64bit: - (stexstor) -- C:\Windows\SysNative\drivers\stexstor.sys (Promise Technology) DRV:64bit: - (BCM43XX) -- C:\Windows\SysNative\drivers\BCMWL664.SYS (Broadcom Corporation) DRV:64bit: - (CtClsFlt) -- C:\Windows\SysNative\drivers\CtClsFlt.sys (Creative Technology Ltd.) DRV:64bit: - (ebdrv) -- C:\Windows\SysNative\drivers\evbda.sys (Broadcom Corporation) DRV:64bit: - (b06bdrv) -- C:\Windows\SysNative\drivers\bxvbda.sys (Broadcom Corporation) DRV:64bit: - (b57nd60a) -- C:\Windows\SysNative\drivers\b57nd60a.sys (Broadcom Corporation) DRV:64bit: - (hcw85cir) -- C:\Windows\SysNative\drivers\hcw85cir.sys (Hauppauge Computer Works, Inc.) DRV:64bit: - (OA009Vid) -- C:\Windows\SysNative\drivers\OA009Vid.sys (Creative Technology Ltd.) DRV:64bit: - (OA009Ufd) -- C:\Windows\SysNative\drivers\OA009Ufd.sys (Creative Technology Ltd.) DRV - (WIMMount) -- C:\Windows\SysWOW64\drivers\wimmount.sys (Microsoft Corporation) ========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = BC EF 73 4D 65 2F CD 01 [binary data] IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 ========== FireFox ========== FF - user.js - File not found FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_2_202_235.dll File not found FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_2_202_235.dll () FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.4.1: C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.4.1: C:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\plugin2\npjp2.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.0.1: C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 12.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2012.05.11 14:36:28 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 12.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2012.05.11 14:36:28 | 000,000,000 | ---D | M] [2012.05.09 15:57:30 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Daria\AppData\Roaming\mozilla\Extensions [2012.05.10 22:35:54 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Daria\AppData\Roaming\mozilla\Firefox\Profiles\3a86205s.default\extensions [2012.05.09 15:57:16 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\extensions [2012.05.09 19:25:42 | 000,634,964 | ---- | M] () (No name found) -- C:\USERS\DARIA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3A86205S.DEFAULT\EXTENSIONS\{D10D0BF8-F5B5-C8B4-A8B2-2B9879E08C5D}.XPI [2012.04.21 03:19:34 | 000,097,208 | ---- | M] (Mozilla Foundation) -- C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll [2012.04.21 03:18:25 | 000,002,252 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\bing.xml [2012.04.21 03:18:25 | 000,002,040 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\twitter.xml O1 HOSTS File: ([2009.06.10 23:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\ssv.dll (Oracle Corporation) O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\jp2ssv.dll (Oracle Corporation) O4:64bit: - HKLM..\Run: [Apoint] C:\Programme\DellTPad\Apoint.exe (Alps Electric Co., Ltd.) O4:64bit: - HKLM..\Run: [HotKeysCmds] C:\Windows\SysNative\hkcmd.exe (Intel Corporation) O4:64bit: - HKLM..\Run: [IAAnotif] C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe (Intel Corporation) O4:64bit: - HKLM..\Run: [IgfxTray] C:\Windows\SysNative\igfxtray.exe (Intel Corporation) O4:64bit: - HKLM..\Run: [Persistence] C:\Windows\SysNative\igfxpers.exe (Intel Corporation) O4 - HKLM..\Run: [avgnt] C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG) O4 - HKLM..\Run: [Dell Webcam Central] C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe (Creative Technology Ltd) O4 - HKLM..\Run: [Malwarebytes' Anti-Malware] C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O8:64bit: - Extra context menu item: Nach Microsoft E&xel exportieren - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000 File not found O8 - Extra context menu item: Nach Microsoft E&xel exportieren - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000 File not found O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL (Microsoft Corporation) O1364bit: - gopher Prefix: missing O13 - gopher Prefix: missing O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{ED642BF9-92F0-4D18-B8ED-52ABF77FEDE4}: DhcpNameServer = 192.168.2.1 O18:64bit: - Protocol\Handler\ms-help - No CLSID value found O18:64bit: - Protocol\Handler\skype4com - No CLSID value found O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies) O18:64bit: - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Programme\Common Files\Microsoft Shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation) O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~2\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation) O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation) O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation) O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not found O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found O20:64bit: - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - C:\Windows\SysNative\igfxdev.dll (Intel Corporation) O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O32 - HKLM CDRom: AutoRun - 1 O34 - HKLM BootExecute: (autocheck autochk *) O35:64bit: - HKLM\..comfile [open] -- "%1" %* O35:64bit: - HKLM\..exefile [open] -- "%1" %* O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %* O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3) O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2) O38 - SubSystems\\Windows: (ServerDll=sxssrv,4) ========== Files/Folders - Created Within 30 Days ========== [2012.05.16 15:01:38 | 000,000,000 | ---D | C] -- C:\Program Files\CCleaner [2012.05.16 13:17:28 | 000,000,000 | ---D | C] -- C:\Users\Daria\AppData\Roaming\Malwarebytes [2012.05.16 13:17:21 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware [2012.05.16 13:17:21 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes [2012.05.16 13:17:20 | 000,024,904 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys [2012.05.16 13:17:20 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware [2012.05.16 12:59:22 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\SPReview [2012.05.16 12:58:50 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\EventProviders [2012.05.16 11:27:03 | 000,716,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript.dll [2012.05.16 11:27:03 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll [2012.05.16 11:27:03 | 000,162,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msrating.dll [2012.05.16 11:27:03 | 000,130,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieakeng.dll [2012.05.16 11:27:03 | 000,118,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iepeers.dll [2012.05.16 11:27:03 | 000,110,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\IEAdvpack.dll [2012.05.16 11:27:03 | 000,086,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iesysprep.dll [2012.05.16 11:27:03 | 000,076,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\SetIEInstalledDate.exe [2012.05.16 11:27:03 | 000,074,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\RegisterIEPKEYs.exe [2012.05.16 11:27:03 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmler.dll [2012.05.16 11:27:03 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msfeedssync.exe [2012.05.16 11:27:02 | 003,695,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieapfltr.dat [2012.05.16 11:27:02 | 001,427,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\inetcpl.cpl [2012.05.16 11:27:02 | 000,434,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieapfltr.dll [2012.05.16 11:27:02 | 000,367,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\html.iec [2012.05.16 11:27:02 | 000,231,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\url.dll [2012.05.16 11:27:02 | 000,227,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieaksie.dll [2012.05.16 11:27:02 | 000,163,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieakui.dll [2012.05.16 11:27:02 | 000,152,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wextract.exe [2012.05.16 11:27:02 | 000,150,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iexpress.exe [2012.05.16 11:27:02 | 000,142,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieUnatt.exe [2012.05.16 11:27:02 | 000,123,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\occache.dll [2012.05.16 11:27:02 | 000,101,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\admparse.dll [2012.05.16 11:27:02 | 000,089,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RegisterIEPKEYs.exe [2012.05.16 11:27:02 | 000,078,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\inseng.dll [2012.05.16 11:27:02 | 000,074,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iesetup.dll [2012.05.16 11:27:02 | 000,074,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ie4uinit.exe [2012.05.16 11:27:02 | 000,072,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmled.dll [2012.05.16 11:27:02 | 000,066,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\icardie.dll [2012.05.16 11:27:02 | 000,063,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\tdc.ocx [2012.05.16 11:27:02 | 000,054,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\pngfilt.dll [2012.05.16 11:27:02 | 000,031,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iernonce.dll [2012.05.16 11:27:02 | 000,023,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\licmgr10.dll [2012.05.16 11:27:01 | 003,695,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieapfltr.dat [2012.05.16 11:27:01 | 002,308,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9.dll [2012.05.16 11:27:01 | 000,818,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript.dll [2012.05.16 11:27:01 | 000,534,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieapfltr.dll [2012.05.16 11:27:01 | 000,452,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dxtmsft.dll [2012.05.16 11:27:01 | 000,448,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\html.iec [2012.05.16 11:27:01 | 000,282,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dxtrans.dll [2012.05.16 11:27:01 | 000,267,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieaksie.dll [2012.05.16 11:27:01 | 000,248,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll [2012.05.16 11:27:01 | 000,222,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msls31.dll [2012.05.16 11:27:01 | 000,197,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msrating.dll [2012.05.16 11:27:01 | 000,173,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieUnatt.exe [2012.05.16 11:27:01 | 000,163,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieakui.dll [2012.05.16 11:27:01 | 000,160,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieakeng.dll [2012.05.16 11:27:01 | 000,149,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\occache.dll [2012.05.16 11:27:01 | 000,145,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iepeers.dll [2012.05.16 11:27:01 | 000,135,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\IEAdvpack.dll [2012.05.16 11:27:01 | 000,114,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\admparse.dll [2012.05.16 11:27:01 | 000,111,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iesysprep.dll [2012.05.16 11:27:01 | 000,091,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SetIEInstalledDate.exe [2012.05.16 11:27:01 | 000,089,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ie4uinit.exe [2012.05.16 11:27:01 | 000,085,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iesetup.dll [2012.05.16 11:27:01 | 000,082,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\icardie.dll [2012.05.16 11:27:01 | 000,076,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\tdc.ocx [2012.05.16 11:27:01 | 000,065,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\pngfilt.dll [2012.05.16 11:27:01 | 000,049,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\imgutil.dll [2012.05.16 11:27:01 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmler.dll [2012.05.16 11:27:01 | 000,039,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iernonce.dll [2012.05.16 11:27:01 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshta.exe [2012.05.16 11:27:01 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeedssync.exe [2012.05.16 11:27:00 | 001,493,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\inetcpl.cpl [2012.05.16 11:27:00 | 000,697,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeeds.dll [2012.05.16 11:27:00 | 000,603,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vbscript.dll [2012.05.16 11:27:00 | 000,237,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\url.dll [2012.05.16 11:27:00 | 000,165,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iexpress.exe [2012.05.16 11:27:00 | 000,160,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wextract.exe [2012.05.16 11:27:00 | 000,103,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\inseng.dll [2012.05.16 11:27:00 | 000,096,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmled.dll [2012.05.16 11:27:00 | 000,030,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\licmgr10.dll [2012.05.14 19:15:21 | 000,324,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\usbport.sys [2012.05.14 19:15:21 | 000,007,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\usbd.sys [2012.05.14 19:15:14 | 002,566,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\esent.dll [2012.05.14 19:15:13 | 001,686,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\esent.dll [2012.05.14 19:15:13 | 000,187,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\storport.sys [2012.05.14 19:15:13 | 000,107,904 | ---- | C] (Advanced Micro Devices) -- C:\Windows\SysNative\drivers\amdsata.sys [2012.05.14 19:15:13 | 000,096,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\fsutil.exe [2012.05.14 19:15:13 | 000,074,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\fsutil.exe [2012.05.14 19:15:13 | 000,027,008 | ---- | C] (Advanced Micro Devices) -- C:\Windows\SysNative\drivers\amdxata.sys [2012.05.14 15:49:39 | 000,000,000 | ---D | C] -- C:\ProgramData\Sun [2012.05.14 15:49:39 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Java [2012.05.14 15:47:38 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Oracle [2012.05.14 15:46:42 | 000,772,504 | ---- | C] (Oracle Corporation) -- C:\Windows\SysWow64\npDeployJava1.dll [2012.05.14 15:46:42 | 000,687,504 | ---- | C] (Oracle Corporation) -- C:\Windows\SysWow64\deployJava1.dll [2012.05.14 15:46:42 | 000,227,720 | ---- | C] (Oracle Corporation) -- C:\Windows\SysWow64\javaws.exe [2012.05.14 15:46:35 | 000,174,024 | ---- | C] (Oracle Corporation) -- C:\Windows\SysWow64\javaw.exe [2012.05.14 15:46:35 | 000,174,024 | ---- | C] (Oracle Corporation) -- C:\Windows\SysWow64\java.exe [2012.05.14 15:46:25 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Java [2012.05.13 23:26:19 | 001,942,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dfshim.dll [2012.05.13 23:26:19 | 001,130,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dfshim.dll [2012.05.13 23:26:19 | 000,320,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PresentationHost.exe [2012.05.13 23:26:19 | 000,295,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\PresentationHost.exe [2012.05.13 23:26:19 | 000,109,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PresentationHostProxy.dll [2012.05.13 23:26:19 | 000,099,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\PresentationHostProxy.dll [2012.05.13 23:26:19 | 000,049,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\netfxperf.dll [2012.05.13 23:26:19 | 000,048,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\netfxperf.dll [2012.05.13 23:25:48 | 000,294,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\browserchoice.exe [2012.05.13 23:13:35 | 000,080,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\imagehlp.dll [2012.05.13 23:13:35 | 000,022,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\fs_rec.sys [2012.05.13 23:13:34 | 000,220,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wintrust.dll [2012.05.12 14:21:11 | 000,000,000 | ---D | C] -- C:\Users\Daria\AppData\Roaming\vlc [2012.05.12 11:56:09 | 000,199,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xmllite.dll [2012.05.12 11:56:06 | 000,106,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\odbccu32.dll [2012.05.12 11:56:06 | 000,106,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\odbccr32.dll [2012.05.12 11:56:05 | 000,319,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\odbcjt32.dll [2012.05.12 11:56:05 | 000,212,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\odbctrac.dll [2012.05.12 11:56:05 | 000,163,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\odbctrac.dll [2012.05.12 11:56:05 | 000,163,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\odbccp32.dll [2012.05.12 11:56:05 | 000,122,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\odbccp32.dll [2012.05.12 11:56:05 | 000,086,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\odbccu32.dll [2012.05.12 11:56:05 | 000,081,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\odbccr32.dll [2012.05.12 11:56:02 | 001,837,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10warp.dll [2012.05.12 11:56:02 | 000,902,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d2d1.dll [2012.05.12 11:56:01 | 001,541,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\DWrite.dll [2012.05.12 11:56:01 | 000,320,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10_1core.dll [2012.05.12 11:56:01 | 000,197,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10_1.dll [2012.05.12 11:55:42 | 000,142,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\poqexec.exe [2012.05.12 11:55:42 | 000,123,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\poqexec.exe [2012.05.12 11:55:41 | 002,870,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\explorer.exe [2012.05.12 11:55:41 | 002,614,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\explorer.exe [2012.05.12 11:55:39 | 000,961,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\CPFilters.dll [2012.05.12 11:55:39 | 000,642,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\CPFilters.dll [2012.05.12 11:55:38 | 001,118,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sbe.dll [2012.05.12 11:55:38 | 000,850,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\sbe.dll [2012.05.12 11:55:38 | 000,259,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mpg2splt.ax [2012.05.12 11:55:37 | 000,199,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mpg2splt.ax [2012.05.12 11:55:37 | 000,148,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\t2embed.dll [2012.05.12 11:55:37 | 000,109,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\t2embed.dll [2012.05.12 11:55:06 | 001,328,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\quartz.dll [2012.05.12 11:55:05 | 001,572,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\quartz.dll [2012.05.12 11:55:05 | 000,514,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\qdvd.dll [2012.05.12 11:55:05 | 000,366,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\qdvd.dll [2012.05.12 11:54:57 | 000,509,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntshrui.dll [2012.05.12 11:54:55 | 002,085,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ole32.dll [2012.05.12 11:54:54 | 001,169,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\taskschd.dll [2012.05.12 11:54:54 | 000,524,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmicmiplugin.dll [2012.05.12 11:54:54 | 000,464,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\taskeng.exe [2012.05.12 11:54:53 | 000,496,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\taskschd.dll [2012.05.12 11:54:53 | 000,473,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\taskcomp.dll [2012.05.12 11:54:53 | 000,305,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\taskcomp.dll [2012.05.12 11:54:53 | 000,285,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\schtasks.exe [2012.05.12 11:54:53 | 000,179,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\schtasks.exe [2012.05.12 11:54:52 | 002,228,224 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mssrch.dll [2012.05.12 11:54:51 | 002,326,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\tquery.dll [2012.05.12 11:54:51 | 001,553,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\tquery.dll [2012.05.12 11:54:51 | 001,401,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mssrch.dll [2012.05.12 11:54:49 | 000,779,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mssvp.dll [2012.05.12 11:54:49 | 000,666,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mssvp.dll [2012.05.12 11:54:49 | 000,491,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mssph.dll [2012.05.12 11:54:49 | 000,337,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mssph.dll [2012.05.12 11:54:49 | 000,288,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mssphtb.dll [2012.05.12 11:54:49 | 000,249,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SearchProtocolHost.exe [2012.05.12 11:54:49 | 000,113,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SearchFilterHost.exe [2012.05.12 11:54:49 | 000,075,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msscntrs.dll [2012.05.12 11:54:49 | 000,059,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msscntrs.dll [2012.05.12 11:54:47 | 000,483,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\StructuredQuery.dll [2012.05.12 11:54:45 | 001,446,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\lsasrv.dll [2012.05.12 11:54:44 | 000,395,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\webio.dll [2012.05.12 11:54:44 | 000,314,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\webio.dll [2012.05.12 11:54:44 | 000,136,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sspicli.dll [2012.05.12 11:54:43 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sspisrv.dll [2012.05.12 11:54:43 | 000,028,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\secur32.dll [2012.05.12 11:54:39 | 001,975,296 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\CertEnroll.dll [2012.05.12 11:54:39 | 001,320,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\CertEnroll.dll [2012.05.12 11:54:27 | 000,424,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\secproc.dll [2012.05.12 11:54:27 | 000,422,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\secproc_isv.dll [2012.05.12 11:54:27 | 000,369,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\secproc.dll [2012.05.12 11:54:27 | 000,365,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\secproc_isv.dll [2012.05.12 11:54:27 | 000,357,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RMActivate_isv.exe [2012.05.12 11:54:27 | 000,356,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RMActivate.exe [2012.05.12 11:54:27 | 000,324,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\RMActivate_isv.exe [2012.05.12 11:54:27 | 000,320,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\RMActivate.exe [2012.05.12 11:54:27 | 000,306,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RMActivate_ssp.exe [2012.05.12 11:54:27 | 000,305,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RMActivate_ssp_isv.exe [2012.05.12 11:54:27 | 000,280,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\RMActivate_ssp.exe [2012.05.12 11:54:27 | 000,277,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\RMActivate_ssp_isv.exe [2012.05.12 11:54:27 | 000,121,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\secproc_ssp_isv.dll [2012.05.12 11:54:27 | 000,121,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\secproc_ssp.dll [2012.05.12 11:54:27 | 000,085,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\secproc_ssp_isv.dll [2012.05.12 11:54:27 | 000,085,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\secproc_ssp.dll [2012.05.12 11:54:23 | 000,552,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msdri.dll [2012.05.12 11:54:19 | 000,043,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\csrsrv.dll [2012.05.12 11:54:16 | 000,515,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\timedate.cpl [2012.05.12 11:54:16 | 000,478,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\timedate.cpl [2012.05.12 11:54:13 | 000,476,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XpsGdiConverter.dll [2012.05.12 11:54:13 | 000,288,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XpsGdiConverter.dll [2012.05.12 11:54:05 | 000,633,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\comctl32.dll [2012.05.12 11:54:01 | 005,504,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntoskrnl.exe [2012.05.12 11:53:58 | 003,902,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntoskrnl.exe [2012.05.12 11:53:57 | 003,958,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntkrnlpa.exe [2012.05.12 11:53:52 | 000,264,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\upnp.dll [2012.05.12 11:53:52 | 000,204,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\upnp.dll [2012.05.12 11:53:51 | 000,100,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\davclnt.dll [2012.05.12 11:53:51 | 000,062,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wscapi.dll [2012.05.12 11:53:51 | 000,051,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wscapi.dll [2012.05.12 11:53:51 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\slwga.dll [2012.05.12 11:53:51 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\slwga.dll [2012.05.12 11:53:49 | 000,442,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XpsPrint.dll [2012.05.12 11:53:48 | 000,662,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XpsPrint.dll [2012.05.12 11:53:47 | 000,389,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winlogon.exe [2012.05.12 11:53:46 | 001,395,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mfc42.dll [2012.05.12 11:53:46 | 001,359,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mfc42u.dll [2012.05.12 11:53:45 | 001,164,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfc42u.dll [2012.05.12 11:53:45 | 001,137,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfc42.dll [2012.05.12 11:53:44 | 000,052,224 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rtutils.dll [2012.05.12 11:53:31 | 000,367,104 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\SysNative\atmfd.dll [2012.05.12 11:53:31 | 000,294,912 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\atmfd.dll [2012.05.12 11:53:31 | 000,100,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\fontsub.dll [2012.05.12 11:53:31 | 000,070,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\fontsub.dll [2012.05.12 11:53:31 | 000,046,080 | ---- | C] (Adobe Systems) -- C:\Windows\SysNative\atmlib.dll [2012.05.12 11:53:31 | 000,034,304 | ---- | C] (Adobe Systems) -- C:\Windows\SysWow64\atmlib.dll [2012.05.12 11:53:25 | 004,068,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mf.dll [2012.05.12 11:53:25 | 001,888,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WMVDECOD.DLL [2012.05.12 11:53:23 | 003,181,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mf.dll [2012.05.12 11:53:23 | 001,863,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ExplorerFrame.dll [2012.05.12 11:53:22 | 001,619,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WMVDECOD.DLL [2012.05.12 11:53:22 | 001,495,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ExplorerFrame.dll [2012.05.12 11:53:22 | 000,265,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\dxgmms1.sys [2012.05.12 11:53:22 | 000,257,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mfreadwrite.dll [2012.05.12 11:53:22 | 000,229,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XpsRasterService.dll [2012.05.12 11:53:22 | 000,196,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfreadwrite.dll [2012.05.12 11:53:22 | 000,144,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cdd.dll [2012.05.12 11:53:21 | 000,206,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mfps.dll [2012.05.12 11:53:21 | 000,135,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XpsRasterService.dll [2012.05.12 11:53:15 | 000,082,944 | ---- | C] (Radius Inc.) -- C:\Windows\SysWow64\iccvid.dll [2012.05.12 11:53:15 | 000,027,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\Diskdump.sys [2012.05.12 11:53:14 | 000,356,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dnsapi.dll [2012.05.12 11:53:14 | 000,030,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dnscacheugc.exe [2012.05.12 11:53:14 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dnscacheugc.exe [2012.05.12 11:53:13 | 001,024,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmpmde.dll [2012.05.12 11:53:13 | 000,738,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmpmde.dll [2012.05.12 11:53:09 | 000,091,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\avifil32.dll [2012.05.12 11:53:09 | 000,084,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mciavi32.dll [2012.05.12 11:52:30 | 000,613,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\psisdecd.dll [2012.05.12 11:52:30 | 000,288,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MSNP.ax [2012.05.12 11:52:29 | 000,465,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\psisdecd.dll [2012.05.12 11:52:29 | 000,204,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MSNP.ax [2012.05.12 11:52:29 | 000,108,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\psisrndr.ax [2012.05.12 11:52:29 | 000,104,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Mpeg2Data.ax [2012.05.12 11:52:29 | 000,075,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\psisrndr.ax [2012.05.12 11:52:29 | 000,075,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MSDvbNP.ax [2012.05.12 11:52:29 | 000,072,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Mpeg2Data.ax [2012.05.12 11:52:29 | 000,059,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MSDvbNP.ax [2012.05.12 11:51:52 | 000,640,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winload.efi [2012.05.12 11:51:52 | 000,603,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winload.exe [2012.05.12 11:51:52 | 000,556,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winresume.efi [2012.05.12 11:51:52 | 000,518,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winresume.exe [2012.05.12 11:51:52 | 000,020,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\kdusb.dll [2012.05.12 11:51:52 | 000,019,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\kd1394.dll [2012.05.12 11:51:52 | 000,017,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\kdcom.dll [2012.05.12 11:51:47 | 000,954,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfc40.dll [2012.05.12 11:51:47 | 000,954,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfc40u.dll [2012.05.12 11:51:41 | 000,046,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msasn1.dll [2012.05.12 11:51:27 | 001,162,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\kernel32.dll [2012.05.12 11:51:27 | 000,422,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KernelBase.dll [2012.05.12 11:51:27 | 000,362,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wow64win.dll [2012.05.12 11:51:26 | 000,338,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\conhost.exe [2012.05.12 11:51:26 | 000,243,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wow64.dll [2012.05.12 11:51:26 | 000,214,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winsrv.dll [2012.05.12 11:51:26 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\setup16.exe [2012.05.12 11:51:26 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntvdm64.dll [2012.05.12 11:51:26 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntvdm64.dll [2012.05.12 11:51:26 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-libraryloader-l1-1-0.dll [2012.05.12 11:51:25 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wow64cpu.dll [2012.05.12 11:51:25 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\instnm.exe [2012.05.12 11:51:25 | 000,006,144 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-security-base-l1-1-0.dll [2012.05.12 11:51:25 | 000,005,120 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-file-l1-1-0.dll [2012.05.12 11:51:25 | 000,005,120 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-file-l1-1-0.dll [2012.05.12 11:51:25 | 000,005,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wow32.dll [2012.05.12 11:51:25 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-threadpool-l1-1-0.dll [2012.05.12 11:51:25 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-sysinfo-l1-1-0.dll [2012.05.12 11:51:25 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-sysinfo-l1-1-0.dll [2012.05.12 11:51:25 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-synch-l1-1-0.dll [2012.05.12 11:51:25 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-synch-l1-1-0.dll [2012.05.12 11:51:25 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-libraryloader-l1-1-0.dll [2012.05.12 11:51:25 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-heap-l1-1-0.dll [2012.05.12 11:51:25 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-xstate-l1-1-0.dll [2012.05.12 11:51:25 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-util-l1-1-0.dll [2012.05.12 11:51:25 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-string-l1-1-0.dll [2012.05.12 11:51:25 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-string-l1-1-0.dll [2012.05.12 11:51:25 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-rtlsupport-l1-1-0.dll [2012.05.12 11:51:24 | 000,006,144 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-security-base-l1-1-0.dll [2012.05.12 11:51:24 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-threadpool-l1-1-0.dll [2012.05.12 11:51:24 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-processthreads-l1-1-0.dll [2012.05.12 11:51:24 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-processthreads-l1-1-0.dll [2012.05.12 11:51:24 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-misc-l1-1-0.dll [2012.05.12 11:51:24 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-localregistry-l1-1-0.dll [2012.05.12 11:51:24 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-localregistry-l1-1-0.dll [2012.05.12 11:51:24 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-localization-l1-1-0.dll [2012.05.12 11:51:24 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-localization-l1-1-0.dll [2012.05.12 11:51:24 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-xstate-l1-1-0.dll [2012.05.12 11:51:24 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-rtlsupport-l1-1-0.dll [2012.05.12 11:51:24 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-processenvironment-l1-1-0.dll [2012.05.12 11:51:24 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-processenvironment-l1-1-0.dll [2012.05.12 11:51:24 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-namedpipe-l1-1-0.dll [2012.05.12 11:51:24 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-namedpipe-l1-1-0.dll [2012.05.12 11:51:24 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-misc-l1-1-0.dll [2012.05.12 11:51:24 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-memory-l1-1-0.dll [2012.05.12 11:51:24 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-memory-l1-1-0.dll [2012.05.12 11:51:24 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-interlocked-l1-1-0.dll [2012.05.12 11:51:24 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-heap-l1-1-0.dll [2012.05.12 11:51:24 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-util-l1-1-0.dll [2012.05.12 11:51:24 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-profile-l1-1-0.dll [2012.05.12 11:51:24 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-profile-l1-1-0.dll [2012.05.12 11:51:24 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-io-l1-1-0.dll [2012.05.12 11:51:24 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-io-l1-1-0.dll [2012.05.12 11:51:24 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-interlocked-l1-1-0.dll [2012.05.12 11:51:24 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-handle-l1-1-0.dll [2012.05.12 11:51:24 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-handle-l1-1-0.dll [2012.05.12 11:51:24 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-fibers-l1-1-0.dll [2012.05.12 11:51:24 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-fibers-l1-1-0.dll [2012.05.12 11:51:24 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-errorhandling-l1-1-0.dll [2012.05.12 11:51:24 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-errorhandling-l1-1-0.dll [2012.05.12 11:51:24 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-delayload-l1-1-0.dll [2012.05.12 11:51:24 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-delayload-l1-1-0.dll [2012.05.12 11:51:24 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-debug-l1-1-0.dll [2012.05.12 11:51:24 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-debug-l1-1-0.dll [2012.05.12 11:51:24 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-datetime-l1-1-0.dll [2012.05.12 11:51:24 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-datetime-l1-1-0.dll [2012.05.12 11:51:24 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-console-l1-1-0.dll [2012.05.12 11:51:24 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-console-l1-1-0.dll [2012.05.12 11:51:24 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\user.exe [2012.05.12 11:51:18 | 000,252,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\drvinst.exe [2012.05.12 11:51:17 | 000,044,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\devrtl.dll [2012.05.12 11:51:13 | 003,138,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mstscax.dll [2012.05.12 11:51:13 | 002,690,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mstscax.dll [2012.05.12 11:51:13 | 001,097,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mstsc.exe [2012.05.12 11:51:13 | 001,034,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mstsc.exe [2012.05.12 11:51:08 | 014,627,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmp.dll [2012.05.12 11:51:06 | 011,406,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmp.dll [2012.05.12 11:51:05 | 012,625,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmploc.DLL [2012.05.12 11:51:04 | 012,625,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmploc.DLL [2012.05.12 11:51:01 | 000,031,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\prevhost.exe [2012.05.12 11:51:01 | 000,031,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\prevhost.exe [2012.05.12 11:50:53 | 000,267,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\FXSCOVER.exe [2012.05.12 11:50:49 | 000,634,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msvcrt.dll [2012.05.12 11:50:47 | 000,112,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\consent.exe [2012.05.12 11:50:45 | 000,861,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\oleaut32.dll [2012.05.12 11:50:45 | 000,331,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\oleacc.dll [2012.05.12 11:50:43 | 000,723,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\EncDec.dll [2012.05.12 11:50:43 | 000,534,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\EncDec.dll [2012.05.12 11:50:26 | 000,720,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\odbc32.dll [2012.05.12 11:50:25 | 000,573,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\odbc32.dll [2012.05.12 11:50:23 | 001,739,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntdll.dll [2012.05.12 11:50:21 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\sscore.dll [2012.05.12 11:50:19 | 000,077,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\packager.dll [2012.05.12 11:50:19 | 000,067,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\packager.dll [2012.05.11 14:38:55 | 000,000,000 | ---D | C] -- C:\Users\Daria\AppData\Roaming\Creative [2012.05.11 14:38:55 | 000,000,000 | ---D | C] -- C:\ProgramData\Creative [2012.05.11 14:36:07 | 000,000,000 | ---D | C] -- C:\Users\Public\Documents\Reallusion [2012.05.11 14:36:07 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Reallusion [2012.05.11 14:35:25 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dell Webcam [2012.05.11 14:35:23 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Creative [2012.05.11 14:34:25 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Dell Webcam [2012.05.11 14:34:24 | 000,224,768 | ---- | C] (Creative Technology Ltd.) -- C:\Windows\SysNative\drivers\CtAudDrv.sys [2012.05.11 14:34:24 | 000,172,704 | ---- | C] (Creative Technology Ltd.) -- C:\Windows\SysNative\drivers\CtClsFlt.sys [2012.05.11 14:34:20 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Creative Live! Cam [2012.05.11 14:00:03 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\InstallShield [2012.05.11 14:00:00 | 000,307,456 | ---- | C] (Creative Technology Ltd.) -- C:\Windows\SysNative\drivers\OA009Vid.sys [2012.05.11 14:00:00 | 000,219,544 | ---- | C] (Creative Technology Ltd.) -- C:\Windows\SysNative\drivers\OA009Afx.sys [2012.05.11 14:00:00 | 000,168,864 | ---- | C] (Creative Technology Ltd.) -- C:\Windows\SysNative\drivers\OA009Ufd.sys [2012.05.11 14:00:00 | 000,102,912 | ---- | C] (Creative Technology Ltd.) -- C:\Windows\CtDrvIns.exe [2012.05.11 14:00:00 | 000,045,056 | ---- | C] (Creative Technology Ltd.) -- C:\Windows\SysWow64\OA009Pin.dll [2012.05.11 14:00:00 | 000,039,424 | ---- | C] (Creative Technology Ltd.) -- C:\Windows\SysNative\OA009Pin.dll [2012.05.11 14:00:00 | 000,032,768 | ---- | C] (Creative Technology Ltd.) -- C:\Windows\OA009Cfg.exe [2012.05.11 14:00:00 | 000,024,576 | ---- | C] (Creative Technology Ltd.) -- C:\Windows\SysWow64\OA009Pin.crl [2012.05.11 14:00:00 | 000,015,360 | ---- | C] (Creative Technology Ltd.) -- C:\Windows\SysNative\OA009Pin.crl [2012.05.11 14:00:00 | 000,011,264 | ---- | C] (Creative Technology Ltd.) -- C:\Windows\SysNative\OA009Srv.exe [2012.05.10 13:13:38 | 000,000,000 | ---D | C] -- C:\Users\Daria\AppData\Roaming\EndNote [2012.05.10 12:40:13 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel® Matrix Storage Manager [2012.05.10 12:39:39 | 000,000,000 | -H-D | C] -- C:\Program Files (x86)\InstallShield Installation Information [2012.05.10 12:39:39 | 000,000,000 | ---D | C] -- C:\Users\Daria\AppData\Roaming\InstallShield [2012.05.10 12:37:47 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Marvell [2012.05.10 12:37:26 | 000,053,248 | ---- | C] (Windows XP Bundled build C-Centric Single User) -- C:\Windows\SysWow64\CSVer.dll [2012.05.10 12:37:26 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Intel [2012.05.10 12:37:14 | 000,000,000 | ---D | C] -- C:\Intel [2012.05.10 12:32:34 | 000,000,000 | ---D | C] -- C:\Program Files\DellTPad [2012.05.10 12:32:23 | 001,721,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WdfCoInstaller01009.dll [2012.05.10 12:32:23 | 000,301,688 | ---- | C] (Alps Electric Co., Ltd.) -- C:\Windows\SysNative\drivers\Apfiltr.sys [2012.05.10 12:32:23 | 000,100,352 | ---- | C] (Alps Electric Co., Ltd.) -- C:\Windows\SysNative\Vxdif.dll [2012.05.10 12:32:22 | 000,000,000 | ---D | C] -- C:\dell [2012.05.10 01:37:02 | 000,000,000 | ---D | C] -- C:\Windows\Panther [2012.05.10 01:36:36 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\oem [2012.05.10 01:35:48 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\XPSViewer [2012.05.10 01:35:48 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\drivers\de-DE [2012.05.10 01:35:48 | 000,000,000 | ---D | C] -- C:\Windows\de-DE [2012.05.10 01:35:48 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\de [2012.05.10 01:35:48 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\0407 [2012.05.10 01:35:46 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\drivers\de-DE [2012.05.10 01:35:46 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\de [2012.05.10 01:35:46 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\0407 [2012.05.10 01:33:31 | 000,051,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\drivers\de-DE\tcpip.sys.mui [2012.05.10 01:33:31 | 000,029,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\drivers\de-DE\bfe.dll.mui [2012.05.10 01:33:30 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\drivers\de-DE\scfilter.sys.mui [2012.05.10 01:33:30 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\drivers\de-DE\qwavedrv.sys.mui [2012.05.10 01:33:24 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\drivers\de-DE\pacer.sys.mui [2012.05.10 01:33:22 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\drivers\de-DE\ndiscap.sys.mui [2012.05.10 01:33:20 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\de-DE\volsnap.sys.mui [2012.05.10 01:33:20 | 000,025,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\de-DE\usbport.sys.mui [2012.05.10 01:33:20 | 000,011,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\de-DE\usbhub.sys.mui [2012.05.10 01:33:20 | 000,004,096 | ---- | C] (SCM Microsystems, Inc.) -- C:\Windows\SysNative\drivers\de-DE\pscr.sys.mui [2012.05.10 01:33:20 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\de-DE\vhdmp.sys.mui [2012.05.10 01:33:20 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\de-DE\tpm.sys.mui [2012.05.10 01:33:20 | 000,003,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\de-DE\portcls.sys.mui [2012.05.10 01:33:20 | 000,003,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\de-DE\umbus.sys.mui [2012.05.10 01:33:20 | 000,003,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\de-DE\serscan.sys.mui [2012.05.10 01:33:20 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\de-DE\wd.sys.mui [2012.05.10 01:33:18 | 000,038,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\de-DE\mpio.sys.mui [2012.05.10 01:33:18 | 000,011,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\de-DE\serial.sys.mui [2012.05.10 01:33:18 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\de-DE\msdsm.sys.mui [2012.05.10 01:33:18 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\de-DE\sermouse.sys.mui [2012.05.10 01:33:18 | 000,004,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\de-DE\pcmcia.sys.mui [2012.05.10 01:33:18 | 000,004,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\de-DE\mouclass.sys.mui [2012.05.10 01:33:18 | 000,003,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\de-DE\parport.sys.mui [2012.05.10 01:33:18 | 000,003,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\de-DE\ataport.sys.mui [2012.05.10 01:33:18 | 000,003,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\de-DE\scsiport.sys.mui [2012.05.10 01:33:18 | 000,003,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\de-DE\rndismpx.sys.mui [2012.05.10 01:33:18 | 000,003,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\de-DE\rndismp6.sys.mui [2012.05.10 01:33:18 | 000,003,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\de-DE\mouhid.sys.mui [2012.05.10 01:33:18 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\de-DE\vwifibus.sys.mui [2012.05.10 01:33:18 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\de-DE\MTConfig.sys.mui [2012.05.10 01:33:18 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\de-DE\amdide.sys.mui [2012.05.10 01:33:17 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\de-DE\afd.sys.mui [2012.05.10 01:33:16 | 000,051,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\de-DE\tcpip.sys.mui [2012.05.10 01:33:16 | 000,029,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\de-DE\bfe.dll.mui [2012.05.10 01:33:16 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\de-DE\tunnel.sys.mui [2012.05.10 01:33:16 | 000,003,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\de-DE\modem.sys.mui [2012.05.10 01:33:16 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\de-DE\wdf01000.sys.mui [2012.05.10 01:33:16 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\de-DE\ws2ifsl.sys.mui [2012.05.10 01:33:16 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\de-DE\usbrpm.sys.mui [2012.05.10 01:33:13 | 000,017,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\de-DE\fvevol.sys.mui [2012.05.10 01:33:13 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\de-DE\srv.sys.mui [2012.05.10 01:33:13 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\de-DE\scfilter.sys.mui [2012.05.10 01:33:04 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\de-DE\pacer.sys.mui [2012.05.10 01:33:04 | 000,005,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\de-DE\rdbss.sys.mui [2012.05.10 01:33:04 | 000,003,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\de-DE\RNDISMP.sys.mui [2012.05.10 01:33:04 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\de-DE\qwavedrv.sys.mui [2012.05.10 01:33:04 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\de-DE\partmgr.sys.mui [2012.05.10 01:33:02 | 000,072,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\de-DE\ntfs.sys.mui [2012.05.10 01:33:02 | 000,041,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\de-DE\ndis.sys.mui [2012.05.10 01:33:02 | 000,017,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\de-DE\nwifi.sys.mui [2012.05.10 01:33:02 | 000,003,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\de-DE\ndisuio.sys.mui [2012.05.10 01:33:00 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\de-DE\ndiscap.sys.mui [2012.05.10 01:32:59 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\de-DE\mountmgr.sys.mui [2012.05.10 01:32:58 | 000,044,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\de-DE\http.sys.mui [2012.05.10 01:32:58 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\de-DE\luafv.sys.mui [2012.05.10 01:32:58 | 000,003,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\de-DE\ipnat.sys.mui [2012.05.10 01:32:54 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\de-DE\fltmgr.sys.mui [2012.05.10 01:32:54 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\de-DE\volmgrx.sys.mui [2012.05.10 01:32:53 | 000,011,776 | ---- | C] (Brother Industries Ltd.) -- C:\Windows\SysNative\drivers\de-DE\BrSerIb.sys.mui [2012.05.10 01:32:53 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\de-DE\i8042prt.sys.mui [2012.05.10 01:32:53 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\de-DE\pci.sys.mui [2012.05.10 01:32:53 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\de-DE\IPMIDrv.sys.mui [2012.05.10 01:32:53 | 000,005,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\de-DE\kbdclass.sys.mui [2012.05.10 01:32:53 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\de-DE\wacompen.sys.mui [2012.05.10 01:32:53 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\de-DE\vdrvroot.sys.mui [2012.05.10 01:32:53 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\de-DE\isapnp.sys.mui [2012.05.10 01:32:53 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\de-DE\hdaudbus.sys.mui [2012.05.10 01:32:53 | 000,003,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\de-DE\HdAudio.sys.mui [2012.05.10 01:32:53 | 000,003,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\de-DE\mssmbios.sys.mui [2012.05.10 01:32:53 | 000,003,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\de-DE\hidbth.sys.mui [2012.05.10 01:32:53 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\de-DE\ULIAGPKX.SYS.mui [2012.05.10 01:32:53 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\de-DE\pnpmem.sys.mui [2012.05.10 01:32:53 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\de-DE\NV_AGP.SYS.mui [2012.05.10 01:32:53 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\de-DE\kbdhid.sys.mui [2012.05.10 01:32:53 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\de-DE\AGP440.sys.mui [2012.05.10 01:32:52 | 000,020,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\de-DE\processr.sys.mui [2012.05.10 01:32:52 | 000,020,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\de-DE\intelppm.sys.mui [2012.05.10 01:32:52 | 000,020,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\de-DE\amdppm.sys.mui [2012.05.10 01:32:52 | 000,020,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\de-DE\amdk8.sys.mui [2012.05.10 01:32:52 | 000,011,776 | ---- | C] (Brother Industries Ltd.) -- C:\Windows\SysNative\drivers\de-DE\BrSerId.sys.mui [2012.05.10 01:32:52 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\de-DE\acpi.sys.mui [2012.05.10 01:32:52 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\de-DE\battc.sys.mui [2012.05.10 01:32:52 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\de-DE\bthport.sys.mui [2012.05.10 01:32:52 | 000,004,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\de-DE\bthpan.sys.mui [2012.05.10 01:32:52 | 000,003,584 | ---- | C] (ATI Technologies Inc.) -- C:\Windows\SysNative\drivers\de-DE\atikmdag.sys.mui [2012.05.10 01:32:52 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\de-DE\UAGP35.SYS.mui [2012.05.10 01:32:52 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\de-DE\GAGP30KX.SYS.mui [2012.05.10 01:32:52 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\de-DE\Dot4usb.sys.mui [2012.05.10 01:32:52 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\de-DE\BTHUSB.SYS.mui [2012.05.10 01:32:52 | 000,002,560 | ---- | C] (Brother Industries Ltd.) -- C:\Windows\SysNative\drivers\de-DE\BrParwdm.sys.mui [2012.05.10 01:32:52 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\de-DE\disk.sys.mui [2012.05.10 01:32:52 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\de-DE\cdrom.sys.mui [2012.05.10 01:32:52 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\de-DE\bthenum.sys.mui [2012.05.10 01:32:51 | 000,011,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\de-DE\ohci1394.sys.mui [2012.05.10 01:32:51 | 000,011,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\de-DE\1394ohci.sys.mui [2012.05.09 20:37:31 | 000,000,000 | ---D | C] -- C:\Users\Daria\AppData\Roaming\Dell [2012.05.09 20:37:18 | 000,000,000 | ---D | C] -- C:\ProgramData\PCDr [2012.05.09 20:37:12 | 000,000,000 | R--D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dell Support Center [2012.05.09 20:37:11 | 000,000,000 | ---D | C] -- C:\ProgramData\Dell [2012.05.09 20:36:50 | 000,000,000 | ---D | C] -- C:\Program Files\Dell Support Center [2012.05.09 20:32:11 | 000,000,000 | ---D | C] -- C:\Users\Daria\AppData\Roaming\PCDr [2012.05.09 20:28:35 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\vmm32 [2012.05.09 20:28:35 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Dell [2012.05.09 19:08:50 | 000,000,000 | ---D | C] -- C:\Users\Daria\AppData\Local\Adobe [2012.05.09 18:50:05 | 000,000,000 | ---D | C] -- C:\Users\Public\Documents\microsoft [2012.05.09 18:46:10 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\MSECache [2012.05.09 18:27:58 | 000,000,000 | ---D | C] -- C:\Windows\pss [2012.05.09 16:28:16 | 000,000,000 | ---D | C] -- C:\Users\Daria\Documents\TikGames [2012.05.09 16:27:51 | 000,000,000 | ---D | C] -- C:\Users\Daria\Documents\Spiegel [2012.05.09 16:27:51 | 000,000,000 | ---D | C] -- C:\Users\Daria\Documents\Reallusion [2012.05.09 16:26:48 | 000,000,000 | R--D | C] -- C:\Users\Daria\Documents\Notes [2012.05.09 16:26:48 | 000,000,000 | ---D | C] -- C:\Users\Daria\Documents\Praktikum [2012.05.09 16:26:42 | 000,000,000 | ---D | C] -- C:\Users\Daria\Documents\Neuer Ordner [2012.05.09 16:26:42 | 000,000,000 | ---D | C] -- C:\Users\Daria\Documents\My Weblog Posts [2012.05.09 16:26:42 | 000,000,000 | ---D | C] -- C:\Users\Daria\Documents\microsoft [2012.05.09 16:25:11 | 000,000,000 | ---D | C] -- C:\Users\Daria\Documents\MASTER [2012.05.09 16:24:43 | 000,000,000 | ---D | C] -- C:\Users\Daria\Documents\MA Arbeit [2012.05.09 16:24:42 | 000,000,000 | ---D | C] -- C:\Users\Daria\Documents\ICQ [2012.05.09 16:24:39 | 000,000,000 | ---D | C] -- C:\Users\Daria\Documents\grafstat4 [2012.05.09 16:24:38 | 000,000,000 | ---D | C] -- C:\Users\Daria\Documents\GIZ [2012.05.09 16:24:37 | 000,000,000 | R--D | C] -- C:\Users\Daria\Documents\Scanned Documents [2012.05.09 16:24:37 | 000,000,000 | ---D | C] -- C:\Users\Daria\Documents\Fax [2012.05.09 16:24:37 | 000,000,000 | ---D | C] -- C:\Users\Daria\Documents\eplus [2012.05.09 16:24:37 | 000,000,000 | ---D | C] -- C:\Users\Daria\Documents\EndNote [2012.05.09 16:24:36 | 000,000,000 | ---D | C] -- C:\Users\Daria\Documents\Eigene Scans [2012.05.09 16:24:35 | 000,000,000 | ---D | C] -- C:\Users\Daria\Documents\Dell WebCam Central [2012.05.09 16:24:35 | 000,000,000 | ---D | C] -- C:\Users\Daria\Documents\DAAD - Carlo Schmid Programm Bewerbung [2012.05.09 16:24:25 | 000,000,000 | ---D | C] -- C:\Users\Daria\Documents\Bewerbungen [2012.05.09 16:23:01 | 000,000,000 | ---D | C] -- C:\Users\Daria\Documents\Bachelor [2012.05.09 16:23:00 | 000,000,000 | ---D | C] -- C:\Users\Daria\Documents\Assessment Center [2012.05.09 16:22:58 | 000,000,000 | ---D | C] -- C:\Users\Daria\Documents\Albelli Fotobücher [2012.05.09 16:14:49 | 000,000,000 | ---D | C] -- C:\Users\Daria\AppData\Roaming\Avira [2012.05.09 16:09:16 | 000,132,832 | ---- | C] (Avira GmbH) -- C:\Windows\SysNative\drivers\avipbb.sys [2012.05.09 16:09:16 | 000,098,848 | ---- | C] (Avira GmbH) -- C:\Windows\SysNative\drivers\avgntflt.sys [2012.05.09 16:09:16 | 000,027,760 | ---- | C] (Avira GmbH) -- C:\Windows\SysNative\drivers\avkmgr.sys [2012.05.09 16:09:15 | 000,000,000 | ---D | C] -- C:\ProgramData\Avira [2012.05.09 16:09:15 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Avira [2012.05.09 16:08:10 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Adobe [2012.05.09 16:08:10 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Adobe [2012.05.09 16:07:50 | 000,000,000 | ---D | C] -- C:\ProgramData\Adobe [2012.05.09 16:06:06 | 000,000,000 | ---D | C] -- C:\Users\Daria\AppData\Roaming\Macromedia [2012.05.09 16:06:06 | 000,000,000 | ---D | C] -- C:\Users\Daria\AppData\Roaming\Adobe [2012.05.09 16:05:55 | 000,000,000 | ---D | C] -- C:\Users\Daria\AppData\Roaming\Skype [2012.05.09 16:05:46 | 000,000,000 | R--D | C] -- C:\Program Files (x86)\Skype [2012.05.09 16:05:46 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype [2012.05.09 16:05:46 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Skype [2012.05.09 16:05:41 | 000,000,000 | ---D | C] -- C:\ProgramData\Skype [2012.05.09 16:05:39 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN [2012.05.09 16:05:28 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\VideoLAN [2012.05.09 16:05:03 | 000,419,488 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerApp.exe [2012.05.09 16:05:03 | 000,070,304 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl [2012.05.09 16:05:02 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\Macromed [2012.05.09 16:05:01 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\Macromed [2012.05.09 16:02:45 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Free RAR Extract Frog [2012.05.09 16:02:45 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Free RAR Extract Frog [2012.05.09 16:00:35 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Risxtd [2012.05.09 16:00:33 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\ResearchSoft [2012.05.09 16:00:31 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EndNote [2012.05.09 15:59:43 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\EndNote X5 [2012.05.09 15:59:23 | 000,000,000 | ---D | C] -- C:\ProgramData\Thomson.ResearchSoft.Installers [2012.05.09 15:58:55 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\grafstat4 [2012.05.09 15:58:50 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\grafstat4 [2012.05.09 15:57:22 | 000,000,000 | ---D | C] -- C:\Users\Daria\AppData\Roaming\Mozilla [2012.05.09 15:57:22 | 000,000,000 | ---D | C] -- C:\Users\Daria\AppData\Local\Mozilla [2012.05.09 15:57:17 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Maintenance Service [2012.05.09 15:57:17 | 000,000,000 | ---D | C] -- C:\ProgramData\Mozilla [2012.05.09 15:57:16 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Firefox [2012.05.09 15:56:00 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office [2012.05.09 15:54:59 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Works [2012.05.09 15:54:45 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Visual Studio [2012.05.09 15:54:45 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\DESIGNER [2012.05.09 15:54:31 | 000,000,000 | ---D | C] -- C:\Windows\PCHEALTH [2012.05.09 15:54:31 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft.NET [2012.05.09 15:54:04 | 000,000,000 | ---D | C] -- C:\Users\Daria\Documents\Setups [2012.05.09 15:52:56 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Office [2012.05.09 15:52:25 | 000,000,000 | ---D | C] -- C:\Users\Daria\AppData\Local\Microsoft Help [2012.05.09 15:52:23 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Office [2012.05.09 15:52:23 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft Help [2012.05.09 15:52:20 | 000,000,000 | -HSD | C] -- C:\Windows\Installer [2012.05.09 15:52:11 | 000,000,000 | RH-D | C] -- C:\MSOCache [2012.05.09 15:49:12 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Office [2012.05.09 15:49:00 | 000,149,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdpcorekmts.dll [2012.05.09 15:49:00 | 000,139,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cabview.dll [2012.05.09 15:49:00 | 000,132,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\cabview.dll [2012.05.09 15:49:00 | 000,076,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdpwsx.dll [2012.05.09 15:49:00 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdrmemptylst.exe [2012.05.09 15:48:59 | 001,031,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdpcore.dll [2012.05.09 15:48:59 | 000,826,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\rdpcore.dll [2012.05.09 15:46:38 | 000,000,000 | R--D | C] -- C:\Users\Daria\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup [2012.05.09 15:46:38 | 000,000,000 | R--D | C] -- C:\Users\Daria\Searches [2012.05.09 15:46:38 | 000,000,000 | R--D | C] -- C:\Users\Daria\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools [2012.05.09 15:46:25 | 000,000,000 | ---D | C] -- C:\Users\Daria\AppData\Roaming\Identities [2012.05.09 15:46:19 | 000,000,000 | R--D | C] -- C:\Users\Daria\Contacts [2012.05.09 15:46:16 | 000,000,000 | ---D | C] -- C:\Users\Daria\AppData\Local\VirtualStore [2012.05.09 15:46:02 | 000,000,000 | --SD | C] -- C:\Users\Daria\AppData\Roaming\Microsoft [2012.05.09 15:46:02 | 000,000,000 | R--D | C] -- C:\Users\Daria\Videos [2012.05.09 15:46:02 | 000,000,000 | R--D | C] -- C:\Users\Daria\Saved Games [2012.05.09 15:46:02 | 000,000,000 | R--D | C] -- C:\Users\Daria\Pictures [2012.05.09 15:46:02 | 000,000,000 | R--D | C] -- C:\Users\Daria\Music [2012.05.09 15:46:02 | 000,000,000 | R--D | C] -- C:\Users\Daria\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance [2012.05.09 15:46:02 | 000,000,000 | R--D | C] -- C:\Users\Daria\Links [2012.05.09 15:46:02 | 000,000,000 | R--D | C] -- C:\Users\Daria\Favorites [2012.05.09 15:46:02 | 000,000,000 | R--D | C] -- C:\Users\Daria\Downloads [2012.05.09 15:46:02 | 000,000,000 | R--D | C] -- C:\Users\Daria\Documents [2012.05.09 15:46:02 | 000,000,000 | R--D | C] -- C:\Users\Daria\Desktop [2012.05.09 15:46:02 | 000,000,000 | R--D | C] -- C:\Users\Daria\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories [2012.05.09 15:46:02 | 000,000,000 | -HSD | C] -- C:\Users\Daria\Vorlagen [2012.05.09 15:46:02 | 000,000,000 | -HSD | C] -- C:\Users\Daria\AppData\Local\Verlauf [2012.05.09 15:46:02 | 000,000,000 | -HSD | C] -- C:\Users\Daria\AppData\Local\Temporary Internet Files [2012.05.09 15:46:02 | 000,000,000 | -HSD | C] -- C:\Users\Daria\Startmenü [2012.05.09 15:46:02 | 000,000,000 | -HSD | C] -- C:\Users\Daria\SendTo [2012.05.09 15:46:02 | 000,000,000 | -HSD | C] -- C:\Users\Daria\Recent [2012.05.09 15:46:02 | 000,000,000 | -HSD | C] -- C:\Users\Daria\Netzwerkumgebung [2012.05.09 15:46:02 | 000,000,000 | -HSD | C] -- C:\Users\Daria\Lokale Einstellungen [2012.05.09 15:46:02 | 000,000,000 | -HSD | C] -- C:\Users\Daria\Documents\Eigene Videos [2012.05.09 15:46:02 | 000,000,000 | -HSD | C] -- C:\Users\Daria\Documents\Eigene Musik [2012.05.09 15:46:02 | 000,000,000 | -HSD | C] -- C:\Users\Daria\Eigene Dateien [2012.05.09 15:46:02 | 000,000,000 | -HSD | C] -- C:\Users\Daria\Documents\Eigene Bilder [2012.05.09 15:46:02 | 000,000,000 | -HSD | C] -- C:\Users\Daria\Druckumgebung [2012.05.09 15:46:02 | 000,000,000 | -HSD | C] -- C:\Users\Daria\Cookies [2012.05.09 15:46:02 | 000,000,000 | -HSD | C] -- C:\Users\Daria\AppData\Local\Anwendungsdaten [2012.05.09 15:46:02 | 000,000,000 | -HSD | C] -- C:\Users\Daria\Anwendungsdaten [2012.05.09 15:46:02 | 000,000,000 | -H-D | C] -- C:\Users\Daria\AppData [2012.05.09 15:46:02 | 000,000,000 | ---D | C] -- C:\Users\Daria\AppData\Local\Temp [2012.05.09 15:46:02 | 000,000,000 | ---D | C] -- C:\Users\Daria\AppData\Local\Microsoft [2012.05.09 15:46:02 | 000,000,000 | ---D | C] -- C:\Users\Daria\AppData\Roaming\Media Center Programs [2012.05.09 15:45:44 | 000,000,000 | -HSD | C] -- C:\ProgramData\Vorlagen [2012.05.09 15:45:44 | 000,000,000 | -HSD | C] -- C:\ProgramData\Startmenü [2012.05.09 15:45:44 | 000,000,000 | -HSD | C] -- C:\Recovery [2012.05.09 15:45:44 | 000,000,000 | -HSD | C] -- C:\Programme [2012.05.09 15:45:44 | 000,000,000 | -HSD | C] -- C:\Program Files\Gemeinsame Dateien [2012.05.09 15:45:44 | 000,000,000 | -HSD | C] -- C:\ProgramData\Favoriten [2012.05.09 15:45:44 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Eigene Videos [2012.05.09 15:45:44 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Eigene Musik [2012.05.09 15:45:44 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Eigene Bilder [2012.05.09 15:45:44 | 000,000,000 | -HSD | C] -- C:\Dokumente und Einstellungen [2012.05.09 15:45:44 | 000,000,000 | -HSD | C] -- C:\ProgramData\Dokumente [2012.05.09 15:45:44 | 000,000,000 | -HSD | C] -- C:\ProgramData\Anwendungsdaten [2012.05.09 15:40:37 | 000,000,000 | ---D | C] -- C:\Windows\SoftwareDistribution [2012.05.09 15:38:02 | 000,000,000 | ---D | C] -- C:\Windows\Prefetch [2012.05.09 15:37:45 | 000,000,000 | -HSD | C] -- C:\System Volume Information |
Und hier der Rest des Logfiles OTL.txt, da die maximale Anzahl der erlaubten Zeichen überschritten wurde: ========== Files - Modified Within 30 Days ========== [2012.05.16 14:54:43 | 000,014,208 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2012.05.16 14:54:43 | 000,014,208 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2012.05.16 14:52:19 | 001,498,506 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI [2012.05.16 14:52:19 | 000,654,166 | ---- | M] () -- C:\Windows\SysNative\perfh007.dat [2012.05.16 14:52:19 | 000,616,008 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat [2012.05.16 14:52:19 | 000,130,006 | ---- | M] () -- C:\Windows\SysNative\perfc007.dat [2012.05.16 14:52:19 | 000,106,388 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat [2012.05.16 14:47:14 | 000,000,506 | ---- | M] () -- C:\Windows\tasks\SystemToolsDailyTest.job [2012.05.16 14:47:06 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2012.05.16 14:46:38 | 3190,050,816 | -HS- | M] () -- C:\hiberfil.sys [2012.05.16 14:27:07 | 000,000,884 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job [2012.05.16 12:58:34 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_Kernel_dc3d_01009.Wdf [2012.05.16 11:27:03 | 000,716,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript.dll [2012.05.16 11:27:03 | 000,176,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll [2012.05.16 11:27:03 | 000,162,304 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\msrating.dll [2012.05.16 11:27:03 | 000,130,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\ieakeng.dll [2012.05.16 11:27:03 | 000,118,784 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\iepeers.dll [2012.05.16 11:27:03 | 000,110,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\IEAdvpack.dll [2012.05.16 11:27:03 | 000,086,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\iesysprep.dll [2012.05.16 11:27:03 | 000,076,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\SetIEInstalledDate.exe [2012.05.16 11:27:03 | 000,074,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\RegisterIEPKEYs.exe [2012.05.16 11:27:03 | 000,048,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmler.dll [2012.05.16 11:27:03 | 000,010,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\msfeedssync.exe [2012.05.16 11:27:02 | 003,695,416 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\ieapfltr.dat [2012.05.16 11:27:02 | 001,427,456 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\inetcpl.cpl [2012.05.16 11:27:02 | 000,434,176 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\ieapfltr.dll [2012.05.16 11:27:02 | 000,367,104 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\html.iec [2012.05.16 11:27:02 | 000,231,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\url.dll [2012.05.16 11:27:02 | 000,227,840 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\ieaksie.dll [2012.05.16 11:27:02 | 000,163,840 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\ieakui.dll [2012.05.16 11:27:02 | 000,152,064 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\wextract.exe [2012.05.16 11:27:02 | 000,150,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\iexpress.exe [2012.05.16 11:27:02 | 000,142,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\ieUnatt.exe [2012.05.16 11:27:02 | 000,123,392 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\occache.dll [2012.05.16 11:27:02 | 000,101,888 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\admparse.dll [2012.05.16 11:27:02 | 000,089,088 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\RegisterIEPKEYs.exe [2012.05.16 11:27:02 | 000,078,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\inseng.dll [2012.05.16 11:27:02 | 000,074,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\iesetup.dll [2012.05.16 11:27:02 | 000,074,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\ie4uinit.exe [2012.05.16 11:27:02 | 000,072,822 | ---- | M] () -- C:\Windows\SysWow64\ieuinit.inf [2012.05.16 11:27:02 | 000,072,704 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmled.dll [2012.05.16 11:27:02 | 000,066,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\icardie.dll [2012.05.16 11:27:02 | 000,063,488 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\tdc.ocx [2012.05.16 11:27:02 | 000,054,272 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\pngfilt.dll [2012.05.16 11:27:02 | 000,031,744 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\iernonce.dll [2012.05.16 11:27:02 | 000,023,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\licmgr10.dll [2012.05.16 11:27:01 | 003,695,416 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ieapfltr.dat [2012.05.16 11:27:01 | 002,308,096 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9.dll [2012.05.16 11:27:01 | 000,818,688 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\jscript.dll [2012.05.16 11:27:01 | 000,534,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ieapfltr.dll [2012.05.16 11:27:01 | 000,452,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\dxtmsft.dll [2012.05.16 11:27:01 | 000,448,512 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\html.iec [2012.05.16 11:27:01 | 000,282,112 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\dxtrans.dll [2012.05.16 11:27:01 | 000,267,776 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ieaksie.dll [2012.05.16 11:27:01 | 000,248,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll [2012.05.16 11:27:01 | 000,222,208 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\msls31.dll [2012.05.16 11:27:01 | 000,197,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\msrating.dll [2012.05.16 11:27:01 | 000,173,056 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ieUnatt.exe [2012.05.16 11:27:01 | 000,163,840 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ieakui.dll [2012.05.16 11:27:01 | 000,160,256 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ieakeng.dll [2012.05.16 11:27:01 | 000,149,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\occache.dll [2012.05.16 11:27:01 | 000,145,920 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\iepeers.dll [2012.05.16 11:27:01 | 000,135,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\IEAdvpack.dll [2012.05.16 11:27:01 | 000,114,176 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\admparse.dll [2012.05.16 11:27:01 | 000,111,616 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\iesysprep.dll [2012.05.16 11:27:01 | 000,091,648 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\SetIEInstalledDate.exe [2012.05.16 11:27:01 | 000,089,088 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ie4uinit.exe [2012.05.16 11:27:01 | 000,085,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\iesetup.dll [2012.05.16 11:27:01 | 000,082,432 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\icardie.dll [2012.05.16 11:27:01 | 000,076,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\tdc.ocx [2012.05.16 11:27:01 | 000,072,822 | ---- | M] () -- C:\Windows\SysNative\ieuinit.inf [2012.05.16 11:27:01 | 000,065,024 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\pngfilt.dll [2012.05.16 11:27:01 | 000,049,664 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\imgutil.dll [2012.05.16 11:27:01 | 000,048,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmler.dll [2012.05.16 11:27:01 | 000,039,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\iernonce.dll [2012.05.16 11:27:01 | 000,012,288 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\mshta.exe [2012.05.16 11:27:01 | 000,010,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\msfeedssync.exe [2012.05.16 11:27:00 | 001,493,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\inetcpl.cpl [2012.05.16 11:27:00 | 000,697,344 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\msfeeds.dll [2012.05.16 11:27:00 | 000,603,648 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\vbscript.dll [2012.05.16 11:27:00 | 000,237,056 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\url.dll [2012.05.16 11:27:00 | 000,165,888 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\iexpress.exe [2012.05.16 11:27:00 | 000,160,256 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\wextract.exe [2012.05.16 11:27:00 | 000,103,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\inseng.dll [2012.05.16 11:27:00 | 000,096,256 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmled.dll [2012.05.16 11:27:00 | 000,030,720 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\licmgr10.dll [2012.05.14 15:46:26 | 000,174,024 | ---- | M] (Oracle Corporation) -- C:\Windows\SysWow64\javaw.exe [2012.05.14 15:46:26 | 000,174,024 | ---- | M] (Oracle Corporation) -- C:\Windows\SysWow64\java.exe [2012.05.14 01:12:20 | 000,416,336 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT [2012.05.11 18:44:23 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_User_WpdMtpDr_01_09_00.Wdf [2012.05.11 14:36:30 | 000,000,075 | RHS- | M] () -- C:\Windows\CT4CET.bin [2012.05.10 16:11:19 | 000,132,832 | ---- | M] (Avira GmbH) -- C:\Windows\SysNative\drivers\avipbb.sys [2012.05.10 16:11:19 | 000,098,848 | ---- | M] (Avira GmbH) -- C:\Windows\SysNative\drivers\avgntflt.sys [2012.05.10 12:32:37 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_Kernel_Apfiltr_01009.Wdf [2012.05.10 01:35:38 | 000,295,922 | ---- | M] () -- C:\Windows\SysNative\perfi007.dat [2012.05.10 01:35:38 | 000,038,104 | ---- | M] () -- C:\Windows\SysNative\perfd007.dat [2012.05.09 22:02:02 | 000,000,564 | ---- | M] () -- C:\Windows\tasks\PCDoctorBackgroundMonitorTask.job [2012.05.09 16:05:03 | 000,419,488 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerApp.exe [2012.05.09 16:05:03 | 000,070,304 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl [2012.05.09 15:42:04 | 000,052,953 | ---- | M] () -- C:\Windows\SysWow64\license.rtf [2012.05.09 15:42:04 | 000,052,953 | ---- | M] () -- C:\Windows\SysNative\license.rtf [2012.05.09 15:40:26 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_User_WpdFs_01_09_00.Wdf [2012.05.09 13:19:38 | 000,091,724 | ---- | M] () -- C:\Users\Daria\Documents\bookmarks-2012-05-09.json [2012.05.07 18:12:48 | 000,291,249 | ---- | M] () -- C:\Users\Daria\Documents\bookmarks.html [2012.05.07 18:12:42 | 000,091,724 | ---- | M] () -- C:\Users\Daria\Documents\bookmarks-2012-05-07.json [2012.05.05 15:35:39 | 000,245,663 | ---- | M] () -- C:\Users\Daria\Documents\Endnote - Zitierstile.pdf ========== Files Created - No Company Name ========== [2012.05.16 12:58:34 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_Kernel_dc3d_01009.Wdf [2012.05.16 11:27:02 | 000,072,822 | ---- | C] () -- C:\Windows\SysWow64\ieuinit.inf [2012.05.16 11:27:01 | 000,072,822 | ---- | C] () -- C:\Windows\SysNative\ieuinit.inf [2012.05.11 18:44:23 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_User_WpdMtpDr_01_09_00.Wdf [2012.05.11 14:36:30 | 000,000,075 | RHS- | C] () -- C:\Windows\CT4CET.bin [2012.05.11 14:35:23 | 000,057,656 | ---- | C] () -- C:\Windows\SysNative\drivers\FilterPC.bmp [2012.05.11 14:35:23 | 000,024,995 | ---- | C] () -- C:\Windows\SysNative\drivers\FilterPC.jpg [2012.05.11 14:00:00 | 000,057,656 | ---- | C] () -- C:\Windows\SysNative\drivers\OA009PC.bmp [2012.05.11 14:00:00 | 000,022,951 | ---- | C] () -- C:\Windows\SysNative\drivers\OA009PC.jpg [2012.05.11 14:00:00 | 000,004,212 | ---- | C] () -- C:\Windows\OA009.uns [2012.05.10 12:32:37 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_Kernel_Apfiltr_01009.Wdf [2012.05.10 01:36:36 | 000,000,024 | RH-- | C] () -- C:\Windows\DELL_version [2012.05.10 01:36:10 | 000,654,166 | ---- | C] () -- C:\Windows\SysNative\perfh007.dat [2012.05.10 01:36:10 | 000,295,922 | ---- | C] () -- C:\Windows\SysNative\perfi007.dat [2012.05.10 01:36:10 | 000,130,006 | ---- | C] () -- C:\Windows\SysNative\perfc007.dat [2012.05.10 01:36:10 | 000,038,104 | ---- | C] () -- C:\Windows\SysNative\perfd007.dat [2012.05.09 20:37:32 | 000,000,564 | ---- | C] () -- C:\Windows\tasks\PCDoctorBackgroundMonitorTask.job [2012.05.09 20:37:31 | 000,000,506 | ---- | C] () -- C:\Windows\tasks\SystemToolsDailyTest.job [2012.05.09 16:28:21 | 001,255,349 | ---- | C] () -- C:\Users\Daria\Documents\World bank doch keine Lebensmittelpreissteigerungen.pdf [2012.05.09 16:28:21 | 000,634,254 | ---- | C] () -- C:\Users\Daria\Documents\wollof.pdf [2012.05.09 16:28:20 | 000,565,296 | ---- | C] () -- C:\Users\Daria\Documents\Stundenzettel Stadt Dortmund.pdf [2012.05.09 16:28:20 | 000,130,769 | ---- | C] () -- C:\Users\Daria\Documents\Weltbank a note on rising food prices.pdf [2012.05.09 16:28:20 | 000,096,345 | ---- | C] () -- C:\Users\Daria\Documents\Roman Gorniak.pdf [2012.05.09 16:28:20 | 000,029,998 | ---- | C] () -- C:\Users\Daria\Documents\Präsentation1.pdf [2012.05.09 16:28:20 | 000,007,181 | ---- | C] () -- C:\Users\Daria\Documents\Roman Gorniak.odt [2012.05.09 16:28:18 | 074,679,296 | ---- | C] () -- C:\Users\Daria\Documents\Outlook.pst [2012.05.09 16:28:18 | 000,341,946 | ---- | C] () -- C:\Users\Daria\Documents\Lebenslauf_Daria Gorniak.pdf [2012.05.09 16:28:18 | 000,036,634 | ---- | C] () -- C:\Users\Daria\Documents\ODA Auszahlungen DEU Bildung 2006- 2009.xml [2012.05.09 16:28:17 | 005,651,940 | ---- | C] () -- C:\Users\Daria\Documents\DAAD.pdf [2012.05.09 16:28:17 | 000,436,350 | ---- | C] () -- C:\Users\Daria\Documents\CV_DariaGorniak.pdf [2012.05.09 16:28:17 | 000,423,949 | ---- | C] () -- C:\Users\Daria\Documents\CV_Daria_Gorniak.pdf [2012.05.09 16:28:17 | 000,303,104 | ---- | C] () -- C:\Users\Daria\Documents\Datenbank1.accdb [2012.05.09 16:28:17 | 000,245,663 | ---- | C] () -- C:\Users\Daria\Documents\Endnote - Zitierstile.pdf [2012.05.09 16:28:17 | 000,205,825 | ---- | C] () -- C:\Users\Daria\Documents\Firefox Lesezeichen.html [2012.05.09 16:28:16 | 003,020,779 | ---- | C] () -- C:\Users\Daria\Documents\APUZ Wasser.pdf [2012.05.09 16:28:16 | 000,291,249 | ---- | C] () -- C:\Users\Daria\Documents\bookmarks.html [2012.05.09 16:28:16 | 000,130,524 | ---- | C] () -- C:\Users\Daria\Documents\215124039_NW_Bestaetigung.pdf [2012.05.09 16:28:16 | 000,095,947 | ---- | C] () -- C:\Users\Daria\Documents\Belegbogen zur Prüfungsanmeldung MA09 WiSe 11-12_Daria_Gorniak.pdf [2012.05.09 16:28:16 | 000,091,724 | ---- | C] () -- C:\Users\Daria\Documents\bookmarks-2012-05-09.json [2012.05.09 16:28:16 | 000,091,724 | ---- | C] () -- C:\Users\Daria\Documents\bookmarks-2012-05-07.json [2012.05.09 16:28:16 | 000,072,828 | ---- | C] () -- C:\Users\Daria\Documents\2010_9273_3_Angebot_UNAMID.pdf [2012.05.09 16:28:16 | 000,051,549 | ---- | C] () -- C:\Users\Daria\Documents\43012A.rtf [2012.05.09 16:08:19 | 000,002,441 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader X.lnk [2012.05.09 16:05:03 | 000,000,884 | ---- | C] () -- C:\Windows\tasks\Adobe Flash Player Updater.job [2012.05.09 15:57:18 | 000,001,146 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk [2012.05.09 15:46:45 | 000,001,409 | ---- | C] () -- C:\Users\Daria\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk [2012.05.09 15:46:39 | 000,001,443 | ---- | C] () -- C:\Users\Daria\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk [2012.05.09 15:41:58 | 000,001,345 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk [2012.05.09 15:41:47 | 000,001,326 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk [2012.05.09 15:40:26 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_User_WpdFs_01_09_00.Wdf [2012.05.09 15:37:45 | 3190,050,816 | -HS- | C] () -- C:\hiberfil.sys [2011.02.11 19:15:08 | 000,982,240 | ---- | C] () -- C:\Windows\SysWow64\igkrng500.bin [2011.02.11 19:15:08 | 000,439,308 | ---- | C] () -- C:\Windows\SysWow64\igcompkrng500.bin [2011.02.11 19:15:08 | 000,092,356 | ---- | C] () -- C:\Windows\SysWow64\igfcg500m.bin < End of report > |
Systemreinigung und Prüfung: 1. Zitat:
Code: :OTL
2. Tipps (unabhängig davon ob man den Internet Explorer benutzt oder nicht!): -> Tipps zu Internet Explorer -> Standard Suchmaschine des Explorers ändern -> Wie kann ich den Cache im Internet Explorer leeren? 3. reinige dein System mit CCleaner:
4. Auch auf USB-Sticks, selbstgebrannten Datenträgern, externen Festplatten und anderen Datenträgern können Viren transportiert werden. Man muss daher durch regelmäßige Prüfungen auf Schäden, die durch Malware ("Worm.Win32.Autorun") verursacht worden sein können, überwacht werden. Hierfür sind ser gut geegnet und empfohlen, die auf dem Speichermedium gesicherten Daten, mit Hilfe des kostenlosen Online Scanners zu prüfen. Schließe jetzt alle externe Datenträgeran (USB Sticks etc) Deinen Rechner an, dabei die Hochstell-Taste [Shift-Taste] gedrückt halten, damit die Autorun-Funktion nicht ausgeführt wird. (So verhindest Du die Ausführung der AUTORUN-Funktion) - Man kann die AUTORUN-Funktion aber auch generell abschalten.►Anleitung 5. -> Führe dann einen Komplett-Systemcheck mit Eset Online Scanner (NOD32)Kostenlose Online Scanner durch Achtung!: >>Du sollst nicht die Antivirus-Sicherheitssoftware installieren, sondern dein System nur online scannen<< 6. erneut einen Scan mit OTL:
► berichte erneut über den Zustand des Computers. Ob noch Probleme bzw Meldung von Avira vorkommen? |
Hier ist der Log nr. 1) Code:
|
Alle Zeitangaben in WEZ +1. Es ist jetzt 04:12 Uhr. |
Copyright ©2000-2025, Trojaner-Board