Trojaner-Board
Seite 1 von 2 1 2
100 Beiträge dieses Themas auf einer Seite anzeigen

Trojaner-Board (https://www.trojaner-board.de/)
-   Log-Analyse und Auswertung (https://www.trojaner-board.de/log-analyse-auswertung/)
-   -   Windows 8: Schwarzer Bildschirm bei Anmeldung, aber Cursor sichtbar und Anmeldemaske sichtbar (https://www.trojaner-board.de/154377-windows-8-schwarzer-bildschirm-anmeldung-cursor-sichtbar-anmeldemaske-sichtbar.html)

mnster 26.05.2014 15:16
Windows 8: Schwarzer Bildschirm bei Anmeldung, aber Cursor sichtbar und Anmeldemaske sichtbar
 
Hallo zusammen,

folgendes Problem ist bei meinem Laptop mit Windows 8 aufgetreten:
Nach der Installation einer Freeware hatte sich in meinen Browsern eine neue Searchbar festgesetzt, die ich nicht über die Einstellungen ändern konnte.
Daraufhin habe ich Malwarebytes installiert und einen Scan vollzogen und die gefundenen Dateien unter Quarantäne gestellt.

Beim nächsten Hochfahren des Rechners wurde noch wie üblich das Windows-Symbol gezeigt und der Rechner begann mit dem booten. Statt anschließend die Anmeldemaske zu sehen, blieb der Monitor schwarz, nur der Cursor ist zu sehen. Wenn ich mit der Maus über den Bildschirm fahre, gibt es eine Stelle, an der der Cursor sich vom Pfeil zum Eingabesymbol ändert. Ich habe das Gefühl, dass ich nach Klicken hier "unsichtbar" mein Passwort eingeben kann. Nach drücken der Enter-Taste arbeitet der Rechner auch, nur schwarz bleibt es trotzdem.

Hat jemand eine Idee, wie das Problem behoben werden kann?


Vielen Dank vorab

schrauber 26.05.2014 18:08
hi,

kannst Du im Safe Mode booten?

mnster 26.05.2014 22:22
Grüß dich,

ich komme während dem Starten über F8 in die Auswahl zum "Reparieren" des Rechners bzw Systemwiederherstellung falls du das meinst?!

schrauber 27.05.2014 18:25
Computer repariern, darunter sollte auch abgesicherter Modus stehen, kannst Du da rein?

mnster 27.05.2014 18:43
Liste der Anhänge anzeigen (Anzahl: 1)
Ja das funktioniert. Er bietet mir nach dem darüber generierten Neustart folgende Auswahl (siehe Jpg)

schrauber 28.05.2014 12:05
4 oder 5, kannst Du rein booten?

mnster 28.05.2014 15:05
Hallo schrauber,

in den abgesicherten Modus komme ich über diesen Weg und die Anmeldemaske ist dann auch ganz normal sichtbar. Ein regulärer Neustart ist dann aber nicht möglich, es erscheint wieder der schwarze Bildschirm.

Eine Wiederherstellung zum Zeitpunkt des letzten Windows Updates blieb auch ohne Erfolg.

Viele Grüsse

schrauber 29.05.2014 14:01
Ja, immer langsam :). Aus dem abgesicherten Modus:

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST Download FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
  • Starte jetzt FRST.
  • Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
  • Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
  • Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)


mnster 29.05.2014 17:58
Code:
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:25-05-2014 02
Ran by Marko (administrator) on MM_PC on 29-05-2014 15:45:42
Running from F:\
Platform: Microsoft Windows 8.1 Pro Update 1 (X86) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Safe Mode (minimal)


==================== Processes (Whitelisted) =================



==================== Registry (Whitelisted) ==================

HKLM\...\Run: [KiesTrayAgent] => C:\Program Files\Samsung\Kies\KiesTrayAgent.exe [311616 2014-04-23] (Samsung Electronics Co., Ltd.)
HKU\.DEFAULT\...\Run: [GarminExpressTrayApp] => C:\Program Files\Garmin\Express Tray\ExpressTray.exe [122200 2014-04-23] (Garmin Ltd or its subsidiaries)
HKU\S-1-5-21-1795597239-2963957331-4134054646-1001\...\Run: [GarminExpressTrayApp] => C:\Program Files\Garmin\Express Tray\ExpressTray.exe [122200 2014-04-23] (Garmin Ltd or its subsidiaries)
HKU\S-1-5-21-1795597239-2963957331-4134054646-1001\...\Run: [Lync] => C:\Program Files\Microsoft Office 15\root\office15\lync.exe [18949280 2014-04-12] (Microsoft Corporation)
HKU\S-1-5-21-1795597239-2963957331-4134054646-1001\...\Run: [EPLTarget\P0000000000000000] => C:\WINDOWS\system32\spool\DRIVERS\W32X86\3\E_TATIHTU.EXE [219008 2011-04-24] (SEIKO EPSON CORPORATION)
HKU\S-1-5-21-1795597239-2963957331-4134054646-1001\...\Run: [Google Update] => C:\Users\Marko\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2014-05-11] (Google Inc.)
HKU\S-1-5-21-1795597239-2963957331-4134054646-1001\...\Run: [KiesAirMessage] => C:\Program Files\Samsung\Kies\KiesAirMessage.exe -startup
AppInit_DLLs: C:\PROGRA~1\SearchProtect\SearchProtect\bin\SPVC32Loader.dll => C:\Program Files\SearchProtect\SearchProtect\bin\SPVC32Loader.dll [171840 2014-05-14] ()

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.trovi.com/?gd=&ctid=CT3325585&octid=EB_ORIGINAL_CTID&ISID=M36918329-BF0E-467E-A875-40239DC2CD03&SearchSource=55&CUI=&UM=5&UP=SP6A153C15-8F38-4A25-980C-7B4D234059F8&SSPV=
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://t.de.msn.com/
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xB8442CA0B36FCF01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE,de;q=0.5
SearchScopes: HKCU - DefaultScope {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = hxxp://www.trovi.com/Results.aspx?gd=&ctid=CT3325585&octid=EB_ORIGINAL_CTID&ISID=M36918329-BF0E-467E-A875-40239DC2CD03&SearchSource=58&CUI=&UM=5&UP=SP6A153C15-8F38-4A25-980C-7B4D234059F8&q={searchTerms}&SSPV=
SearchScopes: HKCU - {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = hxxp://www.trovi.com/Results.aspx?gd=&ctid=CT3325585&octid=EB_ORIGINAL_CTID&ISID=M36918329-BF0E-467E-A875-40239DC2CD03&SearchSource=58&CUI=&UM=5&UP=SP6A153C15-8F38-4A25-980C-7B4D234059F8&q={searchTerms}&SSPV=
BHO: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office 15\root\Office15\OCHelper.dll (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL (Microsoft Corporation)
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF Plugin: @garmin.com/GpsControl - C:\Program Files\Garmin GPS Plugin\npGarmin.dll (GARMIN Corp.)
FF Plugin: @microsoft.com/Lync,version=15.0 - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin: @nvidia.com/3DVision - C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin: @nvidia.com/3DVisionStreaming - C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @talk.google.com/GoogleTalkPlugin - C:\Users\Marko\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin HKCU: @talk.google.com/O1DPlugin - C:\Users\Marko\AppData\Roaming\Mozilla\plugins\npo1d.dll (Google)
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\Marko\AppData\Local\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\Marko\AppData\Local\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin ProgramFiles/Appdata: C:\Users\Marko\AppData\Roaming\mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin ProgramFiles/Appdata: C:\Users\Marko\AppData\Roaming\mozilla\plugins\npo1d.dll (Google)

Chrome:
=======
CHR HomePage: https://www.google.de/
CHR Extension: (Google Docs) - C:\Users\Marko\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-02-23]
CHR Extension: (Google Drive) - C:\Users\Marko\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-02-23]
CHR Extension: (YouTube) - C:\Users\Marko\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-02-23]
CHR Extension: (Google-Suche) - C:\Users\Marko\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-02-23]
CHR Extension: (Google Wallet) - C:\Users\Marko\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-02-23]
CHR Extension: (SpeakIt!) - C:\Users\Marko\AppData\Local\Google\Chrome\User Data\Default\Extensions\pgeolalilifpodheeocdmbhehgnkkbak [2014-04-07]
CHR Extension: (Google Mail) - C:\Users\Marko\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-02-23]

========================== Services (Whitelisted) =================

S2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX86\OfficeClickToRun.exe [1520824 2014-03-30] (Microsoft Corporation)
S2 CltMngSvc; C:\Program Files\SearchProtect\Main\bin\CltMngSvc.exe [2496832 2014-05-14] (Client Connect LTD)
S2 Garmin Core Update Service; C:\Program Files\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe [436056 2014-04-23] (Garmin Ltd or its subsidiaries)
S3 ScDeviceEnum; C:\WINDOWS\System32\ScDeviceEnum.dll [105472 2013-08-22] (Microsoft Corporation)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [279784 2014-03-24] (Microsoft Corporation)
S3 WEPHOSTSVC; C:\WINDOWS\system32\wephostsvc.dll [20992 2013-08-22] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [22224 2014-03-24] (Microsoft Corporation)
S3 workfolderssvc; C:\WINDOWS\system32\workfolderssvc.dll [1210368 2013-11-14] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

R1 BasicRender; C:\WINDOWS\System32\drivers\BasicRender.sys [25600 2014-02-22] (Microsoft Corporation)
S3 GPIO; C:\WINDOWS\System32\drivers\iaiogpio.sys [22016 2013-07-23] (Intel Corporation)
S3 grmnusb; C:\WINDOWS\system32\drivers\grmnusb.sys [15720 2012-04-18] (GARMIN Corp.)
S1 MpKsl995c3161; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{36B95E98-6FEE-4E30-9D81-5BD4D47FA5FB}\MpKsl995c3161.sys [39464 2014-05-21] (Microsoft Corporation)
S1 MpKslc400d7fe; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{36B95E98-6FEE-4E30-9D81-5BD4D47FA5FB}\MpKslc400d7fe.sys [39464 2014-05-28] (Microsoft Corporation)
S3 NETwNs32; C:\WINDOWS\system32\DRIVERS\NETwNs32.sys [7518208 2013-06-18] (Intel Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [92504 2014-03-24] (Microsoft Corporation)
S3 WinDriver6; C:\WINDOWS\system32\drivers\windrvr6.sys [195968 2010-08-31] (Jungo)
R0 Wof; C:\WINDOWS\system32\Drivers\Wof.sys [138584 2014-03-13] (Microsoft Corporation)
S3 WUDFSensorLP; C:\WINDOWS\system32\DRIVERS\WUDFRd.sys [187392 2013-08-22] (Microsoft Corporation)
S3 WUDFWpdMtp; C:\WINDOWS\system32\DRIVERS\WUDFRd.sys [187392 2013-08-22] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-05-29 16:01 - 2014-05-29 16:03 - 00000000 _____ () C:\Recovery.txt
2014-05-26 14:40 - 2014-05-29 15:06 - 00000000 ____D () C:\FRST
2014-05-26 07:23 - 2014-05-26 07:23 - 00015485 _____ () C:\Users\Marko\Desktop\malware_20140526.txt
2014-05-26 02:33 - 2014-05-27 09:35 - 00000000 ____D () C:\Program Files\Malwarebytes Anti-Malware
2014-05-26 02:33 - 2014-05-26 02:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-05-26 02:33 - 2014-05-26 02:33 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-05-21 20:59 - 2014-05-21 20:59 - 00000000 ____D () C:\Users\Marko\AppData\Roaming\Avira
2014-05-21 20:51 - 2014-05-21 20:52 - 00000000 ____D () C:\ProgramData\Avira
2014-05-21 20:51 - 2014-05-21 20:52 - 00000000 ____D () C:\Program Files\Avira
2014-05-21 19:42 - 2014-05-27 09:27 - 00000000 ____D () C:\Users\Marko\AppData\Roaming\OpenCandy
2014-05-21 19:42 - 2014-05-27 09:26 - 00000000 ____D () C:\Program Files\SearchProtect
2014-05-21 19:42 - 2014-05-21 19:43 - 00000000 ____D () C:\Users\Marko\AppData\Local\SearchProtect
2014-05-21 19:42 - 2014-05-21 19:43 - 00000000 ____D () C:\Program Files\DVDVideoSoft
2014-05-21 19:42 - 2014-05-21 19:42 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft
2014-05-21 19:42 - 2014-05-21 19:42 - 00000000 ____D () C:\Program Files\Common Files\DVDVideoSoft
2014-05-21 19:40 - 2014-05-21 19:44 - 00000000 ____D () C:\Users\Marko\AppData\Roaming\DVDVideoSoft
2014-05-18 00:17 - 2014-05-18 00:18 - 00000000 ____D () C:\Users\Marko\Documents\SelfMV
2014-05-18 00:17 - 2014-05-18 00:17 - 00001941 _____ () C:\Users\Public\Desktop\Samsung Kies 3.lnk
2014-05-18 00:04 - 2014-05-18 00:04 - 00000000 ____D () C:\Users\Public\Documents\NativeFus_Log
2014-05-18 00:04 - 2014-04-11 10:39 - 00184192 _____ (DEVGURU Co., LTD.(www.devguru.co.kr)) C:\WINDOWS\system32\Drivers\ssudmdm.sys
2014-05-18 00:04 - 2014-04-11 10:39 - 00089856 _____ (DEVGURU Co., LTD.(www.devguru.co.kr)) C:\WINDOWS\system32\Drivers\ssudbus.sys
2014-05-18 00:01 - 2014-05-18 00:01 - 00000000 ____D () C:\Program Files\MarkAny
2014-05-18 00:00 - 2014-05-18 00:16 - 00000000 ____D () C:\Users\Marko\AppData\Roaming\Samsung
2014-05-18 00:00 - 2014-05-18 00:00 - 00000000 ____D () C:\Users\Marko\AppData\Local\Samsung
2014-05-17 23:59 - 2014-05-18 00:04 - 00001974 _____ () C:\Users\Public\Desktop\Samsung Kies (Lite).lnk
2014-05-17 23:59 - 2014-05-17 23:59 - 00001964 _____ () C:\Users\Public\Desktop\Samsung Kies.lnk
2014-05-17 23:59 - 2014-05-17 23:59 - 00000000 ____D () C:\Users\Marko\Documents\samsung
2014-05-17 23:06 - 2014-05-17 23:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MyFree Codec
2014-05-17 23:06 - 2014-05-17 23:06 - 00000000 ____D () C:\Program Files\MyFree Codec
2014-05-17 23:03 - 2014-05-18 00:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung
2014-05-17 23:02 - 2014-01-23 18:31 - 00821824 _____ (Devguru Co., Ltd.) C:\WINDOWS\system32\dgderapi.dll
2014-05-17 23:02 - 2014-01-23 18:23 - 04659712 _____ (Dmitry Streblechenko) C:\WINDOWS\system32\Redemption.dll
2014-05-17 23:02 - 2014-01-23 18:23 - 00144664 _____ (MAPILab Ltd. & Add-in Express Ltd.) C:\WINDOWS\system32\secman.dll
2014-05-17 23:00 - 2014-05-18 00:16 - 00000000 ____D () C:\Program Files\Samsung
2014-05-17 23:00 - 2014-05-17 23:07 - 00000000 ____D () C:\ProgramData\Samsung
2014-05-17 22:59 - 2014-05-17 22:59 - 00000000 ____D () C:\Users\Marko\AppData\Local\Downloaded Installations
2014-05-17 22:54 - 2014-05-17 22:55 - 75397136 _____ (Samsung Electronics Co., Ltd.) C:\Users\Marko\Downloads\KiesSetup.exe
2014-05-17 22:09 - 2014-05-17 22:09 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf
2014-05-15 20:51 - 2014-05-01 22:30 - 00693240 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerApp.exe
2014-05-15 20:51 - 2014-05-01 22:30 - 00105464 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerCPLApp.cpl
2014-05-14 21:56 - 2014-05-06 05:25 - 17382912 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2014-05-14 21:56 - 2014-05-06 04:10 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2014-05-14 21:55 - 2014-04-08 20:54 - 00080032 _____ (Microsoft Corporation) C:\WINDOWS\system32\mrt_map.dll
2014-05-14 21:55 - 2014-04-08 20:54 - 00026784 _____ (Microsoft Corporation) C:\WINDOWS\system32\mrt100.dll
2014-05-14 21:55 - 2014-03-27 09:48 - 18679728 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2014-05-14 21:55 - 2014-03-24 03:34 - 00219992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdFilter.sys
2014-05-14 21:55 - 2014-03-24 03:34 - 00092504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdNisDrv.sys
2014-05-14 21:55 - 2014-03-24 03:33 - 00030224 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdBoot.sys
2014-05-14 21:55 - 2014-03-13 08:51 - 00305152 _____ (Microsoft Corporation) C:\WINDOWS\system32\wusa.exe
2014-05-14 21:54 - 2014-04-11 10:31 - 00049544 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2014-05-14 21:54 - 2014-04-11 10:25 - 00419928 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.appcore.dll
2014-05-14 21:54 - 2014-04-11 07:22 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups.dll
2014-05-14 21:54 - 2014-04-11 07:13 - 00079360 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSReset.exe
2014-05-14 21:54 - 2014-04-11 05:41 - 00159744 _____ (Microsoft Corporation) C:\WINDOWS\system32\ubpm.dll
2014-05-14 21:54 - 2014-04-11 05:36 - 11792384 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2014-05-14 21:54 - 2014-04-11 05:06 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapp.exe
2014-05-14 21:54 - 2014-04-11 05:05 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2014-05-14 21:54 - 2014-04-11 05:05 - 00123904 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuwebv.dll
2014-05-14 21:54 - 2014-04-11 05:02 - 00159232 _____ (Microsoft Corporation) C:\WINDOWS\system32\storewuauth.dll
2014-05-14 21:54 - 2014-04-11 05:01 - 00307712 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUSettingsProvider.dll
2014-05-14 21:54 - 2014-04-11 05:00 - 00080896 _____ (Microsoft Corporation) C:\WINDOWS\system32\wudriver.dll
2014-05-14 21:54 - 2014-04-11 04:59 - 00666624 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2014-05-14 21:54 - 2014-04-11 04:54 - 02818048 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2014-05-14 21:54 - 2014-04-11 04:47 - 01634304 _____ (Microsoft Corporation) C:\WINDOWS\system32\wucltux.dll
2014-05-14 21:54 - 2014-04-11 04:36 - 00828928 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.appcore.dll
2014-05-14 21:54 - 2014-04-11 04:34 - 00754688 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll
2014-05-11 09:57 - 2014-05-27 09:35 - 00000000 ____D () C:\Users\Marko\AppData\Roaming\Mozilla
2014-05-11 09:56 - 2014-05-28 16:01 - 00001132 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1795597239-2963957331-4134054646-1001UA.job
2014-05-11 09:56 - 2014-05-11 10:01 - 00001080 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1795597239-2963957331-4134054646-1001Core.job
2014-05-11 09:56 - 2014-05-11 09:56 - 00918672 _____ (Google Inc.) C:\Users\Marko\Downloads\GoogleVoiceAndVideoSetup.exe
2014-05-09 21:04 - 2014-05-11 12:16 - 00000000 ____D () C:\Users\Marko\Desktop\CFA
2014-05-09 20:55 - 2014-05-09 20:55 - 00000000 ____D () C:\Program Files\Common Files\EPSON
2014-05-09 20:54 - 2014-05-09 20:55 - 00000000 ____D () C:\ProgramData\EPSON
2014-05-09 20:54 - 2014-05-09 20:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EPSON
2014-05-09 20:54 - 2010-09-28 18:01 - 00093696 _____ (SEIKO EPSON CORPORATION) C:\WINDOWS\system32\E_TLBHTU.DLL
2014-05-09 20:54 - 2010-08-09 18:02 - 00081408 _____ (SEIKO EPSON CORPORATION) C:\WINDOWS\system32\E_TD4BHTU.DLL
2014-05-09 20:54 - 2007-04-09 16:06 - 00008192 _____ (SEIKO EPSON CORP.) C:\WINDOWS\system32\E_DCINST.DLL
2014-05-02 23:09 - 2014-05-02 23:09 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2014-05-02 18:36 - 2014-05-02 18:36 - 00000000 __SHD () C:\Users\Marko\AppData\Local\EmieUserList
2014-05-02 18:36 - 2014-05-02 18:36 - 00000000 __SHD () C:\Users\Marko\AppData\Local\EmieSiteList
2014-04-29 17:06 - 2014-03-20 03:31 - 01037504 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel32.dll
2014-04-29 17:06 - 2014-03-20 03:12 - 00863552 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2014-04-29 17:06 - 2014-03-20 03:09 - 01679704 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2014-04-29 17:06 - 2014-03-20 03:09 - 00283992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys
2014-04-29 17:06 - 2014-03-20 02:08 - 03562496 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncEngine.dll
2014-04-29 17:06 - 2014-03-20 01:39 - 00800256 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgent.dll
2014-04-29 17:06 - 2014-03-20 01:36 - 00172544 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReInfo.dll
2014-04-29 17:06 - 2014-03-19 07:25 - 00491008 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAgent.exe
2014-04-29 17:06 - 2014-03-19 07:20 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\system32\w32tm.exe
2014-04-29 17:06 - 2014-03-19 07:08 - 01351168 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll
2014-04-29 17:06 - 2014-03-19 06:33 - 00590336 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveTelemetry.dll
2014-04-29 17:06 - 2014-03-19 06:10 - 00672256 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDrive.exe
2014-04-29 17:06 - 2014-03-13 12:12 - 00138584 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wof.sys
2014-04-29 17:06 - 2014-03-12 15:45 - 00387210 _____ () C:\WINDOWS\system32\ApnDatabase.xml
2014-04-29 17:06 - 2014-03-11 17:05 - 00128000 _____ (Microsoft Corporation) C:\WINDOWS\system32\BdeHdCfg.exe
2014-04-29 17:06 - 2014-03-11 16:49 - 00082944 _____ (Microsoft Corporation) C:\WINDOWS\system32\BdeHdCfgLib.dll
2014-04-29 17:06 - 2014-03-11 16:28 - 00887296 _____ (Microsoft Corporation) C:\WINDOWS\system32\aclui.dll
2014-04-29 17:06 - 2014-03-11 16:09 - 00761856 _____ (Microsoft Corporation) C:\WINDOWS\system32\fvewiz.dll
2014-04-29 17:06 - 2014-03-11 15:46 - 00100864 _____ (Microsoft Corporation) C:\WINDOWS\system32\BitLockerDeviceEncryption.exe
2014-04-29 17:06 - 2014-03-11 15:34 - 00184832 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapibase.dll
2014-04-29 17:06 - 2014-03-11 15:32 - 00299008 _____ (Microsoft Corporation) C:\WINDOWS\system32\bdesvc.dll
2014-04-29 17:06 - 2014-03-11 15:30 - 00571392 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll
2014-04-29 17:06 - 2014-03-11 15:02 - 00629760 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll
2014-04-29 17:06 - 2014-03-11 14:35 - 02317824 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2014-04-29 17:06 - 2014-03-08 14:00 - 01092896 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll
2014-04-29 17:06 - 2014-03-08 14:00 - 00241664 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcomp.dll
2014-04-29 17:06 - 2014-03-08 13:53 - 00147800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2014-04-29 17:06 - 2014-03-08 13:49 - 00482416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2014-04-29 17:06 - 2014-03-08 13:49 - 00376152 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS
2014-04-29 17:06 - 2014-03-08 13:45 - 00069464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wfplwfs.sys
2014-04-29 17:06 - 2014-03-08 13:35 - 00295256 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Classpnp.sys
2014-04-29 17:06 - 2014-03-08 13:34 - 01095488 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll
2014-04-29 17:06 - 2014-03-08 10:44 - 00731648 _____ (Microsoft Corporation) C:\WINDOWS\system32\adtschema.dll
2014-04-29 17:06 - 2014-03-08 10:12 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\sxproxy.dll
2014-04-29 17:06 - 2014-03-08 09:47 - 00222720 _____ (Microsoft Corporation) C:\WINDOWS\system32\spp.dll
2014-04-29 17:06 - 2014-03-08 09:40 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\SetNetworkLocation.dll
2014-04-29 17:06 - 2014-03-08 09:14 - 00264192 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDEServer.exe
2014-04-29 17:06 - 2014-03-08 09:12 - 01816576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Display.dll
2014-04-29 17:06 - 2014-03-08 08:40 - 00139776 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxAllUserStore.dll
2014-04-29 17:06 - 2014-03-08 08:38 - 01089024 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2014-04-29 17:06 - 2014-03-08 08:37 - 00755712 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2014-04-29 17:06 - 2014-03-08 08:37 - 00551424 _____ (Microsoft Corporation) C:\WINDOWS\system32\BFE.DLL
2014-04-29 17:06 - 2014-03-08 08:30 - 00197632 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll
2014-04-29 17:06 - 2014-03-08 08:25 - 00264192 _____ (Microsoft Corporation) C:\WINDOWS\system32\FWPUCLNT.DLL
2014-04-29 17:06 - 2014-03-08 08:23 - 00731648 _____ (Microsoft Corporation) C:\WINDOWS\system32\IKEEXT.DLL
2014-04-29 17:06 - 2014-03-08 08:02 - 00801792 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2014-04-29 17:06 - 2014-03-08 07:58 - 00567296 _____ (Microsoft Corporation) C:\WINDOWS\system32\nshwfp.dll
2014-04-29 17:06 - 2014-03-08 07:42 - 01131520 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2014-04-29 17:06 - 2014-03-08 07:16 - 00735232 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2014-04-29 17:06 - 2014-03-06 13:20 - 01200296 _____ (Microsoft Corporation) C:\WINDOWS\system32\propsys.dll
2014-04-29 17:06 - 2014-03-06 13:19 - 00390488 _____ (Microsoft Corporation) C:\WINDOWS\system32\netcfgx.dll
2014-04-29 17:06 - 2014-03-06 13:19 - 00094016 _____ (Microsoft Corporation) C:\WINDOWS\system32\userenv.dll
2014-04-29 17:06 - 2014-03-06 13:13 - 01779800 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
2014-04-29 17:06 - 2014-03-06 13:13 - 00406912 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
2014-04-29 17:06 - 2014-03-06 12:46 - 01679128 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll
2014-04-29 17:06 - 2014-03-06 12:43 - 01326936 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2014-04-29 17:06 - 2014-03-06 12:43 - 00321880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2014-04-29 17:06 - 2014-03-06 12:37 - 05786968 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2014-04-29 17:06 - 2014-03-06 12:35 - 00406512 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2014-04-29 17:06 - 2014-03-06 12:35 - 00388408 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2014-04-29 17:06 - 2014-03-06 12:35 - 00326024 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2014-04-29 17:06 - 2014-03-06 12:35 - 00305768 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2014-04-29 17:06 - 2014-03-06 12:35 - 00194752 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2014-04-29 17:06 - 2014-03-06 12:34 - 00179200 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdd.dll
2014-04-29 17:06 - 2014-03-06 10:28 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanhlp.dll
2014-04-29 17:06 - 2014-03-06 10:24 - 00092160 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidclass.sys
2014-04-29 17:06 - 2014-03-06 10:24 - 00068608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\IPMIDrv.sys
2014-04-29 17:06 - 2014-03-06 10:24 - 00020992 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidusb.sys
2014-04-29 17:06 - 2014-03-06 10:23 - 00102400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dfsc.sys
2014-04-29 17:06 - 2014-03-06 10:22 - 00560128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys
2014-04-29 17:06 - 2014-03-06 10:22 - 00124416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxdav.sys
2014-04-29 17:06 - 2014-03-06 10:21 - 00374784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\nwifi.sys
2014-04-29 17:06 - 2014-03-06 10:21 - 00333824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
2014-04-29 17:06 - 2014-03-06 10:20 - 00227840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb10.sys
2014-04-29 17:06 - 2014-03-06 10:20 - 00185856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srvnet.sys
2014-04-29 17:06 - 2014-03-06 10:20 - 00096256 _____ (Microsoft Corporation) C:\WINDOWS\system32\umpnpmgr.dll
2014-04-29 17:06 - 2014-03-06 10:20 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\system32\drvcfg.exe
2014-04-29 17:06 - 2014-03-06 10:20 - 00038400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpipreg.sys
2014-04-29 17:06 - 2014-03-06 10:20 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Shell.Search.UriHandler.dll
2014-04-29 17:06 - 2014-03-06 10:10 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\system32\l2gpstore.dll
2014-04-29 17:06 - 2014-03-06 10:09 - 00098816 _____ (Microsoft Corporation) C:\WINDOWS\system32\drvinst.exe
2014-04-29 17:06 - 2014-03-06 09:47 - 00095744 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevPropMgr.dll
2014-04-29 17:06 - 2014-03-06 09:46 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\system32\davclnt.dll
2014-04-29 17:06 - 2014-03-06 09:44 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsgqec.dll
2014-04-29 17:06 - 2014-03-06 09:25 - 00232960 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSDScDrv.dll
2014-04-29 17:06 - 2014-03-06 09:16 - 00171008 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsApi.dll
2014-04-29 17:06 - 2014-03-06 09:08 - 00855552 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdvidcrl.dll
2014-04-29 17:06 - 2014-03-06 08:59 - 12732416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2014-04-29 17:06 - 2014-03-06 08:42 - 00589824 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpprefcl.dll
2014-04-29 17:06 - 2014-03-06 08:29 - 00688640 _____ (Microsoft Corporation) C:\WINDOWS\system32\netlogon.dll
2014-04-29 17:06 - 2014-03-06 08:23 - 02270208 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll
2014-04-29 17:06 - 2014-03-06 08:14 - 00174080 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2014-04-29 17:06 - 2014-03-06 08:13 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanapi.dll
2014-04-29 17:06 - 2014-03-06 08:11 - 02030080 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmSvc.dll
2014-04-29 17:06 - 2014-03-06 08:09 - 01764864 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2014-04-29 17:06 - 2014-03-06 08:06 - 00386560 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlangpui.dll
2014-04-29 17:06 - 2014-03-06 08:06 - 00153600 _____ (Microsoft Corporation) C:\WINDOWS\system32\dafWfdProvider.dll
2014-04-29 17:06 - 2014-03-06 08:04 - 00300544 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanmsm.dll
2014-04-29 17:06 - 2014-03-06 08:04 - 00226304 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Sensors.dll
2014-04-29 17:06 - 2014-03-06 08:02 - 00623104 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2014-04-29 17:06 - 2014-03-06 08:01 - 00251392 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSDMon.dll
2014-04-29 17:06 - 2014-03-06 08:00 - 01309184 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll
2014-04-29 17:06 - 2014-03-06 07:54 - 00888320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2014-04-29 17:06 - 2014-03-06 07:51 - 00151040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Scanners.dll
2014-04-29 17:06 - 2014-03-06 07:45 - 00833536 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2014-04-29 17:06 - 2014-03-06 07:42 - 00280576 _____ (Microsoft Corporation) C:\WINDOWS\system32\SessEnv.dll
2014-04-29 17:06 - 2014-03-06 07:33 - 00839168 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFolder.dll
2014-04-29 17:06 - 2014-03-06 07:27 - 05833728 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll
2014-04-29 17:06 - 2014-03-06 07:21 - 05770752 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2014-04-29 17:06 - 2014-03-04 13:16 - 02088160 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2014-04-29 17:06 - 2014-03-04 13:10 - 00355832 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfreadwrite.dll
2014-04-29 17:06 - 2014-03-04 13:09 - 01871192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2014-04-29 17:06 - 2014-03-04 13:09 - 00286040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS
2014-04-29 17:06 - 2014-03-04 09:26 - 00444928 _____ (Microsoft Corporation) C:\WINDOWS\system32\AdmTmpl.dll
2014-04-29 17:06 - 2014-03-04 08:42 - 00494592 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsapi.dll
2014-04-29 17:06 - 2014-03-04 08:42 - 00186880 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsrslvr.dll
2014-04-29 17:06 - 2014-03-04 08:39 - 00254976 _____ (Microsoft Corporation) C:\WINDOWS\system32\pdh.dll
2014-04-29 17:06 - 2014-03-04 08:32 - 00356864 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidprov.dll
2014-04-29 17:06 - 2014-03-04 08:30 - 00069120 _____ (Microsoft Corporation) C:\WINDOWS\system32\RMapi.dll
2014-04-29 17:06 - 2014-03-04 08:26 - 00184832 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll
2014-04-29 17:06 - 2014-03-04 08:05 - 00402432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.Printing.dll
2014-04-29 17:06 - 2014-03-04 07:54 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredentialMigrationHandler.dll
2014-04-29 17:06 - 2014-03-04 07:52 - 00605184 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasapi32.dll
2014-04-29 17:06 - 2014-02-26 08:35 - 02124288 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers.dll
2014-04-29 17:06 - 2014-02-06 23:26 - 00313344 _____ (Microsoft Corporation) C:\WINDOWS\system32\clusapi.dll
2014-04-29 17:06 - 2013-12-24 01:28 - 00262656 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationApi.dll
2014-04-29 17:02 - 2014-02-22 13:22 - 03499008 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2014-04-29 17:02 - 2014-02-22 12:44 - 02178048 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2014-04-29 17:02 - 2014-02-22 12:36 - 04254720 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2014-04-29 17:02 - 2014-02-22 11:33 - 11745792 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2014-04-29 17:02 - 2014-02-22 11:33 - 01967104 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2014-04-29 17:02 - 2014-02-22 10:27 - 01143808 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2014-04-29 17:01 - 2014-02-22 16:38 - 01374384 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll
2014-04-29 17:01 - 2014-02-22 16:38 - 01129064 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll
2014-04-29 17:01 - 2014-02-22 16:25 - 02871672 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSService.dll
2014-04-29 17:01 - 2014-02-22 16:08 - 00265048 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\volsnap.sys
2014-04-29 17:01 - 2014-02-22 16:04 - 02144984 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2014-04-29 17:01 - 2014-02-22 13:17 - 00630272 _____ (Microsoft Corporation) C:\WINDOWS\system32\OobeFldr.dll
2014-04-29 17:01 - 2014-02-22 12:33 - 00592896 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2014-04-29 17:01 - 2014-02-22 12:18 - 00488448 _____ (Microsoft Corporation) C:\WINDOWS\system32\qedit.dll
2014-04-29 17:01 - 2014-02-22 12:02 - 08946688 _____ (Microsoft Corporation) C:\WINDOWS\system32\glcndFilter.dll
2014-04-29 17:01 - 2014-02-22 11:28 - 02643456 _____ (Microsoft Corporation) C:\WINDOWS\system32\tquery.dll
2014-04-29 17:01 - 2014-02-22 11:16 - 11776000 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmp.dll
2014-04-29 17:01 - 2014-02-22 11:14 - 00892416 _____ (Microsoft Corporation) C:\WINDOWS\system32\sysmain.dll
2014-04-29 17:01 - 2014-02-22 11:14 - 00034816 _____ (Microsoft Corporation) C:\WINDOWS\system32\WofTasks.dll
2014-04-29 17:01 - 2014-02-22 10:49 - 08874496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
2014-04-29 17:01 - 2014-02-22 10:37 - 01716736 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssrch.dll
2014-04-29 17:01 - 2014-02-22 10:35 - 00704512 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2014-04-29 17:00 - 2014-02-22 16:42 - 01017936 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll
2014-04-29 17:00 - 2014-02-22 16:42 - 00410568 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFault.exe
2014-04-29 17:00 - 2014-02-22 16:42 - 00369288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Faultrep.dll
2014-04-29 17:00 - 2014-02-22 16:38 - 01077944 _____ (Microsoft Corporation) C:\WINDOWS\system32\webservices.dll
2014-04-29 17:00 - 2014-02-22 16:25 - 02410496 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMVDECOD.DLL
2014-04-29 17:00 - 2014-02-22 16:08 - 01451392 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2014-04-29 17:00 - 2014-02-22 16:04 - 01206000 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll
2014-04-29 17:00 - 2014-02-22 12:40 - 00138752 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWWIN.EXE
2014-04-29 17:00 - 2014-02-22 11:40 - 00524288 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2014-04-29 17:00 - 2014-02-22 11:39 - 00854528 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll
2014-04-29 17:00 - 2014-02-22 11:26 - 00792576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Globalization.dll
2014-04-29 17:00 - 2014-02-22 11:07 - 01203200 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidsvc.dll
2014-04-29 17:00 - 2014-02-22 11:04 - 01029120 _____ (Microsoft Corporation) C:\WINDOWS\system32\mispace.dll
2014-04-29 17:00 - 2014-02-22 11:00 - 01341440 _____ (Microsoft Corporation) C:\WINDOWS\system32\dui70.dll
2014-04-29 17:00 - 2014-02-22 10:47 - 00517120 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe
2014-04-29 17:00 - 2014-02-22 10:32 - 01789440 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2014-04-29 17:00 - 2014-02-22 10:03 - 01496576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Immersive.dll
2014-04-29 17:00 - 2014-02-22 10:01 - 00978944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Streaming.dll
2014-04-29 16:59 - 2014-02-22 16:52 - 01767440 _____ (Microsoft Corporation) C:\WINDOWS\system32\setupapi.dll
2014-04-29 16:59 - 2014-02-22 16:51 - 01063976 _____ (Microsoft Corporation) C:\WINDOWS\system32\Taskmgr.exe
2014-04-29 16:59 - 2014-02-22 16:51 - 00491744 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll
2014-04-29 16:59 - 2014-02-22 16:42 - 01370696 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll
2014-04-29 16:59 - 2014-02-22 16:42 - 00422968 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll
2014-04-29 16:59 - 2014-02-22 16:40 - 00333656 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spaceport.sys
2014-04-29 16:59 - 2014-02-22 16:40 - 00311128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storport.sys
2014-04-29 16:59 - 2014-02-22 16:40 - 00211800 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pci.sys
2014-04-29 16:59 - 2014-02-22 16:40 - 00120664 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBSTOR.SYS
2014-04-29 16:59 - 2014-02-22 16:38 - 00336232 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcryptprimitives.dll
2014-04-29 16:59 - 2014-02-22 16:38 - 00197280 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppwinob.dll
2014-04-29 16:59 - 2014-02-22 16:38 - 00089848 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncryptsslp.dll
2014-04-29 16:59 - 2014-02-22 16:26 - 00502616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fvevol.sys
2014-04-29 16:59 - 2014-02-22 16:26 - 00198488 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdyboost.sys
2014-04-29 16:59 - 2014-02-22 16:26 - 00197976 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdbus.sys
2014-04-29 16:59 - 2014-02-22 16:18 - 01914616 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcMon.exe
2014-04-29 16:59 - 2014-02-22 16:18 - 00759192 _____ (Microsoft Corporation) C:\WINDOWS\system32\iuilp.dll
2014-04-29 16:59 - 2014-02-22 16:18 - 00477744 _____ (Microsoft Corporation) C:\WINDOWS\system32\SHCore.dll
2014-04-29 16:59 - 2014-02-22 16:12 - 01468872 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMALFXGFXDSP.dll
2014-04-29 16:59 - 2014-02-22 16:11 - 00490136 _____ (Microsoft Corporation) C:\WINDOWS\system32\advapi32.dll
2014-04-29 16:59 - 2014-02-22 16:08 - 01389960 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2014-04-29 16:59 - 2014-02-22 16:08 - 01280960 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2014-04-29 16:59 - 2014-02-22 16:08 - 01270608 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2014-04-29 16:59 - 2014-02-22 16:08 - 01167856 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe
2014-04-29 16:59 - 2014-02-22 16:08 - 00431960 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\acpi.sys
2014-04-29 16:59 - 2014-02-22 16:08 - 00337752 _____ (Microsoft Corporation) C:\WINDOWS\system32\halmacpi.dll
2014-04-29 16:59 - 2014-02-22 16:08 - 00337752 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll
2014-04-29 16:59 - 2014-02-22 16:08 - 00271192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fltMgr.sys
2014-04-29 16:59 - 2014-02-22 16:04 - 01155392 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpmde.dll
2014-04-29 16:59 - 2014-02-22 16:04 - 01011280 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetsrc.dll
2014-04-29 16:59 - 2014-02-22 16:04 - 00869720 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys
2014-04-29 16:59 - 2014-02-22 16:04 - 00707048 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll
2014-04-29 16:59 - 2014-02-22 16:04 - 00650736 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetcore.dll
2014-04-29 16:59 - 2014-02-22 16:04 - 00518552 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf.dll
2014-04-29 16:59 - 2014-02-22 16:04 - 00317584 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvproc.dll
2014-04-29 16:59 - 2014-02-22 16:04 - 00296448 _____ (Microsoft Corporation) C:\WINDOWS\system32\MMDevAPI.dll
2014-04-29 16:59 - 2014-02-22 16:04 - 00285144 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFCaptureEngine.dll
2014-04-29 16:59 - 2014-02-22 13:28 - 02428928 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExplorerFrame.dll
2014-04-29 16:59 - 2014-02-22 13:23 - 00903168 _____ (Microsoft Corporation) C:\WINDOWS\system32\uxtheme.dll
2014-04-29 16:59 - 2014-02-22 13:22 - 00219648 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ks.sys
2014-04-29 16:59 - 2014-02-22 13:19 - 00205312 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\portcls.sys
2014-04-29 16:59 - 2014-02-22 13:16 - 00617472 _____ (Microsoft Corporation) C:\WINDOWS\system32\apphelp.dll
2014-04-29 16:59 - 2014-02-22 13:16 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\WofUtil.dll
2014-04-29 16:59 - 2014-02-22 13:11 - 00160768 _____ (Microsoft Corporation) C:\WINDOWS\system32\aelupsvc.dll
2014-04-29 16:59 - 2014-02-22 13:06 - 00148992 _____ (Microsoft Corporation) C:\WINDOWS\system32\slc.dll
2014-04-29 16:59 - 2014-02-22 13:05 - 00095232 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppc.dll
2014-04-29 16:59 - 2014-02-22 12:58 - 00455168 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2014-04-29 16:59 - 2014-02-22 12:57 - 00156672 _____ (Microsoft Corporation) C:\WINDOWS\system32\scrrun.dll
2014-04-29 16:59 - 2014-02-22 12:40 - 00479744 _____ (Microsoft Corporation) C:\WINDOWS\system32\recimg.exe
2014-04-29 16:59 - 2014-02-22 12:14 - 02811392 _____ (Microsoft Corporation) C:\WINDOWS\system32\themeui.dll
2014-04-29 16:59 - 2014-02-22 12:14 - 00575488 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2014-04-29 16:59 - 2014-02-22 12:09 - 00027648 _____ (Microsoft Corporation) C:\WINDOWS\system32\dfp.exe
2014-04-29 16:59 - 2014-02-22 12:03 - 00779264 _____ (Microsoft Corporation) C:\WINDOWS\system32\osk.exe
2014-04-29 16:59 - 2014-02-22 12:02 - 00282112 _____ (Microsoft Corporation) C:\WINDOWS\system32\DfpCommon.dll
2014-04-29 16:59 - 2014-02-22 12:02 - 00258560 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchProtocolHost.exe
2014-04-29 16:59 - 2014-02-22 12:01 - 00832512 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActionCenter.dll
2014-04-29 16:59 - 2014-02-22 12:01 - 00726528 _____ (Microsoft Corporation) C:\WINDOWS\system32\nettrace.dll
2014-04-29 16:59 - 2014-02-22 12:01 - 00367616 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssph.dll
2014-04-29 16:59 - 2014-02-22 12:00 - 00217600 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssphtb.dll
2014-04-29 16:59 - 2014-02-22 11:52 - 00926720 _____ (Microsoft Corporation) C:\WINDOWS\system32\RecoveryDrive.exe
2014-04-29 16:59 - 2014-02-22 11:46 - 00528896 _____ (Microsoft Corporation) C:\WINDOWS\system32\comdlg32.dll
2014-04-29 16:59 - 2014-02-22 11:44 - 00675328 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssvp.dll
2014-04-29 16:59 - 2014-02-22 11:37 - 02220032 _____ (Microsoft Corporation) C:\WINDOWS\system32\Wpc.dll
2014-04-29 16:59 - 2014-02-22 11:36 - 01392640 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMPDMC.exe
2014-04-29 16:59 - 2014-02-22 11:33 - 01882624 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebSync.dll
2014-04-29 16:59 - 2014-02-22 11:32 - 01162752 _____ (Microsoft Corporation) C:\WINDOWS\system32\usercpl.dll
2014-04-29 16:59 - 2014-02-22 11:24 - 00604672 _____ (Microsoft Corporation) C:\WINDOWS\system32\samsrv.dll
2014-04-29 16:59 - 2014-02-22 11:23 - 00344576 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll
2014-04-29 16:59 - 2014-02-22 11:23 - 00103936 _____ (Microsoft Corporation) C:\WINDOWS\system32\psmsrv.dll
2014-04-29 16:59 - 2014-02-22 11:21 - 00459264 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe
2014-04-29 16:59 - 2014-02-22 11:20 - 00428032 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimserv.exe
2014-04-29 16:59 - 2014-02-22 11:19 - 00090112 _____ (Microsoft Corporation) C:\WINDOWS\system32\wersvc.dll
2014-04-29 16:59 - 2014-02-22 11:16 - 00593408 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcss.dll
2014-04-29 16:59 - 2014-02-22 11:16 - 00291328 _____ (Microsoft Corporation) C:\WINDOWS\system32\conhost.exe
2014-04-29 16:59 - 2014-02-22 11:15 - 00211968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Dism.exe
2014-04-29 16:59 - 2014-02-22 11:14 - 00752640 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdh.dll
2014-04-29 16:59 - 2014-02-22 11:13 - 00348672 _____ (Microsoft Corporation) C:\WINDOWS\system32\energy.dll
2014-04-29 16:59 - 2014-02-22 11:13 - 00113152 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmredir.dll
2014-04-29 16:59 - 2014-02-22 11:12 - 00459776 _____ (Microsoft Corporation) C:\WINDOWS\system32\DismApi.dll
2014-04-29 16:59 - 2014-02-22 11:10 - 00300032 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmsvc.dll
2014-04-29 16:59 - 2014-02-22 11:08 - 00207872 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll
2014-04-29 16:59 - 2014-02-22 11:07 - 00613376 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsm.dll
2014-04-29 16:59 - 2014-02-22 11:07 - 00551424 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimgapi.dll
2014-04-29 16:59 - 2014-02-22 11:06 - 01035264 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll
2014-04-29 16:59 - 2014-02-22 11:06 - 00434176 _____ (Microsoft Corporation) C:\WINDOWS\system32\msTextPrediction.dll
2014-04-29 16:59 - 2014-02-22 11:00 - 00418304 _____ (Microsoft Corporation) C:\WINDOWS\system32\StructuredQuery.dll
2014-04-29 16:59 - 2014-02-22 10:59 - 01403392 _____ (Microsoft Corporation) C:\WINDOWS\system32\storagewmi.dll
2014-04-29 16:59 - 2014-02-22 10:59 - 00553472 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.OnlineId.dll
2014-04-29 16:59 - 2014-02-22 10:58 - 00479232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpncore.dll
2014-04-29 16:59 - 2014-02-22 10:57 - 00829440 _____ (Microsoft Corporation) C:\WINDOWS\system32\perftrack.dll
2014-04-29 16:59 - 2014-02-22 10:56 - 00353280 _____ (Microsoft Corporation) C:\WINDOWS\system32\swprv.dll
2014-04-29 16:59 - 2014-02-22 10:51 - 01258496 _____ (Microsoft Corporation) C:\WINDOWS\system32\RacEngn.dll
2014-04-29 16:59 - 2014-02-22 10:45 - 00612352 _____ (Microsoft Corporation) C:\WINDOWS\system32\uDWM.dll
2014-04-29 16:59 - 2014-02-22 10:45 - 00169472 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSClient.dll
2014-04-29 16:59 - 2014-02-22 10:43 - 00644608 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntshrui.dll
2014-04-29 16:59 - 2014-02-22 10:43 - 00117760 _____ (Microsoft Corporation) C:\WINDOWS\system32\thumbcache.dll
2014-04-29 16:59 - 2014-02-22 10:42 - 00709120 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctfuimanager.dll
2014-04-29 16:59 - 2014-02-22 10:42 - 00448000 _____ (Microsoft Corporation) C:\WINDOWS\system32\VAN.dll
2014-04-29 16:59 - 2014-02-22 10:39 - 00556032 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.dll
2014-04-29 16:59 - 2014-02-22 10:37 - 00658432 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchIndexer.exe
2014-04-29 16:59 - 2014-02-22 10:34 - 00288768 _____ (Microsoft Corporation) C:\WINDOWS\system32\stobject.dll
2014-04-29 16:59 - 2014-02-22 10:29 - 01631232 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlowUI.dll
2014-04-29 16:59 - 2014-02-22 10:29 - 00191488 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputSwitch.dll
2014-04-29 16:59 - 2014-02-22 10:28 - 00557568 _____ (Microsoft Corporation) C:\WINDOWS\system32\pnidui.dll
2014-04-29 16:59 - 2014-02-22 10:21 - 00600576 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll
2014-04-29 16:59 - 2014-02-22 10:21 - 00518144 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmIndexer.dll
2014-04-29 16:59 - 2014-02-22 10:20 - 02302976 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpccpl.dll
2014-04-29 16:59 - 2014-02-22 10:17 - 00459264 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSync.dll
2014-04-29 16:59 - 2014-02-22 10:00 - 00514560 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe
2014-04-29 16:59 - 2014-02-22 06:35 - 00262335 _____ () C:\WINDOWS\system32\dfpinc.dat
2014-04-29 16:59 - 2014-02-08 03:08 - 00081975 _____ () C:\WINDOWS\system32\systemsf.ebd
2014-04-29 16:59 - 2014-02-08 03:08 - 00024518 _____ () C:\WINDOWS\system32\systemsflm.ebd
2014-04-29 16:59 - 2014-02-02 15:33 - 00230808 _____ (Microsoft Corporation) C:\WINDOWS\system32\wintrust.dll
2014-04-29 16:59 - 2014-01-29 09:44 - 01369736 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecs.dll
2014-04-29 16:59 - 2014-01-29 08:41 - 00218624 _____ (Microsoft Corporation) C:\WINDOWS\system32\rascustom.dll
2014-04-29 16:59 - 2014-01-29 08:25 - 00197632 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.Vpn.dll
2014-04-29 16:59 - 2014-01-08 02:33 - 00552632 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll
2014-04-29 16:59 - 2013-12-10 08:10 - 00406528 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppReadiness.dll
2014-04-29 16:59 - 2013-12-04 15:53 - 00473600 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxPackaging.dll
2014-04-29 16:58 - 2014-02-22 16:52 - 00251504 _____ (Microsoft Corporation) C:\WINDOWS\system32\powrprof.dll
2014-04-29 16:58 - 2014-02-22 16:52 - 00171936 _____ (Microsoft Corporation) C:\WINDOWS\system32\systemreset.exe
2014-04-29 16:58 - 2014-02-22 16:52 - 00063592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpfve.sys
2014-04-29 16:58 - 2014-02-22 16:51 - 00140456 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscapi.dll
2014-04-29 16:58 - 2014-02-22 16:51 - 00066624 _____ (Microsoft Corporation) C:\WINDOWS\system32\taskhostex.exe
2014-04-29 16:58 - 2014-02-22 16:51 - 00065056 _____ (Microsoft Corporation) C:\WINDOWS\system32\taskhost.exe
2014-04-29 16:58 - 2014-02-22 16:42 - 00232896 _____ (Microsoft Corporation) C:\WINDOWS\system32\sqmapi.dll
2014-04-29 16:58 - 2014-02-22 16:42 - 00146672 _____ (Microsoft Corporation) C:\WINDOWS\system32\imm32.dll
2014-04-29 16:58 - 2014-02-22 16:42 - 00137344 _____ (Microsoft Corporation) C:\WINDOWS\system32\wermgr.exe
2014-04-29 16:58 - 2014-02-22 16:42 - 00098072 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmapi.dll
2014-04-29 16:58 - 2014-02-22 16:41 - 00033056 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFaultSecure.exe
2014-04-29 16:58 - 2014-02-22 16:40 - 00261464 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBXHCI.SYS
2014-04-29 16:58 - 2014-02-22 16:40 - 00163672 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\UCX01000.SYS
2014-04-29 16:58 - 2014-02-22 16:40 - 00122712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msgpioclx.sys
2014-04-29 16:58 - 2014-02-22 16:40 - 00064344 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdstor.sys
2014-04-29 16:58 - 2014-02-22 16:38 - 00506120 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinTypes.dll
2014-04-29 16:58 - 2014-02-22 16:38 - 00136320 _____ (Microsoft Corporation) C:\WINDOWS\system32\AuthHost.exe
2014-04-29 16:58 - 2014-02-22 16:38 - 00125976 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcrypt.dll
2014-04-29 16:58 - 2014-02-22 16:38 - 00107352 _____ (Microsoft Corporation) C:\WINDOWS\system32\consent.exe
2014-04-29 16:58 - 2014-02-22 16:38 - 00078000 _____ (Microsoft Corporation) C:\WINDOWS\system32\easinvoker.exe
2014-04-29 16:58 - 2014-02-22 16:26 - 00130904 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpsd.sys
2014-04-29 16:58 - 2014-02-22 16:26 - 00063832 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fileinfo.sys
2014-04-29 16:58 - 2014-02-22 16:26 - 00030552 _____ (Microsoft Corporation) C:\WINDOWS\system32\ploptin.dll
2014-04-29 16:58 - 2014-02-22 16:26 - 00025944 _____ (Microsoft Corporation) C:\WINDOWS\system32\SysResetErr.exe
2014-04-29 16:58 - 2014-02-22 16:25 - 00180240 _____ (Microsoft Corporation) C:\WINDOWS\system32\SndVol.exe
2014-04-29 16:58 - 2014-02-22 16:18 - 00224664 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlows.exe
2014-04-29 16:58 - 2014-02-22 16:18 - 00089848 _____ (Microsoft Corporation) C:\WINDOWS\system32\RestoreOptIn.exe
2014-04-29 16:58 - 2014-02-22 16:18 - 00046000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wpcfltr.sys
2014-04-29 16:58 - 2014-02-22 16:18 - 00041320 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudNotifications.exe
2014-04-29 16:58 - 2014-02-22 16:18 - 00029912 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserAccountBroker.exe
2014-04-29 16:58 - 2014-02-22 16:10 - 00105896 _____ (Microsoft Corporation) C:\WINDOWS\system32\smss.exe
2014-04-29 16:58 - 2014-02-22 16:08 - 00079496 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcd.dll
2014-04-29 16:58 - 2014-02-22 13:28 - 00245248 _____ (Microsoft Corporation) C:\WINDOWS\system32\microsoft-windows-system-events.dll
2014-04-29 16:58 - 2014-02-22 13:28 - 00128512 _____ (Microsoft Corporation) C:\WINDOWS\system32\microsoft-windows-kernel-power-events.dll
2014-04-29 16:58 - 2014-02-22 13:24 - 00800256 _____ (Microsoft Corporation) C:\WINDOWS\system32\autoconv.exe
2014-04-29 16:58 - 2014-02-22 13:24 - 00792576 _____ (Microsoft Corporation) C:\WINDOWS\system32\autochk.exe
2014-04-29 16:58 - 2014-02-22 13:24 - 00780288 _____ (Microsoft Corporation) C:\WINDOWS\system32\autofmt.exe
2014-04-29 16:58 - 2014-02-22 13:22 - 00097280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\luafv.sys
2014-04-29 16:58 - 2014-02-22 13:22 - 00025600 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BasicRender.sys
2014-04-29 16:58 - 2014-02-22 13:18 - 00640000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\PEAuth.sys
2014-04-29 16:58 - 2014-02-22 13:16 - 00055808 _____ (Microsoft Corporation) C:\WINDOWS\system32\setbcdlocale.dll
2014-04-29 16:58 - 2014-02-22 13:16 - 00012288 _____ (Microsoft Corporation) C:\WINDOWS\system32\clrhost.dll
2014-04-29 16:58 - 2014-02-22 13:15 - 00088576 _____ (Microsoft Corporation) C:\WINDOWS\system32\appinfo.dll
2014-04-29 16:58 - 2014-02-22 13:12 - 00310272 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcdedit.exe
2014-04-29 16:58 - 2014-02-22 13:11 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\spbcd.dll
2014-04-29 16:58 - 2014-02-22 13:04 - 00192512 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsAnytimeUpgrade.exe
2014-04-29 16:58 - 2014-02-22 13:01 - 00112640 _____ (Microsoft Corporation) C:\WINDOWS\system32\fsutil.exe
2014-04-29 16:58 - 2014-02-22 12:58 - 00207872 _____ (Microsoft Corporation) C:\WINDOWS\system32\vdsbas.dll
2014-04-29 16:58 - 2014-02-22 12:58 - 00136192 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcdboot.exe
2014-04-29 16:58 - 2014-02-22 12:57 - 00165376 _____ (Microsoft Corporation) C:\WINDOWS\system32\scrobj.dll
2014-04-29 16:58 - 2014-02-22 12:54 - 00035024 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockScreenContentServer.exe
2014-04-29 16:58 - 2014-02-22 12:53 - 00195584 _____ (Microsoft Corporation) C:\WINDOWS\system32\PkgMgr.exe
2014-04-29 16:58 - 2014-02-22 12:47 - 00207872 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmdskmgr.dll
2014-04-29 16:58 - 2014-02-22 12:41 - 00122880 _____ (Microsoft Corporation) C:\WINDOWS\system32\dot3mm.dll
2014-04-29 16:58 - 2014-02-22 12:40 - 00124928 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppnp.dll
2014-04-29 16:58 - 2014-02-22 12:37 - 00084480 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll
2014-04-29 16:58 - 2014-02-22 12:33 - 00402944 _____ (Microsoft Corporation) C:\WINDOWS\system32\zipfldr.dll
2014-04-29 16:58 - 2014-02-22 12:33 - 00101376 _____ (Microsoft Corporation) C:\WINDOWS\system32\DAMM.dll
2014-04-29 16:58 - 2014-02-22 12:30 - 00213504 _____ (Microsoft Corporation) C:\WINDOWS\system32\cleanmgr.exe
2014-04-29 16:58 - 2014-02-22 12:25 - 00059392 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorageContextHandler.dll
2014-04-29 16:58 - 2014-02-22 12:24 - 00448512 _____ (Microsoft Corporation) C:\WINDOWS\system32\RASMM.dll
2014-04-29 16:58 - 2014-02-22 12:21 - 00104960 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockScreenContent.dll
2014-04-29 16:58 - 2014-02-22 12:21 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\system32\srclient.dll
2014-04-29 16:58 - 2014-02-22 12:21 - 00045568 _____ (Microsoft Corporation) C:\WINDOWS\system32\acppage.dll
2014-04-29 16:58 - 2014-02-22 12:17 - 00367616 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtmsft.dll
2014-04-29 16:58 - 2014-02-22 12:16 - 00389120 _____ (Microsoft Corporation) C:\WINDOWS\system32\srcore.dll
2014-04-29 16:58 - 2014-02-22 12:16 - 00308224 _____ (Microsoft Corporation) C:\WINDOWS\system32\srchadmin.dll
2014-04-29 16:58 - 2014-02-22 12:16 - 00151040 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmvdsitf.dll
2014-04-29 16:58 - 2014-02-22 12:14 - 02165760 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncCenter.dll
2014-04-29 16:58 - 2014-02-22 12:13 - 00307200 _____ (Microsoft Corporation) C:\WINDOWS\system32\newdev.dll
2014-04-29 16:58 - 2014-02-22 12:12 - 00552960 _____ (Microsoft Corporation) C:\WINDOWS\system32\cscui.dll
2014-04-29 16:58 - 2014-02-22 12:12 - 00352768 _____ (Microsoft Corporation) C:\WINDOWS\system32\spwizeng.dll
2014-04-29 16:58 - 2014-02-22 12:09 - 00032256 _____ (Microsoft Corporation) C:\WINDOWS\system32\JavaScriptCollectionAgent.dll
2014-04-29 16:58 - 2014-02-22 12:04 - 00098304 _____ (Microsoft Corporation) C:\WINDOWS\system32\netid.dll
2014-04-29 16:58 - 2014-02-22 11:58 - 00090112 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsAnytimeUpgradeResults.exe
2014-04-29 16:58 - 2014-02-22 11:55 - 00244224 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll
2014-04-29 16:58 - 2014-02-22 11:54 - 00245248 _____ (Microsoft Corporation) C:\WINDOWS\system32\rstrui.exe
2014-04-29 16:58 - 2014-02-22 11:54 - 00225280 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2014-04-29 16:58 - 2014-02-22 11:52 - 00342016 _____ (Microsoft Corporation) C:\WINDOWS\system32\sharemediacpl.dll
2014-04-29 16:58 - 2014-02-22 11:44 - 00316928 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhcfg.dll
2014-04-29 16:58 - 2014-02-22 11:43 - 01294848 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbengine.exe
2014-04-29 16:58 - 2014-02-22 11:43 - 00601088 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsAnytimeUpgradeui.exe
2014-04-29 16:58 - 2014-02-22 11:42 - 00869888 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdclt.exe
2014-04-29 16:58 - 2014-02-22 11:42 - 00333824 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsqmcons.exe
2014-04-29 16:58 - 2014-02-22 11:40 - 02537472 _____ (Microsoft Corporation) C:\WINDOWS\system32\gameux.dll
2014-04-29 16:58 - 2014-02-22 11:40 - 01095680 _____ (Microsoft Corporation) C:\WINDOWS\system32\werconcpl.dll
2014-04-29 16:58 - 2014-02-22 11:39 - 00667136 _____ (Microsoft Corporation) C:\WINDOWS\system32\PurchaseWindowsLicense.dll
2014-04-29 16:58 - 2014-02-22 11:36 - 00835584 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasgcw.dll
2014-04-29 16:58 - 2014-02-22 11:36 - 00391680 _____ (Microsoft Corporation) C:\WINDOWS\system32\WLanConn.dll
2014-04-29 16:58 - 2014-02-22 11:31 - 00242688 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmregistration.dll
2014-04-29 16:58 - 2014-02-22 11:29 - 00062976 _____ (Microsoft Corporation) C:\WINDOWS\system32\samlib.dll
2014-04-29 16:58 - 2014-02-22 11:28 - 00176128 _____ (Microsoft Corporation) C:\WINDOWS\system32\authz.dll
2014-04-29 16:58 - 2014-02-22 11:27 - 00484864 _____ (Microsoft Corporation) C:\WINDOWS\system32\untfs.dll
2014-04-29 16:58 - 2014-02-22 11:25 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\system32\winbrand.dll
2014-04-29 16:58 - 2014-02-22 11:23 - 00116736 _____ (Microsoft Corporation) C:\WINDOWS\system32\MicrosoftAccountTokenProvider.dll
2014-04-29 16:58 - 2014-02-22 11:21 - 00145408 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsrv.dll
2014-04-29 16:58 - 2014-02-22 11:20 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\system32\WiFiDisplay.dll
2014-04-29 16:58 - 2014-02-22 11:19 - 00059392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.Sockets.PushEnabledApplication.dll
2014-04-29 16:58 - 2014-02-22 11:10 - 00117248 _____ (Microsoft Corporation) C:\WINDOWS\system32\BootMenuUX.dll
2014-04-29 16:58 - 2014-02-22 11:08 - 00357888 _____ (Microsoft Corporation) C:\WINDOWS\system32\defragsvc.dll
2014-04-29 16:58 - 2014-02-22 11:08 - 00306688 _____ (Microsoft Corporation) C:\WINDOWS\system32\das.dll
2014-04-29 16:58 - 2014-02-22 11:08 - 00155136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.HumanInterfaceDevice.dll
2014-04-29 16:58 - 2014-02-22 11:07 - 00109568 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscinterop.dll
2014-04-29 16:58 - 2014-02-22 11:06 - 00251904 _____ (Microsoft Corporation) C:\WINDOWS\system32\MbaeApiPublic.dll
2014-04-29 16:58 - 2014-02-22 11:03 - 00089600 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmcsp.dll
2014-04-29 16:58 - 2014-02-22 10:56 - 00084480 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwm.exe
2014-04-29 16:58 - 2014-02-22 10:55 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\system32\slpts.dll
2014-04-29 16:58 - 2014-02-22 10:54 - 00137216 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToManager.dll
2014-04-29 16:58 - 2014-02-22 10:54 - 00045568 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxSysprep.dll
2014-04-29 16:58 - 2014-02-22 10:52 - 00969728 _____ (Microsoft Corporation) C:\WINDOWS\system32\VSSVC.exe
2014-04-29 16:58 - 2014-02-22 10:48 - 00506880 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdbui.dll
2014-04-29 16:58 - 2014-02-22 10:48 - 00047104 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssprxy.dll
2014-04-29 16:58 - 2014-02-22 10:47 - 00185856 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidcredprov.dll
2014-04-29 16:58 - 2014-02-22 10:47 - 00045056 _____ (Microsoft Corporation) C:\WINDOWS\system32\AepRoam.dll
2014-04-29 16:58 - 2014-02-22 10:45 - 00164352 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFilterHost.exe
2014-04-29 16:58 - 2014-02-22 10:45 - 00098304 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscsvc.dll
2014-04-29 16:58 - 2014-02-22 10:44 - 00154624 _____ (Microsoft Corporation) C:\WINDOWS\system32\netplwiz.dll
2014-04-29 16:58 - 2014-02-22 10:43 - 01108480 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanmm.dll
2014-04-29 16:58 - 2014-02-22 10:43 - 00260608 _____ (Microsoft Corporation) C:\WINDOWS\system32\BioCredProv.dll
2014-04-29 16:58 - 2014-02-22 10:42 - 00943104 _____ (Microsoft Corporation) C:\WINDOWS\system32\WlanMM.dll
2014-04-29 16:58 - 2014-02-22 10:42 - 00078848 _____ (Microsoft Corporation) C:\WINDOWS\system32\AltTab.dll
2014-04-29 16:58 - 2014-02-22 10:41 - 03278848 _____ (Microsoft Corporation) C:\WINDOWS\system32\bootux.dll
2014-04-29 16:58 - 2014-02-22 10:39 - 00356352 _____ (Microsoft Corporation) C:\WINDOWS\system32\taskeng.exe
2014-04-29 16:58 - 2014-02-22 10:39 - 00321536 _____ (Microsoft Corporation) C:\WINDOWS\system32\provsvc.dll
2014-04-29 16:58 - 2014-02-22 10:38 - 00470016 _____ (Microsoft Corporation) C:\WINDOWS\system32\timedate.cpl
2014-04-29 16:58 - 2014-02-22 10:38 - 00121856 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveShell.dll
2014-04-29 16:58 - 2014-02-22 10:38 - 00062464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Renewal.dll
2014-04-29 16:58 - 2014-02-22 10:33 - 00308224 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhcpl.dll
2014-04-29 16:58 - 2014-02-22 10:25 - 00352256 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanconn.dll
2014-04-29 16:58 - 2014-02-22 10:23 - 00165888 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnprv.dll
2014-04-29 16:58 - 2014-02-22 10:19 - 00099840 _____ (Microsoft Corporation) C:\WINDOWS\system32\AuthBroker.dll
2014-04-29 16:58 - 2014-02-22 09:56 - 00519680 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepdu.dll
2014-04-29 16:58 - 2014-02-22 09:54 - 00214016 _____ (Microsoft Corporation) C:\WINDOWS\system32\SndVolSSO.dll
2014-04-29 16:58 - 2014-02-01 08:00 - 00002255 _____ () C:\WINDOWS\system32\WimBootCompress.ini
2014-04-29 16:58 - 2014-01-31 13:11 - 00144384 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpchttp.dll
2014-04-29 16:58 - 2014-01-31 11:35 - 03085824 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcore.dll
2014-04-29 16:58 - 2014-01-31 11:10 - 00080896 _____ (Microsoft Corporation) C:\WINDOWS\system32\dafBth.dll
2014-04-29 16:58 - 2014-01-31 11:08 - 00507392 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSDApi.dll
2014-04-29 16:58 - 2014-01-31 11:04 - 00409600 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.Connectivity.dll
2014-04-29 16:58 - 2014-01-31 10:24 - 01057792 _____ (Microsoft Corporation) C:\WINDOWS\system32\printui.dll
2014-04-29 16:58 - 2014-01-29 09:43 - 00411992 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vhdmp.sys
2014-04-29 16:58 - 2014-01-29 09:38 - 00735576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\http.sys
2014-04-29 16:58 - 2014-01-29 08:25 - 00457216 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasmans.dll
2014-04-29 16:58 - 2014-01-27 19:25 - 00667136 _____ (Microsoft Corporation) C:\WINDOWS\system32\WorkfoldersControl.dll
2014-04-29 16:58 - 2014-01-27 18:47 - 01165312 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpsvc.dll
2014-04-29 16:58 - 2014-01-22 07:50 - 00147968 _____ (Microsoft Corporation) C:\WINDOWS\system32\deviceaccess.dll
2014-04-29 16:58 - 2014-01-17 19:04 - 00292864 _____ (Microsoft Corporation) C:\WINDOWS\system32\ninput.dll
2014-04-29 16:58 - 2013-12-04 16:19 - 00439808 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Bluetooth.dll
2014-04-29 16:58 - 2013-11-27 10:56 - 00167936 _____ (Microsoft Corporation) C:\WINDOWS\system32\netiohlp.dll
2014-04-29 16:58 - 2013-11-23 10:37 - 00036696 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\intelpep.sys
2014-04-29 16:57 - 2014-02-22 13:24 - 00109056 _____ (Microsoft Corporation) C:\WINDOWS\system32\SSShim.dll
2014-04-29 16:57 - 2014-02-22 13:24 - 00005632 ____H (Microsoft Corporation) C:\WINDOWS\system32\ext-ms-win-session-winsta-l1-1-0.dll
2014-04-29 16:57 - 2014-02-22 13:24 - 00003584 ____H (Microsoft Corporation) C:\WINDOWS\system32\ext-ms-win-kernel32-package-l1-1-1.dll
2014-04-29 16:57 - 2014-02-22 13:22 - 00040448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\watchdog.sys
2014-04-29 16:57 - 2014-02-22 13:13 - 00047104 _____ (Microsoft Corporation) C:\WINDOWS\system32\offreg.dll
2014-04-29 16:57 - 2014-02-22 13:09 - 00023040 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgentc.exe
2014-04-29 16:57 - 2014-02-22 13:09 - 00022528 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll
2014-04-29 16:57 - 2014-02-22 13:07 - 00050176 _____ (Microsoft Corporation) C:\WINDOWS\system32\UXInit.dll
2014-04-29 16:57 - 2014-02-22 13:01 - 00194048 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActionQueue.dll
2014-04-29 16:57 - 2014-02-22 12:59 - 00163328 _____ (Microsoft Corporation) C:\WINDOWS\system32\ocsetapi.dll
2014-04-29 16:57 - 2014-02-22 12:59 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll
2014-04-29 16:57 - 2014-02-22 12:56 - 00057344 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhevents.dll
2014-04-29 16:57 - 2014-02-22 12:50 - 00181248 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhengine.dll
2014-04-29 16:57 - 2014-02-22 12:50 - 00136192 _____ (Microsoft Corporation) C:\WINDOWS\system32\diskpart.exe
2014-04-29 16:57 - 2014-02-22 12:47 - 00106496 _____ (Microsoft Corporation) C:\WINDOWS\system32\setupugc.exe
2014-04-29 16:57 - 2014-02-22 12:46 - 00111104 _____ (Microsoft Corporation) C:\WINDOWS\system32\vdsutil.dll
2014-04-29 16:57 - 2014-02-22 12:43 - 00157696 _____ (Microsoft Corporation) C:\WINDOWS\system32\RelPost.exe
2014-04-29 16:57 - 2014-02-22 12:38 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\easwrt.dll
2014-04-29 16:57 - 2014-02-22 12:33 - 00062976 _____ (Microsoft Corporation) C:\WINDOWS\system32\BulkOperationHost.exe
2014-04-29 16:57 - 2014-02-22 12:32 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\cscript.exe
2014-04-29 16:57 - 2014-02-22 12:27 - 00625664 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpksetup.exe
2014-04-29 16:57 - 2014-02-22 12:26 - 00059392 _____ (Microsoft Corporation) C:\WINDOWS\system32\wercplsupport.dll
2014-04-29 16:57 - 2014-02-22 12:25 - 00101376 _____ (Microsoft Corporation) C:\WINDOWS\system32\scavengeui.dll
2014-04-29 16:57 - 2014-02-22 12:23 - 00107008 _____ (Microsoft Corporation) C:\WINDOWS\system32\pnpclean.dll
2014-04-29 16:57 - 2014-02-22 12:23 - 00022016 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockScreenContentHost.dll
2014-04-29 16:57 - 2014-02-22 12:21 - 00561664 _____ (Microsoft Corporation) C:\WINDOWS\system32\dfrgui.exe
2014-04-29 16:57 - 2014-02-22 12:17 - 00570368 _____ (Microsoft Corporation) C:\WINDOWS\system32\vds.exe
2014-04-29 16:57 - 2014-02-22 12:17 - 00159232 _____ (Microsoft Corporation) C:\WINDOWS\system32\werui.dll
2014-04-29 16:57 - 2014-02-22 12:17 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\system32\DAConn.dll
2014-04-29 16:57 - 2014-02-22 12:16 - 00592896 _____ (Microsoft Corporation) C:\WINDOWS\system32\sud.dll
2014-04-29 16:57 - 2014-02-22 12:15 - 00235008 _____ (Microsoft Corporation) C:\WINDOWS\system32\srrstr.dll
2014-04-29 16:57 - 2014-02-22 12:15 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\system32\SrTasks.exe
2014-04-29 16:57 - 2014-02-22 12:09 - 00097280 _____ (Microsoft Corporation) C:\WINDOWS\system32\migisol.dll
2014-04-29 16:57 - 2014-02-22 12:08 - 00244224 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbadmin.exe
2014-04-29 16:57 - 2014-02-22 12:03 - 02544128 _____ (Microsoft Corporation) C:\WINDOWS\system32\themecpl.dll
2014-04-29 16:57 - 2014-02-22 12:00 - 00159744 _____ (Microsoft Corporation) C:\WINDOWS\system32\aitagent.exe
2014-04-29 16:57 - 2014-02-22 11:59 - 00313856 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2014-04-29 16:57 - 2014-02-22 11:48 - 01136128 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscui.cpl
2014-04-29 16:57 - 2014-02-22 11:41 - 00492032 _____ (Microsoft Corporation) C:\WINDOWS\system32\PrintDialogs.dll
2014-04-29 16:57 - 2014-02-22 11:28 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\system32\deviceassociation.dll
2014-04-29 16:57 - 2014-02-22 11:27 - 00202240 _____ (Microsoft Corporation) C:\WINDOWS\system32\GlobCollationHost.dll
2014-04-29 16:57 - 2014-02-22 11:26 - 00067584 _____ (Microsoft Corporation) C:\WINDOWS\system32\powercfg.exe
2014-04-29 16:57 - 2014-02-22 11:23 - 00256000 _____ (Microsoft Corporation) C:\WINDOWS\system32\wincorlib.dll
2014-04-29 16:57 - 2014-02-22 11:22 - 00270336 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsku.dll
2014-04-29 16:57 - 2014-02-22 11:21 - 00314368 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbiosrvc.dll
2014-04-29 16:57 - 2014-02-22 11:19 - 00146944 _____ (Microsoft Corporation) C:\WINDOWS\system32\korwbrkr.dll
2014-04-29 16:57 - 2014-02-22 11:17 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\dasHost.exe
2014-04-29 16:57 - 2014-02-22 11:16 - 00017920 _____ (Microsoft Corporation) C:\WINDOWS\system32\sxshared.dll
2014-04-29 16:57 - 2014-02-22 11:15 - 00178176 _____ (Microsoft Corp.) C:\WINDOWS\system32\Defrag.exe
2014-04-29 16:57 - 2014-02-22 11:09 - 00208384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2014-04-29 16:57 - 2014-02-22 11:02 - 00559104 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserLanguagesCpl.dll
2014-04-29 16:57 - 2014-02-22 10:58 - 00544768 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidcli.dll
2014-04-29 16:57 - 2014-02-22 10:48 - 00051712 _____ (Microsoft Corporation) C:\WINDOWS\system32\ConfigureExpandedStorage.dll
2014-04-29 16:57 - 2014-02-22 10:48 - 00016384 _____ (Microsoft Corporation) C:\WINDOWS\system32\energytask.dll
2014-04-29 16:57 - 2014-02-22 10:48 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\system32\msshooks.dll
2014-04-29 16:57 - 2014-02-22 10:43 - 00390144 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.Handlers.dll
2014-04-29 16:57 - 2014-02-22 10:40 - 00203776 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToDevice.dll
2014-04-29 16:57 - 2014-02-22 10:39 - 00193024 _____ (Microsoft Corporation) C:\WINDOWS\system32\bthprops.cpl
2014-04-29 16:57 - 2014-02-22 10:33 - 00130560 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingMonitor.dll
2014-04-29 16:57 - 2014-02-22 10:24 - 00082432 _____ (Microsoft Corporation) C:\WINDOWS\system32\IdCtrls.dll
2014-04-29 16:57 - 2014-02-22 10:20 - 00027648 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncPolicy.dll
2014-04-29 16:57 - 2014-02-22 10:17 - 00109568 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudStorageWizard.exe
2014-04-29 16:57 - 2014-02-22 06:38 - 00000369 _____ () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk
2014-04-29 16:57 - 2014-02-22 06:38 - 00000369 _____ () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk
2014-04-29 16:57 - 2014-02-22 06:38 - 00000369 _____ () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk
2014-04-29 16:57 - 2014-02-22 06:38 - 00000369 _____ () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk
2014-04-29 16:57 - 2014-02-08 03:08 - 00100197 _____ () C:\WINDOWS\system32\RacRules.xml
2014-04-29 16:57 - 2014-02-01 08:00 - 00007762 _____ () C:\WINDOWS\system32\connectedsearch-suggestions.searchconnector-ms
2014-04-29 16:57 - 2014-02-01 08:00 - 00007130 _____ () C:\WINDOWS\system32\connectedsearch-zeroinput.searchconnector-ms
2014-04-29 16:57 - 2013-11-27 11:20 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\finger.exe
2014-04-29 16:57 - 2013-11-08 05:47 - 00370176 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv
2014-04-29 16:56 - 2014-02-22 13:25 - 00027648 _____ (Microsoft Corporation) C:\WINDOWS\system32\f3ahvoas.dll
2014-04-29 16:56 - 2014-02-22 13:25 - 00008192 ____H (Microsoft Corporation) C:\WINDOWS\system32\ext-ms-win-ntuser-private-l1-1-1.dll
2014-04-29 16:56 - 2014-02-22 13:25 - 00003584 ____H (Microsoft Corporation) C:\WINDOWS\system32\ext-ms-win-ntuser-private-l1-1-0.dll
2014-04-29 16:56 - 2014-02-22 13:24 - 00003584 ____H (Microsoft Corporation) C:\WINDOWS\system32\ext-ms-win-networking-wcmapi-l1-1-0.dll
2014-04-29 16:56 - 2014-02-22 13:23 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\system32\workerdd.dll
2014-04-29 16:56 - 2014-02-22 12:31 - 00438784 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2014-04-29 16:56 - 2014-02-22 11:53 - 00127488 _____ (Microsoft Corporation) C:\WINDOWS\system32\occache.dll
2014-04-29 16:56 - 2014-02-22 11:26 - 00047104 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveskybackup.dll
2014-04-29 16:56 - 2014-02-22 10:50 - 00096768 _____ (Microsoft Corporation) C:\WINDOWS\system32\winbici.dll
2014-04-29 16:56 - 2014-02-22 10:48 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\dataclen.dll
2014-04-29 16:56 - 2014-02-22 06:46 - 00002440 ___RS () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FileManager.lnk
2014-04-29 16:56 - 2014-02-01 08:00 - 00011109 _____ () C:\WINDOWS\system32\connectedsearch-results.searchconnector-ms
2014-04-29 16:56 - 2014-01-27 13:52 - 00050053 _____ () C:\WINDOWS\system32\srms.dat
2014-04-29 08:30 - 2014-04-29 08:30 - 00164864 _____ (Microsoft Corporation) C:\WINDOWS\system32\msrating.dll
2014-04-29 08:20 - 2014-04-29 08:20 - 00112128 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieUnatt.exe
2014-04-29 08:20 - 2014-04-29 08:20 - 00108032 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollector.exe
2014-04-29 08:20 - 2014-04-29 08:20 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwproxystub.dll
2014-04-29 08:20 - 2014-04-29 08:20 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll
2014-04-29 08:20 - 2014-04-29 08:20 - 00004096 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollectorres.dll
2014-04-29 08:19 - 2014-04-29 08:19 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll
2014-04-29 08:18 - 2014-04-29 08:29 - 00000000 ____D () C:\Users\Marko\Desktop\SB

==================== One Month Modified Files and Folders =======

2014-05-29 16:03 - 2014-05-29 16:01 - 00000000 _____ () C:\Recovery.txt
2014-05-29 15:34 - 2014-04-02 06:44 - 01691195 _____ () C:\WINDOWS\WindowsUpdate.log
2014-05-29 15:06 - 2014-05-26 14:40 - 00000000 ____D () C:\FRST
2014-05-28 19:41 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\sru
2014-05-28 16:01 - 2014-05-11 09:56 - 00001132 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1795597239-2963957331-4134054646-1001UA.job
2014-05-28 15:53 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\Microsoft.NET
2014-05-28 15:51 - 2014-02-23 19:36 - 00001108 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2014-05-28 15:46 - 2013-11-14 10:09 - 01776918 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2014-05-28 15:44 - 2014-02-23 19:36 - 00002147 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-05-28 15:42 - 2014-04-02 06:44 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-05-28 15:42 - 2013-08-22 09:23 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2014-05-28 15:41 - 2013-08-22 08:13 - 00524288 ___SH () C:\WINDOWS\system32\config\BBI
2014-05-27 21:37 - 2014-04-02 06:50 - 00000000 ____D () C:\Users\Marko
2014-05-27 09:35 - 2014-05-26 02:33 - 00000000 ____D () C:\Program Files\Malwarebytes Anti-Malware
2014-05-27 09:35 - 2014-05-11 09:57 - 00000000 ____D () C:\Users\Marko\AppData\Roaming\Mozilla
2014-05-27 09:35 - 2014-02-23 19:36 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-05-27 09:28 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\registration
2014-05-27 09:27 - 2014-05-21 19:42 - 00000000 ____D () C:\Users\Marko\AppData\Roaming\OpenCandy
2014-05-27 09:26 - 2014-05-21 19:42 - 00000000 ____D () C:\Program Files\SearchProtect
2014-05-27 09:26 - 2014-02-23 17:37 - 00000000 ____D () C:\ProgramData\Package Cache
2014-05-27 09:24 - 2014-03-15 09:48 - 00000000 ____D () C:\Program Files\Microsoft Office 15
2014-05-27 08:38 - 2013-08-22 09:23 - 00339184 _____ () C:\WINDOWS\setupact.log
2014-05-26 09:12 - 2014-04-02 07:12 - 00000000 __RDO () C:\Users\Marko\SkyDrive
2014-05-26 07:39 - 2013-11-14 01:00 - 00088660 _____ () C:\WINDOWS\PFRO.log
2014-05-26 07:23 - 2014-05-26 07:23 - 00015485 _____ () C:\Users\Marko\Desktop\malware_20140526.txt
2014-05-26 02:33 - 2014-05-26 02:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-05-26 02:33 - 2014-05-26 02:33 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-05-23 19:27 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\AppReadiness
2014-05-22 01:00 - 2014-03-01 12:25 - 00000000 ____D () C:\WINDOWS\system32\MRT
2014-05-21 20:59 - 2014-05-21 20:59 - 00000000 ____D () C:\Users\Marko\AppData\Roaming\Avira
2014-05-21 20:52 - 2014-05-21 20:51 - 00000000 ____D () C:\ProgramData\Avira
2014-05-21 20:52 - 2014-05-21 20:51 - 00000000 ____D () C:\Program Files\Avira
2014-05-21 19:44 - 2014-05-21 19:40 - 00000000 ____D () C:\Users\Marko\AppData\Roaming\DVDVideoSoft
2014-05-21 19:43 - 2014-05-21 19:42 - 00000000 ____D () C:\Users\Marko\AppData\Local\SearchProtect
2014-05-21 19:43 - 2014-05-21 19:42 - 00000000 ____D () C:\Program Files\DVDVideoSoft
2014-05-21 19:42 - 2014-05-21 19:42 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft
2014-05-21 19:42 - 2014-05-21 19:42 - 00000000 ____D () C:\Program Files\Common Files\DVDVideoSoft
2014-05-21 19:30 - 2014-02-23 19:36 - 00001104 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2014-05-18 00:18 - 2014-05-18 00:17 - 00000000 ____D () C:\Users\Marko\Documents\SelfMV
2014-05-18 00:17 - 2014-05-18 00:17 - 00001941 _____ () C:\Users\Public\Desktop\Samsung Kies 3.lnk
2014-05-18 00:17 - 2014-05-17 23:03 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung
2014-05-18 00:16 - 2014-05-18 00:00 - 00000000 ____D () C:\Users\Marko\AppData\Roaming\Samsung
2014-05-18 00:16 - 2014-05-17 23:00 - 00000000 ____D () C:\Program Files\Samsung
2014-05-18 00:16 - 2014-02-02 17:58 - 00000000 ___HD () C:\Program Files\InstallShield Installation Information
2014-05-18 00:04 - 2014-05-18 00:04 - 00000000 ____D () C:\Users\Public\Documents\NativeFus_Log
2014-05-18 00:04 - 2014-05-17 23:59 - 00001974 _____ () C:\Users\Public\Desktop\Samsung Kies (Lite).lnk
2014-05-18 00:01 - 2014-05-18 00:01 - 00000000 ____D () C:\Program Files\MarkAny
2014-05-18 00:00 - 2014-05-18 00:00 - 00000000 ____D () C:\Users\Marko\AppData\Local\Samsung
2014-05-17 23:59 - 2014-05-17 23:59 - 00001964 _____ () C:\Users\Public\Desktop\Samsung Kies.lnk
2014-05-17 23:59 - 2014-05-17 23:59 - 00000000 ____D () C:\Users\Marko\Documents\samsung
2014-05-17 23:07 - 2014-05-17 23:00 - 00000000 ____D () C:\ProgramData\Samsung
2014-05-17 23:06 - 2014-05-17 23:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MyFree Codec
2014-05-17 23:06 - 2014-05-17 23:06 - 00000000 ____D () C:\Program Files\MyFree Codec
2014-05-17 22:59 - 2014-05-17 22:59 - 00000000 ____D () C:\Users\Marko\AppData\Local\Downloaded Installations
2014-05-17 22:55 - 2014-05-17 22:54 - 75397136 _____ (Samsung Electronics Co., Ltd.) C:\Users\Marko\Downloads\KiesSetup.exe
2014-05-17 22:09 - 2014-05-17 22:09 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf
2014-05-17 11:20 - 2013-08-22 08:13 - 00262144 ___SH () C:\WINDOWS\system32\config\ELAM
2014-05-15 21:11 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\rescache
2014-05-15 00:21 - 2013-08-22 10:17 - 00000000 ___RD () C:\WINDOWS\ToastData
2014-05-15 00:21 - 2013-08-22 10:17 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-05-15 00:21 - 2013-08-22 10:17 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-05-15 00:21 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\WinStore
2014-05-15 00:21 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\de-DE
2014-05-15 00:21 - 2013-08-22 10:17 - 00000000 ____D () C:\Program Files\Windows Defender
2014-05-14 22:06 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\SecureBootUpdates
2014-05-11 12:16 - 2014-05-09 21:04 - 00000000 ____D () C:\Users\Marko\Desktop\CFA
2014-05-11 10:01 - 2014-05-11 09:56 - 00001080 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1795597239-2963957331-4134054646-1001Core.job
2014-05-11 09:57 - 2014-02-23 19:36 - 00000000 ____D () C:\Users\Marko\AppData\Local\Google
2014-05-11 09:56 - 2014-05-11 09:56 - 00918672 _____ (Google Inc.) C:\Users\Marko\Downloads\GoogleVoiceAndVideoSetup.exe
2014-05-09 20:55 - 2014-05-09 20:55 - 00000000 ____D () C:\Program Files\Common Files\EPSON
2014-05-09 20:55 - 2014-05-09 20:54 - 00000000 ____D () C:\ProgramData\EPSON
2014-05-09 20:54 - 2014-05-09 20:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EPSON
2014-05-06 21:17 - 2014-04-10 20:26 - 00001880 _____ () C:\Users\Public\Desktop\Garmin Express.lnk
2014-05-06 21:17 - 2014-02-23 17:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Garmin
2014-05-06 21:17 - 2014-02-23 17:37 - 00000000 ____D () C:\ProgramData\Garmin
2014-05-06 21:17 - 2014-02-02 18:13 - 00000000 ____D () C:\Program Files\Garmin
2014-05-06 05:25 - 2014-05-14 21:56 - 17382912 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2014-05-06 04:10 - 2014-05-14 21:56 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2014-05-06 00:04 - 2014-04-20 10:52 - 00000000 ____D () C:\Users\Marko\Desktop\Auto
2014-05-06 00:04 - 2014-04-20 10:48 - 00000000 ____D () C:\Users\Marko\AppData\Local\Paint.NET
2014-05-02 23:09 - 2014-05-02 23:09 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2014-05-02 18:36 - 2014-05-02 18:36 - 00000000 __SHD () C:\Users\Marko\AppData\Local\EmieUserList
2014-05-02 18:36 - 2014-05-02 18:36 - 00000000 __SHD () C:\Users\Marko\AppData\Local\EmieSiteList
2014-05-02 18:18 - 2013-08-22 09:22 - 00473960 _____ () C:\WINDOWS\system32\FNTCACHE.DAT
2014-05-02 18:14 - 2013-11-14 09:53 - 00000000 ____D () C:\WINDOWS\system32\Drivers\de-DE
2014-05-02 18:14 - 2013-08-22 10:17 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-05-02 18:14 - 2013-08-22 10:17 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-05-02 18:14 - 2013-08-22 10:17 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools
2014-05-02 18:13 - 2013-11-14 09:53 - 00000000 ____D () C:\WINDOWS\de-DE
2014-05-02 18:13 - 2013-08-22 10:17 - 00000000 ___RD () C:\WINDOWS\ImmersiveControlPanel
2014-05-02 18:13 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\zh-TW
2014-05-02 18:13 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\zh-HK
2014-05-02 18:13 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\zh-CN
2014-05-02 18:13 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\uk-UA
2014-05-02 18:13 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\tr-TR
2014-05-02 18:13 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\th-TH
2014-05-02 18:13 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\SystemResetPlatform
2014-05-02 18:13 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\sv-SE
2014-05-02 18:13 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\sr-Latn-RS
2014-05-02 18:13 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\sr-Latn-CS
2014-05-02 18:13 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\sl-SI
2014-05-02 18:13 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\sk-SK
2014-05-02 18:13 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\ru-RU
2014-05-02 18:13 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\ro-RO
2014-05-02 18:13 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\pt-PT
2014-05-02 18:13 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\pt-BR
2014-05-02 18:13 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\pl-PL
2014-05-02 18:13 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\nl-NL
2014-05-02 18:13 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\nb-NO
2014-05-02 18:13 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\lv-LV
2014-05-02 18:13 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\lt-LT
2014-05-02 18:13 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\ko-KR
2014-05-02 18:13 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\ja-JP
2014-05-02 18:13 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\it-IT
2014-05-02 18:13 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\hu-HU
2014-05-02 18:13 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\hr-HR
2014-05-02 18:13 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\he-IL
2014-05-02 18:13 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\fr-FR
2014-05-02 18:13 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\fi-FI
2014-05-02 18:13 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\et-EE
2014-05-02 18:13 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\en-GB
2014-05-02 18:13 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\el-GR
2014-05-02 18:13 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\bg-BG
2014-05-02 18:13 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\ar-SA
2014-05-02 18:13 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\MediaViewer
2014-05-02 18:13 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\Camera
2014-05-02 18:13 - 2013-08-22 10:17 - 00000000 ____D () C:\Program Files\Windows Portable Devices
2014-05-02 18:13 - 2013-08-22 10:17 - 00000000 ____D () C:\Program Files\Windows Multimedia Platform
2014-05-02 18:12 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\FileManager
2014-05-01 22:30 - 2014-05-15 20:51 - 00693240 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerApp.exe
2014-05-01 22:30 - 2014-05-15 20:51 - 00105464 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerCPLApp.cpl
2014-04-29 08:30 - 2014-04-29 08:30 - 00164864 _____ (Microsoft Corporation) C:\WINDOWS\system32\msrating.dll
2014-04-29 08:29 - 2014-04-29 08:18 - 00000000 ____D () C:\Users\Marko\Desktop\SB
2014-04-29 08:20 - 2014-04-29 08:20 - 00112128 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieUnatt.exe
2014-04-29 08:20 - 2014-04-29 08:20 - 00108032 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollector.exe
2014-04-29 08:20 - 2014-04-29 08:20 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwproxystub.dll
2014-04-29 08:20 - 2014-04-29 08:20 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll
2014-04-29 08:20 - 2014-04-29 08:20 - 00004096 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollectorres.dll
2014-04-29 08:19 - 2014-04-29 08:19 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll

Some content of TEMP:
====================
C:\Users\Marko\AppData\Local\Temp\nsb34BB.exe
C:\Users\Marko\AppData\Local\Temp\nsj3A0C.exe
C:\Users\Marko\AppData\Local\Temp\nsqDAB1.exe
C:\Users\Marko\AppData\Local\Temp\nstD3CB.exe


==================== Bamital & volsnap Check =================

C:\WINDOWS\explorer.exe => MD5 is legit
C:\WINDOWS\system32\winlogon.exe => MD5 is legit
C:\WINDOWS\system32\wininit.exe => MD5 is legit
C:\WINDOWS\system32\svchost.exe => MD5 is legit
C:\WINDOWS\system32\services.exe => MD5 is legit
C:\WINDOWS\system32\User32.dll => MD5 is legit
C:\WINDOWS\system32\userinit.exe => MD5 is legit
C:\WINDOWS\system32\rpcss.dll => MD5 is legit
C:\WINDOWS\system32\Drivers\volsnap.sys => MD5 is legit
Code:
Additional scan result of Farbar Recovery Scan Tool (x86) Version:25-05-2014 02
Ran by Marko at 2014-05-29 15:46:04
Running from F:\
Boot Mode: Safe Mode (minimal)
==========================================================


==================== Security Center ========================

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

ANT Drivers Installer x86 (Version: 2.3.4 - Garmin Ltd or its subsidiaries) Hidden
Elevated Installer (Version: 3.1.8.0 - Garmin Ltd or its subsidiaries) Hidden
ElsterFormular (HKLM\...\ElsterFormular) (Version: 15.2.20140326 - Landesfinanzdirektion Thüringen)
EPSON BX535WD Series Printer Uninstall (HKLM\...\EPSON BX535WD Series) (Version:  - SEIKO EPSON Corporation)
Free YouTube to MP3 Converter version 3.12.35.514 (HKLM\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.35.514 - DVDVideoSoft Ltd.)
Garmin Communicator Plugin (HKLM\...\{032A13FF-D26D-4844-9597-7EF698627985}) (Version: 4.1.0 - Garmin Ltd or its subsidiaries)
Garmin Express (HKLM\...\{a2c69cba-542a-4a49-af31-b8a49349064d}) (Version: 3.1.8.0 - Garmin Ltd or its subsidiaries)
Garmin Express (Version: 3.1.8.0 - Garmin Ltd or its subsidiaries) Hidden
Garmin Express Tray (Version: 3.1.8.0 - Garmin Ltd or its subsidiaries) Hidden
Garmin USB Drivers (HKLM\...\{ABA5E381-EC46-425C-86C5-5CD15BBFB4BF}) (Version: 2.3.1.0 - Garmin Ltd or its subsidiaries)
Garmin WebUpdater (HKLM\...\{AE1EC58E-B2AC-4959-A4C2-C38202A25239}) (Version: 2.5.6 - Garmin Ltd or its subsidiaries)
Google Chrome (HKLM\...\Google Chrome) (Version: 34.0.1847.137 - Google Inc.)
Google Talk Plugin (HKLM\...\{8E29C1CE-346A-3F59-AE22-8C5B7F230498}) (Version: 5.3.1.18536 - Google)
Google Update Helper (Version: 1.3.24.7 - Google Inc.) Hidden
Microsoft Office 365 ProPlus - de-de (HKLM\...\O365ProPlusRetail - de-de) (Version: 15.0.4605.1003 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 3.0 (HKLM\...\{3898934B-05AE-41CD-96BE-70DA9BFBCE1F}) (Version: 3.0.11010.0 - Microsoft Corporation)
MyFreeCodec (HKCU\...\MyFreeCodec) (Version:  - )
NVIDIA 3D Vision Treiber 327.02 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 327.02 - NVIDIA Corporation)
NVIDIA Grafiktreiber 327.02 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 327.02 - NVIDIA Corporation)
NVIDIA Install Application (Version: 2.1002.133.889 - NVIDIA Corporation) Hidden
NVIDIA Stereoscopic 3D Driver (Version: 7.17.13.2702 - NVIDIA Corporation) Hidden
NVIDIA Systemsteuerung 327.02 (Version: 327.02 - NVIDIA Corporation) Hidden
NVIDIA Update 1.14.17 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 1.14.17 - NVIDIA Corporation)
NVIDIA Update Components (Version: 1.14.17 - NVIDIA Corporation) Hidden
Office 15 Click-to-Run Extensibility Component (Version: 15.0.4605.1003 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Licensing Component (Version: 15.0.4605.1003 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Localization Component (Version: 15.0.4605.1003 - Microsoft Corporation) Hidden
Paint.NET v3.5.11 (HKLM\...\{72EF03F5-0507-4861-9A44-D99FD4C41417}) (Version: 3.61.0 - dotPDN LLC)
Samsung Kies (HKLM\...\InstallShield_{758C8301-2696-4855-AF45-534B1200980A}) (Version: 2.6.2.14014_7 - Samsung Electronics Co., Ltd.)
Samsung Kies (Version: 2.6.2.14014_7 - Samsung Electronics Co., Ltd.) Hidden
Samsung Kies3 (HKLM\...\InstallShield_{88547073-C566-4895-9005-EBE98EA3F7C7}) (Version: 3.2.14034.17 - Samsung Electronics Co., Ltd.)
Samsung Kies3 (Version: 3.2.14034.17 - Samsung Electronics Co., Ltd.) Hidden
SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.43.0 - SAMSUNG Electronics Co., Ltd.)
Search Protect (HKLM\...\SearchProtect) (Version: 2.13.2.14 - Client Connect LTD) <==== ATTENTION
Tacx Trainer software 3 (HKLM\...\{F35B473D-FC7C-4F29-8B4F-223B06369F0F}) (Version: 3.4.1 - )
Tacx Trainer software 4 (HKLM\...\{1FC386C1-EA57-43DB-9860-FE327C143148}) (Version: 4.9.2 - Tacx BV)
TTS Launcher (HKLM\...\{2D09223F-34B4-4C74-B6F2-ABDE6BEC82E5}) (Version: 1.0.2 - Tacx BV)
USB ANT Stick Silicon Laboratories USBXpress Device (Driver Removal) (HKLM\...\USB_ANT_SIUSBXP_3_1&1004&0FCF) (Version:  - )
Windows Driver Package - Garmin (grmnusb) GARMIN Devices  (04/19/2012 2.3.1.0) (HKLM\...\98157A226B40B173301B0F53C8E98C47805D5152) (Version: 04/19/2012 2.3.1.0 - Garmin)
Windows-Treiberpaket - Dynastream Innovations, Inc. ANT LibUSB Drivers (04/11/2012 1.2.40.201) (HKLM\...\F9D2A789F9CFF8CEC36B544F53877C80F1F73C46) (Version: 04/11/2012 1.2.40.201 - Dynastream Innovations, Inc.)
Windows-Treiberpaket - Silicon Labs Software (DSI_SiUSBXp_3_1) USB  (02/06/2007 3.1) (HKLM\...\D1506E0025B5A3F9EB8270FE81C1EEDD9388B8A2) (Version: 02/06/2007 3.1 - Silicon Labs Software)

==================== Restore Points  =========================

06-05-2014 19:14:42 Garmin Express
14-05-2014 20:05:16 Windows Update
17-05-2014 21:00:23 Installed Samsung Kies
21-05-2014 18:06:06 Windows Update

==================== Hosts content: ==========================

2013-08-22 08:13 - 2013-08-22 08:13 - 00000824 ____A C:\WINDOWS\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {00BC77BF-3352-4FE8-9617-4F1B27BEC19A} - System32\Tasks\Microsoft\Windows\Plug and Play\Plug and Play Cleanup
Task: {08874AF2-FC05-4074-8F87-5BD8ED2E94E4} - System32\Tasks\Microsoft\Windows\WOF\WIM-Hash-Management
Task: {08FC2C27-FF47-4F07-878D-624E8AC0EFB5} - System32\Tasks\Microsoft\Windows\WindowsUpdate\Scheduled Start With Network => Sc.exe start wuauserv
Task: {0B6BE2A8-A130-4D48-B83F-44BAE18ACB08} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2014-04-09] (Microsoft Corporation)
Task: {17233BE9-87E9-40B0-B003-AE9D2B92CBBE} - System32\Tasks\Microsoft\Windows\SettingSync\BackupTask
Task: {23DA7B01-62C3-4071-87EE-7C137EA56789} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2014-02-23] (Google Inc.)
Task: {247BD142-0549-4E91-84B0-172C25563718} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join => C:\WINDOWS\System32\AutoWorkplace.exe [2013-08-22] (Microsoft Corporation)
Task: {2713B4C1-FF65-4ED7-AFC0-78EB690D0F74} - System32\Tasks\Microsoft\Windows\WOF\WIM-Hash-Validation
Task: {27EE2E87-B06B-4F53-9B26-F4A408D46E6A} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office 15\root\Office15\msoia.exe [2014-04-12] (Microsoft Corporation)
Task: {2AE857F2-639B-4CC1-9294-BABB5079973D} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1795597239-2963957331-4134054646-1001UA => C:\Users\Marko\AppData\Local\Google\Update\GoogleUpdate.exe [2014-05-11] (Google Inc.)
Task: {2BE65564-89D1-4396-A5CC-D7D9283FC4A1} - System32\Tasks\Microsoft\Windows\SkyDrive\Routine Maintenance Task
Task: {392EB017-207C-42BF-A061-F3BE721F456C} - System32\Tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState => Rundll32.exe Windows.Storage.ApplicationData.dll,CleanupTemporaryState
Task: {3DBFB20E-4459-42A2-BE31-468E4A870AE0} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesCommonx86\Microsoft Shared\OFFICE15\OLicenseHeartbeat.exe [2014-04-12] (Microsoft Corporation)
Task: {4B7EF56A-8A42-4BD2-BB5C-7C389AC54A37} - System32\Tasks\Microsoft\Windows\AppxDeploymentClient\Pre-staged app cleanup => Rundll32.exe %windir%\system32\AppxDeploymentClient.dll,AppxPreStageCleanupRunTask
Task: {5700ACE8-D0AF-4BA7-98B6-1033521A877A} - System32\Tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask => Rundll32.exe sysmain.dll,PfSvWsSwapAssessmentTask
Task: {6E84A59B-1863-4B21-8BD8-C9B20FD15484} - System32\Tasks\Microsoft\Windows\Application Experience\StartupAppTask => Rundll32.exe Startupscan.dll,SusRunTask
Task: {6EAF2C96-C8C5-4D05-A626-B3228D6AC321} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX86\OfficeC2RClient.exe [2014-03-30] (Microsoft Corporation)
Task: {7C7CF1DA-F461-4850-96B2-ADCA8A67E59C} - System32\Tasks\Microsoft\Windows\WS\License Validation => Rundll32.exe WSClient.dll,WSpTLR licensing
Task: {8B5819AE-7B44-478B-A3D3-8846AF160A8F} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCachePrepopulate
Task: {92ED6570-4654-4BFA-9A6C-1084C6939C16} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Maintenance Work
Task: {97A27261-DDEF-407E-80C8-97B175A35178} - System32\Tasks\GarminUpdaterTask => C:\Program Files\Garmin\Express Self Updater\ExpressSelfUpdater.exe [2014-04-23] ()
Task: {997C8BBD-710B-4E66-B5BC-CC09575A58D2} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCacheRebalance
Task: {A2250FA0-FA11-4BF3-B95F-327AEA81894D} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1795597239-2963957331-4134054646-1001Core => C:\Users\Marko\AppData\Local\Google\Update\GoogleUpdate.exe [2014-05-11] (Google Inc.)
Task: {A5D45ED3-F524-4574-8F39-527F3729D1E2} - System32\Tasks\Microsoft\Windows\Time Zone\SynchronizeTimeZone => C:\WINDOWS\system32\tzsync.exe [2013-08-22] (Microsoft Corporation)
Task: {AB3AB69D-030E-473D-A136-3386C69B5123} - System32\Tasks\Microsoft\Windows\DiskCleanup\SilentCleanup => C:\WINDOWS\system32\cleanmgr.exe [2014-02-22] (Microsoft Corporation)
Task: {B574E84A-D473-42EC-A4DE-E2365A0E4138} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2014-02-23] (Google Inc.)
Task: {C0D0F7C4-419F-41B3-90A2-FE79270B828A} - System32\Tasks\Microsoft\Windows\SettingSync\NetworkStateChangeTask
Task: {CC45F75B-C669-469E-BB28-216DD7B5BDBD} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office 15\root\Office15\msoia.exe [2014-04-12] (Microsoft Corporation)
Task: {CF5A1DDC-D14D-4D59-AD49-A19A645B087B} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Logon Synchronization
Task: {DCF55BED-B1DF-4ABF-8D85-6542C7007799} - System32\Tasks\Microsoft\Windows\RecoveryEnvironment\VerifyWinRE
Task: {E4C8774A-2818-45A4-8A6D-11DDF6348886} - System32\Tasks\Microsoft\Windows\SkyDrive\Idle Sync Maintenance Task
Task: {E5BA8597-39D2-45EB-9BE9-60FA1FEA7F42} - System32\Tasks\Microsoft\Windows\DiskFootprint\Diagnostics
Task: {FAB49829-3EE7-4234-BE84-277862F2A57C} - System32\Tasks\Microsoft\Windows\WS\WSRefreshBannedAppsListTask => Rundll32.exe WSClient.dll,RefreshBannedAppsList
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1795597239-2963957331-4134054646-1001Core.job => C:\Users\Marko\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1795597239-2963957331-4134054646-1001UA.job => C:\Users\Marko\AppData\Local\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============


==================== Alternate Data Streams (whitelisted) =========

AlternateDataStreams: C:\Users\Marko\SkyDrive:ms-properties

==================== Safe Mode (whitelisted) ===================

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Option => "OptionValue"="1"

==================== EXE Association (whitelisted) =============


==================== Disabled items from MSCONFIG ==============


==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (05/28/2014 04:00:00 PM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (1568) SRUJet: Fehler -1811 (0xfffff8ed) beim Öffnen von Protokolldatei C:\WINDOWS\system32\SRU\SRU000E0.log.

Error: (05/26/2014 01:19:24 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: MM_PC)
Description: Bei der Aktivierung der App „Microsoft.Reader_8wekyb3d8bbwe!Microsoft.Reader“ ist folgender Fehler aufgetreten: -2144980991. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (05/26/2014 09:55:06 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: MM_PC)
Description: Bei der Aktivierung der App „Microsoft.Reader_8wekyb3d8bbwe!Microsoft.Reader“ ist folgender Fehler aufgetreten: -2144980991. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (05/26/2014 09:27:01 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: MM_PC)
Description: Bei der Aktivierung der App „Microsoft.Reader_8wekyb3d8bbwe!Microsoft.Reader“ ist folgender Fehler aufgetreten: -2144980991. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (05/26/2014 09:13:52 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: MM_PC)
Description: Bei der Aktivierung der App „Microsoft.Reader_8wekyb3d8bbwe!Microsoft.Reader“ ist folgender Fehler aufgetreten: -2144980991. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

schrauber 30.05.2014 15:49
Da ist Adware, aber wir versuchen mal was:

Im abgesicherten Modus ein neues Benutzerkonto anlegen mit Adminrechten. Rechner in den normalen Modus booten, in das neue Konto.

Geht das?

mnster 30.05.2014 16:16
habe den benutzer angelegt, aber bei neustart erscheint wieder der schwarze bildschirm. kann also nicht den neuen benutzer auswählen

schrauber 31.05.2014 15:12
Also der Bildschirm erscheint schon bevor Du ein Konto auswählen kannst?

Im Safe Mode:

Adware & Co. deinstallieren

Solltest Du ein Programm nicht finden oder nicht deinstallieren können, mache bitte mit dem nächsten Schritt weiter:



Scan mit Combofix
WARNUNG an die MITLESER:
Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!

Downloade dir bitte Combofix vom folgenden Downloadspiegel: Link
  • WICHTIG: Speichere Combofix auf deinem Desktop.
  • Deaktiviere bitte alle deine Antivirensoftware sowie Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören. Combofix meckert auch manchmal trotzdem noch, das kannst du dann ignorieren, mir aber bitte mitteilen.
  • Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.
  • Während Combofix läuft bitte nicht am Computer arbeiten, die Maus bewegen oder ins Combofixfenster klicken!
  • Wenn Combofix fertig ist, wird es ein Logfile erstellen.
  • Bitte poste die C:\Combofix.txt in deiner nächsten Antwort (möglichst in CODE-Tags).
Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten
Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.
starte den Rechner einfach neu. Dies sollte das Problem beheben.

mnster 31.05.2014 17:23
super, tausend dank, uninstall hat schon geholfen:daumenhoc:daumenhoc:daumenhoc

schrauber 01.06.2014 14:13
wir sind nicht fertig!

mnster 01.06.2014 17:13
wie gehts weiter?


Alle Zeitangaben in WEZ +1. Es ist jetzt 15:28 Uhr.
Seite 1 von 2 1 2
100 Beiträge dieses Themas auf einer Seite anzeigen

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27