Trojaner-Board
Seite 1 von 2 1 2
100 Beiträge dieses Themas auf einer Seite anzeigen

Trojaner-Board (https://www.trojaner-board.de/)
-   Log-Analyse und Auswertung (https://www.trojaner-board.de/log-analyse-auswertung/)
-   -   Der Laptop meiner Freundin hat kein Internet mehr und es wurde bereits viel Malware entdeckt. (https://www.trojaner-board.de/155230-laptop-meiner-freundin-hat-kein-internet-mehr-wurde-bereits-viel-malware-entdeckt.html)

PowerMax 14.06.2014 16:39
Der Laptop meiner Freundin hat kein Internet mehr und es wurde bereits viel Malware entdeckt.
 
Hallo, also gestern hat sie ein Programm heruntergeladen welches ihr Internet schneller machen sollte. Daraufhin haben sich immer neue Programme von alleine installiert.

Ich habe dann bereits den adw cleaner und malwarebytes Anti- Malware laufen lassen und die haben auch verdammt viel gefunden.
Ich dachte damit wäre es gegessen. Aber heute hat sie so gut wie kein Internet mehr.

Google lässt sich noch öffnen und auch googeln, aber sobald man auf andere Seiten möchte werden diese gar nicht mehr geladen. Desweiteren hat Windows Defender dieses Programm noch gefunden und in Quarantäne geschickt: Adware:Win32/EoRezo

Jetzt muss ich also doch scheinbar noch um eure Hilfe bitten.

Es handelt sich bei ihr um Windows 8.1 und ein Lenovo Laptop.

Lg Max

Und ich bedanke mich jetzt schon für den noch kommenden Aufwand

So jetzt die Logs die ich bereits erstellt habe:

Deffoger:

Code:
defogger_disable by jpshortstuff (23.02.10.1)
Log created at 17:10 on 14/06/2014 (Anne)

Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.

Checking for services/drivers...


-=E.O.F=-


Weitere kommen noch haben zu viele Zeichen gebraucht.

PowerMax 14.06.2014 16:40
Frst:

Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 12-06-2014 02
Ran by Anne (administrator) on ANNES-PC on 14-06-2014 17:16:21
Running from C:\Users\Anne\Desktop
Platform: Windows 8.1 Pro (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(Conexant Systems Inc.) C:\Windows\System32\CxAudMsg64.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.24.7\GoogleCrashHandler.exe
(Dolby Laboratories Inc.) C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.24.7\GoogleCrashHandler64.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDIntelligent.exe
(Realtek semiconductor) C:\Windows\RTFTrack.exe
(Conexant Systems, Inc.) C:\Program Files\CONEXANT\cAudioFilterAgent\CAudioFilterAgent64.exe
(Lenovo (Beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe
(Lenovo(beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Management\utility.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
(Intel(R) Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(Microsoft Corporation) C:\Windows\System32\CredentialUIBroker.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [ETDCtrl] => C:\Program Files\Elantech\ETDCtrl.exe [2894664 2013-08-08] (ELAN Microelectronics Corp.)
HKLM\...\Run: [RtsFT] => C:\WINDOWS\RTFTrack.exe [6339656 2013-04-10] (Realtek semiconductor)
HKLM\...\Run: [BTMTrayAgent] => C:\Program Files (x86)\Intel\Bluetooth\btmshellex.dll [7770936 2013-04-12] (Motorola Solutions, Inc.)
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [286192 2013-01-31] (Intel Corporation)
HKLM\...\Run: [cAudioFilterAgent] => C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe [900704 2013-03-15] (Conexant Systems, Inc.)
HKLM\...\Run: [SmartAudio] => C:\Program Files\CONEXANT\SAII\SACpl.exe [1647616 2012-06-13] (Conexant Systems, Inc.)
HKLM\...\Run: [Energy Management] => C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe [17080376 2012-07-26] (Lenovo (Beijing) Limited)
HKLM\...\Run: [EnergyUtility] => C:\Program Files (x86)\Lenovo\Energy Management\Utility.exe [191544 2012-07-26] (Lenovo(beijing) Limited)
HKLM-x32\...\Run: [t4pc_en_4] => [X]
Winlogon\Notify\igfxcui: C:\WINDOWS\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-2489216334-2735940672-2852440863-1001\...\Run: [GoogleChromeAutoLaunch_BA435CB4097564A5860B488C3E6E7FD7] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [860488 2014-06-05] (Google Inc.)
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://t.de.msn.com/
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xC5ED38E39D84CF01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE,de;q=0.5
SearchScopes: HKLM-x32 - DefaultScope value is missing.
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1

FireFox:
========
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)

Chrome:
=======
CHR HomePage: hxxp://www.google.de/
CHR StartupUrls: "hxxp://www.google.de/"
CHR Extension: (Google Docs) - C:\Users\Anne\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2012-07-26]
CHR Extension: (Google Drive) - C:\Users\Anne\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2012-07-26]
CHR Extension: (YouTube) - C:\Users\Anne\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2012-07-26]
CHR Extension: (Google-Suche) - C:\Users\Anne\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2012-07-26]
CHR Extension: (Google Wallet) - C:\Users\Anne\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-05-22]
CHR Extension: (Google Mail) - C:\Users\Anne\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2012-07-26]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Services (Whitelisted) =================

R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15344 2013-01-31] (Intel Corporation)
R2 Intel(R) Wireless Bluetooth(R) 4.0 Radio Management; C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe [161736 2013-04-15] (Intel Corporation)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [273136 2013-04-18] ()
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347880 2014-05-23] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2014-05-23] (Microsoft Corporation)
R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3388144 2013-04-18] (Intel® Corporation)

==================== Drivers (Whitelisted) ====================

S0 ADP80XX; C:\Windows\System32\drivers\ADP80XX.SYS [782176 2013-08-22] (PMC-Sierra)
S3 bcmfn2; C:\Windows\System32\drivers\bcmfn2.sys [17624 2013-08-13] (Windows (R) Win 7 DDK provider)
R3 btmhsf; C:\Windows\system32\DRIVERS\btmhsf.sys [1366328 2013-03-28] (Motorola Solutions, Inc.)
S3 iaLPSSi_GPIO; C:\Windows\System32\drivers\iaLPSSi_GPIO.sys [24568 2013-07-30] (Intel Corporation)
S3 iaLPSSi_I2C; C:\Windows\System32\drivers\iaLPSSi_I2C.sys [99320 2013-07-25] (Intel Corporation)
S0 iaStorAV; C:\Windows\System32\drivers\iaStorAV.sys [651248 2013-08-10] (Intel Corporation)
R0 intelpep; C:\Windows\System32\drivers\intelpep.sys [39768 2014-03-18] (Microsoft Corporation)
S3 kbldfltr; C:\Windows\System32\drivers\kbldfltr.sys [22272 2014-03-18] (Microsoft Corporation)
S0 LSI_SAS3; C:\Windows\System32\drivers\lsi_sas3.sys [81760 2013-08-22] (LSI Corporation)
R3 NdisVirtualBus; C:\Windows\System32\drivers\NdisVirtualBus.sys [16384 2013-08-22] (Microsoft Corporation)
S3 netvsc; C:\Windows\system32\DRIVERS\netvsc63.sys [87040 2013-08-22] (Microsoft Corporation)
R3 NETwNe64; C:\Windows\system32\DRIVERS\NETwew00.sys [3344352 2013-07-08] (Intel Corporation)
S3 ReFS; C:\Windows\System32\Drivers\ReFS.sys [924504 2014-03-18] (Microsoft Corporation)
R3 rtsuvc; C:\Windows\system32\DRIVERS\rtsuvc.sys [8243272 2013-04-10] (Realtek Semiconductor Corp.)
S3 SerCx2; C:\Windows\System32\drivers\SerCx2.sys [146776 2014-03-18] (Microsoft Corporation)
S0 stornvme; C:\Windows\System32\drivers\stornvme.sys [57176 2014-03-18] (Microsoft Corporation)
S3 UEFI; C:\Windows\System32\drivers\UEFI.sys [26976 2013-08-22] (Microsoft Corporation)
R3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [123224 2014-05-23] (Microsoft Corporation)
R0 Wof; C:\Windows\System32\Drivers\Wof.sys [157016 2014-05-23] (Microsoft Corporation)
S2 SAWFP; \??\C:\WINDOWS\system32\Drivers\SAWFP64.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-06-14 17:14 - 2014-06-14 17:16 - 00023241 _____ () C:\Users\Anne\Desktop\Addition.txt
2014-06-14 17:14 - 2014-06-14 17:16 - 00010044 _____ () C:\Users\Anne\Desktop\FRST.txt
2014-06-14 17:14 - 2014-06-14 17:16 - 00000000 ____D () C:\FRST
2014-06-14 17:10 - 2014-06-14 17:10 - 00000470 _____ () C:\Users\Anne\Desktop\defogger_disable.log
2014-06-14 17:10 - 2014-06-14 17:10 - 00000000 _____ () C:\Users\Anne\defogger_reenable
2014-06-14 17:08 - 2014-06-14 17:05 - 02081792 _____ (Farbar) C:\Users\Anne\Desktop\FRST64.exe
2014-06-14 17:08 - 2014-06-14 17:05 - 00380416 _____ () C:\Users\Anne\Desktop\Gmer-19357.exe
2014-06-14 17:08 - 2014-06-14 17:05 - 00050477 _____ () C:\Users\Anne\Desktop\Defogger.exe
2014-06-12 21:28 - 2014-06-12 21:28 - 00000000 ____D () C:\Program Files (x86)\predm
2014-06-12 21:20 - 2014-06-12 21:21 - 00000000 ____D () C:\AdwCleaner
2014-06-12 21:20 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\WINDOWS\SysWOW64\sqlite3.dll
2014-06-12 21:19 - 2014-06-12 21:20 - 01016261 _____ (Thisisu) C:\Users\Anne\Downloads\JRT.exe
2014-06-12 20:58 - 2014-06-14 15:43 - 00122584 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2014-06-12 20:57 - 2014-06-12 20:57 - 00001118 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-06-12 20:57 - 2014-06-12 20:57 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-06-12 20:57 - 2014-06-12 20:57 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-06-12 20:57 - 2014-06-12 20:57 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-06-12 20:57 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2014-06-12 20:57 - 2014-05-12 07:26 - 00064216 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys
2014-06-12 20:57 - 2014-05-12 07:25 - 00025816 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys
2014-06-12 20:46 - 2014-06-12 20:47 - 00441592 _____ (Bleeping Computer, LLC) C:\Users\Anne\Downloads\sc-cleaner.exe
2014-06-12 20:45 - 2014-06-12 20:50 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Anne\Downloads\mbam-setup-2.0.2.1012.exe
2014-06-12 20:45 - 2014-06-12 20:47 - 01333465 _____ () C:\Users\Anne\Downloads\adwcleaner_3.212.exe
2014-06-12 20:37 - 2014-06-12 20:40 - 00000444 __RSH () C:\ProgramData\ntuser.pol
2014-06-12 20:16 - 2014-06-12 21:16 - 00000000 ____D () C:\temp
2014-06-11 15:50 - 2014-06-11 15:50 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_User_LocationProvider_01_11_00.Wdf
2014-06-11 13:24 - 2014-05-30 12:21 - 23414784 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2014-06-11 13:24 - 2014-05-30 11:45 - 02768384 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2014-06-11 13:24 - 2014-05-30 11:28 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll
2014-06-11 13:24 - 2014-05-30 11:20 - 00752640 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2014-06-11 13:24 - 2014-05-30 11:18 - 17271296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2014-06-11 13:24 - 2014-05-30 11:08 - 05782528 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2014-06-11 13:24 - 2014-05-30 11:06 - 00452096 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtmsft.dll
2014-06-11 13:24 - 2014-05-30 10:46 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2014-06-11 13:24 - 2014-05-30 10:44 - 00295424 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll
2014-06-11 13:24 - 2014-05-30 10:43 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesetup.dll
2014-06-11 13:24 - 2014-05-30 10:38 - 02179072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2014-06-11 13:24 - 2014-05-30 10:35 - 00608768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2014-06-11 13:24 - 2014-05-30 10:29 - 00631808 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2014-06-11 13:24 - 2014-05-30 10:27 - 00592896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll
2014-06-11 13:24 - 2014-05-30 10:23 - 02040832 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2014-06-11 13:24 - 2014-05-30 10:16 - 00368128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtmsft.dll
2014-06-11 13:24 - 2014-05-30 10:04 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll
2014-06-11 13:24 - 2014-05-30 10:02 - 00242688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll
2014-06-11 13:24 - 2014-05-30 09:56 - 04244992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2014-06-11 13:24 - 2014-05-30 09:56 - 02266112 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2014-06-11 13:24 - 2014-05-30 09:54 - 00526336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2014-06-11 13:24 - 2014-05-30 09:49 - 01964544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2014-06-11 13:24 - 2014-05-30 09:43 - 13522944 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2014-06-11 13:24 - 2014-05-30 09:40 - 11725312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2014-06-11 13:24 - 2014-05-30 09:30 - 01398272 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2014-06-11 13:24 - 2014-05-30 09:21 - 01790976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2014-06-11 13:24 - 2014-05-30 09:15 - 01143296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2014-06-11 13:24 - 2014-05-30 09:13 - 00846336 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2014-06-11 13:24 - 2014-05-30 09:13 - 00704512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2014-06-11 13:24 - 2014-02-06 13:30 - 00004096 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollectorres.dll
2014-06-11 13:24 - 2014-02-06 13:07 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll
2014-06-11 13:24 - 2014-02-06 13:06 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwproxystub.dll
2014-06-11 13:24 - 2014-02-06 12:56 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll
2014-06-11 13:24 - 2014-02-06 12:49 - 00139264 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieUnatt.exe
2014-06-11 13:24 - 2014-02-06 12:48 - 00111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollector.exe
2014-06-11 13:24 - 2014-02-06 12:17 - 00195584 _____ (Microsoft Corporation) C:\WINDOWS\system32\msrating.dll
2014-06-11 13:24 - 2014-02-06 12:00 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieetwproxystub.dll
2014-06-11 13:24 - 2014-02-06 11:52 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll
2014-06-11 13:24 - 2014-02-06 11:52 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iernonce.dll
2014-06-11 13:24 - 2014-02-06 11:47 - 00112128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieUnatt.exe
2014-06-11 13:24 - 2014-02-06 11:25 - 00164864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrating.dll
2014-06-11 13:22 - 2014-05-10 05:46 - 02151424 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3.dll
2014-06-11 13:22 - 2014-05-10 05:22 - 01312256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3.dll
2014-06-11 13:22 - 2014-05-09 01:06 - 00295424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ks.sys
2014-06-11 13:22 - 2014-05-03 09:14 - 00079872 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSReset.exe
2014-06-11 13:22 - 2014-05-03 06:21 - 00249344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2014-06-11 13:22 - 2014-05-03 06:07 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2014-06-11 13:22 - 2014-05-03 05:41 - 00921088 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll
2014-06-11 13:22 - 2014-05-03 05:38 - 00754688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll
2014-06-11 13:22 - 2014-04-30 13:16 - 01336648 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll
2014-06-11 13:22 - 2014-04-30 05:51 - 01064448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll
2014-06-11 13:22 - 2014-04-03 09:59 - 02518872 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2014-06-11 13:22 - 2014-04-03 09:59 - 00428888 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS
2014-06-11 13:21 - 2014-05-19 08:31 - 00057856 _____ (Microsoft Corporation) C:\WINDOWS\system32\drvcfg.exe
2014-06-11 13:21 - 2014-05-19 08:21 - 00110592 _____ (Microsoft Corporation) C:\WINDOWS\system32\drvinst.exe
2014-06-11 13:21 - 2014-05-19 07:23 - 00098816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\drvinst.exe
2014-06-11 13:21 - 2014-05-05 06:02 - 03360256 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll
2014-06-11 13:21 - 2014-05-01 15:31 - 03048904 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcMon.exe
2014-06-11 13:21 - 2014-05-01 15:31 - 00055328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wpcfltr.sys
2014-06-11 13:21 - 2014-05-01 09:14 - 03118080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Wpc.dll
2014-06-11 13:21 - 2014-05-01 09:05 - 02861056 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebSync.dll
2014-06-11 13:21 - 2014-05-01 08:51 - 02344448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Wpc.dll
2014-06-11 13:21 - 2014-05-01 07:24 - 02834944 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpccpl.dll
2014-06-11 13:21 - 2014-04-30 06:43 - 01975296 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWrite.dll
2014-06-11 13:21 - 2014-04-30 06:26 - 01345536 _____ (Microsoft Corporation) C:\WINDOWS\system32\FntCache.dll
2014-06-11 13:21 - 2014-04-30 05:47 - 01509888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWrite.dll
2014-05-31 19:53 - 2014-05-31 19:53 - 00015991 _____ () C:\Users\Anne\Downloads\140507_stern_MarkenfeldanalyseAutomobil_Codeplan.xlsx
2014-05-29 20:15 - 2014-05-29 20:15 - 00000549 _____ () C:\Users\Anne\Downloads\hr3_1.asx
2014-05-27 10:41 - 2014-06-13 13:39 - 00000072 _____ () C:\Users\Public\LMDebug.log
2014-05-27 10:40 - 2014-06-14 16:49 - 00003926 _____ () C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{46AD1D8B-18FD-46DB-888A-8D28933A7DDF}
2014-05-27 10:40 - 2014-05-27 10:40 - 00000000 __SHD () C:\Users\Anne\AppData\Local\EmieUserList
2014-05-27 10:40 - 2014-05-27 10:40 - 00000000 __SHD () C:\Users\Anne\AppData\Local\EmieSiteList
2014-05-27 10:39 - 2014-05-27 10:39 - 00000000 ____D () C:\ProgramData\Samsung
2014-05-23 12:54 - 2014-06-13 13:10 - 00000000 ____D () C:\Users\Anne\Documents\Job
2014-05-23 12:54 - 2014-05-23 12:54 - 00081512 _____ () C:\Users\Anne\AppData\Local\GDIPFONTCACHEV1.DAT
2014-05-23 12:53 - 2014-06-13 13:14 - 00000000 ____D () C:\Users\Anne\Documents\Uni
2014-05-23 12:53 - 2014-05-23 12:53 - 00000000 ____D () C:\Users\Anne\Documents\Schule
2014-05-23 12:53 - 2014-05-23 12:53 - 00000000 ____D () C:\Users\Anne\Documents\Duo
2014-05-23 11:47 - 2014-05-26 16:02 - 00000000 ___DC () C:\WINDOWS\Panther
2014-05-23 11:46 - 2014-05-23 11:46 - 00308224 _____ (Microsoft Corporation) C:\WINDOWS\system32\wusa.exe
2014-05-23 11:46 - 2014-05-23 11:46 - 00305152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wusa.exe
2014-05-23 11:45 - 2014-05-23 11:45 - 02900992 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 02641920 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 02479616 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmSvc.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 02373784 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2014-05-23 11:45 - 2014-05-23 11:45 - 02331000 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 02317824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 02270208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 02141912 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 02133504 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 02088160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2014-05-23 11:45 - 2014-05-23 11:45 - 02030080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WsmSvc.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 02013016 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2014-05-23 11:45 - 2014-05-23 11:45 - 01843712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Display.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 01816576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Display.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 01779800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 01764864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 01679128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 01656832 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 01557848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2014-05-23 11:45 - 2014-05-23 11:45 - 01542768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 01351168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 01306624 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 01291200 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel32.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 01112536 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 01095488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 01063424 _____ (Microsoft Corporation) C:\WINDOWS\system32\IKEEXT.DLL
2014-05-23 11:45 - 2014-05-23 11:45 - 01036288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kernel32.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 01015808 _____ (Microsoft Corporation) C:\WINDOWS\system32\aclui.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00950784 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgent.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00939520 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00924160 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00887296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aclui.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00836096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00834560 _____ (Microsoft Corporation) C:\WINDOWS\system32\netlogon.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00827392 _____ (Microsoft Corporation) C:\WINDOWS\system32\BFE.DLL
2014-05-23 11:45 - 2014-05-23 11:45 - 00800256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReAgent.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00755712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00717312 _____ (Microsoft Corporation) C:\WINDOWS\system32\nshwfp.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00688640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netlogon.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00669696 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasapi32.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00655360 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsapi.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00621568 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAgent.exe
2014-05-23 11:45 - 2014-05-23 11:45 - 00605184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasapi32.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00567296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nshwfp.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00563200 _____ (Microsoft Corporation) C:\WINDOWS\system32\AdmTmpl.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00542208 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.Printing.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00518552 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00512000 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidprov.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00494592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dnsapi.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00488280 _____ (Microsoft Corporation) C:\WINDOWS\system32\netcfgx.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00467800 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS
2014-05-23 11:45 - 2014-05-23 11:45 - 00462336 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlangpui.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00444928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AdmTmpl.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00412672 _____ (Microsoft Corporation) C:\WINDOWS\system32\FWPUCLNT.DLL
2014-05-23 11:45 - 2014-05-23 11:45 - 00406912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00402432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Graphics.Printing.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00390488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netcfgx.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00387210 _____ () C:\WINDOWS\system32\ApnDatabase.xml
2014-05-23 11:45 - 2014-05-23 11:45 - 00386560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlangpui.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00379224 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2014-05-23 11:45 - 2014-05-23 11:45 - 00376152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys
2014-05-23 11:45 - 2014-05-23 11:45 - 00360512 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfreadwrite.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00356864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlidprov.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00356848 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcomp.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00355832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfreadwrite.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00325632 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationApi.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00324096 _____ (Microsoft Corporation) C:\WINDOWS\system32\SessEnv.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00299008 _____ (Microsoft Corporation) C:\WINDOWS\system32\pdh.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00298496 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSDMon.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00291840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Sensors.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00283648 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb10.sys
2014-05-23 11:45 - 2014-05-23 11:45 - 00280576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SessEnv.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00274944 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmWmiPl.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00271872 _____ (Microsoft Corporation) C:\WINDOWS\system32\spp.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00264192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FWPUCLNT.DLL
2014-05-23 11:45 - 2014-05-23 11:45 - 00262656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LocationApi.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00254976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pdh.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00254464 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsrslvr.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00252928 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00247296 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsApi.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00226304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Sensors.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00222720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\spp.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00222720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dcomp.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00220160 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00212992 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdd.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00201216 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReInfo.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00197632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00192000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Scanners.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00186368 _____ (Microsoft Corporation) C:\WINDOWS\system32\dafWfdProvider.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00172544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReInfo.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00171008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SensorsApi.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00160768 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxAllUserStore.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00157016 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wof.sys
2014-05-23 11:45 - 2014-05-23 11:45 - 00151040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Scanners.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxdav.sys
2014-05-23 11:45 - 2014-05-23 11:45 - 00139776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxAllUserStore.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00136024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wfplwfs.sys
2014-05-23 11:45 - 2014-05-23 11:45 - 00134144 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dfsc.sys
2014-05-23 11:45 - 2014-05-23 11:45 - 00115200 _____ (Microsoft Corporation) C:\WINDOWS\system32\umpnpmgr.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00115200 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevPropMgr.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00113648 _____ (Microsoft Corporation) C:\WINDOWS\system32\userenv.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00111616 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidclass.sys
2014-05-23 11:45 - 2014-05-23 11:45 - 00102912 _____ (Microsoft Corporation) C:\WINDOWS\system32\davclnt.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00094016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\userenv.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00086016 _____ (Microsoft Corporation) C:\WINDOWS\system32\RMapi.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\davclnt.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\sxproxy.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00079360 _____ (Microsoft Corporation) C:\WINDOWS\system32\w32tm.exe
2014-05-23 11:45 - 2014-05-23 11:45 - 00079360 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\IPMIDrv.sys
2014-05-23 11:45 - 2014-05-23 11:45 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\w32tm.exe
2014-05-23 11:45 - 2014-05-23 11:45 - 00069120 _____ (Microsoft Corporation) C:\WINDOWS\system32\l2gpstore.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\l2gpstore.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpipreg.sys
2014-05-23 11:45 - 2014-05-23 11:45 - 00040448 _____ (Microsoft Corporation) C:\WINDOWS\system32\SetNetworkLocation.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sxproxy.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00033280 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidusb.sys
2014-05-23 11:45 - 2014-05-23 11:45 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredentialMigrationHandler.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredentialMigrationHandler.dll
2014-05-23 11:44 - 2014-05-23 11:44 - 03464192 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2014-05-23 11:44 - 2014-05-23 11:44 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2014-05-23 11:44 - 2014-05-23 11:44 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2014-05-23 11:44 - 2014-05-23 11:44 - 01705472 _____ (Microsoft Corporation) C:\WINDOWS\system32\wucltux.dll
2014-05-23 11:44 - 2014-05-23 11:44 - 01054208 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.appcore.dll
2014-05-23 11:44 - 2014-05-23 11:44 - 00828928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.appcore.dll
2014-05-23 11:44 - 2014-05-23 11:44 - 00827392 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2014-05-23 11:44 - 2014-05-23 11:44 - 00666624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2014-05-23 11:44 - 2014-05-23 11:44 - 00555736 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.appcore.dll
2014-05-23 11:44 - 2014-05-23 11:44 - 00419928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.appcore.dll
2014-05-23 11:44 - 2014-05-23 11:44 - 00381440 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUSettingsProvider.dll
2014-05-23 11:44 - 2014-05-23 11:44 - 00201728 _____ (Microsoft Corporation) C:\WINDOWS\system32\ubpm.dll
2014-05-23 11:44 - 2014-05-23 11:44 - 00190976 _____ (Microsoft Corporation) C:\WINDOWS\system32\storewuauth.dll
2014-05-23 11:44 - 2014-05-23 11:44 - 00137728 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuwebv.dll
2014-05-23 11:44 - 2014-05-23 11:44 - 00123904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuwebv.dll
2014-05-23 11:44 - 2014-05-23 11:44 - 00093696 _____ (Microsoft Corporation) C:\WINDOWS\system32\wudriver.dll
2014-05-23 11:44 - 2014-05-23 11:44 - 00080896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wudriver.dll
2014-05-23 11:44 - 2014-05-23 11:44 - 00056320 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups.dll
2014-05-23 11:44 - 2014-05-23 11:44 - 00054776 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2014-05-23 11:44 - 2014-05-23 11:44 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapp.exe
2014-05-23 11:44 - 2014-05-23 11:44 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapp.exe
2014-05-23 11:44 - 2014-05-23 11:44 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wups.dll
2014-05-23 11:44 - 2014-05-23 11:44 - 00000000 ___RD () C:\WINDOWS\BrowserChoice
2014-05-23 11:43 - 2014-05-23 11:43 - 21268952 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 18755672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 16872448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 13287936 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 12711424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 11792384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 08652800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 07425368 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2014-05-23 11:43 - 2014-05-23 11:43 - 07173120 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 06645248 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 05833216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Search.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 05774848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 05104640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 04269056 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncEngine.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 04190720 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2014-05-23 11:43 - 2014-05-23 11:43 - 02688000 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 02144984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 02140888 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 02124840 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d9.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 02100736 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlowUI.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 01797896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d9.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 01584128 _____ (Microsoft Corporation) C:\WINDOWS\system32\workfolderssvc.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 01527296 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 01466856 _____ (Microsoft Corporation) C:\WINDOWS\system32\propsys.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 01436160 _____ (Microsoft Corporation) C:\WINDOWS\system32\VSSVC.exe
2014-05-23 11:43 - 2014-05-23 11:43 - 01411584 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 01403856 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 01379064 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpmde.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 01308160 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpsvc.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 01287168 _____ (Microsoft Corporation) C:\WINDOWS\system32\mispace.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 01230336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 01222656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Streaming.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 01209616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmde.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 01200288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\propsys.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 01200128 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthport.sys
2014-05-23 11:43 - 2014-05-23 11:43 - 01126912 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFolder.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 01057280 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdvidcrl.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 01029120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mispace.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 01025024 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00982016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Streaming.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00955904 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00918528 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00888320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00881616 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00872448 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDrive.exe
2014-05-23 11:43 - 2014-05-23 11:43 - 00855552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdvidcrl.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00836608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchFolder.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00834048 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00805376 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00765408 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00761856 _____ (Microsoft Corporation) C:\WINDOWS\system32\WorkfoldersControl.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00731648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\adtschema.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00731648 _____ (Microsoft Corporation) C:\WINDOWS\system32\adtschema.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00721408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveTelemetry.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00718336 _____ (Microsoft Corporation) C:\WINDOWS\system32\swprv.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00707048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00677376 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys
2014-05-23 11:43 - 2014-05-23 11:43 - 00669856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00667648 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpprefcl.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00629760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmCoreR.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00609448 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00590336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gpprefcl.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00589656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fvevol.sys
2014-05-23 11:43 - 2014-05-23 11:43 - 00565536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2014-05-23 11:43 - 2014-05-23 11:43 - 00563200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\afd.sys
2014-05-23 11:43 - 2014-05-23 11:43 - 00518544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00491744 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00491520 _____ (Microsoft Corporation) C:\WINDOWS\system32\GeofenceMonitorService.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00486912 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv
2014-05-23 11:43 - 2014-05-23 11:43 - 00467968 _____ (Microsoft Corporation) C:\WINDOWS\system32\srcore.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00467496 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00463256 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00462336 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsGdiConverter.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00449536 _____ (Microsoft Corporation) C:\WINDOWS\system32\defragsvc.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00443904 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansec.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00443904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\nwifi.sys
2014-05-23 11:43 - 2014-05-23 11:43 - 00426496 _____ (Microsoft Corporation) C:\WINDOWS\system32\clusapi.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00407016 _____ (Microsoft Corporation) C:\WINDOWS\system32\services.exe
2014-05-23 11:43 - 2014-05-23 11:43 - 00406504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00402432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
2014-05-23 11:43 - 2014-05-23 11:43 - 00387896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00384856 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spaceport.sys
2014-05-23 11:43 - 2014-05-23 11:43 - 00372568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storport.sys
2014-05-23 11:43 - 2014-05-23 11:43 - 00370176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv
2014-05-23 11:43 - 2014-05-23 11:43 - 00370176 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanmsm.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00364640 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00360792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fltMgr.sys
2014-05-23 11:43 - 2014-05-23 11:43 - 00357376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GeofenceMonitorService.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00337408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsGdiConverter.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00337240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Classpnp.sys
2014-05-23 11:43 - 2014-05-23 11:43 - 00335872 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDEServer.exe
2014-05-23 11:43 - 2014-05-23 11:43 - 00326024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00324888 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFCaptureEngine.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00323072 _____ (Microsoft Corporation) C:\WINDOWS\system32\srvsvc.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00313344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\clusapi.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00310616 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\volsnap.sys
2014-05-23 11:43 - 2014-05-23 11:43 - 00307304 _____ (Microsoft Corporation) C:\WINDOWS\system32\wintrust.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00305768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00300544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanmsm.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00296960 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanapi.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00285144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFCaptureEngine.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00281600 _____ (Microsoft Corporation) C:\WINDOWS\system32\resutils.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00275800 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msiscsi.sys
2014-05-23 11:43 - 2014-05-23 11:43 - 00271872 _____ (Microsoft Corporation) C:\WINDOWS\system32\rstrui.exe
2014-05-23 11:43 - 2014-05-23 11:43 - 00263424 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlows.exe
2014-05-23 11:43 - 2014-05-23 11:43 - 00257880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdFilter.sys
2014-05-23 11:43 - 2014-05-23 11:43 - 00250368 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpencom.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00246272 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srvnet.sys
2014-05-23 11:43 - 2014-05-23 11:43 - 00244880 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2014-05-23 11:43 - 2014-05-23 11:43 - 00233912 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00230808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wintrust.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanapi.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00219136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\resutils.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00219136 _____ (Microsoft Corporation) C:\WINDOWS\system32\tscfgwmi.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00209920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpencom.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00206848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys
2014-05-23 11:43 - 2014-05-23 11:43 - 00201920 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVideoDSP.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00201216 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00191488 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpchttp.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00186880 _____ (Microsoft Corporation) C:\WINDOWS\system32\WorkFoldersShell.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00180056 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2014-05-23 11:43 - 2014-05-23 11:43 - 00178184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVideoDSP.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00144384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpchttp.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00143872 _____ (Microsoft Corporation) C:\WINDOWS\system32\BootMenuUX.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00135168 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscsvc.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00130144 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpapi.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00125496 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmapi.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00123224 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdNisDrv.sys
2014-05-23 11:43 - 2014-05-23 11:43 - 00111528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gpapi.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00098584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmapi.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00077312 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hdaudbus.sys
2014-05-23 11:43 - 2014-05-23 11:43 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\system32\srclient.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsgqec.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\srclient.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00055296 _____ (Microsoft Corporation) C:\WINDOWS\system32\energyprov.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tsgqec.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00047616 _____ (Microsoft Corporation) C:\WINDOWS\system32\tlscsp.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00046592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tlscsp.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Shell.Search.UriHandler.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00035856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdBoot.sys
2014-05-23 11:43 - 2014-05-23 11:43 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Shell.Search.UriHandler.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00032600 _____ (Microsoft Corporation) C:\WINDOWS\system32\ploptin.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00028408 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfpmp.exe
2014-05-23 11:43 - 2014-05-23 11:43 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d8thk.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanhlp.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanhlp.dll
2014-05-23 11:41 - 2014-05-23 11:41 - 00262144 _____ () C:\WINDOWS\system32\config\userdiff
2014-05-23 11:41 - 2014-05-23 11:41 - 00000000 ____D () C:\WINDOWS\PCHEALTH
2014-05-23 11:40 - 2014-04-09 00:46 - 00086688 _____ (Microsoft Corporation) C:\WINDOWS\system32\mrt_map.dll
2014-05-23 11:40 - 2014-04-09 00:46 - 00028320 _____ (Microsoft Corporation) C:\WINDOWS\system32\mrt100.dll
2014-05-23 11:40 - 2014-04-08 20:54 - 00080032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mrt_map.dll
2014-05-23 11:40 - 2014-04-08 20:54 - 00026784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mrt100.dll
2014-05-23 11:29 - 2014-06-14 17:08 - 00000000 __RDO () C:\Users\Anne\OneDrive
2014-05-23 11:27 - 2014-05-23 11:28 - 00000000 ____D () C:\Users\Anne\AppData\Local\PackageStaging
2014-05-23 11:27 - 2014-05-23 11:27 - 00001454 _____ () C:\Users\Anne\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-05-23 11:26 - 2014-05-23 11:26 - 00000020 ___SH () C:\Users\Anne\ntuser.ini
2014-05-23 11:05 - 2014-05-23 11:05 - 00000000 _SHDL () C:\Users\Default\Vorlagen
2014-05-23 11:05 - 2014-05-23 11:05 - 00000000 _SHDL () C:\Users\Default\Startmenü
2014-05-23 11:05 - 2014-05-23 11:05 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung
2014-05-23 11:05 - 2014-05-23 11:05 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen
2014-05-23 11:05 - 2014-05-23 11:05 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien
2014-05-23 11:05 - 2014-05-23 11:05 - 00000000 _SHDL () C:\Users\Default\Druckumgebung
2014-05-23 11:05 - 2014-05-23 11:05 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik
2014-05-23 11:05 - 2014-05-23 11:05 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder
2014-05-23 11:05 - 2014-05-23 11:05 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-05-23 11:05 - 2014-05-23 11:05 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf
2014-05-23 11:05 - 2014-05-23 11:05 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten
2014-05-23 11:05 - 2014-05-23 11:05 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten
2014-05-23 11:05 - 2014-05-23 11:05 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik
2014-05-23 11:05 - 2014-05-23 11:05 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder
2014-05-23 11:05 - 2014-05-23 11:05 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-05-23 11:05 - 2014-05-23 11:05 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf
2014-05-23 11:05 - 2014-05-23 11:05 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten
2014-05-23 11:04 - 2014-06-14 16:58 - 01646906 _____ () C:\WINDOWS\WindowsUpdate.log
2014-05-23 11:03 - 2014-05-23 11:03 - 00022960 _____ () C:\WINDOWS\system32\emptyregdb.dat
2014-05-23 10:58 - 2014-05-23 10:58 - 00001547 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2014-05-23 10:58 - 2014-05-23 10:58 - 00000000 ____D () C:\Users\Default\AppData\Local\Microsoft Help
2014-05-23 10:58 - 2014-05-23 10:58 - 00000000 ____D () C:\Users\Default User\AppData\Local\Microsoft Help
2014-05-23 10:56 - 2014-05-23 10:56 - 00000000 ____D () C:\WINDOWS\system32\config\bbimigrate
2014-05-23 10:55 - 2014-06-14 17:16 - 00000000 ____D () C:\Users\Anne\AppData\Local\Temp
2014-05-23 10:55 - 2014-06-14 17:10 - 00000000 ____D () C:\Users\Anne
2014-05-23 10:55 - 2014-05-23 11:04 - 00024768 _____ () C:\WINDOWS\diagwrn.xml
2014-05-23 10:55 - 2014-05-23 11:04 - 00024768 _____ () C:\WINDOWS\diagerr.xml
2014-05-23 10:55 - 2014-05-23 10:55 - 00000000 _SHDL () C:\Users\Anne\Vorlagen
2014-05-23 10:55 - 2014-05-23 10:55 - 00000000 _SHDL () C:\Users\Anne\Startmenü
2014-05-23 10:55 - 2014-05-23 10:55 - 00000000 _SHDL () C:\Users\Anne\Netzwerkumgebung
2014-05-23 10:55 - 2014-05-23 10:55 - 00000000 _SHDL () C:\Users\Anne\Lokale Einstellungen
2014-05-23 10:55 - 2014-05-23 10:55 - 00000000 _SHDL () C:\Users\Anne\Eigene Dateien
2014-05-23 10:55 - 2014-05-23 10:55 - 00000000 _SHDL () C:\Users\Anne\Druckumgebung
2014-05-23 10:55 - 2014-05-23 10:55 - 00000000 _SHDL () C:\Users\Anne\Documents\Eigene Musik
2014-05-23 10:55 - 2014-05-23 10:55 - 00000000 _SHDL () C:\Users\Anne\Documents\Eigene Bilder
2014-05-23 10:55 - 2014-05-23 10:55 - 00000000 _SHDL () C:\Users\Anne\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-05-23 10:55 - 2014-05-23 10:55 - 00000000 _SHDL () C:\Users\Anne\AppData\Local\Verlauf
2014-05-23 10:55 - 2014-05-23 10:55 - 00000000 _SHDL () C:\Users\Anne\AppData\Local\Anwendungsdaten
2014-05-23 10:55 - 2014-05-23 10:55 - 00000000 _SHDL () C:\Users\Anne\Anwendungsdaten
2014-05-23 10:55 - 2014-05-23 10:55 - 00000000 ___RD () C:\Users\Anne\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-05-23 10:55 - 2014-05-23 10:55 - 00000000 ___RD () C:\Users\Anne\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-05-23 10:55 - 2014-03-18 12:12 - 00000369 _____ () C:\Users\Anne\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk
2014-05-23 10:55 - 2014-03-18 12:12 - 00000369 _____ () C:\Users\Anne\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk
2014-05-23 10:55 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Anne\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-05-23 10:55 - 2013-08-22 17:36 - 00000000 ____D () C:\Users\Anne\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-05-23 10:50 - 2014-05-23 10:56 - 00000000 ____D () C:\ProgramData\Conexant
2014-05-23 10:50 - 2014-05-23 10:56 - 00000000 ____D () C:\Program Files\CONEXANT
2014-05-23 10:50 - 2014-05-23 10:50 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_Kernel_iBtFltCoex_01009.Wdf
2014-05-23 10:50 - 2014-01-25 02:23 - 00064000 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.DLL
2014-05-23 10:50 - 2014-01-25 02:23 - 00060416 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.DLL
2014-05-23 10:49 - 2014-05-23 10:49 - 00000000 ____D () C:\Program Files\Elantech
2014-05-23 10:26 - 2014-05-23 11:04 - 00006626 _____ () C:\WINDOWS\comsetup.log
2014-05-23 02:29 - 2014-05-23 10:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office Live Add-in
2014-05-23 01:23 - 2014-05-23 01:23 - 00255042 _____ () C:\ProgramData\1400800923.bdinstall.bin
2014-05-23 01:20 - 2014-05-23 01:20 - 00103312 _____ () C:\ProgramData\1400800806.bdinstall.bin
2014-05-22 22:40 - 2014-06-11 13:55 - 00000000 ____D () C:\WINDOWS\system32\MRT
2014-05-22 22:40 - 2014-06-11 13:54 - 95414520 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2014-05-22 21:52 - 2014-05-22 21:53 - 16501035 _____ () C:\Users\Anne\Downloads\NYCityscapesJohnnyWLam.themepack
2014-05-22 21:16 - 2013-05-04 06:51 - 00014848 ____N (Microsoft) C:\WINDOWS\system32\rars.rs
2014-05-22 21:16 - 2013-05-04 06:10 - 00014848 ____N (Microsoft) C:\WINDOWS\SysWOW64\rars.rs
2014-05-22 21:06 - 2014-05-22 21:27 - 00002392 _____ () C:\Users\Anne\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2014-05-22 21:06 - 2014-05-22 21:06 - 00000385 _____ () C:\Users\Anne\AppData\Roaminguser_gensett.xml
2014-05-22 18:07 - 2014-05-22 18:07 - 00520507 _____ () C:\ProgramData\1400774373.bdinstall.bin
2014-05-22 18:06 - 2014-05-22 18:06 - 00000385 _____ () C:\WINDOWS\system32\user_gensett.xml
2014-05-22 18:05 - 2014-05-22 18:05 - 00000251 _____ () C:\WINDOWS\system32\netcfg-1859500.txt
2014-05-22 18:05 - 2014-05-22 18:05 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_Kernel_avchv_01009.Wdf
2014-05-22 18:05 - 2014-05-22 18:05 - 00000000 ____D () C:\ProgramData\BDLogging
2014-05-22 18:05 - 2013-11-04 15:47 - 00074512 _____ (BitDefender SRL) C:\WINDOWS\SysWOW64\bdsandboxuiskin32.dll
2014-05-22 18:05 - 2007-04-11 10:11 - 00511328 _____ (Microsoft Corporation) C:\WINDOWS\capicom.dll
2014-05-22 17:59 - 2014-05-23 01:23 - 00000000 ____D () C:\Program Files\Bitdefender
2014-05-22 17:59 - 2014-05-23 01:22 - 00000000 ____D () C:\Program Files\Common Files\Bitdefender
2014-05-22 17:59 - 2014-05-22 21:36 - 00074512 _____ (BitDefender SRL) C:\WINDOWS\system32\bdsandboxuiskin32.dll
2014-05-22 17:59 - 2014-05-22 17:59 - 00000000 ____D () C:\Users\Anne\AppData\Roaming\QuickScan
2014-05-22 17:59 - 2013-11-04 15:47 - 00084848 _____ (BitDefender SRL) C:\WINDOWS\system32\BDSandBoxUISkin.dll
2014-05-22 17:59 - 2013-11-04 15:46 - 00034384 _____ (BitDefender SRL) C:\WINDOWS\system32\BDSandBoxUH.dll
2014-05-22 17:58 - 2014-05-22 17:58 - 07307552 _____ () C:\Users\Anne\Downloads\bitdefender_isecurity.exe
2014-05-22 17:57 - 2014-05-23 10:57 - 00000000 ____D () C:\WINDOWS\SysWOW64\sda
2014-05-22 17:57 - 2014-01-07 14:24 - 00359128 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\Drivers\RtsPStor.sys
2014-05-22 17:57 - 2014-01-07 14:10 - 00313048 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\Drivers\RtsBaStor.sys
2014-05-22 17:57 - 2014-01-03 16:34 - 00465624 _____ (Realsil Semiconductor Corporation) C:\WINDOWS\system32\Drivers\RtsPer.sys
2014-05-22 17:57 - 2014-01-03 16:08 - 00291544 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\Drivers\RtsP2Stor.sys
2014-05-22 17:57 - 2014-01-03 13:33 - 00271064 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\Drivers\RtsUStor.sys
2014-05-22 17:57 - 2014-01-03 11:14 - 00331992 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\Drivers\RtsUVStor.sys
2014-05-22 17:57 - 2013-04-25 18:12 - 09889352 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\SysWOW64\RsCRIcon.dll
2014-05-22 17:51 - 2014-05-22 17:57 - 12171007 _____ () C:\Users\Anne\Downloads\RtsXStor_6.3.273.37.zip
2014-05-22 17:51 - 2014-01-19 09:33 - 00270496 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2014-05-22 17:48 - 2014-05-23 10:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
2014-05-22 17:47 - 2014-05-23 02:03 - 00000000 ____D () C:\Program Files (x86)\Microsoft Works
2014-05-22 17:44 - 2014-05-22 17:44 - 00000000 ____D () C:\Program Files\Microsoft Office
2014-05-22 17:43 - 2014-06-11 13:55 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-05-22 17:43 - 2014-05-23 11:43 - 00000000 ____D () C:\Program Files (x86)\Microsoft Office
2014-05-22 17:43 - 2014-05-22 17:43 - 00000000 ____D () C:\Users\Anne\AppData\Local\Microsoft Help
2014-05-22 17:42 - 2014-05-22 17:42 - 00000000 __RHD () C:\MSOCache
2014-05-22 17:41 - 2014-05-22 17:41 - 00000117 _____ () C:\WINDOWS\system32\netcfg-423203.txt
2014-05-22 17:41 - 2014-05-22 17:41 - 00000117 _____ () C:\WINDOWS\system32\netcfg-423171.txt

==================== One Month Modified Files and Folders =======

2014-06-14 17:16 - 2014-06-14 17:14 - 00023241 _____ () C:\Users\Anne\Desktop\Addition.txt
2014-06-14 17:16 - 2014-06-14 17:14 - 00010044 _____ () C:\Users\Anne\Desktop\FRST.txt
2014-06-14 17:16 - 2014-06-14 17:14 - 00000000 ____D () C:\FRST
2014-06-14 17:16 - 2014-05-23 10:55 - 00000000 ____D () C:\Users\Anne\AppData\Local\Temp
2014-06-14 17:10 - 2014-06-14 17:10 - 00000470 _____ () C:\Users\Anne\Desktop\defogger_disable.log
2014-06-14 17:10 - 2014-06-14 17:10 - 00000000 _____ () C:\Users\Anne\defogger_reenable
2014-06-14 17:10 - 2014-05-23 10:55 - 00000000 ____D () C:\Users\Anne
2014-06-14 17:09 - 2014-03-18 12:04 - 01689572 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2014-06-14 17:09 - 2014-03-18 11:25 - 00728968 _____ () C:\WINDOWS\system32\perfh007.dat
2014-06-14 17:09 - 2014-03-18 11:25 - 00152122 _____ () C:\WINDOWS\system32\perfc007.dat
2014-06-14 17:09 - 2012-07-26 05:04 - 00001124 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2014-06-14 17:08 - 2014-05-23 11:29 - 00000000 __RDO () C:\Users\Anne\OneDrive
2014-06-14 17:05 - 2014-06-14 17:08 - 02081792 _____ (Farbar) C:\Users\Anne\Desktop\FRST64.exe
2014-06-14 17:05 - 2014-06-14 17:08 - 00380416 _____ () C:\Users\Anne\Desktop\Gmer-19357.exe
2014-06-14 17:05 - 2014-06-14 17:08 - 00050477 _____ () C:\Users\Anne\Desktop\Defogger.exe
2014-06-14 17:00 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\sru
2014-06-14 16:58 - 2014-05-23 11:04 - 01646906 _____ () C:\WINDOWS\WindowsUpdate.log
2014-06-14 16:49 - 2014-05-27 10:40 - 00003926 _____ () C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{46AD1D8B-18FD-46DB-888A-8D28933A7DDF}
2014-06-14 16:49 - 2012-07-26 04:07 - 00003600 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2489216334-2735940672-2852440863-1001
2014-06-14 16:24 - 2012-07-26 05:05 - 00002195 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-06-14 16:22 - 2012-07-26 05:04 - 00001120 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2014-06-14 16:21 - 2013-08-22 16:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2014-06-14 16:21 - 2013-08-22 15:25 - 00524288 ___SH () C:\WINDOWS\system32\config\BBI
2014-06-14 16:21 - 2012-07-26 05:12 - 00525296 _____ () C:\Users\Public\CAFADEBUG.log
2014-06-14 15:43 - 2014-06-12 20:58 - 00122584 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2014-06-13 13:39 - 2014-05-27 10:41 - 00000072 _____ () C:\Users\Public\LMDebug.log
2014-06-13 13:14 - 2014-05-23 12:53 - 00000000 ____D () C:\Users\Anne\Documents\Uni
2014-06-13 13:10 - 2014-05-23 12:54 - 00000000 ____D () C:\Users\Anne\Documents\Job
2014-06-13 13:03 - 2013-08-22 16:46 - 00295396 _____ () C:\WINDOWS\setupact.log
2014-06-12 21:28 - 2014-06-12 21:28 - 00000000 ____D () C:\Program Files (x86)\predm
2014-06-12 21:22 - 2014-03-18 03:51 - 00013158 _____ () C:\WINDOWS\PFRO.log
2014-06-12 21:21 - 2014-06-12 21:20 - 00000000 ____D () C:\AdwCleaner
2014-06-12 21:20 - 2014-06-12 21:19 - 01016261 _____ (Thisisu) C:\Users\Anne\Downloads\JRT.exe
2014-06-12 21:17 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\MediaViewer
2014-06-12 21:16 - 2014-06-12 20:16 - 00000000 ____D () C:\temp
2014-06-12 20:57 - 2014-06-12 20:57 - 00001118 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-06-12 20:57 - 2014-06-12 20:57 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-06-12 20:57 - 2014-06-12 20:57 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-06-12 20:57 - 2014-06-12 20:57 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-06-12 20:50 - 2014-06-12 20:45 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Anne\Downloads\mbam-setup-2.0.2.1012.exe
2014-06-12 20:47 - 2014-06-12 20:46 - 00441592 _____ (Bleeping Computer, LLC) C:\Users\Anne\Downloads\sc-cleaner.exe
2014-06-12 20:47 - 2014-06-12 20:45 - 01333465 _____ () C:\Users\Anne\Downloads\adwcleaner_3.212.exe
2014-06-12 20:40 - 2014-06-12 20:37 - 00000444 __RSH () C:\ProgramData\ntuser.pol
2014-06-12 20:37 - 2013-08-22 17:36 - 00000000 ___HD () C:\WINDOWS\system32\GroupPolicy
2014-06-12 20:37 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\GroupPolicy
2014-06-12 20:15 - 2012-07-26 09:59 - 00000000 ____D () C:\WINDOWS\CbsTemp
2014-06-12 14:23 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\rescache
2014-06-11 20:11 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\WinStore
2014-06-11 20:10 - 2013-08-22 17:36 - 00000000 ___RD () C:\WINDOWS\ToastData
2014-06-11 15:50 - 2014-06-11 15:50 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_User_LocationProvider_01_11_00.Wdf
2014-06-11 13:55 - 2014-05-22 22:40 - 00000000 ____D () C:\WINDOWS\system32\MRT
2014-06-11 13:55 - 2014-05-22 17:43 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-06-11 13:54 - 2014-05-22 22:40 - 95414520 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2014-06-11 11:20 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\AppReadiness
2014-06-10 13:29 - 2013-08-22 15:25 - 00262144 ___SH () C:\WINDOWS\system32\config\ELAM
2014-06-10 13:21 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\NDF
2014-05-31 19:53 - 2014-05-31 19:53 - 00015991 _____ () C:\Users\Anne\Downloads\140507_stern_MarkenfeldanalyseAutomobil_Codeplan.xlsx
2014-05-31 07:13 - 2013-08-22 17:38 - 00703992 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2014-05-31 07:13 - 2013-08-22 17:38 - 00105464 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2014-05-30 12:21 - 2014-06-11 13:24 - 23414784 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2014-05-30 11:45 - 2014-06-11 13:24 - 02768384 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2014-05-30 11:28 - 2014-06-11 13:24 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll
2014-05-30 11:20 - 2014-06-11 13:24 - 00752640 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2014-05-30 11:18 - 2014-06-11 13:24 - 17271296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2014-05-30 11:08 - 2014-06-11 13:24 - 05782528 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2014-05-30 11:06 - 2014-06-11 13:24 - 00452096 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtmsft.dll
2014-05-30 10:46 - 2014-06-11 13:24 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2014-05-30 10:44 - 2014-06-11 13:24 - 00295424 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll
2014-05-30 10:43 - 2014-06-11 13:24 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesetup.dll
2014-05-30 10:38 - 2014-06-11 13:24 - 02179072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2014-05-30 10:35 - 2014-06-11 13:24 - 00608768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2014-05-30 10:29 - 2014-06-11 13:24 - 00631808 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2014-05-30 10:27 - 2014-06-11 13:24 - 00592896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll
2014-05-30 10:23 - 2014-06-11 13:24 - 02040832 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2014-05-30 10:16 - 2014-06-11 13:24 - 00368128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtmsft.dll
2014-05-30 10:04 - 2014-06-11 13:24 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll
2014-05-30 10:02 - 2014-06-11 13:24 - 00242688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll
2014-05-30 09:56 - 2014-06-11 13:24 - 04244992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2014-05-30 09:56 - 2014-06-11 13:24 - 02266112 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2014-05-30 09:54 - 2014-06-11 13:24 - 00526336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2014-05-30 09:49 - 2014-06-11 13:24 - 01964544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2014-05-30 09:43 - 2014-06-11 13:24 - 13522944 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2014-05-30 09:40 - 2014-06-11 13:24 - 11725312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2014-05-30 09:30 - 2014-06-11 13:24 - 01398272 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2014-05-30 09:21 - 2014-06-11 13:24 - 01790976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2014-05-30 09:15 - 2014-06-11 13:24 - 01143296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2014-05-30 09:13 - 2014-06-11 13:24 - 00846336 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2014-05-30 09:13 - 2014-06-11 13:24 - 00704512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2014-05-29 20:15 - 2014-05-29 20:15 - 00000549 _____ () C:\Users\Anne\Downloads\hr3_1.asx
2014-05-27 10:40 - 2014-05-27 10:40 - 00000000 __SHD () C:\Users\Anne\AppData\Local\EmieUserList
2014-05-27 10:40 - 2014-05-27 10:40 - 00000000 __SHD () C:\Users\Anne\AppData\Local\EmieSiteList
2014-05-27 10:39 - 2014-05-27 10:39 - 00000000 ____D () C:\ProgramData\Samsung
2014-05-26 16:03 - 2012-07-26 04:01 - 00000000 ____D () C:\Users\Anne\AppData\Local\Packages
2014-05-26 16:02 - 2014-05-23 11:47 - 00000000 ___DC () C:\WINDOWS\Panther
2014-05-23 12:54 - 2014-05-23 12:54 - 00081512 _____ () C:\Users\Anne\AppData\Local\GDIPFONTCACHEV1.DAT
2014-05-23 12:53 - 2014-05-23 12:53 - 00000000 ____D () C:\Users\Anne\Documents\Schule
2014-05-23 12:53 - 2014-05-23 12:53 - 00000000 ____D () C:\Users\Anne\Documents\Duo
2014-05-23 11:47 - 2013-08-22 17:36 - 00262144 _____ () C:\WINDOWS\system32\config\BCD-Template
2014-05-23 11:46 - 2014-05-23 11:46 - 00308224 _____ (Microsoft Corporation) C:\WINDOWS\system32\wusa.exe
2014-05-23 11:46 - 2014-05-23 11:46 - 00305152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wusa.exe
2014-05-23 11:46 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\setup
2014-05-23 11:46 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\PolicyDefinitions
2014-05-23 11:45 - 2014-05-23 11:45 - 02900992 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 02641920 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 02479616 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmSvc.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 02373784 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2014-05-23 11:45 - 2014-05-23 11:45 - 02331000 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 02317824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 02270208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 02141912 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 02133504 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 02088160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2014-05-23 11:45 - 2014-05-23 11:45 - 02030080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WsmSvc.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 02013016 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2014-05-23 11:45 - 2014-05-23 11:45 - 01843712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Display.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 01816576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Display.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 01779800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 01764864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 01679128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 01656832 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 01557848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2014-05-23 11:45 - 2014-05-23 11:45 - 01542768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 01351168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 01306624 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 01291200 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel32.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 01112536 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 01095488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 01063424 _____ (Microsoft Corporation) C:\WINDOWS\system32\IKEEXT.DLL
2014-05-23 11:45 - 2014-05-23 11:45 - 01036288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kernel32.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 01015808 _____ (Microsoft Corporation) C:\WINDOWS\system32\aclui.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00950784 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgent.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00939520 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00924160 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00887296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aclui.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00836096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00834560 _____ (Microsoft Corporation) C:\WINDOWS\system32\netlogon.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00827392 _____ (Microsoft Corporation) C:\WINDOWS\system32\BFE.DLL
2014-05-23 11:45 - 2014-05-23 11:45 - 00800256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReAgent.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00755712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00717312 _____ (Microsoft Corporation) C:\WINDOWS\system32\nshwfp.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00688640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netlogon.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00669696 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasapi32.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00655360 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsapi.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00621568 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAgent.exe
2014-05-23 11:45 - 2014-05-23 11:45 - 00605184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasapi32.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00567296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nshwfp.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00563200 _____ (Microsoft Corporation) C:\WINDOWS\system32\AdmTmpl.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00542208 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.Printing.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00518552 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00512000 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidprov.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00494592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dnsapi.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00488280 _____ (Microsoft Corporation) C:\WINDOWS\system32\netcfgx.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00467800 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS
2014-05-23 11:45 - 2014-05-23 11:45 - 00462336 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlangpui.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00444928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AdmTmpl.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00412672 _____ (Microsoft Corporation) C:\WINDOWS\system32\FWPUCLNT.DLL
2014-05-23 11:45 - 2014-05-23 11:45 - 00406912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00402432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Graphics.Printing.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00390488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netcfgx.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00387210 _____ () C:\WINDOWS\system32\ApnDatabase.xml
2014-05-23 11:45 - 2014-05-23 11:45 - 00386560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlangpui.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00379224 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2014-05-23 11:45 - 2014-05-23 11:45 - 00376152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys
2014-05-23 11:45 - 2014-05-23 11:45 - 00360512 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfreadwrite.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00356864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlidprov.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00356848 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcomp.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00355832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfreadwrite.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00325632 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationApi.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00324096 _____ (Microsoft Corporation) C:\WINDOWS\system32\SessEnv.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00299008 _____ (Microsoft Corporation) C:\WINDOWS\system32\pdh.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00298496 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSDMon.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00291840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Sensors.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00283648 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb10.sys
2014-05-23 11:45 - 2014-05-23 11:45 - 00280576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SessEnv.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00274944 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmWmiPl.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00271872 _____ (Microsoft Corporation) C:\WINDOWS\system32\spp.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00264192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FWPUCLNT.DLL
2014-05-23 11:45 - 2014-05-23 11:45 - 00262656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LocationApi.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00254976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pdh.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00254464 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsrslvr.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00252928 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00247296 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsApi.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00226304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Sensors.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00222720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\spp.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00222720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dcomp.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00220160 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00212992 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdd.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00201216 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReInfo.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00197632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00192000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Scanners.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00186368 _____ (Microsoft Corporation) C:\WINDOWS\system32\dafWfdProvider.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00172544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReInfo.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00171008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SensorsApi.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00160768 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxAllUserStore.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00157016 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wof.sys
2014-05-23 11:45 - 2014-05-23 11:45 - 00151040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Scanners.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxdav.sys
2014-05-23 11:45 - 2014-05-23 11:45 - 00139776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxAllUserStore.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00136024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wfplwfs.sys
2014-05-23 11:45 - 2014-05-23 11:45 - 00134144 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dfsc.sys
2014-05-23 11:45 - 2014-05-23 11:45 - 00115200 _____ (Microsoft Corporation) C:\WINDOWS\system32\umpnpmgr.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00115200 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevPropMgr.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00113648 _____ (Microsoft Corporation) C:\WINDOWS\system32\userenv.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00111616 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidclass.sys
2014-05-23 11:45 - 2014-05-23 11:45 - 00102912 _____ (Microsoft Corporation) C:\WINDOWS\system32\davclnt.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00094016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\userenv.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00086016 _____ (Microsoft Corporation) C:\WINDOWS\system32\RMapi.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\davclnt.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\sxproxy.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00079360 _____ (Microsoft Corporation) C:\WINDOWS\system32\w32tm.exe
2014-05-23 11:45 - 2014-05-23 11:45 - 00079360 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\IPMIDrv.sys
2014-05-23 11:45 - 2014-05-23 11:45 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\w32tm.exe
2014-05-23 11:45 - 2014-05-23 11:45 - 00069120 _____ (Microsoft Corporation) C:\WINDOWS\system32\l2gpstore.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\l2gpstore.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpipreg.sys
2014-05-23 11:45 - 2014-05-23 11:45 - 00040448 _____ (Microsoft Corporation) C:\WINDOWS\system32\SetNetworkLocation.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sxproxy.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00033280 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidusb.sys
2014-05-23 11:45 - 2014-05-23 11:45 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredentialMigrationHandler.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredentialMigrationHandler.dll
2014-05-23 11:44 - 2014-05-23 11:44 - 03464192 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2014-05-23 11:44 - 2014-05-23 11:44 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2014-05-23 11:44 - 2014-05-23 11:44 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2014-05-23 11:44 - 2014-05-23 11:44 - 01705472 _____ (Microsoft Corporation) C:\WINDOWS\system32\wucltux.dll
2014-05-23 11:44 - 2014-05-23 11:44 - 01054208 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.appcore.dll
2014-05-23 11:44 - 2014-05-23 11:44 - 00828928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.appcore.dll
2014-05-23 11:44 - 2014-05-23 11:44 - 00827392 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2014-05-23 11:44 - 2014-05-23 11:44 - 00666624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2014-05-23 11:44 - 2014-05-23 11:44 - 00555736 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.appcore.dll
2014-05-23 11:44 - 2014-05-23 11:44 - 00419928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.appcore.dll
2014-05-23 11:44 - 2014-05-23 11:44 - 00381440 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUSettingsProvider.dll
2014-05-23 11:44 - 2014-05-23 11:44 - 00201728 _____ (Microsoft Corporation) C:\WINDOWS\system32\ubpm.dll
2014-05-23 11:44 - 2014-05-23 11:44 - 00190976 _____ (Microsoft Corporation) C:\WINDOWS\system32\storewuauth.dll
2014-05-23 11:44 - 2014-05-23 11:44 - 00137728 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuwebv.dll
2014-05-23 11:44 - 2014-05-23 11:44 - 00123904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuwebv.dll
2014-05-23 11:44 - 2014-05-23 11:44 - 00093696 _____ (Microsoft Corporation) C:\WINDOWS\system32\wudriver.dll
2014-05-23 11:44 - 2014-05-23 11:44 - 00080896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wudriver.dll
2014-05-23 11:44 - 2014-05-23 11:44 - 00056320 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups.dll
2014-05-23 11:44 - 2014-05-23 11:44 - 00054776 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2014-05-23 11:44 - 2014-05-23 11:44 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapp.exe
2014-05-23 11:44 - 2014-05-23 11:44 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapp.exe
2014-05-23 11:44 - 2014-05-23 11:44 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wups.dll
2014-05-23 11:44 - 2014-05-23 11:44 - 00000000 ___RD () C:\WINDOWS\BrowserChoice
2014-05-23 11:44 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\SecureBootUpdates
2014-05-23 11:43 - 2014-05-23 11:43 - 21268952 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 18755672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 16872448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 13287936 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 12711424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 11792384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 08652800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 07425368 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2014-05-23 11:43 - 2014-05-23 11:43 - 07173120 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 06645248 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 05833216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Search.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 05774848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 05104640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 04269056 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncEngine.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 04190720 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2014-05-23 11:43 - 2014-05-23 11:43 - 02688000 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 02144984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 02140888 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 02124840 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d9.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 02100736 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlowUI.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 01797896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d9.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 01584128 _____ (Microsoft Corporation) C:\WINDOWS\system32\workfolderssvc.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 01527296 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 01466856 _____ (Microsoft Corporation) C:\WINDOWS\system32\propsys.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 01436160 _____ (Microsoft Corporation) C:\WINDOWS\system32\VSSVC.exe
2014-05-23 11:43 - 2014-05-23 11:43 - 01411584 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 01403856 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 01379064 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpmde.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 01308160 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpsvc.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 01287168 _____ (Microsoft Corporation) C:\WINDOWS\system32\mispace.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 01230336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 01222656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Streaming.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 01209616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmde.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 01200288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\propsys.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 01200128 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthport.sys
2014-05-23 11:43 - 2014-05-23 11:43 - 01126912 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFolder.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 01057280 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdvidcrl.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 01029120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mispace.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 01025024 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00982016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Streaming.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00955904 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00918528 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00888320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00881616 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00872448 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDrive.exe
2014-05-23 11:43 - 2014-05-23 11:43 - 00855552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdvidcrl.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00836608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchFolder.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00834048 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00805376 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00765408 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00761856 _____ (Microsoft Corporation) C:\WINDOWS\system32\WorkfoldersControl.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00731648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\adtschema.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00731648 _____ (Microsoft Corporation) C:\WINDOWS\system32\adtschema.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00721408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveTelemetry.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00718336 _____ (Microsoft Corporation) C:\WINDOWS\system32\swprv.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00707048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00677376 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys
2014-05-23 11:43 - 2014-05-23 11:43 - 00669856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00667648 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpprefcl.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00629760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmCoreR.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00609448 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00590336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gpprefcl.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00589656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fvevol.sys
2014-05-23 11:43 - 2014-05-23 11:43 - 00565536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2014-05-23 11:43 - 2014-05-23 11:43 - 00563200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\afd.sys
2014-05-23 11:43 - 2014-05-23 11:43 - 00518544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00491744 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00491520 _____ (Microsoft Corporation) C:\WINDOWS\system32\GeofenceMonitorService.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00486912 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv
2014-05-23 11:43 - 2014-05-23 11:43 - 00467968 _____ (Microsoft Corporation) C:\WINDOWS\system32\srcore.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00467496 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00463256 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00462336 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsGdiConverter.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00449536 _____ (Microsoft Corporation) C:\WINDOWS\system32\defragsvc.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00443904 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansec.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00443904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\nwifi.sys
2014-05-23 11:43 - 2014-05-23 11:43 - 00426496 _____ (Microsoft Corporation) C:\WINDOWS\system32\clusapi.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00407016 _____ (Microsoft Corporation) C:\WINDOWS\system32\services.exe
2014-05-23 11:43 - 2014-05-23 11:43 - 00406504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00402432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
2014-05-23 11:43 - 2014-05-23 11:43 - 00387896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00384856 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spaceport.sys
2014-05-23 11:43 - 2014-05-23 11:43 - 00372568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storport.sys
2014-05-23 11:43 - 2014-05-23 11:43 - 00370176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv
2014-05-23 11:43 - 2014-05-23 11:43 - 00370176 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanmsm.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00364640 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00360792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fltMgr.sys
2014-05-23 11:43 - 2014-05-23 11:43 - 00357376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GeofenceMonitorService.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00337408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsGdiConverter.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00337240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Classpnp.sys
2014-05-23 11:43 - 2014-05-23 11:43 - 00335872 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDEServer.exe
2014-05-23 11:43 - 2014-05-23 11:43 - 00326024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00324888 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFCaptureEngine.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00323072 _____ (Microsoft Corporation) C:\WINDOWS\system32\srvsvc.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00313344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\clusapi.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00310616 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\volsnap.sys
2014-05-23 11:43 - 2014-05-23 11:43 - 00307304 _____ (Microsoft Corporation) C:\WINDOWS\system32\wintrust.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00305768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00300544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanmsm.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00296960 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanapi.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00285144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFCaptureEngine.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00281600 _____ (Microsoft Corporation) C:\WINDOWS\system32\resutils.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00275800 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msiscsi.sys
2014-05-23 11:43 - 2014-05-23 11:43 - 00271872 _____ (Microsoft Corporation) C:\WINDOWS\system32\rstrui.exe
2014-05-23 11:43 - 2014-05-23 11:43 - 00263424 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlows.exe
2014-05-23 11:43 - 2014-05-23 11:43 - 00257880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdFilter.sys
2014-05-23 11:43 - 2014-05-23 11:43 - 00250368 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpencom.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00246272 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srvnet.sys
2014-05-23 11:43 - 2014-05-23 11:43 - 00244880 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2014-05-23 11:43 - 2014-05-23 11:43 - 00233912 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00230808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wintrust.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanapi.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00219136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\resutils.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00219136 _____ (Microsoft Corporation) C:\WINDOWS\system32\tscfgwmi.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00209920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpencom.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00206848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys
2014-05-23 11:43 - 2014-05-23 11:43 - 00201920 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVideoDSP.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00201216 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00191488 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpchttp.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00186880 _____ (Microsoft Corporation) C:\WINDOWS\system32\WorkFoldersShell.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00180056 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2014-05-23 11:43 - 2014-05-23 11:43 - 00178184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVideoDSP.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00144384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpchttp.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00143872 _____ (Microsoft Corporation) C:\WINDOWS\system32\BootMenuUX.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00135168 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscsvc.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00130144 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpapi.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00125496 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmapi.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00123224 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdNisDrv.sys
2014-05-23 11:43 - 2014-05-23 11:43 - 00111528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gpapi.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00098584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmapi.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00077312 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hdaudbus.sys
2014-05-23 11:43 - 2014-05-23 11:43 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\system32\srclient.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsgqec.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\srclient.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00055296 _____ (Microsoft Corporation) C:\WINDOWS\system32\energyprov.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tsgqec.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00047616 _____ (Microsoft Corporation) C:\WINDOWS\system32\tlscsp.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00046592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tlscsp.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Shell.Search.UriHandler.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00035856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdBoot.sys
2014-05-23 11:43 - 2014-05-23 11:43 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Shell.Search.UriHandler.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00032600 _____ (Microsoft Corporation) C:\WINDOWS\system32\ploptin.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00028408 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfpmp.exe
2014-05-23 11:43 - 2014-05-23 11:43 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d8thk.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanhlp.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanhlp.dll
2014-05-23 11:43 - 2014-05-22 17:43 - 00000000 ____D () C:\Program Files (x86)\Microsoft Office
2014-05-23 11:43 - 2013-08-22 17:36 - 00000000 ___RD () C:\WINDOWS\ImmersiveControlPanel
2014-05-23 11:43 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-05-23 11:43 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-05-23 11:43 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files\Windows Defender
2014-05-23 11:43 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files (x86)\Windows Defender
2014-05-23 11:43 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\system32\oobe
2014-05-23 11:41 - 2014-05-23 11:41 - 00262144 _____ () C:\WINDOWS\system32\config\userdiff
2014-05-23 11:41 - 2014-05-23 11:41 - 00000000 ____D () C:\WINDOWS\PCHEALTH
2014-05-23 11:40 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\restore
2014-05-23 11:28 - 2014-05-23 11:27 - 00000000 ____D () C:\Users\Anne\AppData\Local\PackageStaging
2014-05-23 11:27 - 2014-05-23 11:27 - 00001454 _____ () C:\Users\Anne\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-05-23 11:27 - 2012-07-26 04:02 - 00000000 ___RD () C:\Users\Anne\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-05-23 11:27 - 2012-07-26 04:02 - 00000000 ___RD () C:\Users\Anne\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-05-23 11:26 - 2014-05-23 11:26 - 00000020 ___SH () C:\Users\Anne\ntuser.ini
2014-05-23 11:05 - 2014-05-23 11:05 - 00000000 _SHDL () C:\Users\Default\Vorlagen
2014-05-23 11:05 - 2014-05-23 11:05 - 00000000 _SHDL () C:\Users\Default\Startmenü
2014-05-23 11:05 - 2014-05-23 11:05 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung
2014-05-23 11:05 - 2014-05-23 11:05 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen
2014-05-23 11:05 - 2014-05-23 11:05 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien
2014-05-23 11:05 - 2014-05-23 11:05 - 00000000 _SHDL () C:\Users\Default\Druckumgebung
2014-05-23 11:05 - 2014-05-23 11:05 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik
2014-05-23 11:05 - 2014-05-23 11:05 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder
2014-05-23 11:05 - 2014-05-23 11:05 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-05-23 11:05 - 2014-05-23 11:05 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf
2014-05-23 11:05 - 2014-05-23 11:05 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten
2014-05-23 11:05 - 2014-05-23 11:05 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten
2014-05-23 11:05 - 2014-05-23 11:05 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik
2014-05-23 11:05 - 2014-05-23 11:05 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder
2014-05-23 11:05 - 2014-05-23 11:05 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-05-23 11:05 - 2014-05-23 11:05 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf
2014-05-23 11:05 - 2014-05-23 11:05 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten
2014-05-23 11:05 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files\Windows NT
2014-05-23 11:05 - 2013-08-22 15:36 - 00000000 __RHD () C:\Users\Default
2014-05-23 11:04 - 2014-05-23 10:55 - 00024768 _____ () C:\WINDOWS\diagwrn.xml
2014-05-23 11:04 - 2014-05-23 10:55 - 00024768 _____ () C:\WINDOWS\diagerr.xml
2014-05-23 11:04 - 2014-05-23 10:26 - 00006626 _____ () C:\WINDOWS\comsetup.log
2014-05-23 11:04 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\Registration
2014-05-23 11:03 - 2014-05-23 11:03 - 00022960 _____ () C:\WINDOWS\system32\emptyregdb.dat
2014-05-23 11:02 - 2013-08-22 17:36 - 00000000 __RSD () C:\WINDOWS\Media
2014-05-23 11:02 - 2013-08-22 17:36 - 00000000 __RHD () C:\Users\Public\Libraries
2014-05-23 10:59 - 2014-05-23 02:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office Live Add-in
2014-05-23 10:59 - 2014-05-22 17:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
2014-05-23 10:59 - 2014-03-18 11:40 - 00000000 ____D () C:\WINDOWS\ShellNew
2014-05-23 10:59 - 2013-08-22 16:44 - 00376176 _____ () C:\WINDOWS\system32\FNTCACHE.DAT
2014-05-23 10:59 - 2012-07-26 05:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-05-23 10:59 - 2012-07-26 04:45 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel PROSet Wireless
2014-05-23 10:59 - 2012-07-26 04:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dolby
2014-05-23 10:59 - 2012-07-26 04:28 - 00000000 ____D () C:\WINDOWS\SysWOW64\Atheros_L1e
2014-05-23 10:59 - 2012-07-26 04:21 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel
2014-05-23 10:58 - 2014-05-23 10:58 - 00001547 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2014-05-23 10:58 - 2014-05-23 10:58 - 00000000 ____D () C:\Users\Default\AppData\Local\Microsoft Help
2014-05-23 10:58 - 2014-05-23 10:58 - 00000000 ____D () C:\Users\Default User\AppData\Local\Microsoft Help
2014-05-23 10:58 - 2013-08-22 17:37 - 00004893 _____ () C:\WINDOWS\DtcInstall.log
2014-05-23 10:58 - 2012-07-26 07:37 - 00000000 ____D () C:\Users\Default.migrated
2014-05-23 10:57 - 2014-05-22 17:57 - 00000000 ____D () C:\WINDOWS\SysWOW64\sda
2014-05-23 10:57 - 2014-03-18 11:25 - 00000000 ____D () C:\WINDOWS\SysWOW64\WCN
2014-05-23 10:57 - 2014-03-18 11:25 - 00000000 ____D () C:\WINDOWS\SysWOW64\sysprep
2014-05-23 10:57 - 2014-03-18 11:25 - 00000000 ____D () C:\WINDOWS\system32\WCN
2014-05-23 10:57 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\MUI
2014-05-23 10:57 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\migwiz
2014-05-23 10:57 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\IME
2014-05-23 10:57 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\WinBioPlugIns
2014-05-23 10:57 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\spool
2014-05-23 10:57 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\MUI
2014-05-23 10:57 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\IME
2014-05-23 10:57 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\SMI
2014-05-23 10:56 - 2014-05-23 10:56 - 00000000 ____D () C:\WINDOWS\system32\config\bbimigrate
2014-05-23 10:56 - 2014-05-23 10:50 - 00000000 ____D () C:\ProgramData\Conexant
2014-05-23 10:56 - 2014-05-23 10:50 - 00000000 ____D () C:\Program Files\CONEXANT
2014-05-23 10:56 - 2013-08-22 17:43 - 00000000 ____D () C:\WINDOWS\DigitalLocker
2014-05-23 10:56 - 2013-08-22 17:36 - 00000000 __SHD () C:\Program Files\Windows Sidebar
2014-05-23 10:56 - 2013-08-22 17:36 - 00000000 __SHD () C:\Program Files (x86)\Windows Sidebar
2014-05-23 10:56 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\Recovery
2014-05-23 10:56 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\IME
2014-05-23 10:56 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\Help
2014-05-23 10:56 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared
2014-05-23 10:56 - 2012-07-26 04:01 - 00000000 ____D () C:\ProgramData\PRICache
2014-05-23 10:55 - 2014-05-23 10:55 - 00000000 _SHDL () C:\Users\Anne\Vorlagen
2014-05-23 10:55 - 2014-05-23 10:55 - 00000000 _SHDL () C:\Users\Anne\Startmenü
2014-05-23 10:55 - 2014-05-23 10:55 - 00000000 _SHDL () C:\Users\Anne\Netzwerkumgebung
2014-05-23 10:55 - 2014-05-23 10:55 - 00000000 _SHDL () C:\Users\Anne\Lokale Einstellungen
2014-05-23 10:55 - 2014-05-23 10:55 - 00000000 _SHDL () C:\Users\Anne\Eigene Dateien
2014-05-23 10:55 - 2014-05-23 10:55 - 00000000 _SHDL () C:\Users\Anne\Druckumgebung
2014-05-23 10:55 - 2014-05-23 10:55 - 00000000 _SHDL () C:\Users\Anne\Documents\Eigene Musik
2014-05-23 10:55 - 2014-05-23 10:55 - 00000000 _SHDL () C:\Users\Anne\Documents\Eigene Bilder
2014-05-23 10:55 - 2014-05-23 10:55 - 00000000 _SHDL () C:\Users\Anne\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-05-23 10:55 - 2014-05-23 10:55 - 00000000 _SHDL () C:\Users\Anne\AppData\Local\Verlauf
2014-05-23 10:55 - 2014-05-23 10:55 - 00000000 _SHDL () C:\Users\Anne\AppData\Local\Anwendungsdaten
2014-05-23 10:55 - 2014-05-23 10:55 - 00000000 _SHDL () C:\Users\Anne\Anwendungsdaten
2014-05-23 10:55 - 2014-05-23 10:55 - 00000000 ___RD () C:\Users\Anne\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-05-23 10:55 - 2014-05-23 10:55 - 00000000 ___RD () C:\Users\Anne\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-05-23 10:52 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\system32\Sysprep
2014-05-23 10:50 - 2014-05-23 10:50 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_Kernel_iBtFltCoex_01009.Wdf
2014-05-23 10:50 - 2013-08-22 16:46 - 00000084 _____ () C:\WINDOWS\setuperr.log
2014-05-23 10:49 - 2014-05-23 10:49 - 00000000 ____D () C:\Program Files\Elantech
2014-05-23 10:33 - 2012-07-26 04:01 - 01636395 _____ () C:\WINDOWS\WindowsUpdate (1).log
2014-05-23 10:16 - 2012-07-26 10:12 - 00000000 ____D () C:\WINDOWS\AUInstallAgent
2014-05-23 02:03 - 2014-05-22 17:47 - 00000000 ____D () C:\Program Files (x86)\Microsoft Works
2014-05-23 01:23 - 2014-05-23 01:23 - 00255042 _____ () C:\ProgramData\1400800923.bdinstall.bin
2014-05-23 01:23 - 2014-05-22 17:59 - 00000000 ____D () C:\Program Files\Bitdefender
2014-05-23 01:22 - 2014-05-22 17:59 - 00000000 ____D () C:\Program Files\Common Files\Bitdefender
2014-05-23 01:20 - 2014-05-23 01:20 - 00103312 _____ () C:\ProgramData\1400800806.bdinstall.bin
2014-05-22 21:53 - 2014-05-22 21:52 - 16501035 _____ () C:\Users\Anne\Downloads\NYCityscapesJohnnyWLam.themepack
2014-05-22 21:36 - 2014-05-22 17:59 - 00074512 _____ (BitDefender SRL) C:\WINDOWS\system32\bdsandboxuiskin32.dll
2014-05-22 21:27 - 2014-05-22 21:06 - 00002392 _____ () C:\Users\Anne\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2014-05-22 21:06 - 2014-05-22 21:06 - 00000385 _____ () C:\Users\Anne\AppData\Roaminguser_gensett.xml
2014-05-22 18:07 - 2014-05-22 18:07 - 00520507 _____ () C:\ProgramData\1400774373.bdinstall.bin
2014-05-22 18:06 - 2014-05-22 18:06 - 00000385 _____ () C:\WINDOWS\system32\user_gensett.xml
2014-05-22 18:05 - 2014-05-22 18:05 - 00000251 _____ () C:\WINDOWS\system32\netcfg-1859500.txt
2014-05-22 18:05 - 2014-05-22 18:05 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_Kernel_avchv_01009.Wdf
2014-05-22 18:05 - 2014-05-22 18:05 - 00000000 ____D () C:\ProgramData\BDLogging
2014-05-22 17:59 - 2014-05-22 17:59 - 00000000 ____D () C:\Users\Anne\AppData\Roaming\QuickScan
2014-05-22 17:58 - 2014-05-22 17:58 - 07307552 _____ () C:\Users\Anne\Downloads\bitdefender_isecurity.exe
2014-05-22 17:57 - 2014-05-22 17:51 - 12171007 _____ () C:\Users\Anne\Downloads\RtsXStor_6.3.273.37.zip
2014-05-22 17:57 - 2012-07-26 04:32 - 00000000 ____D () C:\Program Files (x86)\Realtek
2014-05-22 17:57 - 2012-07-26 04:28 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-05-22 17:44 - 2014-05-22 17:44 - 00000000 ____D () C:\Program Files\Microsoft Office
2014-05-22 17:43 - 2014-05-22 17:43 - 00000000 ____D () C:\Users\Anne\AppData\Local\Microsoft Help
2014-05-22 17:42 - 2014-05-22 17:42 - 00000000 __RHD () C:\MSOCache
2014-05-22 17:41 - 2014-05-22 17:41 - 00000117 _____ () C:\WINDOWS\system32\netcfg-423203.txt
2014-05-22 17:41 - 2014-05-22 17:41 - 00000117 _____ () C:\WINDOWS\system32\netcfg-423171.txt
2014-05-19 08:31 - 2014-06-11 13:21 - 00057856 _____ (Microsoft Corporation) C:\WINDOWS\system32\drvcfg.exe
2014-05-19 08:21 - 2014-06-11 13:21 - 00110592 _____ (Microsoft Corporation) C:\WINDOWS\system32\drvinst.exe
2014-05-19 07:23 - 2014-06-11 13:21 - 00098816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\drvinst.exe

Some content of TEMP:
====================
C:\Users\Anne\AppData\Local\Temp\CloudBackup6901.exe
C:\Users\Anne\AppData\Local\Temp\nsbC7F9.tmp.exe
C:\Users\Anne\AppData\Local\Temp\Quarantine.exe

PowerMax 14.06.2014 16:41
Frst das Ende:

Code:
==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-06-14 16:49

==================== End Of Log ============================

Addition


Code:
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 12-06-2014 02
Ran by Anne at 2014-06-14 17:16:41
Running from C:\Users\Anne\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

Conexant HD Audio (HKLM\...\CNXT_AUDIO_HDA) (Version: 8.64.52.0 - Conexant)
Dolby Advanced Audio v2 (HKLM-x32\...\{B9E70C7A-9F85-4A39-A4A3-BFA3C3BF7613}) (Version: 7.2.8000.17 - Dolby Laboratories Inc)
Energy Management (HKLM-x32\...\InstallShield_{D0956C11-0F60-43FE-99AD-524E833471BB}) (Version: 8.0.2.4 - Lenovo)
Energy Management (x32 Version: 8.0.2.4 - Lenovo) Hidden
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 35.0.1916.153 - Google Inc.)
Google Update Helper (x32 Version: 1.3.24.7 - Google Inc.) Hidden
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 9.17.10.2963 - Intel Corporation)
Intel(R) PROSet/Wireless for Bluetooth(R) + High Speed (Version: 15.8.0.0548 - Intel Corporation) Hidden
Intel(R) PROSet/Wireless Software for Bluetooth(R) Technology (HKLM\...\{302600C1-6BDF-4FD1-1305-148929CC1385}) (Version: 3.0.1305.0340 - Intel Corporation)
Intel(R) PROSet/Wireless WiFi Software Driver (Version: 15.08.0000.0249 - Intel Corporation) Hidden
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.0.0.1083 - Intel Corporation)
Intel(R) Rapid Storage Technology (Version: 12.0.0.1083 - Intel Corporation) Hidden
Intel(R) SDK for OpenCL - CPU Only Runtime Package (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: 2.0.0.37149 - Intel Corporation)
Intel® PROSet/Wireless Software (HKLM-x32\...\{e6d17d96-ddaa-476f-bb07-db601024ffb1}) (Version: 15.8.0 - Intel Corporation)
Intel® PROSet/Wireless WiFi Software (Version: 15.08.0000.0172 - Intel Corporation) Hidden
Lenovo EasyCamera (HKLM-x32\...\{E0A7ED39-8CD6-4351-93C3-69CCA00D12B4}) (Version: 6.2.9200.10227 - Realtek Semiconductor Corp.)
Lenovo pointing device (HKLM\...\Elantech) (Version: 11.4.25.1 - ELAN Microelectronic Corp.)
Malwarebytes Anti-Malware Version 2.0.2.1012 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.2.1012 - Malwarebytes Corporation)
Microsoft App Update for microsoft.windowscommunicationsapps_17.0.1119.516_x64__8wekyb3d8bbwe (x64) (Version: 1.0.0.0 - Microsoft Corporation) Hidden
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version:  - Microsoft)
Microsoft Office 2007 Service Pack 3 (SP3) (x32 Version:  - Microsoft) Hidden
Microsoft Office Excel MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Home and Student 2007 (HKLM-x32\...\HOMESTUDENTR) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Home and Student 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Live Add-in 1.5 (HKLM-x32\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft Office Office 64-bit Components 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (x32 Version:  - Microsoft) Hidden
Microsoft Office Shared 64-bit MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Qualcomm Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (HKLM-x32\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 2.1.0.15 - Qualcomm Atheros Communications Inc.)
Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 6.3.273.37 - Realtek Semiconductor Corp.)
SupraSavings (Version: 1.0.0.0 - SupraSavings) Hidden <==== ATTENTION
Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{A024FC7B-77DE-45DE-A058-1C049A17BFB3}) (Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM-x32\...\{90120000-002A-0000-1000-0000000FF1CE}_HOMESTUDENTR_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{E9A82945-BA29-4EE8-8F2A-2F49545E9CF2}) (Version:  - Microsoft)
Update für Microsoft Office Excel 2007 Help (KB963678) (HKLM-x32\...\{90120000-0016-0407-0000-0000000FF1CE}_HOMESTUDENTR_{BEC163EC-7A83-48A1-BFB6-3BF47CC2F8CF}) (Version:  - Microsoft)
Update für Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM-x32\...\{90120000-0018-0407-0000-0000000FF1CE}_HOMESTUDENTR_{EA160DA3-E9B5-4D03-A518-21D306665B96}) (Version:  - Microsoft)
Update für Microsoft Office Word 2007 Help (KB963665) (HKLM-x32\...\{90120000-001B-0407-0000-0000000FF1CE}_HOMESTUDENTR_{38472199-D7B6-4833-A949-10E4EE6365A1}) (Version:  - Microsoft)
Windows-Treiberpaket - Lenovo (ACPIVPC) System  (06/15/2012 8.1.0.1) (HKLM\...\71BC3FD63F450BA0A957AAECBDB4A000C4F2BE42) (Version: 06/15/2012 8.1.0.1 - Lenovo)
Windows-Treiberpaket - Lenovo (WUDFRd) LenovoVhid  (06/19/2012 10.13.29.733) (HKLM\...\8A223E56FB1ED4F697B54E5BF96F1EB63B512684) (Version: 06/19/2012 10.13.29.733 - Lenovo)

==================== Restore Points  =========================

26-05-2014 14:01:41 Windows Update
03-06-2014 10:11:39 Geplanter Prüfpunkt
10-06-2014 12:04:25 Geplanter Prüfpunkt
12-06-2014 18:15:40 Windows Modules Installer

==================== Hosts content: ==========================

2013-08-22 15:25 - 2014-06-12 20:35 - 00000828 ____A C:\WINDOWS\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {03B68F25-946B-4E4E-BDF2-EC1C875C21F8} - \Advanced System Protector No Task File <==== ATTENTION
Task: {05293577-D647-4185-B859-C94839A0B2E3} - System32\Tasks\Microsoft\Windows\SettingSync\NetworkStateChangeTask
Task: {0B545118-B563-42FC-8D07-B78F602FCF34} - System32\Tasks\Microsoft\Windows\WS\WSRefreshBannedAppsListTask => Rundll32.exe WSClient.dll,RefreshBannedAppsList
Task: {0BC32B2D-93F4-45F4-B338-9BC59A6EB744} - System32\Tasks\Microsoft\Windows\DiskFootprint\Diagnostics
Task: {0FE784B7-9072-4924-BD29-9E667BDE2486} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-07-26] (Google Inc.)
Task: {18D198A8-81A5-49DE-843A-93825267768A} - System32\Tasks\Dolby Selector => C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe [2012-08-31] (Dolby Laboratories Inc.)
Task: {1F2D7BAE-62D4-4467-A97F-CD9E86C0B564} - System32\Tasks\Microsoft\Windows\WOF\WIM-Hash-Validation
Task: {2085BF56-520D-4951-B7C0-DF34AF90CC6A} - System32\Tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask => Rundll32.exe sysmain.dll,PfSvWsSwapAssessmentTask
Task: {2C9C0C6C-2A74-46F2-858A-4389D253EAD0} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCachePrepopulate
Task: {352E6CA0-7314-4DF4-89C4-682368D80D57} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join => C:\Windows\System32\AutoWorkplace.exe [2013-08-22] (Microsoft Corporation)
Task: {3B6D8A73-F20B-4C93-B8FB-56A154F172D2} - System32\Tasks\Microsoft\Windows\Time Zone\SynchronizeTimeZone => C:\Windows\system32\tzsync.exe [2013-08-22] (Microsoft Corporation)
Task: {49754026-21E1-41FC-94FD-727AFE414FE7} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCacheRebalance
Task: {6AA91E8C-DDBD-4979-8464-4062F7681A19} - System32\Tasks\Microsoft\Windows\Plug and Play\Plug and Play Cleanup
Task: {6D816A50-FAF2-40BA-96A3-E53557E748AB} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2014-06-11] (Microsoft Corporation)
Task: {6DFCB649-0769-4F83-BB10-F60F235F6D3D} - System32\Tasks\Microsoft\Windows\SkyDrive\Idle Sync Maintenance Task
Task: {73B1B253-CE67-4501-AE1A-377DD1D68B65} - System32\Tasks\Microsoft\Windows\Application Experience\StartupAppTask => Rundll32.exe Startupscan.dll,SusRunTask
Task: {77F1D869-6E65-4079-A2A0-E2023408EF97} - System32\Tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState => Rundll32.exe Windows.Storage.ApplicationData.dll,CleanupTemporaryState
Task: {872D0E53-FD2E-41E3-B431-698AF82882CE} - System32\Tasks\Microsoft\Windows\SkyDrive\Routine Maintenance Task
Task: {8CC813C9-712A-41EF-9512-B233444FC669} - System32\Tasks\Microsoft\Windows\AppxDeploymentClient\Pre-staged app cleanup => Rundll32.exe %windir%\system32\AppxDeploymentClient.dll,AppxPreStageCleanupRunTask
Task: {8E259E1C-F4D8-4C27-B2FE-EE1654348A03} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-07-26] (Google Inc.)
Task: {9FF4C139-5234-410C-B7FA-23EE2FD2AB53} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Maintenance Work
Task: {A9B946C6-71F6-4504-A414-449D3B0347DF} - System32\Tasks\Microsoft\Windows\WOF\WIM-Hash-Management
Task: {C2F5A32E-2842-473F-8B15-887314827DE5} - System32\Tasks\Microsoft\Windows\Shell\FamilySafetyUpload
Task: {CFD7C21A-808B-487B-A6EC-8A10E44E8360} - System32\Tasks\Microsoft\Windows\SettingSync\BackupTask
Task: {D88FEC9E-A82A-46F9-87E2-B6B97B301C1A} - System32\Tasks\Microsoft\Windows\WS\License Validation => Rundll32.exe WSClient.dll,WSpTLR licensing
Task: {D964E012-309A-4F53-8C0D-6AC7E86CFEF3} - System32\Tasks\Microsoft\Windows\WindowsUpdate\Scheduled Start With Network => Sc.exe start wuauserv
Task: {DA46820F-FF8A-4B5E-A6B2-B12185DCFFFB} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Logon Synchronization
Task: {DCE3D606-9E17-4E65-B72D-0EF3F4603DE5} - System32\Tasks\Microsoft\Windows\DiskCleanup\SilentCleanup => C:\Windows\system32\cleanmgr.exe [2014-03-18] (Microsoft Corporation)
Task: {E6D378FA-E068-4BCB-80DE-56D43A249507} - System32\Tasks\Microsoft\Windows\RecoveryEnvironment\VerifyWinRE
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2011-06-22 07:42 - 2011-06-22 07:42 - 00034304 _____ () C:\WINDOWS\System32\ssp4ml6.dll
2014-01-25 02:22 - 2014-01-25 02:22 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2014-06-13 22:10 - 2014-06-05 15:58 - 00716616 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.153\libglesv2.dll
2014-06-13 22:10 - 2014-06-05 15:58 - 00126280 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.153\libegl.dll
2014-06-13 22:10 - 2014-06-05 15:58 - 04217672 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.153\pdf.dll
2014-06-13 22:10 - 2014-06-05 15:58 - 00414536 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.153\ppGoogleNaClPluginChrome.dll
2014-06-13 22:10 - 2014-06-05 15:58 - 01732424 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.153\ffmpegsumo.dll

==================== Alternate Data Streams (whitelisted) =========

AlternateDataStreams: C:\WINDOWS\system32\Drivers\btmhsf.sys:Microsoft_Appcompat_ReinstallUpgrade
AlternateDataStreams: C:\Users\Anne\OneDrive:ms-properties

==================== Safe Mode (whitelisted) ===================

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\SAWFP => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\SecureAssist => ""="service"

==================== EXE Association (whitelisted) =============


==================== MSCONFIG/TASK MANAGER disabled items =========


==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (06/14/2014 05:11:04 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm FRST64.exe, Version 12.6.2014.2 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 1034

Startzeit: 01cf87e2cf7588a8

Endzeit: 1

Anwendungspfad: C:\Users\Anne\Desktop\FRST64.exe

Berichts-ID: 1532ec48-f3d6-11e3-be76-0cd292bdd4da

Vollständiger Name des fehlerhaften Pakets:

Anwendungs-ID, die relativ zum fehlerhaften Paket ist:

Error: (06/14/2014 03:49:08 PM) (Source: Microsoft-Windows-LocationProvider) (EventID: 2005) (User: NT-AUTORITÄT)
Description: There was an error communicating to the Orion DCS server

Error: (06/12/2014 08:38:00 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: BlockAndSurfC.exe, Version: 1.173.0.0, Zeitstempel: 0x53974037
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000
ID des fehlerhaften Prozesses: 0x19a4
Startzeit der fehlerhaften Anwendung: 0xBlockAndSurfC.exe0
Pfad der fehlerhaften Anwendung: BlockAndSurfC.exe1
Pfad des fehlerhaften Moduls: BlockAndSurfC.exe2
Berichtskennung: BlockAndSurfC.exe3
Vollständiger Name des fehlerhaften Pakets: BlockAndSurfC.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: BlockAndSurfC.exe5

Error: (06/10/2014 02:04:28 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".


Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll.

System Error:
Zugriff verweigert
.

Error: (06/03/2014 00:11:44 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".


Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll.

System Error:
Zugriff verweigert
.

Error: (06/01/2014 07:27:48 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: WINWORD.EXE, Version: 12.0.6695.5000, Zeitstempel: 0x5329c5d9
Name des fehlerhaften Moduls: wwlib.dll, Version: 12.0.6695.5000, Zeitstempel: 0x5329c6a7
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0037154b
ID des fehlerhaften Prozesses: 0x1144
Startzeit der fehlerhaften Anwendung: 0xWINWORD.EXE0
Pfad der fehlerhaften Anwendung: WINWORD.EXE1
Pfad des fehlerhaften Moduls: WINWORD.EXE2
Berichtskennung: WINWORD.EXE3
Vollständiger Name des fehlerhaften Pakets: WINWORD.EXE4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: WINWORD.EXE5

Error: (05/26/2014 04:02:18 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".


Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll.

System Error:
Zugriff verweigert
.

Error: (05/23/2014 11:41:01 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".


Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll.

System Error:
Zugriff verweigert
.

Error: (05/23/2014 11:04:08 AM) (Source: Microsoft-Windows-WMI) (EventID: 24) (User: NT-AUTORITÄT)
Description: Vom Ereignisanbieter "IntelWLANEventProvider" wurde versucht, die Abfrage "select * from CIntelQosEvent" zu registrieren, deren Zielklasse "CIntelQosEvent" im Namespace "//./ROOT/default" nicht vorhanden ist. Die Abfrage wird ignoriert.

Error: (05/23/2014 11:04:08 AM) (Source: Microsoft-Windows-WMI) (EventID: 24) (User: NT-AUTORITÄT)
Description: Vom Ereignisanbieter "IntelWLANEventProvider" wurde versucht, die Abfrage "select * from CIntelDot1xEvent" zu registrieren, deren Zielklasse "CIntelDot1xEvent" im Namespace "//./ROOT/default" nicht vorhanden ist. Die Abfrage wird ignoriert.


System errors:
=============
Error: (06/14/2014 04:21:52 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "SAWFP" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2

Error: (06/14/2014 04:21:42 PM) (Source: BTHUSB) (EventID: 30) (User: )
Description: Der lokale Adapter bietet keine Unterstützung für einen wichtigen Controllerstatus für energiearme Geräte. Die mindestens erforderliche unterstützte Statusmaske ist "0x1f7fffff", vorhanden ist jedoch "0x1f3fffff". Die Funktionalität für energiearme Geräte wird deaktiviert.

Error: (06/14/2014 04:21:11 PM) (Source: DCOM) (EventID: 10010) (User: ANNES-PC)
Description: {4545DEA0-2DFC-4906-A728-6D986BA399A9}

Error: (06/14/2014 04:21:11 PM) (Source: DCOM) (EventID: 10010) (User: ANNES-PC)
Description: {4545DEA0-2DFC-4906-A728-6D986BA399A9}

Error: (06/14/2014 04:21:11 PM) (Source: DCOM) (EventID: 10010) (User: ANNES-PC)
Description: {4545DEA0-2DFC-4906-A728-6D986BA399A9}

Error: (06/14/2014 04:21:11 PM) (Source: DCOM) (EventID: 10010) (User: ANNES-PC)
Description: {4545DEA0-2DFC-4906-A728-6D986BA399A9}

Error: (06/12/2014 09:22:39 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "SAWFP" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2

Error: (06/12/2014 09:22:20 PM) (Source: BTHUSB) (EventID: 30) (User: )
Description: Der lokale Adapter bietet keine Unterstützung für einen wichtigen Controllerstatus für energiearme Geräte. Die mindestens erforderliche unterstützte Statusmaske ist "0x1f7fffff", vorhanden ist jedoch "0x1f3fffff". Die Funktionalität für energiearme Geräte wird deaktiviert.

Error: (06/12/2014 09:17:15 PM) (Source: BTHUSB) (EventID: 30) (User: )
Description: Der lokale Adapter bietet keine Unterstützung für einen wichtigen Controllerstatus für energiearme Geräte. Die mindestens erforderliche unterstützte Statusmaske ist "0x1f7fffff", vorhanden ist jedoch "0x1f3fffff". Die Funktionalität für energiearme Geräte wird deaktiviert.

Error: (06/12/2014 09:16:41 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Der Dienst "Superfetch" wurde mit folgendem Fehler beendet:
%%1062


Microsoft Office Sessions:
=========================
Error: (06/01/2014 07:27:48 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6695.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 13992 seconds with 2640 seconds of active time.  This session ended with a crash.


CodeIntegrity Errors:
===================================
  Date: 2014-06-14 16:50:13.723
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2014-06-13 11:24:31.713
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2014-06-12 14:01:41.946
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2014-05-27 10:48:31.758
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.


==================== Memory info ===========================

Percentage of memory in use: 38%
Total physical RAM: 3996.85 MB
Available physical RAM: 2460 MB
Total Pagefile: 4700.85 MB
Available Pagefile: 2937.33 MB
Total Virtual: 131072 MB
Available Virtual: 131071.79 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:465.42 GB) (Free:435.25 GB) NTFS
Drive e: (TRANSCEND) (Removable) (Total:3.73 GB) (Free:3.72 GB) FAT32

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: 6AE802BE)
Partition 1: (Active) - (Size=350 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=465 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (Size: 4 GB) (Disk ID: 00000000)

Partition: GPT Partition Type.

==================== End Of Log ============================


Gmer


Code:
GMER 2.1.19357 - hxxp://www.gmer.net
Rootkit scan 2014-06-14 17:32:02
Windows 6.2.9200  x64 \Device\Harddisk0\DR0 -> \Device\0000002d HGST_HTS545050A7E380 rev.GG2ZBD90 465,76GB
Running: Gmer-19357.exe; Driver: C:\Users\Anne\AppData\Local\Temp\kglcrpow.sys


---- User code sections - GMER 2.1 ----

.text  C:\Program Files\Intel\WiFi\bin\EvtEng.exe[1428] C:\WINDOWS\system32\PSAPI.DLL!GetModuleBaseNameA + 506                                      00007fff126a169a 4 bytes [6A, 12, FF, 7F]
.text  C:\Program Files\Intel\WiFi\bin\EvtEng.exe[1428] C:\WINDOWS\system32\PSAPI.DLL!GetModuleBaseNameA + 514                                      00007fff126a16a2 4 bytes [6A, 12, FF, 7F]
.text  C:\Program Files\Intel\WiFi\bin\EvtEng.exe[1428] C:\WINDOWS\system32\PSAPI.DLL!QueryWorkingSet + 118                                        00007fff126a181a 4 bytes [6A, 12, FF, 7F]
.text  C:\Program Files\Intel\WiFi\bin\EvtEng.exe[1428] C:\WINDOWS\system32\PSAPI.DLL!QueryWorkingSet + 142                                        00007fff126a1832 4 bytes [6A, 12, FF, 7F]
.text  C:\Program Files\Intel\WiFi\bin\EvtEng.exe[1428] C:\WINDOWS\SYSTEM32\WSOCK32.dll!setsockopt + 194                                            00007fff08e21f6a 4 bytes [E2, 08, FF, 7F]
.text  C:\Program Files\Intel\WiFi\bin\EvtEng.exe[1428] C:\WINDOWS\SYSTEM32\WSOCK32.dll!setsockopt + 218                                            00007fff08e21f82 4 bytes [E2, 08, FF, 7F]
.text  C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe[1584] C:\WINDOWS\system32\PSAPI.DLL!GetModuleBaseNameA + 506                  00007fff126a169a 4 bytes [6A, 12, FF, 7F]
.text  C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe[1584] C:\WINDOWS\system32\PSAPI.DLL!GetModuleBaseNameA + 514                  00007fff126a16a2 4 bytes [6A, 12, FF, 7F]
.text  C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe[1584] C:\WINDOWS\system32\PSAPI.DLL!QueryWorkingSet + 118                    00007fff126a181a 4 bytes [6A, 12, FF, 7F]
.text  C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe[1584] C:\WINDOWS\system32\PSAPI.DLL!QueryWorkingSet + 142                    00007fff126a1832 4 bytes [6A, 12, FF, 7F]
.text  C:\Program Files\Windows Defender\MsMpEng.exe[1640] C:\WINDOWS\system32\psapi.dll!GetModuleBaseNameA + 506                                  00007fff126a169a 4 bytes [6A, 12, FF, 7F]
.text  C:\Program Files\Windows Defender\MsMpEng.exe[1640] C:\WINDOWS\system32\psapi.dll!GetModuleBaseNameA + 514                                  00007fff126a16a2 4 bytes [6A, 12, FF, 7F]
.text  C:\Program Files\Windows Defender\MsMpEng.exe[1640] C:\WINDOWS\system32\psapi.dll!QueryWorkingSet + 118                                      00007fff126a181a 4 bytes [6A, 12, FF, 7F]
.text  C:\Program Files\Windows Defender\MsMpEng.exe[1640] C:\WINDOWS\system32\psapi.dll!QueryWorkingSet + 142                                      00007fff126a1832 4 bytes [6A, 12, FF, 7F]
.text  C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe[1696] C:\WINDOWS\system32\PSAPI.DLL!GetModuleBaseNameA + 506                          00007fff126a169a 4 bytes [6A, 12, FF, 7F]
.text  C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe[1696] C:\WINDOWS\system32\PSAPI.DLL!GetModuleBaseNameA + 514                          00007fff126a16a2 4 bytes [6A, 12, FF, 7F]
.text  C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe[1696] C:\WINDOWS\system32\PSAPI.DLL!QueryWorkingSet + 118                              00007fff126a181a 4 bytes [6A, 12, FF, 7F]
.text  C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe[1696] C:\WINDOWS\system32\PSAPI.DLL!QueryWorkingSet + 142                              00007fff126a1832 4 bytes [6A, 12, FF, 7F]
.text  C:\WINDOWS\system32\wbem\wmiprvse.exe[2496] C:\WINDOWS\system32\PSAPI.DLL!GetModuleBaseNameA + 506                                          00007fff126a169a 4 bytes [6A, 12, FF, 7F]
.text  C:\WINDOWS\system32\wbem\wmiprvse.exe[2496] C:\WINDOWS\system32\PSAPI.DLL!GetModuleBaseNameA + 514                                          00007fff126a16a2 4 bytes [6A, 12, FF, 7F]
.text  C:\WINDOWS\system32\wbem\wmiprvse.exe[2496] C:\WINDOWS\system32\PSAPI.DLL!QueryWorkingSet + 118                                              00007fff126a181a 4 bytes [6A, 12, FF, 7F]
.text  C:\WINDOWS\system32\wbem\wmiprvse.exe[2496] C:\WINDOWS\system32\PSAPI.DLL!QueryWorkingSet + 142                                              00007fff126a1832 4 bytes [6A, 12, FF, 7F]
.text  C:\Windows\System32\igfxpers.exe[3732] C:\WINDOWS\system32\PSAPI.DLL!GetModuleBaseNameA + 506                                                00007fff126a169a 4 bytes [6A, 12, FF, 7F]
.text  C:\Windows\System32\igfxpers.exe[3732] C:\WINDOWS\system32\PSAPI.DLL!GetModuleBaseNameA + 514                                                00007fff126a16a2 4 bytes [6A, 12, FF, 7F]
.text  C:\Windows\System32\igfxpers.exe[3732] C:\WINDOWS\system32\PSAPI.DLL!QueryWorkingSet + 118                                                  00007fff126a181a 4 bytes [6A, 12, FF, 7F]
.text  C:\Windows\System32\igfxpers.exe[3732] C:\WINDOWS\system32\PSAPI.DLL!QueryWorkingSet + 142                                                  00007fff126a1832 4 bytes [6A, 12, FF, 7F]
.text  C:\WINDOWS\system32\WLANExt.exe[5220] C:\WINDOWS\system32\PSAPI.DLL!GetModuleBaseNameA + 506                                                00007fff126a169a 4 bytes [6A, 12, FF, 7F]
.text  C:\WINDOWS\system32\WLANExt.exe[5220] C:\WINDOWS\system32\PSAPI.DLL!GetModuleBaseNameA + 514                                                00007fff126a16a2 4 bytes [6A, 12, FF, 7F]
.text  C:\WINDOWS\system32\WLANExt.exe[5220] C:\WINDOWS\system32\PSAPI.DLL!QueryWorkingSet + 118                                                    00007fff126a181a 4 bytes [6A, 12, FF, 7F]
.text  C:\WINDOWS\system32\WLANExt.exe[5220] C:\WINDOWS\system32\PSAPI.DLL!QueryWorkingSet + 142                                                    00007fff126a1832 4 bytes [6A, 12, FF, 7F]

---- Threads - GMER 2.1 ----

Thread  C:\WINDOWS\system32\csrss.exe [584:3528]                                                                                                    fffff96000982b90
Thread  C:\Program Files\Windows Media Player\wmpnetwk.exe [1032:4384]                                                                              00007fff12be81b0
Thread  C:\Program Files\Windows Media Player\wmpnetwk.exe [1032:5080]                                                                              00007fff12f799b0
Thread  C:\Program Files\Windows Media Player\wmpnetwk.exe [1032:3708]                                                                              00007fff13560310
Thread  C:\Program Files\Windows Media Player\wmpnetwk.exe [1032:696]                                                                                00007fff13560310

---- Registry - GMER 2.1 ----

Reg    HKLM\SYSTEM\CurrentControlSet\Control\Network\{4D36E972-E325-11CE-BFC1-08002BE10318}\{EB3D90AB-04B5-4EEF-8CDB-5A372C169652}\Connection@Name  isatap.{8366CF1E-65F6-42CF-A8F1-D21C1FA4CAFB}
Reg    HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Kernel\RNG@RNGAuxiliarySeed                                                            129036305
Reg    HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\Keys\0cd292bdd4da                                                                 
Reg    HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Upgrade\LocalRadioSettings                                                                   
Reg    HKLM\SYSTEM\CurrentControlSet\Services\iphlpsvc\Parameters\Isatap\{EB3D90AB-04B5-4EEF-8CDB-5A372C169652}@InterfaceName                      isatap.{8366CF1E-65F6-42CF-A8F1-D21C1FA4CAFB}
Reg    HKLM\SYSTEM\CurrentControlSet\Services\iphlpsvc\Parameters\Isatap\{EB3D90AB-04B5-4EEF-8CDB-5A372C169652}@ReusableType                        0
Reg    HKLM\SYSTEM\CurrentControlSet\Services\iphlpsvc\Parameters\Isatap\{EB3D90AB-04B5-4EEF-8CDB-5A372C169652}@DefunctTimestamp                    0x2D 0x5E 0x9C 0x53 ...
Reg    HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Epoch@Epoch                                                                              2026
Reg    HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Epoch2@Epoch                                                                            742
Reg    HKLM\SYSTEM\CurrentControlSet\Services\WpdUpFltr\Parameters\Wdf@TimeOfLastSqmLog                                                            0x6E 0xB6 0xCD 0x23 ...
Reg    HKLM\SYSTEM\Setup\Upgrade\NsiMigrationRoot\60\0@Rw                                                                                          0x64 0x62 0x03 0x00 ...
Reg    HKLM\SYSTEM\Setup\Upgrade\NsiMigrationRoot\60\0@RwMask                                                                                      0x64 0x62 0x03 0x00 ...

---- EOF - GMER 2.1 ----

cosinus 14.06.2014 19:01
Hallo und :hallo:

Zitat:
Hallo, also gestern hat sie ein Programm heruntergeladen welches ihr Internet schneller machen sollte. Daraufhin haben sich immer neue Programme von alleine installiert.
Was denn genau?

Zitat:
Ich habe dann bereits den adw cleaner und Malwarebytes Anti- Malware laufen lassen und die haben auch verdammt viel gefunden.
Ich dachte damit wäre es gegessen. Aber heute hat sie so gut wie kein Internet mehr.
Und die Logs dazu?

PowerMax 14.06.2014 19:10
Sie hat den TCP Optimizer v3.0.8 geloaden.


Hier der Malware log den anderen habe ich nicht mehr gefunden.

Code:
Malwarebytes Anti-Malware
www.malwarebytes.org

Scan Date: 12.06.2014
Scan Time: 21:02:25
Logfile: Malwarelog.txt
Administrator: Yes

Version: 2.00.2.1012
Malware Database: v2014.06.12.10
Rootkit Database: v2014.06.02.01
License: Free
Malware Protection: Disabled
Malicious Website Protection: Disabled
Self-protection: Disabled

OS: Windows 8.1
CPU: x64
File System: NTFS
User: Anne

Scan Type: Threat Scan
Result: Completed
Objects Scanned: 279986
Time Elapsed: 9 min, 32 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled

Processes: 6
Adware.Adpeak, C:\Program Files\003\vxlsnyaiet64.exe, 2340, Delete-on-Reboot, [d4c6aec9bcbf44f2404d045d996b44bc]
Backdoor.Bot.ED, C:\Users\Anne\AppData\Local\t4pc_en_4\upt4pc_en_4.exe, 3856, Delete-on-Reboot, [8b0f95e2710a979fc4f38eeebd44a45c]
PUP.Optional.VOPackage.A, C:\Users\Anne\AppData\Roaming\VOPackage\VOPackage.exe, 6540, Delete-on-Reboot, [cad04334067579bdff7f8621b15127d9]
PUP.Optional.AdPeak.A, C:\Program Files\003\vxlsnyaiet64.exe, 2340, Delete-on-Reboot, [54466710b7c4c076e8bf2483d72bc43c]
PUP.Optional.ScanTack.A, C:\Program Files (x86)\ScanTack\updater.exe, 3684, Delete-on-Reboot, [63374235d7a40b2b49effcbaf30f8a76]
PUP.Optional.SupraSavings.A, C:\Program Files\SupraSavings\SecureAssist.exe, 6372, Delete-on-Reboot, [c3d76611e89386b0ae162887748e629e]

Modules: 0
(No malicious items detected)

Registry Keys: 58
Adware.Adpeak, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\vxlsnyaiet64, Quarantined, [d4c6aec9bcbf44f2404d045d996b44bc],
PUP.Optional.AdPeak.A, HKLM\SOFTWARE\CLASSES\APPID\{76A60138-58B3-4e27-85FB-8FEF344A8998}, Quarantined, [cdcd1c5b6912171f496aaf8e52b0fa06],
PUP.Optional.AdPeak.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\APPID\{76A60138-58B3-4E27-85FB-8FEF344A8998}, Quarantined, [cdcd1c5b6912171f496aaf8e52b0fa06],
PUP.Optional.BrowseFox.A, HKLM\SOFTWARE\CLASSES\CLSID\{4AA46D49-459F-4358-B4D1-169048547C23}, Quarantined, [a7f3de99f586f83eb0bbbdb7bd45d12f],
PUP.Optional.BrowseFox.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{4AA46D49-459F-4358-B4D1-169048547C23}, Quarantined, [a7f3de99f586f83eb0bbbdb7bd45d12f],
PUP.Optional.ScanTack.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{d332cff8-358e-4c9e-8af3-a08872ef22c1}, Quarantined, [69318ceb027958de97070e30f9090000],
PUP.Optional.ScanTack.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{96EE63E6-6942-46F3-A1A0-2250E4E93D23}, Quarantined, [69318ceb027958de97070e30f9090000],
PUP.Optional.ScanTack.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{AD836A49-1150-48E7-8841-BD466E20B0B0}, Quarantined, [69318ceb027958de97070e30f9090000],
PUP.Optional.ScanTack.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{AD836A49-1150-48E7-8841-BD466E20B0B0}, Quarantined, [69318ceb027958de97070e30f9090000],
PUP.Optional.ScanTack.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{96EE63E6-6942-46F3-A1A0-2250E4E93D23}, Quarantined, [69318ceb027958de97070e30f9090000],
PUP.Optional.ScanTack.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{D332CFF8-358E-4C9E-8AF3-A08872EF22C1}, Quarantined, [69318ceb027958de97070e30f9090000],
PUP.Optional.AdPeak.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\vxlsnyaiet64, Quarantined, [54466710b7c4c076e8bf2483d72bc43c],
PUP.Optional.ScanTack.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\ScanTack, Quarantined, [63374235d7a40b2b49effcbaf30f8a76],
PUP.Optional.ScanTack.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\UpdaterSvcScanTack, Quarantined, [63374235d7a40b2b49effcbaf30f8a76],
PUP.Optional.RRSavings.A, HKLM\SOFTWARE\Rr Savings, Quarantined, [6c2e97e05625df57458b406b778b857b],
PUP.Optional.SupraSavings.A, HKLM\SOFTWARE\suprasavings, Quarantined, [f9a1ee89e7946ec86975357b92700af6],
PUP.Optional.ScanTack.A, HKLM\SOFTWARE\WOW6432NODE\ScanTack, Quarantined, [b6e426513a41d85ead8d5a5c847e0ff1],
PUP.Optional.SupraSavings.A, HKLM\SOFTWARE\WOW6432NODE\SupraSavings, Quarantined, [0496b6c1dc9f8fa75b28dad4679b1ee2],
PUP.Optional.SupraSavings.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\SECUREASSIST, Quarantined, [c3d76611e89386b0ae162887748e629e],
PUP.Optional.ScanTack.A, HKU\S-1-5-21-2489216334-2735940672-2852440863-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\ScanTack, Quarantined, [dbbf91e69fdc4fe75bde605604fe24dc],
PUP.Optional.RRSavings.A, HKU\S-1-5-21-2489216334-2735940672-2852440863-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\Rr Savings, Quarantined, [85152255ed8e320477603378d42e0af6],
PUP.Optional.SupraSavings.A, HKU\S-1-5-21-2489216334-2735940672-2852440863-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\Supra Savings, Quarantined, [19813d3a80fb0f277f54fcb3d032f010],
PUP.Optional.SupraSavings.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{9863E762-BACC-46E4-8CAA-2A6ADA06B65B}, Quarantined, [e7b3ef88bbc02610effa305e4eb417e9],
PUP.Optional.SupraSavings.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{039D611A-7085-4E78-99E1-1BC6F49314C1}, Quarantined, [e7b3ef88bbc02610effa305e4eb417e9],
PUP.Optional.SupraSavings.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{0FCE4F01-64EC-42F1-83E1-1E08D38605D2}, Quarantined, [e7b3ef88bbc02610effa305e4eb417e9],
PUP.Optional.SupraSavings.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{1A2A195A-A0F9-4006-AF02-3F05EEFDE792}, Quarantined, [e7b3ef88bbc02610effa305e4eb417e9],
PUP.Optional.SupraSavings.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{2D9DB233-DC4B-4677-946C-5FA5ABCF506B}, Quarantined, [e7b3ef88bbc02610effa305e4eb417e9],
PUP.Optional.SupraSavings.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{37A2ED38-A271-4338-92F0-2597C63AB0D6}, Quarantined, [e7b3ef88bbc02610effa305e4eb417e9],
PUP.Optional.SupraSavings.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{3AE76A17-C344-4A83-81CE-65EFEE41E42D}, Quarantined, [e7b3ef88bbc02610effa305e4eb417e9],
PUP.Optional.SupraSavings.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{3F54B9ED-DBB6-4AC2-9136-9598304A4088}, Quarantined, [e7b3ef88bbc02610effa305e4eb417e9],
PUP.Optional.SupraSavings.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{4C0A69B0-CE97-42B7-86FC-08280C99C74D}, Quarantined, [e7b3ef88bbc02610effa305e4eb417e9],
PUP.Optional.SupraSavings.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{4E9EB4D5-C929-4005-AC62-1856B1DA5A24}, Quarantined, [e7b3ef88bbc02610effa305e4eb417e9],
PUP.Optional.SupraSavings.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{60EEBE82-A0B9-4D4B-A227-ECF69CE21BB5}, Quarantined, [e7b3ef88bbc02610effa305e4eb417e9],
PUP.Optional.SupraSavings.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{70215BB2-D45B-4D40-A467-32AF0FF8036F}, Quarantined, [e7b3ef88bbc02610effa305e4eb417e9],
PUP.Optional.SupraSavings.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{820B6267-576D-4A2D-94C4-980D227A0C4E}, Quarantined, [e7b3ef88bbc02610effa305e4eb417e9],
PUP.Optional.SupraSavings.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{8FAF962C-3EDE-405E-B1D0-62B8235C6044}, Quarantined, [e7b3ef88bbc02610effa305e4eb417e9],
PUP.Optional.SupraSavings.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{9EF718B4-A84D-4E46-B365-7DF81E4CF73E}, Quarantined, [e7b3ef88bbc02610effa305e4eb417e9],
PUP.Optional.SupraSavings.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{C1F5E799-B218-4C32-B189-3C389BA140BB}, Quarantined, [e7b3ef88bbc02610effa305e4eb417e9],
PUP.Optional.SupraSavings.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{E8D63DD4-ACE0-47F1-836C-69E60B5366FD}, Quarantined, [e7b3ef88bbc02610effa305e4eb417e9],
PUP.Optional.SupraSavings.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{F60C9408-3110-4C98-A139-ABE1EE1111DD}, Quarantined, [e7b3ef88bbc02610effa305e4eb417e9],
PUP.Optional.SupraSavings.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{039D611A-7085-4E78-99E1-1BC6F49314C1}, Quarantined, [e7b3ef88bbc02610effa305e4eb417e9],
PUP.Optional.SupraSavings.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{0FCE4F01-64EC-42F1-83E1-1E08D38605D2}, Quarantined, [e7b3ef88bbc02610effa305e4eb417e9],
PUP.Optional.SupraSavings.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{1A2A195A-A0F9-4006-AF02-3F05EEFDE792}, Quarantined, [e7b3ef88bbc02610effa305e4eb417e9],
PUP.Optional.SupraSavings.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{2D9DB233-DC4B-4677-946C-5FA5ABCF506B}, Quarantined, [e7b3ef88bbc02610effa305e4eb417e9],
PUP.Optional.SupraSavings.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{37A2ED38-A271-4338-92F0-2597C63AB0D6}, Quarantined, [e7b3ef88bbc02610effa305e4eb417e9],
PUP.Optional.SupraSavings.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{3AE76A17-C344-4A83-81CE-65EFEE41E42D}, Quarantined, [e7b3ef88bbc02610effa305e4eb417e9],
PUP.Optional.SupraSavings.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{3F54B9ED-DBB6-4AC2-9136-9598304A4088}, Quarantined, [e7b3ef88bbc02610effa305e4eb417e9],
PUP.Optional.SupraSavings.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{4C0A69B0-CE97-42B7-86FC-08280C99C74D}, Quarantined, [e7b3ef88bbc02610effa305e4eb417e9],
PUP.Optional.SupraSavings.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{4E9EB4D5-C929-4005-AC62-1856B1DA5A24}, Quarantined, [e7b3ef88bbc02610effa305e4eb417e9],
PUP.Optional.SupraSavings.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{60EEBE82-A0B9-4D4B-A227-ECF69CE21BB5}, Quarantined, [e7b3ef88bbc02610effa305e4eb417e9],
PUP.Optional.SupraSavings.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{70215BB2-D45B-4D40-A467-32AF0FF8036F}, Quarantined, [e7b3ef88bbc02610effa305e4eb417e9],
PUP.Optional.SupraSavings.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{820B6267-576D-4A2D-94C4-980D227A0C4E}, Quarantined, [e7b3ef88bbc02610effa305e4eb417e9],
PUP.Optional.SupraSavings.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{8FAF962C-3EDE-405E-B1D0-62B8235C6044}, Quarantined, [e7b3ef88bbc02610effa305e4eb417e9],
PUP.Optional.SupraSavings.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{9EF718B4-A84D-4E46-B365-7DF81E4CF73E}, Quarantined, [e7b3ef88bbc02610effa305e4eb417e9],
PUP.Optional.SupraSavings.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{C1F5E799-B218-4C32-B189-3C389BA140BB}, Quarantined, [e7b3ef88bbc02610effa305e4eb417e9],
PUP.Optional.SupraSavings.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{E8D63DD4-ACE0-47F1-836C-69E60B5366FD}, Quarantined, [e7b3ef88bbc02610effa305e4eb417e9],
PUP.Optional.SupraSavings.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{F60C9408-3110-4C98-A139-ABE1EE1111DD}, Quarantined, [e7b3ef88bbc02610effa305e4eb417e9],
PUP.Optional.SupraSavings.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{9863E762-BACC-46E4-8CAA-2A6ADA06B65B}, Quarantined, [e7b3ef88bbc02610effa305e4eb417e9],

Registry Values: 4
Backdoor.Bot.ED, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\RUNONCE|upt4pc_en_4.exe, C:\Users\Anne\AppData\Local\t4pc_en_4\upt4pc_en_4.exe -runonce, Quarantined, [8b0f95e2710a979fc4f38eeebd44a45c]
PUP.Optional.VOPackage.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\RUNONCE|VOPackage, C:\Users\Anne\AppData\Roaming\VOPackage\VOPackage.exe /runonce, Quarantined, [cad04334067579bdff7f8621b15127d9]
PUP.Optional.FirstSeenToday.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|fst_de_37, Quarantined, [4753284fb5c62e08fd5258538979b050],
PUP.Optional.SupraSavings.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\SECUREASSIST|ImagePath, c:\Program Files\SupraSavings\SecureAssist.exe, Quarantined, [c3d76611e89386b0ae162887748e629e]

Registry Data: 1
PUP.Optional.Trovi.A, HKU\S-1-5-21-2489216334-2735940672-2852440863-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, hxxp://www.trovi.com/?gd=&ctid=CT3319709&octid=EB_ORIGINAL_CTID&ISID=M8D478F64-A197-44D8-85CF-DAC6DC428A41&SearchSource=55&CUI=&UM=5&UP=SPE5870423-EDD4-4D28-8B20-08FE6ED49AB6&SSPV=SP215A_sp_ie, Good: (www.google.com), Bad: (hxxp://www.trovi.com/?gd=&ctid=CT3319709&octid=EB_ORIGINAL_CTID&ISID=M8D478F64-A197-44D8-85CF-DAC6DC428A41&SearchSource=55&CUI=&UM=5&UP=SPE5870423-EDD4-4D28-8B20-08FE6ED49AB6&SSPV=SP215A_sp_ie),Replaced,[dac0ec8bf487da5c00ba75f519ebf50b]

Folders: 3
PUP.Optional.ScanTack.A, C:\Program Files (x86)\ScanTack, Delete-on-Reboot, [63374235d7a40b2b49effcbaf30f8a76],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\SearchProtect\bin, Quarantined, [188231465e1d49ede80994f4aa58926e],
PUP.Optional.SupraSavings.A, C:\Program Files\SupraSavings, Delete-on-Reboot, [e7b3ef88bbc02610effa305e4eb417e9],

Files: 36
Adware.Adpeak, C:\Program Files\003\vxlsnyaiet64.exe, Delete-on-Reboot, [d4c6aec9bcbf44f2404d045d996b44bc],
Backdoor.Bot.ED, C:\Users\Anne\AppData\Local\t4pc_en_4\upt4pc_en_4.exe, Delete-on-Reboot, [8b0f95e2710a979fc4f38eeebd44a45c],
PUP.Optional.ScanTack.A, C:\Program Files (x86)\ScanTack\626E57E1-94B0-4294-9B60-B93ECFC0A20C.dll, Quarantined, [69318ceb027958de97070e30f9090000],
PUP.Optional.AdPeak.A, C:\temp\InstallFilter64.msi, Quarantined, [3b5fabccb1ca47ef1e6298a53ac629d7],
PUP.Optional.SupraSavings.A, C:\temp\t.msi, Quarantined, [8812e295b2c9dd5944feca96fb0953ad],
PUP.Optional.Conduit.A, C:\Users\Anne\AppData\Local\Temp\nsi4813.exe, Quarantined, [cdcda0d7f78468cedbf3c8bc33ce59a7],
PUP.Optional.Conduit.A, C:\Users\Anne\AppData\Local\Temp\nsl1036.exe, Quarantined, [a3f7f97e0972bf77fed096ee34cd847c],
PUP.Optional.Conduit.A, C:\Users\Anne\AppData\Local\Temp\nsl4439.exe, Quarantined, [93075a1d85f644f2a32bafd5867bd927],
PUP.Optional.Conduit.A, C:\Users\Anne\AppData\Local\Temp\nsm80D0.exe, Quarantined, [37638dea4a313afc24aa0084df2230d0],
PUP.Optional.Conduit.A, C:\Users\Anne\AppData\Local\Temp\nspCF9.exe, Quarantined, [4b4f94e34536de58517d067eb849ea16],
PUP.Optional.Conduit.A, C:\Users\Anne\AppData\Local\Temp\nsnA669\SpSetup.exe, Quarantined, [fb9f6e09e7944de920ae077d23de15eb],
PUP.Optional.OptimumInstaller.A, C:\Users\Anne\Downloads\Groovestream.exe, Quarantined, [a1f9da9da3d80f279c0091bfd72a649c],
PUP.Optional.AdPeak.A, C:\Windows\Installer\169a260.msi, Quarantined, [7c1e81f6e09b78bee19fce6fbb4505fb],
PUP.Optional.VOPackage.A, C:\Users\Anne\AppData\Roaming\VOPackage\VOPackage.exe, Delete-on-Reboot, [cad04334067579bdff7f8621b15127d9],
PUP.Optional.AdPeak.A, C:\Program Files\003\vxlsnyaiet64.exe, Delete-on-Reboot, [54466710b7c4c076e8bf2483d72bc43c],
PUP.Optional.ScanTack.A, C:\Program Files (x86)\ScanTack\ScanTack.ico, Quarantined, [63374235d7a40b2b49effcbaf30f8a76],
PUP.Optional.ScanTack.A, C:\Program Files (x86)\ScanTack\-10, Quarantined, [63374235d7a40b2b49effcbaf30f8a76],
PUP.Optional.ScanTack.A, C:\Program Files (x86)\ScanTack\7za.exe, Quarantined, [63374235d7a40b2b49effcbaf30f8a76],
PUP.Optional.ScanTack.A, C:\Program Files (x86)\ScanTack\ScanTack.FirstRun.exe, Quarantined, [63374235d7a40b2b49effcbaf30f8a76],
PUP.Optional.ScanTack.A, C:\Program Files (x86)\ScanTack\ScanTackUninstall.exe, Quarantined, [63374235d7a40b2b49effcbaf30f8a76],
PUP.Optional.ScanTack.A, C:\Program Files (x86)\ScanTack\updater.exe, Delete-on-Reboot, [63374235d7a40b2b49effcbaf30f8a76],
PUP.Optional.ScanTack.A, C:\Program Files (x86)\ScanTack\updateScanTack.exe, Quarantined, [63374235d7a40b2b49effcbaf30f8a76],
PUP.Optional.PCPerformer.A, C:\Windows\System32\roboot64.exe, Quarantined, [5941babdee8d6dc9ab554178b949ea16],
PUP.Optional.SupraSavings.A, C:\Program Files\SupraSavings\SecureAssist.exe, Delete-on-Reboot, [c3d76611e89386b0ae162887748e629e],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\SearchProtect\bin\SPVC32.dll, Quarantined, [188231465e1d49ede80994f4aa58926e],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\SearchProtect\bin\SPVC32Loader.dll, Quarantined, [188231465e1d49ede80994f4aa58926e],
PUP.Optional.SupraSavings.A, C:\Program Files\SupraSavings\Installbat.dll, Quarantined, [e7b3ef88bbc02610effa305e4eb417e9],
PUP.Optional.SupraSavings.A, C:\Program Files\SupraSavings\Installbat64.dll, Quarantined, [e7b3ef88bbc02610effa305e4eb417e9],
PUP.Optional.SupraSavings.A, C:\Program Files\SupraSavings\Microsoft.Deployment.WindowsInstaller.dll, Quarantined, [e7b3ef88bbc02610effa305e4eb417e9],
PUP.Optional.SupraSavings.A, C:\Program Files\SupraSavings\Microsoft.Deployment.WindowsInstaller.xml, Quarantined, [e7b3ef88bbc02610effa305e4eb417e9],
PUP.Optional.SupraSavings.A, C:\Program Files\SupraSavings\PCProxyDLL64.dll, Delete-on-Reboot, [e7b3ef88bbc02610effa305e4eb417e9],
PUP.Optional.SupraSavings.A, C:\Program Files\SupraSavings\SAWFP64.sys, Quarantined, [e7b3ef88bbc02610effa305e4eb417e9],
PUP.Optional.SupraSavings.A, C:\Program Files\SupraSavings\SecureAssist.dll, Quarantined, [e7b3ef88bbc02610effa305e4eb417e9],
PUP.Optional.SupraSavings.A, C:\Program Files\SupraSavings\SecureAssist.tlb, Quarantined, [e7b3ef88bbc02610effa305e4eb417e9],
PUP.Optional.SupraSavings.A, C:\Program Files\SupraSavings\SecureAssist64.dll, Quarantined, [e7b3ef88bbc02610effa305e4eb417e9],
PUP.Optional.SupraSavings.A, C:\Program Files\SupraSavings\SecureAssistWFP.exe, Quarantined, [e7b3ef88bbc02610effa305e4eb417e9],

Physical Sectors: 0
(No malicious items detected)


(end)

cosinus 14.06.2014 19:12
Adware/Junkware/Toolbars entfernen


1. Schritt: adwCleaner

Downloade Dir bitte AdwCleaner Logo Icon AdwCleaner auf deinen Desktop.
  • Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
  • Starte die AdwCleaner.exe mit einem Doppelklick.
  • Stimme den Nutzungsbedingungen zu.
  • Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
    • "Tracing" Schlüssel löschen
    • Winsock Einstellungen zurücksetzen
    • Proxy Einstellungen zurücksetzen
    • Internet Explorer Richtlinien zurücksetzen
    • Chrome Richtlinien zurücksetzen
    • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
  • Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
  • Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
  • Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).




2. Schritt: JRT - Junkware Removal Tool

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

  • Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
  • Drücke eine beliebige Taste, um das Tool zu starten.
  • Je nach System kann der Scan eine Weile dauern.
  • Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
  • Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.




3. Schritt: Frisches Log mit FRST

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST Download FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
  • Starte jetzt FRST.
  • Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
  • Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
  • Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)


PowerMax 14.06.2014 19:35
ADW log:

Code:
# AdwCleaner v3.212 - Bericht erstellt am 14/06/2014 um 20:19:46
# Aktualisiert 05/06/2014 von Xplode
# Betriebssystem : Windows 8.1 Pro  (64 bits)
# Benutzername : Anne - ANNES-PC
# Gestartet von : C:\Users\Anne\Desktop\adwcleaner_3.212.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****

Ordner Gelöscht : C:\Program Files (x86)\predm

***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****


***** [ Browser ] *****

-\\ Internet Explorer v11.0.9600.17126


-\\ Google Chrome v35.0.1916.153

[ Datei : C:\Users\Anne\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [3334 octets] - [12/06/2014 21:20:37]
AdwCleaner[R1].txt - [946 octets] - [14/06/2014 20:19:13]
AdwCleaner[S0].txt - [3120 octets] - [12/06/2014 21:21:34]
AdwCleaner[S1].txt - [868 octets] - [14/06/2014 20:19:46]

########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [927 octets] ##########

JRT


Code:
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.4 (04.06.2014:1)
OS: Windows 8.1 Pro x64
Ran by Anne on 14.06.2014 at 20:21:55,26
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys



~~~ Files



~~~ Folders



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 14.06.2014 at 20:24:47,03
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Addition


Code:
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 12-06-2014 02
Ran by Anne at 2014-06-14 20:30:20
Running from C:\Users\Anne\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

Conexant HD Audio (HKLM\...\CNXT_AUDIO_HDA) (Version: 8.64.52.0 - Conexant)
Dolby Advanced Audio v2 (HKLM-x32\...\{B9E70C7A-9F85-4A39-A4A3-BFA3C3BF7613}) (Version: 7.2.8000.17 - Dolby Laboratories Inc)
Energy Management (HKLM-x32\...\InstallShield_{D0956C11-0F60-43FE-99AD-524E833471BB}) (Version: 8.0.2.4 - Lenovo)
Energy Management (x32 Version: 8.0.2.4 - Lenovo) Hidden
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 35.0.1916.153 - Google Inc.)
Google Update Helper (x32 Version: 1.3.24.7 - Google Inc.) Hidden
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 9.17.10.2963 - Intel Corporation)
Intel(R) PROSet/Wireless for Bluetooth(R) + High Speed (Version: 15.8.0.0548 - Intel Corporation) Hidden
Intel(R) PROSet/Wireless Software for Bluetooth(R) Technology (HKLM\...\{302600C1-6BDF-4FD1-1305-148929CC1385}) (Version: 3.0.1305.0340 - Intel Corporation)
Intel(R) PROSet/Wireless WiFi Software Driver (Version: 15.08.0000.0249 - Intel Corporation) Hidden
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.0.0.1083 - Intel Corporation)
Intel(R) Rapid Storage Technology (Version: 12.0.0.1083 - Intel Corporation) Hidden
Intel(R) SDK for OpenCL - CPU Only Runtime Package (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: 2.0.0.37149 - Intel Corporation)
Intel® PROSet/Wireless Software (HKLM-x32\...\{e6d17d96-ddaa-476f-bb07-db601024ffb1}) (Version: 15.8.0 - Intel Corporation)
Intel® PROSet/Wireless WiFi Software (Version: 15.08.0000.0172 - Intel Corporation) Hidden
Lenovo EasyCamera (HKLM-x32\...\{E0A7ED39-8CD6-4351-93C3-69CCA00D12B4}) (Version: 6.2.9200.10227 - Realtek Semiconductor Corp.)
Lenovo pointing device (HKLM\...\Elantech) (Version: 11.4.25.1 - ELAN Microelectronic Corp.)
Malwarebytes Anti-Malware Version 2.0.2.1012 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.2.1012 - Malwarebytes Corporation)
Microsoft App Update for microsoft.windowscommunicationsapps_17.0.1119.516_x64__8wekyb3d8bbwe (x64) (Version: 1.0.0.0 - Microsoft Corporation) Hidden
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version:  - Microsoft)
Microsoft Office 2007 Service Pack 3 (SP3) (x32 Version:  - Microsoft) Hidden
Microsoft Office Excel MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Home and Student 2007 (HKLM-x32\...\HOMESTUDENTR) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Home and Student 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Live Add-in 1.5 (HKLM-x32\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft Office Office 64-bit Components 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (x32 Version:  - Microsoft) Hidden
Microsoft Office Shared 64-bit MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Qualcomm Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (HKLM-x32\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 2.1.0.15 - Qualcomm Atheros Communications Inc.)
Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 6.3.273.37 - Realtek Semiconductor Corp.)
SupraSavings (Version: 1.0.0.0 - SupraSavings) Hidden <==== ATTENTION
Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{A024FC7B-77DE-45DE-A058-1C049A17BFB3}) (Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM-x32\...\{90120000-002A-0000-1000-0000000FF1CE}_HOMESTUDENTR_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{E9A82945-BA29-4EE8-8F2A-2F49545E9CF2}) (Version:  - Microsoft)
Update für Microsoft Office Excel 2007 Help (KB963678) (HKLM-x32\...\{90120000-0016-0407-0000-0000000FF1CE}_HOMESTUDENTR_{BEC163EC-7A83-48A1-BFB6-3BF47CC2F8CF}) (Version:  - Microsoft)
Update für Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM-x32\...\{90120000-0018-0407-0000-0000000FF1CE}_HOMESTUDENTR_{EA160DA3-E9B5-4D03-A518-21D306665B96}) (Version:  - Microsoft)
Update für Microsoft Office Word 2007 Help (KB963665) (HKLM-x32\...\{90120000-001B-0407-0000-0000000FF1CE}_HOMESTUDENTR_{38472199-D7B6-4833-A949-10E4EE6365A1}) (Version:  - Microsoft)
Windows-Treiberpaket - Lenovo (ACPIVPC) System  (06/15/2012 8.1.0.1) (HKLM\...\71BC3FD63F450BA0A957AAECBDB4A000C4F2BE42) (Version: 06/15/2012 8.1.0.1 - Lenovo)
Windows-Treiberpaket - Lenovo (WUDFRd) LenovoVhid  (06/19/2012 10.13.29.733) (HKLM\...\8A223E56FB1ED4F697B54E5BF96F1EB63B512684) (Version: 06/19/2012 10.13.29.733 - Lenovo)

==================== Restore Points  =========================

26-05-2014 14:01:41 Windows Update
03-06-2014 10:11:39 Geplanter Prüfpunkt
10-06-2014 12:04:25 Geplanter Prüfpunkt
12-06-2014 18:15:40 Windows Modules Installer

==================== Hosts content: ==========================

2013-08-22 15:25 - 2014-06-12 20:35 - 00000828 ____A C:\WINDOWS\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {03B68F25-946B-4E4E-BDF2-EC1C875C21F8} - \Advanced System Protector No Task File <==== ATTENTION
Task: {05293577-D647-4185-B859-C94839A0B2E3} - System32\Tasks\Microsoft\Windows\SettingSync\NetworkStateChangeTask
Task: {0B545118-B563-42FC-8D07-B78F602FCF34} - System32\Tasks\Microsoft\Windows\WS\WSRefreshBannedAppsListTask => Rundll32.exe WSClient.dll,RefreshBannedAppsList
Task: {0BC32B2D-93F4-45F4-B338-9BC59A6EB744} - System32\Tasks\Microsoft\Windows\DiskFootprint\Diagnostics
Task: {0FE784B7-9072-4924-BD29-9E667BDE2486} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-07-26] (Google Inc.)
Task: {18D198A8-81A5-49DE-843A-93825267768A} - System32\Tasks\Dolby Selector => C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe [2012-08-31] (Dolby Laboratories Inc.)
Task: {1F2D7BAE-62D4-4467-A97F-CD9E86C0B564} - System32\Tasks\Microsoft\Windows\WOF\WIM-Hash-Validation
Task: {2085BF56-520D-4951-B7C0-DF34AF90CC6A} - System32\Tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask => Rundll32.exe sysmain.dll,PfSvWsSwapAssessmentTask
Task: {2C9C0C6C-2A74-46F2-858A-4389D253EAD0} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCachePrepopulate
Task: {352E6CA0-7314-4DF4-89C4-682368D80D57} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join => C:\Windows\System32\AutoWorkplace.exe [2013-08-22] (Microsoft Corporation)
Task: {3B6D8A73-F20B-4C93-B8FB-56A154F172D2} - System32\Tasks\Microsoft\Windows\Time Zone\SynchronizeTimeZone => C:\Windows\system32\tzsync.exe [2013-08-22] (Microsoft Corporation)
Task: {49754026-21E1-41FC-94FD-727AFE414FE7} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCacheRebalance
Task: {6AA91E8C-DDBD-4979-8464-4062F7681A19} - System32\Tasks\Microsoft\Windows\Plug and Play\Plug and Play Cleanup
Task: {6D816A50-FAF2-40BA-96A3-E53557E748AB} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2014-06-11] (Microsoft Corporation)
Task: {6DFCB649-0769-4F83-BB10-F60F235F6D3D} - System32\Tasks\Microsoft\Windows\SkyDrive\Idle Sync Maintenance Task
Task: {73B1B253-CE67-4501-AE1A-377DD1D68B65} - System32\Tasks\Microsoft\Windows\Application Experience\StartupAppTask => Rundll32.exe Startupscan.dll,SusRunTask
Task: {77F1D869-6E65-4079-A2A0-E2023408EF97} - System32\Tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState => Rundll32.exe Windows.Storage.ApplicationData.dll,CleanupTemporaryState
Task: {872D0E53-FD2E-41E3-B431-698AF82882CE} - System32\Tasks\Microsoft\Windows\SkyDrive\Routine Maintenance Task
Task: {8CC813C9-712A-41EF-9512-B233444FC669} - System32\Tasks\Microsoft\Windows\AppxDeploymentClient\Pre-staged app cleanup => Rundll32.exe %windir%\system32\AppxDeploymentClient.dll,AppxPreStageCleanupRunTask
Task: {8E259E1C-F4D8-4C27-B2FE-EE1654348A03} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-07-26] (Google Inc.)
Task: {9FF4C139-5234-410C-B7FA-23EE2FD2AB53} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Maintenance Work
Task: {A9B946C6-71F6-4504-A414-449D3B0347DF} - System32\Tasks\Microsoft\Windows\WOF\WIM-Hash-Management
Task: {C2F5A32E-2842-473F-8B15-887314827DE5} - System32\Tasks\Microsoft\Windows\Shell\FamilySafetyUpload
Task: {CFD7C21A-808B-487B-A6EC-8A10E44E8360} - System32\Tasks\Microsoft\Windows\SettingSync\BackupTask
Task: {D88FEC9E-A82A-46F9-87E2-B6B97B301C1A} - System32\Tasks\Microsoft\Windows\WS\License Validation => Rundll32.exe WSClient.dll,WSpTLR licensing
Task: {D964E012-309A-4F53-8C0D-6AC7E86CFEF3} - System32\Tasks\Microsoft\Windows\WindowsUpdate\Scheduled Start With Network => Sc.exe start wuauserv
Task: {DA46820F-FF8A-4B5E-A6B2-B12185DCFFFB} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Logon Synchronization
Task: {DCE3D606-9E17-4E65-B72D-0EF3F4603DE5} - System32\Tasks\Microsoft\Windows\DiskCleanup\SilentCleanup => C:\Windows\system32\cleanmgr.exe [2014-03-18] (Microsoft Corporation)
Task: {E6D378FA-E068-4BCB-80DE-56D43A249507} - System32\Tasks\Microsoft\Windows\RecoveryEnvironment\VerifyWinRE
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2011-06-22 07:42 - 2011-06-22 07:42 - 00034304 _____ () C:\WINDOWS\System32\ssp4ml6.dll
2014-01-25 02:22 - 2014-01-25 02:22 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll

==================== Alternate Data Streams (whitelisted) =========

AlternateDataStreams: C:\WINDOWS\system32\Drivers\btmhsf.sys:Microsoft_Appcompat_ReinstallUpgrade
AlternateDataStreams: C:\Users\Anne\OneDrive:ms-properties

==================== Safe Mode (whitelisted) ===================

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\SAWFP => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\SecureAssist => ""="service"

==================== EXE Association (whitelisted) =============


==================== MSCONFIG/TASK MANAGER disabled items =========


==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================

System errors:
=============

Microsoft Office Sessions:
=========================
Error: (06/01/2014 07:27:48 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6695.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 13992 seconds with 2640 seconds of active time.  This session ended with a crash.


CodeIntegrity Errors:
===================================
  Date: 2014-06-14 17:56:20.149
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2014-06-14 16:50:13.723
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2014-06-13 11:24:31.713
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2014-06-12 14:01:41.946
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2014-05-27 10:48:31.758
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.


==================== Memory info ===========================

Percentage of memory in use: 27%
Total physical RAM: 3996.85 MB
Available physical RAM: 2904.53 MB
Total Pagefile: 8092.85 MB
Available Pagefile: 6968.44 MB
Total Virtual: 131072 MB
Available Virtual: 131071.84 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:465.42 GB) (Free:431.43 GB) NTFS
Drive e: (TRANSCEND) (Removable) (Total:3.73 GB) (Free:3.71 GB) FAT32

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: 6AE802BE)
Partition 1: (Active) - (Size=350 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=465 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (Size: 4 GB) (Disk ID: 00000000)

Partition: GPT Partition Type.

==================== End Of Log ============================
Frst


Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 12-06-2014 02
Ran by Anne (administrator) on ANNES-PC on 14-06-2014 20:30:00
Running from C:\Users\Anne\Desktop
Platform: Windows 8.1 Pro (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Conexant Systems Inc.) C:\Windows\System32\CxAudMsg64.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.24.7\GoogleCrashHandler.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.24.7\GoogleCrashHandler64.exe
(Dolby Laboratories Inc.) C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDIntelligent.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
(Realtek semiconductor) C:\Windows\RTFTrack.exe
(Conexant Systems, Inc.) C:\Program Files\CONEXANT\cAudioFilterAgent\CAudioFilterAgent64.exe
(Lenovo (Beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
(Intel(R) Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [ETDCtrl] => C:\Program Files\Elantech\ETDCtrl.exe [2894664 2013-08-08] (ELAN Microelectronics Corp.)
HKLM\...\Run: [RtsFT] => C:\WINDOWS\RTFTrack.exe [6339656 2013-04-10] (Realtek semiconductor)
HKLM\...\Run: [BTMTrayAgent] => C:\Program Files (x86)\Intel\Bluetooth\btmshellex.dll [7770936 2013-04-12] (Motorola Solutions, Inc.)
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [286192 2013-01-31] (Intel Corporation)
HKLM\...\Run: [cAudioFilterAgent] => C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe [900704 2013-03-15] (Conexant Systems, Inc.)
HKLM\...\Run: [SmartAudio] => C:\Program Files\CONEXANT\SAII\SACpl.exe [1647616 2012-06-13] (Conexant Systems, Inc.)
HKLM\...\Run: [Energy Management] => C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe [17080376 2012-07-26] (Lenovo (Beijing) Limited)
HKLM\...\Run: [EnergyUtility] => C:\Program Files (x86)\Lenovo\Energy Management\Utility.exe [191544 2012-07-26] (Lenovo(beijing) Limited)
HKLM-x32\...\Run: [t4pc_en_4] => [X]
Winlogon\Notify\igfxcui: C:\WINDOWS\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-2489216334-2735940672-2852440863-1001\...\Run: [GoogleChromeAutoLaunch_BA435CB4097564A5860B488C3E6E7FD7] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [860488 2014-06-05] (Google Inc.)
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://t.de.msn.com/
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xC5ED38E39D84CF01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE,de;q=0.5
SearchScopes: HKLM-x32 - DefaultScope value is missing.
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1

FireFox:
========
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)

Chrome:
=======
CHR HomePage: hxxp://www.google.de/
CHR StartupUrls: "hxxp://www.google.de/"
CHR Extension: (Google Docs) - C:\Users\Anne\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2012-07-26]
CHR Extension: (Google Drive) - C:\Users\Anne\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2012-07-26]
CHR Extension: (YouTube) - C:\Users\Anne\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2012-07-26]
CHR Extension: (Google-Suche) - C:\Users\Anne\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2012-07-26]
CHR Extension: (Google Wallet) - C:\Users\Anne\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-05-22]
CHR Extension: (Google Mail) - C:\Users\Anne\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2012-07-26]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Services (Whitelisted) =================

R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15344 2013-01-31] (Intel Corporation)
R2 Intel(R) Wireless Bluetooth(R) 4.0 Radio Management; C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe [161736 2013-04-15] (Intel Corporation)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [273136 2013-04-18] ()
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347880 2014-05-23] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2014-05-23] (Microsoft Corporation)
R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3388144 2013-04-18] (Intel® Corporation)

==================== Drivers (Whitelisted) ====================

S0 ADP80XX; C:\Windows\System32\drivers\ADP80XX.SYS [782176 2013-08-22] (PMC-Sierra)
S3 bcmfn2; C:\Windows\System32\drivers\bcmfn2.sys [17624 2013-08-13] (Windows (R) Win 7 DDK provider)
R3 btmhsf; C:\Windows\system32\DRIVERS\btmhsf.sys [1366328 2013-03-28] (Motorola Solutions, Inc.)
S3 iaLPSSi_GPIO; C:\Windows\System32\drivers\iaLPSSi_GPIO.sys [24568 2013-07-30] (Intel Corporation)
S3 iaLPSSi_I2C; C:\Windows\System32\drivers\iaLPSSi_I2C.sys [99320 2013-07-25] (Intel Corporation)
S0 iaStorAV; C:\Windows\System32\drivers\iaStorAV.sys [651248 2013-08-10] (Intel Corporation)
R0 intelpep; C:\Windows\System32\drivers\intelpep.sys [39768 2014-03-18] (Microsoft Corporation)
S3 kbldfltr; C:\Windows\System32\drivers\kbldfltr.sys [22272 2014-03-18] (Microsoft Corporation)
S0 LSI_SAS3; C:\Windows\System32\drivers\lsi_sas3.sys [81760 2013-08-22] (LSI Corporation)
R3 NdisVirtualBus; C:\Windows\System32\drivers\NdisVirtualBus.sys [16384 2013-08-22] (Microsoft Corporation)
S3 netvsc; C:\Windows\system32\DRIVERS\netvsc63.sys [87040 2013-08-22] (Microsoft Corporation)
R3 NETwNe64; C:\Windows\system32\DRIVERS\NETwew00.sys [3344352 2013-07-08] (Intel Corporation)
S3 ReFS; C:\Windows\System32\Drivers\ReFS.sys [924504 2014-03-18] (Microsoft Corporation)
R3 rtsuvc; C:\Windows\system32\DRIVERS\rtsuvc.sys [8243272 2013-04-10] (Realtek Semiconductor Corp.)
S3 SerCx2; C:\Windows\System32\drivers\SerCx2.sys [146776 2014-03-18] (Microsoft Corporation)
S0 stornvme; C:\Windows\System32\drivers\stornvme.sys [57176 2014-03-18] (Microsoft Corporation)
S3 UEFI; C:\Windows\System32\drivers\UEFI.sys [26976 2013-08-22] (Microsoft Corporation)
R3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [123224 2014-05-23] (Microsoft Corporation)
R0 Wof; C:\Windows\System32\Drivers\Wof.sys [157016 2014-05-23] (Microsoft Corporation)
S2 SAWFP; \??\C:\WINDOWS\system32\Drivers\SAWFP64.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-06-14 20:30 - 2014-06-14 20:30 - 00009437 _____ () C:\Users\Anne\Desktop\FRST.txt
2014-06-14 20:28 - 2014-06-14 20:28 - 00000000 ____D () C:\Users\Anne\Desktop\bereits gepostet
2014-06-14 20:24 - 2014-06-14 20:24 - 00000617 _____ () C:\Users\Anne\Desktop\JRT.txt
2014-06-14 20:21 - 2014-06-14 20:21 - 00001006 _____ () C:\Users\Anne\Desktop\AdwCleaner[S1].txt
2014-06-14 20:21 - 2014-06-14 20:21 - 00000000 ____D () C:\WINDOWS\ERUNT
2014-06-14 20:17 - 2014-06-14 20:13 - 01333465 _____ () C:\Users\Anne\Desktop\adwcleaner_3.212.exe
2014-06-14 20:17 - 2014-06-14 20:13 - 01016261 _____ (Thisisu) C:\Users\Anne\Desktop\JRT.exe
2014-06-14 17:44 - 2014-06-14 17:44 - 468138642 _____ () C:\WINDOWS\MEMORY.DMP
2014-06-14 17:44 - 2014-06-14 17:44 - 00283480 _____ () C:\WINDOWS\Minidump\061414-15500-01.dmp
2014-06-14 17:44 - 2014-06-14 17:44 - 00000000 ____D () C:\WINDOWS\Minidump
2014-06-14 17:14 - 2014-06-14 20:30 - 00000000 ____D () C:\FRST
2014-06-14 17:10 - 2014-06-14 17:10 - 00000000 _____ () C:\Users\Anne\defogger_reenable
2014-06-14 17:08 - 2014-06-14 17:05 - 02081792 _____ (Farbar) C:\Users\Anne\Desktop\FRST64.exe
2014-06-14 17:08 - 2014-06-14 17:05 - 00380416 _____ () C:\Users\Anne\Desktop\Gmer-19357.exe
2014-06-14 17:08 - 2014-06-14 17:05 - 00050477 _____ () C:\Users\Anne\Desktop\Defogger.exe
2014-06-12 21:20 - 2014-06-14 20:19 - 00000000 ____D () C:\AdwCleaner
2014-06-12 21:20 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\WINDOWS\SysWOW64\sqlite3.dll
2014-06-12 21:19 - 2014-06-12 21:20 - 01016261 _____ (Thisisu) C:\Users\Anne\Downloads\JRT.exe
2014-06-12 20:58 - 2014-06-14 20:05 - 00122584 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2014-06-12 20:57 - 2014-06-12 20:57 - 00001118 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-06-12 20:57 - 2014-06-12 20:57 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-06-12 20:57 - 2014-06-12 20:57 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-06-12 20:57 - 2014-06-12 20:57 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-06-12 20:57 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2014-06-12 20:57 - 2014-05-12 07:26 - 00064216 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys
2014-06-12 20:57 - 2014-05-12 07:25 - 00025816 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys
2014-06-12 20:46 - 2014-06-12 20:47 - 00441592 _____ (Bleeping Computer, LLC) C:\Users\Anne\Downloads\sc-cleaner.exe
2014-06-12 20:45 - 2014-06-12 20:50 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Anne\Downloads\mbam-setup-2.0.2.1012.exe
2014-06-12 20:45 - 2014-06-12 20:47 - 01333465 _____ () C:\Users\Anne\Downloads\adwcleaner_3.212.exe
2014-06-12 20:37 - 2014-06-12 20:40 - 00000444 __RSH () C:\ProgramData\ntuser.pol
2014-06-12 20:16 - 2014-06-12 21:16 - 00000000 ____D () C:\temp
2014-06-11 15:50 - 2014-06-11 15:50 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_User_LocationProvider_01_11_00.Wdf
2014-06-11 13:24 - 2014-05-30 12:21 - 23414784 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2014-06-11 13:24 - 2014-05-30 11:45 - 02768384 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2014-06-11 13:24 - 2014-05-30 11:28 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll
2014-06-11 13:24 - 2014-05-30 11:20 - 00752640 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2014-06-11 13:24 - 2014-05-30 11:18 - 17271296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2014-06-11 13:24 - 2014-05-30 11:08 - 05782528 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2014-06-11 13:24 - 2014-05-30 11:06 - 00452096 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtmsft.dll
2014-06-11 13:24 - 2014-05-30 10:46 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2014-06-11 13:24 - 2014-05-30 10:44 - 00295424 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll
2014-06-11 13:24 - 2014-05-30 10:43 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesetup.dll
2014-06-11 13:24 - 2014-05-30 10:38 - 02179072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2014-06-11 13:24 - 2014-05-30 10:35 - 00608768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2014-06-11 13:24 - 2014-05-30 10:29 - 00631808 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2014-06-11 13:24 - 2014-05-30 10:27 - 00592896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll
2014-06-11 13:24 - 2014-05-30 10:23 - 02040832 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2014-06-11 13:24 - 2014-05-30 10:16 - 00368128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtmsft.dll
2014-06-11 13:24 - 2014-05-30 10:04 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll
2014-06-11 13:24 - 2014-05-30 10:02 - 00242688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll
2014-06-11 13:24 - 2014-05-30 09:56 - 04244992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2014-06-11 13:24 - 2014-05-30 09:56 - 02266112 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2014-06-11 13:24 - 2014-05-30 09:54 - 00526336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2014-06-11 13:24 - 2014-05-30 09:49 - 01964544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2014-06-11 13:24 - 2014-05-30 09:43 - 13522944 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2014-06-11 13:24 - 2014-05-30 09:40 - 11725312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2014-06-11 13:24 - 2014-05-30 09:30 - 01398272 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2014-06-11 13:24 - 2014-05-30 09:21 - 01790976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2014-06-11 13:24 - 2014-05-30 09:15 - 01143296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2014-06-11 13:24 - 2014-05-30 09:13 - 00846336 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2014-06-11 13:24 - 2014-05-30 09:13 - 00704512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2014-06-11 13:24 - 2014-02-06 13:30 - 00004096 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollectorres.dll
2014-06-11 13:24 - 2014-02-06 13:07 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll
2014-06-11 13:24 - 2014-02-06 13:06 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwproxystub.dll
2014-06-11 13:24 - 2014-02-06 12:56 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll
2014-06-11 13:24 - 2014-02-06 12:49 - 00139264 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieUnatt.exe
2014-06-11 13:24 - 2014-02-06 12:48 - 00111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollector.exe
2014-06-11 13:24 - 2014-02-06 12:17 - 00195584 _____ (Microsoft Corporation) C:\WINDOWS\system32\msrating.dll
2014-06-11 13:24 - 2014-02-06 12:00 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieetwproxystub.dll
2014-06-11 13:24 - 2014-02-06 11:52 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll
2014-06-11 13:24 - 2014-02-06 11:52 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iernonce.dll
2014-06-11 13:24 - 2014-02-06 11:47 - 00112128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieUnatt.exe
2014-06-11 13:24 - 2014-02-06 11:25 - 00164864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrating.dll
2014-06-11 13:22 - 2014-05-10 05:46 - 02151424 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3.dll
2014-06-11 13:22 - 2014-05-10 05:22 - 01312256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3.dll
2014-06-11 13:22 - 2014-05-09 01:06 - 00295424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ks.sys
2014-06-11 13:22 - 2014-05-03 09:14 - 00079872 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSReset.exe
2014-06-11 13:22 - 2014-05-03 06:21 - 00249344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2014-06-11 13:22 - 2014-05-03 06:07 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2014-06-11 13:22 - 2014-05-03 05:41 - 00921088 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll
2014-06-11 13:22 - 2014-05-03 05:38 - 00754688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll
2014-06-11 13:22 - 2014-04-30 13:16 - 01336648 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll
2014-06-11 13:22 - 2014-04-30 05:51 - 01064448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll
2014-06-11 13:22 - 2014-04-03 09:59 - 02518872 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2014-06-11 13:22 - 2014-04-03 09:59 - 00428888 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS
2014-06-11 13:21 - 2014-05-19 08:31 - 00057856 _____ (Microsoft Corporation) C:\WINDOWS\system32\drvcfg.exe
2014-06-11 13:21 - 2014-05-19 08:21 - 00110592 _____ (Microsoft Corporation) C:\WINDOWS\system32\drvinst.exe
2014-06-11 13:21 - 2014-05-19 07:23 - 00098816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\drvinst.exe
2014-06-11 13:21 - 2014-05-05 06:02 - 03360256 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll
2014-06-11 13:21 - 2014-05-01 15:31 - 03048904 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcMon.exe
2014-06-11 13:21 - 2014-05-01 15:31 - 00055328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wpcfltr.sys
2014-06-11 13:21 - 2014-05-01 09:14 - 03118080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Wpc.dll
2014-06-11 13:21 - 2014-05-01 09:05 - 02861056 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebSync.dll
2014-06-11 13:21 - 2014-05-01 08:51 - 02344448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Wpc.dll
2014-06-11 13:21 - 2014-05-01 07:24 - 02834944 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpccpl.dll
2014-06-11 13:21 - 2014-04-30 06:43 - 01975296 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWrite.dll
2014-06-11 13:21 - 2014-04-30 06:26 - 01345536 _____ (Microsoft Corporation) C:\WINDOWS\system32\FntCache.dll
2014-06-11 13:21 - 2014-04-30 05:47 - 01509888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWrite.dll
2014-05-31 19:53 - 2014-05-31 19:53 - 00015991 _____ () C:\Users\Anne\Downloads\140507_stern_MarkenfeldanalyseAutomobil_Codeplan.xlsx
2014-05-29 20:15 - 2014-05-29 20:15 - 00000549 _____ () C:\Users\Anne\Downloads\hr3_1.asx
2014-05-27 10:41 - 2014-06-13 13:39 - 00000072 _____ () C:\Users\Public\LMDebug.log
2014-05-27 10:40 - 2014-06-14 16:49 - 00003926 _____ () C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{46AD1D8B-18FD-46DB-888A-8D28933A7DDF}
2014-05-27 10:40 - 2014-05-27 10:40 - 00000000 __SHD () C:\Users\Anne\AppData\Local\EmieUserList
2014-05-27 10:40 - 2014-05-27 10:40 - 00000000 __SHD () C:\Users\Anne\AppData\Local\EmieSiteList
2014-05-27 10:39 - 2014-05-27 10:39 - 00000000 ____D () C:\ProgramData\Samsung
2014-05-23 12:54 - 2014-06-13 13:10 - 00000000 ____D () C:\Users\Anne\Documents\Job
2014-05-23 12:54 - 2014-05-23 12:54 - 00081512 _____ () C:\Users\Anne\AppData\Local\GDIPFONTCACHEV1.DAT
2014-05-23 12:53 - 2014-06-13 13:14 - 00000000 ____D () C:\Users\Anne\Documents\Uni
2014-05-23 12:53 - 2014-05-23 12:53 - 00000000 ____D () C:\Users\Anne\Documents\Schule
2014-05-23 12:53 - 2014-05-23 12:53 - 00000000 ____D () C:\Users\Anne\Documents\Duo
2014-05-23 11:47 - 2014-05-26 16:02 - 00000000 ___DC () C:\WINDOWS\Panther
2014-05-23 11:46 - 2014-05-23 11:46 - 00308224 _____ (Microsoft Corporation) C:\WINDOWS\system32\wusa.exe
2014-05-23 11:46 - 2014-05-23 11:46 - 00305152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wusa.exe
2014-05-23 11:45 - 2014-05-23 11:45 - 02900992 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 02641920 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 02479616 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmSvc.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 02373784 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2014-05-23 11:45 - 2014-05-23 11:45 - 02331000 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 02317824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 02270208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 02141912 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 02133504 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 02088160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2014-05-23 11:45 - 2014-05-23 11:45 - 02030080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WsmSvc.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 02013016 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2014-05-23 11:45 - 2014-05-23 11:45 - 01843712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Display.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 01816576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Display.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 01779800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 01764864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 01679128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 01656832 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 01557848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2014-05-23 11:45 - 2014-05-23 11:45 - 01542768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 01351168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 01306624 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 01291200 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel32.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 01112536 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 01095488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 01063424 _____ (Microsoft Corporation) C:\WINDOWS\system32\IKEEXT.DLL
2014-05-23 11:45 - 2014-05-23 11:45 - 01036288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kernel32.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 01015808 _____ (Microsoft Corporation) C:\WINDOWS\system32\aclui.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00950784 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgent.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00939520 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00924160 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00887296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aclui.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00836096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00834560 _____ (Microsoft Corporation) C:\WINDOWS\system32\netlogon.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00827392 _____ (Microsoft Corporation) C:\WINDOWS\system32\BFE.DLL
2014-05-23 11:45 - 2014-05-23 11:45 - 00800256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReAgent.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00755712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00717312 _____ (Microsoft Corporation) C:\WINDOWS\system32\nshwfp.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00688640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netlogon.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00669696 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasapi32.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00655360 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsapi.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00621568 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAgent.exe
2014-05-23 11:45 - 2014-05-23 11:45 - 00605184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasapi32.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00567296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nshwfp.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00563200 _____ (Microsoft Corporation) C:\WINDOWS\system32\AdmTmpl.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00542208 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.Printing.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00518552 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00512000 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidprov.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00494592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dnsapi.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00488280 _____ (Microsoft Corporation) C:\WINDOWS\system32\netcfgx.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00467800 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS
2014-05-23 11:45 - 2014-05-23 11:45 - 00462336 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlangpui.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00444928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AdmTmpl.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00412672 _____ (Microsoft Corporation) C:\WINDOWS\system32\FWPUCLNT.DLL
2014-05-23 11:45 - 2014-05-23 11:45 - 00406912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00402432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Graphics.Printing.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00390488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netcfgx.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00387210 _____ () C:\WINDOWS\system32\ApnDatabase.xml
2014-05-23 11:45 - 2014-05-23 11:45 - 00386560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlangpui.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00379224 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2014-05-23 11:45 - 2014-05-23 11:45 - 00376152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys
2014-05-23 11:45 - 2014-05-23 11:45 - 00360512 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfreadwrite.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00356864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlidprov.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00356848 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcomp.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00355832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfreadwrite.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00325632 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationApi.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00324096 _____ (Microsoft Corporation) C:\WINDOWS\system32\SessEnv.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00299008 _____ (Microsoft Corporation) C:\WINDOWS\system32\pdh.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00298496 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSDMon.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00291840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Sensors.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00283648 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb10.sys
2014-05-23 11:45 - 2014-05-23 11:45 - 00280576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SessEnv.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00274944 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmWmiPl.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00271872 _____ (Microsoft Corporation) C:\WINDOWS\system32\spp.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00264192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FWPUCLNT.DLL
2014-05-23 11:45 - 2014-05-23 11:45 - 00262656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LocationApi.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00254976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pdh.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00254464 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsrslvr.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00252928 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00247296 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsApi.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00226304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Sensors.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00222720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\spp.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00222720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dcomp.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00220160 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00212992 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdd.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00201216 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReInfo.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00197632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00192000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Scanners.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00186368 _____ (Microsoft Corporation) C:\WINDOWS\system32\dafWfdProvider.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00172544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReInfo.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00171008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SensorsApi.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00160768 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxAllUserStore.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00157016 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wof.sys
2014-05-23 11:45 - 2014-05-23 11:45 - 00151040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Scanners.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxdav.sys
2014-05-23 11:45 - 2014-05-23 11:45 - 00139776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxAllUserStore.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00136024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wfplwfs.sys
2014-05-23 11:45 - 2014-05-23 11:45 - 00134144 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dfsc.sys
2014-05-23 11:45 - 2014-05-23 11:45 - 00115200 _____ (Microsoft Corporation) C:\WINDOWS\system32\umpnpmgr.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00115200 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevPropMgr.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00113648 _____ (Microsoft Corporation) C:\WINDOWS\system32\userenv.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00111616 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidclass.sys
2014-05-23 11:45 - 2014-05-23 11:45 - 00102912 _____ (Microsoft Corporation) C:\WINDOWS\system32\davclnt.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00094016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\userenv.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00086016 _____ (Microsoft Corporation) C:\WINDOWS\system32\RMapi.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\davclnt.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\sxproxy.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00079360 _____ (Microsoft Corporation) C:\WINDOWS\system32\w32tm.exe
2014-05-23 11:45 - 2014-05-23 11:45 - 00079360 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\IPMIDrv.sys
2014-05-23 11:45 - 2014-05-23 11:45 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\w32tm.exe
2014-05-23 11:45 - 2014-05-23 11:45 - 00069120 _____ (Microsoft Corporation) C:\WINDOWS\system32\l2gpstore.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\l2gpstore.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpipreg.sys
2014-05-23 11:45 - 2014-05-23 11:45 - 00040448 _____ (Microsoft Corporation) C:\WINDOWS\system32\SetNetworkLocation.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sxproxy.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00033280 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidusb.sys
2014-05-23 11:45 - 2014-05-23 11:45 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredentialMigrationHandler.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredentialMigrationHandler.dll
2014-05-23 11:44 - 2014-05-23 11:44 - 03464192 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2014-05-23 11:44 - 2014-05-23 11:44 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2014-05-23 11:44 - 2014-05-23 11:44 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2014-05-23 11:44 - 2014-05-23 11:44 - 01705472 _____ (Microsoft Corporation) C:\WINDOWS\system32\wucltux.dll
2014-05-23 11:44 - 2014-05-23 11:44 - 01054208 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.appcore.dll
2014-05-23 11:44 - 2014-05-23 11:44 - 00828928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.appcore.dll
2014-05-23 11:44 - 2014-05-23 11:44 - 00827392 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2014-05-23 11:44 - 2014-05-23 11:44 - 00666624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2014-05-23 11:44 - 2014-05-23 11:44 - 00555736 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.appcore.dll
2014-05-23 11:44 - 2014-05-23 11:44 - 00419928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.appcore.dll
2014-05-23 11:44 - 2014-05-23 11:44 - 00381440 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUSettingsProvider.dll
2014-05-23 11:44 - 2014-05-23 11:44 - 00201728 _____ (Microsoft Corporation) C:\WINDOWS\system32\ubpm.dll
2014-05-23 11:44 - 2014-05-23 11:44 - 00190976 _____ (Microsoft Corporation) C:\WINDOWS\system32\storewuauth.dll
2014-05-23 11:44 - 2014-05-23 11:44 - 00137728 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuwebv.dll
2014-05-23 11:44 - 2014-05-23 11:44 - 00123904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuwebv.dll
2014-05-23 11:44 - 2014-05-23 11:44 - 00093696 _____ (Microsoft Corporation) C:\WINDOWS\system32\wudriver.dll
2014-05-23 11:44 - 2014-05-23 11:44 - 00080896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wudriver.dll
2014-05-23 11:44 - 2014-05-23 11:44 - 00056320 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups.dll
2014-05-23 11:44 - 2014-05-23 11:44 - 00054776 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2014-05-23 11:44 - 2014-05-23 11:44 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapp.exe
2014-05-23 11:44 - 2014-05-23 11:44 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapp.exe
2014-05-23 11:44 - 2014-05-23 11:44 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wups.dll
2014-05-23 11:44 - 2014-05-23 11:44 - 00000000 ___RD () C:\WINDOWS\BrowserChoice
2014-05-23 11:43 - 2014-05-23 11:43 - 21268952 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 18755672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 16872448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 13287936 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 12711424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 11792384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 08652800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 07425368 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2014-05-23 11:43 - 2014-05-23 11:43 - 07173120 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 06645248 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 05833216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Search.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 05774848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 05104640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 04269056 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncEngine.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 04190720 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2014-05-23 11:43 - 2014-05-23 11:43 - 02688000 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 02144984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 02140888 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 02124840 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d9.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 02100736 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlowUI.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 01797896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d9.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 01584128 _____ (Microsoft Corporation) C:\WINDOWS\system32\workfolderssvc.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 01527296 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 01466856 _____ (Microsoft Corporation) C:\WINDOWS\system32\propsys.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 01436160 _____ (Microsoft Corporation) C:\WINDOWS\system32\VSSVC.exe
2014-05-23 11:43 - 2014-05-23 11:43 - 01411584 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 01403856 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 01379064 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpmde.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 01308160 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpsvc.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 01287168 _____ (Microsoft Corporation) C:\WINDOWS\system32\mispace.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 01230336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 01222656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Streaming.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 01209616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmde.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 01200288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\propsys.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 01200128 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthport.sys
2014-05-23 11:43 - 2014-05-23 11:43 - 01126912 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFolder.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 01057280 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdvidcrl.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 01029120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mispace.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 01025024 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00982016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Streaming.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00955904 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00918528 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00888320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00881616 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00872448 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDrive.exe
2014-05-23 11:43 - 2014-05-23 11:43 - 00855552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdvidcrl.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00836608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchFolder.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00834048 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00805376 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00765408 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00761856 _____ (Microsoft Corporation) C:\WINDOWS\system32\WorkfoldersControl.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00731648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\adtschema.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00731648 _____ (Microsoft Corporation) C:\WINDOWS\system32\adtschema.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00721408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveTelemetry.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00718336 _____ (Microsoft Corporation) C:\WINDOWS\system32\swprv.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00707048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00677376 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys
2014-05-23 11:43 - 2014-05-23 11:43 - 00669856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00667648 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpprefcl.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00629760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmCoreR.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00609448 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00590336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gpprefcl.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00589656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fvevol.sys
2014-05-23 11:43 - 2014-05-23 11:43 - 00565536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2014-05-23 11:43 - 2014-05-23 11:43 - 00563200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\afd.sys
2014-05-23 11:43 - 2014-05-23 11:43 - 00518544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00491744 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00491520 _____ (Microsoft Corporation) C:\WINDOWS\system32\GeofenceMonitorService.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00486912 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv
2014-05-23 11:43 - 2014-05-23 11:43 - 00467968 _____ (Microsoft Corporation) C:\WINDOWS\system32\srcore.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00467496 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00463256 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00462336 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsGdiConverter.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00449536 _____ (Microsoft Corporation) C:\WINDOWS\system32\defragsvc.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00443904 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansec.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00443904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\nwifi.sys
2014-05-23 11:43 - 2014-05-23 11:43 - 00426496 _____ (Microsoft Corporation) C:\WINDOWS\system32\clusapi.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00407016 _____ (Microsoft Corporation) C:\WINDOWS\system32\services.exe
2014-05-23 11:43 - 2014-05-23 11:43 - 00406504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00402432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
2014-05-23 11:43 - 2014-05-23 11:43 - 00387896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00384856 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spaceport.sys
2014-05-23 11:43 - 2014-05-23 11:43 - 00372568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storport.sys
2014-05-23 11:43 - 2014-05-23 11:43 - 00370176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv
2014-05-23 11:43 - 2014-05-23 11:43 - 00370176 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanmsm.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00364640 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00360792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fltMgr.sys
2014-05-23 11:43 - 2014-05-23 11:43 - 00357376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GeofenceMonitorService.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00337408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsGdiConverter.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00337240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Classpnp.sys
2014-05-23 11:43 - 2014-05-23 11:43 - 00335872 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDEServer.exe
2014-05-23 11:43 - 2014-05-23 11:43 - 00326024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00324888 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFCaptureEngine.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00323072 _____ (Microsoft Corporation) C:\WINDOWS\system32\srvsvc.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00313344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\clusapi.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00310616 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\volsnap.sys
2014-05-23 11:43 - 2014-05-23 11:43 - 00307304 _____ (Microsoft Corporation) C:\WINDOWS\system32\wintrust.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00305768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00300544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanmsm.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00296960 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanapi.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00285144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFCaptureEngine.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00281600 _____ (Microsoft Corporation) C:\WINDOWS\system32\resutils.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00275800 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msiscsi.sys
2014-05-23 11:43 - 2014-05-23 11:43 - 00271872 _____ (Microsoft Corporation) C:\WINDOWS\system32\rstrui.exe
2014-05-23 11:43 - 2014-05-23 11:43 - 00263424 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlows.exe
2014-05-23 11:43 - 2014-05-23 11:43 - 00257880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdFilter.sys
2014-05-23 11:43 - 2014-05-23 11:43 - 00250368 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpencom.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00246272 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srvnet.sys
2014-05-23 11:43 - 2014-05-23 11:43 - 00244880 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2014-05-23 11:43 - 2014-05-23 11:43 - 00233912 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00230808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wintrust.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanapi.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00219136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\resutils.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00219136 _____ (Microsoft Corporation) C:\WINDOWS\system32\tscfgwmi.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00209920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpencom.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00206848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys
2014-05-23 11:43 - 2014-05-23 11:43 - 00201920 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVideoDSP.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00201216 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00191488 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpchttp.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00186880 _____ (Microsoft Corporation) C:\WINDOWS\system32\WorkFoldersShell.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00180056 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2014-05-23 11:43 - 2014-05-23 11:43 - 00178184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVideoDSP.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00144384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpchttp.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00143872 _____ (Microsoft Corporation) C:\WINDOWS\system32\BootMenuUX.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00135168 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscsvc.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00130144 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpapi.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00125496 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmapi.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00123224 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdNisDrv.sys
2014-05-23 11:43 - 2014-05-23 11:43 - 00111528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gpapi.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00098584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmapi.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00077312 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hdaudbus.sys
2014-05-23 11:43 - 2014-05-23 11:43 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\system32\srclient.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsgqec.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\srclient.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00055296 _____ (Microsoft Corporation) C:\WINDOWS\system32\energyprov.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tsgqec.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00047616 _____ (Microsoft Corporation) C:\WINDOWS\system32\tlscsp.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00046592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tlscsp.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Shell.Search.UriHandler.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00035856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdBoot.sys
2014-05-23 11:43 - 2014-05-23 11:43 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Shell.Search.UriHandler.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00032600 _____ (Microsoft Corporation) C:\WINDOWS\system32\ploptin.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00028408 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfpmp.exe
2014-05-23 11:43 - 2014-05-23 11:43 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d8thk.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanhlp.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanhlp.dll
2014-05-23 11:41 - 2014-05-23 11:41 - 00262144 _____ () C:\WINDOWS\system32\config\userdiff
2014-05-23 11:41 - 2014-05-23 11:41 - 00000000 ____D () C:\WINDOWS\PCHEALTH
2014-05-23 11:40 - 2014-04-09 00:46 - 00086688 _____ (Microsoft Corporation) C:\WINDOWS\system32\mrt_map.dll
2014-05-23 11:40 - 2014-04-09 00:46 - 00028320 _____ (Microsoft Corporation) C:\WINDOWS\system32\mrt100.dll
2014-05-23 11:40 - 2014-04-08 20:54 - 00080032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mrt_map.dll
2014-05-23 11:40 - 2014-04-08 20:54 - 00026784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mrt100.dll
2014-05-23 11:29 - 2014-06-14 20:20 - 00000000 __RDO () C:\Users\Anne\OneDrive
2014-05-23 11:27 - 2014-05-23 11:28 - 00000000 ____D () C:\Users\Anne\AppData\Local\PackageStaging
2014-05-23 11:27 - 2014-05-23 11:27 - 00001454 _____ () C:\Users\Anne\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-05-23 11:26 - 2014-05-23 11:26 - 00000020 ___SH () C:\Users\Anne\ntuser.ini
2014-05-23 11:05 - 2014-05-23 11:05 - 00000000 _SHDL () C:\Users\Default\Vorlagen
2014-05-23 11:05 - 2014-05-23 11:05 - 00000000 _SHDL () C:\Users\Default\Startmenü
2014-05-23 11:05 - 2014-05-23 11:05 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung
2014-05-23 11:05 - 2014-05-23 11:05 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen
2014-05-23 11:05 - 2014-05-23 11:05 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien
2014-05-23 11:05 - 2014-05-23 11:05 - 00000000 _SHDL () C:\Users\Default\Druckumgebung
2014-05-23 11:05 - 2014-05-23 11:05 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik
2014-05-23 11:05 - 2014-05-23 11:05 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder
2014-05-23 11:05 - 2014-05-23 11:05 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-05-23 11:05 - 2014-05-23 11:05 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf
2014-05-23 11:05 - 2014-05-23 11:05 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten
2014-05-23 11:05 - 2014-05-23 11:05 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten
2014-05-23 11:05 - 2014-05-23 11:05 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik
2014-05-23 11:05 - 2014-05-23 11:05 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder
2014-05-23 11:05 - 2014-05-23 11:05 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-05-23 11:05 - 2014-05-23 11:05 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf
2014-05-23 11:05 - 2014-05-23 11:05 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten
2014-05-23 11:04 - 2014-06-14 20:20 - 01681699 _____ () C:\WINDOWS\WindowsUpdate.log
2014-05-23 11:03 - 2014-05-23 11:03 - 00022960 _____ () C:\WINDOWS\system32\emptyregdb.dat
2014-05-23 10:58 - 2014-05-23 10:58 - 00001547 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2014-05-23 10:58 - 2014-05-23 10:58 - 00000000 ____D () C:\Users\Default\AppData\Local\Microsoft Help
2014-05-23 10:58 - 2014-05-23 10:58 - 00000000 ____D () C:\Users\Default User\AppData\Local\Microsoft Help
2014-05-23 10:56 - 2014-05-23 10:56 - 00000000 ____D () C:\WINDOWS\system32\config\bbimigrate
2014-05-23 10:55 - 2014-06-14 20:30 - 00000000 ____D () C:\Users\Anne\AppData\Local\Temp
2014-05-23 10:55 - 2014-06-14 17:57 - 00000000 ____D () C:\Users\Anne
2014-05-23 10:55 - 2014-05-23 11:04 - 00024768 _____ () C:\WINDOWS\diagwrn.xml
2014-05-23 10:55 - 2014-05-23 11:04 - 00024768 _____ () C:\WINDOWS\diagerr.xml
2014-05-23 10:55 - 2014-05-23 10:55 - 00000000 _SHDL () C:\Users\Anne\Vorlagen
2014-05-23 10:55 - 2014-05-23 10:55 - 00000000 _SHDL () C:\Users\Anne\Startmenü
2014-05-23 10:55 - 2014-05-23 10:55 - 00000000 _SHDL () C:\Users\Anne\Netzwerkumgebung
2014-05-23 10:55 - 2014-05-23 10:55 - 00000000 _SHDL () C:\Users\Anne\Lokale Einstellungen
2014-05-23 10:55 - 2014-05-23 10:55 - 00000000 _SHDL () C:\Users\Anne\Eigene Dateien
2014-05-23 10:55 - 2014-05-23 10:55 - 00000000 _SHDL () C:\Users\Anne\Druckumgebung
2014-05-23 10:55 - 2014-05-23 10:55 - 00000000 _SHDL () C:\Users\Anne\Documents\Eigene Musik
2014-05-23 10:55 - 2014-05-23 10:55 - 00000000 _SHDL () C:\Users\Anne\Documents\Eigene Bilder
2014-05-23 10:55 - 2014-05-23 10:55 - 00000000 _SHDL () C:\Users\Anne\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-05-23 10:55 - 2014-05-23 10:55 - 00000000 _SHDL () C:\Users\Anne\AppData\Local\Verlauf
2014-05-23 10:55 - 2014-05-23 10:55 - 00000000 _SHDL () C:\Users\Anne\AppData\Local\Anwendungsdaten
2014-05-23 10:55 - 2014-05-23 10:55 - 00000000 _SHDL () C:\Users\Anne\Anwendungsdaten
2014-05-23 10:55 - 2014-05-23 10:55 - 00000000 ___RD () C:\Users\Anne\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-05-23 10:55 - 2014-05-23 10:55 - 00000000 ___RD () C:\Users\Anne\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-05-23 10:55 - 2014-03-18 12:12 - 00000369 _____ () C:\Users\Anne\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk
2014-05-23 10:55 - 2014-03-18 12:12 - 00000369 _____ () C:\Users\Anne\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk
2014-05-23 10:55 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Anne\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-05-23 10:55 - 2013-08-22 17:36 - 00000000 ____D () C:\Users\Anne\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-05-23 10:50 - 2014-05-23 10:56 - 00000000 ____D () C:\ProgramData\Conexant
2014-05-23 10:50 - 2014-05-23 10:56 - 00000000 ____D () C:\Program Files\CONEXANT
2014-05-23 10:50 - 2014-05-23 10:50 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_Kernel_iBtFltCoex_01009.Wdf
2014-05-23 10:50 - 2014-01-25 02:23 - 00064000 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.DLL
2014-05-23 10:50 - 2014-01-25 02:23 - 00060416 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.DLL
2014-05-23 10:49 - 2014-05-23 10:49 - 00000000 ____D () C:\Program Files\Elantech
2014-05-23 10:26 - 2014-05-23 11:04 - 00006626 _____ () C:\WINDOWS\comsetup.log
2014-05-23 02:29 - 2014-05-23 10:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office Live Add-in
2014-05-23 01:23 - 2014-05-23 01:23 - 00255042 _____ () C:\ProgramData\1400800923.bdinstall.bin
2014-05-23 01:20 - 2014-05-23 01:20 - 00103312 _____ () C:\ProgramData\1400800806.bdinstall.bin
2014-05-22 22:40 - 2014-06-11 13:55 - 00000000 ____D () C:\WINDOWS\system32\MRT
2014-05-22 22:40 - 2014-06-11 13:54 - 95414520 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2014-05-22 21:52 - 2014-05-22 21:53 - 16501035 _____ () C:\Users\Anne\Downloads\NYCityscapesJohnnyWLam.themepack
2014-05-22 21:16 - 2013-05-04 06:51 - 00014848 ____N (Microsoft) C:\WINDOWS\system32\rars.rs
2014-05-22 21:16 - 2013-05-04 06:10 - 00014848 ____N (Microsoft) C:\WINDOWS\SysWOW64\rars.rs
2014-05-22 21:06 - 2014-05-22 21:27 - 00002392 _____ () C:\Users\Anne\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2014-05-22 21:06 - 2014-05-22 21:06 - 00000385 _____ () C:\Users\Anne\AppData\Roaminguser_gensett.xml
2014-05-22 18:07 - 2014-05-22 18:07 - 00520507 _____ () C:\ProgramData\1400774373.bdinstall.bin
2014-05-22 18:06 - 2014-05-22 18:06 - 00000385 _____ () C:\WINDOWS\system32\user_gensett.xml
2014-05-22 18:05 - 2014-05-22 18:05 - 00000251 _____ () C:\WINDOWS\system32\netcfg-1859500.txt
2014-05-22 18:05 - 2014-05-22 18:05 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_Kernel_avchv_01009.Wdf
2014-05-22 18:05 - 2014-05-22 18:05 - 00000000 ____D () C:\ProgramData\BDLogging
2014-05-22 18:05 - 2013-11-04 15:47 - 00074512 _____ (BitDefender SRL) C:\WINDOWS\SysWOW64\bdsandboxuiskin32.dll
2014-05-22 18:05 - 2007-04-11 10:11 - 00511328 _____ (Microsoft Corporation) C:\WINDOWS\capicom.dll
2014-05-22 17:59 - 2014-05-23 01:23 - 00000000 ____D () C:\Program Files\Bitdefender
2014-05-22 17:59 - 2014-05-23 01:22 - 00000000 ____D () C:\Program Files\Common Files\Bitdefender
2014-05-22 17:59 - 2014-05-22 21:36 - 00074512 _____ (BitDefender SRL) C:\WINDOWS\system32\bdsandboxuiskin32.dll
2014-05-22 17:59 - 2014-05-22 17:59 - 00000000 ____D () C:\Users\Anne\AppData\Roaming\QuickScan
2014-05-22 17:59 - 2013-11-04 15:47 - 00084848 _____ (BitDefender SRL) C:\WINDOWS\system32\BDSandBoxUISkin.dll
2014-05-22 17:59 - 2013-11-04 15:46 - 00034384 _____ (BitDefender SRL) C:\WINDOWS\system32\BDSandBoxUH.dll
2014-05-22 17:58 - 2014-05-22 17:58 - 07307552 _____ () C:\Users\Anne\Downloads\bitdefender_isecurity.exe
2014-05-22 17:57 - 2014-05-23 10:57 - 00000000 ____D () C:\WINDOWS\SysWOW64\sda
2014-05-22 17:57 - 2014-01-07 14:24 - 00359128 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\Drivers\RtsPStor.sys
2014-05-22 17:57 - 2014-01-07 14:10 - 00313048 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\Drivers\RtsBaStor.sys
2014-05-22 17:57 - 2014-01-03 16:34 - 00465624 _____ (Realsil Semiconductor Corporation) C:\WINDOWS\system32\Drivers\RtsPer.sys
2014-05-22 17:57 - 2014-01-03 16:08 - 00291544 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\Drivers\RtsP2Stor.sys
2014-05-22 17:57 - 2014-01-03 13:33 - 00271064 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\Drivers\RtsUStor.sys
2014-05-22 17:57 - 2014-01-03 11:14 - 00331992 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\Drivers\RtsUVStor.sys
2014-05-22 17:57 - 2013-04-25 18:12 - 09889352 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\SysWOW64\RsCRIcon.dll
2014-05-22 17:51 - 2014-05-22 17:57 - 12171007 _____ () C:\Users\Anne\Downloads\RtsXStor_6.3.273.37.zip
2014-05-22 17:51 - 2014-01-19 09:33 - 00270496 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2014-05-22 17:48 - 2014-05-23 10:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
2014-05-22 17:47 - 2014-05-23 02:03 - 00000000 ____D () C:\Program Files (x86)\Microsoft Works
2014-05-22 17:44 - 2014-05-22 17:44 - 00000000 ____D () C:\Program Files\Microsoft Office
2014-05-22 17:43 - 2014-06-11 13:55 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-05-22 17:43 - 2014-05-23 11:43 - 00000000 ____D () C:\Program Files (x86)\Microsoft Office
2014-05-22 17:43 - 2014-05-22 17:43 - 00000000 ____D () C:\Users\Anne\AppData\Local\Microsoft Help
2014-05-22 17:42 - 2014-05-22 17:42 - 00000000 __RHD () C:\MSOCache
2014-05-22 17:41 - 2014-05-22 17:41 - 00000117 _____ () C:\WINDOWS\system32\netcfg-423203.txt
2014-05-22 17:41 - 2014-05-22 17:41 - 00000117 _____ () C:\WINDOWS\system32\netcfg-423171.txt

==================== One Month Modified Files and Folders =======

2014-06-14 20:30 - 2014-06-14 20:30 - 00009437 _____ () C:\Users\Anne\Desktop\FRST.txt
2014-06-14 20:30 - 2014-06-14 17:14 - 00000000 ____D () C:\FRST
2014-06-14 20:30 - 2014-05-23 10:55 - 00000000 ____D () C:\Users\Anne\AppData\Local\Temp
2014-06-14 20:28 - 2014-06-14 20:28 - 00000000 ____D () C:\Users\Anne\Desktop\bereits gepostet
2014-06-14 20:24 - 2014-06-14 20:24 - 00000617 _____ () C:\Users\Anne\Desktop\JRT.txt
2014-06-14 20:22 - 2012-07-26 05:05 - 00002195 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-06-14 20:21 - 2014-06-14 20:21 - 00001006 _____ () C:\Users\Anne\Desktop\AdwCleaner[S1].txt
2014-06-14 20:21 - 2014-06-14 20:21 - 00000000 ____D () C:\WINDOWS\ERUNT
2014-06-14 20:21 - 2012-07-26 05:04 - 00001120 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2014-06-14 20:20 - 2014-05-23 11:29 - 00000000 __RDO () C:\Users\Anne\OneDrive
2014-06-14 20:20 - 2014-05-23 11:04 - 01681699 _____ () C:\WINDOWS\WindowsUpdate.log
2014-06-14 20:20 - 2014-03-18 03:51 - 00013472 _____ () C:\WINDOWS\PFRO.log
2014-06-14 20:20 - 2013-08-22 16:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2014-06-14 20:19 - 2014-06-12 21:20 - 00000000 ____D () C:\AdwCleaner
2014-06-14 20:19 - 2012-07-26 05:12 - 00549212 _____ () C:\Users\Public\CAFADEBUG.log
2014-06-14 20:15 - 2012-07-26 04:07 - 00003600 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2489216334-2735940672-2852440863-1001
2014-06-14 20:13 - 2014-06-14 20:17 - 01333465 _____ () C:\Users\Anne\Desktop\adwcleaner_3.212.exe
2014-06-14 20:13 - 2014-06-14 20:17 - 01016261 _____ (Thisisu) C:\Users\Anne\Desktop\JRT.exe
2014-06-14 20:10 - 2012-07-26 05:04 - 00001124 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2014-06-14 20:05 - 2014-06-12 20:58 - 00122584 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2014-06-14 19:00 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\sru
2014-06-14 17:57 - 2014-05-23 10:55 - 00000000 ____D () C:\Users\Anne
2014-06-14 17:44 - 2014-06-14 17:44 - 468138642 _____ () C:\WINDOWS\MEMORY.DMP
2014-06-14 17:44 - 2014-06-14 17:44 - 00283480 _____ () C:\WINDOWS\Minidump\061414-15500-01.dmp
2014-06-14 17:44 - 2014-06-14 17:44 - 00000000 ____D () C:\WINDOWS\Minidump
2014-06-14 17:10 - 2014-06-14 17:10 - 00000000 _____ () C:\Users\Anne\defogger_reenable
2014-06-14 17:09 - 2014-03-18 12:04 - 01689572 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2014-06-14 17:09 - 2014-03-18 11:25 - 00728968 _____ () C:\WINDOWS\system32\perfh007.dat
2014-06-14 17:09 - 2014-03-18 11:25 - 00152122 _____ () C:\WINDOWS\system32\perfc007.dat
2014-06-14 17:05 - 2014-06-14 17:08 - 02081792 _____ (Farbar) C:\Users\Anne\Desktop\FRST64.exe
2014-06-14 17:05 - 2014-06-14 17:08 - 00380416 _____ () C:\Users\Anne\Desktop\Gmer-19357.exe
2014-06-14 17:05 - 2014-06-14 17:08 - 00050477 _____ () C:\Users\Anne\Desktop\Defogger.exe
2014-06-14 16:49 - 2014-05-27 10:40 - 00003926 _____ () C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{46AD1D8B-18FD-46DB-888A-8D28933A7DDF}
2014-06-14 16:21 - 2013-08-22 15:25 - 00524288 ___SH () C:\WINDOWS\system32\config\BBI
2014-06-13 13:39 - 2014-05-27 10:41 - 00000072 _____ () C:\Users\Public\LMDebug.log
2014-06-13 13:14 - 2014-05-23 12:53 - 00000000 ____D () C:\Users\Anne\Documents\Uni
2014-06-13 13:10 - 2014-05-23 12:54 - 00000000 ____D () C:\Users\Anne\Documents\Job
2014-06-13 13:03 - 2013-08-22 16:46 - 00295396 _____ () C:\WINDOWS\setupact.log
2014-06-12 21:20 - 2014-06-12 21:19 - 01016261 _____ (Thisisu) C:\Users\Anne\Downloads\JRT.exe
2014-06-12 21:17 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\MediaViewer
2014-06-12 21:16 - 2014-06-12 20:16 - 00000000 ____D () C:\temp
2014-06-12 20:57 - 2014-06-12 20:57 - 00001118 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-06-12 20:57 - 2014-06-12 20:57 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-06-12 20:57 - 2014-06-12 20:57 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-06-12 20:57 - 2014-06-12 20:57 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-06-12 20:50 - 2014-06-12 20:45 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Anne\Downloads\mbam-setup-2.0.2.1012.exe
2014-06-12 20:47 - 2014-06-12 20:46 - 00441592 _____ (Bleeping Computer, LLC) C:\Users\Anne\Downloads\sc-cleaner.exe
2014-06-12 20:47 - 2014-06-12 20:45 - 01333465 _____ () C:\Users\Anne\Downloads\adwcleaner_3.212.exe
2014-06-12 20:40 - 2014-06-12 20:37 - 00000444 __RSH () C:\ProgramData\ntuser.pol
2014-06-12 20:37 - 2013-08-22 17:36 - 00000000 ___HD () C:\WINDOWS\system32\GroupPolicy
2014-06-12 20:37 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\GroupPolicy
2014-06-12 20:15 - 2012-07-26 09:59 - 00000000 ____D () C:\WINDOWS\CbsTemp
2014-06-12 14:23 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\rescache
2014-06-11 20:11 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\WinStore
2014-06-11 20:10 - 2013-08-22 17:36 - 00000000 ___RD () C:\WINDOWS\ToastData
2014-06-11 15:50 - 2014-06-11 15:50 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_User_LocationProvider_01_11_00.Wdf
2014-06-11 13:55 - 2014-05-22 22:40 - 00000000 ____D () C:\WINDOWS\system32\MRT
2014-06-11 13:55 - 2014-05-22 17:43 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-06-11 13:54 - 2014-05-22 22:40 - 95414520 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2014-06-11 11:20 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\AppReadiness
2014-06-10 13:29 - 2013-08-22 15:25 - 00262144 ___SH () C:\WINDOWS\system32\config\ELAM
2014-06-10 13:21 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\NDF
2014-05-31 19:53 - 2014-05-31 19:53 - 00015991 _____ () C:\Users\Anne\Downloads\140507_stern_MarkenfeldanalyseAutomobil_Codeplan.xlsx
2014-05-31 07:13 - 2013-08-22 17:38 - 00703992 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2014-05-31 07:13 - 2013-08-22 17:38 - 00105464 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2014-05-30 12:21 - 2014-06-11 13:24 - 23414784 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2014-05-30 11:45 - 2014-06-11 13:24 - 02768384 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2014-05-30 11:28 - 2014-06-11 13:24 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll
2014-05-30 11:20 - 2014-06-11 13:24 - 00752640 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2014-05-30 11:18 - 2014-06-11 13:24 - 17271296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2014-05-30 11:08 - 2014-06-11 13:24 - 05782528 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2014-05-30 11:06 - 2014-06-11 13:24 - 00452096 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtmsft.dll
2014-05-30 10:46 - 2014-06-11 13:24 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2014-05-30 10:44 - 2014-06-11 13:24 - 00295424 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll
2014-05-30 10:43 - 2014-06-11 13:24 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesetup.dll
2014-05-30 10:38 - 2014-06-11 13:24 - 02179072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2014-05-30 10:35 - 2014-06-11 13:24 - 00608768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2014-05-30 10:29 - 2014-06-11 13:24 - 00631808 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2014-05-30 10:27 - 2014-06-11 13:24 - 00592896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll
2014-05-30 10:23 - 2014-06-11 13:24 - 02040832 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2014-05-30 10:16 - 2014-06-11 13:24 - 00368128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtmsft.dll
2014-05-30 10:04 - 2014-06-11 13:24 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll
2014-05-30 10:02 - 2014-06-11 13:24 - 00242688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll
2014-05-30 09:56 - 2014-06-11 13:24 - 04244992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2014-05-30 09:56 - 2014-06-11 13:24 - 02266112 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2014-05-30 09:54 - 2014-06-11 13:24 - 00526336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2014-05-30 09:49 - 2014-06-11 13:24 - 01964544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2014-05-30 09:43 - 2014-06-11 13:24 - 13522944 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2014-05-30 09:40 - 2014-06-11 13:24 - 11725312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2014-05-30 09:30 - 2014-06-11 13:24 - 01398272 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2014-05-30 09:21 - 2014-06-11 13:24 - 01790976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2014-05-30 09:15 - 2014-06-11 13:24 - 01143296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2014-05-30 09:13 - 2014-06-11 13:24 - 00846336 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2014-05-30 09:13 - 2014-06-11 13:24 - 00704512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2014-05-29 20:15 - 2014-05-29 20:15 - 00000549 _____ () C:\Users\Anne\Downloads\hr3_1.asx
2014-05-27 10:40 - 2014-05-27 10:40 - 00000000 __SHD () C:\Users\Anne\AppData\Local\EmieUserList
2014-05-27 10:40 - 2014-05-27 10:40 - 00000000 __SHD () C:\Users\Anne\AppData\Local\EmieSiteList
2014-05-27 10:39 - 2014-05-27 10:39 - 00000000 ____D () C:\ProgramData\Samsung
2014-05-26 16:03 - 2012-07-26 04:01 - 00000000 ____D () C:\Users\Anne\AppData\Local\Packages
2014-05-26 16:02 - 2014-05-23 11:47 - 00000000 ___DC () C:\WINDOWS\Panther
2014-05-23 12:54 - 2014-05-23 12:54 - 00081512 _____ () C:\Users\Anne\AppData\Local\GDIPFONTCACHEV1.DAT
2014-05-23 12:53 - 2014-05-23 12:53 - 00000000 ____D () C:\Users\Anne\Documents\Schule
2014-05-23 12:53 - 2014-05-23 12:53 - 00000000 ____D () C:\Users\Anne\Documents\Duo
2014-05-23 11:47 - 2013-08-22 17:36 - 00262144 _____ () C:\WINDOWS\system32\config\BCD-Template
2014-05-23 11:46 - 2014-05-23 11:46 - 00308224 _____ (Microsoft Corporation) C:\WINDOWS\system32\wusa.exe
2014-05-23 11:46 - 2014-05-23 11:46 - 00305152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wusa.exe
2014-05-23 11:46 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\setup
2014-05-23 11:46 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\PolicyDefinitions

PowerMax 14.06.2014 19:36
Frst der 2. teil


Code:
2014-05-23 11:45 - 2014-05-23 11:45 - 02900992 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 02641920 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 02479616 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmSvc.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 02373784 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2014-05-23 11:45 - 2014-05-23 11:45 - 02331000 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 02317824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 02270208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 02141912 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 02133504 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 02088160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2014-05-23 11:45 - 2014-05-23 11:45 - 02030080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WsmSvc.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 02013016 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2014-05-23 11:45 - 2014-05-23 11:45 - 01843712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Display.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 01816576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Display.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 01779800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 01764864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 01679128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 01656832 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 01557848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2014-05-23 11:45 - 2014-05-23 11:45 - 01542768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 01351168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 01306624 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 01291200 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel32.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 01112536 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 01095488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 01063424 _____ (Microsoft Corporation) C:\WINDOWS\system32\IKEEXT.DLL
2014-05-23 11:45 - 2014-05-23 11:45 - 01036288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kernel32.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 01015808 _____ (Microsoft Corporation) C:\WINDOWS\system32\aclui.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00950784 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgent.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00939520 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00924160 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00887296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aclui.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00836096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00834560 _____ (Microsoft Corporation) C:\WINDOWS\system32\netlogon.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00827392 _____ (Microsoft Corporation) C:\WINDOWS\system32\BFE.DLL
2014-05-23 11:45 - 2014-05-23 11:45 - 00800256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReAgent.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00755712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00717312 _____ (Microsoft Corporation) C:\WINDOWS\system32\nshwfp.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00688640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netlogon.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00669696 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasapi32.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00655360 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsapi.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00621568 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAgent.exe
2014-05-23 11:45 - 2014-05-23 11:45 - 00605184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasapi32.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00567296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nshwfp.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00563200 _____ (Microsoft Corporation) C:\WINDOWS\system32\AdmTmpl.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00542208 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.Printing.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00518552 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00512000 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidprov.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00494592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dnsapi.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00488280 _____ (Microsoft Corporation) C:\WINDOWS\system32\netcfgx.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00467800 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS
2014-05-23 11:45 - 2014-05-23 11:45 - 00462336 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlangpui.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00444928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AdmTmpl.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00412672 _____ (Microsoft Corporation) C:\WINDOWS\system32\FWPUCLNT.DLL
2014-05-23 11:45 - 2014-05-23 11:45 - 00406912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00402432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Graphics.Printing.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00390488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netcfgx.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00387210 _____ () C:\WINDOWS\system32\ApnDatabase.xml
2014-05-23 11:45 - 2014-05-23 11:45 - 00386560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlangpui.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00379224 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2014-05-23 11:45 - 2014-05-23 11:45 - 00376152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys
2014-05-23 11:45 - 2014-05-23 11:45 - 00360512 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfreadwrite.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00356864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlidprov.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00356848 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcomp.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00355832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfreadwrite.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00325632 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationApi.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00324096 _____ (Microsoft Corporation) C:\WINDOWS\system32\SessEnv.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00299008 _____ (Microsoft Corporation) C:\WINDOWS\system32\pdh.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00298496 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSDMon.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00291840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Sensors.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00283648 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb10.sys
2014-05-23 11:45 - 2014-05-23 11:45 - 00280576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SessEnv.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00274944 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmWmiPl.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00271872 _____ (Microsoft Corporation) C:\WINDOWS\system32\spp.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00264192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FWPUCLNT.DLL
2014-05-23 11:45 - 2014-05-23 11:45 - 00262656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LocationApi.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00254976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pdh.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00254464 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsrslvr.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00252928 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00247296 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsApi.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00226304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Sensors.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00222720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\spp.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00222720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dcomp.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00220160 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00212992 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdd.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00201216 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReInfo.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00197632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00192000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Scanners.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00186368 _____ (Microsoft Corporation) C:\WINDOWS\system32\dafWfdProvider.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00172544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReInfo.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00171008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SensorsApi.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00160768 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxAllUserStore.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00157016 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wof.sys
2014-05-23 11:45 - 2014-05-23 11:45 - 00151040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Scanners.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxdav.sys
2014-05-23 11:45 - 2014-05-23 11:45 - 00139776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxAllUserStore.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00136024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wfplwfs.sys
2014-05-23 11:45 - 2014-05-23 11:45 - 00134144 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dfsc.sys
2014-05-23 11:45 - 2014-05-23 11:45 - 00115200 _____ (Microsoft Corporation) C:\WINDOWS\system32\umpnpmgr.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00115200 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevPropMgr.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00113648 _____ (Microsoft Corporation) C:\WINDOWS\system32\userenv.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00111616 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidclass.sys
2014-05-23 11:45 - 2014-05-23 11:45 - 00102912 _____ (Microsoft Corporation) C:\WINDOWS\system32\davclnt.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00094016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\userenv.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00086016 _____ (Microsoft Corporation) C:\WINDOWS\system32\RMapi.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\davclnt.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\sxproxy.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00079360 _____ (Microsoft Corporation) C:\WINDOWS\system32\w32tm.exe
2014-05-23 11:45 - 2014-05-23 11:45 - 00079360 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\IPMIDrv.sys
2014-05-23 11:45 - 2014-05-23 11:45 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\w32tm.exe
2014-05-23 11:45 - 2014-05-23 11:45 - 00069120 _____ (Microsoft Corporation) C:\WINDOWS\system32\l2gpstore.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\l2gpstore.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpipreg.sys
2014-05-23 11:45 - 2014-05-23 11:45 - 00040448 _____ (Microsoft Corporation) C:\WINDOWS\system32\SetNetworkLocation.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sxproxy.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00033280 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidusb.sys
2014-05-23 11:45 - 2014-05-23 11:45 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredentialMigrationHandler.dll
2014-05-23 11:45 - 2014-05-23 11:45 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredentialMigrationHandler.dll
2014-05-23 11:44 - 2014-05-23 11:44 - 03464192 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2014-05-23 11:44 - 2014-05-23 11:44 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2014-05-23 11:44 - 2014-05-23 11:44 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2014-05-23 11:44 - 2014-05-23 11:44 - 01705472 _____ (Microsoft Corporation) C:\WINDOWS\system32\wucltux.dll
2014-05-23 11:44 - 2014-05-23 11:44 - 01054208 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.appcore.dll
2014-05-23 11:44 - 2014-05-23 11:44 - 00828928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.appcore.dll
2014-05-23 11:44 - 2014-05-23 11:44 - 00827392 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2014-05-23 11:44 - 2014-05-23 11:44 - 00666624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2014-05-23 11:44 - 2014-05-23 11:44 - 00555736 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.appcore.dll
2014-05-23 11:44 - 2014-05-23 11:44 - 00419928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.appcore.dll
2014-05-23 11:44 - 2014-05-23 11:44 - 00381440 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUSettingsProvider.dll
2014-05-23 11:44 - 2014-05-23 11:44 - 00201728 _____ (Microsoft Corporation) C:\WINDOWS\system32\ubpm.dll
2014-05-23 11:44 - 2014-05-23 11:44 - 00190976 _____ (Microsoft Corporation) C:\WINDOWS\system32\storewuauth.dll
2014-05-23 11:44 - 2014-05-23 11:44 - 00137728 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuwebv.dll
2014-05-23 11:44 - 2014-05-23 11:44 - 00123904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuwebv.dll
2014-05-23 11:44 - 2014-05-23 11:44 - 00093696 _____ (Microsoft Corporation) C:\WINDOWS\system32\wudriver.dll
2014-05-23 11:44 - 2014-05-23 11:44 - 00080896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wudriver.dll
2014-05-23 11:44 - 2014-05-23 11:44 - 00056320 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups.dll
2014-05-23 11:44 - 2014-05-23 11:44 - 00054776 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2014-05-23 11:44 - 2014-05-23 11:44 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapp.exe
2014-05-23 11:44 - 2014-05-23 11:44 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapp.exe
2014-05-23 11:44 - 2014-05-23 11:44 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wups.dll
2014-05-23 11:44 - 2014-05-23 11:44 - 00000000 ___RD () C:\WINDOWS\BrowserChoice
2014-05-23 11:44 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\SecureBootUpdates
2014-05-23 11:43 - 2014-05-23 11:43 - 21268952 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 18755672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 16872448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 13287936 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 12711424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 11792384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 08652800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 07425368 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2014-05-23 11:43 - 2014-05-23 11:43 - 07173120 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 06645248 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 05833216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Search.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 05774848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 05104640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 04269056 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncEngine.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 04190720 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2014-05-23 11:43 - 2014-05-23 11:43 - 02688000 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 02144984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 02140888 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 02124840 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d9.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 02100736 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlowUI.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 01797896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d9.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 01584128 _____ (Microsoft Corporation) C:\WINDOWS\system32\workfolderssvc.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 01527296 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 01466856 _____ (Microsoft Corporation) C:\WINDOWS\system32\propsys.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 01436160 _____ (Microsoft Corporation) C:\WINDOWS\system32\VSSVC.exe
2014-05-23 11:43 - 2014-05-23 11:43 - 01411584 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 01403856 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 01379064 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpmde.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 01308160 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpsvc.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 01287168 _____ (Microsoft Corporation) C:\WINDOWS\system32\mispace.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 01230336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 01222656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Streaming.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 01209616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmde.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 01200288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\propsys.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 01200128 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthport.sys
2014-05-23 11:43 - 2014-05-23 11:43 - 01126912 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFolder.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 01057280 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdvidcrl.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 01029120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mispace.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 01025024 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00982016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Streaming.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00955904 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00918528 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00888320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00881616 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00872448 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDrive.exe
2014-05-23 11:43 - 2014-05-23 11:43 - 00855552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdvidcrl.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00836608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchFolder.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00834048 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00805376 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00765408 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00761856 _____ (Microsoft Corporation) C:\WINDOWS\system32\WorkfoldersControl.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00731648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\adtschema.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00731648 _____ (Microsoft Corporation) C:\WINDOWS\system32\adtschema.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00721408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveTelemetry.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00718336 _____ (Microsoft Corporation) C:\WINDOWS\system32\swprv.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00707048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00677376 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys
2014-05-23 11:43 - 2014-05-23 11:43 - 00669856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00667648 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpprefcl.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00629760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmCoreR.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00609448 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00590336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gpprefcl.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00589656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fvevol.sys
2014-05-23 11:43 - 2014-05-23 11:43 - 00565536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2014-05-23 11:43 - 2014-05-23 11:43 - 00563200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\afd.sys
2014-05-23 11:43 - 2014-05-23 11:43 - 00518544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00491744 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00491520 _____ (Microsoft Corporation) C:\WINDOWS\system32\GeofenceMonitorService.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00486912 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv
2014-05-23 11:43 - 2014-05-23 11:43 - 00467968 _____ (Microsoft Corporation) C:\WINDOWS\system32\srcore.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00467496 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00463256 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00462336 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsGdiConverter.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00449536 _____ (Microsoft Corporation) C:\WINDOWS\system32\defragsvc.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00443904 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansec.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00443904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\nwifi.sys
2014-05-23 11:43 - 2014-05-23 11:43 - 00426496 _____ (Microsoft Corporation) C:\WINDOWS\system32\clusapi.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00407016 _____ (Microsoft Corporation) C:\WINDOWS\system32\services.exe
2014-05-23 11:43 - 2014-05-23 11:43 - 00406504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00402432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
2014-05-23 11:43 - 2014-05-23 11:43 - 00387896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00384856 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spaceport.sys
2014-05-23 11:43 - 2014-05-23 11:43 - 00372568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storport.sys
2014-05-23 11:43 - 2014-05-23 11:43 - 00370176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv
2014-05-23 11:43 - 2014-05-23 11:43 - 00370176 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanmsm.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00364640 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00360792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fltMgr.sys
2014-05-23 11:43 - 2014-05-23 11:43 - 00357376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GeofenceMonitorService.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00337408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsGdiConverter.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00337240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Classpnp.sys
2014-05-23 11:43 - 2014-05-23 11:43 - 00335872 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDEServer.exe
2014-05-23 11:43 - 2014-05-23 11:43 - 00326024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00324888 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFCaptureEngine.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00323072 _____ (Microsoft Corporation) C:\WINDOWS\system32\srvsvc.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00313344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\clusapi.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00310616 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\volsnap.sys
2014-05-23 11:43 - 2014-05-23 11:43 - 00307304 _____ (Microsoft Corporation) C:\WINDOWS\system32\wintrust.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00305768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00300544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanmsm.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00296960 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanapi.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00285144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFCaptureEngine.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00281600 _____ (Microsoft Corporation) C:\WINDOWS\system32\resutils.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00275800 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msiscsi.sys
2014-05-23 11:43 - 2014-05-23 11:43 - 00271872 _____ (Microsoft Corporation) C:\WINDOWS\system32\rstrui.exe
2014-05-23 11:43 - 2014-05-23 11:43 - 00263424 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlows.exe
2014-05-23 11:43 - 2014-05-23 11:43 - 00257880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdFilter.sys
2014-05-23 11:43 - 2014-05-23 11:43 - 00250368 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpencom.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00246272 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srvnet.sys
2014-05-23 11:43 - 2014-05-23 11:43 - 00244880 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2014-05-23 11:43 - 2014-05-23 11:43 - 00233912 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00230808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wintrust.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanapi.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00219136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\resutils.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00219136 _____ (Microsoft Corporation) C:\WINDOWS\system32\tscfgwmi.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00209920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpencom.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00206848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys
2014-05-23 11:43 - 2014-05-23 11:43 - 00201920 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVideoDSP.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00201216 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00191488 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpchttp.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00186880 _____ (Microsoft Corporation) C:\WINDOWS\system32\WorkFoldersShell.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00180056 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2014-05-23 11:43 - 2014-05-23 11:43 - 00178184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVideoDSP.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00144384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpchttp.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00143872 _____ (Microsoft Corporation) C:\WINDOWS\system32\BootMenuUX.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00135168 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscsvc.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00130144 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpapi.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00125496 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmapi.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00123224 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdNisDrv.sys
2014-05-23 11:43 - 2014-05-23 11:43 - 00111528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gpapi.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00098584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmapi.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00077312 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hdaudbus.sys
2014-05-23 11:43 - 2014-05-23 11:43 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\system32\srclient.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsgqec.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\srclient.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00055296 _____ (Microsoft Corporation) C:\WINDOWS\system32\energyprov.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tsgqec.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00047616 _____ (Microsoft Corporation) C:\WINDOWS\system32\tlscsp.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00046592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tlscsp.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Shell.Search.UriHandler.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00035856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdBoot.sys
2014-05-23 11:43 - 2014-05-23 11:43 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Shell.Search.UriHandler.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00032600 _____ (Microsoft Corporation) C:\WINDOWS\system32\ploptin.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00028408 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfpmp.exe
2014-05-23 11:43 - 2014-05-23 11:43 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d8thk.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanhlp.dll
2014-05-23 11:43 - 2014-05-23 11:43 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanhlp.dll
2014-05-23 11:43 - 2014-05-22 17:43 - 00000000 ____D () C:\Program Files (x86)\Microsoft Office
2014-05-23 11:43 - 2013-08-22 17:36 - 00000000 ___RD () C:\WINDOWS\ImmersiveControlPanel
2014-05-23 11:43 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-05-23 11:43 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-05-23 11:43 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files\Windows Defender
2014-05-23 11:43 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files (x86)\Windows Defender
2014-05-23 11:43 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\system32\oobe
2014-05-23 11:41 - 2014-05-23 11:41 - 00262144 _____ () C:\WINDOWS\system32\config\userdiff
2014-05-23 11:41 - 2014-05-23 11:41 - 00000000 ____D () C:\WINDOWS\PCHEALTH
2014-05-23 11:40 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\restore
2014-05-23 11:28 - 2014-05-23 11:27 - 00000000 ____D () C:\Users\Anne\AppData\Local\PackageStaging
2014-05-23 11:27 - 2014-05-23 11:27 - 00001454 _____ () C:\Users\Anne\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-05-23 11:27 - 2012-07-26 04:02 - 00000000 ___RD () C:\Users\Anne\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-05-23 11:27 - 2012-07-26 04:02 - 00000000 ___RD () C:\Users\Anne\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-05-23 11:26 - 2014-05-23 11:26 - 00000020 ___SH () C:\Users\Anne\ntuser.ini
2014-05-23 11:05 - 2014-05-23 11:05 - 00000000 _SHDL () C:\Users\Default\Vorlagen
2014-05-23 11:05 - 2014-05-23 11:05 - 00000000 _SHDL () C:\Users\Default\Startmenü
2014-05-23 11:05 - 2014-05-23 11:05 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung
2014-05-23 11:05 - 2014-05-23 11:05 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen
2014-05-23 11:05 - 2014-05-23 11:05 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien
2014-05-23 11:05 - 2014-05-23 11:05 - 00000000 _SHDL () C:\Users\Default\Druckumgebung
2014-05-23 11:05 - 2014-05-23 11:05 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik
2014-05-23 11:05 - 2014-05-23 11:05 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder
2014-05-23 11:05 - 2014-05-23 11:05 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-05-23 11:05 - 2014-05-23 11:05 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf
2014-05-23 11:05 - 2014-05-23 11:05 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten
2014-05-23 11:05 - 2014-05-23 11:05 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten
2014-05-23 11:05 - 2014-05-23 11:05 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik
2014-05-23 11:05 - 2014-05-23 11:05 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder
2014-05-23 11:05 - 2014-05-23 11:05 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-05-23 11:05 - 2014-05-23 11:05 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf
2014-05-23 11:05 - 2014-05-23 11:05 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten
2014-05-23 11:05 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files\Windows NT
2014-05-23 11:05 - 2013-08-22 15:36 - 00000000 __RHD () C:\Users\Default
2014-05-23 11:04 - 2014-05-23 10:55 - 00024768 _____ () C:\WINDOWS\diagwrn.xml
2014-05-23 11:04 - 2014-05-23 10:55 - 00024768 _____ () C:\WINDOWS\diagerr.xml
2014-05-23 11:04 - 2014-05-23 10:26 - 00006626 _____ () C:\WINDOWS\comsetup.log
2014-05-23 11:04 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\Registration
2014-05-23 11:03 - 2014-05-23 11:03 - 00022960 _____ () C:\WINDOWS\system32\emptyregdb.dat
2014-05-23 11:02 - 2013-08-22 17:36 - 00000000 __RSD () C:\WINDOWS\Media
2014-05-23 11:02 - 2013-08-22 17:36 - 00000000 __RHD () C:\Users\Public\Libraries
2014-05-23 10:59 - 2014-05-23 02:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office Live Add-in
2014-05-23 10:59 - 2014-05-22 17:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
2014-05-23 10:59 - 2014-03-18 11:40 - 00000000 ____D () C:\WINDOWS\ShellNew
2014-05-23 10:59 - 2013-08-22 16:44 - 00376176 _____ () C:\WINDOWS\system32\FNTCACHE.DAT
2014-05-23 10:59 - 2012-07-26 05:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-05-23 10:59 - 2012-07-26 04:45 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel PROSet Wireless
2014-05-23 10:59 - 2012-07-26 04:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dolby
2014-05-23 10:59 - 2012-07-26 04:28 - 00000000 ____D () C:\WINDOWS\SysWOW64\Atheros_L1e
2014-05-23 10:59 - 2012-07-26 04:21 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel
2014-05-23 10:58 - 2014-05-23 10:58 - 00001547 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2014-05-23 10:58 - 2014-05-23 10:58 - 00000000 ____D () C:\Users\Default\AppData\Local\Microsoft Help
2014-05-23 10:58 - 2014-05-23 10:58 - 00000000 ____D () C:\Users\Default User\AppData\Local\Microsoft Help
2014-05-23 10:58 - 2013-08-22 17:37 - 00004893 _____ () C:\WINDOWS\DtcInstall.log
2014-05-23 10:58 - 2012-07-26 07:37 - 00000000 ____D () C:\Users\Default.migrated
2014-05-23 10:57 - 2014-05-22 17:57 - 00000000 ____D () C:\WINDOWS\SysWOW64\sda
2014-05-23 10:57 - 2014-03-18 11:25 - 00000000 ____D () C:\WINDOWS\SysWOW64\WCN
2014-05-23 10:57 - 2014-03-18 11:25 - 00000000 ____D () C:\WINDOWS\SysWOW64\sysprep
2014-05-23 10:57 - 2014-03-18 11:25 - 00000000 ____D () C:\WINDOWS\system32\WCN
2014-05-23 10:57 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\MUI
2014-05-23 10:57 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\migwiz
2014-05-23 10:57 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\IME
2014-05-23 10:57 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\WinBioPlugIns
2014-05-23 10:57 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\spool
2014-05-23 10:57 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\MUI
2014-05-23 10:57 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\IME
2014-05-23 10:57 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\SMI
2014-05-23 10:56 - 2014-05-23 10:56 - 00000000 ____D () C:\WINDOWS\system32\config\bbimigrate
2014-05-23 10:56 - 2014-05-23 10:50 - 00000000 ____D () C:\ProgramData\Conexant
2014-05-23 10:56 - 2014-05-23 10:50 - 00000000 ____D () C:\Program Files\CONEXANT
2014-05-23 10:56 - 2013-08-22 17:43 - 00000000 ____D () C:\WINDOWS\DigitalLocker
2014-05-23 10:56 - 2013-08-22 17:36 - 00000000 __SHD () C:\Program Files\Windows Sidebar
2014-05-23 10:56 - 2013-08-22 17:36 - 00000000 __SHD () C:\Program Files (x86)\Windows Sidebar
2014-05-23 10:56 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\Recovery
2014-05-23 10:56 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\IME
2014-05-23 10:56 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\Help
2014-05-23 10:56 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared
2014-05-23 10:56 - 2012-07-26 04:01 - 00000000 ____D () C:\ProgramData\PRICache
2014-05-23 10:55 - 2014-05-23 10:55 - 00000000 _SHDL () C:\Users\Anne\Vorlagen
2014-05-23 10:55 - 2014-05-23 10:55 - 00000000 _SHDL () C:\Users\Anne\Startmenü
2014-05-23 10:55 - 2014-05-23 10:55 - 00000000 _SHDL () C:\Users\Anne\Netzwerkumgebung
2014-05-23 10:55 - 2014-05-23 10:55 - 00000000 _SHDL () C:\Users\Anne\Lokale Einstellungen
2014-05-23 10:55 - 2014-05-23 10:55 - 00000000 _SHDL () C:\Users\Anne\Eigene Dateien
2014-05-23 10:55 - 2014-05-23 10:55 - 00000000 _SHDL () C:\Users\Anne\Druckumgebung
2014-05-23 10:55 - 2014-05-23 10:55 - 00000000 _SHDL () C:\Users\Anne\Documents\Eigene Musik
2014-05-23 10:55 - 2014-05-23 10:55 - 00000000 _SHDL () C:\Users\Anne\Documents\Eigene Bilder
2014-05-23 10:55 - 2014-05-23 10:55 - 00000000 _SHDL () C:\Users\Anne\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-05-23 10:55 - 2014-05-23 10:55 - 00000000 _SHDL () C:\Users\Anne\AppData\Local\Verlauf
2014-05-23 10:55 - 2014-05-23 10:55 - 00000000 _SHDL () C:\Users\Anne\AppData\Local\Anwendungsdaten
2014-05-23 10:55 - 2014-05-23 10:55 - 00000000 _SHDL () C:\Users\Anne\Anwendungsdaten
2014-05-23 10:55 - 2014-05-23 10:55 - 00000000 ___RD () C:\Users\Anne\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-05-23 10:55 - 2014-05-23 10:55 - 00000000 ___RD () C:\Users\Anne\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-05-23 10:52 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\system32\Sysprep
2014-05-23 10:50 - 2014-05-23 10:50 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_Kernel_iBtFltCoex_01009.Wdf
2014-05-23 10:50 - 2013-08-22 16:46 - 00000084 _____ () C:\WINDOWS\setuperr.log
2014-05-23 10:49 - 2014-05-23 10:49 - 00000000 ____D () C:\Program Files\Elantech
2014-05-23 10:33 - 2012-07-26 04:01 - 01636395 _____ () C:\WINDOWS\WindowsUpdate (1).log
2014-05-23 10:16 - 2012-07-26 10:12 - 00000000 ____D () C:\WINDOWS\AUInstallAgent
2014-05-23 02:03 - 2014-05-22 17:47 - 00000000 ____D () C:\Program Files (x86)\Microsoft Works
2014-05-23 01:23 - 2014-05-23 01:23 - 00255042 _____ () C:\ProgramData\1400800923.bdinstall.bin
2014-05-23 01:23 - 2014-05-22 17:59 - 00000000 ____D () C:\Program Files\Bitdefender
2014-05-23 01:22 - 2014-05-22 17:59 - 00000000 ____D () C:\Program Files\Common Files\Bitdefender
2014-05-23 01:20 - 2014-05-23 01:20 - 00103312 _____ () C:\ProgramData\1400800806.bdinstall.bin
2014-05-22 21:53 - 2014-05-22 21:52 - 16501035 _____ () C:\Users\Anne\Downloads\NYCityscapesJohnnyWLam.themepack
2014-05-22 21:36 - 2014-05-22 17:59 - 00074512 _____ (BitDefender SRL) C:\WINDOWS\system32\bdsandboxuiskin32.dll
2014-05-22 21:27 - 2014-05-22 21:06 - 00002392 _____ () C:\Users\Anne\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2014-05-22 21:06 - 2014-05-22 21:06 - 00000385 _____ () C:\Users\Anne\AppData\Roaminguser_gensett.xml
2014-05-22 18:07 - 2014-05-22 18:07 - 00520507 _____ () C:\ProgramData\1400774373.bdinstall.bin
2014-05-22 18:06 - 2014-05-22 18:06 - 00000385 _____ () C:\WINDOWS\system32\user_gensett.xml
2014-05-22 18:05 - 2014-05-22 18:05 - 00000251 _____ () C:\WINDOWS\system32\netcfg-1859500.txt
2014-05-22 18:05 - 2014-05-22 18:05 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_Kernel_avchv_01009.Wdf
2014-05-22 18:05 - 2014-05-22 18:05 - 00000000 ____D () C:\ProgramData\BDLogging
2014-05-22 17:59 - 2014-05-22 17:59 - 00000000 ____D () C:\Users\Anne\AppData\Roaming\QuickScan
2014-05-22 17:58 - 2014-05-22 17:58 - 07307552 _____ () C:\Users\Anne\Downloads\bitdefender_isecurity.exe
2014-05-22 17:57 - 2014-05-22 17:51 - 12171007 _____ () C:\Users\Anne\Downloads\RtsXStor_6.3.273.37.zip
2014-05-22 17:57 - 2012-07-26 04:32 - 00000000 ____D () C:\Program Files (x86)\Realtek
2014-05-22 17:57 - 2012-07-26 04:28 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-05-22 17:44 - 2014-05-22 17:44 - 00000000 ____D () C:\Program Files\Microsoft Office
2014-05-22 17:43 - 2014-05-22 17:43 - 00000000 ____D () C:\Users\Anne\AppData\Local\Microsoft Help
2014-05-22 17:42 - 2014-05-22 17:42 - 00000000 __RHD () C:\MSOCache
2014-05-22 17:41 - 2014-05-22 17:41 - 00000117 _____ () C:\WINDOWS\system32\netcfg-423203.txt
2014-05-22 17:41 - 2014-05-22 17:41 - 00000117 _____ () C:\WINDOWS\system32\netcfg-423171.txt
2014-05-19 08:31 - 2014-06-11 13:21 - 00057856 _____ (Microsoft Corporation) C:\WINDOWS\system32\drvcfg.exe
2014-05-19 08:21 - 2014-06-11 13:21 - 00110592 _____ (Microsoft Corporation) C:\WINDOWS\system32\drvinst.exe
2014-05-19 07:23 - 2014-06-11 13:21 - 00098816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\drvinst.exe

Some content of TEMP:
====================
C:\Users\Anne\AppData\Local\Temp\CloudBackup6901.exe
C:\Users\Anne\AppData\Local\Temp\nsbC7F9.tmp.exe
C:\Users\Anne\AppData\Local\Temp\Quarantine.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-06-14 17:55

==================== End Of Log ============================

cosinus 14.06.2014 23:47
Zitat:
FAdwCleaner[S0].txt - [3120 octets] - [12/06/2014 21:21:34]
Wo ist das Log dazu?

PowerMax 15.06.2014 09:22
Hier ADW[S0]

Code:
# AdwCleaner v3.212 - Bericht erstellt am 12/06/2014 um 21:21:34
# Aktualisiert 05/06/2014 von Xplode
# Betriebssystem : Windows 8.1 Pro  (64 bits)
# Benutzername : Anne - ANNES-PC
# Gestartet von : C:\Users\Anne\Downloads\adwcleaner_3.212.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****

Ordner Gelöscht : C:\Program Files (x86)\predm
Ordner Gelöscht : C:\Program Files (x86)\sizlsearch
Ordner Gelöscht : C:\Program Files (x86)\System Speedup
Ordner Gelöscht : C:\Program Files\003
Ordner Gelöscht : C:\Users\Anne\AppData\Roaming\System Speedup
Ordner Gelöscht : C:\Users\Anne\AppData\Roaming\Systweak
Datei Gelöscht : C:\WINDOWS\SysWOW64\SecureAssist.ini
Datei Gelöscht : C:\WINDOWS\SysWOW64\SecureAssistOff.ini
Datei Gelöscht : C:\WINDOWS\System32\drivers\SAWFP64.sys
Datei Gelöscht : C:\WINDOWS\System32\SecureAssist.ini
Datei Gelöscht : C:\WINDOWS\System32\SecureAssistOff.ini
Datei Gelöscht : C:\Users\Anne\Desktop\Continue VuuPC Installation.lnk
Datei Gelöscht : C:\WINDOWS\System32\Tasks\Advanced System Protector

***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{03EF41A4-BA24-4E49-A2C0-E1D047299287}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{130CCD34-0382-48E5-B307-0E7E72166828}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{26D25DD5-F17A-4D93-9A94-997E2124EEB4}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{30279F40-D76B-443C-A34D-F43B35B35CE1}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{533403E2-6E21-4615-9E28-43F4E97E977B}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{796D0AA0-DC0E-44C9-A398-C874F04D55A4}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{CE2102F0-DF63-452E-9CA7-0F75FF4DDD4B}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{DADFCC6F-66D2-4E1D-A01B-7064CAD2F583}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{EBE666C3-F26C-4CF6-8ABA-3D5F5D2625E1}
Schlüssel Gelöscht : HKCU\Software\systweak
Schlüssel Gelöscht : HKCU\Software\Tutorials
Schlüssel Gelöscht : HKCU\Software\TutoTag
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\blockAndSurf
Schlüssel Gelöscht : HKLM\Software\systweak
Schlüssel Gelöscht : HKLM\Software\Tutorials
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\LevelQualityWatcher

***** [ Browser ] *****

-\\ Internet Explorer v11.0.9600.17126


-\\ Google Chrome v35.0.1916.114

[ Datei : C:\Users\Anne\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Gelöscht [Extension] : booedmolknjekdopkepjjeckmjkdpfgl
Gelöscht [Extension] : flpcjncodpafbgdpnkljologafpionhb

*************************

AdwCleaner[R0].txt - [3334 octets] - [12/06/2014 21:20:37]
AdwCleaner[S0].txt - [2940 octets] - [12/06/2014 21:21:34]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [3000 octets] ##########

cosinus 15.06.2014 19:36
Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:
HKLM-x32\...\Run: [t4pc_en_4] => [X]
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
C:\Users\Anne\AppData\Local\Temp\CloudBackup6901.exe
C:\Users\Anne\AppData\Local\Temp\nsbC7F9.tmp.exe
C:\Users\Anne\AppData\Local\Temp\Quarantine.exe

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
  • Starte nun FRST erneut und klicke den Entfernen Button.
  • Das Tool erstellt eine Fixlog.txt.
  • Poste mir deren Inhalt.


PowerMax 15.06.2014 19:59
Hier der Fixlog


Code:
Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 15-06-2014
Ran by Anne at 2014-06-15 20:56:06 Run:1
Running from C:\Users\Anne\Desktop
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
HKLM-x32\...\Run: [t4pc_en_4] => [X]
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
C:\Users\Anne\AppData\Local\Temp\CloudBackup6901.exe
C:\Users\Anne\AppData\Local\Temp\nsbC7F9.tmp.exe
C:\Users\Anne\AppData\Local\Temp\Quarantine.exe
*****************

HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\t4pc_en_4 => value deleted successfully.
C:\WINDOWS\system32\GroupPolicy\Machine => Moved successfully.
C:\WINDOWS\system32\GroupPolicy\GPT.ini => Moved successfully.
C:\Users\Anne\AppData\Local\Temp\CloudBackup6901.exe => Moved successfully.
C:\Users\Anne\AppData\Local\Temp\nsbC7F9.tmp.exe => Moved successfully.
"C:\Users\Anne\AppData\Local\Temp\Quarantine.exe" => File/Directory not found.


The system needed a reboot.

==== End of Fixlog ====

cosinus 15.06.2014 20:00
Okay, dann Kontrollscans mit MBAM und ESET bitte:

Downloade Dir bitte Malwarebytes Anti-Malware
  • Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
  • Starte Malwarebytes' Anti-Malware (MBAM).
  • Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
  • Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
  • Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
  • Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
  • Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
  • Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.




ESET Online Scanner

  • Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
  • Lade und starte Eset Online Scanner
  • Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
  • Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
  • Klicke auf Starten.
  • Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
  • Klicke am Ende des Suchlaufs auf Fertig stellen.
  • Schließe das Fenster von ESET.
  • Explorer öffnen.
  • C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
  • Logfile hier posten.
  • Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
  • Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset


PowerMax 15.06.2014 23:03
mbam


Code:
Malwarebytes Anti-Malware
www.malwarebytes.org

Suchlauf Datum: 15.06.2014
Suchlauf-Zeit: 21:13:58
Logdatei: mbam.txt
Administrator: Ja

Version: 2.00.2.1012
Malware Datenbank: v2014.06.15.05
Rootkit Datenbank: v2014.06.02.01
Lizenz: Kostenlos
Malware Schutz: Deaktiviert
Bösartiger Webseiten Schutz: Deaktiviert
Self-protection: Deaktiviert

Betriebssystem: Windows 8.1
CPU: x64
Dateisystem: NTFS
Benutzer: Anne

Suchlauf-Art: Bedrohungs-Suchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 280431
Verstrichene Zeit: 8 Min, 15 Sek

Speicher: Aktiviert
Autostart: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Heuristics: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

Prozesse: 0
(No malicious items detected)

Module: 0
(No malicious items detected)

Registrierungsschlüssel: 0
(No malicious items detected)

Registrierungswerte: 0
(No malicious items detected)

Registrierungsdaten: 0
(No malicious items detected)

Ordner: 0
(No malicious items detected)

Dateien: 0
(No malicious items detected)

Physische Sektoren: 0
(No malicious items detected)


(end)


Eset


Code:
ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7587
# api_version=3.0.2
# EOSSerial=c4a101f1e577e0489da1c068d4e6703d
# engine=18729
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2014-06-15 09:59:43
# local_time=2014-06-15 11:59:43 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1031
# osver=6.2.9200 NT
# compatibility_mode_1=''
# compatibility_mode=5893 16776573 100 94 49263 4001979 0 0
# scanned=137004
# found=22
# cleaned=0
# scan_time=4521
sh=ABC96052FA5FA1ACBBB17F0A31D57A2D64273045 ft=1 fh=cc6c9743f0fb813c vn="Variante von Win32/VOPackage.G evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Anne\AppData\Local\Microsoft\Windows\INetCache\IE\4NPGLMSF\dl[1].htm"
sh=02F1CDE3EEF6094CCCF42A516E96D1C9D82C6115 ft=1 fh=0f406fdb4ff5a21a vn="möglicherweise Variante von Win32/Conduit.SearchProtect.H evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Anne\AppData\Local\Microsoft\Windows\INetCache\IE\4NPGLMSF\SPSetup[1].exe"
sh=5638E6C09D052EA433F3BC1B8FDA67E1F252987B ft=1 fh=755bf11df8ab56ff vn="Win32/InstallMonetizer.AY evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Anne\AppData\Local\Microsoft\Windows\INetCache\IE\4NPGLMSF\VuuPC_VO2_8907[1].exe"
sh=4D69A4C4924E91455B7B0AA547C23FD96905A47D ft=1 fh=fb647b84d2aef18b vn="Variante von Win32/BrowseFox.H evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Anne\AppData\Local\Microsoft\Windows\INetCache\IE\A5JD60GH\Setup[1].exe"
sh=E689A1B1A32152588C06B8D628C10EF8188A87C1 ft=1 fh=b6869269092690bd vn="Variante von Win32/Conduit.SearchProtect.N evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Anne\AppData\Local\Microsoft\Windows\INetCache\IE\A5JD60GH\spstub[1].exe"
sh=EE5792C2F4B95FF4BC3F52B37773B55B7515B601 ft=1 fh=0c867f66d209cf9a vn="Win32/VOPackage.H evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Anne\AppData\Local\Microsoft\Windows\INetCache\IE\VUJ2NZUI\dl[1].htm"
sh=F979D327FE3B870A00B767D3DE6FAAA2868825C1 ft=1 fh=6c30ac9e47834862 vn="Variante von Win32/InstallCore.OZ evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Anne\AppData\Local\Microsoft\Windows\INetCache\IE\VUJ2NZUI\Setup[2].exe"
sh=C4420C6E94B8CAACCB3811384280D8A93CB0A37D ft=1 fh=25f111c507a31a21 vn="Win32/Toolbar.Conduit.R evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Anne\AppData\Local\Microsoft\Windows\INetCache\IE\VUJ2NZUI\sp-downloader[1].exe"
sh=A836A8346F791EC8A83B51BC78E84B2F6659E6DA ft=1 fh=0a2e45c370149901 vn="Win32/Wajam.F evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Anne\AppData\Local\Microsoft\Windows\INetCache\IE\VUJ2NZUI\wajam_validate[1].exe"
sh=9898DFB651080302746BFC03DA243A5B0DC1F847 ft=1 fh=8832970c7515e483 vn="Variante von Win32/BrowseFox.H evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Anne\AppData\Local\Microsoft\Windows\INetCache\IE\YJDNUHJS\Setup[1].exe"
sh=F987292530ECF91AC5057EAE5EE5475132F382C6 ft=1 fh=1a456b2b018c4932 vn="Variante von Win32/InstallCore.OZ evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Anne\AppData\Local\Microsoft\Windows\INetCache\IE\YJDNUHJS\Setup[2].exe"
sh=43AF91DC5DEE0C6EBD3896493BD21C2A695B37CB ft=1 fh=39261060eb4f8e5f vn="Variante von Win32/Conduit.SearchProtect.N evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Anne\AppData\Local\Microsoft\Windows\INetCache\IE\YJDNUHJS\SPDetector[1].exe"
sh=6BA154F147F7DCF6B79816272702EBC92E5BA3BA ft=1 fh=cecca01e9a755950 vn="Win32/VOPackage.J evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Anne\AppData\Local\Microsoft\Windows\INetCache\IE\YJDNUHJS\VOPackage[1].exe"
sh=F979D327FE3B870A00B767D3DE6FAAA2868825C1 ft=1 fh=6c30ac9e47834862 vn="Variante von Win32/InstallCore.OZ evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Anne\AppData\Local\Temp\ICReinstall_nsmE72D.tmp"
sh=F987292530ECF91AC5057EAE5EE5475132F382C6 ft=1 fh=1a456b2b018c4932 vn="Variante von Win32/InstallCore.OZ evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Anne\AppData\Local\Temp\ICReinstall_nssF856.tmp"
sh=F979D327FE3B870A00B767D3DE6FAAA2868825C1 ft=1 fh=6c30ac9e47834862 vn="Variante von Win32/InstallCore.OZ evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Anne\AppData\Local\Temp\ICReinstall_nsv4C89.tmp"
sh=F979D327FE3B870A00B767D3DE6FAAA2868825C1 ft=1 fh=6c30ac9e47834862 vn="Variante von Win32/InstallCore.OZ evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Anne\AppData\Local\Temp\nsmE72D.tmp"
sh=43AF91DC5DEE0C6EBD3896493BD21C2A695B37CB ft=1 fh=39261060eb4f8e5f vn="Variante von Win32/Conduit.SearchProtect.N evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Anne\AppData\Local\Temp\nss8EA9.tmp"
sh=F979D327FE3B870A00B767D3DE6FAAA2868825C1 ft=1 fh=6c30ac9e47834862 vn="Variante von Win32/InstallCore.OZ evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Anne\AppData\Local\Temp\nsv4C89.tmp"
sh=FD5D1274D9E28F6AF00C6D0719FEFD0754798D6B ft=1 fh=e237b576c92c3fb8 vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Anne\Downloads\Downloads\FreeYouTubeToMP3Converter(1).exe"
sh=C5388074F31DF07BE6C1DDEF0D762EC5A8819E77 ft=1 fh=fcf810b56806cfeb vn="Variante von Win32/Toolbar.Conduit.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Anne\Downloads\Downloads\FreeYouTubeToMp3Converter.exe"
sh=7A15C79C853E69FA508030C14B3E75E71969AC35 ft=1 fh=88dc58412df7aec2 vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Anne\Downloads\Downloads\zafwSetupWeb_110_000_057.exe"

cosinus 16.06.2014 11:06
Ein paar Reste in TEMP

TFC - Temp File Cleaner

Lade dir TFC (TempFileCleaner von Oldtimer) herunter und speichere es auf den Desktop.
  • Öffne die TFC.exe.
    Vista und Win 7 User mit Rechtsklick "als Administrator starten".
  • Schließe alle anderen Programme.
  • Drücke auf den Button Start.
  • Falls du zu einem Neustart aufgefordert wirst, bestätige diesen.




Sieht soweit ok aus :daumenhoc

Wegen Cookies und anderer Dinge im Web: Um die Pest von vornherein zu blocken (also TrackingCookies, Werbebanner etc.) müsstest du dir mal sowas wie MVPS Hosts File anschauen => Blocking Unwanted Parasites with a Hosts File - sinnvollerweise solltest du alle 4 Wochen mal bei MVPS nachsehen, ob er eine neue Hosts Datei herausgebracht hat. Ist aber nur optional. Um Usertracking zu verhindern kann man gut die Firefox-Erweiterung Ghostery verwenden.

Info: Cookies sind keine Schädlinge direkt, aber es besteht die Gefahr der missbräuchlichen Verwendung (eindeutige Wiedererkennung zB für gezielte Werbung o.ä. => HTTP-Cookie )

Ansonsten gibt es noch gute Cookiemanager, Erweiterungen für den Firefox zB wäre da CookieCuller
Wenn du aber damit leben kannst, dich bei jeder Browsersession überall neu einzuloggen (zB Facebook, Ebay, GMX, oder auch Trojaner-Board) dann stell den Browser einfach so ein, dass einfach alles beim Beenden des Browser inkl. Cookies gelöscht wird.

Ist dein System nun wieder in Ordnung oder gibt's noch andere Funde oder Probleme?


Alle Zeitangaben in WEZ +1. Es ist jetzt 10:35 Uhr.
Seite 1 von 2 1 2
100 Beiträge dieses Themas auf einer Seite anzeigen

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131